From 67cbac0eaa24149634ae81a11efe42edb3ddcd23 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Tue, 15 Sep 2026 10:35:54 +0800
Subject: [PATCH 01/43] Keep Desktop login valid for its backend lifetime

## Why
Desktop sleep can outlast the browser login deadline and leave the
renderer locked without a usable recovery token.

## What changed
- Create a process-lifetime login through the private Desktop launcher.
- Preserve its session-only cookie across reload, renewal and recovery.
- Keep ordinary browser expiry, Agent authorization and older Core fallback.

## Testing
Pass 164 Core backend cases, 95 Windows Desktop unit tests and isolated
backend smoke on Windows and WSL. Cover simulated long idle, browser
expiry, Agent gates, cookie policy and rejection after backend restart.
---
 app.py                        |  33 +++++++---
 desktop/README.md             |  16 ++++-
 desktop/backend.py            |   9 ++-
 desktop/smoke.cjs             |  11 ++++
 desktop/test/backend_smoke.py |  20 ++++++
 tests/agent_backend_smoke.py  | 112 ++++++++++++++++++++++++++++++----
 6 files changed, 178 insertions(+), 23 deletions(-)

diff --git a/app.py b/app.py
index b926f8b..1d4347f 100644
--- a/app.py
+++ b/app.py
@@ -2518,6 +2518,8 @@ def request_browser_ssh_signature(bridge, signer_sid, browser_key, challenge, al
 pending_terminal_starts = {}
 pending_terminal_bridges = {}
 pending_terminal_start_context = {}
+# Deadlines are epoch seconds; None is reserved for a private Desktop login
+# whose lifetime is the owned backend process, not a browser idle timeout.
 active_sessions = {}
 socket_session_tokens = {}
 socket_client_ips = {}
@@ -5551,7 +5553,9 @@ def is_valid_launcher_shutdown_token(token):
 def is_valid_session(session_token):
     if not isinstance(session_token, str):
         return False
-    expires_at = active_sessions.get(session_token)
+    expires_at = active_sessions.get(session_token, 0)
+    if expires_at is None:
+        return True
     if not expires_at:
         return False
     if time.time() > expires_at:
@@ -5567,7 +5571,7 @@ def cleanup_expired_sessions():
     expired_tokens = [
         session_token
         for session_token, expires_at in list(active_sessions.items())
-        if now > expires_at
+        if expires_at is not None and now > expires_at
     ]
     for session_token in expired_tokens:
         active_sessions.pop(session_token, None)
@@ -6211,11 +6215,26 @@ def parse_terminal_size(data):
         return None
     return cols, rows
 
+def create_desktop_session():
+    # Called only by the owned Desktop launcher, never by an HTTP login route.
+    # The private pipe conveys the cookie; process exit destroys the authority.
+    session_token = secrets.token_urlsafe(32)
+    active_sessions[session_token] = None
+    ensure_session_cleanup_task()
+    return session_token
+
+def session_cookie_max_age(session_token):
+    return None if active_sessions.get(session_token, 0) is None else SESSION_COOKIE_MAX_AGE
+
+def refresh_session_deadline(session_token):
+    if session_cookie_max_age(session_token) is not None:
+        active_sessions[session_token] = time.time() + SESSION_COOKIE_MAX_AGE
+
 def set_session_cookie(response, session_token):
     response.set_cookie(
         SESSION_COOKIE_NAME,
         session_token,
-        max_age=SESSION_COOKIE_MAX_AGE,
+        max_age=session_cookie_max_age(session_token),
         httponly=True,
         samesite='Strict',
         secure=HTTPS_ENABLED,
@@ -6246,16 +6265,16 @@ def build_session_redirect_response():
     return add_common_headers(response)
 
 def build_existing_session_response(session_token):
-    active_sessions[session_token] = time.time() + SESSION_COOKIE_MAX_AGE
+    refresh_session_deadline(session_token)
     response = set_session_cookie(build_index_response(), session_token)
     return add_common_headers(response)
 
 def renew_session_response(session_token):
-    active_sessions[session_token] = time.time() + SESSION_COOKIE_MAX_AGE
+    refresh_session_deadline(session_token)
     response = jsonify({
         'status': 'ok',
         'session_expires_at': active_sessions[session_token],
-        'session_max_age_seconds': SESSION_COOKIE_MAX_AGE,
+        'session_max_age_seconds': session_cookie_max_age(session_token),
         'renew_interval_seconds': SESSION_RENEW_INTERVAL_SECONDS,
     })
     set_session_cookie(response, session_token)
@@ -6437,7 +6456,7 @@ def session_recovery_authenticate_complete():
             'message': 'No live StandTerm session is available for this platform credential. Enter the current access token.',
         }, status_code=409)
 
-    active_sessions[recovered_session_token] = time.time() + SESSION_COOKIE_MAX_AGE
+    refresh_session_deadline(recovered_session_token)
     response = jsonify({
         'status': 'ok',
         'result': 'recovered',
diff --git a/desktop/README.md b/desktop/README.md
index 1e16fb8..9d65425 100644
--- a/desktop/README.md
+++ b/desktop/README.md
@@ -695,6 +695,15 @@ the credential-free Desktop startup URL. Other clients still need normal
 StandTerm authentication. External-agent discovery files retain their existing
 permission model and are separate from desktop-login credentials.
 
+The owned Desktop login lasts until its backend process exits; it does not use
+Core's 12-hour browser idle deadline or ask for a token after a long sleep.
+Page reloads and renewal keep its HttpOnly cookie session-only. Closing Desktop
+invalidates that process's login, and a new process rejects the old cookie.
+This does not disable authentication for other browsers, prolong External Agent
+tokens, bypass minting, or change human-input and per-copy approval gates.
+An older user-selected Git Core without this Desktop-session capability retains
+its original expiry behavior; select an updated Core to obtain this policy.
+
 The authenticated Core UI has Node integration disabled, context isolation, renderer sandboxing
 and web security enabled, and no preload or IPC bridge. Network requests are
 limited to the owned loopback HTTP/WebSocket origin and local data/blob images.
@@ -787,8 +796,11 @@ Generated capture samples are retained under ignored `desktop/dist/`; unit-test
 scratch files in the OS temporary directory are disposable and reproducible.
 
 `desktop/test/backend_smoke.py`, run through the selected project venv, separately
-checks the private handshake, unauthenticated HTTP rejection, HttpOnly cookie
-behavior, pipe-EOF exit, port closure and runtime artifact cleanup.
+checks the private handshake, unauthenticated HTTP rejection, process-lifetime
+HttpOnly cookies, renewal, stale-cookie rejection by a new process, pipe-EOF
+exit, port closure and runtime artifact cleanup. Core's backend smoke simulates
+30 days without renewal, checks ordinary browser expiry in the same process,
+and verifies that Desktop login does not bypass external-agent minting or expiry.
 
 `desktop/test/bootstrap_smoke.py` checks manifest tampering, traversal/link
 rejection, existing-data preservation and retry after dependency failure.
diff --git a/desktop/backend.py b/desktop/backend.py
index 979d48e..101e636 100644
--- a/desktop/backend.py
+++ b/desktop/backend.py
@@ -88,8 +88,13 @@ def main():
         return
     standterm.DEFAULT_PORT = actual_port
     origin = f'http://127.0.0.1:{actual_port}'
-    session_token = secrets.token_urlsafe(32)
-    standterm.active_sessions[session_token] = time.time() + standterm.SESSION_COOKIE_MAX_AGE
+    create_desktop_session = getattr(standterm, 'create_desktop_session', None)
+    if callable(create_desktop_session):
+        session_token = create_desktop_session()
+    else:
+        # Older user-selected Git Core keeps its original authentication policy.
+        session_token = secrets.token_urlsafe(32)
+        standterm.active_sessions[session_token] = time.time() + standterm.SESSION_COOKIE_MAX_AGE
     standterm.ensure_session_cleanup_task()
     standterm.write_external_agentinfo_files(base_url=origin)
 
diff --git a/desktop/smoke.cjs b/desktop/smoke.cjs
index 89e7128..e3bfad3 100644
--- a/desktop/smoke.cjs
+++ b/desktop/smoke.cjs
@@ -98,6 +98,17 @@ async function run(win, origin, contents = win.webContents, browserAccess) {
   assert.equal(isolated.loginVisible, false);
   assert.equal(isolated.cookie, '');
   assert.equal(new URL(isolated.url).searchParams.has('token'), false);
+  const renewedSession = await contents.executeJavaScript(`fetch('/session/renew', { method: 'POST' })
+    .then(response => response.json())`);
+  assert.equal(renewedSession.status, 'ok');
+  assert.equal(renewedSession.session_expires_at, null);
+  assert.equal(renewedSession.session_max_age_seconds, null);
+  const loginCookies = await contents.session.cookies.get({ url: origin, name: 'standterm_session' });
+  assert.equal(loginCookies.length, 1);
+  assert.equal(loginCookies[0].session, true);
+  assert.equal(loginCookies[0].httpOnly, true);
+  assert.equal(loginCookies[0].sameSite, 'strict');
+  assert.equal(loginCookies[0].expirationDate, undefined);
   const prefs = contents.getLastWebPreferences();
   assert.equal(prefs.sandbox, true);
   assert.equal(prefs.contextIsolation, true);
diff --git a/desktop/test/backend_smoke.py b/desktop/test/backend_smoke.py
index 73815c3..64a4ad6 100644
--- a/desktop/test/backend_smoke.py
+++ b/desktop/test/backend_smoke.py
@@ -75,9 +75,20 @@ def main():
                 assert response.status == 200
                 cookie_header = response.headers.get('Set-Cookie', '')
                 assert 'HttpOnly' in cookie_header and 'SameSite=Strict' in cookie_header
+                assert 'Max-Age=' not in cookie_header and 'Expires=' not in cookie_header, \
+                    'Owned Desktop login must not acquire a browser idle deadline'
                 html = response.read().decode('utf-8')
                 assert frame['session_token'] not in html
                 assert 'const useDesktopFloatingWindows = true;' in html
+            request = urllib.request.Request(origin + '/session/renew', data=b'', headers={
+                'Cookie': frame['cookie_name'] + '=' + frame['session_token'],
+            })
+            with opener.open(request, timeout=5) as response:
+                renewed = json.load(response)
+                assert renewed['session_expires_at'] is None
+                assert renewed['session_max_age_seconds'] is None
+                cookie_header = response.headers.get('Set-Cookie', '')
+                assert 'Max-Age=' not in cookie_header and 'Expires=' not in cookie_header
             proc.stdin.close()
             assert proc.wait(timeout=10) == 0
             address = urllib.parse.urlparse(origin)
@@ -116,6 +127,15 @@ def main():
                     raise AssertionError('Fixed-port desktop startup timed out') from None
             assert reused['type'] == 'standterm_desktop_ready'
             assert urllib.parse.urlparse(reused['origin']).port == busy_port
+            stale_request = urllib.request.Request(reused['origin'], headers={
+                'Cookie': frame['cookie_name'] + '=' + frame['session_token'],
+            })
+            try:
+                opener.open(stale_request, timeout=5)
+            except urllib.error.HTTPError as exc:
+                assert exc.code == 401
+            else:
+                raise AssertionError('A previous Desktop process cookie was accepted')
             proc.stdin.close()
             assert proc.wait(timeout=10) == 0
             print('Desktop backend smoke: private handoff, authentication and EOF cleanup passed.')
diff --git a/tests/agent_backend_smoke.py b/tests/agent_backend_smoke.py
index 9e22549..1b00cb4 100644
--- a/tests/agent_backend_smoke.py
+++ b/tests/agent_backend_smoke.py
@@ -12,6 +12,7 @@
 import stat
 import struct
 from types import SimpleNamespace
+from unittest.mock import patch
 import zlib
 from pathlib import Path
 
@@ -249,6 +250,82 @@ def test_session_renew_rejects_missing_or_expired_session():
     assert session_token not in standterm.active_sessions
 
 
+def make_desktop_flask_client():
+    client = standterm.app.test_client()
+    client.set_cookie(standterm.SESSION_COOKIE_NAME, standterm.create_desktop_session())
+    return client
+
+
+def test_desktop_session_survives_idle_cleanup_and_renewal():
+    desktop_client = make_desktop_flask_client()
+    desktop_token = flask_session_cookie_value(desktop_client)
+    desktop_bridge = add_dummy_bridge(desktop_token)
+    browser_client = make_flask_client()
+    browser_token = flask_session_cookie_value(browser_client)
+    browser_bridge = add_dummy_bridge(browser_token)
+    future = standterm.time.time() + 30 * 24 * 60 * 60
+
+    with patch.object(standterm.time, 'time', return_value=future):
+        assert standterm.is_valid_session(desktop_token)
+        standterm.cleanup_expired_sessions()
+        assert standterm.get_bridge(desktop_token, standterm.TERMINAL_ID_MAIN) is desktop_bridge
+        assert not desktop_bridge.closing
+        assert browser_bridge.closing
+        assert browser_token not in standterm.active_sessions
+        assert browser_client.post('/session/renew').status_code == 403
+        for response in (desktop_client.get('/'), desktop_client.post('/session/renew')):
+            assert response.status_code == 200
+            cookie = response.headers['Set-Cookie']
+            assert 'Max-Age=' not in cookie and 'Expires=' not in cookie
+            assert 'HttpOnly' in cookie and 'SameSite=Strict' in cookie
+        payload = response.get_json()
+        assert payload['session_expires_at'] is None
+        assert payload['session_max_age_seconds'] is None
+        assert payload['renew_interval_seconds'] == standterm.SESSION_RENEW_INTERVAL_SECONDS
+        assert standterm.active_sessions[desktop_token] is None
+
+
+def test_desktop_session_still_requires_private_cookie_and_live_process():
+    client = make_desktop_flask_client()
+    token = flask_session_cookie_value(client)
+    unknown = standterm.app.test_client()
+    assert unknown.get('/?desktop=1').status_code == 401
+    assert unknown.post('/session/renew', headers={'X-StandTerm-Desktop': '1'}).status_code == 403
+    ordinary_login = unknown.post('/login', data={'token': standterm.ACCESS_TOKEN, 'desktop': '1'})
+    assert ordinary_login.status_code == 302
+    assert f'Max-Age={standterm.SESSION_COOKIE_MAX_AGE}' in ordinary_login.headers['Set-Cookie']
+    assert standterm.active_sessions[flask_session_cookie_value(unknown)] is not None
+
+    standterm.active_sessions.pop(token)
+    assert not standterm.is_valid_session(token)
+    assert client.post('/session/renew').status_code == 403
+    assert client.get('/').status_code == 401
+    assert token not in standterm.active_sessions
+
+
+def test_desktop_session_does_not_bypass_external_agent_mint_or_expiry():
+    flask_client = make_desktop_flask_client()
+    token = flask_session_cookie_value(flask_client)
+    client = make_socket_client(flask_client)
+    try:
+        add_dummy_bridge(token)
+        sid = current_sid_for_session(token)
+        external_token, _record, error = standterm.mint_external_agent_attach_token(
+            token, standterm.TERMINAL_ID_MAIN, sid)
+        assert error is not None and external_token is None
+        client.emit(standterm.AGENT_EVENT_ATTACH, {'terminal_id': standterm.TERMINAL_ID_MAIN})
+        external_token, _record, error = standterm.mint_external_agent_attach_token(
+            token, standterm.TERMINAL_ID_MAIN, sid, idle_timeout_seconds=-1)
+        assert error is None
+        result = standterm.process_external_agent_command({
+            'op': 'state', 'token': external_token, 'terminal_id': standterm.TERMINAL_ID_MAIN,
+        })
+        assert result['error_code'] == standterm.AGENT_ERROR_EXTERNAL_AGENT_EXPIRED
+        assert standterm.is_valid_session(token)
+    finally:
+        client.disconnect()
+
+
 def test_session_recovery_context_requires_hostname_and_secure_origin():
     assert build_webauthn_context('http://localhost:5000/') == {
         'rp_id': 'localhost',
@@ -391,10 +468,7 @@ def test_session_recovery_unauthenticated_options_offer_only_armed_credentials()
 
 
 def test_session_recovery_complete_restores_bound_live_session_cookie():
-    owner_client = make_flask_client()
-    owner_session = flask_session_cookie_value(owner_client)
     service = standterm.session_recovery_service
-    service.bind('localhost', 'credential-id', owner_session)
     original_finish = service.finish_authentication
     service.finish_authentication = lambda *_args, **_kwargs: {
         'credential_id': 'credential-id',
@@ -402,15 +476,26 @@ def test_session_recovery_complete_restores_bound_live_session_cookie():
         'backed_up': False,
     }
     try:
-        recovery_client = standterm.app.test_client()
-        response = recovery_client.post(
-            '/session-recovery/authenticate/complete',
-            base_url='http://localhost',
-            json={'ceremony_id': 'test', 'credential': {}},
-        )
-        assert response.status_code == 200
-        assert response.get_json()['result'] == 'recovered'
-        assert flask_session_cookie_value(recovery_client) == owner_session
+        for owner_client in (make_flask_client(), make_desktop_flask_client()):
+            owner_session = flask_session_cookie_value(owner_client)
+            process_lifetime = standterm.active_sessions[owner_session] is None
+            service.bind('localhost', 'credential-id', owner_session)
+            recovery_client = standterm.app.test_client()
+            response = recovery_client.post(
+                '/session-recovery/authenticate/complete',
+                base_url='http://localhost',
+                json={'ceremony_id': 'test', 'credential': {}},
+            )
+            assert response.status_code == 200
+            assert response.get_json()['result'] == 'recovered'
+            assert flask_session_cookie_value(recovery_client) == owner_session
+            cookie = response.headers['Set-Cookie']
+            if process_lifetime:
+                assert standterm.active_sessions[owner_session] is None
+                assert 'Max-Age=' not in cookie and 'Expires=' not in cookie
+            else:
+                assert standterm.active_sessions[owner_session] > standterm.time.time()
+                assert f'Max-Age={standterm.SESSION_COOKIE_MAX_AGE}' in cookie
     finally:
         service.finish_authentication = original_finish
 
@@ -8307,6 +8392,9 @@ def main():
         test_access_required_page_rejects_invalid_login_token,
         test_session_renew_extends_existing_cookie_session,
         test_session_renew_rejects_missing_or_expired_session,
+        test_desktop_session_survives_idle_cleanup_and_renewal,
+        test_desktop_session_still_requires_private_cookie_and_live_process,
+        test_desktop_session_does_not_bypass_external_agent_mint_or_expiry,
         test_session_recovery_context_requires_hostname_and_secure_origin,
         test_native_loopback_access_host_uses_localhost_for_webauthn,
         test_session_recovery_registration_options_require_live_session_and_hostname,

From 9dec47bd255c48422ba347cef44c63f93c4beba7 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Tue, 15 Sep 2026 11:37:57 +0800
Subject: [PATCH 02/43] Prepare Desktop 0.5.2 with Core 2.13.1-dev

---
 core_version.py           | 2 +-
 desktop/package-lock.json | 4 ++--
 desktop/package.json      | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/core_version.py b/core_version.py
index fbf66a9..317acc8 100644
--- a/core_version.py
+++ b/core_version.py
@@ -1,3 +1,3 @@
 """Core release identity, shared by source and packaged launchers."""
 
-CORE_VERSION = '2.13.0'
+CORE_VERSION = '2.13.1-dev'
diff --git a/desktop/package-lock.json b/desktop/package-lock.json
index b74f890..eae2c3e 100644
--- a/desktop/package-lock.json
+++ b/desktop/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "standterm-desktop-evaluation",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "standterm-desktop-evaluation",
-      "version": "0.5.1",
+      "version": "0.5.2",
       "license": "MIT",
       "devDependencies": {
         "electron": "44.2.0",
diff --git a/desktop/package.json b/desktop/package.json
index 8a67e5d..a0c90cf 100644
--- a/desktop/package.json
+++ b/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "standterm-desktop-evaluation",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "private": true,
   "productName": "StandTerm Desktop",
   "author": "ASKA C.",

From 6e2fa47e453de357b8d567ce7338d1bfa0d04026 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Tue, 15 Sep 2026 11:45:44 +0800
Subject: [PATCH 03/43] Highlight Agent Info copy failures

---
 templates/index.html | 38 ++++++++++++++++++++++++++------------
 1 file changed, 26 insertions(+), 12 deletions(-)

diff --git a/templates/index.html b/templates/index.html
index ec673ae..93fcec0 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -292,6 +292,12 @@
         .agent-connect-activity { white-space: pre-wrap; }
         .agent-connect-steps { padding-left: 24px; line-height: 1.5; }
         #agent-tunnel-message { white-space: pre-wrap; }
+        .agent-copy-warning {
+            position: sticky; top: 0; z-index: 1;
+            padding: 12px 14px; border: 2px solid #e3a632; border-radius: 6px;
+            background: #392b12; color: #ffe3a1; font-weight: 600; line-height: 1.5;
+        }
+        .agent-copy-warning::before { content: '\26A0\00A0'; }
         .agent-tunnel-actions { display: flex; flex-wrap: wrap; gap: 8px; justify-content: flex-end; margin-top: 12px; }
         #paste-review-modal {
             display: none; position: fixed; top: 0; left: 0; right: 0; bottom: 0;
@@ -2652,16 +2658,24 @@ <h3>Recover StandTerm session</h3>
                 }).join('\n') : 'No active grants. Enable Agent and authorize the intended tabs first.';
             }
 
+            function setAgentConnectionMessage(element, message, copyFailed = false) {
+                element.classList.toggle('agent-copy-warning', copyFailed);
+                element.setAttribute('role', copyFailed ? 'alert' : 'status');
+                element.textContent = message;
+            }
+
             async function copyAgentConnectionField(fieldId, messageElement) {
                 const field = document.getElementById(fieldId);
                 if (!field.value) return;
                 try {
                     await navigator.clipboard.writeText(field.value);
-                    messageElement.textContent = 'Copied. Paste this to the agent in the indicated environment.';
+                    setAgentConnectionMessage(messageElement, 'Copied. Paste this to the agent in the indicated environment.');
                 } catch (_error) {
                     field.focus();
                     field.select();
-                    messageElement.textContent = 'Clipboard unavailable. Text selected; copy it manually.';
+                    const shortcut = isApplePlatform() ? 'Command+C' : 'Ctrl+C';
+                    setAgentConnectionMessage(messageElement, `Not copied. Text selected; press ${shortcut} to copy it manually.`, true);
+                    messageElement.scrollIntoView({ block: 'nearest' });
                 }
             }
 
