diff --git a/README.md b/README.md
index 0bc141c9..f5242acc 100644
--- a/README.md
+++ b/README.md
@@ -20,7 +20,7 @@ Resilient remote tmux terminal & 4-level guarded Agent Broker across Web, Mobile
 
 ## ✨ Highlights
 
-- **Outbound-Only Node A (`Computer → Term → Window → Pane`)**: Computer A dials out over TLS/WSS to Control Plane B with zero inbound ports (`A 主动连接 B`, `A 不开放端口`); closing browsers or losing mobile connectivity never interrupts running `tmux` jobs.
+- **Outbound-Only Node A (`Computer → Term → Window → Pane`)**: Computer A dials out over TLS/WSS to Control Plane B with zero inbound ports (`A connects outbound to B`, `A opens zero inbound ports`); closing browsers or losing mobile connectivity never interrupts running `tmux` jobs.
 - **Mobile-First Web & Native Terminal**: Responsive `xterm.js` workspace equipped with a tactile `MobileKeyBar` (`Esc`, `Tab`, `Ctrl`, `Alt`, arrow keys, and quick tmux chords) plus 7 curated geek themes.
 - **4-Level Guarded Agent Broker (`OpenCode`)**: Replayable agent event streams with a 4-tier risk guard and mandatory human-in-the-loop approval before any write or critical terminal action executes.
 - **Zero-Trust TOTP & One-Time Pairing**: Control Plane authentication protected by TOTP MFA, short-lived one-time node enrollment tokens, and device authorization via QR code or pairing code.
@@ -77,7 +77,7 @@ Detach anytime with `Ctrl+B` then `D` (`termflow attach project-a` to re-enter).
 
 ### Standalone Control Plane Container (Terminal Only, Without Agent Runtime)
 
-When you only need remote terminal routing without the OpenCode Agent runtime (`B 的 Web/API 通过宿主机 loopback 端口发布；A 主动连接 B，是连接 B 的客户端，不是 B 的网关；A 不开放端口`):
+When you only need remote terminal routing without the OpenCode Agent runtime (Control Plane B's Web/API is published on a host loopback port; Node A connects outbound to B as a client rather than a gateway, with zero inbound ports on A):
 
 ```bash
 mkdir -p data totp-secrets
diff --git a/README_CN.md b/README_CN.md
index 8f8c9157..f7757153 100644
--- a/README_CN.md
+++ b/README_CN.md
@@ -73,7 +73,7 @@ termflow new --name project-a
 按 `Ctrl+B` 再按 `D` 可随时退出当前视图且后台保持运行，使用 `termflow attach project-a` 重新进入。
 
 <details>
-<summary>📦 Standalone Control Plane, Offline Tarball & Packaging Reference</summary>
+<summary>📦 独立控制面、离线归档包与打包参考</summary>
 
 ### 单容器 Control Plane B（仅终端转发，不含 Agent 运行时）
 
diff --git a/apps/clients/tauri/src/views/NativeConnectView.test.ts b/apps/clients/tauri/src/views/NativeConnectView.test.ts
index 45aaed94..de5b2d2f 100644
--- a/apps/clients/tauri/src/views/NativeConnectView.test.ts
+++ b/apps/clients/tauri/src/views/NativeConnectView.test.ts
@@ -85,11 +85,12 @@ describe('NativeConnectView', () => {
   it('presents the remote-control registration action in product language', async () => {
     const { wrapper } = await render()
 
-    expect(wrapper.get('.eyebrow').text()).toBe('Connect to Server')
+    expect(wrapper.get('.eyebrow').text()).toBe('远程连接')
     expect(wrapper.get('h1').text()).toBe('连接到服务器')
     expect(wrapper.get('label[for="server-url"]').text()).toBe('服务器地址')
     expect(wrapper.get('[data-action="browser-login"]').text()).toContain('本机浏览器登录')
     expect(wrapper.get('[data-action="device-authorize"]').text()).toContain('其他设备授权')
+    expect(wrapper.find('[data-action="toggle-locale"]').exists()).toBe(true)
     expect(wrapper.find('.native-auth-options').classes()).toContain('native-auth-options')
     expect(wrapper.get('[data-action="browser-login"]').attributes('title')).toContain('本机系统浏览器')
     expect(wrapper.get('[data-action="device-authorize"]').attributes('title')).toContain('不会打开本机浏览器')
diff --git a/apps/clients/tauri/src/views/NativeConnectView.vue b/apps/clients/tauri/src/views/NativeConnectView.vue
index e1d87240..7ae15d60 100644
--- a/apps/clients/tauri/src/views/NativeConnectView.vue
+++ b/apps/clients/tauri/src/views/NativeConnectView.vue
@@ -1,26 +1,42 @@
 <template>
   <section class="login-view">
     <div class="auth-card">
-      <p class="eyebrow">Connect to Server</p><h1>连接到服务器</h1>
+      <div class="native-connect-heading">
+        <div>
+          <p class="eyebrow">{{ t('nativeConnect.eyebrow') }}</p>
+          <h1>{{ t('nativeConnect.title') }}</h1>
+        </div>
+        <button
+          data-action="toggle-locale"
+          class="text-button locale-toggle-button"
+          type="button"
+          :aria-label="t('app.switchLangAria')"
+          :title="t('app.switchLangAria')"
+          @click="toggleLocale"
+        >
+          <svg viewBox="0 0 24 24" width="15" height="15" aria-hidden="true" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><path d="M12 2a14.5 14.5 0 0 0 0 20 14.5 14.5 0 0 0 0-20"/><path d="M2 12h20"/></svg>
+          <span class="locale-badge">{{ t('app.switchLangBadge') }}</span>
+        </button>
+      </div>
       <form @submit.prevent="connect">
-        <label for="server-url">服务器地址</label><input id="server-url" v-model="issuer" type="url" inputmode="url" autocomplete="url" required />
+        <label for="server-url">{{ t('nativeConnect.serverUrl') }}</label><input id="server-url" v-model="issuer" type="url" inputmode="url" autocomplete="url" required />
         <p v-if="message" class="form-error" role="alert">{{ message }}</p>
         <div class="native-auth-options">
           <button
             class="primary-button"
             type="submit"
             data-action="browser-login"
-            title="通过本机系统浏览器登录并审批此客户端。"
+            :title="t('nativeConnect.browserLoginTitle')"
             :disabled="busy"
-          >{{ busy ? '等待浏览器审批' : '本机浏览器登录' }}</button>
+          >{{ busy ? t('nativeConnect.waitingBrowser') : t('nativeConnect.browserLogin') }}</button>
           <button
             class="secondary-button"
             type="button"
             data-action="device-authorize"
-            title="使用已登录的其他设备完成授权，不会打开本机浏览器。"
+            :title="t('nativeConnect.deviceAuthTitle')"
             :disabled="busy"
             @click="connectDevice"
-          >其他设备授权</button>
+          >{{ t('nativeConnect.deviceAuth') }}</button>
         </div>
       </form>
     </div>
@@ -29,76 +45,92 @@
 
 <script setup lang="ts">
 import { ApiError } from '@termflow/client-core'
-import { ref } from 'vue'
+import { computed, ref } from 'vue'
 import { useRoute, useRouter } from 'vue-router'
-import { useBottomToast, useClientRuntime } from '@termflow/client-ui'
+import { useBottomToast, useClientRuntime, useI18n } from '@termflow/client-ui'
 import { authorizeNativeClient, verifyNativeConnection } from '../nativeAuth'
 import { prepareNativeServer } from '../serverPreparation'
 import { canonicalAuthorizeEndpoint, serverConfig } from '../serverConfig'
 
+const { t, locale, toggleLocale } = useI18n()
 const runtime = useClientRuntime(); const router = useRouter(); const route = useRoute()
 const toast = useBottomToast()
-const issuer = ref(serverConfig.current); const message = ref(''); const busy = ref(false)
+const issuer = ref(serverConfig.current); const errorCode = ref<string | null>(null); const busy = ref(false)
 
-function registrationErrorMessage(error: unknown): string {
-  const code = error instanceof ApiError
+function extractErrorCode(error: unknown): string {
+  return error instanceof ApiError
     ? error.kind
     : error instanceof Error
       ? error.message
       : typeof error === 'string' ? error : ''
+}
+
+function registrationErrorMessage(code: string): string {
   if (code === 'http_capability_denied') {
-    return '客户端网络权限配置无效。请升级或重新安装 TermFlow。'
+    return t('nativeConnect.error.http_capability_denied')
   }
   if (code === 'offline' || code === 'network_error') {
-    return '无法连接服务器。请检查服务器地址、网络连接和本机服务是否正在运行。'
+    return t('nativeConnect.error.offline')
   }
   if (code === 'issuer_mismatch') {
-    return '服务器身份与填写地址不一致。请检查反向代理配置后重试。'
+    return t('nativeConnect.error.issuer_mismatch')
   }
   if (code === 'authorization_cancelled' || code === 'aborted') {
-    return '注册申请已取消。请重新申请，并在系统浏览器中完成审批。'
+    return t('nativeConnect.error.cancelled')
   }
   if (code === 'authorization_callback_timeout' || code === 'authorization_callback_invalid' || code === 'authorization_listener_missing') {
-    return '未收到有效的 TermFlow 回调。请确认系统允许 termflow:// 链接打开本应用，然后重新申请。'
+    return t('nativeConnect.error.callback')
   }
   if (code === 'https_required') {
-    return '远程服务器必须使用 HTTPS；只有本机服务器可以使用 HTTP。'
+    return t('nativeConnect.error.https_required')
   }
   if (code === 'authorization_verify_timeout') {
-    return '连接确认超时。请检查服务器是否在线后重试。'
+    return t('nativeConnect.error.verify_timeout')
   }
-  return '无法完成远程控制注册。请检查服务器地址和系统浏览器中的审批状态后重试。'
+  return t('nativeConnect.error.default')
 }
 
+const message = computed(() => {
+  void locale.value
+  return errorCode.value === null ? '' : registrationErrorMessage(errorCode.value)
+})
+
 function prepareServer() {
   return prepareNativeServer(issuer.value, () => runtime.api.oauth.metadata())
 }
 
 async function connectDevice() {
-  busy.value = true; message.value = ''
+  busy.value = true; errorCode.value = null
   try {
     await prepareServer()
     await router.push({ path: '/connect/device', query: route.query })
-  } catch (error) { message.value = registrationErrorMessage(error) }
+  } catch (error) { errorCode.value = extractErrorCode(error) }
   finally { busy.value = false }
 }
 
 async function connect() {
-  busy.value = true; message.value = ''
+  busy.value = true; errorCode.value = null
   try {
     const prepared = await prepareServer()
     const authorizeEndpoint = canonicalAuthorizeEndpoint(prepared.issuer, prepared.metadata.authorization_endpoint)
     await authorizeNativeClient(prepared.issuer, authorizeEndpoint, prepared.metadata.scopes_supported)
     await verifyNativeConnection(runtime)
-    toast.show({ text: '已连接', tone: 'success' })
+    toast.show({ text: t('nativeConnect.connectedToast'), tone: 'success' })
     const target = typeof route.query.redirect === 'string' && route.query.redirect.startsWith('/') && !route.query.redirect.startsWith('//') ? route.query.redirect : '/'
     await router.replace(target)
-  } catch (error) { message.value = registrationErrorMessage(error) }
+  } catch (error) { errorCode.value = extractErrorCode(error) }
   finally { busy.value = false }
 }
 </script>
 
 <style scoped>
+.native-connect-heading {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: var(--space-3);
+}
+
 .native-auth-options {
   display: grid;
   grid-template-columns: repeat(2, minmax(0, 1fr));
diff --git a/apps/clients/tauri/src/views/NativeDeviceAuthorizeView.vue b/apps/clients/tauri/src/views/NativeDeviceAuthorizeView.vue
index d3a44b38..125c099f 100644
--- a/apps/clients/tauri/src/views/NativeDeviceAuthorizeView.vue
+++ b/apps/clients/tauri/src/views/NativeDeviceAuthorizeView.vue
@@ -2,7 +2,18 @@
   <section class="login-view">
     <div class="auth-card device-auth-card">
       <header class="native-device-heading">
-        <div><p class="eyebrow">Cross-device authorization</p><h1>在其他设备上授权</h1></div>
+        <div><p class="eyebrow">{{ t('deviceAuth.eyebrow') }}</p><h1>{{ t('nativeDevice.title') }}</h1></div>
+        <button
+          data-action="toggle-locale"
+          class="text-button locale-toggle-button"
+          type="button"
+          :aria-label="t('app.switchLangAria')"
+          :title="t('app.switchLangAria')"
+          @click="toggleLocale"
+        >
+          <svg viewBox="0 0 24 24" width="15" height="15" aria-hidden="true" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><path d="M12 2a14.5 14.5 0 0 0 0 20 14.5 14.5 0 0 0 0-20"/><path d="M2 12h20"/></svg>
+          <span class="locale-badge">{{ t('app.switchLangBadge') }}</span>
+        </button>
       </header>
 
       <template v-if="started">
@@ -10,10 +21,10 @@
           <div class="native-device-details">
             <div class="device-code" aria-live="polite">
               <span class="form-hint">{{ codeLabel }}</span>
-              <div class="device-code-value"><strong>{{ response?.user_code }}</strong><button class="icon-button" type="button" data-action="copy-device-code" aria-label="复制设备码" title="复制设备码" :disabled="busy" @click="copyCode"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M8 8V5.5A1.5 1.5 0 0 1 9.5 4h9A1.5 1.5 0 0 1 20 5.5v9a1.5 1.5 0 0 1-1.5 1.5H16M5.5 8h9A1.5 1.5 0 0 1 16 9.5v9A1.5 1.5 0 0 1 14.5 20h-9A1.5 1.5 0 0 1 4 18.5v-9A1.5 1.5 0 0 1 5.5 8Z" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" /></svg></button></div>
+              <div class="device-code-value"><strong>{{ response?.user_code }}</strong><button class="icon-button" type="button" data-action="copy-device-code" :aria-label="t('nativeDevice.copyCode')" :title="t('nativeDevice.copyCode')" :disabled="busy" @click="copyCode"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M8 8V5.5A1.5 1.5 0 0 1 9.5 4h9A1.5 1.5 0 0 1 20 5.5v9a1.5 1.5 0 0 1-1.5 1.5H16M5.5 8h9A1.5 1.5 0 0 1 16 9.5v9A1.5 1.5 0 0 1 14.5 20h-9A1.5 1.5 0 0 1 4 18.5v-9A1.5 1.5 0 0 1 5.5 8Z" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" /></svg></button></div>
             </div>
             <div class="native-device-server">
-              <span class="form-hint">服务器地址</span>
+              <span class="form-hint">{{ t('nativeDevice.serverUrl') }}</span>
               <code>{{ issuer }}</code>
             </div>
             <div class="native-device-status">
@@ -22,12 +33,12 @@
             </div>
           </div>
           <div class="native-device-qr">
-            <ThemedQrCode v-if="response" :value="response.verification_uri_complete" alt="设备授权二维码" />
+            <ThemedQrCode v-if="response" :value="response.verification_uri_complete" :alt="t('deviceAuth.qrAlt')" />
           </div>
         </div>
         <div class="native-device-actions">
-          <button class="secondary-button" type="button" data-action="back-to-connect" :disabled="busy" @click="backToConnect">返回</button>
-          <button class="primary-button" type="button" data-action="regenerate" :disabled="busy" @click="regenerate">重新生成</button>
+          <button class="secondary-button" type="button" data-action="back-to-connect" :disabled="busy" @click="backToConnect">{{ t('nativeDevice.back') }}</button>
+          <button class="primary-button" type="button" data-action="regenerate" :disabled="busy" @click="regenerate">{{ t('nativeDevice.regenerate') }}</button>
         </div>
       </template>
       <p v-else-if="message" class="form-error" role="alert">{{ message }}</p>
@@ -40,13 +51,14 @@ import { ApiError } from '@termflow/client-core'
 import { arch, platform } from '@tauri-apps/plugin-os'
 import { computed, onBeforeUnmount, onMounted, ref } from 'vue'
 import { useRoute, useRouter } from 'vue-router'
-import { ThemedQrCode, useBottomToast, useClientRuntime } from '@termflow/client-ui'
+import { ThemedQrCode, useBottomToast, useClientRuntime, useI18n } from '@termflow/client-ui'
 import { beginNativeDeviceAuthorization, verifyNativeConnection } from '../nativeAuth'
 import { buildVersion } from '../buildVersion'
 import { prepareNativeServer } from '../serverPreparation'
 import { serverConfig } from '../serverConfig'
 import { pollDeviceAuthorization } from '../adapters/tauriAuthorization'
 
+const { t, locale, toggleLocale } = useI18n()
 const runtime = useClientRuntime()
 const toast = useBottomToast()
 const route = useRoute()
@@ -56,30 +68,48 @@ const response = ref<Awaited<ReturnType<typeof beginNativeDeviceAuthorization>>[
 const session = ref<Awaited<ReturnType<typeof beginNativeDeviceAuthorization>>['session']>()
 const busy = ref(false)
 const started = ref(false)
-const message = ref('')
-const status = ref('等待浏览器确认…')
+const errorCode = ref<string | null>(null)
+const statusKey = ref<string | null>('nativeDevice.status.waiting')
 const remaining = ref(0)
 let timer: ReturnType<typeof setInterval> | undefined
 
-const codeLabel = computed(() => remaining.value > 0 ? `设备码（${Math.ceil(remaining.value / 1000)} 秒）` : '设备码（已过期）')
-
-function actionableMessage(error: unknown): string {
-  const code = error instanceof ApiError ? error.kind : error instanceof Error ? error.message : typeof error === 'string' ? error : ''
-  if (code === 'http_capability_denied') return '客户端网络权限配置无效。请升级或重新安装 TermFlow。'
-  if (code === 'authorization_pending') return '浏览器尚未确认，请继续等待。'
-  if (code === 'slow_down') return '请求过于频繁，已自动放慢轮询。'
-  if (code === 'access_denied') return '浏览器拒绝了这次授权。请重新生成设备码。'
-  if (code === 'expired_token') return '设备码已过期，请重新生成。'
-  if (code === 'offline' || code === 'network_error') return '无法连接服务器。请检查网络后重试。'
-  if (code === 'issuer_mismatch') return '服务器身份与已保存地址不一致。请返回并检查反向代理配置。'
-  if (code === 'authorization_verify_timeout') return '连接确认超时。请检查服务器是否在线后重试。'
-  return '设备授权未完成。请重新生成设备码后重试。'
+const codeLabel = computed(() => {
+  void locale.value
+  return remaining.value > 0
+    ? t('nativeDevice.codeCountdown', { seconds: Math.ceil(remaining.value / 1000) })
+    : t('nativeDevice.codeExpired')
+})
+
+function extractErrorCode(error: unknown): string {
+  return error instanceof ApiError ? error.kind : error instanceof Error ? error.message : typeof error === 'string' ? error : ''
+}
+
+function actionableMessage(code: string): string {
+  if (code === 'http_capability_denied') return t('nativeDevice.error.http_capability_denied')
+  if (code === 'authorization_pending') return t('nativeDevice.error.authorization_pending')
+  if (code === 'slow_down') return t('nativeDevice.error.slow_down')
+  if (code === 'access_denied') return t('nativeDevice.error.access_denied')
+  if (code === 'expired_token') return t('nativeDevice.error.expired_token')
+  if (code === 'offline' || code === 'network_error') return t('nativeDevice.error.offline')
+  if (code === 'issuer_mismatch') return t('nativeDevice.error.issuer_mismatch')
+  if (code === 'authorization_verify_timeout') return t('nativeDevice.error.authorization_verify_timeout')
+  return t('nativeDevice.error.default')
 }
 
+const status = computed(() => {
+  void locale.value
+  return statusKey.value === null ? '' : t(statusKey.value)
+})
+
+const message = computed(() => {
+  void locale.value
+  return errorCode.value === null ? '' : actionableMessage(errorCode.value)
+})
+
 function stopTimer() { if (timer !== undefined) { clearInterval(timer); timer = undefined } }
 
 async function start() {
-  busy.value = true; message.value = ''
+  busy.value = true; errorCode.value = null
   try {
     const prepared = await prepareNativeServer(serverConfig.current, () => runtime.api.oauth.metadata())
     issuer.value = prepared.issuer
@@ -92,8 +122,8 @@ async function start() {
         try { return await pollDeviceAuthorization({ issuer: prepared.issuer, ...input }, signal) }