@@ -2675,10 +2689,10 @@ <h3>Recover StandTerm session</h3>
                 document.getElementById('agent-connect-copy').disabled = true;
                 document.getElementById('agent-connect-copy-url').disabled = true;
                 if (!socket.connected) {
-                    agentConnectMessage.textContent = 'Core is disconnected. Reconnect before copying connection info.';
+                    setAgentConnectionMessage(agentConnectMessage, 'Core is disconnected. Reconnect before copying connection info.');
                     return;
                 }
-                agentConnectMessage.textContent = 'Loading connection info…';
+                setAgentConnectionMessage(agentConnectMessage, 'Loading connection info…');
                 socket.emit('agent_connect_info', result => {
                     if (requestId !== agentConnectRequest || !agentConnectDialog.open) return;
                     const available = result && result.status === 'ok';
@@ -2689,9 +2703,9 @@ <h3>Recover StandTerm session</h3>
                     document.getElementById('agent-connect-copy-url').disabled = !available;
                     agentConnectActivity = available ? result.terminals || [] : [];
                     renderAgentConnectionActivity('agent-connect-activity', agentConnectActivity);
-                    agentConnectMessage.textContent = available
+                    setAgentConnectionMessage(agentConnectMessage, available
                         ? 'Copy Prompt to the agent running on the Core host. Its first authenticated request confirms access.'
-                        : result?.message || 'Connection info unavailable.';
+                        : result?.message || 'Connection info unavailable.');
                 });
             }
 
@@ -2759,7 +2773,7 @@ <h3>Recover StandTerm session</h3>
                 if (data.status === 'stopped') {
                     invalidateAgentTunnel(data.terminal_id, 'Tunnel stopped. Start it again before copying a remote prompt.');
                 } else if (data.status === 'sync_failed' && data.carrier_id === agentTunnelId) {
-                    agentTunnelMessage.textContent = data.message;
+                    setAgentConnectionMessage(agentTunnelMessage, data.message);
                 }
             }
 
@@ -2773,7 +2787,7 @@ <h3>Recover StandTerm session</h3>
                 document.getElementById('agent-tunnel-check').disabled = true;
                 document.getElementById('agent-tunnel-stop').disabled = true;
                 document.getElementById('agent-tunnel-copy').hidden = true;
-                agentTunnelMessage.textContent = message;
+                setAgentConnectionMessage(agentTunnelMessage, message);
             }
 
             function renderAgentTunnelTargets(selected) {
@@ -2799,10 +2813,10 @@ <h3>Recover StandTerm session</h3>
                     readyAgentTunnels.delete(agentTunnelCarrier);
                 }
                 updateAgentTunnelButtons();
-                agentTunnelMessage.textContent = ready ? 'Copy Prompt to the agent running on this SSH host. The URL below belongs to that remote host. Agent activity is shown separately.'
+                setAgentConnectionMessage(agentTunnelMessage, ready ? 'Copy Prompt to the agent running on this SSH host. The URL below belongs to that remote host. Agent activity is shown separately.'
                     : result && result.status === 'stopped'
                         ? (result.cleanup_pending ? 'Access revoked. Remote cleanup is pending.' : 'Tunnel stopped.')
-                    : (result && result.message) || 'Tunnel setup failed.';
+                    : (result && result.message) || 'Tunnel setup failed.');
                 agentTunnelInfo.value = ready ? result.connect_info : '';
                 agentTunnelInfo.hidden = !ready;
                 agentTunnelId = ready ? result.carrier_id : null;
@@ -2838,8 +2852,8 @@ <h3>Recover StandTerm session</h3>
                 const requestId = ++agentTunnelRequest;
                 const terminalId = agentTunnelCarrier;
                 const connection = agentTunnelConnection;
-                agentTunnelMessage.textContent = operation === 'apply' ? 'Preparing and verifying Agent access…'
-                    : operation === 'check' ? 'Checking the remote listener, helpers, and connection to Core…' : 'Updating tunnel status…';
+                setAgentConnectionMessage(agentTunnelMessage, operation === 'apply' ? 'Preparing and verifying Agent access…'
+                    : operation === 'check' ? 'Checking the remote listener, helpers, and connection to Core…' : 'Updating tunnel status…');
                 document.getElementById('agent-tunnel-apply').disabled = true;
                 document.getElementById('agent-tunnel-check').disabled = true;
                 if (operation === 'apply') document.getElementById('agent-tunnel-stop').disabled = false;

From b936070586aa184c65f9a190b6e6878f9ec4a006 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Tue, 15 Sep 2026 13:40:49 +0800
Subject: [PATCH 04/43] Clarify Files copy progress and download results

## What changed
- Check destination conflicts before waiting for a busy SSH source, and revalidate the source after the user chooses an action.
- Keep copy progress, conflict choices and cancellation visible in short Files windows.
- Show the actual download path with a native folder reveal action.

## Testing
Cover conflict ordering, progress during a 4 MiB transfer, source changes, cancellation and short-window layout. Windows Electron downloads through WSL Core pass the focused Files smoke. The full Desktop smoke stops at the existing window-focus assertion.
---
 app.py                                 |   5 +-
 desktop/README.md                      |   7 +-
 desktop/floating-windows.cjs           |  24 ++++-
 desktop/main.cjs                       |  13 ++-
 desktop/test/floating-smoke.cjs        |  19 ++++
 desktop/test/floating-windows.test.cjs |  32 +++++++
 templates/index.html                   |  19 +++-
 tests/agent_backend_smoke.py           | 123 +++++++++++++++++++++++++
 tests/agent_browser_smoke.py           |  33 ++++++-
 9 files changed, 267 insertions(+), 8 deletions(-)

diff --git a/app.py b/app.py
index 1d4347f..17a1549 100644
--- a/app.py
+++ b/app.py
@@ -10657,13 +10657,16 @@ def discard_request_reservation():
             source_bridge,
             source_file_id,
         )
-        source_file = prepare_current_bridge_file(source_bridge, source_file)
         upload = prepare_bridge_upload(
             destination_bridge,
             destination_directory,
             destination_filename,
             conflict_mode,
         )
+        # Ask about an existing destination before waiting for a busy source's
+        # transfer lock. Revalidate the source after the user chooses an action.
+        if upload.get('status') != 'conflict':
+            source_file = prepare_current_bridge_file(source_bridge, source_file)
         validate_distinct_file_copy_target(
             source_bridge,
             destination_bridge,
diff --git a/desktop/README.md b/desktop/README.md
index 9d65425..dd0a827 100644
--- a/desktop/README.md
+++ b/desktop/README.md
@@ -720,6 +720,10 @@ The URL itself can contain private information, so review it before approval.
 Non-HTTP(S), credential-bearing URLs, loopback links and POST popups are rejected;
 pending confirmations are coalesced and owner lifetime is checked again after
 approval. Owned Files download tickets retain their existing download path.
+Completed Files downloads show the actual saved path in a native dialog with a
+**Show in folder** button. The folder belongs to the Desktop computer, including
+when Core runs in WSL or the source is an SSH host. Cancelled downloads do not
+show a completion notice; interrupted downloads offer a retry hint.
 An OS browser-launch failure displays an error. Normal Web preview/popup behavior
 is unchanged. This follows the restrictive handling required by
 [Electron's external-link security guidance](https://www.electronjs.org/docs/latest/tutorial/security#15-do-not-use-shellopenexternal-with-untrusted-content).
@@ -785,7 +789,8 @@ Floating-window regression also checks real child creation, private session and
 sandbox inheritance, rapid mixed clicks, denied navigation/nesting, close/restore,
 PiP-to-Files transition, reload cleanup and visible failure alerts. Where Local
 Files is supported, it browses a synthetic fixture and verifies downloaded binary
-bytes without opening a save dialog or another child window.
+bytes without opening a save dialog or another child window. Native dialog and
+folder-reveal spies verify the actual saved path without opening Explorer/Finder.
 
 Capture smoke additionally saves a PNG, checks clipboard image packaging without
 touching the user's clipboard, records and decodes WebM with a source-page pixel
diff --git a/desktop/floating-windows.cjs b/desktop/floating-windows.cjs
index bdd656b..910900c 100644
--- a/desktop/floating-windows.cjs
+++ b/desktop/floating-windows.cjs
@@ -2,9 +2,31 @@
 
 const { allowedFloatingWindow, allowedFilesDownload, allowedNavigation } = require('./policy.cjs');
 
-function installFloatingWindows(opener, origin, openExternal = () => {}, contents = opener.webContents) {
+function installFloatingWindows(opener, origin, openExternal = () => {}, contents = opener.webContents,
+  downloadDone = () => {}) {
   const children = new Set();
   const closing = new WeakSet();
+  const downloads = new Map();
+  const downloadSession = contents.session;
+  const onDownload = (_event, item, source) => {
+    const child = [...children].find(candidate => candidate.webContents === source);
+    if (source !== contents && !child) return;
+    if (!allowedFilesDownload(item.getURL(), origin)) return;
+    const done = (_doneEvent, state) => {
+      downloads.delete(item);
+      if (state === 'completed' || state === 'interrupted') {
+        downloadDone({ state, path: item.getSavePath() }, child && !child.isDestroyed() ? child : opener);
+      }
+    };
+    downloads.set(item, done);
+    item.once('done', done);
+  };
+  downloadSession.on('will-download', onDownload);
+  opener.once('closed', () => {
+    downloadSession.removeListener('will-download', onDownload);
+    for (const [item, done] of downloads) item.removeListener('done', done);
+    downloads.clear();
+  });
   const download = (target, details) => {
     if (!details.postBody && allowedNavigation(contents.getURL(), origin)) {
       if (allowedFilesDownload(details.url, origin)) target.downloadURL(details.url);
diff --git a/desktop/main.cjs b/desktop/main.cjs
index 091b61b..8a23554 100644
--- a/desktop/main.cjs
+++ b/desktop/main.cjs
@@ -459,7 +459,18 @@ async function start() {
     notify: () => dialog.showMessageBox(win, { type: 'warning', message: 'Could not open the default browser.',
       detail: 'Check the default HTTP/HTTPS browser in your operating system settings.' }),
   });
-  installFloatingWindows(win, handoff.origin, openExternal, contents);
+  installFloatingWindows(win, handoff.origin, openExternal, contents, (result, owner) => {
+    const completed = result.state === 'completed' && !!result.path;
+    void dialog.showMessageBox(owner, {
+      type: completed ? 'info' : 'warning', title: 'Files download',
+      message: completed ? 'Download complete' : 'Download did not complete',
+      detail: completed ? `Saved to:\n${result.path}` : 'The connection was interrupted. Retry the download from Files.',
+      buttons: completed ? ['Close', 'Show in folder'] : ['Close'],
+      defaultId: 0, cancelId: 0, noLink: true,
+    }).then(answer => {
+      if (completed && answer.response === 1) shell.showItemInFolder(result.path);
+    }).catch(() => diagnostics.write('download_notice_failed'));
+  });
   contents.on('will-navigate', (event, url) => {
     if (!allowedNavigation(url, handoff.origin)) event.preventDefault();
   });
diff --git a/desktop/test/floating-smoke.cjs b/desktop/test/floating-smoke.cjs
index 3b790e2..612386a 100644
--- a/desktop/test/floating-smoke.cjs
+++ b/desktop/test/floating-smoke.cjs
@@ -2,6 +2,7 @@
 const assert = require('node:assert/strict');
 const fs = require('node:fs');
 const path = require('node:path');
+const { dialog, shell } = require('electron');
 
 async function run(win, origin, contents = win.webContents) {
   const evaluate = async script => {
@@ -92,12 +93,30 @@ async function run(win, origin, contents = win.webContents) {
         }, 15000).unref();
       });
       let result;
+      const originalDialog = dialog.showMessageBox;
+      const originalReveal = shell.showItemInFolder;
+      const notices = [];
+      const revealed = [];
+      dialog.showMessageBox = async (owner, options) => {
+        notices.push({ owner, options });
+        return { response: 1 };
+      };
+      shell.showItemInFolder = selected => revealed.push(selected);
       try {
         await child.webContents.executeJavaScript("document.querySelector('.sftp-file-download').click()", true);
         result = await completed;
+        await new Promise(resolve => setImmediate(resolve));
+        assert.equal(notices.length, 1, 'Files download must show one completion notice');
+        assert.equal(notices[0].owner, child, 'notice must appear over the Files window');
+        assert.equal(notices[0].options.message, 'Download complete');
+        assert.equal(notices[0].options.detail, `Saved to:\n${output}`);
+        assert.deepEqual(notices[0].options.buttons, ['Close', 'Show in folder']);
+        assert.deepEqual(revealed, [output], 'reveal must use the actual renamed download path');
       } finally {
         clearTimeout(timer);
         downloadSession.removeListener('will-download', onDownload);
+        dialog.showMessageBox = originalDialog;
+        shell.showItemInFolder = originalReveal;
       }
       console.log(`Floating smoke: download ${result}.`);
       if (result !== 'completed') item?.cancel();
diff --git a/desktop/test/floating-windows.test.cjs b/desktop/test/floating-windows.test.cjs
index 7f00aec..ac8969a 100644
--- a/desktop/test/floating-windows.test.cjs
+++ b/desktop/test/floating-windows.test.cjs
@@ -32,6 +32,7 @@ test('Files downloads are exact-origin tickets, not arbitrary external links', (
 test('floating children deny navigation/nesting and close with opener lifecycle', () => {
   const opener = new EventEmitter();
   opener.webContents = new EventEmitter();
+  opener.webContents.session = new EventEmitter();
   opener.webContents.getURL = () => origin;
   opener.webContents.setWindowOpenHandler = fn => { opener.handler = fn; };
   const downloads = [];
@@ -73,3 +74,34 @@ test('floating children deny navigation/nesting and close with opener lifecycle'
   assert.equal(child.closed, true);
   assert.equal(opener.handler(valid).action, 'allow');
 });
+
+test('Files download notices use the completed native path and owned contents', () => {
+  const opener = new EventEmitter();
+  const contents = opener.webContents = new EventEmitter();
+  contents.session = new EventEmitter();
+  contents.setWindowOpenHandler = () => {};
+  const results = [];
+  installFloatingWindows(opener, origin, undefined, contents, result => results.push(result));
+  const ticket = `${origin}/sftp/download/${'a'.repeat(32)}`;
+  const download = (source, url = ticket) => {
+    const item = new EventEmitter();
+    item.getURL = () => url;
+    item.getSavePath = () => '/chosen folder/renamed.bin';
+    contents.session.emit('will-download', {}, item, source);
+    return item;
+  };
+  download(contents).emit('done', {}, 'completed');
+  assert.deepEqual(results, [{ state: 'completed', path: '/chosen folder/renamed.bin' }]);
+  download(contents).emit('done', {}, 'cancelled');
+  download(new EventEmitter()).emit('done', {}, 'completed');
+  download(contents, 'https://example.com/file').emit('done', {}, 'completed');
+  assert.equal(results.length, 1);
+  download(contents).emit('done', {}, 'interrupted');
+  assert.equal(results.at(-1).state, 'interrupted');
+  const pending = download(contents);
+  opener.emit('closed');
+  pending.emit('done', {}, 'completed');
+  assert.equal(results.length, 2);
+  assert.equal(contents.session.listenerCount('will-download'), 0);
+  assert.equal(pending.listenerCount('done'), 0);
+});
diff --git a/templates/index.html b/templates/index.html
index 93fcec0..ff7da3d 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -149,6 +149,15 @@
         .sftp-destination-pane {
             animation: sftp-destination-slide 0.16s ease-out;
         }
+        .sftp-copy-details {
+            flex: 1; min-height: 0; display: flex; flex-direction: column; gap: 10px; overflow: auto;
+        }
+        .sftp-copy-details > :not(.sftp-directory-list) { flex-shrink: 0; }
+        .sftp-copy-feedback { flex-shrink: 0; display: flex; flex-direction: column; gap: 10px; }
+        .sftp-copy-feedback .sftp-transfer-status { color: #eee; font-weight: 600; }
+        .sftp-copy-feedback .sftp-transfer-status, .sftp-copy-feedback .sftp-conflict-text {
+            max-height: 4.2em; overflow: auto;
+        }
         @keyframes sftp-destination-slide {
             from { opacity: 0; transform: translateX(18px); }
             to { opacity: 1; transform: translateX(0); }
@@ -265,7 +274,7 @@
         .sftp-transfer-status { min-height: 18px; color: #aaa; overflow-wrap: anywhere; }
         .sftp-transfer-status.error { color: #ff6b61; }
         .sftp-transfer-status.success { color: #34c759; }
-        .sftp-progress { display: none; width: 100%; height: 6px; overflow: hidden; border-radius: 3px; background: #333; }
+        .sftp-progress { display: none; flex-shrink: 0; width: 100%; height: 6px; overflow: hidden; border-radius: 3px; background: #333; }
         .sftp-progress.visible { display: block; }
         .sftp-progress-bar { width: 0; height: 100%; background: #0a84ff; transition: width 0.1s linear; }
         .sftp-pip-actions, .sftp-conflict-actions { display: flex; justify-content: flex-end; gap: 7px; }
@@ -9635,13 +9644,13 @@ <h3>Recover StandTerm session</h3>
                         state,
                         data.status === 'committing'
                             ? 'Publishing copied file…'
-                            : `Copying ${formatSftpBytes(copied)} / ${formatSftpBytes(total)}…`,
+                            : `Copying ${Math.floor(percent)}% · ${formatSftpBytes(copied)} / ${formatSftpBytes(total)}…`,
                     );
                     state.elements.lifecycle.textContent = data.status === 'committing'
                         ? 'Publishing has started. It cannot be cancelled; wait for the result before closing Files.'
                         : (state.cancelPending
                             ? 'Cancelling before the destination is published…'
-                            : 'Use Cancel copy before closing Files. Closing the system window does not cancel the copy.');
+                            : 'Keep Files open until finished, or use Cancel copy.');
                     setSftpPipBusy(state, false);
                     return;
                 }
@@ -9696,6 +9705,7 @@ <h3>Recover StandTerm session</h3>
                 const pane = sourceState.window.document.createElement('div');
                 pane.className = 'sftp-destination-pane';
                 pane.innerHTML = `
+                    <div class="sftp-copy-details">
                     <div class="sftp-destination-header">
                         <div class="sftp-destination-title">Choose destination</div>
                     </div>
@@ -9721,6 +9731,8 @@ <h3>Recover StandTerm session</h3>
                         <label>File name</label>
                         <input class="sftp-copy-name-input" type="text" spellcheck="false" aria-label="Destination file name">
                     </div>
+                    </div>
+                    <div class="sftp-copy-feedback">
                     <div class="sftp-conflict-box">
                         <div class="sftp-conflict-text"></div>
                         <div class="sftp-conflict-actions">
@@ -9736,6 +9748,7 @@ <h3>Recover StandTerm session</h3>
                         <button type="button" class="sftp-copy-cancel">Cancel</button>
                         <button type="button" class="sftp-copy-confirm primary">Copy</button>
                     </div>
+                    </div>
                 `;
                 const destinationState = {
                     mode: 'destination',
diff --git a/tests/agent_backend_smoke.py b/tests/agent_backend_smoke.py
index 1b00cb4..51fa37b 100644
--- a/tests/agent_backend_smoke.py
+++ b/tests/agent_backend_smoke.py
@@ -5546,6 +5546,127 @@ def test_files_copy_request_runs_human_local_copy_without_agent_approval():
     client.disconnect()
 