         catch (error) {
           const code = error instanceof ApiError ? error.code : error instanceof Error ? error.message : typeof error === 'string' ? error : ''
-          if (code === 'authorization_pending') status.value = '等待浏览器确认…'
-          else if (code === 'slow_down') status.value = '服务器较忙，已放慢轮询…'
+          if (code === 'authorization_pending') statusKey.value = 'nativeDevice.status.waiting'
+          else if (code === 'slow_down') statusKey.value = 'nativeDevice.status.slowDown'
           throw error
         }
       },
@@ -102,29 +132,29 @@ async function start() {
     remaining.value = result.response.expires_in * 1000
     stopTimer(); timer = setInterval(() => {
       remaining.value = Math.max(0, remaining.value - 1000)
-      if (remaining.value === 0) { result.session.cancel(); status.value = ''; message.value = '设备码已过期，请重新生成。'; stopTimer() }
+      if (remaining.value === 0) { result.session.cancel(); statusKey.value = null; errorCode.value = 'expired_token'; stopTimer() }
     }, 1000)
     busy.value = false
     void result.session.authorize().then(async () => {
       await verifyNativeConnection(runtime)
-      status.value = '授权成功，正在打开工作区…'
+      statusKey.value = 'nativeDevice.status.opening'
       stopTimer()
-      toast.show({ text: '已连接', tone: 'success' })
+      toast.show({ text: t('nativeConnect.connectedToast'), tone: 'success' })
       const target = typeof route.query.redirect === 'string' && route.query.redirect.startsWith('/') && !route.query.redirect.startsWith('//') ? route.query.redirect : '/'
       return router.replace(target)
-    }).catch((error) => { if ((error as Error)?.name !== 'AbortError') { message.value = actionableMessage(error); status.value = '' } })
-  } catch (error) { message.value = actionableMessage(error); busy.value = false }
+    }).catch((error) => { if ((error as Error)?.name !== 'AbortError') { errorCode.value = extractErrorCode(error); statusKey.value = null } })
+  } catch (error) { errorCode.value = extractErrorCode(error); busy.value = false }
 }
 
 async function copyCode() {
   if (response.value) {
     await runtime.clipboard.writeText(response.value.user_code)
-    status.value = '设备码已复制。'
+    statusKey.value = 'nativeDevice.status.copied'
   }
 }
 
 function cancel() {
-  session.value?.cancel(); stopTimer(); started.value = false; response.value = undefined; session.value = undefined; status.value = '已取消'; message.value = ''
+  session.value?.cancel(); stopTimer(); started.value = false; response.value = undefined; session.value = undefined; statusKey.value = 'nativeDevice.status.cancelled'; errorCode.value = null
 }
 
 async function backToConnect() {
diff --git a/apps/clients/web/e2e/control-center.spec.ts b/apps/clients/web/e2e/control-center.spec.ts
index 4710f5b4..e9fd22ae 100644
--- a/apps/clients/web/e2e/control-center.spec.ts
+++ b/apps/clients/web/e2e/control-center.spec.ts
@@ -296,7 +296,7 @@ test('uses the real dashboard, themes, terminal transport, and responsive contro
   const termRow = page.locator(`[data-term-id="${termId}"]`)
   await expect(termRow).toBeVisible()
   await expect(termRow.getByText(termName, { exact: true })).toBeVisible()
-  await expect(termRow.getByText(/\d+ Panes/)).toBeVisible()
+  await expect(termRow.getByText(/\d+ (窗格|Panes)/)).toBeVisible()
   expect(await termRow.evaluate((element) => parseFloat(getComputedStyle(element).borderRadius))).toBeGreaterThan(0)
   await expect(page.locator('.side-nav a[href="/"] svg')).toHaveCount(1)
   await expect(page.locator('.side-nav a[href="/computers"] svg')).toHaveCount(1)
diff --git a/docs/web-client.md b/docs/web-client.md
index a49a1a90..6ba27c72 100644
--- a/docs/web-client.md
+++ b/docs/web-client.md
@@ -11,7 +11,8 @@ Web C 是独立客户端，只调用 B 的公开 `/api/v1` HTTP 和 WebSocket 
 ## 页面
 
 - 登录：使用不带全局导航的极简页面；Admin Token 只用于换取 HttpOnly 会话，启用双重认证
-  时再输入验证器的一次性验证码，成功后立即从组件状态清除；
+  时再输入验证器的一次性验证码，成功后立即从组件状态清除。右上角提供中英文语言切换按钮
+  （`🌐 EN / 🌐 中文`，`[data-action="toggle-locale"]`），与应用顶栏及授权页共享持久化语言偏好；
 - 总览：显示在线 Term、活动 Pane、24 小时交互数和 Computer 卡片；在线 Term 和活动 Pane
   指标可悬浮或聚焦查看解释。每个 Computer 卡片内的 Term 使用独立圆角卡片，在线 Term
   整块可点击进入终端；
@@ -19,8 +20,11 @@ Web C 是独立客户端，只调用 B 的公开 `/api/v1` HTTP 和 WebSocket 
   添加电脑时先输入名称，再创建 60 秒有效的一次性注册码；A 消费注册码时 B 将该名称应用
   为显示名，同时保留 A 上报的真实 hostname。注册码过期时，保持打开的弹窗使用同一名称
   自动换新；
-- Term：显示 A 上真实 tmux client，支持完整键盘、IME、粘贴、状态栏、Window/Pane 与
-  copy mode。
+- Agent 控制台与预览工作台（`/agent`、`/agent/:conversationId` 与 `/agent-preview`）：管理
+  Agent Broker 会话、查看工具调用与 diff 折叠输出、处理四级风险审批请求，并提供免后端连接
+  的 `/agent-preview` Agent Broker 交互与主题预览工作台；
+- Term：显示 A 上真实 tmux client，支持完整键盘、IME、粘贴、状态栏、Window/Pane、
+  copy mode 与浮动/全屏 Term Agent 侧边栏。
 
 列表只显示用户的 Term 名称、Window/Pane 名称和 tmux 原始 `pane_current_command`。
 TermFlow 不根据进程名硬编码 Codex、Claude Code 或其他 Agent 品牌，用户可以自由重命名
@@ -50,10 +54,11 @@ Esc、Tab 和 Prefix 是独立布局行，不覆盖 terminal 画布；关闭 Pan
 
 ## 主题
 
-首版提供三个完整主题：`graphite-signal`（默认）、`cloud-cobalt` 和
-`midnight-indigo`。所有页面、菜单、状态、terminal 外框和焦点环使用同一组语义 design
-tokens。浏览器只持久化主题标识，不持久化凭据或终端正文；未来 App、EXE 和 Linux 安装
-包应复用相同 token 名称，而不是复制组件中的颜色值。
+提供 10 套完整主题：3 套内置基础主题（`graphite-signal` 默认、`cloud-cobalt`、
+`midnight-indigo`）以及 7 套极客终端主题（`catppuccin-mocha`、`catppuccin-latte`、
+`tokyo-night`、`nord`、`dracula`、`solarized-dark`、`solarized-light`）。所有页面、菜单、
+状态、terminal 外框和焦点环使用同一组语义 design tokens。浏览器只持久化主题标识与语言偏好，
+不持久化凭据或终端正文；未来 App、EXE 和 Linux 安装包应复用相同 token 名称，而不是复制组件中的颜色值。
 
 ## Tauri 授权
 
diff --git a/packages/client-ui/src/components/agent/AgentApprovalCard.vue b/packages/client-ui/src/components/agent/AgentApprovalCard.vue
index a16c7f66..c365616a 100644
--- a/packages/client-ui/src/components/agent/AgentApprovalCard.vue
+++ b/packages/client-ui/src/components/agent/AgentApprovalCard.vue
@@ -16,7 +16,7 @@
       <span v-else>{{ evidence }}</span>
     </div>
     <div v-if="detail !== null" class="agent-approval-card__detail">
-      <p class="agent-approval-card__field"><span class="agent-approval-card__label">Pane</span><span data-agent-approval-pane>{{ pane }}</span></p>
+      <p class="agent-approval-card__field"><span class="agent-approval-card__label">{{ t('agent.approval.pane') }}</span><span data-agent-approval-pane>{{ pane }}</span></p>
       <p class="agent-approval-card__field"><span class="agent-approval-card__label">{{ t('agent.approval.operation') }}</span><span data-agent-approval-operation>{{ operation }}</span></p>
       <div class="agent-approval-card__summary" data-agent-approval-summary>
         <AgentCollapsibleOutput v-if="isDiff(summary)" :content="summary" />
diff --git a/packages/client-ui/src/components/agent/TerminalAgentPanel.vue b/packages/client-ui/src/components/agent/TerminalAgentPanel.vue
index 817cb0fd..310e5682 100644
--- a/packages/client-ui/src/components/agent/TerminalAgentPanel.vue
+++ b/packages/client-ui/src/components/agent/TerminalAgentPanel.vue
@@ -7,7 +7,7 @@
     :class="{ 'terminal-agent-panel--mobile-page': mobilePage }"
     data-agent-floating-panel
     :data-agent-layout="mobilePage ? 'page' : 'floating'"
-    aria-label="Term Agent"
+    :aria-label="t('agent.panel.aria')"
     :aria-hidden="open ? undefined : 'true'"
     :inert="open ? undefined : true"
     :style="mobilePage ? undefined : panelStyle"
@@ -369,7 +369,7 @@ async function commitRename() {
   }
 }
 function cancelRename() { renamingId.value = null }
-const panelTitle = computed(() => selectedEntry.value?.title?.trim() || (selectedConversationId.value ? t('agent.panel.defaultChatTitle') : 'Term Agent'))
+const panelTitle = computed(() => selectedEntry.value?.title?.trim() || (selectedConversationId.value ? t('agent.panel.defaultChatTitle') : t('agent.panel.aria')))
 const disclosureRecoveryRequired = computed(() => setup.value?.state === 'unavailable' && (
   setup.value.reason_code === 'binding_disclosure_stale'
   || setup.value.reason_code === 'binding_disclosure_required'
diff --git a/packages/client-ui/src/components/dashboard/TermRow.vue b/packages/client-ui/src/components/dashboard/TermRow.vue
index 22e5e759..4e046128 100644
--- a/packages/client-ui/src/components/dashboard/TermRow.vue
+++ b/packages/client-ui/src/components/dashboard/TermRow.vue
@@ -4,7 +4,7 @@
       <strong>{{ term.name }}</strong>
       <code>{{ term.current_command || '—' }}</code>
     </div>
-    <div class="term-counts"><span>{{ term.window_count }} Windows</span><span>{{ term.pane_count }} Panes</span></div>
+    <div class="term-counts"><span>{{ term.window_count }} {{ t('dashboard.windows') }}</span><span>{{ term.pane_count }} {{ t('dashboard.panes') }}</span></div>
     <StatusPill :online="term.online" />
     <time v-if="term.last_seen_at" class="term-last-seen" :datetime="term.last_seen_at">{{ formatTime(term.last_seen_at) }}</time>
     <span v-else class="muted term-last-seen">{{ t('dashboard.neverOnline') }}</span>
diff --git a/packages/client-ui/src/components/terminal/MobileKeyBar.vue b/packages/client-ui/src/components/terminal/MobileKeyBar.vue
index c0a32fb0..ad84ec0a 100644
--- a/packages/client-ui/src/components/terminal/MobileKeyBar.vue
+++ b/packages/client-ui/src/components/terminal/MobileKeyBar.vue
@@ -23,7 +23,7 @@
         :title="usablePrefix ? t('terminal.mobileKeybar.prefixReported', { prefix }) : t('terminal.mobileKeybar.prefixUnreported')"
         @click="sendPrefix"
       >
-        Prefix
+        <span class="mobile-keybar__label">{{ t('terminal.mobileKeybar.prefix') }}</span>
       </button>
 
       <!-- Navigation keys -->
@@ -36,7 +36,7 @@
       <!-- Control & interrupt keys -->
       <span class="mobile-keybar-divider" aria-hidden="true" />
       <button type="button" class="mobile-key-btn mobile-key-btn--danger" :disabled="disabled" :aria-label="t('terminal.mobileKeybar.interrupt')" @click="sendInterrupt">^C</button>
-      <button type="button" class="mobile-key-btn" :disabled="disabled" aria-label="EOF (Ctrl+D)" @click="sendEof">^D</button>
+      <button type="button" class="mobile-key-btn" :disabled="disabled" :aria-label="t('terminal.mobileKeybar.eof')" @click="sendEof">^D</button>
       <button type="button" class="mobile-key-btn mobile-key-btn--primary" :disabled="disabled" :aria-label="t('terminal.mobileKeybar.enter')" @click="sendEnter">↵</button>
 
       <!-- Shell symbol keys -->
diff --git a/packages/client-ui/src/i18n/index.ts b/packages/client-ui/src/i18n/index.ts
index a4ec61d5..7f784800 100644
--- a/packages/client-ui/src/i18n/index.ts
+++ b/packages/client-ui/src/i18n/index.ts
@@ -1,8 +1,11 @@
 import { setApiErrorLocale } from '@termflow/client-core'
 import { readonly, ref, type DeepReadonly, type Ref } from 'vue'
+import { enMessages } from './messages/en'
+import { zhMessages } from './messages/zh'
 
 export type Locale = 'zh' | 'en'
 export const LOCALE_STORAGE_KEY = 'termflow_lang'
+export { enMessages, zhMessages }
 
 export interface LocalePreferences {
   load(): Locale | null
@@ -36,1064 +39,8 @@ export function configureLocalePreferences(prefs: LocalePreferences): void {
 }
 
 const messages: Record<Locale, Record<string, string>> = {
-  zh: {
-    // App Shell & Navigation
-    'app.skipToMain': '跳到主要内容',
-    'app.brandAria': 'TermFlow 控制中心',
-    'app.headerContext': '远程终端控制',
-    'app.switchLangAria': '切换语言',
-    'app.switchLangBadge': 'EN',
-    'app.logout': '退出登录',
-    'nav.mainAria': '主导航',
-    'nav.mobileAria': '移动端导航',
-    'nav.dashboard': '控制中心',
-    'nav.computers': '电脑管理',
-    'nav.settings': '设置',
-    'nav.agent': 'Agent 控制台',
-
-    // Dashboard
-    'dashboard.eyebrow': '实时状态',
-    'dashboard.computerEyebrow': '计算节点',
-    'dashboard.title': '控制中心',
-    'dashboard.refresh': '刷新',
-    'dashboard.loading': '正在读取状态…',
-    'dashboard.metricsAria': '关键指标',
-    'dashboard.metric.onlineTerms': '在线 Terms',
-    'dashboard.metric.totalTerms': '共 {count} Terms',
-    'dashboard.metric.onlineTermsHelp': '当前在线并可远程控制的 Term，共 {count} 个 Term。',
-    'dashboard.metric.activePanes': '活动 Panes',
-    'dashboard.metric.activePanesHelp': '在线 Term 中当前处于活动状态的 Pane 数量。',
-    'dashboard.metric.interactions24h': '24 小时交互',
-    'dashboard.metric.interactions24hHelp': '过去 24 小时内由控制节点记录的交互次数。',
-    'dashboard.metric.computers': 'Computers',
-    'dashboard.metric.computersHelp': '已注册到当前控制节点的 Computer 数量，其中 {count} 台在线。',
-    'dashboard.loadError': '无法加载控制中心。',
-    'dashboard.emptyTerms': '这台 Computer 还没有 Term。',
-    'dashboard.openTermAria': '打开终端：{name}',
-    'dashboard.neverOnline': '尚未在线',
-    'dashboard.deleteOfflineTermAria': '删除离线 Term：{name}',
-    'dashboard.deleteError.online': 'Term 已重新上线，无法删除。',
-    'dashboard.deleteError.notFound': 'Term 已不存在；列表已按服务器状态刷新。',
-    'dashboard.deleteError.generic': '无法删除 Term，请重试。',
-    'dashboard.deleteDialog.title': '永久删除离线 Term？',
-    'dashboard.deleteDialog.desc1': '将永久删除远端注册和控制凭据：',
-    'dashboard.deleteDialog.desc2': '这不会删除本地 tmux Session；它仍可能在所属 Computer 上运行。',
-    'dashboard.deleteDialog.desc3': '如需恢复远程访问，请在所属 Computer 上运行：',
-    'dashboard.deleteDialog.cleanupPending': '清理待完成 · 任务 {jobId}',
-    'dashboard.deleteDialog.deleting': '正在删除…',
-    'dashboard.deleteDialog.confirm': '永久删除远程 Term',
-
-    // Status
-    'status.online': '在线',
-    'status.offline': '离线',
-    'status.onlineCount': '在线 ({count})',
-    'status.offlineZero': '离线 (0)',
-    'common.cancel': '取消',
-    'common.confirm': '确认',
-    'common.save': '保存',
-    'common.close': '关闭',
-    'common.copy': '复制',
-    'common.copied': '已复制',
-    'common.continue': '继续',
-    'common.retry': '重试',
-    'common.refresh': '刷新',
-    'common.loading': '加载中…',
-    'common.unknown': '未知',
-    'common.unavailable': '详情不可用',
-    'common.detailUnavailable': '详情不可用',
-    'common.actionFailed': '操作失败，请稍后重试。',
-
-    // Computers View
-    'computers.eyebrow': '设备与注册',
-    'computers.title': '电脑管理',
-    'computers.add': '添加电脑',
-    'computers.loading': '正在读取 Computers…',
-    'computers.loadError': '无法加载 Computers。',
-    'computers.deletedToast': '已删除',
-    'computers.addedToast': '已添加',
-    'computers.deleteError': '无法删除电脑。',
-    'computers.tableAria': '已注册 Computers',
-    'computers.col.name': '名称',
-    'computers.col.terms': '终端',
-    'computers.col.lastSeen': '最近在线',
-    'computers.col.registeredAt': '注册时间',
-    'computers.col.actions': '操作',
-    'computers.notRecorded': '未记录',
-    'computers.cannotDeleteOnlineAria': '{name}：有终端在线时不能删除',
-    'computers.cannotDeleteOnlineTitle': '有终端在线时不能删除',
-    'computers.deleteAria': '删除电脑：{name}',
-    'computers.nameEditor.label': 'Computer 显示名称',
-    'computers.nameEditor.editAria': '修改 Computer 名称：{name}',
-    'computers.nameEditor.editTitle': '点击修改 Computer 名称',
-    'computers.nameEditor.invalid': '显示名称须为 1 至 128 个无控制字符的字符。',
-    'computers.nameEditor.saveError': '无法保存显示名称。',
-    'computers.enrollment.title': '添加电脑',
-    'computers.enrollment.nameLabel': '电脑名称',
-    'computers.enrollment.namePlaceholder': '输入电脑名称',
-    'computers.enrollment.creating': '正在创建…',
-    'computers.enrollment.create': '创建',
-    'computers.enrollment.warning': '此注册码只显示一次，将在 {seconds} 秒后过期并自动刷新。',
-    'computers.enrollment.codeHeading': '注册码',
-    'computers.enrollment.codeAria': '一次性注册码',
-    'computers.enrollment.commandHeading': '终端执行',
-    'computers.enrollment.commandHelpAria': '终端执行说明',
-    'computers.enrollment.commandHelpTitle': '复制到安装有 TermFlow 的电脑上，在终端中执行',
-    'computers.enrollment.commandHelpText': '复制到安装有 TermFlow 的电脑上，在终端中执行。',
-    'computers.enrollment.copyCommand': '复制命令',
-    'computers.enrollment.pollError': '无法检查电脑是否已添加。',
-    'computers.enrollment.nameInvalid': '电脑名称须为 1 至 128 个无控制字符的字符。',
-    'computers.enrollment.refreshError': '注册码刷新失败，请手动重试。',
-    'computers.enrollment.createError': '无法创建注册码。',
-    'computers.deleteDialog.title': '删除电脑？',
-    'computers.deleteDialog.desc1': '将永久删除远端注册和控制凭据：',
-    'computers.deleteDialog.desc2': '删除后，这台电脑需要重新注册才能恢复远程控制。',
-    'computers.deleteDialog.confirm': '永久删除电脑',
-
-    // Terminal View & Controls
-    'terminal.srTitle': '远程终端',
-    'terminal.unreportedComputer': 'Computer 未报告',
-    'terminal.unreportedPrefix': '未报告',
-    'terminal.renameError': '无法更新 Term 名称。',
-    'terminal.backDashboard': '返回控制中心',
-    'terminal.nameLabel': 'Term 名称',
-    'terminal.saveNameAria': '保存 Term 名称',
-    'terminal.cancelNameAria': '取消修改 Term 名称',
-    'terminal.editNameAria': '修改 Term 名称：{title}',
-    'terminal.editNameTitle': '点击修改 Term 名称',
-    'terminal.nameInvalid': '名称需为 1–128 个可见字符。',
-    'terminal.status.connecting': '正在连接',
-    'terminal.status.connected': '已连接',
-    'terminal.status.reconnecting': '正在恢复连接',
-    'terminal.status.closed': '连接已关闭',
-    'terminal.unlockViewport': '解除画布锁定',
-    'terminal.lockViewport': '锁定画布',
-    'terminal.display.buttonAria': '显示设置',
-    'terminal.display.buttonLabel': '显示',
-    'terminal.display.menuAria': '终端显示比例',
-    'terminal.display.font100': '100% 实际字号',
-    'terminal.display.fit': '适应窗口',
-    'terminal.tmux.buttonLabel': 'tmux 操作',
-    'terminal.tmux.searchPlaceholder': '搜索更多操作',
-    'terminal.tmux.shortcut': '快捷键',
-    'terminal.tmux.unbound': '未绑定',
-    'terminal.tmux.action.split_left_right': '左右切分 Pane',
-    'terminal.tmux.action.split_top_bottom': '上下切分 Pane',
-    'terminal.tmux.action.new_window': '新建 Window',
-    'terminal.tmux.action.select_left': '选择左侧 Pane',
-    'terminal.tmux.action.select_right': '选择右侧 Pane',
-    'terminal.tmux.action.select_up': '选择上方 Pane',
-    'terminal.tmux.action.select_down': '选择下方 Pane',
-    'terminal.tmux.action.toggle_zoom': '切换 tmux Zoom',
-    'terminal.tmux.action.copy_mode': '进入 Copy Mode',
-    'terminal.tmux.action.close_pane': '关闭 Pane',
-    'terminal.closePane.title': '关闭 Pane？',
-    'terminal.closePane.desc': '将关闭 {name}（{id}）。Pane 中未保存的工作可能丢失。',
-    'terminal.closePane.confirm': '确认关闭 Pane',
-    'terminal.canvas.aria': 'Term {id} 终端',
-    'terminal.canvas.reconnecting': '连接中断，正在恢复…',
-    'terminal.canvas.connecting': '正在连接终端…',
-    'terminal.mobileKeybar.aria': '移动端修饰键',
-    'terminal.mobileKeybar.locked': '已锁定',
-    'terminal.mobileKeybar.prefixReported': '实际 Prefix：{prefix}',
-    'terminal.mobileKeybar.prefixUnreported': 'Prefix 未报告',
-    'terminal.mobileKeybar.up': '上箭头',
-    'terminal.mobileKeybar.down': '下箭头',
-    'terminal.mobileKeybar.left': '左箭头',
-    'terminal.mobileKeybar.right': '右箭头',
-    'terminal.mobileKeybar.interrupt': '中断 (Ctrl+C)',
-    'terminal.mobileKeybar.enter': '回车 (Enter)',
-    'terminal.error.instance_offline': 'Term 当前离线，无法打开终端。',
-    'terminal.error.unauthorized': '会话已过期，请重新登录。',
-    'terminal.error.backpressure': '终端繁忙，请稍后重试。',
-    'terminal.error.target_not_found': '目标 Pane 已不存在，请刷新状态。',
-    'terminal.error.rate_limited': '操作过于频繁，请稍后重试。',
-    'terminal.error.stream_gap': '连接已重建，正在等待终端重绘。',