 
+def test_files_copy_conflict_precedes_reads_and_progress_precedes_completion():
+    client = make_client()
+    session_token = current_session_token()
+    sid = current_sid_for_session(session_token)
+    source = make_local_file_test_bridge(session_token, 'copy-source')
+    destination = make_local_file_test_bridge(session_token, 'copy-destination')
+    for bridge in (source, destination):
+        bridge.attach(sid)
+        standterm.set_bridge(session_token, bridge.terminal_id, bridge)
+    with tempfile.TemporaryDirectory() as directory:
+        root = Path(directory)
+        (root / 'source').mkdir()
+        (root / 'destination').mkdir()
+        content = bytes(range(256)) * (16 * 1024)
+        (root / 'source' / 'large.bin').write_bytes(content)
+        existing = root / 'destination' / 'large.bin'
+        existing.write_bytes(b'original')
+        entry = source.browse_local_files(str(root / 'source'))['files'][0]
+        payload = {
+            'request_id': 'large-conflict', 'source_terminal_id': source.terminal_id,
+            'source_file_id': entry['file_id'], 'destination_terminal_id': destination.terminal_id,
+            'destination_directory': str(existing.parent), 'destination_filename': existing.name,
+            'conflict_mode': 'ask',
+        }
+        client.get_received()
+        with patch.object(source, 'download_local_chunks', side_effect=AssertionError('Read before conflict choice')) as read:
+            client.emit(standterm.FILES_COPY_REQUEST_EVENT, payload)
+            assert last_payload(client, standterm.FILES_COPY_RESULT_EVENT)['status'] == 'conflict'
+            read.assert_not_called()
+        assert not standterm.files_copy_jobs
+        assert existing.read_bytes() == b'original'
+        original_download = source.download_local_chunks
+        for mode in ('keep_both', 'replace'):
+            paused, resume = threading.Event(), threading.Event()
+
+            def paced_download(snapshot):
+                transferred = 0
+                for chunk in original_download(snapshot):
+                    yield chunk
+                    transferred += len(chunk)
+                    if transferred == len(content) // 2:
+                        paused.set()
+                        assert resume.wait(5), 'Copy test did not release the source stream'
+
+            request_id = f'large-{mode}'
+            client.get_received()
+            with patch.object(source, 'download_local_chunks', side_effect=paced_download):
+                try:
+                    client.emit(standterm.FILES_COPY_REQUEST_EVENT, {
+                        **payload, 'request_id': request_id, 'conflict_mode': mode,
+                    })
+                    assert paused.wait(5), 'Copy did not reach the transfer midpoint'
+                    events = [event['args'][0] for event in client.get_received()
+                              if event['name'] == standterm.FILES_COPY_RESULT_EVENT]
+                    assert any(event['status'] == 'running' and 0 < event['bytes_copied'] < len(content)
+                               for event in events), 'Progress was not delivered during transfer'
+                    assert not any(event['status'] in ('completed', 'conflict') for event in events)
+                    assert existing.read_bytes() == b'original'
+                finally:
+                    resume.set()
+                wait_until(lambda: any(job['request_id'] == request_id and job['status'] == 'completed'
+                                       for job in standterm.files_copy_jobs.values()), 'Large copy did not complete')
+            job = next(job for job in standterm.files_copy_jobs.values() if job['request_id'] == request_id)
+            assert Path(job['result']['destination_path']).read_bytes() == content
+            assert (job['result']['destination_path'] == str(existing)) == (mode == 'replace')
+    client.disconnect()
+
+
+def test_files_copy_conflict_does_not_wait_for_busy_ssh_source():
+    client = make_client()
+    session_token = current_session_token()
+    sid = current_sid_for_session(session_token)
+    source = make_sftp_test_bridge(session_token, 'busy-source')
+    destination = make_local_file_test_bridge(session_token, 'conflict-destination')
+    for bridge in (source, destination):
+        bridge.attach(sid)
+        standterm.set_bridge(session_token, bridge.terminal_id, bridge)
+    snapshot = {
+        'directory': '/source', 'filename': 'large.bin', 'path': '/source/large.bin',
+        'size': 4 * 1024 * 1024, 'mtime': 25, 'endpoint': source.sftp_endpoint(),
+    }
+    file_id = source._register_sftp_file_reference(snapshot)
+    source._open_sftp = lambda: SimpleNamespace(
+        normalize=lambda path: path,
+        stat=lambda path: SimpleNamespace(st_mode=stat.S_IFDIR | 0o755),
+        lstat=lambda path: SimpleNamespace(st_mode=stat.S_IFREG | 0o644, st_size=snapshot['size'], st_mtime=25),
+        close=lambda: None,
+    )
+    with tempfile.TemporaryDirectory() as directory:
+        existing = Path(directory) / 'large.bin'
+        existing.write_bytes(b'original')
+        payload = {
+            'request_id': 'busy-source-conflict', 'source_terminal_id': source.terminal_id,
+            'source_file_id': file_id, 'destination_terminal_id': destination.terminal_id,
+            'destination_directory': directory, 'destination_filename': existing.name, 'conflict_mode': 'ask',
+        }
+        # An ongoing SSH download holds this same lock until its stream closes.
+        source._sftp_lock.acquire()
+        worker = threading.Thread(target=lambda: client.emit(standterm.FILES_COPY_REQUEST_EVENT, payload), daemon=True)
+        client.get_received()
+        worker.start()
+        try:
+            worker.join(1)
+            assert not worker.is_alive(), 'Conflict checking waited for the busy SSH source'
+            assert last_payload(client, standterm.FILES_COPY_RESULT_EVENT)['status'] == 'conflict'
+            assert not standterm.files_copy_jobs
+            assert existing.read_bytes() == b'original'
+        finally:
+            source._sftp_lock.release()
+            worker.join(5)
+        with patch.object(source, 'prepare_sftp_file', side_effect=standterm.SFTPTransferError(
+                'sftp_file_changed', 'Source changed while choosing a conflict action.')):
+            client.emit(standterm.FILES_COPY_REQUEST_EVENT, {
+                **payload, 'request_id': 'busy-source-replace', 'conflict_mode': 'replace',
+            })
+            assert last_payload(client, standterm.FILES_COPY_RESULT_EVENT)['error_code'] == 'sftp_file_changed'
+            assert existing.read_bytes() == b'original'
+            assert not standterm.files_copy_jobs
+    client.disconnect()
+
+
 def test_files_copy_request_rejects_same_ssh_endpoint_path():
     client = make_client()
     session_token = current_session_token()
@@ -8489,6 +8610,8 @@ def main():
         test_external_agent_file_copy_supports_local_shell_endpoints,
         test_local_shell_files_supports_browse_transfer_rename_and_delete,
         test_files_copy_request_runs_human_local_copy_without_agent_approval,
+        test_files_copy_conflict_precedes_reads_and_progress_precedes_completion,
+        test_files_copy_conflict_does_not_wait_for_busy_ssh_source,
         test_files_copy_request_rejects_same_ssh_endpoint_path,
         test_files_copy_start_failure_keeps_correlated_terminal_result,
         test_files_copy_cancel_request_stops_before_commit_barrier,
diff --git a/tests/agent_browser_smoke.py b/tests/agent_browser_smoke.py
index 937cc14..9a14302 100644
--- a/tests/agent_browser_smoke.py
+++ b/tests/agent_browser_smoke.py
@@ -1183,6 +1183,28 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
         check(copy_payload['destination_directory'] == '/home/local', 'Files copy lost the canonical destination view')
         check(copy_payload['destination_filename'] == 'reference.txt', 'Files copy lost the destination filename')
         check('source_path' not in copy_payload, 'Files copy trusted the displayed source path as authority')
+        conflict_ui = page.evaluate(
+            """payload => {
+                const w = documentPictureInPicture.window;
+                w.document.documentElement.style.height = '480px';
+                w.document.documentElement.style.width = '620px';
+                window.terminalTest.handleFilesCopyResultForTest({
+                    request_id: payload.request_id, status: 'conflict',
+                    destination_path: '/home/' + 'nested/'.repeat(100) + 'reference.txt', existing_size: 9
+                });
+                const box = w.document.querySelector('.sftp-destination-pane .sftp-conflict-box');
+                const rect = box.getBoundingClientRect();
+                return { visible: w.getComputedStyle(box).display !== 'none',
+                    top: rect.top, bottom: rect.bottom };
+            }""", copy_payload,
+        )
+        check(conflict_ui['visible'] and 0 <= conflict_ui['top'] < conflict_ui['bottom'] <= 480,
+              'conflict choices were clipped in a short Files window')
+        check(len(get_emitted(page, 'files_copy_request')) == 1,
+              'conflict started another copy before the user chose an action')
+        page.evaluate("() => documentPictureInPicture.window.document.querySelector('.sftp-destination-pane .sftp-conflict-keep').click()")
+        copy_payload = get_emitted(page, 'files_copy_request')[-1]['args'][0]
+        check(copy_payload['conflict_mode'] == 'keep_both', 'Keep Both lost the explicit conflict choice')
         copy_result_ui = page.evaluate(
             """payload => {
                 window.terminalTest.handleFilesCopyResultForTest({
@@ -1191,7 +1213,7 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
                     status: 'running',
                     revision: 0,
                     source_size: 9,
-                    bytes_copied: 0,
+                    bytes_copied: 4,
                     total_bytes: 9,
                     destination_path: '/home/local/reference.txt'
                 });
@@ -1204,6 +1226,10 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
                 });
                 const statusAfterForeign = documentPictureInPicture.window.document
                     .querySelector('.sftp-destination-pane .sftp-transfer-status').innerText;
+                const feedback = documentPictureInPicture.window.document.querySelector('.sftp-copy-feedback');
+                const progress = feedback.querySelector('.sftp-progress');
+                const progressVisible = progress.getBoundingClientRect().height >= 6
+                    && feedback.getBoundingClientRect().top >= 0 && feedback.getBoundingClientRect().bottom <= 480;
                 window.terminalTest.handleFilesCopyResultForTest({
                     request_id: payload.request_id,
                     copy_id: 'filesc_test',
@@ -1246,6 +1272,7 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
                 });
                 return {
                     statusAfterForeign,
+                    progressVisible,
                     publishing,
                     terminalButtonText: documentPictureInPicture.window.document
                         .querySelector('.sftp-copy-cancel').innerText,
@@ -1256,6 +1283,10 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
             copy_payload,
         )
         check(copy_result_ui['statusAfterForeign'].startswith('Copying '), 'Files copy accepted a foreign copy_id with the same request_id')
+        check('44%' in copy_result_ui['statusAfterForeign'] and '4 B / 9 B' in copy_result_ui['statusAfterForeign'],
+              'Files copy omitted the percentage or transferred bytes')
+        check(copy_result_ui['progressVisible'], 'Files copy progress or cancel controls were clipped')
+        page.evaluate("() => { const s = documentPictureInPicture.window.document.documentElement.style; s.height = ''; s.width = ''; }")
         check(copy_result_ui['publishing']['text'] == 'Publishing…', 'commit barrier did not replace the cancel action')
         check(copy_result_ui['publishing']['disabled'] is True, 'commit barrier still allowed cancellation')
         check('cannot be cancelled' in copy_result_ui['publishing']['lifecycle'], 'commit barrier did not explain its cancellation boundary')

From 3e90e5eda4e5f0fe28c661d677962442b43a1d81 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Tue, 15 Sep 2026 15:21:36 +0800
Subject: [PATCH 05/43] Add user-managed SSH TCP tunnels

## Why
Connected SSH tabs expose only the managed Agent Tunnel preset, leaving users
without general local and remote TCP forwarding controls.

## What changed
- Add temporary browser-owned local and remote forwards with status and Stop.
- Share bounded duplex relays and reverse-port dispatch with Agent Tunnel.
- Preserve Agent API permissions and reject non-loopback remote clients.

## Testing
Exercise both directions through real OpenSSH and three jump hosts, large
half-close and duplex transfers, independent Agent Tunnel cancellation,
viewer ownership, late setup and Core API permission checks. Verify browser
controls and the existing Core headless smoke collection.
---
 README.md                          |  45 ++++
 agent_tunnel.py                    |  35 ++-
 app.py                             |  94 +++++++
 scripts/run_smoke_tests.py         |   4 +
 ssh_forwarding.py                  | 132 ++++++++++
 ssh_tunnels.py                     | 224 ++++++++++++++++
 templates/index.html               | 223 +++++++++++++++-
 tests/agent_tunnel_smoke.py        |   4 +-
 tests/ssh_tunnels_browser_smoke.py |  96 +++++++
 tests/ssh_tunnels_smoke.py         | 410 +++++++++++++++++++++++++++++
 10 files changed, 1245 insertions(+), 22 deletions(-)
 create mode 100644 ssh_forwarding.py
 create mode 100644 ssh_tunnels.py
 create mode 100644 tests/ssh_tunnels_browser_smoke.py
 create mode 100644 tests/ssh_tunnels_smoke.py

diff --git a/README.md b/README.md
index deccc68..adfb05a 100644
--- a/README.md
+++ b/README.md
@@ -622,6 +622,51 @@ Python environment.
 UART access follows the same local-client/browser-authorization gate as Local
 Shell unless `STANDTERM_ALLOW_REMOTE_UART=1` is set.
 
+## User SSH Tunnels
+
+After connecting an SSH tab, open **Tunnels** to create temporary TCP forwards
+without reconnecting. Choose a direction, listening port, target host and target
+port; listening port `0` lets the operating system choose an available port.
+Each tunnel shows its assigned port, state, active connections and byte counts.
+**Stop** closes that tunnel's listener and connections while keeping SSH, Files
+and other tunnels available. **Listening** confirms the forward is ready to
+accept connections; target-service failures appear when a client connects.
+
+| Direction | Listener | Target is reached from |
+| --- | --- | --- |
+| Local (`-L`) | Core host's `127.0.0.1` | Final SSH host |
+| Remote (`-R`) | Requested on final SSH host's `127.0.0.1` | Core host |
+
+For example, local port `8080` to target `127.0.0.1:80` makes the SSH host's web
+service available at `http://127.0.0.1:8080` on the Core host. A remote forward
+with those ports makes the Core host's port `80` available from the SSH host's
+port `8080`. Here, **Core host** means where the Core process runs: WSL when
+started by `run_wsl.bat`, even if the Desktop window runs on Windows. Target
+hostnames are resolved on the side shown in the table. Jump routes use the final
+SSH connection, including routes with three jump hosts.
+
+These controls require an authenticated browser viewer. External-agent commands,
+helpers and skills cannot create, inspect or stop user tunnels. Tunnels stop when
+SSH closes or their creating viewer disconnects, including page reload or loss
+of its Core connection. Closing only the Tunnels dialog keeps them running.
+They are not saved or restored automatically. A tab allows up to eight user
+tunnels, with eight simultaneous connections per tunnel and 32 shared with Agent
+Tunnel on its SSH transport.
+
+User tunnels require SSH TCP forwarding support but no remote StandTerm helper,
+Python or listener-inspection tool. Local listeners bind only to `127.0.0.1`.
+Remote forwards request that address and reject peers with non-loopback source
+addresses; the SSH server controls the actual listening interfaces. A server
+configured with `GatewayPorts yes` can bind more broadly than requested. Use
+`GatewayPorts no` or `clientspecified` when the listener itself must stay on
+loopback. Generic tunnels do not inspect or change server configuration.
+
+The target may be Core or an Agent HTTP endpoint. TCP forwarding grants no API
+access by itself: the endpoint's authentication and tab permissions still apply.
+**Agent Tunnel** remains the managed preset that prepares helpers, grants and
+Agent Info, and verifies the remote listener. Its low privilege comes from its
+scoped HTTP API and grants; generic TCP forwarding does not reproduce that setup.
+
 ## SSH Agent Tunnel
 
 On a connected SSH tab, **Agent Tunnel** can provision remote Agent access
diff --git a/agent_tunnel.py b/agent_tunnel.py
index 130822f..58f779f 100644
--- a/agent_tunnel.py
+++ b/agent_tunnel.py
@@ -3,7 +3,6 @@
 import base64
 import hashlib
 import secrets
-import select
 import re
 import shlex
 import socket
@@ -14,6 +13,7 @@
 
 from flask import Flask, jsonify, request
 from werkzeug.serving import WSGIRequestHandler, make_server
+from ssh_forwarding import forwarding_for, relay_tcp
 
 
 TUNNEL_IO_TIMEOUT = 30
@@ -21,7 +21,6 @@
 TUNNEL_MAX_CHANNELS = 16
 TUNNEL_MAX_REQUEST_BYTES = 1024 * 1024
 TUNNEL_MONITOR_INTERVAL = 1
-TUNNEL_FORWARD_POLL_SECONDS = 1
 TUNNEL_REMOTE_PYTHON = 'python3'
 TUNNEL_HELPERS = ('cli', 'input', 'jsonl', 'repl', 'scp', 'shcmd', 'type', 'rsfile', 'mcp', 'tunnel_runtime')
 TUNNEL_SKILLS = ('standterm-external-agent-skill', 'standterm-file-transfer', 'standterm-privileged-hitl')
@@ -46,6 +45,7 @@ def __init__(self, bridge, sid, app_dir, *, build_info, dispatch, revoke):
         self.revoke = revoke
         self.id = 'tun_' + secrets.token_urlsafe(18)
         self.transport = bridge.ssh.get_transport()
+        self.forwarding = forwarding_for(self.transport) if self.transport else None
         self.runtime = None
         self.port = None
         self.active = False
@@ -228,27 +228,24 @@ def command():
     def _accept(self, channel, origin, destination):
         with self.lock:
             if (not self.active or destination != ('127.0.0.1', self.port)
-                    or len(self._channels) >= TUNNEL_MAX_CHANNELS):
+                    or len(self._channels) >= TUNNEL_MAX_CHANNELS
+                    or not self.forwarding.connections.acquire(blocking=False)):
                 channel.close()
                 return
             self._channels.add(channel)
-        threading.Thread(target=self._forward, args=(channel,), daemon=True).start()
+        try:
+            threading.Thread(target=self._forward, args=(channel,), daemon=True).start()
+        except Exception:
+            with self.lock:
+                self._channels.discard(channel)
+            self.forwarding.connections.release()
+            channel.close()
 
     def _forward(self, channel):
         local = None
         try:
             local = socket.create_connection(('127.0.0.1', self._server.server_port), TUNNEL_IO_TIMEOUT)
-            local.settimeout(TUNNEL_IO_TIMEOUT)
-            channel.settimeout(TUNNEL_IO_TIMEOUT)
-            while self.active:
-                readable, _, _ = select.select([channel, local], [], [], TUNNEL_FORWARD_POLL_SECONDS)
-                if not readable:
-                    continue
-                for source in readable:
-                    data = source.recv(65536)
-                    if not data:
-                        return
-                    (local if source is channel else channel).sendall(data)
+            relay_tcp(channel, local, lambda: not self.active)
         except (OSError, EOFError):
             pass
         finally:
@@ -257,6 +254,7 @@ def _forward(self, channel):
                 local.close()
             with self.lock:
                 self._channels.discard(channel)
+            self.forwarding.connections.release()
 
     def start(self):
         with self.setup_lock:
@@ -312,9 +310,8 @@ def _monitor(self):
                 return
 
     def _cancel_forward(self):
-        if self.port and self.transport.is_active():
-            # A cancel acknowledgement is not needed to fence access locally.
-            self.transport.global_request('cancel-tcpip-forward', ('127.0.0.1', self.port), wait=False)
+        if self.port:
+            self.forwarding.cancel_remote(self.port, self)
 
     def _request_forward(self):
         completed = threading.Event()
@@ -323,7 +320,7 @@ def _request_forward(self):
 
         def run():
             try:
-                self.port = self.transport.request_port_forward('127.0.0.1', 0, handler=self._accept)
+                self.port = self.forwarding.request_remote(0, self, self._accept, self._closed.is_set)
                 if self._closed.is_set():
                     self._cancel_forward()
             except Exception as exc:
diff --git a/app.py b/app.py
index 17a1549..90f8f42 100644
--- a/app.py
+++ b/app.py
@@ -23,6 +23,7 @@
 from pathlib import Path, PurePosixPath
 from functools import partial
 from agent_tunnel import AgentTunnel, tunnel_ingress
+from ssh_tunnels import UserTunnel, parse_tunnel_spec, USER_TUNNEL_MAX_ACTIVE, USER_TUNNEL_MAX_RECORDS
 from core_version import CORE_VERSION
 from flask import Flask, Response, render_template, request, abort, make_response, redirect, send_file, jsonify, stream_with_context
 from flask_socketio import SocketIO, ConnectionRefusedError
@@ -3636,6 +3637,8 @@ def clear(self):
 
 external_agent_attach_store = ExternalAgentAttachStore()
 agent_tunnels = {}
+user_ssh_tunnels = {}
+user_ssh_tunnels_lock = threading.RLock()
 
 def get_agent_session_id(session_token):
     if not session_token:
@@ -5852,6 +5855,10 @@ def close_bridge(bridge):
     if not bridge:
         return
     bridge.closing = True
+    with user_ssh_tunnels_lock:
+        user_tunnels = [record['tunnel'] for record in user_ssh_tunnels.values() if record['bridge'] is bridge]
+    for user_tunnel in user_tunnels:
+        user_tunnel.stop()
     tunnel = getattr(bridge, 'agent_tunnel', None)
     if tunnel:
         tunnel.close()
@@ -7663,6 +7670,89 @@ def agent_tunnel_status(tunnel):
     }
 
 
+def user_ssh_tunnel_authorized(record):
+    bridge = record['bridge']
+    return (socket_session_tokens.get(record['sid']) == record['session_token']
+            and get_bridge(record['session_token'], record['terminal_id']) is bridge
+            and not bridge.closing and bridge.ssh is not None
+            and bridge.ssh.get_transport() is record['transport']
+            and is_terminal_bridge_allowed_for_sid(bridge, record['sid']))
+
+
+def emit_user_ssh_tunnel(record):
+    if not user_ssh_tunnel_authorized(record):
+        return
+    with user_ssh_tunnels_lock:
+        if user_ssh_tunnels.get(record['tunnel'].id) is not record:
+            return
+    socketio.emit('ssh_tunnel_state', {
+        'terminal_id': record['terminal_id'], 'connection_id': record['tunnel'].forwarding.id,
+        'tunnel': record['tunnel'].snapshot(),
+    }, room=record['sid'])
+
+
+@socketio.on('ssh_tunnel')
+def on_user_ssh_tunnel(data):
+    # This adapter requires browser-session authentication. Do not register it
+    # in the external-agent command table without a separate authorization flow.
+    session_token = socket_session_tokens.get(request.sid)
+    terminal_id = validate_terminal_id_payload(data)
+    if not session_token or not terminal_id:
+        return {'status': 'failed', 'message': 'Invalid SSH terminal.'}
+    bridge = get_allowed_bridge(session_token, terminal_id, request.sid)
+    transport = bridge.ssh.get_transport() if isinstance(bridge, SSHBridge) and bridge.ssh else None
+    if not transport or not transport.is_authenticated() or bridge.closing:
+        return {'status': 'failed', 'message': 'Tunnels require a connected SSH terminal.'}
+    operation = data.get('operation')
+    if operation == 'status':
+        with user_ssh_tunnels_lock:
+            records = [record for record in user_ssh_tunnels.values()
+                       if record['bridge'] is bridge and record['sid'] == request.sid and record['transport'] is transport]
+        return {'status': 'ok', 'terminal_id': terminal_id,
+                'tunnels': [record['tunnel'].snapshot() for record in records],
+                'connection_id': UserTunnel.connection_id(transport),
+                'ssh_endpoint': bridge.sftp_endpoint()}
+    if operation == 'stop':
+        tunnel_id = data.get('tunnel_id')
+        if not isinstance(tunnel_id, str) or len(tunnel_id) > 128:
+            return {'status': 'failed', 'message': 'Invalid tunnel.'}
+        with user_ssh_tunnels_lock:
+            record = user_ssh_tunnels.get(tunnel_id)
+            if not record or record['bridge'] is not bridge or record['sid'] != request.sid or record['transport'] is not transport:
+                return {'status': 'failed', 'message': 'This tunnel is unavailable to this viewer.'}
+        record['tunnel'].stop()
+        return {'status': 'ok', 'tunnel': record['tunnel'].snapshot()}
+    if operation != 'start':
+        return {'status': 'failed', 'message': 'Invalid tunnel operation.'}
+    try:
+        spec = parse_tunnel_spec(data.get('spec'))
+    except ValueError as exc:
+        return {'status': 'failed', 'message': str(exc)}
+    record = {'session_token': session_token, 'sid': request.sid, 'terminal_id': terminal_id,
+              'bridge': bridge, 'transport': transport}
+    tunnel = UserTunnel(transport, spec, authorized=lambda: user_ssh_tunnel_authorized(record),
+                        changed=lambda: emit_user_ssh_tunnel(record))
+    record['tunnel'] = tunnel
+    with user_ssh_tunnels_lock:
+        if not user_ssh_tunnel_authorized(record):
+            return {'status': 'failed', 'message': 'The SSH connection or viewer changed during setup.'}
+        active = [item for item in user_ssh_tunnels.values() if not item['tunnel'].closed.is_set()]
+        if len(active) >= USER_TUNNEL_MAX_RECORDS or sum(item['bridge'] is bridge for item in active) >= USER_TUNNEL_MAX_ACTIVE:
+            return {'status': 'failed', 'message': 'The active tunnel limit was reached. Stop an unused tunnel first.'}
+        finished = sorted((item for item in user_ssh_tunnels.values() if item['tunnel'].closed.is_set()),
+                          key=lambda item: item['tunnel'].created_at)
+        while len(user_ssh_tunnels) >= USER_TUNNEL_MAX_RECORDS and finished:
+            user_ssh_tunnels.pop(finished.pop(0)['tunnel'].id, None)
+        # Reserve the pending owner before any network I/O or background work.
+        user_ssh_tunnels[tunnel.id] = record
+    try:
+        socketio.start_background_task(tunnel.start)
+    except Exception:
+        tunnel.setup_done.set()
+        tunnel.stop('The tunnel worker could not be started.')
+    return {'status': 'ok', 'tunnel': tunnel.snapshot()}
+
+
 @socketio.on('agent_tunnel')
 def on_agent_tunnel(data):
     session_token = socket_session_tokens.get(request.sid)
@@ -11374,6 +11464,10 @@ def on_disconnect(reason=None):
     agent_viewer_ids.pop(request.sid, None)
     if session_token:
         cancel_terminal_starts(session_token, sid=request.sid)
+        with user_ssh_tunnels_lock:
+            user_tunnels = [record['tunnel'] for record in user_ssh_tunnels.values() if record['sid'] == request.sid]
+        for user_tunnel in user_tunnels:
+            user_tunnel.stop()
         for tunnel in list(agent_tunnels.values()):
             if tunnel.sid == request.sid:
                 tunnel.close()
diff --git a/scripts/run_smoke_tests.py b/scripts/run_smoke_tests.py
index d87a592..69a553a 100644
--- a/scripts/run_smoke_tests.py
+++ b/scripts/run_smoke_tests.py
@@ -10,6 +10,8 @@
     'app.py',
     'session_recovery.py',
     'server_startup.py',
+    'ssh_forwarding.py',
+    'ssh_tunnels.py',
     'scripts/access_window.py',
     'tests/access_window_smoke.py',
     'tests/server_startup_smoke.py',
@@ -28,6 +30,8 @@
     'tests/ssh_start_smoke.py',
     'tests/ssh_login_smoke.py',
     'tests/ssh_node_credentials_smoke.py',
+    'tests/ssh_tunnels_smoke.py',
+    'tests/ssh_tunnels_browser_smoke.py',
     'tests/ime_anchor_browser_smoke.py',
 ]
 
diff --git a/ssh_forwarding.py b/ssh_forwarding.py
new file mode 100644
index 0000000..2364154
--- /dev/null
+++ b/ssh_forwarding.py
@@ -0,0 +1,132 @@
+"""Shared SSH forwarding primitives for user tunnels and the Agent preset."""
+import ipaddress
+import secrets
+import socket
+import threading
+
+
+FORWARD_BIND_HOST = '127.0.0.1'
+FORWARD_CONNECT_TIMEOUT = 10
+FORWARD_POLL_SECONDS = 1
+FORWARD_BUFFER_BYTES = 65536
+FORWARD_MAX_CONNECTIONS = 32
+_contexts_lock = threading.Lock()
+
+
+def is_loopback_address(address):
+    try:
+        value = ipaddress.ip_address(address)
+        return value.is_loopback or bool(getattr(value, 'ipv4_mapped', None) and value.ipv4_mapped.is_loopback)
+    except ValueError:
+        return False
+
+
+class SSHForwarding:
+    def __init__(self, transport):
+        self.transport = transport
+        self.id = secrets.token_urlsafe(12)
+        self.connections = threading.BoundedSemaphore(FORWARD_MAX_CONNECTIONS)
+        self.lock = threading.Lock()
+        self.request_lock = threading.Lock()
+        self.routes = {}
+
+    def request_remote(self, port, owner, accept, cancelled):
+        # Paramiko has one global request response slot and one TCP handler.
+        # A timed-out caller must not release this lock for its still-running I/O.
+        if not self.request_lock.acquire(blocking=False):
+            raise RuntimeError('Another remote tunnel request is still pending. Retry after it finishes.')
+        try:
+            if cancelled():
+                raise RuntimeError('Tunnel setup was cancelled.')
+            allocated = self.transport.request_port_forward(FORWARD_BIND_HOST, port, handler=self._dispatch)
+            if not 1 <= allocated <= 65535:
+                raise RuntimeError('The SSH server returned an invalid listening port.')
+            with self.lock:
+                if allocated in self.routes:
+                    raise RuntimeError('The SSH server reused an active tunnel port.')
+                self.routes[allocated] = (owner, accept)
+            if cancelled():
+                self.cancel_remote(allocated, owner)
+            return allocated
+        finally:
+            self.request_lock.release()
+
+    def cancel_remote(self, port, owner):
+        with self.lock:
+            route = self.routes.get(port)
+            if not route or route[0] is not owner:
+                return
+            del self.routes[port]
+        if self.transport.is_active():
+            # cancel_port_forward clears Paramiko's handler for every listener.
+            self.transport.global_request('cancel-tcpip-forward', (FORWARD_BIND_HOST, port), wait=False)
+
+    def _dispatch(self, channel, origin, destination):
+        with self.lock:
+            route = self.routes.get(destination[1])
+        if not route:
+            channel.close()
+            return
+        # Callbacks only admit and start a worker; never connect or relay here.
+        try:
+            route[1](channel, origin, destination)
+        except Exception:
+            channel.close()
+
+
+def forwarding_for(transport):
+    with _contexts_lock:
+        context = getattr(transport, '_standterm_forwarding', None)
+        if context is None:
+            context = SSHForwarding(transport)
+            transport._standterm_forwarding = context
+        return context
+
+
+def relay_tcp(left, right, stopped, progress=None):
+    """Drain both TCP directions, including responses after a write half-close."""
+    failed = threading.Event()
+    left.settimeout(FORWARD_POLL_SECONDS)
+    right.settimeout(FORWARD_POLL_SECONDS)
+
+    def pump(source, destination, direction):
+        try:
+            while not stopped() and not failed.is_set():
+                try:
+                    data = source.recv(FORWARD_BUFFER_BYTES)
+                except socket.timeout:
+                    continue
+                if not data:
+                    if hasattr(destination, 'shutdown_write'):
+                        destination.shutdown_write()
+                    else:
+                        destination.shutdown(socket.SHUT_WR)
+                    return
+                pending = memoryview(data)
+                while pending and not stopped() and not failed.is_set():
+                    try:
+                        sent = destination.send(pending)
+                    except socket.timeout:
+                        continue
+                    if not sent:
+                        raise EOFError('The forwarding destination closed.')
+                    pending = pending[sent:]
+                    if progress:
+                        progress(direction, sent)
+        except (OSError, EOFError):
+            failed.set()
+            source.close()
+            destination.close()
+
+    reverse = threading.Thread(target=pump, args=(right, left, 'received'), daemon=True)
+    try:
+        reverse.start()
+        pump(left, right, 'sent')
+        while reverse.is_alive():
+            if stopped() or failed.is_set():
+                left.close()
+                right.close()
+            reverse.join(FORWARD_POLL_SECONDS)
+    finally:
+        left.close()
+        right.close()
diff --git a/ssh_tunnels.py b/ssh_tunnels.py
new file mode 100644
index 0000000..95d33ea
--- /dev/null
+++ b/ssh_tunnels.py
@@ -0,0 +1,224 @@
+"""User-configured TCP tunnels; authentication belongs to the calling adapter."""
+import ipaddress
+import secrets
+import socket
+import threading
+import time
+
+from ssh_forwarding import (
+    FORWARD_BIND_HOST, FORWARD_CONNECT_TIMEOUT, FORWARD_POLL_SECONDS,
+    forwarding_for, is_loopback_address, relay_tcp,
+)
+
+
+USER_TUNNEL_SETUP_TIMEOUT = 45
+USER_TUNNEL_MAX_CONNECTIONS = 8
+USER_TUNNEL_MAX_ACTIVE = 8
+USER_TUNNEL_MAX_RECORDS = 64
+
+
+def parse_tunnel_spec(data):
+    if not isinstance(data, dict) or not isinstance(data.get('direction'), str) or data['direction'] not in {'local', 'remote'}:
+        raise ValueError('Choose a tunnel direction.')
+    ports = {}
+    for field, minimum in (('listen_port', 0), ('target_port', 1)):
+        value = data.get(field)
+        if type(value) is not int or not minimum <= value <= 65535:
+            raise ValueError('Enter valid port numbers. Listening port 0 chooses an available port.')
+        ports[field] = value
+    host = data.get('target_host')
+    if not isinstance(host, str) or not host or len(host) > 253:
+        raise ValueError('Enter a target hostname or IP address.')
+    if any(character.isspace() or ord(character) < 32 for character in host) or any(c in host for c in '/\\@\x7f'):
+        raise ValueError('Enter a hostname or IP address without a URL scheme or path.')
+    try:
+        ipaddress.ip_address(host)
+    except ValueError:
+        try:
+            host = host.encode('idna').decode('ascii')
+        except UnicodeError:
+            raise ValueError('The target hostname is invalid.') from None
+        if len(host) > 253 or ':' in host or any(not label or len(label) > 63 or label.startswith('-') or label.endswith('-')
+                              or not all(c.isalnum() or c in '-_' for c in label)
+                              for label in host.rstrip('.').split('.')):
+            raise ValueError('The target hostname is invalid.')
+    name = data.get('name', '')
+    if not isinstance(name, str) or len(name) > 80 or any(ord(c) < 32 or ord(c) == 127 for c in name):
+        raise ValueError('Tunnel names must be at most 80 characters without control characters.')
+    return {'direction': data['direction'], 'target_host': host, 'name': name, **ports}
+
+
+class UserTunnel:
+    @staticmethod
+    def connection_id(transport):
+        return forwarding_for(transport).id
+
+    def __init__(self, transport, spec, *, authorized, changed):
+        self.id = 'ssht_' + secrets.token_urlsafe(18)
+        self.transport = transport
+        self.forwarding = forwarding_for(transport)
+        self.spec = dict(spec)
+        self.authorized = authorized
+        self.changed = changed
+        self.lock = threading.RLock()
+        self.closed = threading.Event()
+        self.setup_done = threading.Event()
+        self.status = 'starting'
+        self.error = None
+        self.port = None
+        self.listener = None
+        self.channels = set()
+        self.bytes_sent = 0
+        self.bytes_received = 0
+        self.revision = 0
+        self.created_at = time.monotonic()
+
+    def snapshot(self):
+        with self.lock:
+            self.revision += 1
+            return {'tunnel_id': self.id, **self.spec, 'status': self.status,
+                    'revision': self.revision,
+                    'bound_port': self.port, 'bind_host': FORWARD_BIND_HOST,
+                    'connections': len(self.channels), 'bytes_sent': self.bytes_sent,
+                    'bytes_received': self.bytes_received, 'error': self.error,
+                    'cleanup_pending': self.closed.is_set() and not self.setup_done.is_set()}
+
+    def available(self):
+        return not self.closed.is_set() and self.transport.is_active() and self.authorized()
+
+    def start(self):
+        if self.closed.is_set():
+            self.setup_done.set()
+            return
+        try:
+            threading.Thread(target=self._setup, daemon=True).start()
+        except Exception:
+            self.setup_done.set()
+            self.stop('The tunnel setup worker could not be started.')
+            return
+        if not self.setup_done.wait(USER_TUNNEL_SETUP_TIMEOUT):
+            self.stop('Tunnel setup timed out. A pending remote request must finish before another can start.')
+
+    def _setup(self):
+        try:
+            if not self.available():
+                raise RuntimeError('The SSH connection or owning viewer is no longer available.')
+            if self.spec['direction'] == 'local':
+                listener = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+                with self.lock:
+                    self.listener = listener
+                    if self.closed.is_set():
+                        listener.close()
+                        return
+                listener.bind((FORWARD_BIND_HOST, self.spec['listen_port']))
+                listener.listen(USER_TUNNEL_MAX_CONNECTIONS)
+                listener.settimeout(FORWARD_POLL_SECONDS)
+                self.port = listener.getsockname()[1]
+            else:
+                self.port = self.forwarding.request_remote(
+                    self.spec['listen_port'], self, self._accept_remote, lambda: not self.available())
+            with self.lock:
+                if not self.available():
+                    raise RuntimeError('Tunnel setup was cancelled.')
+                self.status = 'listening'
+            self.changed()
+            threading.Thread(target=self._monitor, daemon=True).start()
+        except Exception as exc:
+            self.stop(str(exc))
+        finally:
+            self.setup_done.set()
+            if self.closed.is_set() and self.port and self.spec['direction'] == 'remote':
+                self.forwarding.cancel_remote(self.port, self)
+            self.changed()
+
+    def _monitor(self):
+        while self.available():
+            if self.spec['direction'] == 'remote':
+                self.closed.wait(FORWARD_POLL_SECONDS)
+                continue
+            try:
+                channel, origin = self.listener.accept()
+            except socket.timeout:
+                continue
+            except OSError:
+                break
+            self._accept(channel, origin)
+        self.stop()
+
+    def _accept_remote(self, channel, origin, destination):
+        if destination != (FORWARD_BIND_HOST, self.port) or not is_loopback_address(origin[0]):
+            channel.close()
+            return
+        self._accept(channel, origin)
+
+    def _accept(self, channel, origin):
+        with self.lock:
+            if (not self.available() or len(self.channels) >= USER_TUNNEL_MAX_CONNECTIONS
+                    or not self.forwarding.connections.acquire(blocking=False)):
+                channel.close()
+                return
+            self.channels.add(channel)
+        try:
+            threading.Thread(target=self._connect, args=(channel, origin), daemon=True).start()
+        except Exception:
+            with self.lock:
+                self.channels.discard(channel)
+                self.error = 'A forwarding worker could not be started.'
+            self.forwarding.connections.release()
+            channel.close()
+            self.changed()
+
+    def _connect(self, channel, origin):
+        target = None
+        try:
+            address = (self.spec['target_host'], self.spec['target_port'])
+            if self.spec['direction'] == 'local':
+                target = self.transport.open_channel('direct-tcpip', address, origin, timeout=FORWARD_CONNECT_TIMEOUT)
+            else:
+                target = socket.create_connection(address, FORWARD_CONNECT_TIMEOUT)
+            if not self.available():
+                return
+            with self.lock:
+                self.error = None
+            self.changed()
+            relay_tcp(channel, target, lambda: not self.available(), self._progress)
+        except Exception:
+            with self.lock:
+                if not self.closed.is_set():
+                    self.error = 'A connection to the target failed. Check its address, service and SSH forwarding policy.'
+            self.changed()
+        finally:
+            channel.close()
+            if target:
+                target.close()
+            with self.lock:
+                self.channels.discard(channel)
+            self.forwarding.connections.release()
+            self.changed()
+
+    def _progress(self, direction, size):
+        with self.lock:
+            if direction == 'sent':
+                self.bytes_sent += size
+            else:
+                self.bytes_received += size
+
+    def stop(self, error=None):
+        with self.lock:
+            if self.closed.is_set():
+                return
+            self.closed.set()
+            self.status = 'failed' if error else 'stopped'
+            self.error = error
+            listener, channels = self.listener, list(self.channels)
+        if listener:
+            try:
+                listener.shutdown(socket.SHUT_RDWR)
+            except OSError:
+                pass
+            listener.close()
+        for channel in channels:
+            channel.close()
+        if self.port and self.spec['direction'] == 'remote':
+            threading.Thread(target=self.forwarding.cancel_remote, args=(self.port, self), daemon=True).start()
+        self.changed()
diff --git a/templates/index.html b/templates/index.html
index ff7da3d..9ecbabc 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -301,6 +301,24 @@
         .agent-connect-activity { white-space: pre-wrap; }
         .agent-connect-steps { padding-left: 24px; line-height: 1.5; }
         #agent-tunnel-message { white-space: pre-wrap; }
+        #ssh-tunnels-dialog { width: min(720px, calc(100vw - 32px)); box-sizing: border-box;
+            max-height: 85vh; overflow: auto; background: #222; color: #ddd; border: 1px solid #555; border-radius: 8px; }
+        #ssh-tunnels-dialog::backdrop { background: rgba(0,0,0,0.75); }
+        #ssh-tunnel-form { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 12px; }
+        #ssh-tunnel-form label { display: flex; flex-direction: column; gap: 4px; font-size: 12px; }
+        #ssh-tunnel-form input, #ssh-tunnel-form select { box-sizing: border-box; width: 100%; margin: 0; min-width: 0;
+            padding: 8px; color: #eee; background: #333; border: 1px solid #555; border-radius: 4px; font: inherit; }
+        #ssh-tunnels-dialog button { padding: 8px 14px; color: #fff; background: #087fe7;
+            border: 0; border-radius: 4px; cursor: pointer; }
+        #ssh-tunnels-dialog button:disabled { opacity: 0.5; cursor: default; }
+        #ssh-tunnel-start { align-self: end; }
+        #ssh-tunnels-list { display: grid; gap: 8px; max-height: 35vh; overflow: auto; }
+        .ssh-tunnel-item { padding: 10px; border: 1px solid #555; border-radius: 5px; }
+        .ssh-tunnel-route, .ssh-tunnel-error { overflow-wrap: anywhere; }
+        .ssh-tunnel-details { color: #aaa; font-size: 12px; }
+        .ssh-tunnel-error, #ssh-tunnels-message.error { color: #ff8a83; }
+        .ssh-tunnel-item button { margin-bottom: 0; }
+        #ssh-tunnel-policy { color: #aaa; font-size: 12px; }
         .agent-copy-warning {
             position: sticky; top: 0; z-index: 1;
             padding: 12px 14px; border: 2px solid #e3a632; border-radius: 6px;
@@ -1277,6 +1295,7 @@ <h3 id="browser-auth-help-title">Manual browser authorization</h3>
             <button id="agent-connect-btn" class="status-action" type="button" title="Copy the agent prompt for the current tab's environment">Agent Info for Current Tab</button>
             <button id="agent-toggle-btn" class="status-action" type="button" title="Show Agent panel">Show Agent Panel</button>
             <button id="agent-tunnel-btn" class="status-action" type="button" title="Set up remote Agent access through this SSH connection" hidden>Agent Tunnel</button>
+            <button id="ssh-tunnels-btn" class="status-action" type="button" title="Manage TCP port forwarding through this SSH connection" hidden>Tunnels</button>
             <button id="sftp-status-btn" class="status-action status-sftp" type="button" title="Open Files" aria-label="Open Files" hidden>&#x1F4C1;</button>
             <button id="quick-settings" class="status-action" type="button" title="Settings" aria-label="Settings">&#x2699;&#xFE0F;</button>
             <details id="tab-more">
@@ -1342,6 +1361,32 @@ <h4>Agent Info</h4>
             <button id="agent-tunnel-close" type="button">Close</button>
         </div>
     </dialog>
+    <dialog id="ssh-tunnels-dialog" aria-labelledby="ssh-tunnels-title">
+        <h3 id="ssh-tunnels-title">Tunnels for Current SSH Tab</h3>
+        <p id="ssh-tunnels-carrier"></p>
+        <p id="ssh-tunnel-policy">TCP only. Core host means the computer running Core, including WSL when Core runs there.
+            These temporary tunnels stop when this SSH connection closes or this page disconnects, including a reload.</p>
+        <div id="ssh-tunnels-list"></div>
+        <p id="ssh-tunnels-empty">No user tunnels on this tab.</p>
+        <h4>Add tunnel</h4>
+        <form id="ssh-tunnel-form">
+            <label>Name (optional)<input id="ssh-tunnel-name" maxlength="80" autocomplete="off"></label>
+            <label>Direction<select id="ssh-tunnel-direction">
+                <option value="local">Core host → SSH remote (-L)</option>
+                <option value="remote">SSH remote → Core host (-R)</option>
+            </select></label>
+            <label id="ssh-tunnel-listen-label">Core listening port (0 = automatic)<input id="ssh-tunnel-listen" type="number" min="0" max="65535" value="0" required></label>
+            <label id="ssh-tunnel-target-host-label">Target host, reached from SSH remote<input id="ssh-tunnel-target-host" value="127.0.0.1" maxlength="253" spellcheck="false" required></label>
+            <label>Target port<input id="ssh-tunnel-target-port" type="number" min="1" max="65535" value="80" required></label>
+            <button id="ssh-tunnel-start" type="submit">Start tunnel</button>
+        </form>
+        <p id="ssh-tunnel-bind-hint">Listens on Core's 127.0.0.1.</p>
+        <p id="ssh-tunnels-message" role="status" aria-live="polite"></p>
+        <div class="agent-tunnel-actions">
+            <button id="ssh-tunnels-refresh" type="button">Refresh status</button>
+            <button id="ssh-tunnels-close" type="button">Close</button>
+        </div>
+    </dialog>
     <div id="terminal"></div>
     <div id="status-bar">
         <span class="sb-item">Socket:&nbsp;<span id="socketStatus">Disconnected</span></span>
@@ -2753,10 +2798,169 @@ <h3>Recover StandTerm session</h3>
                 }
                 const state = getActiveTerminalState();
                 document.getElementById('agent-tunnel-btn').hidden = !state || !state.connected || state.connectionType !== 'ssh';
+                document.getElementById('ssh-tunnels-btn').hidden = !state || !state.connected || state.connectionType !== 'ssh';
                 document.getElementById('agent-connect-btn').hidden = !state
                     || (state.connectionType === 'ssh' && !readyAgentTunnels.has(state.id));
             }
 