-    'terminal.error.default': '终端发生错误，请稍后重试。',
-    'terminal.closed.replaced': '此终端已被另一个已认证连接接管。',
-    'terminal.closed.default': '终端连接已关闭。',
-
-    // Settings View
-    'settings.eyebrow': '偏好与安全',
-    'settings.title': '设置',
-    'settings.appearance.eyebrow': '外观',
-    'settings.appearance.heading': '界面主题',
-    'settings.deviceConnection.eyebrow': '设备连接',
-    'settings.deviceConnection.heading': '设备连接',
-    'settings.deviceConnection.note': '安全设置只能从已认证的网页管理端修改；本机只保存自己的设备凭据。',
-    'settings.theme.graphite-signal': '石墨信号 (默认)',
-    'settings.theme.cloud-cobalt': '云端钴蓝',
-    'settings.theme.midnight-indigo': '午夜靛蓝',
-    'settings.server.eyebrow': '服务连接',
-    'settings.server.heading': '中继服务器',
-    'settings.server.urlLabel': '服务网址',
-    'settings.server.qrAria': '显示服务网址二维码',
-    'settings.server.qrTitle': '服务网址二维码',
-    'settings.qr.closeAria': '关闭二维码',
-    'settings.totp.eyebrow': '安全验证',
-    'settings.totp.securityCheckEyebrow': '安全验证',
-    'settings.totp.heading': '双重因素认证',
-    'settings.totp.helpLabel': '说明双重因素认证',
-    'settings.totp.helpText': '绑定验证器 App 后，可为新的登录和客户端授权增加一次性验证码。',
-    'settings.totp.bound': '验证器已绑定',
-    'settings.totp.reconfigure': '重新配置',
-    'settings.totp.inactive': '未激活',
-    'settings.totp.loading': '正在读取安全状态…',
-    'settings.totp.unavailable': '双重因素认证暂时不可用，请联系服务器管理员。',
-    'settings.totp.activate': '激活双重因素认证',
-    'settings.totp.protectionLabel': '启用双重认证登录',
-    'settings.totp.protectionHelpLabel': '说明启用双重认证登录',
-    'settings.totp.protectionHelpText': '启用后，新的管理员登录和客户端授权都需要验证器生成的一次性验证码。',
-    'settings.totp.disableTitle': '停用双重认证登录',
-    'settings.totp.adminToken': '管理员令牌',
-    'settings.totp.code': '双重验证码',
-    'settings.totp.verifying': '正在验证…',
-    'settings.totp.verifyFailed': '验证失败，请检查凭据后重试。',
-    'settings.totp.setupKeyToggle': '无法扫描？使用设置密钥',
-    'settings.totp.setupKeyTitle': '设置密钥',
-    'settings.totp.copyKey': '复制密钥',
-    'settings.totp.backToSettings': '返回设置',
-    'settings.totp.stepsAria': '激活步骤',
-    'settings.totp.step1': '验证身份',
-    'settings.totp.step2': '绑定验证器',
-    'settings.totp.step3': '启用登录保护',
-    'settings.totp.wizardComplete': '设置完成',
-    'settings.totp.wizardProgress': '第 {step} 步，共 3 步',
-    'settings.totp.wizardTitle.bind': '绑定验证器',
-    'settings.totp.wizardTitle.enabled': '双重认证已启用',
-    'settings.totp.wizardTitle.enableProtection': '启用登录保护',
-    'settings.totp.wizardTitle.reconfigure': '重新配置验证器',
-    'settings.totp.wizardTitle.verifyAdmin': '验证管理员身份',
-    'settings.totp.qrAlt': '验证器设置二维码',
-    'settings.totp.confirmCodeLabel': '验证器验证码',
-    'settings.totp.confirmBind': '确认绑定',
-    'settings.totp.currentCodeLabel': '当前验证器验证码',
-    'settings.totp.codeInvalidOrExpired': '验证码无效或设置已过期，请重试。',
-    'settings.clients.eyebrow': '访问控制',
-    'settings.clients.heading': '已授权客户端',
-    'settings.clients.authorizeNew': '授权新客户端',
-    'settings.clients.authorizeNewTitle': '输入设备码以批准另一台已发起连接的客户端。',
-    'settings.clients.empty': '尚未授权手机或桌面客户端。',
-    'settings.clients.revoke': '撤销',
-    'settings.clients.revokeTitle': '撤销客户端',
-    'settings.clients.revokeDesc': '将注销 {name}，不会影响其他设备，也不会中断正在运行的会话。',
-    'settings.clients.confirmRevoke': '确认撤销',
-    'settings.clients.revokedToast': '已撤销',
-    'settings.clients.revokeError': '撤销失败，请检查凭据后重试。',
-    'settings.deviceApproval.eyebrow': '客户端授权',
-    'settings.deviceApproval.codeLabel': '设备码',
-    'settings.deviceApproval.lookingUp': '正在查找…',
-    'settings.deviceApproval.client': '客户端',
-    'settings.deviceApproval.platform': '平台',
-    'settings.deviceApproval.scopes': '权限',
-    'settings.deviceApproval.expiresAt': '有效期至',
-    'settings.deviceApproval.deny': '拒绝',
-    'settings.deviceApproval.allow': '允许此设备',
-    'settings.deviceApproval.approvedToast': '已授权',
-
-    // Auth / Login / Authorize Views
-    'login.title': '登录',
-    'login.adminToken': '管理员令牌',
-    'login.totpCode': '双重验证码',
-    'login.totpHint': '（请输入验证器应用当前显示的 6 位验证码。）',
-    'login.submit': '登录',
-    'login.verifyAndLogin': '验证并登录',
-    'login.invalidToken': '管理员令牌无效，请核对后重试。',
-    'login.failed': '登录失败，请重试。',
-    'deviceAuth.eyebrow': '跨设备授权',
-    'deviceAuth.title': '授权新设备',
-    'deviceAuth.backToLogin': '返回登录',
-    'deviceAuth.codeLabel': '设备码',
-    'deviceAuth.lookupBtn': '查找设备',
-    'deviceAuth.loading': '正在读取设备授权…',
-    'deviceAuth.qrAlt': '设备授权二维码',
-    'deviceAuth.codeHint': '设备码',
-    'deviceAuth.totpHint': '（请输入验证器应用当前显示的 6 位双重验证码。）',
-    'deviceAuth.statusPending': '待确认',
-    'deviceAuth.statusExpired': '已过期',
-    'deviceAuth.approvedMsg': '授权成功，设备可以继续连接。',
-    'deviceAuth.deniedMsg': '已拒绝该设备授权。',
-    'deviceAuth.invalidCodeFormat': '请输入格式为 ABCD-EFGH 的设备码。',
-    'deviceAuth.codeInvalidOrExpired': '设备码无效或已过期。',
-    'deviceAuth.lookupError': '无法查找设备码。',
-    'nativeAuth.eyebrow': '原生客户端授权',
-    'nativeAuth.title': '授权 TermFlow 客户端',
-    'nativeAuth.loading': '正在读取授权请求…',
-    'nativeAuth.server': '服务器',
-    'nativeAuth.keyFingerprint': '公钥指纹',
-    'nativeAuth.allow': '允许此客户端',
-    'nativeAuth.invalidOrExpired': '授权请求无效或已过期。',
-    'nativeAuth.failed': '无法完成授权。',
-    'notFound.title': '页面不存在',
-    'notFound.back': '返回控制中心',
-
-    // Agent Console & Panel & Chat
-    'agent.eyebrow': '智能代理',
-    'agent.title': 'Agent 控制台',
-    'agent.disabledTitle': 'Agent Broker 未启用',
-    'agent.disabledDesc': '服务器未开启 Agent Broker 能力，无法使用 Agent 会话。',
-    'agent.conversations.eyebrow': '会话列表',
-    'agent.conversations.heading': '会话记录',
-    'agent.chat.eyebrow': '会话详情',
-    'agent.chat.bindingLabel': '绑定 {bindingId} · 终端 {termId}',
-    'agent.conversations.emptyBindings': '暂无可用 Term，请先在电脑管理中连接一个 Term。',
-    'agent.conversations.empty': '暂无会话记录。',
-    'agent.conversations.tableAria': 'Agent 会话记录',
-    'agent.conversations.col.name': '会话名称',
-    'agent.conversations.col.term': 'Term',
-    'agent.conversations.col.status': '工作状态',
-    'agent.conversations.col.actions': '操作',
-    'agent.conversations.saveNameAria': '保存会话名称',
-    'agent.conversations.cancelNameAria': '取消重命名',
-    'agent.conversations.pendingBadgeAria': '{count} 个待处理审批',
-    'agent.conversations.openInTermAria': '在终端中打开：{title}',
-    'agent.conversations.openInTermTitle': '在终端中打开',
-    'agent.conversations.renameAria': '重命名会话：{title}',
-    'agent.conversations.renameTitle': '重命名会话',
-    'agent.conversations.deleteAria': '删除会话：{title}',
-    'agent.conversations.deleteTitle': '删除会话',
-    'agent.conversations.deleteDialogTitle': '删除该会话？',
-    'agent.conversations.deleteDialogDesc': '将删除会话 {title} 及其全部消息历史，此操作不可撤销。',
-    'agent.conversations.deleteConfirm': '确认删除',
-    'agent.conversations.loadError': '无法加载 Agent 会话数据，请稍后重试。',
-    'agent.conversations.loadErrorShort': '无法加载 Agent 会话数据。',
-    'agent.conversations.createdToast': '会话已创建。',
-    'agent.conversations.createError': '创建会话失败，请稍后重试。',
-    'agent.conversations.nameInvalid': '会话名称须为 1 至 255 个字符。',
-    'agent.conversations.renamedToast': '会话名称已更新。',
-    'agent.conversations.renameError': '保存会话名称失败，请稍后重试。',
-    'agent.conversations.deletedToast': '会话已删除。',
-    'agent.conversations.deleteError': '删除会话失败，请稍后重试。',
-    'agent.conversations.termNameError': '无法加载 Term 名称，部分会话信息可能不完整。',
-    'agent.conversations.termUnknown': 'Term 未知',
-    'agent.conversations.defaultTitle': '会话 {id}',
-    'agent.status.running': '运行中',
-    'agent.status.attention': '需要注意',
-    'agent.status.stopped': '已停止',
-    'agent.readiness.unconfigured': '未设置',
-    'agent.readiness.deployment_required': '需部署',
-    'agent.readiness.activating': '激活中',
-    'agent.readiness.ready': '已就绪',
-    'agent.readiness.unavailable': '不可用',
-    'agent.backend.connecting': '连接中',
-    'agent.backend.idle': '空闲',
-    'agent.backend.busy': '处理中',
-    'agent.backend.retry': '重试中',
-    'agent.backend.ready': '就绪',
-    'agent.backend.readyPanel': '已就绪',
-    'agent.backend.unavailable': '不可用',
-    'agent.backend.offline': '离线',
-    'agent.backend.context_lost': '上下文丢失',
-    'agent.backend.reconciling': '恢复中',
-    'agent.backend.closed': '已关闭',
-    'agent.panel.toolsAria': 'Agent 工具',
-    'agent.panel.dragAria': '拖动 Agent 面板',
-    'agent.panel.newConversation': '新建会话',
-    'agent.panel.history': '历史记录',
-    'agent.panel.settingsAria': 'Agent 设置',
-    'agent.panel.settingsTitle': 'Agent 设置：调整可访问的窗格',
-    'agent.panel.closeAria': '关闭 Agent',
-    'agent.panel.writePolicy': '写入审批',
-    'agent.panel.writePolicyGroupAria': '新会话写入审批',
-    'agent.panel.policyManual': '手动',
-    'agent.panel.policyAuto': '放行',
-    'agent.panel.loading': '正在加载 Agent…',
-    'agent.panel.deploymentRequiredTitle': '需要部署 Agent 服务',
-    'agent.panel.deploymentRequiredDesc': '请管理员完成运行环境和提供方配置。',
-    'agent.panel.checkDeployment': '检查部署状态',
-    'agent.panel.activatingTitle': 'Agent 正在激活',
-    'agent.panel.activatingDesc': '运行时正在连接，稍候会自动刷新。',
-    'agent.panel.refreshStatus': '刷新状态',
-    'agent.panel.reEnableTitle': '请重新启用 Agent',
-    'agent.panel.reEnableDesc': '部署的提供方配置已更新。',
-    'agent.panel.reEnable': '重新启用',
-    'agent.panel.unavailableTitle': 'Agent 暂不可用',
-    'agent.panel.recoveringTitle': 'Agent 正在恢复',
-    'agent.panel.recoveringDesc': '运行时还在连接中，稍候会自动刷新。',
-    'agent.panel.reactivate': '重新激活',
-    'agent.panel.confirmAutoAria': '确认完全放行',
-    'agent.panel.confirmAutoDesc': '完全放行后，Agent 对已授权 Pane 的每次写入都会立即执行，不再弹审批。',
-    'agent.panel.confirmAutoBtn': '确认放行',
-    'agent.panel.historyCount': '{count} 个会话',
-    'agent.panel.historyEmpty': '暂无会话',
-    'agent.panel.untitledConversation': '未命名会话',
-    'agent.panel.statusOpen': '进行中',
-    'agent.panel.emptyPrompt': '选择历史会话或点击“新建会话”。',
-    'agent.panel.defaultChatTitle': 'Agent 对话',
-    'agent.panel.savePanesError': '无法保存窗格授权。',
-    'agent.panel.writePolicyError': '无法更新写入审批方式。',
-    'agent.panel.resizeAria': '调整 Agent 面板大小（{edge}）',
-    'agent.panel.edge.n': '上边缘',
-    'agent.panel.edge.e': '右边缘',
-    'agent.panel.edge.s': '下边缘',
-    'agent.panel.edge.w': '左边缘',
-    'agent.panel.edge.ne': '右上角',
-    'agent.panel.edge.se': '右下角',
-    'agent.panel.edge.sw': '左下角',
-    'agent.panel.edge.nw': '左上角',
-    'agent.reason.stale_topology': '窗格布局已变化，请刷新后重新选择。',
-    'agent.reason.stale_binding_revision': 'Agent 配置已变化，请刷新后重试。',
-    'agent.reason.topology_unavailable': '窗格布局暂不可用，请连接终端后刷新。',
-    'agent.reason.disclosure_mismatch': '提供方披露已变化，请重新确认。',
-    'agent.reason.disclosure_required': '请确认当前提供方的数据发送说明。',
-    'agent.reason.binding_disclosure_stale': '提供方披露已变化，请重新确认。',
-    'agent.reason.binding_disclosure_required': '请确认当前提供方的数据发送说明。',
-    'agent.reason.provider_unavailable': '模型提供方暂不可用。',
-    'agent.reason.deployment_required': '请管理员完成 Agent 服务部署。',
-    'agent.reason.sensitive_action_reauthentication_required': '身份验证已失效，请重新操作。',
-    'agent.reason.runtime_unreachable': '运行时暂时不可达，稍候会自动重试。',
-    'agent.reason.mcp_not_connected': '运行时尚未连上控制面，稍候会自动重试。',
-    'agent.reason.runtime_assignment_conflict': '运行时身份冲突，请点击“重新激活”修复。',
-    'agent.reason.pipeline_start_failed': '运行时启动失败，请稍候重试或联系管理员。',
-    'agent.reason.insufficient_scope': '当前客户端缺少 Agent 权限，请重新登录授权。',
-    'agent.reason.default': 'Agent 暂不可用，请稍后重试。',
-    'agent.chat.backOverview': 'Agent 总览',
-    'agent.chat.policyGroupAria': '本对话写入审批',
-    'agent.chat.policyManual': '手动审批',
-    'agent.chat.policyAuto': '完全放行',
-    'agent.chat.canceling': '正在取消…',
-    'agent.chat.cancelRun': '取消运行',
-    'agent.chat.deleteConfirmAria': '确认删除会话',
-    'agent.chat.deleteConfirmDesc': '删除后该会话及其事件会被清理，无法恢复。',
-    'agent.chat.deleteError': '删除失败，请稍后重试。',
-    'agent.chat.policyConfirmAria': '确认完全放行本对话',
-    'agent.chat.policyConfirmDesc': '本对话内，Agent 对已授权 Pane 的每次写入都会立即执行，不再弹审批。',
-    'agent.chat.policyUpdateError': '无法更新审批方式。',
-    'agent.chat.cancelError': '取消失败，请稍后重试。',
-    'agent.chat.approvalPromptAria': '待批准操作',
-    'agent.chat.notFoundBanner': '该会话不存在或已被删除，无法继续连接。',
-    'agent.chat.revokedBanner': 'Agent Binding 已撤销，无法继续连接。',
-    'agent.chat.notFoundToast': '该会话不存在或已被删除。',
-    'agent.chat.forbiddenToast': '当前客户端没有访问该会话的权限，请重新登录授权。',
-    'agent.chat.recoveringToast': '连接恢复中，正在补齐消息…',
-    'agent.chat.historyUnavailable': '历史消息内容不可用',
-    'agent.chat.emptyPrompt': '输入一条消息，开始与 Agent 对话。',
-    'agent.chat.roleSystem': '系统',
-    'agent.chat.systemContext': '系统上下文',
-    'agent.chat.systemUnavailable': '系统上下文内容不可用',
-    'agent.chat.roleUser': '你',
-    'agent.chat.thinking': '思考',
-    'agent.chat.thinkingStreaming': '思考中…',
-    'agent.chat.toolCall': '工具调用',
-    'agent.chat.defaultToolLabel': '调用',
-    'agent.chat.toolInput': '输入',
-    'agent.chat.toolDefaultsOmitted': '默认参数已省略：{items}',
-    'agent.chat.toolOutput': '结果',
-    'agent.chat.toolError': '错误',
-    'agent.chat.stepStart': '开始',
-    'agent.chat.toolStatus.completed': '已完成',
-    'agent.chat.toolStatus.failed': '失败',
-    'agent.chat.toolStatus.failedExec': '执行失败',
-    'agent.chat.toolStatus.running': '运行中',
-    'agent.chat.toolStatus.pending': '等待中',
-    'agent.chat.collapseCode': '收起代码 ▴',
-    'agent.chat.collapseOutput': '收起输出 ▴',
-    'agent.chat.expandLines': '展开其余 {folded} 行 (共 {total} 行) ▾',
-    'agent.chat.announce.separator': '；',
-    'agent.chat.announce.toolCompleted': '工具 {label} 已完成',
-    'agent.chat.announce.toolFailed': '工具 {label} 执行失败',
-    'agent.chat.announce.runFinished': '运行已完成',
-    'agent.chat.announce.runError': '运行出错',
-    'agent.chat.announce.newApproval': '收到新的审批请求',
-    'agent.chat.announce.backendState': '后端状态：{state}',
-    'agent.composer.inputAria': '发送给 Agent 的消息',
-    'agent.composer.sendAria': '发送消息',
-    'agent.composer.tooLong': '文本超出长度限制（最多 {max} 字节），请精简后重试。',
-    'agent.composer.unavailable': '后端运行时未就绪，暂时无法发送消息。',
-    'agent.approval.state.pending': '待处理',
-    'agent.approval.state.approved': '已批准',
-    'agent.approval.state.denied': '已拒绝',
-    'agent.approval.state.expired': '已过期',
-    'agent.approval.state.revoked': '已撤销',
-    'agent.approval.state.consumed': '已消费',
-    'agent.approval.operation': '操作',
-    'agent.approval.hashPrefix': '摘要 #{hash}',
-    'agent.approval.expiresPrefix': '有效期至 {expiry}',
-    'agent.approval.focusAction': '在审批面板处理',
-    'agent.approval.empty': '暂无待处理审批',
-    'agent.approval.approve': '批准',
-    'agent.approval.deny': '拒绝',
-    'agent.approval.revoke': '撤销',
-    'agent.approval.confirmTitle': '批准该审批请求？',
-    'agent.approval.confirmDesc1': '批准后 Agent 将立即执行',
-    'agent.approval.confirmDesc2': '。此操作不可撤销，请确认内容无误。',
-    'agent.approval.unknownOp': '未知操作',
-    'agent.approval.criticalWarning': '⚠️ 极高风险警示：此操作具有高危破坏性，请二次确认！',
-    'agent.approval.criticalAck': '我已知晓该操作具有高危破坏性，确认执行',
-    'agent.approval.confirmApprove': '确认批准',
-    'agent.approval.loadError': '无法加载审批列表。',
-    'agent.approval.notFoundError': '该审批请求已不存在。',
-    'agent.approval.expiredError': '该审批请求已过期。',
-    'agent.approval.stateChangedError': '审批状态已变化，列表已刷新。',
-    'agent.approval.approvedToast': '已批准。',
-    'agent.approval.deniedToast': '已拒绝。',
-    'agent.approval.revokedToast': '已撤销审批。',
-    'agent.risk.level4': '极高危',
-    'agent.risk.level3': '高风险',
-    'agent.risk.level2': '中风险',
-    'agent.risk.level1': '低风险',
-    'agent.reauth.title': '重新验证身份',
-    'agent.reauth.nativeHint': '请在系统浏览器中完成身份验证。',
-    'agent.reauth.webHint': '为保护终端安全，执行敏感操作前需要重新验证管理员身份。验证通过后本次操作会自动继续。',
-    'agent.reauth.rootCredential': 'Root 凭据',
-    'agent.reauth.totp': '动态验证码',
-    'agent.reauth.verify': '验证',
-    'agent.reauth.failed': '验证失败，请重试。',
-    'agent.setup.title': '设置 Term Agent',
-    'agent.setup.helpLabel': 'Term Agent 说明',
-    'agent.setup.enable': '启用 Agent',
-    'agent.setup.settingUp': '正在设置…',
-    'agent.setup.noProviderHelp': '部署尚未配置模型提供方，请联系管理员完成部署。',
-    'agent.setup.providerHelp': 'Agent 使用部署配置的模型 {provider} · {model} 读取授权窗格的内容；写入命令时仍会逐一弹审批。',
-    'agent.setup.selectPaneError': '请至少选择一个当前窗格。',
-    'agent.setup.providerUnavailableError': '提供方配置暂不可用，请管理员完成部署。',
-    'agent.panes.defaultLegend': '允许 Agent 访问的窗格',
-    'agent.panes.helpLabel': '窗格授权说明',
-    'agent.panes.helpText': '窗格是终端里的一块分屏（% 编号）。Agent 只能读取勾选窗格的内容；写入仍会逐一弹审批。',
-    'agent.panes.selectAll': '全选',
-    'agent.panes.clear': '清空',
-    'agent.panes.selectedCount': '已选 {selected}/{total}',
-    'agent.panes.empty': '暂无可用窗格，请连接终端后刷新。',
-    'agent.preview.title': '部署检查',
-    'agent.preview.inputPlaceholder': '输入消息…',
-    'agent.preview.reauthBtn': '重新验证身份（预览）',
-    'agent.preview.mobileKeybarHeading': '移动端快捷键栏预览',
-    'agent.preview.themePickerHeading': '极客主题切换器 (10 款经典配色预览)',
-    'agent.preview.sampleUserPrompt': '请在当前允许的终端中执行 echo 1，并告诉我结果。',
-    'agent.preview.sampleThinking1': '用户想让我在终端执行 echo 1。我先列出 pane，确认可写后再发送命令并等待审批。',
-    'agent.preview.sampleAssistant1': '我先看一下有哪些 pane，然后执行 echo 1。',
-    'agent.preview.sampleAssistant2': '准备向 pane %0 写入 `echo 1`，需要你确认。',
-    'agent.preview.sampleThinking2': '准备更新配置文件，审查 patch 差异。',
-    'agent.preview.sampleFinalText': '已执行。结果输出为 `1`。',
-  },
-  en: {
-    // App Shell & Navigation
-    'app.skipToMain': 'Skip to main content',
-    'app.brandAria': 'TermFlow Dashboard',
-    'app.headerContext': 'Remote Terminal Control',
-    'app.switchLangAria': 'Switch Language',
-    'app.switchLangBadge': '中文',
-    'app.logout': 'Sign Out',
-    'nav.mainAria': 'Main navigation',
-    'nav.mobileAria': 'Mobile navigation',
-    'nav.dashboard': 'Dashboard',
-    'nav.computers': 'Computers',
-    'nav.settings': 'Settings',
-    'nav.agent': 'Agent Console',
-
-    // Dashboard
-    'dashboard.eyebrow': 'Live Status',
-    'dashboard.computerEyebrow': 'Computer',
-    'dashboard.title': 'Dashboard',
-    'dashboard.refresh': 'Refresh',
-    'dashboard.loading': 'Loading status…',
-    'dashboard.metricsAria': 'Key metrics',
-    'dashboard.metric.onlineTerms': 'Online Terms',
-    'dashboard.metric.totalTerms': '{count} total Terms',
-    'dashboard.metric.onlineTermsHelp': 'Currently online and controllable Terms ({count} total).',
-    'dashboard.metric.activePanes': 'Active Panes',
-    'dashboard.metric.activePanesHelp': 'Active panes across all online Terms.',
-    'dashboard.metric.interactions24h': '24h Interactions',
-    'dashboard.metric.interactions24hHelp': 'Interactions recorded by the control node over the past 24 hours.',
-    'dashboard.metric.computers': 'Computers',
-    'dashboard.metric.computersHelp': 'Computers registered to this control node ({count} online).',
-    'dashboard.loadError': 'Unable to load Dashboard.',
-    'dashboard.emptyTerms': 'No Terms on this Computer yet.',
-    'dashboard.openTermAria': 'Open terminal: {name}',
-    'dashboard.neverOnline': 'Never online',
-    'dashboard.deleteOfflineTermAria': 'Delete offline Term: {name}',
-    'dashboard.deleteError.online': 'Term is back online and cannot be deleted.',
-    'dashboard.deleteError.notFound': 'Term no longer exists; list refreshed.',