+            const sshTunnelsDialog = document.getElementById('ssh-tunnels-dialog');
+            const sshTunnelsMessage = document.getElementById('ssh-tunnels-message');
+            let sshTunnelView = null;
+            let sshTunnelTimer = null;
+            let sshTunnelRequest = 0;
+            let sshTunnelPending = false;
+
+            function setSshTunnelMessage(message, error = false) {
+                sshTunnelsMessage.textContent = message;
+                sshTunnelsMessage.classList.toggle('error', error);
+            }
+
+            function invalidateSshTunnelView() {
+                if (!sshTunnelView) return;
+                sshTunnelView.invalid = true;
+                clearInterval(sshTunnelTimer);
+                setSshTunnelMessage('The SSH connection or viewer changed. Reopen Tunnels after reconnecting.', true);
+                document.getElementById('ssh-tunnel-start').disabled = true;
+                for (const entry of sshTunnelView.entries.values()) {
+                    entry.element.querySelector('.ssh-tunnel-details').textContent = 'Status unavailable for this viewer.';
+                    entry.element.querySelector('button').disabled = true;
+                }
+            }
+
+            function renderSshTunnel(snapshot) {
+                const view = sshTunnelView;
+                if (!view || view.invalid || !snapshot || typeof snapshot.tunnel_id !== 'string') return;
+                let entry = view.entries.get(snapshot.tunnel_id);
+                if (entry && snapshot.revision < entry.snapshot.revision) return;
+                if (!entry) {
+                    const element = document.createElement('div');
+                    element.className = 'ssh-tunnel-item';
+                    element.dataset.tunnelId = snapshot.tunnel_id;
+                    element.innerHTML = '<strong class="ssh-tunnel-name"></strong><div class="ssh-tunnel-route"></div>'
+                        + '<div class="ssh-tunnel-details"></div><div class="ssh-tunnel-error"></div><button type="button">Stop</button>';
+                    entry = { element, snapshot };
+                    view.entries.set(snapshot.tunnel_id, entry);
+                    element.querySelector('button').addEventListener('click', () => requestSshTunnel('stop', { tunnel_id: snapshot.tunnel_id }));
+                    document.getElementById('ssh-tunnels-list').appendChild(element);
+                }
+                entry.snapshot = snapshot;
+                const remote = snapshot.direction === 'remote';
+                const port = snapshot.bound_port || snapshot.listen_port || 'automatic';
+                const target = snapshot.target_host.includes(':') ? `[${snapshot.target_host}]` : snapshot.target_host;
+                entry.element.querySelector('.ssh-tunnel-name').textContent = snapshot.name || (remote ? 'Remote tunnel (-R)' : 'Local tunnel (-L)');
+                entry.element.querySelector('.ssh-tunnel-route').textContent = `${remote ? 'SSH remote' : 'Core host'} 127.0.0.1:${port}`
+                    + ` → ${remote ? 'Core host' : 'SSH remote'} → ${target}:${snapshot.target_port}`;
+                const statuses = { starting: 'Starting', listening: 'Listening', stopped: 'Stopped', failed: 'Failed' };
+                entry.element.querySelector('.ssh-tunnel-details').textContent = `${statuses[snapshot.status] || 'Unknown'} · ${snapshot.connections} connection(s)`
+                    + ` · Sent ${formatSftpBytes(snapshot.bytes_sent)} · Received ${formatSftpBytes(snapshot.bytes_received)}`
+                    + (snapshot.cleanup_pending ? ' · Cleanup pending' : '');
+                entry.element.querySelector('.ssh-tunnel-error').textContent = snapshot.error || '';
+                entry.element.querySelector('button').disabled = !['starting', 'listening'].includes(snapshot.status);
+                document.getElementById('ssh-tunnels-empty').hidden = true;
+            }
+
+            function requestSshTunnel(operation, fields = {}) {
+                const view = sshTunnelView;
+                if (!view || view.invalid || !sshTunnelsDialog.open || sshTunnelPending) return;
+                if (!isCurrentAgentTunnelConnection(view.connection)) {
+                    invalidateSshTunnelView();
+                    return;
+                }
+                sshTunnelPending = true;
+                const requestId = ++sshTunnelRequest;
+                document.getElementById('ssh-tunnel-start').disabled = true;
+                const timer = setTimeout(() => {
+                    if (requestId !== sshTunnelRequest) return;
+                    sshTunnelPending = false;
+                    ++sshTunnelRequest;
+                    setSshTunnelMessage('Tunnel status request timed out. Refresh status before retrying.', true);
+                    document.getElementById('ssh-tunnel-start').disabled = false;
+                }, 15000);
+                socket.emit('ssh_tunnel', { terminal_id: view.connection.state.id, operation, ...fields }, result => {
+                    clearTimeout(timer);
+                    if (requestId !== sshTunnelRequest || view !== sshTunnelView || !sshTunnelsDialog.open) return;
+                    sshTunnelPending = false;
+                    if (!isCurrentAgentTunnelConnection(view.connection)) {
+                        invalidateSshTunnelView();
+                        return;
+                    }
+                    document.getElementById('ssh-tunnel-start').disabled = false;
+                    if (!result || result.status !== 'ok') {
+                        setSshTunnelMessage(result?.message || 'Tunnel request failed.', true);
+                        return;
+                    }
+                    if (operation === 'status') {
+                        if (view.connectionId && view.connectionId !== result.connection_id) {
+                            invalidateSshTunnelView();
+                            return;
+                        }
+                        setSshTunnelMessage('');
+                        view.connectionId = result.connection_id;
+                        const current = new Set(result.tunnels.map(item => item.tunnel_id));
+                        for (const [id, entry] of view.entries) {
+                            if (!current.has(id) && ['stopped', 'failed'].includes(entry.snapshot.status)) {
+                                entry.element.remove();
+                                view.entries.delete(id);
+                            }
+                        }
+                        result.tunnels.forEach(renderSshTunnel);
+                        document.getElementById('ssh-tunnels-empty').hidden = view.entries.size > 0;
+                    } else {
+                        renderSshTunnel(result.tunnel);
+                        setSshTunnelMessage(operation === 'start' ? 'Tunnel requested. Watch the tunnel status.' : 'Tunnel stopped.');
+                    }
+                });
+            }
+
+            function applySshTunnelState(data) {
+                const view = sshTunnelView;
+                if (view && isCurrentAgentTunnelConnection(view.connection) && data?.terminal_id === view.connection.state.id
+                        && view.connectionId && data.connection_id === view.connectionId) renderSshTunnel(data.tunnel);
+            }
+
+            document.getElementById('ssh-tunnels-btn').addEventListener('click', () => {
+                const state = getActiveTerminalState();
+                if (!state || !state.connected || state.connectionType !== 'ssh') return;
+                sshTunnelView = { connection: { state, connectedAt: state.connectedAt }, connectionId: null, entries: new Map() };
+                ++sshTunnelRequest;
+                sshTunnelPending = false;
+                document.getElementById('ssh-tunnels-carrier').textContent = `SSH tab: ${state.title} (${state.id}). Tunnels use this route's final SSH connection.`;
+                document.getElementById('ssh-tunnels-list').replaceChildren();
+                document.getElementById('ssh-tunnels-empty').hidden = false;
+                setSshTunnelMessage('');
+                sshTunnelsDialog.showModal();
+                requestSshTunnel('status');
+                clearInterval(sshTunnelTimer);
+                sshTunnelTimer = setInterval(() => requestSshTunnel('status'), 2000);
+            });
+            document.getElementById('ssh-tunnels-close').addEventListener('click', () => sshTunnelsDialog.close());
+            sshTunnelsDialog.addEventListener('close', () => {
+                if (sshTunnelsDialog.open) return;
+                clearInterval(sshTunnelTimer);
+                sshTunnelView = null;
+                sshTunnelPending = false;
+                ++sshTunnelRequest;
+            });
+            document.getElementById('ssh-tunnels-refresh').addEventListener('click', () => requestSshTunnel('status'));
+            document.getElementById('ssh-tunnel-direction').addEventListener('change', event => {
+                const remote = event.target.value === 'remote';
+                document.getElementById('ssh-tunnel-listen-label').firstChild.textContent = `${remote ? 'Remote' : 'Core'} listening port (0 = automatic)`;
+                document.getElementById('ssh-tunnel-target-host-label').firstChild.textContent = `Target host, reached from ${remote ? 'Core host' : 'SSH remote'}`;
+                document.getElementById('ssh-tunnel-bind-hint').textContent = remote
+                    ? 'Requests remote 127.0.0.1; non-loopback clients are rejected. The SSH server controls its actual listening interfaces.'
+                    : "Listens on Core's 127.0.0.1.";
+            });
+            document.getElementById('ssh-tunnel-form').addEventListener('submit', event => {
+                event.preventDefault();
+                requestSshTunnel('start', { spec: {
+                    name: document.getElementById('ssh-tunnel-name').value,
+                    direction: document.getElementById('ssh-tunnel-direction').value,
+                    listen_port: document.getElementById('ssh-tunnel-listen').valueAsNumber,
+                    target_host: document.getElementById('ssh-tunnel-target-host').value.trim(),
+                    target_port: document.getElementById('ssh-tunnel-target-port').valueAsNumber,
+                } });
+            });
+
             function setAgentTunnelInfoView(infoView) {
                 document.getElementById('agent-tunnel-title').textContent = infoView ? 'Agent Info for Current Tab' : 'Agent Tunnel';
                 document.getElementById('agent-tunnel-setup').hidden = infoView;
@@ -6485,6 +6689,7 @@ <h3>Recover StandTerm session</h3>
                     return Object.entries(value).some(([key, item]) => key === 'privateKey' || key === 'temporaryKeys' || containsPrivateSshData(item));
                 }
                 let pendingAgentTunnelAcks = null;
+                let pendingSshTunnelAcks = null;
                 const originalEmit = socket.emit.bind(socket);
                 socket.emit = (eventName, ...args) => {
                     if (['start_ssh', 'ssh_browser_sign_response'].includes(eventName)) privateSshWireData ||= args.some(containsPrivateSshData);
@@ -6504,6 +6709,10 @@ <h3>Recover StandTerm session</h3>
                         pendingAgentTunnelAcks.push(args[1]);
                         return socket;
                     }
+                    if (pendingSshTunnelAcks && eventName === 'ssh_tunnel') {
+                        pendingSshTunnelAcks.push(args[1]);
+                        return socket;
+                    }
                     return originalEmit(eventName, ...args);
                 };
                 window.terminalTest = {
@@ -6578,6 +6787,17 @@ <h3>Recover StandTerm session</h3>
                     applyAgentTunnelStateForTest(payload) {
                         applyAgentTunnelState(cloneForTest(payload));
                     },
+                    holdSshTunnelRequestsForTest() {
+                        pendingSshTunnelAcks = [];
+                    },
+                    completeSshTunnelRequestForTest(index, payload) {
+                        const acknowledge = pendingSshTunnelAcks[index];
+                        pendingSshTunnelAcks[index] = null;
+                        acknowledge(cloneForTest(payload));
+                    },
+                    applySshTunnelStateForTest(payload) {
+                        applySshTunnelState(cloneForTest(payload));
+                    },
                     applyAgentConnectionActivityForTest(payload) {
                         applyAgentConnectionActivity(cloneForTest(payload));
                     },
@@ -7240,6 +7460,7 @@ <h3>Recover StandTerm session</h3>
                 applyAgentStatePayload(data);
             });
             socket.on('agent_tunnel_state', applyAgentTunnelState);
+            socket.on('ssh_tunnel_state', applySshTunnelState);
             socket.on('agent_connection_activity', applyAgentConnectionActivity);
             socket.on('agent_action_request', data => {
                 applyAgentActionPayload(data);
@@ -10319,7 +10540,7 @@ <h3>Recover StandTerm session</h3>
                 return !!request && request.state === getActiveTerminalState()
                     && isCurrentTerminalState(request.state) && !request.state.inPip && request.state.connected && socket.connected
                     && document.activeElement === request.focus
-                    && !document.querySelector('#settings-modal.open, #paste-review-modal.open, #session-recovery-modal.open, #browser-auth-help-modal.open, #agent-tunnel-dialog[open], #agent-connect-dialog[open]');
+                    && !document.querySelector('#settings-modal.open, #paste-review-modal.open, #session-recovery-modal.open, #browser-auth-help-modal.open, #agent-tunnel-dialog[open], #agent-connect-dialog[open], #ssh-tunnels-dialog[open]');
             }
             document.addEventListener('focusin', () => {
                 if (pendingContextPaste && document.activeElement !== pendingContextPaste.focus) pendingContextPaste = null;
diff --git a/tests/agent_tunnel_smoke.py b/tests/agent_tunnel_smoke.py
index b0e3a4f..bf90ccd 100644
--- a/tests/agent_tunnel_smoke.py
+++ b/tests/agent_tunnel_smoke.py
@@ -31,7 +31,7 @@
 