-    'dashboard.deleteError.generic': 'Unable to delete Term. Please try again.',
-    'dashboard.deleteDialog.title': 'Permanently delete offline Term?',
-    'dashboard.deleteDialog.desc1': 'This permanently removes remote registration and credentials for: ',
-    'dashboard.deleteDialog.desc2': 'This will not kill the local tmux session on the host Computer.',
-    'dashboard.deleteDialog.desc3': 'To restore remote access, run on the host Computer:',
-    'dashboard.deleteDialog.cleanupPending': 'Cleanup pending · Job {jobId}',
-    'dashboard.deleteDialog.deleting': 'Deleting…',
-    'dashboard.deleteDialog.confirm': 'Delete Remote Term',
-
-    // Status
-    'status.online': 'Online',
-    'status.offline': 'Offline',
-    'status.onlineCount': 'Online ({count})',
-    'status.offlineZero': 'Offline (0)',
-    'common.cancel': 'Cancel',
-    'common.confirm': 'Confirm',
-    'common.save': 'Save',
-    'common.close': 'Close',
-    'common.copy': 'Copy',
-    'common.copied': 'Copied',
-    'common.continue': 'Continue',
-    'common.retry': 'Retry',
-    'common.refresh': 'Refresh',
-    'common.loading': 'Loading…',
-    'common.unknown': 'Unknown',
-    'common.unavailable': 'Details unavailable',
-    'common.detailUnavailable': 'Details unavailable',
-    'common.actionFailed': 'Action failed. Please try again later.',
-
-    // Computers View
-    'computers.eyebrow': 'Devices & Enrollment',
-    'computers.title': 'Computers',
-    'computers.add': 'Add Computer',
-    'computers.loading': 'Loading Computers…',
-    'computers.loadError': 'Unable to load Computers.',
-    'computers.deletedToast': 'Deleted',
-    'computers.addedToast': 'Added',
-    'computers.deleteError': 'Unable to delete computer.',
-    'computers.tableAria': 'Registered Computers',
-    'computers.col.name': 'Name',
-    'computers.col.terms': 'Terms',
-    'computers.col.lastSeen': 'Last Seen',
-    'computers.col.registeredAt': 'Registered',
-    'computers.col.actions': 'Actions',
-    'computers.notRecorded': 'Not recorded',
-    'computers.cannotDeleteOnlineAria': '{name}: Cannot delete while a Term is online',
-    'computers.cannotDeleteOnlineTitle': 'Cannot delete while a Term is online',
-    'computers.deleteAria': 'Delete computer: {name}',
-    'computers.nameEditor.label': 'Computer display name',
-    'computers.nameEditor.editAria': 'Edit Computer name: {name}',
-    'computers.nameEditor.editTitle': 'Click to edit Computer name',
-    'computers.nameEditor.invalid': 'Display name must be 1–128 characters without control characters.',
-    'computers.nameEditor.saveError': 'Unable to save display name.',
-    'computers.enrollment.title': 'Add Computer',
-    'computers.enrollment.nameLabel': 'Computer Name',
-    'computers.enrollment.namePlaceholder': 'Enter computer name',
-    'computers.enrollment.creating': 'Creating…',
-    'computers.enrollment.create': 'Create',
-    'computers.enrollment.warning': 'This enrollment code is shown once and refreshes in {seconds}s.',
-    'computers.enrollment.codeHeading': 'Enrollment Code',
-    'computers.enrollment.codeAria': 'One-time enrollment code',
-    'computers.enrollment.commandHeading': 'Run in Terminal',
-    'computers.enrollment.commandHelpAria': 'Terminal command instructions',
-    'computers.enrollment.commandHelpTitle': 'Copy and run in a terminal on the computer with TermFlow installed',
-    'computers.enrollment.commandHelpText': 'Copy and run in a terminal on the computer with TermFlow installed.',
-    'computers.enrollment.copyCommand': 'Copy Command',
-    'computers.enrollment.pollError': 'Unable to check enrollment status.',
-    'computers.enrollment.nameInvalid': 'Computer name must be 1–128 characters without control characters.',
-    'computers.enrollment.refreshError': 'Failed to refresh enrollment code. Please retry.',
-    'computers.enrollment.createError': 'Unable to create enrollment code.',
-    'computers.deleteDialog.title': 'Delete Computer?',
-    'computers.deleteDialog.desc1': 'This permanently removes remote registration and credentials for: ',
-    'computers.deleteDialog.desc2': 'Once deleted, this computer must be re-enrolled for remote control.',
-    'computers.deleteDialog.confirm': 'Delete Computer',
-
-    // Terminal View & Controls
-    'terminal.srTitle': 'Remote Terminal',
-    'terminal.unreportedComputer': 'Computer Unreported',
-    'terminal.unreportedPrefix': 'Unreported',
-    'terminal.renameError': 'Unable to update Term name.',
-    'terminal.backDashboard': 'Back to Dashboard',
-    'terminal.nameLabel': 'Term Name',
-    'terminal.saveNameAria': 'Save Term name',
-    'terminal.cancelNameAria': 'Cancel editing Term name',
-    'terminal.editNameAria': 'Edit Term name: {title}',
-    'terminal.editNameTitle': 'Click to edit Term name',
-    'terminal.nameInvalid': 'Name must be 1–128 printable characters.',
-    'terminal.status.connecting': 'Connecting',
-    'terminal.status.connected': 'Connected',
-    'terminal.status.reconnecting': 'Reconnecting',
-    'terminal.status.closed': 'Disconnected',
-    'terminal.unlockViewport': 'Unlock Viewport',
-    'terminal.lockViewport': 'Lock Viewport',
-    'terminal.display.buttonAria': 'Display Settings',
-    'terminal.display.buttonLabel': 'Display',
-    'terminal.display.menuAria': 'Terminal display scale',
-    'terminal.display.font100': '100% Actual Size',
-    'terminal.display.fit': 'Fit Window',
-    'terminal.tmux.buttonLabel': 'tmux Actions',
-    'terminal.tmux.searchPlaceholder': 'Search actions…',
-    'terminal.tmux.shortcut': 'Shortcut',
-    'terminal.tmux.unbound': 'Unbound',
-    'terminal.tmux.action.split_left_right': 'Split Left / Right',
-    'terminal.tmux.action.split_top_bottom': 'Split Top / Bottom',
-    'terminal.tmux.action.new_window': 'New Window',
-    'terminal.tmux.action.select_left': 'Focus Left Pane',
-    'terminal.tmux.action.select_right': 'Focus Right Pane',
-    'terminal.tmux.action.select_up': 'Focus Up Pane',
-    'terminal.tmux.action.select_down': 'Focus Down Pane',
-    'terminal.tmux.action.toggle_zoom': 'Toggle Pane Zoom',
-    'terminal.tmux.action.copy_mode': 'Enter Copy Mode',
-    'terminal.tmux.action.close_pane': 'Close Pane',
-    'terminal.closePane.title': 'Close Pane?',
-    'terminal.closePane.desc': 'Close {name} ({id})? Unsaved work inside the pane may be lost.',
-    'terminal.closePane.confirm': 'Close Pane',
-    'terminal.canvas.aria': 'Term {id} terminal',
-    'terminal.canvas.reconnecting': 'Connection interrupted, reconnecting…',
-    'terminal.canvas.connecting': 'Connecting to terminal…',
-    'terminal.mobileKeybar.aria': 'Mobile modifier keys',
-    'terminal.mobileKeybar.locked': 'Locked',
-    'terminal.mobileKeybar.prefixReported': 'Active Prefix: {prefix}',
-    'terminal.mobileKeybar.prefixUnreported': 'Prefix unreported',
-    'terminal.mobileKeybar.up': 'Up Arrow',
-    'terminal.mobileKeybar.down': 'Down Arrow',
-    'terminal.mobileKeybar.left': 'Left Arrow',
-    'terminal.mobileKeybar.right': 'Right Arrow',
-    'terminal.mobileKeybar.interrupt': 'Interrupt (Ctrl+C)',
-    'terminal.mobileKeybar.enter': 'Enter',
-    'terminal.error.instance_offline': 'Term is currently offline; cannot open terminal.',
-    'terminal.error.unauthorized': 'Session expired. Please sign in again.',
-    'terminal.error.backpressure': 'Terminal is busy. Please try again later.',
-    'terminal.error.target_not_found': 'Target pane no longer exists. Please refresh.',
-    'terminal.error.rate_limited': 'Too many requests. Please try again later.',
-    'terminal.error.stream_gap': 'Connection re-established; waiting for terminal redraw.',
-    'terminal.error.default': 'A terminal error occurred. Please try again later.',
-    'terminal.closed.replaced': 'This terminal has been taken over by another authenticated connection.',
-    'terminal.closed.default': 'Terminal connection closed.',
-
-    // Settings View
-    'settings.eyebrow': 'Settings',
-    'settings.title': 'Settings',
-    'settings.appearance.eyebrow': 'Appearance',
-    'settings.appearance.heading': 'Appearance Theme',
-    'settings.deviceConnection.eyebrow': 'Device Connection',
-    'settings.deviceConnection.heading': 'Device Connection',
-    'settings.deviceConnection.note': 'Security settings can only be changed from an authenticated web admin session; this device only stores its own credentials.',
-    'settings.theme.graphite-signal': 'Graphite Signal',
-    'settings.theme.cloud-cobalt': 'Cloud Cobalt',
-    'settings.theme.midnight-indigo': 'Midnight Indigo',
-    'settings.server.eyebrow': 'Server',
-    'settings.server.heading': 'Relay Server',
-    'settings.server.urlLabel': 'Server URL',
-    'settings.server.qrAria': 'Show server URL QR code',
-    'settings.server.qrTitle': 'Server URL QR Code',
-    'settings.qr.closeAria': 'Close QR code',
-    'settings.totp.eyebrow': 'Two Factor Authentication',
-    'settings.totp.securityCheckEyebrow': 'Security Check',
-    'settings.totp.heading': 'Two-Factor Authentication',
-    'settings.totp.helpLabel': 'About Two-Factor Authentication',
-    'settings.totp.helpText': 'Bind an authenticator app to require a one-time code for new logins and client authorizations.',
-    'settings.totp.bound': 'Authenticator Bound',
-    'settings.totp.reconfigure': 'Reconfigure',
-    'settings.totp.inactive': 'Inactive',
-    'settings.totp.loading': 'Loading security status…',
-    'settings.totp.unavailable': 'Two-factor authentication is temporarily unavailable. Contact the server administrator.',
-    'settings.totp.activate': 'Enable 2FA',
-    'settings.totp.protectionLabel': 'Require 2FA at Sign-In',
-    'settings.totp.protectionHelpLabel': 'About 2FA Sign-In Protection',
-    'settings.totp.protectionHelpText': 'When enabled, new admin sign-ins and client authorizations require a 6-digit code from your authenticator app.',
-    'settings.totp.disableTitle': 'Disable 2FA at Sign-In',
-    'settings.totp.adminToken': 'Admin Token',
-    'settings.totp.code': '2FA Code',
-    'settings.totp.verifying': 'Verifying…',
-    'settings.totp.verifyFailed': 'Verification failed. Check your credentials and try again.',
-    'settings.totp.setupKeyToggle': 'Cannot scan? Use setup key',
-    'settings.totp.setupKeyTitle': 'Setup Key',
-    'settings.totp.copyKey': 'Copy Key',
-    'settings.totp.backToSettings': 'Back to Settings',
-    'settings.totp.stepsAria': 'Activation steps',
-    'settings.totp.step1': 'Verify Identity',
-    'settings.totp.step2': 'Bind Authenticator',
-    'settings.totp.step3': 'Enable Sign-In Guard',
-    'settings.totp.wizardComplete': 'Setup Complete',
-    'settings.totp.wizardProgress': 'Step {step} of 3',
-    'settings.totp.wizardTitle.bind': 'Bind Authenticator',
-    'settings.totp.wizardTitle.enabled': '2FA Enabled',
-    'settings.totp.wizardTitle.enableProtection': 'Enable Sign-In Guard',
-    'settings.totp.wizardTitle.reconfigure': 'Reconfigure Authenticator',
-    'settings.totp.wizardTitle.verifyAdmin': 'Verify Admin Identity',
-    'settings.totp.qrAlt': 'Authenticator setup QR code',
-    'settings.totp.confirmCodeLabel': 'Authenticator Code',
-    'settings.totp.confirmBind': 'Confirm Binding',
-    'settings.totp.currentCodeLabel': 'Current Authenticator Code',
-    'settings.totp.codeInvalidOrExpired': 'Invalid code or expired setup session. Please try again.',
-    'settings.clients.eyebrow': 'Access',
-    'settings.clients.heading': 'Authorized Clients',
-    'settings.clients.authorizeNew': 'Authorize Client',
-    'settings.clients.authorizeNewTitle': 'Enter a device code to approve another client.',
-    'settings.clients.empty': 'No mobile or desktop clients authorized yet.',
-    'settings.clients.revoke': 'Revoke',
-    'settings.clients.revokeTitle': 'Revoke Client',
-    'settings.clients.revokeDesc': 'This revokes {name} without affecting other devices or active terminal sessions.',
-    'settings.clients.confirmRevoke': 'Confirm Revoke',
-    'settings.clients.revokedToast': 'Revoked',
-    'settings.clients.revokeError': 'Failed to revoke client. Check your credentials and try again.',
-    'settings.deviceApproval.eyebrow': 'Client authorization',
-    'settings.deviceApproval.codeLabel': 'Device Code',
-    'settings.deviceApproval.lookingUp': 'Looking up…',
-    'settings.deviceApproval.client': 'Client',
-    'settings.deviceApproval.platform': 'Platform',
-    'settings.deviceApproval.scopes': 'Scopes',
-    'settings.deviceApproval.expiresAt': 'Expires At',
-    'settings.deviceApproval.deny': 'Deny',
-    'settings.deviceApproval.allow': 'Allow Device',
-    'settings.deviceApproval.approvedToast': 'Authorized',
-
-    // Auth / Login / Authorize Views
-    'login.title': 'Sign In',
-    'login.adminToken': 'Admin Token',
-    'login.totpCode': '2FA Code',
-    'login.totpHint': ' (Enter the 6-digit code from your authenticator app.)',
-    'login.submit': 'Sign In',
-    'login.verifyAndLogin': 'Verify & Sign In',
-    'login.invalidToken': 'Invalid admin token. Please check and try again.',
-    'login.failed': 'Sign-in failed. Please try again.',
-    'deviceAuth.eyebrow': 'Cross-device authorization',
-    'deviceAuth.title': 'Authorize New Device',
-    'deviceAuth.backToLogin': 'Back to Sign In',
-    'deviceAuth.codeLabel': 'Device Code',
-    'deviceAuth.lookupBtn': 'Find Device',
-    'deviceAuth.loading': 'Loading device authorization…',
-    'deviceAuth.qrAlt': 'Device authorization QR code',
-    'deviceAuth.codeHint': 'Device Code',
-    'deviceAuth.totpHint': ' (Enter the 6-digit 2FA code from your authenticator app.)',
-    'deviceAuth.statusPending': 'Pending',
-    'deviceAuth.statusExpired': 'Expired',
-    'deviceAuth.approvedMsg': 'Authorization approved. The device can now connect.',
-    'deviceAuth.deniedMsg': 'Device authorization denied.',
-    'deviceAuth.invalidCodeFormat': 'Please enter a device code in ABCD-EFGH format.',
-    'deviceAuth.codeInvalidOrExpired': 'Device code is invalid or has expired.',
-    'deviceAuth.lookupError': 'Unable to look up device code.',
-    'nativeAuth.eyebrow': 'Native client authorization',
-    'nativeAuth.title': 'Authorize TermFlow Client',
-    'nativeAuth.loading': 'Loading authorization request…',
-    'nativeAuth.server': 'Server',
-    'nativeAuth.keyFingerprint': 'Public Key Fingerprint',
-    'nativeAuth.allow': 'Allow Client',
-    'nativeAuth.invalidOrExpired': 'Authorization request is invalid or has expired.',
-    'nativeAuth.failed': 'Unable to complete authorization.',
-    'notFound.title': 'Page Not Found',
-    'notFound.back': 'Back to Dashboard',
-
-    // Agent Console & Panel & Chat
-    'agent.eyebrow': 'Agent',
-    'agent.title': 'Agent Console',
-    'agent.disabledTitle': 'Agent Broker Disabled',
-    'agent.disabledDesc': 'The server has not enabled Agent Broker capabilities.',
-    'agent.conversations.eyebrow': 'Conversations',
-    'agent.conversations.heading': 'Conversations',
-    'agent.chat.eyebrow': 'Agent Chat',
-    'agent.chat.bindingLabel': 'Binding {bindingId} · Term {termId}',
-    'agent.conversations.emptyBindings': 'No available Terms. Connect a Term in Computers first.',
-    'agent.conversations.empty': 'No conversations yet.',
-    'agent.conversations.tableAria': 'Agent conversations',
-    'agent.conversations.col.name': 'Conversation',
-    'agent.conversations.col.term': 'Term',
-    'agent.conversations.col.status': 'Status',
-    'agent.conversations.col.actions': 'Actions',
-    'agent.conversations.saveNameAria': 'Save conversation name',
-    'agent.conversations.cancelNameAria': 'Cancel rename',
-    'agent.conversations.pendingBadgeAria': '{count} pending approvals',
-    'agent.conversations.openInTermAria': 'Open in terminal: {title}',
-    'agent.conversations.openInTermTitle': 'Open in terminal',
-    'agent.conversations.renameAria': 'Rename conversation: {title}',
-    'agent.conversations.renameTitle': 'Rename conversation',
-    'agent.conversations.deleteAria': 'Delete conversation: {title}',
-    'agent.conversations.deleteTitle': 'Delete conversation',
-    'agent.conversations.deleteDialogTitle': 'Delete Conversation?',
-    'agent.conversations.deleteDialogDesc': 'This permanently deletes {title} and its entire message history.',
-    'agent.conversations.deleteConfirm': 'Delete',
-    'agent.conversations.loadError': 'Unable to load Agent conversations. Please try again later.',
-    'agent.conversations.loadErrorShort': 'Unable to load Agent conversations.',
-    'agent.conversations.createdToast': 'Conversation created.',
-    'agent.conversations.createError': 'Failed to create conversation. Please try again later.',
-    'agent.conversations.nameInvalid': 'Conversation name must be 1–255 characters.',
-    'agent.conversations.renamedToast': 'Conversation name updated.',
-    'agent.conversations.renameError': 'Failed to save conversation name. Please try again later.',
-    'agent.conversations.deletedToast': 'Conversation deleted.',
-    'agent.conversations.deleteError': 'Failed to delete conversation. Please try again later.',
-    'agent.conversations.termNameError': 'Unable to load Term names; some details may be incomplete.',
-    'agent.conversations.termUnknown': 'Unknown Term',
-    'agent.conversations.defaultTitle': 'Session {id}',
-    'agent.status.running': 'Running',
-    'agent.status.attention': 'Attention',
-    'agent.status.stopped': 'Stopped',
-    'agent.readiness.unconfigured': 'Unconfigured',
-    'agent.readiness.deployment_required': 'Deploy Needed',
-    'agent.readiness.activating': 'Activating',
-    'agent.readiness.ready': 'Ready',
-    'agent.readiness.unavailable': 'Unavailable',
-    'agent.backend.connecting': 'Connecting',
-    'agent.backend.idle': 'Idle',
-    'agent.backend.busy': 'Busy',
-    'agent.backend.retry': 'Retrying',
-    'agent.backend.ready': 'Ready',
-    'agent.backend.readyPanel': 'Ready',
-    'agent.backend.unavailable': 'Unavailable',
-    'agent.backend.offline': 'Offline',
-    'agent.backend.context_lost': 'Context Lost',
-    'agent.backend.reconciling': 'Recovering',
-    'agent.backend.closed': 'Closed',
-    'agent.panel.toolsAria': 'Agent tools',
-    'agent.panel.dragAria': 'Drag Agent panel',
-    'agent.panel.newConversation': 'New Session',
-    'agent.panel.history': 'History',
-    'agent.panel.settingsAria': 'Agent Settings',
-    'agent.panel.settingsTitle': 'Agent Settings: adjust accessible panes',
-    'agent.panel.closeAria': 'Close Agent',
-    'agent.panel.writePolicy': 'Approval',
-    'agent.panel.writePolicyGroupAria': 'Write approval policy',
-    'agent.panel.policyManual': 'Manual',
-    'agent.panel.policyAuto': 'Auto',