 
 @contextlib.contextmanager
-def ssh_server(gateway_ports='no'):
+def ssh_server(gateway_ports='no', forwarding='remote'):
     executable = shutil.which('sshd') or '/usr/sbin/sshd'
     if not Path(executable).is_file():
         raise unittest.SkipTest('OpenSSH server is required for transport integration.')
@@ -51,7 +51,7 @@ def ssh_server(gateway_ports='no'):
             'PidFile ' + str(root / 'pid'),
             'StrictModes no', 'UsePAM no', 'PasswordAuthentication no',
             'KbdInteractiveAuthentication no', 'PermitRootLogin prohibit-password',
-            'AllowTcpForwarding remote', 'GatewayPorts ' + gateway_ports,
+            'AllowTcpForwarding ' + forwarding, 'GatewayPorts ' + gateway_ports,
             'Subsystem sftp internal-sftp', 'LogLevel ERROR',
         ])
         (root / 'sshd_config').write_text(config + '\n')
diff --git a/tests/ssh_tunnels_browser_smoke.py b/tests/ssh_tunnels_browser_smoke.py
new file mode 100644
index 0000000..af2ac45
--- /dev/null
+++ b/tests/ssh_tunnels_browser_smoke.py
@@ -0,0 +1,96 @@
+"""Check human tunnel controls, direction labels and stale SSH/UI replies."""
+import agent_browser_smoke as fixture
+
+
+def test_tunnel_controls(browser, url):
+    context, page = fixture.new_page(browser, url)
+    try:
+        result = page.evaluate("""() => {
+            const test = window.terminalTest;
+            const button = document.getElementById('ssh-tunnels-btn');
+            const hiddenForLocal = button.hidden;
+            test.applyTerminalListForTest({ terminals: [{ terminal_id: 'main', connection_type: 'ssh',
+                terminal_label: 'Tunnel fixture', connected: true, files_available: true }] });
+            const visibleForSsh = !button.hidden;
+            test.holdSshTunnelRequestsForTest();
+            button.click();
+            const dialog = document.getElementById('ssh-tunnels-dialog');
+            test.completeSshTunnelRequestForTest(0, { status: 'ok', tunnels: [], connection_id: 'connection-1' });
+            const direction = document.getElementById('ssh-tunnel-direction');
+            direction.value = 'remote';
+            direction.dispatchEvent(new Event('change'));
+            const labels = {
+                listen: document.getElementById('ssh-tunnel-listen-label').innerText,
+                target: document.getElementById('ssh-tunnel-target-host-label').innerText,
+                bind: document.getElementById('ssh-tunnel-bind-hint').innerText,
+                lifetime: document.getElementById('ssh-tunnel-policy').innerText
+            };
+            const name = '<img src=x onerror=alert(1)>';
+            document.getElementById('ssh-tunnel-name').value = name;
+            document.getElementById('ssh-tunnel-target-host').value = '127.0.0.1';
+            document.getElementById('ssh-tunnel-target-port').value = '8080';
+            document.getElementById('ssh-tunnel-form').requestSubmit();
+            const requests = () => test.getEmitted().filter(item => item.event === 'ssh_tunnel');
+            const start = requests().at(-1).args[0];
+            const snapshot = { tunnel_id: 'ssht_one', name, direction: 'remote', target_host: '127.0.0.1',
+                listen_port: 0, target_port: 8080, bound_port: null, status: 'starting', revision: 1,
+                connections: 0, bytes_sent: 0, bytes_received: 0 };
+            test.completeSshTunnelRequestForTest(1, { status: 'ok', tunnel: snapshot });
+            const update = tunnel => test.applySshTunnelStateForTest({
+                terminal_id: 'main', connection_id: 'connection-1', tunnel });
+            update({ ...snapshot, bound_port: 50001, status: 'listening', revision: 2, bytes_sent: 4096 });
+            const row = document.querySelector('.ssh-tunnel-item');
+            const running = row.innerText;
+            const safeName = row.querySelector('.ssh-tunnel-name').textContent === name && !row.querySelector('img');
+            test.applySshTunnelStateForTest({ terminal_id: 'main', connection_id: 'foreign',
+                tunnel: { ...snapshot, status: 'failed', revision: 99 } });
+            const foreignIgnored = row.innerText === running;
+            row.querySelector('button').click();
+            const stop = requests().at(-1).args[0];
+            test.completeSshTunnelRequestForTest(2, { status: 'ok', tunnel: { ...snapshot, status: 'stopped', revision: 3 } });
+            update({ ...snapshot, status: 'listening', revision: 2 });
+            const stopped = row.querySelector('button').disabled && row.innerText.includes('Stopped');
+            document.getElementById('ssh-tunnel-form').requestSubmit();
+            dialog.close();
+            test.completeSshTunnelRequestForTest(3, { status: 'ok', tunnel: { ...snapshot, tunnel_id: 'ssht_late' } });
+            const lateIgnored = !dialog.querySelector('[data-tunnel-id="ssht_late"]');
+            button.click();
+            test.completeSshTunnelRequestForTest(4, { status: 'ok', tunnels: [{ ...snapshot, status: 'listening' }], connection_id: 'connection-2' });
+            document.getElementById('ssh-tunnels-refresh').click();
+            test.completeSshTunnelRequestForTest(5, { status: 'ok', tunnels: [], connection_id: 'connection-3' });
+            const changedConnection = document.getElementById('ssh-tunnel-start').disabled
+                && document.querySelector('.ssh-tunnel-item button').disabled
+                && document.querySelector('.ssh-tunnel-details').textContent.includes('unavailable');
+            return { hiddenForLocal, visibleForSsh, labels, start, stop, running, safeName, foreignIgnored, stopped, lateIgnored, changedConnection };
+        }""")
+        assert result['hiddenForLocal'] and result['visibleForSsh']
+        assert result['labels']['listen'].startswith('Remote listening port')
+        assert 'Core host' in result['labels']['target']
+        assert 'actual listening interfaces' in result['labels']['bind']
+        assert 'reload' in result['labels']['lifetime'] and 'WSL' in result['labels']['lifetime']
+        assert result['start']['spec'] == {
+            'direction': 'remote', 'listen_port': 0, 'target_host': '127.0.0.1', 'target_port': 8080,
+            'name': '<img src=x onerror=alert(1)>',
+        }
+        assert result['start']['operation'] == 'start' and result['start']['terminal_id'] == 'main'
+        assert result['stop']['operation'] == 'stop' and result['stop']['tunnel_id'] == 'ssht_one'
+        assert 'SSH remote 127.0.0.1:50001' in result['running'] and 'Sent 4.00 KiB' in result['running'], result['running']
+        assert all(result[key] for key in ('safeName', 'foreignIgnored', 'stopped', 'lateIgnored', 'changedConnection'))
+    finally:
+        fixture.close_context(context)
+
+
+if __name__ == '__main__':
+    server = None
+    try:
+        server, access_url = fixture.start_server()
+        with fixture.load_playwright()[0]() as playwright:
+            browser = playwright.chromium.launch(headless=True)
+            try:
+                test_tunnel_controls(browser, access_url)
+                print('SSH tunnel browser controls: PASS')
+            finally:
+                browser.close()
+    finally:
+        if server:
+            fixture.stop_server(server)
diff --git a/tests/ssh_tunnels_smoke.py b/tests/ssh_tunnels_smoke.py
new file mode 100644
index 0000000..e356a80
--- /dev/null
+++ b/tests/ssh_tunnels_smoke.py
@@ -0,0 +1,410 @@
+"""Exercise user TCP tunnels and the Agent preset on real SSH transports."""
+import contextlib
+import shutil
+import socket
+import sys
+import threading
+import time
+import unittest
+from pathlib import Path
+from unittest.mock import patch
+
+sys.path.insert(0, str(Path(__file__).resolve().parent))
+import agent_tunnel_smoke as agent_fixture
+import ssh_tunnels
+from ssh_forwarding import forwarding_for
+from ssh_tunnels import parse_tunnel_spec
+
+fixture = agent_fixture.fixture
+ssh_server = agent_fixture.ssh_server
+standterm = fixture.standterm
+
+
+@contextlib.contextmanager
+def tcp_server(handler):
+    listener = socket.socket()
+    listener.bind(('127.0.0.1', 0))
+    listener.listen(8)
+    listener.settimeout(0.1)
+    closed = threading.Event()
+    errors, peers, workers = [], [], []
+
+    def serve_peer(peer):
+        try:
+            peer.settimeout(10)
+            handler(peer)
+        except (OSError, AssertionError) as exc:
+            if not closed.is_set():
+                errors.append(exc)
+        finally:
+            peer.close()
+
+    def accept():
+        while not closed.is_set():
+            try:
+                peer, _ = listener.accept()
+            except socket.timeout:
+                continue
+            except OSError:
+                return
+            peers.append(peer)
+            worker = threading.Thread(target=serve_peer, args=(peer,), daemon=True)
+            workers.append(worker)
+            worker.start()
+
+    thread = threading.Thread(target=accept, daemon=True)
+    thread.start()
+    try:
+        yield listener.getsockname()[1]
+        assert not errors, errors
+    finally:
+        closed.set()
+        listener.close()
+        for peer in peers:
+            peer.close()
+        thread.join(2)
+        for worker in workers:
+            worker.join(2)
+
+
+def receive_all(peer):
+    chunks = []
+    while True:
+        chunk = peer.recv(65536)
+        if not chunk:
+            return b''.join(chunks)
+        chunks.append(chunk)
+
+
+class UserTunnelTests(unittest.TestCase):
+    def setUp(self):
+        fixture.reset_state()
+        with standterm.user_ssh_tunnels_lock:
+            previous = list(standterm.user_ssh_tunnels.values())
+            standterm.user_ssh_tunnels.clear()
+        for record in previous:
+            record['tunnel'].stop()
+        self.flask_client = fixture.make_flask_client()
+        self.client = fixture.make_socket_client(self.flask_client)
+        self.session = fixture.current_session_token()
+        self.sid = fixture.current_sid_for_session(self.session)
+        self.tunnels = []
+
+    def tearDown(self):
+        for tunnel in self.tunnels:
+            tunnel.stop()
+            tunnel.setup_done.wait(5)
+        if self.client.is_connected():
+            self.client.disconnect()
+
+    def carrier(self, ssh):
+        bridge = fixture.make_sftp_test_bridge(self.session, 'carrier')
+        bridge.ssh = ssh
+        bridge.attach(self.sid)
+        standterm.set_bridge(self.session, 'carrier', bridge)
+        return bridge
+
+    def start(self, ssh, direction, port, **changes):
+        if not standterm.get_bridge(self.session, 'carrier'):
+            self.carrier(ssh)
+        spec = {'direction': direction, 'listen_port': 0, 'target_host': '127.0.0.1', 'target_port': port, **changes}
+        result = self.client.emit('ssh_tunnel', {'terminal_id': 'carrier', 'operation': 'start', 'spec': spec}, callback=True)
+        self.assertEqual(result['status'], 'ok', result)
+        tunnel = standterm.user_ssh_tunnels[result['tunnel']['tunnel_id']]['tunnel']
+        self.tunnels.append(tunnel)
+        fixture.wait_until(lambda: tunnel.status != 'starting', 'Tunnel did not settle', timeout=10)
+        self.assertEqual(tunnel.status, 'listening', tunnel.snapshot())
+        return tunnel
+
+    def test_half_close_keeps_large_response_in_both_directions(self):
+        payload = bytes(range(256)) * 16384
+
+        def reply(peer):
+            self.assertEqual(receive_all(peer), b'request')
+            time.sleep(0.05)
+            peer.sendall(payload)
+            peer.shutdown(socket.SHUT_WR)
+
+        with ssh_server(forwarding='yes') as ssh, tcp_server(reply) as port:
+            for direction in ('local', 'remote'):
+                tunnel = self.start(ssh, direction, port)
+                with socket.create_connection(('127.0.0.1', tunnel.port), timeout=10) as client:
+                    client.sendall(b'request')
+                    client.shutdown(socket.SHUT_WR)
+                    self.assertEqual(receive_all(client), payload)
+                fixture.wait_until(lambda: not tunnel.channels, 'Completed channels were retained')
+                self.assertEqual(tunnel.bytes_sent, len(b'request'))
+                self.assertEqual(tunnel.bytes_received, len(payload))
+
+    def test_simultaneous_large_duplex_transfer(self):
+        payload = b'x' * (8 * 1024 * 1024)
+
+        def exchange(peer):
+            peer.sendall(payload)
+            peer.shutdown(socket.SHUT_WR)
+            self.assertEqual(receive_all(peer), payload)
+
+        with ssh_server(forwarding='yes') as ssh, tcp_server(exchange) as port:
+            for direction in ('local', 'remote'):
+                tunnel = self.start(ssh, direction, port)
+                with socket.create_connection(('127.0.0.1', tunnel.port), timeout=10) as client:
+                    def send():
+                        client.sendall(payload)
+                        client.shutdown(socket.SHUT_WR)
+                    writer = threading.Thread(target=send, daemon=True)
+                    writer.start()
+                    self.assertEqual(receive_all(client), payload)
+                    writer.join(10)
+                    self.assertFalse(writer.is_alive())
+                fixture.wait_until(lambda: not tunnel.channels, 'Duplex channels were retained')
+
+    def test_agent_and_two_remote_tunnels_stop_independently(self):
+        self.client.disconnect()
+        helper = agent_fixture.AgentTunnelTests()
+        helper.setUp()
+        try:
+            with ssh_server(forwarding='yes') as ssh, tcp_server(lambda peer: peer.sendall(b'alive')) as port:
+                agent = helper.open_tunnel(ssh)
+                self.session, self.sid, self.client = helper.session, helper.sid, helper.client
+                first = self.start(ssh, 'remote', port)
+                second = self.start(ssh, 'remote', port)
+                self.assertEqual(helper.command(agent, 'main', 'hello')['status'], 'ok')
+                first.stop()
+                self.assertEqual(helper.command(agent, 'main', 'hello')['status'], 'ok')
+                with socket.create_connection(('127.0.0.1', second.port), timeout=5) as client:
+                    self.assertEqual(client.recv(16), b'alive')
+                agent.close()
+                self.assertTrue(agent._cleanup_done.wait(5))
+                with socket.create_connection(('127.0.0.1', second.port), timeout=5) as client:
+                    self.assertEqual(client.recv(16), b'alive')
+                second.stop()
+                self.assertTrue(ssh.get_transport().is_authenticated())
+        finally:
+            helper.tearDown()
+
+    def test_user_remote_tunnel_reaches_core_api_without_granting_access(self):
+        from werkzeug.serving import make_server
+        self.client.disconnect()
+        helper = agent_fixture.AgentTunnelTests()
+        helper.setUp()
+        server = make_server('127.0.0.1', 0, standterm.app, threaded=True)
+        worker = threading.Thread(target=server.serve_forever, daemon=True)
+        worker.start()
+        try:
+            self.session, self.sid, self.client = helper.session, helper.sid, helper.client
+            token, _ = helper.mint()
+            with ssh_server() as ssh:
+                tunnel = self.start(ssh, 'remote', server.server_port)
+                url = f'http://127.0.0.1:{tunnel.port}/agent/external/command'
+                status, result = agent_fixture.request_json(url, {'op': 'hello', 'terminal_id': 'main'})
+                self.assertNotEqual(result.get('status'), 'ok')
+                status, result = agent_fixture.request_json(url, {'op': 'hello', 'terminal_id': 'main', 'token': token})
+                self.assertEqual(status, 200)
+                self.assertEqual(result['status'], 'ok')
+                helper.client.emit(standterm.AGENT_EVENT_MODE_SET, {'terminal_id': 'main', 'mode': 'disabled'})
+                _, result = agent_fixture.request_json(url, {'op': 'hello', 'terminal_id': 'main', 'token': token})
+                self.assertNotEqual(result.get('status'), 'ok')
+        finally:
+            for tunnel in self.tunnels:
+                tunnel.stop()
+            server.shutdown()
+            server.server_close()
+            worker.join(5)
+            helper.tearDown()
+
+    def test_pending_remote_setup_cannot_revive_after_disconnect(self):
+        with ssh_server() as ssh:
+            self.carrier(ssh)
+            entered, release = threading.Event(), threading.Event()
+            original = ssh.get_transport().request_port_forward
+
+            def delayed(*args, **kwargs):
+                entered.set()
+                self.assertTrue(release.wait(5))
+                return original(*args, **kwargs)
+
+            with patch.object(ssh.get_transport(), 'request_port_forward', delayed), \
+                    patch.object(ssh_tunnels, 'USER_TUNNEL_SETUP_TIMEOUT', 0.1):
+                result = self.client.emit('ssh_tunnel', {'terminal_id': 'carrier', 'operation': 'start', 'spec': {
+                    'direction': 'remote', 'listen_port': 0, 'target_host': '127.0.0.1', 'target_port': 80,
+                }}, callback=True)
+                tunnel = standterm.user_ssh_tunnels[result['tunnel']['tunnel_id']]['tunnel']
+                self.tunnels.append(tunnel)
+                try:
+                    self.assertTrue(entered.wait(2))
+                    fixture.wait_until(lambda: tunnel.status == 'failed', 'Setup did not time out')
+                    with self.assertRaisesRegex(RuntimeError, 'pending'):
+                        forwarding_for(ssh.get_transport()).request_remote(0, object(), lambda *_: None, lambda: False)
+                    self.client.disconnect()
+                finally:
+                    release.set()
+                self.assertTrue(tunnel.setup_done.wait(5))
+                self.assertNotIn(tunnel.port, forwarding_for(ssh.get_transport()).routes)
+                self.assertTrue(ssh.get_transport().is_authenticated())
+
+    def test_viewer_ownership_and_disconnect_stop_active_tunnels(self):
+        with ssh_server(forwarding='yes') as ssh, tcp_server(lambda peer: receive_all(peer)) as port:
+            tunnel = self.start(ssh, 'local', port)
+            other = fixture.make_socket_client(self.flask_client)
+            try:
+                status = other.emit('ssh_tunnel', {'terminal_id': 'carrier', 'operation': 'status'}, callback=True)
+                self.assertEqual(status['status'], 'ok')
+                self.assertEqual(status['tunnels'], [])
+                denied = other.emit('ssh_tunnel', {'terminal_id': 'carrier', 'operation': 'stop', 'tunnel_id': tunnel.id}, callback=True)
+                self.assertEqual(denied['status'], 'failed')
+                self.assertFalse(tunnel.closed.is_set())
+                self.client.disconnect()
+                self.assertTrue(tunnel.closed.is_set())
+                with self.assertRaises(OSError):
+                    socket.create_connection(('127.0.0.1', tunnel.port), timeout=1)
+            finally:
+                other.disconnect()
+
+    def test_non_loopback_remote_peer_is_rejected(self):
+        with ssh_server(gateway_ports='yes') as ssh, tcp_server(lambda peer: peer.sendall(b'ok')) as port:
+            tunnel = self.start(ssh, 'remote', port)
+            fake = type('Channel', (), {'closed': False, 'close': lambda channel: setattr(channel, 'closed', True)})()
+            tunnel._accept_remote(fake, ('192.0.2.10', 1234), ('127.0.0.1', tunnel.port))
+            self.assertTrue(fake.closed)
+            with socket.create_connection(('127.0.0.1', tunnel.port), timeout=5) as client:
+                self.assertEqual(client.recv(16), b'ok')
+
+    def test_pending_owner_disconnect_and_ssh_close_prevent_setup(self):
+        spec = {'direction': 'local', 'listen_port': 0, 'target_host': '127.0.0.1', 'target_port': 80}
+        with ssh_server(forwarding='yes') as ssh:
+            bridge = self.carrier(ssh)
+            with patch.object(standterm.socketio, 'start_background_task'):
+                pending = []
+                for _ in range(2):
+                    result = self.client.emit('ssh_tunnel', {
+                        'terminal_id': 'carrier', 'operation': 'start', 'spec': spec,
+                    }, callback=True)
+                    tunnel = standterm.user_ssh_tunnels[result['tunnel']['tunnel_id']]['tunnel']
+                    pending.append(tunnel)
+                    self.tunnels.append(tunnel)
+                stopped = self.client.emit('ssh_tunnel', {
+                    'terminal_id': 'carrier', 'operation': 'stop', 'tunnel_id': pending[0].id,
+                }, callback=True)
+                self.assertEqual(stopped['tunnel']['status'], 'stopped')
+                self.client.disconnect()
+            for tunnel in pending:
+                tunnel.start()
+                self.assertTrue(tunnel.closed.is_set())
+                self.assertTrue(tunnel.setup_done.is_set())
+                self.assertIsNone(tunnel.listener)
+            self.assertTrue(ssh.get_transport().is_authenticated())
+            # SSH closure also fences an owner whose browser is still connected.
+            self.client = fixture.make_socket_client(self.flask_client)
+            self.sid = fixture.current_sid_for_session(self.session)
+            bridge.attach(self.sid)
+            with patch.object(standterm.socketio, 'start_background_task'):
+                result = self.client.emit('ssh_tunnel', {
+                    'terminal_id': 'carrier', 'operation': 'start', 'spec': spec,
+                }, callback=True)
+                tunnel = standterm.user_ssh_tunnels[result['tunnel']['tunnel_id']]['tunnel']
+                self.tunnels.append(tunnel)
+                standterm.close_bridge(bridge)
+            tunnel.start()
+            self.assertTrue(tunnel.closed.is_set())
+            self.assertIsNone(tunnel.listener)
+
+    def test_slow_remote_target_does_not_block_other_forward_or_ssh(self):
+        entered, release = threading.Event(), threading.Event()
+        original_connect = socket.create_connection
+        blocked_host = 'blocked-target.invalid'
+
+        def delayed_connect(address, *args, **kwargs):
+            if address[0] == blocked_host:
+                entered.set()
+                release.wait(5)
+                raise OSError('Simulated slow target')
+            return original_connect(address, *args, **kwargs)
+
+        with ssh_server(forwarding='yes') as ssh, tcp_server(lambda peer: peer.sendall(b'ok')) as port:
+            slow = self.start(ssh, 'remote', port, target_host=blocked_host)
+            healthy = self.start(ssh, 'remote', port)
+            with patch.object(ssh_tunnels.socket, 'create_connection', delayed_connect):
+                with original_connect(('127.0.0.1', slow.port), timeout=5):
+                    try:
+                        self.assertTrue(entered.wait(2))
+                        with original_connect(('127.0.0.1', healthy.port), timeout=2) as client:
+                            self.assertEqual(client.recv(16), b'ok')
+                        _, stdout, _ = ssh.exec_command('printf tunnel-shell-alive', timeout=2)
+                        self.assertEqual(stdout.read(), b'tunnel-shell-alive')
+                        slow.stop()
+                    finally:
+                        release.set()
+            fixture.wait_until(lambda: not slow.channels, 'Stopped slow target retained its slot')
+
+    @unittest.skipUnless(shutil.which('sshd') or Path('/usr/sbin/sshd').is_file(), 'OpenSSH server is required')
+    def test_both_directions_use_final_transport_through_three_jumps(self):
+        from ssh_jump_smoke import SSHJumpTests, server
+        helper = SSHJumpTests()
+        helper.setUp()
+        try:
+            servers = [helper.stack.enter_context(server()) for _ in range(4)]
+            route = helper.route(servers)
+            helper.trust(route, servers)
+            bridge = helper.bridge(servers)
+            bridge.owner_session, bridge.terminal_id = self.session, 'carrier'
+            success, result = helper.connect(bridge, route)
+            self.assertTrue(success, result)
+            bridge.attach(self.sid)
+            standterm.set_bridge(self.session, 'carrier', bridge)
+            with tcp_server(lambda peer: peer.sendall(b'final-target')) as port:
+                for direction in ('local', 'remote'):
+                    tunnel = self.start(bridge.ssh, direction, port)
+                    self.assertIs(tunnel.transport, bridge.ssh.get_transport())
+                    with socket.create_connection(('127.0.0.1', tunnel.port), timeout=5) as client:
+                        self.assertEqual(client.recv(32), b'final-target')
+                standterm.close_bridge(bridge)
+                self.assertTrue(all(tunnel.closed.is_set() for tunnel in self.tunnels))
+        finally:
+            helper.doCleanups()
+
+    def test_busy_listening_port_and_server_denial_leave_no_forward(self):
+        with ssh_server(forwarding='no') as ssh, tcp_server(lambda peer: None) as port:
+            self.carrier(ssh)
+            for direction, listen_port in (('local', port), ('remote', 0)):
+                result = self.client.emit('ssh_tunnel', {
+                    'terminal_id': 'carrier', 'operation': 'start', 'spec': {
+                        'direction': direction, 'listen_port': listen_port,
+                        'target_host': '127.0.0.1', 'target_port': port,
+                    },
+                }, callback=True)
+                tunnel = standterm.user_ssh_tunnels[result['tunnel']['tunnel_id']]['tunnel']
+                self.tunnels.append(tunnel)
+                fixture.wait_until(lambda: tunnel.setup_done.is_set(), 'Rejected setup did not finish')
+                self.assertEqual(tunnel.status, 'failed')
+                self.assertTrue(tunnel.closed.is_set())
+                self.assertFalse(tunnel.forwarding.routes)
+            self.assertTrue(ssh.get_transport().is_authenticated())
+
+    def test_invalid_specs_and_agent_commands_do_not_create_tunnels(self):
+        base = {'direction': 'local', 'listen_port': 0, 'target_host': '127.0.0.1', 'target_port': 80}
+        for change in ({'direction': 'socks'}, {'direction': []}, {'listen_port': True}, {'target_port': 0},
+                       {'listen_port': 65536}, {'target_host': 'http://example.com'}, {'target_host': 'a\nb'}):
+            with self.assertRaises(ValueError):
+                parse_tunnel_spec({**base, **change})
+        self.assertEqual(parse_tunnel_spec({**base, 'target_host': '::1'})['target_host'], '::1')
+        self.client.disconnect()
+        helper = agent_fixture.AgentTunnelTests()
+        helper.setUp()
+        try:
+            token, _ = helper.mint()
+            hello = standterm.app.test_client().post('/agent/external/command', json={
+                'op': 'hello', 'token': token, 'terminal_id': 'main',
+            }, environ_base={'REMOTE_ADDR': '127.0.0.1'})
+            self.assertEqual(hello.json['status'], 'ok')
+            for operation in ('ssh_tunnel', 'ssh-tunnel', 'tunnel-start', 'tunnel-stop'):
+                response = standterm.app.test_client().post('/agent/external/command', json={
+                    'op': operation, 'token': token, 'terminal_id': 'main', 'spec': base,
+                }, environ_base={'REMOTE_ADDR': '127.0.0.1'})
+                self.assertNotEqual(response.json.get('status'), 'ok')
+            self.assertFalse(standterm.user_ssh_tunnels)
+        finally:
+            helper.tearDown()
+
+
+if __name__ == '__main__':
+    unittest.main()

From f4c32c35721e44550e6ed86657e570915870b246 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Wed, 16 Sep 2026 06:45:05 +0800
Subject: [PATCH 06/43] Fix SSH session editing and add browser popout fallback

## Why
Settings retains a previously selected SSH profile across connections and only
exposes the final route target. Browsers without Document PiP cannot open a
floating terminal or Files window.

## What changed
- Bind new-session drafts to structured metadata from the current tab.
- Separate name and order management from atomic full-route editing.
- Reject changed connection preparation before saving or connecting.
- Reuse an ordinary popup when Document PiP is unavailable, restoring the
  terminal on close and handling browser navigation cleanup restrictions.

## Testing
Headless checks, SSH profile/key and route regressions, native PiP regressions,
and real Chromium/WebKit popup input, Files and restore checks pass. Linux
WebKit may require native close after reloading an opaque-origin blank popup;
macOS Safari still needs manual qualification.
---
 README.md                                  |  21 +-
 app.py                                     |   2 +
 scripts/run_smoke_tests.py                 |   2 +
 static/js/standterm-ssh-route-editor.js    |  32 +-
 templates/index.html                       | 510 ++++++++++-----------
 terminal_backends/ssh.py                   |   6 +
 tests/agent_backend_smoke.py               |  18 +
 tests/agent_browser_smoke.py               |  51 +--
 tests/browser_popout_smoke.py              | 182 ++++++++
 tests/ssh_profile_context_browser_smoke.py | 218 +++++++++
 tests/ssh_routes_browser_smoke.py          |   1 -
 11 files changed, 730 insertions(+), 313 deletions(-)
 create mode 100644 tests/browser_popout_smoke.py
 create mode 100644 tests/ssh_profile_context_browser_smoke.py

diff --git a/README.md b/README.md
index adfb05a..ff0e452 100644
--- a/README.md
+++ b/README.md
@@ -323,7 +323,14 @@ STANDTERM_HOST=127.0.0.1 STANDTERM_PORT=5000 ./run.sh
 
 Quick Connect can load saved SSH profiles and the six most recent successful
 SSH targets. Use **Settings > SSH Sessions** to create, update, reorder, or
-delete profiles and to clear history. Profiles and history stay in the current
+delete profiles and to clear history. The first level shows names, ordering, and
+full route summaries. **Save name** only renames the selected entry. **Edit
+connection…** opens every node in a separate editor, including host identity and
+**Use key**; Direct uses the same editor with one node. Its **Save route** button
+saves all nodes and referenced keys immediately for the next connection. **New
+session…** starts from the current SSH tab's target, or Quick Connect when no SSH
+tab is connected. Switching tabs or connections clears the previous edit selection.
+Profiles and history stay in the current
 browser and never store passwords. In Direct connect, **Save session** saves the
 profile and its referenced browser key when **Connect** is pressed, before SSH
 starts. A failed connection does not undo that explicit save. History records
@@ -379,7 +386,8 @@ Ed25519 key. Its public key can be copied immediately to `authorized_keys`. A
 compatible saved key does not prove that the remote account has installed it;
 server fingerprints are still checked separately during SSH login.
 
-The editor ends with **Save route**, **Cancel**, and **Done**. Done retains only
+The connection-preparation editor ends with a **Save route** checkbox, **Cancel**,
+and **Done**. Done retains only
 the connection draft. **Connect** saves the route and referenced temporary keys
 together only when Save route is selected; otherwise they remain temporary.
 Cancelling an editor discards changes made since opening it. Temporary private
@@ -479,9 +487,12 @@ returned with the connection failure.
 
 For a connected SSH or supported Local Shell tab, use the folder button in the
 status bar, the terminal context menu, or the folder button in Terminal
-Picture-in-Picture. StandTerm opens a compact Files window in
-Picture-in-Picture. When opened from a terminal PiP, the terminal first returns
-to its tab so the single Document PiP window can switch cleanly to Files.
+Picture-in-Picture. StandTerm uses Document Picture-in-Picture when available,
+or a separate browser popup for terminals and Files when it is unavailable
+(including Safari). Allow popups for StandTerm. The fallback action is labeled
+**Pop out terminal**; an ordinary browser popup is not guaranteed to stay on top.
+When opened from a floating terminal, the terminal returns to its tab before the
+window switches to Files. Closing the floating window restores the terminal.
 