-    'agent.panel.loading': 'Loading Agent…',
-    'agent.panel.deploymentRequiredTitle': 'Agent Deployment Required',
-    'agent.panel.deploymentRequiredDesc': 'Ask the administrator to configure the runtime and model provider.',
-    'agent.panel.checkDeployment': 'Check Status',
-    'agent.panel.activatingTitle': 'Activating Agent',
-    'agent.panel.activatingDesc': 'Connecting to runtime; this will refresh automatically.',
-    'agent.panel.refreshStatus': 'Refresh Status',
-    'agent.panel.reEnableTitle': 'Re-enable Agent',
-    'agent.panel.reEnableDesc': 'Provider disclosure configuration has been updated.',
-    'agent.panel.reEnable': 'Re-enable',
-    'agent.panel.unavailableTitle': 'Agent Unavailable',
-    'agent.panel.recoveringTitle': 'Recovering Agent',
-    'agent.panel.recoveringDesc': 'Runtime is still connecting; this will refresh automatically.',
-    'agent.panel.reactivate': 'Reactivate',
-    'agent.panel.confirmAutoAria': 'Confirm Auto Approval',
-    'agent.panel.confirmAutoDesc': 'In Auto mode, Agent writes to authorized panes execute immediately without prompts.',
-    'agent.panel.confirmAutoBtn': 'Confirm Auto',
-    'agent.panel.historyCount': '{count} sessions',
-    'agent.panel.historyEmpty': 'No sessions yet',
-    'agent.panel.untitledConversation': 'Untitled Session',
-    'agent.panel.statusOpen': 'Active',
-    'agent.panel.emptyPrompt': 'Select a session or click "New Session".',
-    'agent.panel.defaultChatTitle': 'Agent Chat',
-    'agent.panel.savePanesError': 'Unable to save pane permissions.',
-    'agent.panel.writePolicyError': 'Unable to update write approval policy.',
-    'agent.panel.resizeAria': 'Resize Agent panel ({edge})',
-    'agent.panel.edge.n': 'top edge',
-    'agent.panel.edge.e': 'right edge',
-    'agent.panel.edge.s': 'bottom edge',
-    'agent.panel.edge.w': 'left edge',
-    'agent.panel.edge.ne': 'top-right corner',
-    'agent.panel.edge.se': 'bottom-right corner',
-    'agent.panel.edge.sw': 'bottom-left corner',
-    'agent.panel.edge.nw': 'top-left corner',
-    'agent.reason.stale_topology': 'Pane layout has changed. Please refresh and select again.',
-    'agent.reason.stale_binding_revision': 'Agent configuration has changed. Please refresh and try again.',
-    'agent.reason.topology_unavailable': 'Pane layout is currently unavailable. Connect the terminal and refresh.',
-    'agent.reason.disclosure_mismatch': 'Provider disclosure has changed. Please confirm again.',
-    'agent.reason.disclosure_required': 'Please confirm the data disclosure for the current provider.',
-    'agent.reason.binding_disclosure_stale': 'Provider disclosure has changed. Please confirm again.',
-    'agent.reason.binding_disclosure_required': 'Please confirm the data disclosure for the current provider.',
-    'agent.reason.provider_unavailable': 'Model provider is currently unavailable.',
-    'agent.reason.deployment_required': 'Ask the administrator to complete Agent service deployment.',
-    'agent.reason.sensitive_action_reauthentication_required': 'Authentication has expired. Please try again.',
-    'agent.reason.runtime_unreachable': 'Runtime is temporarily unreachable and will retry automatically.',
-    'agent.reason.mcp_not_connected': 'Runtime has not connected to the control plane yet and will retry automatically.',
-    'agent.reason.runtime_assignment_conflict': 'Runtime identity conflict. Click "Reactivate" to fix.',
-    'agent.reason.pipeline_start_failed': 'Runtime failed to start. Try again later or contact the administrator.',
-    'agent.reason.insufficient_scope': 'Current client lacks Agent permissions. Please sign in and authorize again.',
-    'agent.reason.default': 'Agent is temporarily unavailable. Please try again later.',
-    'agent.chat.backOverview': 'Agent Console',
-    'agent.chat.policyGroupAria': 'Session write approval policy',
-    'agent.chat.policyManual': 'Manual',
-    'agent.chat.policyAuto': 'Auto',
-    'agent.chat.canceling': 'Canceling…',
-    'agent.chat.cancelRun': 'Cancel Run',
-    'agent.chat.deleteConfirmAria': 'Confirm Delete Session',
-    'agent.chat.deleteConfirmDesc': 'This permanently deletes the session and its events.',
-    'agent.chat.deleteError': 'Failed to delete session. Please try again later.',
-    'agent.chat.policyConfirmAria': 'Confirm Session Auto Approval',
-    'agent.chat.policyConfirmDesc': 'In this session, Agent writes to authorized panes will execute immediately without prompts.',
-    'agent.chat.policyUpdateError': 'Unable to update approval policy.',
-    'agent.chat.cancelError': 'Failed to cancel run. Please try again later.',
-    'agent.chat.approvalPromptAria': 'Pending approvals',
-    'agent.chat.notFoundBanner': 'This session no longer exists and cannot be connected.',
-    'agent.chat.revokedBanner': 'Agent Binding was revoked and cannot be connected.',
-    'agent.chat.notFoundToast': 'This session does not exist or has been deleted.',
-    'agent.chat.forbiddenToast': 'This client does not have permission to access this session. Please sign in and authorize again.',
-    'agent.chat.recoveringToast': 'Reconnecting and catching up on messages…',
-    'agent.chat.historyUnavailable': 'Historical message content unavailable',
-    'agent.chat.emptyPrompt': 'Send a message to start chatting with the Agent.',
-    'agent.chat.roleSystem': 'System',
-    'agent.chat.systemContext': 'System Context',
-    'agent.chat.systemUnavailable': 'System context unavailable',
-    'agent.chat.roleUser': 'You',
-    'agent.chat.thinking': 'Thinking',
-    'agent.chat.thinkingStreaming': 'Thinking…',
-    'agent.chat.toolCall': 'Tool Call',
-    'agent.chat.defaultToolLabel': 'Call',
-    'agent.chat.toolInput': 'Input',
-    'agent.chat.toolDefaultsOmitted': 'Defaults omitted: {items}',
-    'agent.chat.toolOutput': 'Output',
-    'agent.chat.toolError': 'Error',
-    'agent.chat.stepStart': 'Step',
-    'agent.chat.toolStatus.completed': 'Done',
-    'agent.chat.toolStatus.failed': 'Failed',
-    'agent.chat.toolStatus.failedExec': 'Failed',
-    'agent.chat.toolStatus.running': 'Running',
-    'agent.chat.toolStatus.pending': 'Pending',
-    'agent.chat.collapseCode': 'Collapse diff ▴',
-    'agent.chat.collapseOutput': 'Collapse output ▴',
-    'agent.chat.expandLines': 'Expand {folded} more lines ({total} total) ▾',
-    'agent.chat.announce.separator': '; ',
-    'agent.chat.announce.toolCompleted': 'Tool {label} completed',
-    'agent.chat.announce.toolFailed': 'Tool {label} failed',
-    'agent.chat.announce.runFinished': 'Run finished',
-    'agent.chat.announce.runError': 'Run failed',
-    'agent.chat.announce.newApproval': 'New approval request received',
-    'agent.chat.announce.backendState': 'Backend state: {state}',
-    'agent.composer.inputAria': 'Message to Agent',
-    'agent.composer.sendAria': 'Send message',
-    'agent.composer.tooLong': 'Message exceeds maximum length ({max} bytes). Please shorten it.',
-    'agent.composer.unavailable': 'Backend runtime is not ready; cannot send messages right now.',
-    'agent.approval.state.pending': 'Pending',
-    'agent.approval.state.approved': 'Approved',
-    'agent.approval.state.denied': 'Rejected',
-    'agent.approval.state.expired': 'Expired',
-    'agent.approval.state.revoked': 'Undone',
-    'agent.approval.state.consumed': 'Executed',
-    'agent.approval.operation': 'Operation',
-    'agent.approval.hashPrefix': 'Digest #{hash}',
-    'agent.approval.expiresPrefix': 'Expires {expiry}',
-    'agent.approval.focusAction': 'Review in Panel',
-    'agent.approval.empty': 'No pending approvals',
-    'agent.approval.approve': 'Approve',
-    'agent.approval.deny': 'Reject',
-    'agent.approval.revoke': 'Undo',
-    'agent.approval.confirmTitle': 'Approve this request?',
-    'agent.approval.confirmDesc1': 'Once approved, the Agent will immediately execute ',
-    'agent.approval.confirmDesc2': '. This action cannot be undone.',
-    'agent.approval.unknownOp': 'unknown operation',
-    'agent.approval.criticalWarning': '⚠️ Critical Risk Warning: This operation is destructive. Please confirm carefully!',
-    'agent.approval.criticalAck': 'I understand this operation is destructive and confirm execution',
-    'agent.approval.confirmApprove': 'Confirm Approve',
-    'agent.approval.loadError': 'Unable to load approval list.',
-    'agent.approval.notFoundError': 'This approval request no longer exists.',
-    'agent.approval.expiredError': 'This approval request has expired.',
-    'agent.approval.stateChangedError': 'Approval state changed; list refreshed.',
-    'agent.approval.approvedToast': 'Approved.',
-    'agent.approval.deniedToast': 'Rejected.',
-    'agent.approval.revokedToast': 'Approval undone.',
-    'agent.risk.level4': 'Critical',
-    'agent.risk.level3': 'High Risk',
-    'agent.risk.level2': 'Med Risk',
-    'agent.risk.level1': 'Low Risk',
-    'agent.reauth.title': 'Re-authenticate Identity',
-    'agent.reauth.nativeHint': 'Please complete authentication in your system browser.',
-    'agent.reauth.webHint': 'To protect terminal security, please re-verify administrator identity before performing sensitive actions. Your action will resume automatically once verified.',
-    'agent.reauth.rootCredential': 'Root Credential',
-    'agent.reauth.totp': '2FA Code',
-    'agent.reauth.verify': 'Verify',
-    'agent.reauth.failed': 'Verification failed. Please try again.',
-    'agent.setup.title': 'Configure Term Agent',
-    'agent.setup.helpLabel': 'About Term Agent',
-    'agent.setup.enable': 'Enable Agent',
-    'agent.setup.settingUp': 'Configuring…',
-    'agent.setup.noProviderHelp': 'Model provider is not configured for this deployment. Contact the administrator.',
-    'agent.setup.providerHelp': 'The Agent uses the configured model {provider} · {model} to read authorized panes; writing commands still requires approval.',
-    'agent.setup.selectPaneError': 'Please select at least one active pane.',
-    'agent.setup.providerUnavailableError': 'Provider configuration is unavailable. Ask the administrator to complete deployment.',
-    'agent.panes.defaultLegend': 'Panes accessible to Agent',
-    'agent.panes.helpLabel': 'About Pane Permissions',
-    'agent.panes.helpText': 'A pane is a split terminal view (% ID). The Agent can only read checked panes; writes still require approval.',
-    'agent.panes.selectAll': 'Select All',
-    'agent.panes.clear': 'Clear',
-    'agent.panes.selectedCount': 'Selected {selected}/{total}',
-    'agent.panes.empty': 'No panes available. Connect the terminal and refresh.',
-    'agent.preview.title': 'Deployment Check',
-    'agent.preview.inputPlaceholder': 'Type a message…',
-    'agent.preview.reauthBtn': 'Re-authenticate Identity (Preview)',
-    'agent.preview.mobileKeybarHeading': 'Mobile Key Bar (MobileKeyBar Preview)',
-    'agent.preview.themePickerHeading': 'Geek Theme Switcher (10 Classic Palettes Preview)',
-    'agent.preview.sampleUserPrompt': 'Please run echo 1 in the currently allowed terminal and tell me the result.',
-    'agent.preview.sampleThinking1': 'The user wants me to run echo 1 in the terminal. I will list the panes first, verify write access, then send the command and wait for approval.',
-    'agent.preview.sampleAssistant1': 'I will check the available panes first, then run echo 1.',
-    'agent.preview.sampleAssistant2': 'Ready to write `echo 1` to pane %0; awaiting your confirmation.',
-    'agent.preview.sampleThinking2': 'Preparing to update configuration file and review patch diff.',
-    'agent.preview.sampleFinalText': 'Executed. Output is `1`.',
-  },
+  zh: zhMessages,
+  en: enMessages,
 }
 
 export const locale: DeepReadonly<Ref<Locale>> = readonly(currentLocale)
diff --git a/packages/client-ui/src/i18n/messages/en.ts b/packages/client-ui/src/i18n/messages/en.ts
new file mode 100644
index 00000000..eff4b02f
--- /dev/null
+++ b/packages/client-ui/src/i18n/messages/en.ts
@@ -0,0 +1,574 @@
+export const enMessages: Record<string, string> = {
+  // App Shell & Navigation
+  'app.skipToMain': 'Skip to main content',
+  'app.brandAria': 'TermFlow Dashboard',
+  'app.headerContext': 'Remote Terminal Control',
+  'app.switchLangAria': 'Switch Language',
+  'app.switchLangBadge': '中文',
+  'app.logout': 'Sign Out',
+  'nav.mainAria': 'Main navigation',
+  'nav.mobileAria': 'Mobile navigation',
+  'nav.dashboard': 'Dashboard',
+  'nav.computers': 'Computers',
+  'nav.settings': 'Settings',
+  'nav.agent': 'Agent Console',
+
+  // Dashboard
+  'dashboard.eyebrow': 'Live Status',
+  'dashboard.computerEyebrow': 'Computer',
+  'dashboard.title': 'Dashboard',
+  'dashboard.refresh': 'Refresh',
+  'dashboard.loading': 'Loading status…',
+  'dashboard.metricsAria': 'Key metrics',
+  'dashboard.metric.onlineTerms': 'Online Terms',
+  'dashboard.metric.totalTerms': '{count} total Terms',
+  'dashboard.metric.onlineTermsHelp': 'Currently online and controllable Terms ({count} total).',
+  'dashboard.metric.activePanes': 'Active Panes',
+  'dashboard.metric.activePanesHelp': 'Active panes across all online Terms.',
+  'dashboard.metric.interactions24h': '24h Interactions',
+  'dashboard.metric.interactions24hHelp': 'Interactions recorded by the control node over the past 24 hours.',
+  'dashboard.metric.computers': 'Computers',
+  'dashboard.metric.computersHelp': 'Computers registered to this control node ({count} online).',
+  'dashboard.loadError': 'Unable to load Dashboard.',
+  'dashboard.emptyTerms': 'No Terms on this Computer yet.',
+  'dashboard.openTermAria': 'Open terminal: {name}',
+  'dashboard.neverOnline': 'Never online',
+  'dashboard.windows': 'Windows',
+  'dashboard.panes': 'Panes',
+  'dashboard.deleteOfflineTermAria': 'Delete offline Term: {name}',
+  'dashboard.deleteError.online': 'Term is back online and cannot be deleted.',
+  'dashboard.deleteError.notFound': 'Term no longer exists; list refreshed.',
+  'dashboard.deleteError.generic': 'Unable to delete Term. Please try again.',
+  'dashboard.deleteDialog.title': 'Permanently delete offline Term?',
+  'dashboard.deleteDialog.desc1': 'This permanently removes remote registration and credentials for: ',
+  'dashboard.deleteDialog.desc2': 'This will not kill the local tmux session on the host Computer.',
+  'dashboard.deleteDialog.desc3': 'To restore remote access, run on the host Computer:',
+  'dashboard.deleteDialog.cleanupPending': 'Cleanup pending · Job {jobId}',
+  'dashboard.deleteDialog.deleting': 'Deleting…',
+  'dashboard.deleteDialog.confirm': 'Delete Remote Term',
+
+  // Status
+  'status.online': 'Online',
+  'status.offline': 'Offline',
+  'status.onlineCount': 'Online ({count})',
+  'status.offlineZero': 'Offline (0)',
+  'common.cancel': 'Cancel',
+  'common.confirm': 'Confirm',
+  'common.save': 'Save',
+  'common.close': 'Close',
+  'common.copy': 'Copy',
+  'common.copied': 'Copied',
+  'common.continue': 'Continue',
+  'common.retry': 'Retry',
+  'common.refresh': 'Refresh',
+  'common.loading': 'Loading…',
+  'common.unknown': 'Unknown',
+  'common.unavailable': 'Details unavailable',
+  'common.detailUnavailable': 'Details unavailable',
+  'common.actionFailed': 'Action failed. Please try again later.',
+
+  // Computers View
+  'computers.eyebrow': 'Devices & Enrollment',
+  'computers.title': 'Computers',
+  'computers.add': 'Add Computer',
+  'computers.loading': 'Loading Computers…',
+  'computers.loadError': 'Unable to load Computers.',
+  'computers.deletedToast': 'Deleted',
+  'computers.addedToast': 'Added',
+  'computers.deleteError': 'Unable to delete computer.',
+  'computers.tableAria': 'Registered Computers',
+  'computers.col.name': 'Name',
+  'computers.col.terms': 'Terms',
+  'computers.col.lastSeen': 'Last Seen',
+  'computers.col.registeredAt': 'Registered',
+  'computers.col.actions': 'Actions',
+  'computers.notRecorded': 'Not recorded',
+  'computers.cannotDeleteOnlineAria': '{name}: Cannot delete while a Term is online',
+  'computers.cannotDeleteOnlineTitle': 'Cannot delete while a Term is online',
+  'computers.deleteAria': 'Delete computer: {name}',
+  'computers.nameEditor.label': 'Computer display name',
+  'computers.nameEditor.editAria': 'Edit Computer name: {name}',
+  'computers.nameEditor.editTitle': 'Click to edit Computer name',
+  'computers.nameEditor.invalid': 'Display name must be 1–128 characters without control characters.',
+  'computers.nameEditor.saveError': 'Unable to save display name.',
+  'computers.enrollment.title': 'Add Computer',
+  'computers.enrollment.nameLabel': 'Computer Name',
+  'computers.enrollment.namePlaceholder': 'Enter computer name',
+  'computers.enrollment.creating': 'Creating…',
+  'computers.enrollment.create': 'Create',
+  'computers.enrollment.warning': 'This enrollment code is shown once and refreshes in {seconds}s.',
+  'computers.enrollment.codeHeading': 'Enrollment Code',
+  'computers.enrollment.codeAria': 'One-time enrollment code',
+  'computers.enrollment.commandHeading': 'Run in Terminal',
+  'computers.enrollment.commandHelpAria': 'Terminal command instructions',
+  'computers.enrollment.commandHelpTitle': 'Copy and run in a terminal on the computer with TermFlow installed',
+  'computers.enrollment.commandHelpText': 'Copy and run in a terminal on the computer with TermFlow installed.',
+  'computers.enrollment.copyCommand': 'Copy Command',
+  'computers.enrollment.pollError': 'Unable to check enrollment status.',
+  'computers.enrollment.nameInvalid': 'Computer name must be 1–128 characters without control characters.',
+  'computers.enrollment.refreshError': 'Failed to refresh enrollment code. Please retry.',
+  'computers.enrollment.createError': 'Unable to create enrollment code.',
+  'computers.deleteDialog.title': 'Delete Computer?',
+  'computers.deleteDialog.desc1': 'This permanently removes remote registration and credentials for: ',
+  'computers.deleteDialog.desc2': 'Once deleted, this computer must be re-enrolled for remote control.',
+  'computers.deleteDialog.confirm': 'Delete Computer',
+
+  // Terminal View & Controls
+  'terminal.srTitle': 'Remote Terminal',
+  'terminal.unreportedComputer': 'Computer Unreported',
+  'terminal.unreportedPrefix': 'Unreported',
+  'terminal.renameError': 'Unable to update Term name.',
+  'terminal.backDashboard': 'Back to Dashboard',
+  'terminal.nameLabel': 'Term Name',
+  'terminal.saveNameAria': 'Save Term name',
+  'terminal.cancelNameAria': 'Cancel editing Term name',
+  'terminal.editNameAria': 'Edit Term name: {title}',
+  'terminal.editNameTitle': 'Click to edit Term name',
+  'terminal.nameInvalid': 'Name must be 1–128 printable characters.',
+  'terminal.status.connecting': 'Connecting',
+  'terminal.status.connected': 'Connected',
+  'terminal.status.reconnecting': 'Reconnecting',
+  'terminal.status.closed': 'Disconnected',
+  'terminal.unlockViewport': 'Unlock Viewport',
+  'terminal.lockViewport': 'Lock Viewport',
+  'terminal.display.buttonAria': 'Display Settings',
+  'terminal.display.buttonLabel': 'Display',
+  'terminal.display.menuAria': 'Terminal display scale',
+  'terminal.display.font100': '100% Actual Size',
+  'terminal.display.fit': 'Fit Window',
+  'terminal.tmux.buttonLabel': 'tmux Actions',
+  'terminal.tmux.searchPlaceholder': 'Search actions…',
+  'terminal.tmux.shortcut': 'Shortcut',
+  'terminal.tmux.unbound': 'Unbound',
+  'terminal.tmux.action.split_left_right': 'Split Left / Right',
+  'terminal.tmux.action.split_top_bottom': 'Split Top / Bottom',
+  'terminal.tmux.action.new_window': 'New Window',
+  'terminal.tmux.action.select_left': 'Focus Left Pane',
+  'terminal.tmux.action.select_right': 'Focus Right Pane',
+  'terminal.tmux.action.select_up': 'Focus Up Pane',
+  'terminal.tmux.action.select_down': 'Focus Down Pane',
+  'terminal.tmux.action.toggle_zoom': 'Toggle Pane Zoom',
+  'terminal.tmux.action.copy_mode': 'Enter Copy Mode',
+  'terminal.tmux.action.close_pane': 'Close Pane',
+  'terminal.closePane.title': 'Close Pane?',
+  'terminal.closePane.desc': 'Close {name} ({id})? Unsaved work inside the pane may be lost.',
+  'terminal.closePane.confirm': 'Close Pane',
+  'terminal.canvas.aria': 'Term {id} terminal',
+  'terminal.canvas.reconnecting': 'Connection interrupted, reconnecting…',
+  'terminal.canvas.connecting': 'Connecting to terminal…',
+  'terminal.mobileKeybar.aria': 'Mobile modifier keys',
+  'terminal.mobileKeybar.locked': 'Locked',
+  'terminal.mobileKeybar.prefix': 'Prefix',
+  'terminal.mobileKeybar.prefixReported': 'Active Prefix: {prefix}',
+  'terminal.mobileKeybar.prefixUnreported': 'Prefix unreported',
+  'terminal.mobileKeybar.up': 'Up Arrow',
+  'terminal.mobileKeybar.down': 'Down Arrow',
+  'terminal.mobileKeybar.left': 'Left Arrow',
+  'terminal.mobileKeybar.right': 'Right Arrow',
+  'terminal.mobileKeybar.interrupt': 'Interrupt (Ctrl+C)',
+  'terminal.mobileKeybar.eof': 'EOF (Ctrl+D)',
+  'terminal.mobileKeybar.enter': 'Enter',
+  'terminal.error.instance_offline': 'Term is currently offline; cannot open terminal.',
+  'terminal.error.unauthorized': 'Session expired. Please sign in again.',
+  'terminal.error.backpressure': 'Terminal is busy. Please try again later.',
+  'terminal.error.target_not_found': 'Target pane no longer exists. Please refresh.',
+  'terminal.error.rate_limited': 'Too many requests. Please try again later.',
+  'terminal.error.stream_gap': 'Connection re-established; waiting for terminal redraw.',
+  'terminal.error.default': 'A terminal error occurred. Please try again later.',
+  'terminal.closed.replaced': 'This terminal has been taken over by another authenticated connection.',
+  'terminal.closed.default': 'Terminal connection closed.',
+
+  // Settings View
+  'settings.eyebrow': 'Settings',
+  'settings.title': 'Settings',
+  'settings.appearance.eyebrow': 'Appearance',
+  'settings.appearance.heading': 'Appearance Theme',
+  'settings.deviceConnection.eyebrow': 'Device Connection',
+  'settings.deviceConnection.heading': 'Device Connection',
+  'settings.deviceConnection.note': 'Security settings can only be changed from an authenticated web admin session; this device only stores its own credentials.',
+  'settings.theme.graphite-signal': 'Graphite Signal',
+  'settings.theme.cloud-cobalt': 'Cloud Cobalt',
+  'settings.theme.midnight-indigo': 'Midnight Indigo',
+  'settings.server.eyebrow': 'Server',
+  'settings.server.heading': 'Relay Server',
+  'settings.server.urlLabel': 'Server URL',
+  'settings.server.qrAria': 'Show server URL QR code',
+  'settings.server.qrTitle': 'Server URL QR Code',
+  'settings.qr.closeAria': 'Close QR code',
+  'settings.totp.eyebrow': 'Two Factor Authentication',
+  'settings.totp.securityCheckEyebrow': 'Security Check',
+  'settings.totp.heading': 'Two-Factor Authentication',
+  'settings.totp.helpLabel': 'About Two-Factor Authentication',
+  'settings.totp.helpText': 'Bind an authenticator app to require a one-time code for new logins and client authorizations.',
+  'settings.totp.bound': 'Authenticator Bound',
+  'settings.totp.reconfigure': 'Reconfigure',
+  'settings.totp.inactive': 'Inactive',
+  'settings.totp.loading': 'Loading security status…',
+  'settings.totp.unavailable': 'Two-factor authentication is temporarily unavailable. Contact the server administrator.',
+  'settings.totp.activate': 'Enable 2FA',
+  'settings.totp.protectionLabel': 'Require 2FA at Sign-In',
+  'settings.totp.protectionHelpLabel': 'About 2FA Sign-In Protection',
+  'settings.totp.protectionHelpText': 'When enabled, new admin sign-ins and client authorizations require a 6-digit code from your authenticator app.',
+  'settings.totp.disableTitle': 'Disable 2FA at Sign-In',
+  'settings.totp.adminToken': 'Admin Token',
+  'settings.totp.code': '2FA Code',
+  'settings.totp.verifying': 'Verifying…',
+  'settings.totp.verifyFailed': 'Verification failed. Check your credentials and try again.',
+  'settings.totp.setupKeyToggle': 'Cannot scan? Use setup key',
+  'settings.totp.setupKeyTitle': 'Setup Key',
+  'settings.totp.copyKey': 'Copy Key',
+  'settings.totp.backToSettings': 'Back to Settings',
+  'settings.totp.stepsAria': 'Activation steps',
+  'settings.totp.step1': 'Verify Identity',
+  'settings.totp.step2': 'Bind Authenticator',
+  'settings.totp.step3': 'Enable Sign-In Guard',
+  'settings.totp.wizardComplete': 'Setup Complete',
+  'settings.totp.wizardProgress': 'Step {step} of 3',
+  'settings.totp.wizardTitle.bind': 'Bind Authenticator',
+  'settings.totp.wizardTitle.enabled': '2FA Enabled',
+  'settings.totp.wizardTitle.enableProtection': 'Enable Sign-In Guard',
+  'settings.totp.wizardTitle.reconfigure': 'Reconfigure Authenticator',
+  'settings.totp.wizardTitle.verifyAdmin': 'Verify Admin Identity',
+  'settings.totp.qrAlt': 'Authenticator setup QR code',
+  'settings.totp.confirmCodeLabel': 'Authenticator Code',
+  'settings.totp.confirmBind': 'Confirm Binding',
+  'settings.totp.currentCodeLabel': 'Current Authenticator Code',
+  'settings.totp.codeInvalidOrExpired': 'Invalid code or expired setup session. Please try again.',
+  'settings.clients.eyebrow': 'Access',
+  'settings.clients.heading': 'Authorized Clients',
+  'settings.clients.authorizeNew': 'Authorize Client',
+  'settings.clients.authorizeNewTitle': 'Enter a device code to approve another client.',
+  'settings.clients.empty': 'No mobile or desktop clients authorized yet.',
+  'settings.clients.revoke': 'Revoke',
+  'settings.clients.revokeTitle': 'Revoke Client',
+  'settings.clients.revokeDesc': 'This revokes {name} without affecting other devices or active terminal sessions.',
+  'settings.clients.confirmRevoke': 'Confirm Revoke',
+  'settings.clients.revokedToast': 'Revoked',
+  'settings.clients.revokeError': 'Failed to revoke client. Check your credentials and try again.',
+  'settings.deviceApproval.eyebrow': 'Client authorization',
+  'settings.deviceApproval.codeLabel': 'Device Code',
+  'settings.deviceApproval.lookingUp': 'Looking up…',
+  'settings.deviceApproval.client': 'Client',
+  'settings.deviceApproval.platform': 'Platform',
+  'settings.deviceApproval.scopes': 'Scopes',
+  'settings.deviceApproval.expiresAt': 'Expires At',
+  'settings.deviceApproval.deny': 'Deny',
+  'settings.deviceApproval.allow': 'Allow Device',
+  'settings.deviceApproval.approvedToast': 'Authorized',
+
+  // Auth / Login / Authorize Views
+  'login.title': 'Sign In',
+  'login.adminToken': 'Admin Token',
+  'login.totpCode': '2FA Code',
+  'login.totpHint': ' (Enter the 6-digit code from your authenticator app.)',
+  'login.submit': 'Sign In',
+  'login.verifyAndLogin': 'Verify & Sign In',
+  'login.invalidToken': 'Invalid admin token. Please check and try again.',
+  'login.failed': 'Sign-in failed. Please try again.',
+  'deviceAuth.eyebrow': 'Cross-device authorization',
+  'deviceAuth.title': 'Authorize New Device',
+  'deviceAuth.backToLogin': 'Back to Sign In',
+  'deviceAuth.codeLabel': 'Device Code',
+  'deviceAuth.lookupBtn': 'Find Device',
+  'deviceAuth.loading': 'Loading device authorization…',
+  'deviceAuth.qrAlt': 'Device authorization QR code',
+  'deviceAuth.codeHint': 'Device Code',
+  'deviceAuth.totpHint': ' (Enter the 6-digit 2FA code from your authenticator app.)',
+  'deviceAuth.statusPending': 'Pending',
+  'deviceAuth.statusExpired': 'Expired',
+  'deviceAuth.approvedMsg': 'Authorization approved. The device can now connect.',
+  'deviceAuth.deniedMsg': 'Device authorization denied.',
+  'deviceAuth.invalidCodeFormat': 'Please enter a device code in ABCD-EFGH format.',
+  'deviceAuth.codeInvalidOrExpired': 'Device code is invalid or has expired.',
+  'deviceAuth.lookupError': 'Unable to look up device code.',
+  'nativeAuth.eyebrow': 'Native client authorization',
+  'nativeAuth.title': 'Authorize TermFlow Client',
+  'nativeAuth.loading': 'Loading authorization request…',
+  'nativeAuth.server': 'Server',
+  'nativeAuth.keyFingerprint': 'Public Key Fingerprint',
+  'nativeAuth.allow': 'Allow Client',
+  'nativeAuth.invalidOrExpired': 'Authorization request is invalid or has expired.',
+  'nativeAuth.failed': 'Unable to complete authorization.',
+  'nativeConnect.eyebrow': 'Remote Connection',
+  'nativeConnect.title': 'Connect to Server',
+  'nativeConnect.serverUrl': 'Server URL',
+  'nativeConnect.browserLogin': 'Browser Sign-In',
+  'nativeConnect.waitingBrowser': 'Waiting for Browser Approval',
+  'nativeConnect.browserLoginTitle': 'Sign in and approve this client via the system browser on this device.',
+  'nativeConnect.deviceAuth': 'Authorize on Another Device',
+  'nativeConnect.deviceAuthTitle': 'Complete authorization from another signed-in device without opening a local browser.',
+  'nativeConnect.connectedToast': 'Connected',
+  'nativeConnect.error.http_capability_denied': 'Client network permission configuration is invalid. Please upgrade or reinstall TermFlow.',
+  'nativeConnect.error.offline': 'Unable to connect to the server. Check the server URL, network connection, and whether the service is running.',
+  'nativeConnect.error.issuer_mismatch': 'Server identity does not match the entered URL. Check your reverse proxy configuration and try again.',
+  'nativeConnect.error.cancelled': 'Authorization request was cancelled. Please try again and complete approval in your system browser.',
+  'nativeConnect.error.callback': 'Did not receive a valid TermFlow callback. Ensure your system allows termflow:// links to open this app and try again.',
+  'nativeConnect.error.https_required': 'Remote servers must use HTTPS; HTTP is only allowed for local loopback servers.',
+  'nativeConnect.error.verify_timeout': 'Connection verification timed out. Check if the server is online and try again.',
+  'nativeConnect.error.default': 'Unable to complete remote control registration. Check the server URL and browser approval status, then try again.',
+  'nativeDevice.title': 'Authorize on Another Device',
+  'nativeDevice.codeCountdown': 'Device Code ({seconds}s)',
+  'nativeDevice.codeExpired': 'Device Code (Expired)',
+  'nativeDevice.copyCode': 'Copy device code',
+  'nativeDevice.serverUrl': 'Server URL',
+  'nativeDevice.back': 'Back',
+  'nativeDevice.regenerate': 'Regenerate',
+  'nativeDevice.status.waiting': 'Waiting for browser confirmation…',
+  'nativeDevice.status.slowDown': 'Server busy, polling slowed down…',
+  'nativeDevice.status.opening': 'Authorized, opening workspace…',
+  'nativeDevice.status.copied': 'Device code copied.',
+  'nativeDevice.status.cancelled': 'Cancelled',
+  'nativeDevice.error.http_capability_denied': 'Client network permission configuration is invalid. Please upgrade or reinstall TermFlow.',
+  'nativeDevice.error.authorization_pending': 'Browser confirmation is still pending. Please wait.',
+  'nativeDevice.error.slow_down': 'Requests are too frequent; polling has been slowed down automatically.',
+  'nativeDevice.error.access_denied': 'Authorization was denied in the browser. Please regenerate the device code.',
+  'nativeDevice.error.expired_token': 'Device code has expired. Please regenerate.',
+  'nativeDevice.error.offline': 'Unable to connect to the server. Check your network and try again.',
+  'nativeDevice.error.issuer_mismatch': 'Server identity does not match the saved URL. Go back and check your reverse proxy configuration.',
+  'nativeDevice.error.authorization_verify_timeout': 'Connection verification timed out. Check if the server is online and try again.',
+  'nativeDevice.error.default': 'Device authorization did not complete. Please regenerate the device code and try again.',
+  'notFound.title': 'Page Not Found',
+  'notFound.back': 'Back to Dashboard',
+
+  // Agent Console & Panel & Chat
+  'agent.eyebrow': 'Agent',
+  'agent.title': 'Agent Console',
+  'agent.disabledTitle': 'Agent Broker Disabled',
+  'agent.disabledDesc': 'The server has not enabled Agent Broker capabilities.',
+  'agent.conversations.eyebrow': 'Conversations',
+  'agent.conversations.heading': 'Conversations',
+  'agent.chat.eyebrow': 'Agent Chat',
+  'agent.chat.bindingLabel': 'Binding {bindingId} · Term {termId}',
+  'agent.conversations.emptyBindings': 'No available Terms. Connect a Term in Computers first.',
+  'agent.conversations.empty': 'No conversations yet.',
+  'agent.conversations.tableAria': 'Agent conversations',
+  'agent.conversations.col.name': 'Conversation',
+  'agent.conversations.col.term': 'Term',
+  'agent.conversations.col.status': 'Status',
+  'agent.conversations.col.actions': 'Actions',
+  'agent.conversations.saveNameAria': 'Save conversation name',
+  'agent.conversations.cancelNameAria': 'Cancel rename',
+  'agent.conversations.pendingBadgeAria': '{count} pending approvals',
+  'agent.conversations.openInTermAria': 'Open in terminal: {title}',
+  'agent.conversations.openInTermTitle': 'Open in terminal',
+  'agent.conversations.renameAria': 'Rename conversation: {title}',
+  'agent.conversations.renameTitle': 'Rename conversation',
+  'agent.conversations.deleteAria': 'Delete conversation: {title}',
+  'agent.conversations.deleteTitle': 'Delete conversation',
+  'agent.conversations.deleteDialogTitle': 'Delete Conversation?',
+  'agent.conversations.deleteDialogDesc': 'This permanently deletes {title} and its entire message history.',
+  'agent.conversations.deleteConfirm': 'Delete',
+  'agent.conversations.loadError': 'Unable to load Agent conversations. Please try again later.',
+  'agent.conversations.loadErrorShort': 'Unable to load Agent conversations.',
+  'agent.conversations.createdToast': 'Conversation created.',
+  'agent.conversations.createError': 'Failed to create conversation. Please try again later.',
+  'agent.conversations.nameInvalid': 'Conversation name must be 1–255 characters.',
+  'agent.conversations.renamedToast': 'Conversation name updated.',
+  'agent.conversations.renameError': 'Failed to save conversation name. Please try again later.',
+  'agent.conversations.deletedToast': 'Conversation deleted.',
+  'agent.conversations.deleteError': 'Failed to delete conversation. Please try again later.',
+  'agent.conversations.termNameError': 'Unable to load Term names; some details may be incomplete.',
+  'agent.conversations.termUnknown': 'Unknown Term',
+  'agent.conversations.defaultTitle': 'Session {id}',
+  'agent.status.running': 'Running',
+  'agent.status.attention': 'Attention',
+  'agent.status.stopped': 'Stopped',
+  'agent.readiness.unconfigured': 'Unconfigured',
+  'agent.readiness.deployment_required': 'Deploy Needed',
+  'agent.readiness.activating': 'Activating',
+  'agent.readiness.ready': 'Ready',
+  'agent.readiness.unavailable': 'Unavailable',
+  'agent.backend.connecting': 'Connecting',
+  'agent.backend.idle': 'Idle',
+  'agent.backend.busy': 'Busy',
+  'agent.backend.retry': 'Retrying',
+  'agent.backend.ready': 'Ready',
+  'agent.backend.readyPanel': 'Ready',
+  'agent.backend.unavailable': 'Unavailable',
+  'agent.backend.offline': 'Offline',
+  'agent.backend.context_lost': 'Context Lost',
+  'agent.backend.reconciling': 'Recovering',
+  'agent.backend.closed': 'Closed',
+  'agent.panel.aria': 'Term Agent',
+  'agent.panel.toolsAria': 'Agent tools',
+  'agent.panel.dragAria': 'Drag Agent panel',
+  'agent.panel.newConversation': 'New Session',
+  'agent.panel.history': 'History',
+  'agent.panel.settingsAria': 'Agent Settings',
+  'agent.panel.settingsTitle': 'Agent Settings: adjust accessible panes',
+  'agent.panel.closeAria': 'Close Agent',
+  'agent.panel.writePolicy': 'Approval',
+  'agent.panel.writePolicyGroupAria': 'Write approval policy',
+  'agent.panel.policyManual': 'Manual',
+  'agent.panel.policyAuto': 'Auto',
+  'agent.panel.loading': 'Loading Agent…',
+  'agent.panel.deploymentRequiredTitle': 'Agent Deployment Required',
+  'agent.panel.deploymentRequiredDesc': 'Ask the administrator to configure the runtime and model provider.',
+  'agent.panel.checkDeployment': 'Check Status',
+  'agent.panel.activatingTitle': 'Activating Agent',
+  'agent.panel.activatingDesc': 'Connecting to runtime; this will refresh automatically.',
+  'agent.panel.refreshStatus': 'Refresh Status',
+  'agent.panel.reEnableTitle': 'Re-enable Agent',
+  'agent.panel.reEnableDesc': 'Provider disclosure configuration has been updated.',
+  'agent.panel.reEnable': 'Re-enable',
+  'agent.panel.unavailableTitle': 'Agent Unavailable',
+  'agent.panel.recoveringTitle': 'Recovering Agent',
+  'agent.panel.recoveringDesc': 'Runtime is still connecting; this will refresh automatically.',
+  'agent.panel.reactivate': 'Reactivate',
+  'agent.panel.confirmAutoAria': 'Confirm Auto Approval',
+  'agent.panel.confirmAutoDesc': 'In Auto mode, Agent writes to authorized panes execute immediately without prompts.',
+  'agent.panel.confirmAutoBtn': 'Confirm Auto',
+  'agent.panel.historyCount': '{count} sessions',
+  'agent.panel.historyEmpty': 'No sessions yet',
+  'agent.panel.untitledConversation': 'Untitled Session',
+  'agent.panel.statusOpen': 'Active',
+  'agent.panel.emptyPrompt': 'Select a session or click "New Session".',
+  'agent.panel.defaultChatTitle': 'Agent Chat',
+  'agent.panel.savePanesError': 'Unable to save pane permissions.',
+  'agent.panel.writePolicyError': 'Unable to update write approval policy.',
+  'agent.panel.resizeAria': 'Resize Agent panel ({edge})',
+  'agent.panel.edge.n': 'top edge',
+  'agent.panel.edge.e': 'right edge',
+  'agent.panel.edge.s': 'bottom edge',
+  'agent.panel.edge.w': 'left edge',
+  'agent.panel.edge.ne': 'top-right corner',