 Files browses one directory at a time and supports manual path navigation,
 drag-and-drop upload, explicit download, rename, and permanent deletion.
diff --git a/app.py b/app.py
index 90f8f42..ece18c7 100644
--- a/app.py
+++ b/app.py
@@ -6052,6 +6052,8 @@ def build_terminal_list(session_token, sid=None):
             'buffered_events': len(bridge.replay_buffer),
             'files_available': bool(bridge.files_available()),
         }
+        if isinstance(bridge, SSHBridge):
+            terminal_info['ssh_target'] = bridge.metadata().get('ssh_target')
         terminals.append(terminal_info)
     return terminals
 
diff --git a/scripts/run_smoke_tests.py b/scripts/run_smoke_tests.py
index 69a553a..c291652 100644
--- a/scripts/run_smoke_tests.py
+++ b/scripts/run_smoke_tests.py
@@ -32,6 +32,8 @@
     'tests/ssh_node_credentials_smoke.py',
     'tests/ssh_tunnels_smoke.py',
     'tests/ssh_tunnels_browser_smoke.py',
+    'tests/ssh_profile_context_browser_smoke.py',
+    'tests/browser_popout_smoke.py',
     'tests/ime_anchor_browser_smoke.py',
 ]
 
diff --git a/static/js/standterm-ssh-route-editor.js b/static/js/standterm-ssh-route-editor.js
index 56a9af4..d83bfe0 100644
--- a/static/js/standterm-ssh-route-editor.js
+++ b/static/js/standterm-ssh-route-editor.js
@@ -3,18 +3,20 @@
     const routes = window.StandTermSshRoutes;
 
     routes.edit = function({ state, entryId, target, onDone, keys = [], temporaryKeys = [], saveRoute = false, keyAllowed = false,
-        createKey, copyPublicKey, hostIdentity }) {
+        createKey, copyPublicKey, hostIdentity, mode = 'prepare', entryName = '' }) {
         const original = routes.clone(state);
         const savedKeys = [...keys];
         const newKeys = new Map(temporaryKeys.map(record => [record.keyId, record]));
         const editorId = routes.id();
         let pendingGenerations = 0;
+        let saving = false;
+        const managed = mode === 'manage';
         let draft = routes.clone(state);
         let entry = [...draft.profiles, ...draft.history].find(item => item.id === entryId);
         if (!entry) {
             const node = { id: routes.id(), endpoint: { host: target.host || '', port: target.port || '22', username: target.username || '' }, nextNodeId: null,
                 hostKeyAlias: '', authentication: { method: 'password' } };
-            entry = { id: routes.id(), name: '', startNodeId: node.id,
+            entry = { id: routes.id(), name: entryName, startNodeId: node.id,
                 sortOrder: draft.profiles.length, keyId: null, keyTarget: null };
             draft.nodes.push(node);
             draft.profiles.push(entry);
@@ -46,6 +48,7 @@
             element.type = 'button';
             element.textContent = label;
             element.onclick = () => {
+                if (saving) return;
                 try { Promise.resolve(callback()).catch(fail); } catch (err) { fail(err); }
             };
             parent.append(element);
@@ -60,7 +63,7 @@
         function path() { return routes.resolve(draft, entry.startNodeId).path; }
 
         function updateSaveState() {
-            doneButton.disabled = pendingGenerations > 0;
+            doneButton.disabled = saving || pendingGenerations > 0;
         }
 
         // Keep incomplete values inside the modal. Done validates the completed draft.
@@ -386,9 +389,9 @@
         saveRouteLabel.className = 'ssh-key-toggle';
         saveRouteLabel.append(saveRouteInput, document.createTextNode('Save route on Connect'));
         saveRouteInput.setAttribute('aria-label', 'Save route');
-        actions.append(saveRouteLabel);
+        if (!managed) actions.append(saveRouteLabel);
         button('Cancel', () => dialog.close());
-        const doneButton = button('Done', () => {
+        const doneButton = button(managed ? 'Save route' : 'Done', async () => {
             if (pendingGenerations) return;
             flush();
             if (offerRepair()) return;
@@ -418,8 +421,18 @@
             discardUnusedDraftNodes();
             routes.validate(draft);
             const used = new Set(draft.nodes.map(node => node.authentication.keyRef?.keyId));
-            onDone(draft, entry.id, [...newKeys.values()].filter(record => used.has(record.keyId)), saveRouteInput.checked);
-            dialog.close();
+            saving = true;
+            updateSaveState();
+            rows.inert = heading.inert = advanced.inert = true;
+            status.textContent = managed ? 'Saving route…' : '';
+            try {
+                await onDone(draft, entry.id, [...newKeys.values()].filter(record => used.has(record.keyId)), saveRouteInput.checked);
+                dialog.close();
+            } finally {
+                saving = false;
+                rows.inert = heading.inert = advanced.inert = false;
+                updateSaveState();
+            }
         });
         doneButton.className = 'primary';
         const heading = document.createElement('div');
@@ -442,8 +455,11 @@
         }
         scope.onchange = updateScopeNotice;
         const help = document.createElement('p');
-        help.textContent = `Connect from Core through the cards, top to bottom. The last card is the Target. Drag the handle or use ↑ / ↓. Up to ${routes.MAX_JUMPS} jumps. Done returns to connection settings. Connect saves only when Save route is selected.`;
+        help.textContent = `Connect from Core through the cards, top to bottom. The last card is the Target. Drag the handle or use ↑ / ↓. Up to ${routes.MAX_JUMPS} jumps. ${managed
+            ? 'Save route stores all nodes and selected keys. Changes apply to the next connection.'
+            : 'Done returns to connection settings. Connect saves only when Save route is selected.'}`;
         dialog.append(title, help, heading, advanced, scopeNotice, rows, preview, status, actions);
+        dialog.addEventListener('cancel', event => { if (saving) event.preventDefault(); });
         dialog.addEventListener('close', () => dialog.remove());
         document.body.append(dialog);
         render();
diff --git a/templates/index.html b/templates/index.html
index 9ecbabc..648d6fe 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -392,6 +392,7 @@
         .ssh-profile-list button.active { color: #64a9ff; }
         .ssh-profile-list-name { display: block; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
         .ssh-profile-list-target { display: block; margin-top: 3px; color: #777; font-size: 11px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+        .ssh-profile-route-summary { color: #aaa; font-size: 12px; overflow-wrap: anywhere; line-height: 1.6; }
         .ssh-profile-editor { display: grid; align-content: start; gap: 9px; }
         .ssh-profile-editor label { display: grid; gap: 4px; color: #aaa; font-size: 11px; }
         .ssh-profile-editor input { width: 100%; box-sizing: border-box; padding: 7px 8px; background: #2c2c2e; border: 1px solid #555; border-radius: 4px; color: #fff; outline: none; }
@@ -460,12 +461,6 @@
             .ssh-route-card-toggle::after { margin-left: auto; }
             .ssh-route-actions { bottom: -12px; }
         }
-        .ssh-key-controls { display: grid; gap: 8px; padding: 9px; border: 1px solid #3a3a3c; border-radius: 6px; background: #171717; }
-        .ssh-key-controls > label { display: flex; grid-template-columns: none; align-items: center; gap: 8px; color: #ddd; }
-        .ssh-key-controls input[type="checkbox"] { width: auto; }
-        .ssh-key-public { min-height: 62px; width: 100%; box-sizing: border-box; resize: vertical; padding: 7px 8px; background: #111; border: 1px solid #444; border-radius: 4px; color: #aaa; font: 11px/1.4 monospace; }
-        .ssh-key-public-actions { display: flex; gap: 8px; align-items: center; }
-        .ssh-key-public-actions button { padding: 6px 9px; border: none; border-radius: 4px; background: #3a3a3c; color: #fff; cursor: pointer; }
         .settings-transfer-actions { display: flex; gap: 8px; flex-wrap: wrap; }
         .settings-transfer-actions button { padding: 7px 10px; border: none; border-radius: 4px; background: #3a3a3c; color: #fff; cursor: pointer; }
         .diagnostics-actions { display: flex; justify-content: flex-end; gap: 8px; margin-bottom: 10px; }
@@ -1059,21 +1054,14 @@ <h3>Settings</h3>
                                 </div>
                                 <div class="ssh-profile-editor">
                                     <label>Profile name<input type="text" id="ssh-profile-name" maxlength="64" autocomplete="off"></label>
-                                    <label>Host<input type="text" id="ssh-profile-host" autocomplete="off"></label>
-                                    <label>Port<input type="number" id="ssh-profile-port" min="1" max="65535" value="22"></label>
-                                    <label>Username<input type="text" id="ssh-profile-username" autocomplete="off"></label>
-                                    <div class="ssh-key-controls">
-                                        <label><input type="checkbox" id="ssh-profile-key-enabled">Use browser key authentication</label>
-                                        <div class="settings-status" id="ssh-profile-key-status">No browser key is linked.</div>
-                                        <textarea class="ssh-key-public" id="ssh-profile-key-public" readonly spellcheck="false" aria-label="SSH public key" hidden></textarea>
-                                        <div class="ssh-key-public-actions" id="ssh-profile-key-actions" hidden>
-                                            <button type="button" id="ssh-profile-key-copy">Copy Public Key</button>
-                                        </div>
+                                    <div class="ssh-profile-route-summary" id="ssh-profile-route-summary"></div>
+                                    <div class="ssh-profile-actions">
+                                        <button type="button" id="ssh-profile-edit-route">Edit connection…</button>
                                     </div>
-                                    <div class="settings-status">Create always saves a new profile. Save updates only the loaded profile.</div>
+                                    <div class="settings-status">Select an entry to rename or reorder it. Edit connection opens all nodes and their key settings.</div>
                                     <div class="ssh-profile-actions">
-                                        <button type="button" id="ssh-profile-create">Create</button>
-                                        <button type="button" class="primary" id="ssh-profile-save">Save</button>
+                                        <button type="button" id="ssh-profile-create">New session…</button>
+                                        <button type="button" class="primary" id="ssh-profile-save">Save name</button>
                                         <button type="button" class="danger" id="ssh-profile-delete">Delete</button>
                                     </div>
                                 </div>
@@ -2169,14 +2157,8 @@ <h3>Recover StandTerm session</h3>
             const sshProfileStatus = document.getElementById('ssh-profile-status');
             const sshProfileList = document.getElementById('ssh-profile-list');
             const sshProfileNameInput = document.getElementById('ssh-profile-name');
-            const sshProfileHostInput = document.getElementById('ssh-profile-host');
-            const sshProfilePortInput = document.getElementById('ssh-profile-port');
-            const sshProfileUsernameInput = document.getElementById('ssh-profile-username');
-            const sshProfileKeyEnabledInput = document.getElementById('ssh-profile-key-enabled');
-            const sshProfileKeyStatus = document.getElementById('ssh-profile-key-status');
-            const sshProfileKeyPublic = document.getElementById('ssh-profile-key-public');
-            const sshProfileKeyActions = document.getElementById('ssh-profile-key-actions');
-            const sshProfileKeyCopyBtn = document.getElementById('ssh-profile-key-copy');
+            const sshProfileRouteSummary = document.getElementById('ssh-profile-route-summary');
+            const sshProfileEditRouteBtn = document.getElementById('ssh-profile-edit-route');
             const sshProfileCreateBtn = document.getElementById('ssh-profile-create');
             const sshProfileSaveBtn = document.getElementById('ssh-profile-save');
             const sshProfileDeleteBtn = document.getElementById('ssh-profile-delete');
@@ -2339,7 +2321,8 @@ <h3>Recover StandTerm session</h3>
             const pendingSshHistory = [];
             let savingSshHistory = false;
             let editingSshProfileId = null;
-            let editingSshKeyRecord = null;
+            let sshProfileEditorContext = null;
+            let sshProfileEditorVersion = 0;
             let quickConnectSshKeyRecord = null;
             let quickConnectKeyLoadVersion = 0;
             const handledSshSignRequestIds = new Set();
@@ -4735,19 +4718,30 @@ <h3>Recover StandTerm session</h3>
             }
 
             async function prepareSshConnection(formData, interactiveLogin = false, commit = false) {
+                const formRevision = sshConnectionFormRevision;
+                const terminal = getActiveTerminalState();
+                const fromRoute = sshPreparationMode === 'route';
+                const routeDraft = fromRoute ? sshRouteDraft : null;
+                const selectedId = fromRoute ? selectedSshRouteEntry : selectedSshPickerEntry?.id;
+                const saveSession = fromRoute ? !!routeDraft?.saveRoute : sshSaveSessionInput.checked;
+                const temporaryKeys = fromRoute ? routeDraft?.temporaryKeys || [] : [...directTemporarySshKeys.values()];
+                const assertCurrent = () => {
+                    if (formRevision !== sshConnectionFormRevision || terminal !== getActiveTerminalState()
+                            || (!fromRoute && saveSession !== sshSaveSessionInput.checked)) {
+                        throw new Error('SSH connection settings changed. Review them and connect again.');
+                    }
+                };
                 await sshSessionReady;
                 await sshSessionWriteQueue.catch(() => {});
                 const snapshot = await SshRoutes.load(openSshSessionsDb, normalizeLegacySshSessionState, true);
-                const fromRoute = sshPreparationMode === 'route';
-                const routeDraft = fromRoute ? sshRouteDraft : null;
+                assertCurrent();
                 const source = routeDraft?.state || snapshot.state;
-                const selected = fromRoute ? currentSshRouteEntry(source) : currentSshEntry(source);
+                const selected = [...source.profiles, ...source.history].find(entry => entry.id === selectedId);
                 if (fromRoute && !selected) throw new Error('Choose a saved route before connecting.');
-                if (!fromRoute && selectedSshPickerEntry && !selected) throw new Error('The SSH entry was removed. Reload the settings.');
+                if (!fromRoute && selectedId && !selected) throw new Error('The SSH entry was removed. Reload the settings.');
                 if (snapshot.state.revision !== sshSessionState.revision || source.revision !== snapshot.state.revision) {
                     throw new Error('SSH settings changed in another window. Reload before connecting.');
                 }
-                const temporaryKeys = fromRoute ? routeDraft?.temporaryKeys || [] : [...directTemporarySshKeys.values()];
                 const records = [...snapshot.keys, ...temporaryKeys];
                 const path = fromRoute ? SshRoutes.clone(SshRoutes.checkedPath(source, selected)) : [{
                     id: SshRoutes.id(), endpoint: SshRoutes.endpoint(formData), nextNodeId: null,
@@ -4774,6 +4768,7 @@ <h3>Recover StandTerm session</h3>
                         if (!isBrowserSshKeyAllowedByPolicy()) throw new Error('Browser SSH keys require localhost or authorized HTTPS.');
                         const record = await validateBrowserSshKeyRecord(records.find(key => key.keyId === ref.keyId), owner,
                             ref.kind === 'credential' ? ref : null);
+                        assertCurrent();
                         const identity = ref.kind === 'credential' ? { credential_id: ref.keyId } : { profile_id: owner.id };
                         Object.assign(payload, { password: '', use_browser_key: true, ...identity,
                             key_id: record.keyId, browser_public_key: record.publicKeyRawB64 });
@@ -4784,7 +4779,8 @@ <h3>Recover StandTerm session</h3>
                 }
                 let revision = snapshot.state.revision;
                 let localKeys = temporaryKeys.filter(record => signers.some(signer => signer.keyId === record.keyId));
-                if (commit && (fromRoute ? routeDraft?.saveRoute : sshSaveSessionInput.checked)) {
+                assertCurrent();
+                if (commit && saveSession) {
                     const nextState = SshRoutes.clone(source);
                     let entry = selected;
                     if (!fromRoute) {
@@ -4806,6 +4802,7 @@ <h3>Recover StandTerm session</h3>
                     const operation = SshRoutes.save(openSshSessionsDb, nextState, keyChanges);
                     sshSessionWriteQueue = operation;
                     sshSessionState = await operation;
+                    assertCurrent();
                     revision = sshSessionState.revision;
                     localKeys = [];
                     if (fromRoute) {
@@ -4985,84 +4982,88 @@ <h3>Recover StandTerm session</h3>
                 updateSshProfileIndicator();
             }
 
-            function clearSshProfileEditor(useQuickConnectValues = false) {
+            function getSshProfileEditorContext() {
+                const state = getActiveTerminalState();
+                const fromConnection = state?.connectionType === 'ssh' && (state.connected || state.connecting);
+                const target = fromConnection ? normalizeSshTarget(state.sshTarget || {}) : getCurrentSshTarget();
+                return { target, fromConnection, key: JSON.stringify([
+                    state?.instanceId, fromConnection, fromConnection ? state.connectedAt : null, target
+                ]) };
+            }
+
+            function syncSshProfileEditorContext() {
+                const context = getSshProfileEditorContext();
+                if (sshProfileEditorContext === context.key) return false;
+                sshProfileEditorContext = context.key;
+                clearSshProfileEditor(true);
+                setSshProfileStatus(context.fromConnection
+                    ? 'New direct session from the current SSH tab. Select a profile to edit an existing entry.'
+                    : 'New session from Quick Connect. Select a profile to edit an existing entry.');
+                return true;
+            }
+
+            function isCurrentSshProfileEditor(version) {
+                return version === sshProfileEditorVersion && sshProfileEditorContext === getSshProfileEditorContext().key;
+            }
+
+            function clearSshProfileEditor(useCurrentValues = false) {
+                ++sshProfileEditorVersion;
                 editingSshProfileId = null;
-                editingSshKeyRecord = null;
-                const quickTarget = useQuickConnectValues ? getCurrentSshTarget() : { host: '', port: '22', username: '' };
-                sshProfileNameInput.value = useQuickConnectValues && quickTarget.host
-                    ? normalizeSshProfileName(`${quickTarget.username}@${quickTarget.host}`)
-                    : '';
-                sshProfileHostInput.value = quickTarget.host;
-                sshProfilePortInput.value = quickTarget.port;
-                sshProfileUsernameInput.value = quickTarget.username;
-                sshProfileKeyEnabledInput.checked = false;
-                renderSshProfileKeyEditor();
+                const target = useCurrentValues ? getSshProfileEditorContext().target : null;
+                sshProfileNameInput.value = target?.host
+                    ? normalizeSshProfileName(`${target.username}@${target.host}`) : '';
                 renderSshProfileManager();
             }
 
-            async function loadSshProfileEditor(profileId) {
+            function loadSshProfileEditor(profileId) {
                 const profile = findSshProfile(profileId);
                 if (!profile) return;
+                ++sshProfileEditorVersion;
                 editingSshProfileId = profile.id;
-                editingSshKeyRecord = null;
                 sshProfileNameInput.value = profile.name;
-                sshProfileHostInput.value = profile.host;
-                sshProfilePortInput.value = profile.port;
-                sshProfileUsernameInput.value = profile.username;
-                setSshProfileStatus(`Loaded ${profile.name}. Save will update this entry; Create will make a copy.`);
-                if (profile.keyId) {
-                    try {
-                        editingSshKeyRecord = await validateBrowserSshKeyRecord(await loadSshKeyRecord(profile.keyId), profile);
-                        sshProfileKeyEnabledInput.checked = true;
-                    } catch (err) {
-                        sshProfileKeyEnabledInput.checked = false;
-                        setSshProfileStatus(err.message || 'The linked browser SSH key is unavailable.', true);
-                    }
-                } else {
-                    sshProfileKeyEnabledInput.checked = false;
-                }
-                renderSshProfileKeyEditor();
+                setSshProfileStatus(`Selected ${profile.name}. Save name only renames this entry.`);
                 renderSshProfileManager();
             }
 
-            function renderSshProfileKeyEditor() {
-                const enabled = sshProfileKeyEnabledInput.checked;
-                const record = editingSshKeyRecord;
-                sshProfileKeyPublic.hidden = !record;
-                sshProfileKeyActions.hidden = !record;
-                sshProfileKeyPublic.value = record ? record.publicKeyOpenSsh : '';
-                if (record && enabled) {
-                    sshProfileKeyStatus.innerText = `${record.fingerprint} · private key stays non-extractable in this browser`;
-                } else if (record) {
-                    sshProfileKeyStatus.innerText = 'This key will be removed only when the loaded profile is saved.';
-                } else if (enabled) {
-                    sshProfileKeyStatus.innerText = 'Generating a non-extractable Ed25519 key...';
-                } else {
-                    sshProfileKeyStatus.innerText = 'No browser key is linked.';
-                }
+            function describeSshProfile(profile) {
+                const route = SshRoutes.resolve(sshSessionState, profile.startNodeId);
+                const endpoints = route.path.map(node => `${node.endpoint.username}@${node.endpoint.host}:${node.endpoint.port}`);
+                return `Core host → ${endpoints.join(' → ')}${route.error ? ' · Route needs repair' : ''}`;
             }
 
-            async function toggleSshProfileKey() {
-                if (!sshProfileKeyEnabledInput.checked) {
-                    renderSshProfileKeyEditor();
-                    return;
-                }
-                if (!editingSshKeyRecord) {
-                    if (!isBrowserSshKeyAllowedByPolicy()) {
-                        sshProfileKeyEnabledInput.checked = false;
-                        renderSshProfileKeyEditor();
-                        throw new Error('Browser SSH keys are not allowed for this browser connection.');
-                    }
-                    renderSshProfileKeyEditor();
-                    try {
-                        editingSshKeyRecord = await createBrowserSshKeyRecord(editingSshProfileId || '');
-                    } catch (err) {
-                        sshProfileKeyEnabledInput.checked = false;
-                        renderSshProfileKeyEditor();
-                        throw err;
+            async function editSshProfileRoute(createNew = false) {
+                if (syncSshProfileEditorContext()) return;
+                const version = sshProfileEditorVersion;
+                const profileId = createNew ? null : editingSshProfileId;
+                if (!createNew && !profileId) return;
+                const target = getSshProfileEditorContext().target;
+                const entryName = createNew && editingSshProfileId ? '' : sshProfileNameInput.value;
+                const terminalId = activeTerminalId;
+                await sshSessionWriteQueue.catch(() => {});
+                const snapshot = await SshRoutes.load(openSshSessionsDb, normalizeLegacySshSessionState, true);
+                if (!isCurrentSshProfileEditor(version)) return;
+                if (snapshot.state.revision !== sshSessionState.revision) {
+                    throw new Error('SSH settings changed in another window. Reload before editing.');
+                }
+                const profile = snapshot.state.profiles.find(item => item.id === profileId);
+                if (!createNew && !profile) throw new Error('This SSH entry was removed. Reload before editing.');
+                if (profile) profile.name = entryName;
+                SshRoutes.edit({ state: snapshot.state, entryId: profileId, target, entryName,
+                    mode: 'manage', keys: snapshot.keys, keyAllowed: isBrowserSshKeyAllowedByPolicy(),
+                    createKey: createTemporarySshKey, copyPublicKey: value => copyToClipboard(value),
+                    hostIdentity: { request: requestSshHostIdentity, terminalId },
+                    onDone: async (draft, entryId, temporaryKeys) => {
+                        const operation = sshSessionWriteQueue.catch(() => {}).then(() => SshRoutes.save(
+                            openSshSessionsDb, draft, temporaryKeys.map(record => ({ type: 'put', record }))
+                        ));
+                        sshSessionWriteQueue = operation;
+                        sshSessionState = await operation;
+                        renderSshSessionState();
+                        if (!isCurrentSshProfileEditor(version)) return;
+                        loadSshProfileEditor(entryId);
+                        setSshProfileStatus(`Saved ${findSshProfile(entryId).name}. Changes apply to the next connection.`);
                     }
-                }
-                renderSshProfileKeyEditor();
+                });
             }
 
             function renderSshProfileManager() {
@@ -5083,16 +5084,19 @@ <h3>Recover StandTerm session</h3>
                         name.innerText = profile.name;
                         const target = document.createElement('span');
                         target.className = 'ssh-profile-list-target';
-                        target.innerText = `${profile.username}@${profile.host}:${profile.port}`;
+                        target.innerText = describeSshProfile(profile);
                         button.append(name, target);
-                        button.onclick = () => {
-                            loadSshProfileEditor(profile.id)
-                                .catch(err => setSshProfileStatus(err.message || 'Profile could not be loaded.', true));
-                        };
+                        button.onclick = () => loadSshProfileEditor(profile.id);
                         sshProfileList.appendChild(button);
                     });
                 }
                 const selectedIndex = sshSessionState.profiles.findIndex(profile => profile.id === editingSshProfileId);
+                const profile = findSshProfile(editingSshProfileId);
+                const target = getSshProfileEditorContext().target;
+                sshProfileRouteSummary.textContent = profile ? describeSshProfile(profile)
+                    : target.host ? `New direct session: ${target.username}@${target.host}:${target.port}`
+                    : 'Select a saved entry, or create a new session.';
+                sshProfileEditRouteBtn.disabled = selectedIndex < 0;
                 sshProfileSaveBtn.disabled = selectedIndex < 0;
                 sshProfileDeleteBtn.disabled = selectedIndex < 0;
                 sshProfileUpBtn.disabled = selectedIndex <= 0;
@@ -5201,139 +5205,26 @@ <h3>Recover StandTerm session</h3>
                 finally { savingSshHistory = false; }
             }
 