+  'agent.panel.edge.se': 'bottom-right corner',
+  'agent.panel.edge.sw': 'bottom-left corner',
+  'agent.panel.edge.nw': 'top-left corner',
+  'agent.reason.stale_topology': 'Pane layout has changed. Please refresh and select again.',
+  'agent.reason.stale_binding_revision': 'Agent configuration has changed. Please refresh and try again.',
+  'agent.reason.topology_unavailable': 'Pane layout is currently unavailable. Connect the terminal and refresh.',
+  'agent.reason.disclosure_mismatch': 'Provider disclosure has changed. Please confirm again.',
+  'agent.reason.disclosure_required': 'Please confirm the data disclosure for the current provider.',
+  'agent.reason.binding_disclosure_stale': 'Provider disclosure has changed. Please confirm again.',
+  'agent.reason.binding_disclosure_required': 'Please confirm the data disclosure for the current provider.',
+  'agent.reason.provider_unavailable': 'Model provider is currently unavailable.',
+  'agent.reason.deployment_required': 'Ask the administrator to complete Agent service deployment.',
+  'agent.reason.sensitive_action_reauthentication_required': 'Authentication has expired. Please try again.',
+  'agent.reason.runtime_unreachable': 'Runtime is temporarily unreachable and will retry automatically.',
+  'agent.reason.mcp_not_connected': 'Runtime has not connected to the control plane yet and will retry automatically.',
+  'agent.reason.runtime_assignment_conflict': 'Runtime identity conflict. Click "Reactivate" to fix.',
+  'agent.reason.pipeline_start_failed': 'Runtime failed to start. Try again later or contact the administrator.',
+  'agent.reason.insufficient_scope': 'Current client lacks Agent permissions. Please sign in and authorize again.',
+  'agent.reason.default': 'Agent is temporarily unavailable. Please try again later.',
+  'agent.chat.backOverview': 'Agent Console',
+  'agent.chat.policyGroupAria': 'Session write approval policy',
+  'agent.chat.policyManual': 'Manual',
+  'agent.chat.policyAuto': 'Auto',
+  'agent.chat.canceling': 'Canceling…',
+  'agent.chat.cancelRun': 'Cancel Run',
+  'agent.chat.deleteConfirmAria': 'Confirm Delete Session',
+  'agent.chat.deleteConfirmDesc': 'This permanently deletes the session and its events.',
+  'agent.chat.deleteError': 'Failed to delete session. Please try again later.',
+  'agent.chat.policyConfirmAria': 'Confirm Session Auto Approval',
+  'agent.chat.policyConfirmDesc': 'In this session, Agent writes to authorized panes will execute immediately without prompts.',
+  'agent.chat.policyUpdateError': 'Unable to update approval policy.',
+  'agent.chat.cancelError': 'Failed to cancel run. Please try again later.',
+  'agent.chat.approvalPromptAria': 'Pending approvals',
+  'agent.chat.notFoundBanner': 'This session no longer exists and cannot be connected.',
+  'agent.chat.revokedBanner': 'Agent Binding was revoked and cannot be connected.',
+  'agent.chat.notFoundToast': 'This session does not exist or has been deleted.',
+  'agent.chat.forbiddenToast': 'This client does not have permission to access this session. Please sign in and authorize again.',
+  'agent.chat.recoveringToast': 'Reconnecting and catching up on messages…',
+  'agent.chat.historyUnavailable': 'Historical message content unavailable',
+  'agent.chat.emptyPrompt': 'Send a message to start chatting with the Agent.',
+  'agent.chat.roleSystem': 'System',
+  'agent.chat.systemContext': 'System Context',
+  'agent.chat.systemUnavailable': 'System context unavailable',
+  'agent.chat.roleUser': 'You',
+  'agent.chat.thinking': 'Thinking',
+  'agent.chat.thinkingStreaming': 'Thinking…',
+  'agent.chat.toolCall': 'Tool Call',
+  'agent.chat.defaultToolLabel': 'Call',
+  'agent.chat.toolInput': 'Input',
+  'agent.chat.toolDefaultsOmitted': 'Defaults omitted: {items}',
+  'agent.chat.toolOutput': 'Output',
+  'agent.chat.toolError': 'Error',
+  'agent.chat.stepStart': 'Step',
+  'agent.chat.toolStatus.completed': 'Done',
+  'agent.chat.toolStatus.failed': 'Failed',
+  'agent.chat.toolStatus.failedExec': 'Failed',
+  'agent.chat.toolStatus.running': 'Running',
+  'agent.chat.toolStatus.pending': 'Pending',
+  'agent.chat.collapseCode': 'Collapse diff ▴',
+  'agent.chat.collapseOutput': 'Collapse output ▴',
+  'agent.chat.expandLines': 'Expand {folded} more lines ({total} total) ▾',
+  'agent.chat.announce.separator': '; ',
+  'agent.chat.announce.toolCompleted': 'Tool {label} completed',
+  'agent.chat.announce.toolFailed': 'Tool {label} failed',
+  'agent.chat.announce.runFinished': 'Run finished',
+  'agent.chat.announce.runError': 'Run failed',
+  'agent.chat.announce.newApproval': 'New approval request received',
+  'agent.chat.announce.backendState': 'Backend state: {state}',
+  'agent.composer.inputAria': 'Message to Agent',
+  'agent.composer.sendAria': 'Send message',
+  'agent.composer.tooLong': 'Message exceeds maximum length ({max} bytes). Please shorten it.',
+  'agent.composer.unavailable': 'Backend runtime is not ready; cannot send messages right now.',
+  'agent.approval.state.pending': 'Pending',
+  'agent.approval.state.approved': 'Approved',
+  'agent.approval.state.denied': 'Rejected',
+  'agent.approval.state.expired': 'Expired',
+  'agent.approval.state.revoked': 'Undone',
+  'agent.approval.state.consumed': 'Executed',
+  'agent.approval.pane': 'Pane',
+  'agent.approval.operation': 'Operation',
+  'agent.approval.hashPrefix': 'Digest #{hash}',
+  'agent.approval.expiresPrefix': 'Expires {expiry}',
+  'agent.approval.focusAction': 'Review in Panel',
+  'agent.approval.empty': 'No pending approvals',
+  'agent.approval.approve': 'Approve',
+  'agent.approval.deny': 'Reject',
+  'agent.approval.revoke': 'Undo',
+  'agent.approval.confirmTitle': 'Approve this request?',
+  'agent.approval.confirmDesc1': 'Once approved, the Agent will immediately execute ',
+  'agent.approval.confirmDesc2': '. This action cannot be undone.',
+  'agent.approval.unknownOp': 'unknown operation',
+  'agent.approval.criticalWarning': '⚠️ Critical Risk Warning: This operation is destructive. Please confirm carefully!',
+  'agent.approval.criticalAck': 'I understand this operation is destructive and confirm execution',
+  'agent.approval.confirmApprove': 'Confirm Approve',
+  'agent.approval.loadError': 'Unable to load approval list.',
+  'agent.approval.notFoundError': 'This approval request no longer exists.',
+  'agent.approval.expiredError': 'This approval request has expired.',
+  'agent.approval.stateChangedError': 'Approval state changed; list refreshed.',
+  'agent.approval.approvedToast': 'Approved.',
+  'agent.approval.deniedToast': 'Rejected.',
+  'agent.approval.revokedToast': 'Approval undone.',
+  'agent.risk.level4': 'Critical',
+  'agent.risk.level3': 'High Risk',
+  'agent.risk.level2': 'Med Risk',
+  'agent.risk.level1': 'Low Risk',
+  'agent.reauth.title': 'Re-authenticate Identity',
+  'agent.reauth.nativeHint': 'Please complete authentication in your system browser.',
+  'agent.reauth.webHint': 'To protect terminal security, please re-verify administrator identity before performing sensitive actions. Your action will resume automatically once verified.',
+  'agent.reauth.rootCredential': 'Root Credential',
+  'agent.reauth.totp': '2FA Code',
+  'agent.reauth.verify': 'Verify',
+  'agent.reauth.failed': 'Verification failed. Please try again.',
+  'agent.setup.title': 'Configure Term Agent',
+  'agent.setup.helpLabel': 'About Term Agent',
+  'agent.setup.enable': 'Enable Agent',
+  'agent.setup.settingUp': 'Configuring…',
+  'agent.setup.noProviderHelp': 'Model provider is not configured for this deployment. Contact the administrator.',
+  'agent.setup.providerHelp': 'The Agent uses the configured model {provider} · {model} to read authorized panes; writing commands still requires approval.',
+  'agent.setup.selectPaneError': 'Please select at least one active pane.',
+  'agent.setup.providerUnavailableError': 'Provider configuration is unavailable. Ask the administrator to complete deployment.',
+  'agent.panes.defaultLegend': 'Panes accessible to Agent',
+  'agent.panes.helpLabel': 'About Pane Permissions',
+  'agent.panes.helpText': 'A pane is a split terminal view (% ID). The Agent can only read checked panes; writes still require approval.',
+  'agent.panes.selectAll': 'Select All',
+  'agent.panes.clear': 'Clear',
+  'agent.panes.selectedCount': 'Selected {selected}/{total}',
+  'agent.panes.empty': 'No panes available. Connect the terminal and refresh.',
+  'agent.preview.title': 'Deployment Check',
+  'agent.preview.inputPlaceholder': 'Type a message…',
+  'agent.preview.reauthBtn': 'Re-authenticate Identity (Preview)',
+  'agent.preview.mobileKeybarHeading': 'Mobile Key Bar (MobileKeyBar Preview)',
+  'agent.preview.themePickerHeading': 'Geek Theme Switcher (10 Classic Palettes Preview)',
+  'agent.preview.sampleUserPrompt': 'Please run echo 1 in the currently allowed terminal and tell me the result.',
+  'agent.preview.sampleThinking1': 'The user wants me to run echo 1 in the terminal. I will list the panes first, verify write access, then send the command and wait for approval.',
+  'agent.preview.sampleAssistant1': 'I will check the available panes first, then run echo 1.',
+  'agent.preview.sampleAssistant2': 'Ready to write `echo 1` to pane %0; awaiting your confirmation.',
+  'agent.preview.sampleThinking2': 'Preparing to update configuration file and review patch diff.',
+  'agent.preview.sampleFinalText': 'Executed. Output is `1`.',
+}
+export default enMessages
diff --git a/packages/client-ui/src/i18n/messages/zh.ts b/packages/client-ui/src/i18n/messages/zh.ts
new file mode 100644
index 00000000..6b4cb273
--- /dev/null
+++ b/packages/client-ui/src/i18n/messages/zh.ts
@@ -0,0 +1,574 @@
+export const zhMessages: Record<string, string> = {
+  // App Shell & Navigation
+  'app.skipToMain': '跳到主要内容',
+  'app.brandAria': 'TermFlow 控制中心',
+  'app.headerContext': '远程终端控制',
+  'app.switchLangAria': '切换语言',
+  'app.switchLangBadge': 'EN',
+  'app.logout': '退出登录',
+  'nav.mainAria': '主导航',
+  'nav.mobileAria': '移动端导航',
+  'nav.dashboard': '控制中心',
+  'nav.computers': '电脑管理',
+  'nav.settings': '设置',
+  'nav.agent': 'Agent 控制台',
+
+  // Dashboard
+  'dashboard.eyebrow': '实时状态',
+  'dashboard.computerEyebrow': '计算节点',
+  'dashboard.title': '控制中心',
+  'dashboard.refresh': '刷新',
+  'dashboard.loading': '正在读取状态…',
+  'dashboard.metricsAria': '关键指标',
+  'dashboard.metric.onlineTerms': '在线 Terms',
+  'dashboard.metric.totalTerms': '共 {count} Terms',
+  'dashboard.metric.onlineTermsHelp': '当前在线并可远程控制的 Term，共 {count} 个 Term。',
+  'dashboard.metric.activePanes': '活动 Panes',
+  'dashboard.metric.activePanesHelp': '在线 Term 中当前处于活动状态的 Pane 数量。',
+  'dashboard.metric.interactions24h': '24 小时交互',
+  'dashboard.metric.interactions24hHelp': '过去 24 小时内由控制节点记录的交互次数。',
+  'dashboard.metric.computers': 'Computers',
+  'dashboard.metric.computersHelp': '已注册到当前控制节点的 Computer 数量，其中 {count} 台在线。',
+  'dashboard.loadError': '无法加载控制中心。',
+  'dashboard.emptyTerms': '这台 Computer 还没有 Term。',
+  'dashboard.openTermAria': '打开终端：{name}',
+  'dashboard.neverOnline': '尚未在线',
+  'dashboard.windows': '窗口',
+  'dashboard.panes': '窗格',
+  'dashboard.deleteOfflineTermAria': '删除离线 Term：{name}',
+  'dashboard.deleteError.online': 'Term 已重新上线，无法删除。',
+  'dashboard.deleteError.notFound': 'Term 已不存在；列表已按服务器状态刷新。',
+  'dashboard.deleteError.generic': '无法删除 Term，请重试。',
+  'dashboard.deleteDialog.title': '永久删除离线 Term？',
+  'dashboard.deleteDialog.desc1': '将永久删除远端注册和控制凭据：',
+  'dashboard.deleteDialog.desc2': '这不会删除本地 tmux Session；它仍可能在所属 Computer 上运行。',
+  'dashboard.deleteDialog.desc3': '如需恢复远程访问，请在所属 Computer 上运行：',
+  'dashboard.deleteDialog.cleanupPending': '清理待完成 · 任务 {jobId}',
+  'dashboard.deleteDialog.deleting': '正在删除…',
+  'dashboard.deleteDialog.confirm': '永久删除远程 Term',
+
+  // Status
+  'status.online': '在线',
+  'status.offline': '离线',
+  'status.onlineCount': '在线 ({count})',
+  'status.offlineZero': '离线 (0)',
+  'common.cancel': '取消',
+  'common.confirm': '确认',
+  'common.save': '保存',
+  'common.close': '关闭',
+  'common.copy': '复制',
+  'common.copied': '已复制',
+  'common.continue': '继续',
+  'common.retry': '重试',
+  'common.refresh': '刷新',
+  'common.loading': '加载中…',
+  'common.unknown': '未知',
+  'common.unavailable': '详情不可用',
+  'common.detailUnavailable': '详情不可用',
+  'common.actionFailed': '操作失败，请稍后重试。',
+
+  // Computers View
+  'computers.eyebrow': '设备与注册',
+  'computers.title': '电脑管理',
+  'computers.add': '添加电脑',
+  'computers.loading': '正在读取 Computers…',
+  'computers.loadError': '无法加载 Computers。',
+  'computers.deletedToast': '已删除',
+  'computers.addedToast': '已添加',
+  'computers.deleteError': '无法删除电脑。',
+  'computers.tableAria': '已注册 Computers',
+  'computers.col.name': '名称',
+  'computers.col.terms': '终端',
+  'computers.col.lastSeen': '最近在线',
+  'computers.col.registeredAt': '注册时间',
+  'computers.col.actions': '操作',
+  'computers.notRecorded': '未记录',
+  'computers.cannotDeleteOnlineAria': '{name}：有终端在线时不能删除',
+  'computers.cannotDeleteOnlineTitle': '有终端在线时不能删除',
+  'computers.deleteAria': '删除电脑：{name}',
+  'computers.nameEditor.label': 'Computer 显示名称',
+  'computers.nameEditor.editAria': '修改 Computer 名称：{name}',
+  'computers.nameEditor.editTitle': '点击修改 Computer 名称',
+  'computers.nameEditor.invalid': '显示名称须为 1 至 128 个无控制字符的字符。',
+  'computers.nameEditor.saveError': '无法保存显示名称。',
+  'computers.enrollment.title': '添加电脑',
+  'computers.enrollment.nameLabel': '电脑名称',
+  'computers.enrollment.namePlaceholder': '输入电脑名称',
+  'computers.enrollment.creating': '正在创建…',
+  'computers.enrollment.create': '创建',
+  'computers.enrollment.warning': '此注册码只显示一次，将在 {seconds} 秒后过期并自动刷新。',
+  'computers.enrollment.codeHeading': '注册码',
+  'computers.enrollment.codeAria': '一次性注册码',
+  'computers.enrollment.commandHeading': '终端执行',
+  'computers.enrollment.commandHelpAria': '终端执行说明',
+  'computers.enrollment.commandHelpTitle': '复制到安装有 TermFlow 的电脑上，在终端中执行',
+  'computers.enrollment.commandHelpText': '复制到安装有 TermFlow 的电脑上，在终端中执行。',
+  'computers.enrollment.copyCommand': '复制命令',
+  'computers.enrollment.pollError': '无法检查电脑是否已添加。',
+  'computers.enrollment.nameInvalid': '电脑名称须为 1 至 128 个无控制字符的字符。',
+  'computers.enrollment.refreshError': '注册码刷新失败，请手动重试。',
+  'computers.enrollment.createError': '无法创建注册码。',
+  'computers.deleteDialog.title': '删除电脑？',
+  'computers.deleteDialog.desc1': '将永久删除远端注册和控制凭据：',
+  'computers.deleteDialog.desc2': '删除后，这台电脑需要重新注册才能恢复远程控制。',
+  'computers.deleteDialog.confirm': '永久删除电脑',
+
+  // Terminal View & Controls
+  'terminal.srTitle': '远程终端',
+  'terminal.unreportedComputer': 'Computer 未报告',
+  'terminal.unreportedPrefix': '未报告',
+  'terminal.renameError': '无法更新 Term 名称。',
+  'terminal.backDashboard': '返回控制中心',
+  'terminal.nameLabel': 'Term 名称',
+  'terminal.saveNameAria': '保存 Term 名称',
+  'terminal.cancelNameAria': '取消修改 Term 名称',
+  'terminal.editNameAria': '修改 Term 名称：{title}',
+  'terminal.editNameTitle': '点击修改 Term 名称',
+  'terminal.nameInvalid': '名称需为 1–128 个可见字符。',
+  'terminal.status.connecting': '正在连接',
+  'terminal.status.connected': '已连接',
+  'terminal.status.reconnecting': '正在恢复连接',
+  'terminal.status.closed': '连接已关闭',
+  'terminal.unlockViewport': '解除画布锁定',
+  'terminal.lockViewport': '锁定画布',
+  'terminal.display.buttonAria': '显示设置',
+  'terminal.display.buttonLabel': '显示',
+  'terminal.display.menuAria': '终端显示比例',
+  'terminal.display.font100': '100% 实际字号',
+  'terminal.display.fit': '适应窗口',
+  'terminal.tmux.buttonLabel': 'tmux 操作',
+  'terminal.tmux.searchPlaceholder': '搜索更多操作',
+  'terminal.tmux.shortcut': '快捷键',
+  'terminal.tmux.unbound': '未绑定',
+  'terminal.tmux.action.split_left_right': '左右切分 Pane',
+  'terminal.tmux.action.split_top_bottom': '上下切分 Pane',
+  'terminal.tmux.action.new_window': '新建 Window',
+  'terminal.tmux.action.select_left': '选择左侧 Pane',
+  'terminal.tmux.action.select_right': '选择右侧 Pane',
+  'terminal.tmux.action.select_up': '选择上方 Pane',
+  'terminal.tmux.action.select_down': '选择下方 Pane',
+  'terminal.tmux.action.toggle_zoom': '切换 tmux Zoom',
+  'terminal.tmux.action.copy_mode': '进入 Copy Mode',
+  'terminal.tmux.action.close_pane': '关闭 Pane',
+  'terminal.closePane.title': '关闭 Pane？',
+  'terminal.closePane.desc': '将关闭 {name}（{id}）。Pane 中未保存的工作可能丢失。',
+  'terminal.closePane.confirm': '确认关闭 Pane',
+  'terminal.canvas.aria': 'Term {id} 终端',
+  'terminal.canvas.reconnecting': '连接中断，正在恢复…',
+  'terminal.canvas.connecting': '正在连接终端…',
+  'terminal.mobileKeybar.aria': '移动端修饰键',
+  'terminal.mobileKeybar.locked': '已锁定',
+  'terminal.mobileKeybar.prefix': '前缀',
+  'terminal.mobileKeybar.prefixReported': '实际 Prefix：{prefix}',
+  'terminal.mobileKeybar.prefixUnreported': 'Prefix 未报告',
+  'terminal.mobileKeybar.up': '上箭头',
+  'terminal.mobileKeybar.down': '下箭头',
+  'terminal.mobileKeybar.left': '左箭头',
+  'terminal.mobileKeybar.right': '右箭头',
+  'terminal.mobileKeybar.interrupt': '中断 (Ctrl+C)',
+  'terminal.mobileKeybar.eof': '文件结束 (Ctrl+D)',
+  'terminal.mobileKeybar.enter': '回车 (Enter)',
+  'terminal.error.instance_offline': 'Term 当前离线，无法打开终端。',
+  'terminal.error.unauthorized': '会话已过期，请重新登录。',
+  'terminal.error.backpressure': '终端繁忙，请稍后重试。',
+  'terminal.error.target_not_found': '目标 Pane 已不存在，请刷新状态。',
+  'terminal.error.rate_limited': '操作过于频繁，请稍后重试。',
+  'terminal.error.stream_gap': '连接已重建，正在等待终端重绘。',
+  'terminal.error.default': '终端发生错误，请稍后重试。',
+  'terminal.closed.replaced': '此终端已被另一个已认证连接接管。',
+  'terminal.closed.default': '终端连接已关闭。',
+
+  // Settings View
+  'settings.eyebrow': '偏好与安全',
+  'settings.title': '设置',
+  'settings.appearance.eyebrow': '外观',
+  'settings.appearance.heading': '界面主题',
+  'settings.deviceConnection.eyebrow': '设备连接',
+  'settings.deviceConnection.heading': '设备连接',
+  'settings.deviceConnection.note': '安全设置只能从已认证的网页管理端修改；本机只保存自己的设备凭据。',
+  'settings.theme.graphite-signal': '石墨信号 (默认)',
+  'settings.theme.cloud-cobalt': '云端钴蓝',
+  'settings.theme.midnight-indigo': '午夜靛蓝',
+  'settings.server.eyebrow': '服务连接',
+  'settings.server.heading': '中继服务器',
+  'settings.server.urlLabel': '服务网址',
+  'settings.server.qrAria': '显示服务网址二维码',
+  'settings.server.qrTitle': '服务网址二维码',
+  'settings.qr.closeAria': '关闭二维码',
+  'settings.totp.eyebrow': '安全验证',
+  'settings.totp.securityCheckEyebrow': '安全验证',
+  'settings.totp.heading': '双重因素认证',
+  'settings.totp.helpLabel': '说明双重因素认证',
+  'settings.totp.helpText': '绑定验证器 App 后，可为新的登录和客户端授权增加一次性验证码。',
+  'settings.totp.bound': '验证器已绑定',
+  'settings.totp.reconfigure': '重新配置',
+  'settings.totp.inactive': '未激活',
+  'settings.totp.loading': '正在读取安全状态…',
+  'settings.totp.unavailable': '双重因素认证暂时不可用，请联系服务器管理员。',
+  'settings.totp.activate': '激活双重因素认证',
+  'settings.totp.protectionLabel': '启用双重认证登录',
+  'settings.totp.protectionHelpLabel': '说明启用双重认证登录',