-            function readSshProfileEditor() {
-                const target = normalizeSshTarget({
-                    host: sshProfileHostInput.value,
-                    port: sshProfilePortInput.value,
-                    username: sshProfileUsernameInput.value
-                });
-                return {
-                    name: normalizeSshProfileName(sshProfileNameInput.value),
-                    ...target
-                };
-            }
-
-            function validateSshProfileEditor() {
-                if (sshProfileNameInput.value.trim().length > SSH_PROFILE_NAME_MAX_LENGTH) {
-                    setSshProfileStatus(`Profile name must be ${SSH_PROFILE_NAME_MAX_LENGTH} characters or fewer.`, true);
-                    return null;
-                }
-                const portNumber = Number.parseInt(sshProfilePortInput.value, 10);
-                if (!Number.isInteger(portNumber) || portNumber < 1 || portNumber > 65535) {
-                    setSshProfileStatus('Port must be between 1 and 65535.', true);
-                    return null;
-                }
-                const editorValue = readSshProfileEditor();
-                if (!editorValue.name || !editorValue.host || !editorValue.username) {
-                    setSshProfileStatus('Profile name, host, and username are required.', true);
-                    return null;
-                }
-                return editorValue;
-            }
-
-            async function createSshProfileEditor() {
-                const editorValue = validateSshProfileEditor();
-                if (!editorValue) return;
-                const profileId = createSshSessionId('profile');
-                const skippedLoadedKey = !!(editingSshKeyRecord && editingSshProfileId);
-                const mayAttachDraftKey = editingSshKeyRecord
-                    && sshProfileKeyEnabledInput.checked
-                    && !editingSshProfileId;
-                const keyRecord = mayAttachDraftKey
-                    ? { ...editingSshKeyRecord, ownerProfileId: profileId, targetKey: getSshTargetKey(editorValue) }
-                    : null;
-                await updateSshSessionStateWithKeyChanges(nextState => {
-                    nextState.profiles.push({
-                        id: profileId,
-                        sortOrder: nextState.profiles.length,
-                        ...editorValue,
-                        keyId: keyRecord ? keyRecord.keyId : null
-                    });
-                }, keyRecord ? [{ type: 'put', record: keyRecord }] : []);
-                editingSshProfileId = profileId;
-                editingSshKeyRecord = keyRecord;
-                sshProfileKeyEnabledInput.checked = !!keyRecord;
-                renderSshProfileKeyEditor();
-                renderSshSessionState();
-                setSshProfileStatus(
-                    mayAttachDraftKey
-                        ? `Created ${editorValue.name} with a browser SSH key.`
-                        : skippedLoadedKey
-                        ? `Created ${editorValue.name}. Browser keys from loaded profiles are not copied.`
-                        : `Created ${editorValue.name}.`
-                );
-            }
-
             async function saveSshProfileEditor() {
-                const existingProfile = findSshProfile(editingSshProfileId);
-                if (!existingProfile) {
-                    setSshProfileStatus('Load a profile before using Save, or choose Create.', true);
+                if (syncSshProfileEditorContext()) return;
+                const version = sshProfileEditorVersion;
+                const profileId = editingSshProfileId;
+                if (!findSshProfile(profileId)) return;
+                const name = sshProfileNameInput.value.trim();
+                if (!name || name.length > SSH_PROFILE_NAME_MAX_LENGTH) {
+                    setSshProfileStatus(`Profile name must be 1–${SSH_PROFILE_NAME_MAX_LENGTH} characters.`, true);
                     return;
                 }
-                const editorValue = validateSshProfileEditor();
-                if (!editorValue) return;
-                const wantsKey = sshProfileKeyEnabledInput.checked;
-                if (wantsKey && !editingSshKeyRecord) {
-                    setSshProfileStatus('Generate the browser SSH key before saving.', true);
-                    return;
-                }
-                if (!wantsKey && existingProfile.keyId && !window.confirm(
-                    `Remove the browser SSH key from ${existingProfile.name}? The private key cannot be recovered.`
-                )) return;
-                const keyTarget = existingProfile.keyTarget
-                    && getSshTargetKey(existingProfile.keyTarget) !== getSshTargetKey(existingProfile)
-                    ? existingProfile.keyTarget : editorValue;
-                const keyRecord = wantsKey
-                    ? {
-                        ...editingSshKeyRecord,
-                        ownerProfileId: existingProfile.id,
-                        targetKey: getSshTargetKey(keyTarget)
-                    }
-                    : null;
-                const keyBindingChanged = existingProfile.keyId && (!keyRecord
-                    || existingProfile.keyId !== keyRecord.keyId
-                    || getSshTargetKey(existingProfile.keyTarget || existingProfile) !== getSshTargetKey(keyTarget));
-                if (keyBindingChanged) requireUnreferencedSshKey(existingProfile, true);
-                const keyChanges = [];
-                if (keyRecord) keyChanges.push({ type: 'put', record: keyRecord });
-                if (existingProfile.keyId && (!keyRecord || existingProfile.keyId !== keyRecord.keyId)) {
-                    const oldKeyRecord = await loadSshKeyRecord(existingProfile.keyId);
-                    if (oldKeyRecord && oldKeyRecord.ownerProfileId === existingProfile.id) {
-                        keyChanges.push({ type: 'delete', keyId: existingProfile.keyId });
-                    }
-                }
-                await updateSshSessionStateWithKeyChanges(nextState => {
-                    const existing = nextState.profiles.find(profile => profile.id === existingProfile.id);
-                    if (existing) {
-                        const path = SshRoutes.checkedPath(nextState, existing);
-                        const previousAuth = path.at(-1).authentication;
-                        let authentication = previousAuth;
-                        if (keyBindingChanged || (!existingProfile.keyId && keyRecord)) {
-                            if (keyRecord && getSshTargetKey(keyTarget) === getSshTargetKey(editorValue)) {
-                                authentication = { method: 'browser-key', keyRef: {
-                                    ownerProfileId: existing.id, keyId: keyRecord.keyId, targetKey: keyRecord.targetKey
-                                } };
-                            } else if (previousAuth.keyRef?.ownerProfileId === existing.id) {
-                                authentication = { method: 'password' };
-                            }
-                        }
-                        if (getSshTargetKey(path.at(-1).endpoint) !== getSshTargetKey(editorValue)
-                                || JSON.stringify(authentication) !== JSON.stringify(previousAuth)) {
-                            SshRoutes.replaceNode(nextState, existing, path.length - 1, {
-                                ...path.at(-1), endpoint: SshRoutes.endpoint(editorValue), authentication
-                            });
-                        }
-                        Object.assign(existing, editorValue, { keyId: keyRecord ? keyRecord.keyId : null,
-                            keyTarget: keyRecord ? SshRoutes.endpoint(keyTarget) : null });
-                    }
-                }, keyChanges);
-                editingSshKeyRecord = keyRecord;
-                renderSshProfileKeyEditor();
-                renderSshSessionState();
-                setSshProfileStatus(`Saved ${editorValue.name}.`);
+                await updateSshSessionState(nextState => {
+                    const profile = nextState.profiles.find(item => item.id === profileId);
+                    if (!profile) throw new Error('This SSH entry was removed. Reload before saving.');
+                    profile.name = name;
+                });
+                if (isCurrentSshProfileEditor(version)) setSshProfileStatus(`Saved ${name}.`);
             }
 
             async function deleteEditingSshProfile() {
+                const version = sshProfileEditorVersion;
                 const profile = findSshProfile(editingSshProfileId);
                 if (!profile) return;
                 if (profile.keyId) requireUnreferencedSshKey(profile);
@@ -5351,15 +5242,16 @@ <h3>Recover StandTerm session</h3>
                 if (selectedSshPickerEntry && selectedSshPickerEntry.type === 'profile' && selectedSshPickerEntry.id === profile.id) {
                     selectedSshPickerEntry = null;
                 }
-                clearSshProfileEditor(false);
-                setSshProfileStatus(`Deleted ${profile.name}.`);
+                if (isCurrentSshProfileEditor(version)) {
+                    clearSshProfileEditor(false);
+                    setSshProfileStatus(`Deleted ${profile.name}.`);
+                }
             }
 
-            function requireUnreferencedSshKey(owner, keepEntry = false) {
+            function requireUnreferencedSshKey(owner) {
                 const dependents = [...sshSessionState.profiles, ...sshSessionState.history].filter(entry => {
                     const path = SshRoutes.resolve(sshSessionState, entry.startNodeId).path;
-                    return path.some((node, index) => node.authentication.keyRef?.ownerProfileId === owner.id
-                        && (entry.id !== owner.id || (keepEntry && index < path.length - 1)));
+                    return path.some(node => node.authentication.keyRef?.ownerProfileId === owner.id && entry.id !== owner.id);
                 });
                 if (dependents.length) throw new Error(`Browser key is used by: ${dependents.map(entry => entry.name || entry.host).join(', ')}. Change those routes before removing or rebinding the key.`);
             }
@@ -5373,8 +5265,9 @@ <h3>Recover StandTerm session</h3>
             }
 
             async function moveEditingSshProfile(offset) {
+                const profileId = editingSshProfileId;
                 await updateSshSessionState(nextState => {
-                    const currentIndex = nextState.profiles.findIndex(profile => profile.id === editingSshProfileId);
+                    const currentIndex = nextState.profiles.findIndex(profile => profile.id === profileId);
                     const nextIndex = currentIndex + offset;
                     if (currentIndex < 0 || nextIndex < 0 || nextIndex >= nextState.profiles.length) return;
                     const profiles = [...nextState.profiles];
@@ -6441,6 +6334,7 @@ <h3>Recover StandTerm session</h3>
                     label: 'Disconnected',
                     applicationTitle: '',
                     connectionType: null,
+                    sshTarget: null,
                     connected: false,
                     connecting: false,
                     error: false,
@@ -6618,6 +6512,8 @@ <h3>Recover StandTerm session</h3>
                     state.connecting = false;
                     state.error = false;
                     state.connectionType = normalizeConnectionType(item.connection_type);
+                    if (item.ssh_target) state.sshTarget = normalizeSshTarget(item.ssh_target);
+                    if (state.connectionType !== 'ssh') state.sshTarget = null;
                     state.sftpAvailable = typeof item.files_available === 'boolean'
                         ? item.files_available
                         : (state.connectionType === 'ssh' ? null : false);
@@ -8022,6 +7918,7 @@ <h3>Recover StandTerm session</h3>
                 state.connecting = true;
                 state.error = false;
                 state.connectionType = formData.connection_type;
+                state.sshTarget = state.connectionType === 'ssh' ? normalizeSshTarget(formData) : null;
                 state.label = formData.connection_type === 'ssh' && formData.profile_name
                     ? getSshProfileTabLabel(formData.profile_name)
                     : (CONNECTION_LABELS[state.connectionType] || 'Terminal');
@@ -8129,10 +8026,12 @@ <h3>Recover StandTerm session</h3>
             document.getElementById('ssh-edit-route').onclick = async () => {
                 try {
                     invalidateSshRetry();
-                    await sshSessionWriteQueue;
+                    const revision = sshConnectionFormRevision;
+                    const terminalId = activeTerminalId;
+                    await sshSessionWriteQueue.catch(() => {});
                     const snapshot = await SshRoutes.load(openSshSessionsDb, normalizeLegacySshSessionState, true);
                     if (snapshot.state.revision !== sshSessionState.revision) throw new Error('SSH settings changed in another window. Reload before editing.');
-                    const terminalId = activeTerminalId;
+                    if (revision !== sshConnectionFormRevision || terminalId !== activeTerminalId) return;
                     SshRoutes.edit({ state: sshRouteDraft?.state || snapshot.state, entryId: currentSshRouteEntry()?.id,
                         temporaryKeys: sshRouteDraft?.temporaryKeys || [], saveRoute: sshRouteDraft?.saveRoute || false,
                         target: getCurrentSshTarget(),
@@ -8141,6 +8040,9 @@ <h3>Recover StandTerm session</h3>
                         copyPublicKey: value => copyToClipboard(value),
                         hostIdentity: { request: requestSshHostIdentity, terminalId },
                         onDone: (state, entryId, temporaryKeys, saveRoute) => {
+                            if (revision !== sshConnectionFormRevision || terminalId !== activeTerminalId) {
+                                throw new Error('The connection changed. Cancel and reopen the route editor.');
+                            }
                             sshRouteDraft = { state, entryId, temporaryKeys, saveRoute };
                             selectedSshRouteEntry = entryId;
                             selectSshPreparationMode('route');
@@ -8165,21 +8067,16 @@ <h3>Recover StandTerm session</h3>
             document.addEventListener('click', event => {
                 if (!event.target.closest('.ssh-session-picker')) closeSshSessionPicker();
             });
+            sshSaveSessionInput.addEventListener('change', invalidateSshRetry);
             sshSaveHistoryInput.onchange = () => {
                 prefs.saveSshHistory = sshSaveHistoryInput.checked;
                 savePrefs(prefs);
             };
             sshProfileCreateBtn.onclick = () => {
-                createSshProfileEditor().catch(err => setSshProfileStatus(err.message || 'Profile could not be created.', true));
-            };
-            sshProfileKeyEnabledInput.onchange = () => {
-                toggleSshProfileKey()
-                    .catch(err => setSshProfileStatus(err.message || 'Browser SSH key could not be generated.', true));
+                editSshProfileRoute(true).catch(err => setSshProfileStatus(err.message || 'Profile could not be created.', true));
             };
-            sshProfileKeyCopyBtn.onclick = () => {
-                if (!editingSshKeyRecord) return;
-                copyToClipboard(editingSshKeyRecord.publicKeyOpenSsh);
-                setSshProfileStatus('SSH public key copied.');
+            sshProfileEditRouteBtn.onclick = () => {
+                editSshProfileRoute().catch(err => setSshProfileStatus(err.message || 'Profile could not be edited.', true));
             };
             sshProfileSaveBtn.onclick = () => {
                 saveSshProfileEditor().catch(err => setSshProfileStatus(err.message || 'Profile could not be saved.', true));
@@ -8722,6 +8619,8 @@ <h3>Recover StandTerm session</h3>
                         state.connecting = false;
                         state.error = false;
                         state.connectionType = normalizeConnectionType(data.connection_type);
+                        if (data.ssh_target) state.sshTarget = normalizeSshTarget(data.ssh_target);
+                        if (state.connectionType !== 'ssh') state.sshTarget = null;
                         state.sftpAvailable = typeof data.files_available === 'boolean'
                             ? data.files_available
                             : (state.connectionType === 'ssh' ? null : false);
@@ -10289,6 +10188,34 @@ <h3>Recover StandTerm session</h3>
             }
 
             let floatingWindowOpening = false;
+            const browserPopupWindows = new Set();
+            function closeBrowserPopup(child) {
+                try {
+                    if (child.closed) return;
+                    // An opaque-origin reload can also make WebKit reject close.
+                    // Only dispose windows whose original document is accessible.
+                    if (child.document) child.close();
+                } catch (_) {
+                    // Some browsers reject script-close after about:blank reloads.
+                    // Terminal/Files state is already released by pagehide.
+                }
+            }
+
+            function usesBrowserPopup() {
+                return !useDesktopFloatingWindows && typeof window.documentPictureInPicture?.requestWindow !== 'function';
+            }
+
+            function floatingWindowError() {
+                alert(useDesktopFloatingWindows
+                    ? 'Could not open the floating window. Please retry or update StandTerm Desktop.'
+                    : 'Could not open the floating window. Allow pop-up windows for this site, then click the control again.');
+            }
+
+            window.addEventListener('pagehide', () => {
+                for (const child of browserPopupWindows) closeBrowserPopup(child);
+                browserPopupWindows.clear();
+            });
+
             async function requestFloatingWindow(width, height) {
                 if (floatingWindowOpening) return null;
                 floatingWindowOpening = true;
@@ -10298,25 +10225,40 @@ <h3>Recover StandTerm session</h3>
                         if (!child) throw new Error('Floating window was blocked.');
                         return await Promise.resolve(child);
                     }
+                    if (usesBrowserPopup()) {
+                        const child = window.open('about:blank', '_blank', `popup,width=${width},height=${height}`);
+                        if (!child) throw new Error('Floating window was blocked.');
+                        child.opener = null;
+                        browserPopupWindows.add(child);
+                        child.addEventListener('pagehide', () => {
+                            // Let the terminal/Files handlers restore their DOM
+                            // before disposing a closed or navigated popup.
+                            setTimeout(() => { closeBrowserPopup(child); browserPopupWindows.delete(child); }, 0);
+                        }, { once: true });
+                        return await Promise.resolve(child);
+                    }
                     return await window.documentPictureInPicture.requestWindow({ width, height });
                 } catch {
-                    alert('Could not open the floating window. Window creation may be blocked or unavailable. Please retry or update StandTerm Desktop.');
+                    floatingWindowError();
                     return null;
                 } finally {
                     floatingWindowOpening = false;
                 }
             }
 
-            async function openSftpPip(state) {
+            async function openSftpPip(state, existingWindow = null) {
                 if (!canUseSftpFileManager(state)) return;
-                if (!useDesktopFloatingWindows && !window.documentPictureInPicture) return alert('PiP not supported.');
-                if (pipTerminalState) return alert('Restore the terminal from PiP before opening Files.');
+                if (pipTerminalState) return alert('Restore the terminal from its floating window before opening Files.');
                 if (sftpPipState) {
                     if (sftpPipState.window && !sftpPipState.window.closed) sftpPipState.window.focus();
                     return;
                 }
-                const pipWindow = await requestFloatingWindow(720, 620);
+                const pipWindow = existingWindow || await requestFloatingWindow(720, 620);
                 if (!pipWindow) return;
+                if (!isCurrentTerminalState(state) || !canUseSftpFileManager(state)) {
+                    pipWindow.close();
+                    return;
+                }
                 const transferState = {
                     mode: 'source',
                     window: pipWindow,
@@ -10352,19 +10294,35 @@ <h3>Recover StandTerm session</h3>
                     xhr: null,
                 };
                 sftpPipState = transferState;
-                createSftpPipShell(transferState);
-                copyStylesToPipWindow(pipWindow);
-                pipWindow.addEventListener('pagehide', () => {
+                const release = () => {
                     transferState.window = null;
                     transferState.elements = null;
                     if (sftpPipState === transferState) sftpPipState = null;
-                }, { once: true });
-                requestSftpBrowse(transferState);
+                };
+                pipWindow.addEventListener('pagehide', release, { once: true });
+                try {
+                    if (existingWindow) pipWindow.document.head.replaceChildren();
+                    createSftpPipShell(transferState);
+                    copyStylesToPipWindow(pipWindow);
+                    requestSftpBrowse(transferState);
+                    pipWindow.focus();
+                } catch {
+                    release();
+                    pipWindow.close();
+                    floatingWindowError();
+                }
             }
 
             async function openSftpFromTerminalPip(state) {
                 if (!state || pipTerminalState !== state || !canUseSftpFileManager(state)) return;
                 const pipWindow = state.pipWindow;
+                if (browserPopupWindows.has(pipWindow)) {
+                    // The click activates the child, not its opener. Reuse this
+                    // window so the transition needs no second popup permission.
+                    restoreTerminalFromPip(state);
+                    openSftpPip(state, pipWindow);
+                    return;
+                }
                 const closing = useDesktopFloatingWindows && pipWindow && !pipWindow.closed
                     ? new Promise(resolve => pipWindow.addEventListener('pagehide', resolve, { once: true }))
                     : null;
@@ -10390,6 +10348,8 @@ <h3>Recover StandTerm session</h3>
             const OVERLAY_MIN_HEIGHT = 150;
             const IMAGE_EXTENSIONS = ['.jpg', '.jpeg', '.png', '.gif', '.webp', '.svg', '.bmp'];
             function showContextMenu(x, y, target = null) {
+                pipOption.textContent = usesBrowserPopup() ? '\u29C9 Pop out terminal' : '\u29C9 Terminal to PiP';
+                pipOption.title = usesBrowserPopup() ? 'Open a separate browser window; it may not stay on top.' : '';
                 const activeTerm = getActiveTerm();
                 const targetTab = target && target.closest ? target.closest('.terminal-tab') : null;
                 contextMenuTerminalId = targetTab ? targetTab.dataset.terminalId : activeTerminalId;
@@ -10823,8 +10783,7 @@ <h3>Recover StandTerm session</h3>
             async function moveActiveTerminalToPip() {
                 contextMenu.style.display = 'none';
                 if (!canMoveActiveTerminalToPip()) return;
-                if (!useDesktopFloatingWindows && !window.documentPictureInPicture) return alert("PiP not supported.");
-                if (sftpPipState) return alert('Close the SFTP transfer window before moving a terminal to PiP.');
+                if (sftpPipState) return alert('Close Files before moving a terminal to its own window.');
                 const state = getActiveTerminalState();
                 if (!state) return;
                 if (pipTerminalState && pipTerminalState !== state) {
@@ -10832,21 +10791,33 @@ <h3>Recover StandTerm session</h3>
                 }
                 const pipWindow = await requestFloatingWindow(800, 480);
                 if (!pipWindow) return;
+                if (!isCurrentTerminalState(state) || !state.connected) {
+                    pipWindow.close();
+                    return;
+                }
                 pipTerminalState = state;
                 state.pipWindow = pipWindow;
                 state.pipReturnNextSibling = state.container.nextSibling;
                 state.pipResizeHandler = () => fitTerminalState(state);
                 state.pipPagehideHandler = () => restoreTerminalFromPip(state);
 
-                setTerminalPipMode(state, true);
-                const host = createPipShell(state, pipWindow);
-                host.append(state.container);
-                state.container.classList.add('active');
-                copyStylesToPipWindow(pipWindow);
-                updatePipStatus(state);
-                requestAnimationFrame(() => fitTerminalState(state));
                 pipWindow.addEventListener('resize', state.pipResizeHandler);
                 pipWindow.addEventListener('pagehide', state.pipPagehideHandler);
+                try {
+                    setTerminalPipMode(state, true);
+                    const host = createPipShell(state, pipWindow);
+                    host.append(state.container);
+                    state.container.classList.add('active');
+                    copyStylesToPipWindow(pipWindow);
+                    updatePipStatus(state);
+                    requestAnimationFrame(() => fitTerminalState(state));
+                    pipWindow.focus();
+                    state.term.focus();
+                } catch {
+                    restoreTerminalFromPip(state, { closeWindow: true });
+                    pipWindow.close();
+                    floatingWindowError();
+                }
             }
             pipOption.addEventListener('click', moveActiveTerminalToPip);
 
@@ -11188,11 +11159,8 @@ <h3>Recover StandTerm session</h3>
                 document.getElementById('pref-fontWeight').value = prefs.fontWeight;
                 document.getElementById('pref-cursorStyle').value = prefs.cursorStyle;
                 document.getElementById('pref-showTerminalTitleInStatusBar').checked = prefs.showTerminalTitleInStatusBar;
-                if (editingSshProfileId) {
-                    renderSshProfileManager();
-                } else {
-                    clearSshProfileEditor(true);
-                }
+                syncSshProfileEditorContext();
+                renderSshProfileManager();
                 settingsModal.classList.add('open');
                 renderConnectionDiagnostics