+  'settings.totp.protectionHelpText': '启用后，新的管理员登录和客户端授权都需要验证器生成的一次性验证码。',
+  'settings.totp.disableTitle': '停用双重认证登录',
+  'settings.totp.adminToken': '管理员令牌',
+  'settings.totp.code': '双重验证码',
+  'settings.totp.verifying': '正在验证…',
+  'settings.totp.verifyFailed': '验证失败，请检查凭据后重试。',
+  'settings.totp.setupKeyToggle': '无法扫描？使用设置密钥',
+  'settings.totp.setupKeyTitle': '设置密钥',
+  'settings.totp.copyKey': '复制密钥',
+  'settings.totp.backToSettings': '返回设置',
+  'settings.totp.stepsAria': '激活步骤',
+  'settings.totp.step1': '验证身份',
+  'settings.totp.step2': '绑定验证器',
+  'settings.totp.step3': '启用登录保护',
+  'settings.totp.wizardComplete': '设置完成',
+  'settings.totp.wizardProgress': '第 {step} 步，共 3 步',
+  'settings.totp.wizardTitle.bind': '绑定验证器',
+  'settings.totp.wizardTitle.enabled': '双重认证已启用',
+  'settings.totp.wizardTitle.enableProtection': '启用登录保护',
+  'settings.totp.wizardTitle.reconfigure': '重新配置验证器',
+  'settings.totp.wizardTitle.verifyAdmin': '验证管理员身份',
+  'settings.totp.qrAlt': '验证器设置二维码',
+  'settings.totp.confirmCodeLabel': '验证器验证码',
+  'settings.totp.confirmBind': '确认绑定',
+  'settings.totp.currentCodeLabel': '当前验证器验证码',
+  'settings.totp.codeInvalidOrExpired': '验证码无效或设置已过期，请重试。',
+  'settings.clients.eyebrow': '访问控制',
+  'settings.clients.heading': '已授权客户端',
+  'settings.clients.authorizeNew': '授权新客户端',
+  'settings.clients.authorizeNewTitle': '输入设备码以批准另一台已发起连接的客户端。',
+  'settings.clients.empty': '尚未授权手机或桌面客户端。',
+  'settings.clients.revoke': '撤销',
+  'settings.clients.revokeTitle': '撤销客户端',
+  'settings.clients.revokeDesc': '将注销 {name}，不会影响其他设备，也不会中断正在运行的会话。',
+  'settings.clients.confirmRevoke': '确认撤销',
+  'settings.clients.revokedToast': '已撤销',
+  'settings.clients.revokeError': '撤销失败，请检查凭据后重试。',
+  'settings.deviceApproval.eyebrow': '客户端授权',
+  'settings.deviceApproval.codeLabel': '设备码',
+  'settings.deviceApproval.lookingUp': '正在查找…',
+  'settings.deviceApproval.client': '客户端',
+  'settings.deviceApproval.platform': '平台',
+  'settings.deviceApproval.scopes': '权限',
+  'settings.deviceApproval.expiresAt': '有效期至',
+  'settings.deviceApproval.deny': '拒绝',
+  'settings.deviceApproval.allow': '允许此设备',
+  'settings.deviceApproval.approvedToast': '已授权',
+
+  // Auth / Login / Authorize Views
+  'login.title': '登录',
+  'login.adminToken': '管理员令牌',
+  'login.totpCode': '双重验证码',
+  'login.totpHint': '（请输入验证器应用当前显示的 6 位验证码。）',
+  'login.submit': '登录',
+  'login.verifyAndLogin': '验证并登录',
+  'login.invalidToken': '管理员令牌无效，请核对后重试。',
+  'login.failed': '登录失败，请重试。',
+  'deviceAuth.eyebrow': '跨设备授权',
+  'deviceAuth.title': '授权新设备',
+  'deviceAuth.backToLogin': '返回登录',
+  'deviceAuth.codeLabel': '设备码',
+  'deviceAuth.lookupBtn': '查找设备',
+  'deviceAuth.loading': '正在读取设备授权…',
+  'deviceAuth.qrAlt': '设备授权二维码',
+  'deviceAuth.codeHint': '设备码',
+  'deviceAuth.totpHint': '（请输入验证器应用当前显示的 6 位双重验证码。）',
+  'deviceAuth.statusPending': '待确认',
+  'deviceAuth.statusExpired': '已过期',
+  'deviceAuth.approvedMsg': '授权成功，设备可以继续连接。',
+  'deviceAuth.deniedMsg': '已拒绝该设备授权。',
+  'deviceAuth.invalidCodeFormat': '请输入格式为 ABCD-EFGH 的设备码。',
+  'deviceAuth.codeInvalidOrExpired': '设备码无效或已过期。',
+  'deviceAuth.lookupError': '无法查找设备码。',
+  'nativeAuth.eyebrow': '原生客户端授权',
+  'nativeAuth.title': '授权 TermFlow 客户端',
+  'nativeAuth.loading': '正在读取授权请求…',
+  'nativeAuth.server': '服务器',
+  'nativeAuth.keyFingerprint': '公钥指纹',
+  'nativeAuth.allow': '允许此客户端',
+  'nativeAuth.invalidOrExpired': '授权请求无效或已过期。',
+  'nativeAuth.failed': '无法完成授权。',
+  'nativeConnect.eyebrow': '远程连接',
+  'nativeConnect.title': '连接到服务器',
+  'nativeConnect.serverUrl': '服务器地址',
+  'nativeConnect.browserLogin': '本机浏览器登录',
+  'nativeConnect.waitingBrowser': '等待浏览器审批',
+  'nativeConnect.browserLoginTitle': '通过本机系统浏览器登录并审批此客户端。',
+  'nativeConnect.deviceAuth': '其他设备授权',
+  'nativeConnect.deviceAuthTitle': '使用已登录的其他设备完成授权，不会打开本机浏览器。',
+  'nativeConnect.connectedToast': '已连接',
+  'nativeConnect.error.http_capability_denied': '客户端网络权限配置无效。请升级或重新安装 TermFlow。',
+  'nativeConnect.error.offline': '无法连接服务器。请检查服务器地址、网络连接和本机服务是否正在运行。',
+  'nativeConnect.error.issuer_mismatch': '服务器身份与填写地址不一致。请检查反向代理配置后重试。',
+  'nativeConnect.error.cancelled': '注册申请已取消。请重新申请，并在系统浏览器中完成审批。',
+  'nativeConnect.error.callback': '未收到有效的 TermFlow 回调。请确认系统允许 termflow:// 链接打开本应用，然后重新申请。',
+  'nativeConnect.error.https_required': '远程服务器必须使用 HTTPS；只有本机服务器可以使用 HTTP。',
+  'nativeConnect.error.verify_timeout': '连接确认超时。请检查服务器是否在线后重试。',
+  'nativeConnect.error.default': '无法完成远程控制注册。请检查服务器地址和系统浏览器中的审批状态后重试。',
+  'nativeDevice.title': '在其他设备上授权',
+  'nativeDevice.codeCountdown': '设备码（{seconds} 秒）',
+  'nativeDevice.codeExpired': '设备码（已过期）',
+  'nativeDevice.copyCode': '复制设备码',
+  'nativeDevice.serverUrl': '服务器地址',
+  'nativeDevice.back': '返回',
+  'nativeDevice.regenerate': '重新生成',
+  'nativeDevice.status.waiting': '等待浏览器确认…',
+  'nativeDevice.status.slowDown': '服务器较忙，已放慢轮询…',
+  'nativeDevice.status.opening': '授权成功，正在打开工作区…',
+  'nativeDevice.status.copied': '设备码已复制。',
+  'nativeDevice.status.cancelled': '已取消',
+  'nativeDevice.error.http_capability_denied': '客户端网络权限配置无效。请升级或重新安装 TermFlow。',
+  'nativeDevice.error.authorization_pending': '浏览器尚未确认，请继续等待。',
+  'nativeDevice.error.slow_down': '请求过于频繁，已自动放慢轮询。',
+  'nativeDevice.error.access_denied': '浏览器拒绝了这次授权。请重新生成设备码。',
+  'nativeDevice.error.expired_token': '设备码已过期，请重新生成。',
+  'nativeDevice.error.offline': '无法连接服务器。请检查网络后重试。',
+  'nativeDevice.error.issuer_mismatch': '服务器身份与已保存地址不一致。请返回并检查反向代理配置。',
+  'nativeDevice.error.authorization_verify_timeout': '连接确认超时。请检查服务器是否在线后重试。',
+  'nativeDevice.error.default': '设备授权未完成。请重新生成设备码后重试。',
+  'notFound.title': '页面不存在',
+  'notFound.back': '返回控制中心',
+
+  // Agent Console & Panel & Chat
+  'agent.eyebrow': '智能代理',
+  'agent.title': 'Agent 控制台',
+  'agent.disabledTitle': 'Agent Broker 未启用',
+  'agent.disabledDesc': '服务器未开启 Agent Broker 能力，无法使用 Agent 会话。',
+  'agent.conversations.eyebrow': '会话列表',
+  'agent.conversations.heading': '会话记录',
+  'agent.chat.eyebrow': '会话详情',
+  'agent.chat.bindingLabel': '绑定 {bindingId} · 终端 {termId}',
+  'agent.conversations.emptyBindings': '暂无可用 Term，请先在电脑管理中连接一个 Term。',
+  'agent.conversations.empty': '暂无会话记录。',
+  'agent.conversations.tableAria': 'Agent 会话记录',
+  'agent.conversations.col.name': '会话名称',
+  'agent.conversations.col.term': 'Term',
+  'agent.conversations.col.status': '工作状态',
+  'agent.conversations.col.actions': '操作',
+  'agent.conversations.saveNameAria': '保存会话名称',
+  'agent.conversations.cancelNameAria': '取消重命名',
+  'agent.conversations.pendingBadgeAria': '{count} 个待处理审批',
+  'agent.conversations.openInTermAria': '在终端中打开：{title}',
+  'agent.conversations.openInTermTitle': '在终端中打开',
+  'agent.conversations.renameAria': '重命名会话：{title}',
+  'agent.conversations.renameTitle': '重命名会话',
+  'agent.conversations.deleteAria': '删除会话：{title}',
+  'agent.conversations.deleteTitle': '删除会话',
+  'agent.conversations.deleteDialogTitle': '删除该会话？',
+  'agent.conversations.deleteDialogDesc': '将删除会话 {title} 及其全部消息历史，此操作不可撤销。',
+  'agent.conversations.deleteConfirm': '确认删除',
+  'agent.conversations.loadError': '无法加载 Agent 会话数据，请稍后重试。',
+  'agent.conversations.loadErrorShort': '无法加载 Agent 会话数据。',
+  'agent.conversations.createdToast': '会话已创建。',
+  'agent.conversations.createError': '创建会话失败，请稍后重试。',
+  'agent.conversations.nameInvalid': '会话名称须为 1 至 255 个字符。',
+  'agent.conversations.renamedToast': '会话名称已更新。',
+  'agent.conversations.renameError': '保存会话名称失败，请稍后重试。',
+  'agent.conversations.deletedToast': '会话已删除。',
+  'agent.conversations.deleteError': '删除会话失败，请稍后重试。',
+  'agent.conversations.termNameError': '无法加载 Term 名称，部分会话信息可能不完整。',
+  'agent.conversations.termUnknown': 'Term 未知',
+  'agent.conversations.defaultTitle': '会话 {id}',
+  'agent.status.running': '运行中',
+  'agent.status.attention': '需要注意',
+  'agent.status.stopped': '已停止',
+  'agent.readiness.unconfigured': '未设置',
+  'agent.readiness.deployment_required': '需部署',
+  'agent.readiness.activating': '激活中',
+  'agent.readiness.ready': '已就绪',
+  'agent.readiness.unavailable': '不可用',
+  'agent.backend.connecting': '连接中',
+  'agent.backend.idle': '空闲',
+  'agent.backend.busy': '处理中',
+  'agent.backend.retry': '重试中',
+  'agent.backend.ready': '就绪',
+  'agent.backend.readyPanel': '已就绪',
+  'agent.backend.unavailable': '不可用',
+  'agent.backend.offline': '离线',
+  'agent.backend.context_lost': '上下文丢失',
+  'agent.backend.reconciling': '恢复中',
+  'agent.backend.closed': '已关闭',
+  'agent.panel.aria': '终端 Agent',
+  'agent.panel.toolsAria': 'Agent 工具',
+  'agent.panel.dragAria': '拖动 Agent 面板',
+  'agent.panel.newConversation': '新建会话',
+  'agent.panel.history': '历史记录',
+  'agent.panel.settingsAria': 'Agent 设置',
+  'agent.panel.settingsTitle': 'Agent 设置：调整可访问的窗格',
+  'agent.panel.closeAria': '关闭 Agent',
+  'agent.panel.writePolicy': '写入审批',
+  'agent.panel.writePolicyGroupAria': '新会话写入审批',
+  'agent.panel.policyManual': '手动',
+  'agent.panel.policyAuto': '放行',
+  'agent.panel.loading': '正在加载 Agent…',
+  'agent.panel.deploymentRequiredTitle': '需要部署 Agent 服务',
+  'agent.panel.deploymentRequiredDesc': '请管理员完成运行环境和提供方配置。',
+  'agent.panel.checkDeployment': '检查部署状态',
+  'agent.panel.activatingTitle': 'Agent 正在激活',
+  'agent.panel.activatingDesc': '运行时正在连接，稍候会自动刷新。',
+  'agent.panel.refreshStatus': '刷新状态',
+  'agent.panel.reEnableTitle': '请重新启用 Agent',
+  'agent.panel.reEnableDesc': '部署的提供方配置已更新。',
+  'agent.panel.reEnable': '重新启用',
+  'agent.panel.unavailableTitle': 'Agent 暂不可用',
+  'agent.panel.recoveringTitle': 'Agent 正在恢复',
+  'agent.panel.recoveringDesc': '运行时还在连接中，稍候会自动刷新。',
+  'agent.panel.reactivate': '重新激活',
+  'agent.panel.confirmAutoAria': '确认完全放行',
+  'agent.panel.confirmAutoDesc': '完全放行后，Agent 对已授权 Pane 的每次写入都会立即执行，不再弹审批。',
+  'agent.panel.confirmAutoBtn': '确认放行',
+  'agent.panel.historyCount': '{count} 个会话',
+  'agent.panel.historyEmpty': '暂无会话',
+  'agent.panel.untitledConversation': '未命名会话',
+  'agent.panel.statusOpen': '进行中',
+  'agent.panel.emptyPrompt': '选择历史会话或点击“新建会话”。',
+  'agent.panel.defaultChatTitle': 'Agent 对话',
+  'agent.panel.savePanesError': '无法保存窗格授权。',
+  'agent.panel.writePolicyError': '无法更新写入审批方式。',
+  'agent.panel.resizeAria': '调整 Agent 面板大小（{edge}）',
+  'agent.panel.edge.n': '上边缘',
+  'agent.panel.edge.e': '右边缘',
+  'agent.panel.edge.s': '下边缘',
+  'agent.panel.edge.w': '左边缘',
+  'agent.panel.edge.ne': '右上角',
+  'agent.panel.edge.se': '右下角',
+  'agent.panel.edge.sw': '左下角',
+  'agent.panel.edge.nw': '左上角',
+  'agent.reason.stale_topology': '窗格布局已变化，请刷新后重新选择。',
+  'agent.reason.stale_binding_revision': 'Agent 配置已变化，请刷新后重试。',
+  'agent.reason.topology_unavailable': '窗格布局暂不可用，请连接终端后刷新。',
+  'agent.reason.disclosure_mismatch': '提供方披露已变化，请重新确认。',
+  'agent.reason.disclosure_required': '请确认当前提供方的数据发送说明。',
+  'agent.reason.binding_disclosure_stale': '提供方披露已变化，请重新确认。',
+  'agent.reason.binding_disclosure_required': '请确认当前提供方的数据发送说明。',
+  'agent.reason.provider_unavailable': '模型提供方暂不可用。',
+  'agent.reason.deployment_required': '请管理员完成 Agent 服务部署。',
+  'agent.reason.sensitive_action_reauthentication_required': '身份验证已失效，请重新操作。',
+  'agent.reason.runtime_unreachable': '运行时暂时不可达，稍候会自动重试。',
+  'agent.reason.mcp_not_connected': '运行时尚未连上控制面，稍候会自动重试。',
+  'agent.reason.runtime_assignment_conflict': '运行时身份冲突，请点击“重新激活”修复。',
+  'agent.reason.pipeline_start_failed': '运行时启动失败，请稍候重试或联系管理员。',
+  'agent.reason.insufficient_scope': '当前客户端缺少 Agent 权限，请重新登录授权。',
+  'agent.reason.default': 'Agent 暂不可用，请稍后重试。',
+  'agent.chat.backOverview': 'Agent 总览',
+  'agent.chat.policyGroupAria': '本对话写入审批',
+  'agent.chat.policyManual': '手动审批',
+  'agent.chat.policyAuto': '完全放行',
+  'agent.chat.canceling': '正在取消…',
+  'agent.chat.cancelRun': '取消运行',
+  'agent.chat.deleteConfirmAria': '确认删除会话',
+  'agent.chat.deleteConfirmDesc': '删除后该会话及其事件会被清理，无法恢复。',
+  'agent.chat.deleteError': '删除失败，请稍后重试。',
+  'agent.chat.policyConfirmAria': '确认完全放行本对话',
+  'agent.chat.policyConfirmDesc': '本对话内，Agent 对已授权 Pane 的每次写入都会立即执行，不再弹审批。',
+  'agent.chat.policyUpdateError': '无法更新审批方式。',
+  'agent.chat.cancelError': '取消失败，请稍后重试。',
+  'agent.chat.approvalPromptAria': '待批准操作',
+  'agent.chat.notFoundBanner': '该会话不存在或已被删除，无法继续连接。',
+  'agent.chat.revokedBanner': 'Agent Binding 已撤销，无法继续连接。',
+  'agent.chat.notFoundToast': '该会话不存在或已被删除。',
+  'agent.chat.forbiddenToast': '当前客户端没有访问该会话的权限，请重新登录授权。',
+  'agent.chat.recoveringToast': '连接恢复中，正在补齐消息…',
+  'agent.chat.historyUnavailable': '历史消息内容不可用',
+  'agent.chat.emptyPrompt': '输入一条消息，开始与 Agent 对话。',
+  'agent.chat.roleSystem': '系统',
+  'agent.chat.systemContext': '系统上下文',
+  'agent.chat.systemUnavailable': '系统上下文内容不可用',
+  'agent.chat.roleUser': '你',
+  'agent.chat.thinking': '思考',
+  'agent.chat.thinkingStreaming': '思考中…',
+  'agent.chat.toolCall': '工具调用',
+  'agent.chat.defaultToolLabel': '调用',
+  'agent.chat.toolInput': '输入',
+  'agent.chat.toolDefaultsOmitted': '默认参数已省略：{items}',
+  'agent.chat.toolOutput': '结果',
+  'agent.chat.toolError': '错误',
+  'agent.chat.stepStart': '开始',
+  'agent.chat.toolStatus.completed': '已完成',
+  'agent.chat.toolStatus.failed': '失败',
+  'agent.chat.toolStatus.failedExec': '执行失败',
+  'agent.chat.toolStatus.running': '运行中',
+  'agent.chat.toolStatus.pending': '等待中',
+  'agent.chat.collapseCode': '收起代码 ▴',
+  'agent.chat.collapseOutput': '收起输出 ▴',
+  'agent.chat.expandLines': '展开其余 {folded} 行 (共 {total} 行) ▾',
+  'agent.chat.announce.separator': '；',
+  'agent.chat.announce.toolCompleted': '工具 {label} 已完成',
+  'agent.chat.announce.toolFailed': '工具 {label} 执行失败',
+  'agent.chat.announce.runFinished': '运行已完成',
+  'agent.chat.announce.runError': '运行出错',
+  'agent.chat.announce.newApproval': '收到新的审批请求',
+  'agent.chat.announce.backendState': '后端状态：{state}',
+  'agent.composer.inputAria': '发送给 Agent 的消息',
+  'agent.composer.sendAria': '发送消息',
+  'agent.composer.tooLong': '文本超出长度限制（最多 {max} 字节），请精简后重试。',
+  'agent.composer.unavailable': '后端运行时未就绪，暂时无法发送消息。',
+  'agent.approval.state.pending': '待处理',
+  'agent.approval.state.approved': '已批准',
+  'agent.approval.state.denied': '已拒绝',
+  'agent.approval.state.expired': '已过期',
+  'agent.approval.state.revoked': '已撤销',
+  'agent.approval.state.consumed': '已消费',
+  'agent.approval.pane': '窗格',
+  'agent.approval.operation': '操作',
+  'agent.approval.hashPrefix': '摘要 #{hash}',
+  'agent.approval.expiresPrefix': '有效期至 {expiry}',
+  'agent.approval.focusAction': '在审批面板处理',
+  'agent.approval.empty': '暂无待处理审批',
+  'agent.approval.approve': '批准',
+  'agent.approval.deny': '拒绝',
+  'agent.approval.revoke': '撤销',
+  'agent.approval.confirmTitle': '批准该审批请求？',
+  'agent.approval.confirmDesc1': '批准后 Agent 将立即执行',
+  'agent.approval.confirmDesc2': '。此操作不可撤销，请确认内容无误。',
+  'agent.approval.unknownOp': '未知操作',
+  'agent.approval.criticalWarning': '⚠️ 极高风险警示：此操作具有高危破坏性，请二次确认！',
+  'agent.approval.criticalAck': '我已知晓该操作具有高危破坏性，确认执行',
+  'agent.approval.confirmApprove': '确认批准',
+  'agent.approval.loadError': '无法加载审批列表。',
+  'agent.approval.notFoundError': '该审批请求已不存在。',
+  'agent.approval.expiredError': '该审批请求已过期。',
+  'agent.approval.stateChangedError': '审批状态已变化，列表已刷新。',
+  'agent.approval.approvedToast': '已批准。',
+  'agent.approval.deniedToast': '已拒绝。',
+  'agent.approval.revokedToast': '已撤销审批。',
+  'agent.risk.level4': '极高危',
+  'agent.risk.level3': '高风险',
+  'agent.risk.level2': '中风险',
+  'agent.risk.level1': '低风险',
+  'agent.reauth.title': '重新验证身份',
+  'agent.reauth.nativeHint': '请在系统浏览器中完成身份验证。',
+  'agent.reauth.webHint': '为保护终端安全，执行敏感操作前需要重新验证管理员身份。验证通过后本次操作会自动继续。',
+  'agent.reauth.rootCredential': 'Root 凭据',
+  'agent.reauth.totp': '动态验证码',
+  'agent.reauth.verify': '验证',
+  'agent.reauth.failed': '验证失败，请重试。',
+  'agent.setup.title': '设置 Term Agent',
+  'agent.setup.helpLabel': 'Term Agent 说明',
+  'agent.setup.enable': '启用 Agent',
+  'agent.setup.settingUp': '正在设置…',
+  'agent.setup.noProviderHelp': '部署尚未配置模型提供方，请联系管理员完成部署。',
+  'agent.setup.providerHelp': 'Agent 使用部署配置的模型 {provider} · {model} 读取授权窗格的内容；写入命令时仍会逐一弹审批。',
+  'agent.setup.selectPaneError': '请至少选择一个当前窗格。',
+  'agent.setup.providerUnavailableError': '提供方配置暂不可用，请管理员完成部署。',
+  'agent.panes.defaultLegend': '允许 Agent 访问的窗格',
+  'agent.panes.helpLabel': '窗格授权说明',
+  'agent.panes.helpText': '窗格是终端里的一块分屏（% 编号）。Agent 只能读取勾选窗格的内容；写入仍会逐一弹审批。',
+  'agent.panes.selectAll': '全选',
+  'agent.panes.clear': '清空',
+  'agent.panes.selectedCount': '已选 {selected}/{total}',
+  'agent.panes.empty': '暂无可用窗格，请连接终端后刷新。',
+  'agent.preview.title': '部署检查',
+  'agent.preview.inputPlaceholder': '输入消息…',
+  'agent.preview.reauthBtn': '重新验证身份（预览）',
+  'agent.preview.mobileKeybarHeading': '移动端快捷键栏预览',
+  'agent.preview.themePickerHeading': '极客主题切换器 (10 款经典配色预览)',
+  'agent.preview.sampleUserPrompt': '请在当前允许的终端中执行 echo 1，并告诉我结果。',
+  'agent.preview.sampleThinking1': '用户想让我在终端执行 echo 1。我先列出 pane，确认可写后再发送命令并等待审批。',
+  'agent.preview.sampleAssistant1': '我先看一下有哪些 pane，然后执行 echo 1。',
+  'agent.preview.sampleAssistant2': '准备向 pane %0 写入 `echo 1`，需要你确认。',
+  'agent.preview.sampleThinking2': '准备更新配置文件，审查 patch 差异。',
+  'agent.preview.sampleFinalText': '已执行。结果输出为 `1`。',
+}
+export default zhMessages
diff --git a/packages/client-ui/src/views/DashboardView.test.ts b/packages/client-ui/src/views/DashboardView.test.ts
index 209f5061..31da4ff9 100644
--- a/packages/client-ui/src/views/DashboardView.test.ts
+++ b/packages/client-ui/src/views/DashboardView.test.ts
@@ -80,8 +80,8 @@ describe('DashboardView', () => {
     expect(wrapper.text()).toContain('设计工作站')
     expect(wrapper.text()).toContain('产品开发')
     expect(wrapper.text()).toContain('python3')
-    expect(wrapper.text()).toContain('2 Windows')
-    expect(wrapper.text()).toContain('4 Panes')
+    expect(wrapper.text()).toContain('2 窗口')
+    expect(wrapper.text()).toContain('4 窗格')
     const onlineTerm = wrapper.get('[data-term-id="term-1"]')
     expect(onlineTerm.element.tagName).toBe('A')
     expect(onlineTerm.attributes('href')).toBe('/terms/term-1')
diff --git a/tests/deploy/test_compose_contract.py b/tests/deploy/test_compose_contract.py
index d18fc188..50968a54 100644
--- a/tests/deploy/test_compose_contract.py
+++ b/tests/deploy/test_compose_contract.py
@@ -6,12 +6,16 @@
 
 def test_docker_a_and_b_use_a_host_reachable_bridge_not_an_internal_network() -> None:
     readme = Path("README.md").read_text()
+    readme_cn = Path("README_CN.md").read_text()
 
     assert "docker network create termflow-net" in readme
     assert "docker network create --internal termflow-net" not in readme
-    assert "A 主动连接 B" in readme
-    assert "A 不开放端口" in readme
-    assert "B 的 Web/API 通过宿主机 loopback 端口发布" in readme
+    assert "Node A connects outbound to B" in readme
+    assert "zero inbound ports on A" in readme
+    assert "Control Plane B's Web/API is published on a host loopback port" in readme
+    assert "A 主动连接 B" in readme_cn
+    assert "A 不开放端口" in readme_cn
+    assert "B 的 Web/API 通过宿主机 loopback 端口发布" in readme_cn
 
 
 def test_compose_keeps_the_hardened_single_worker_deployable_shape() -> None: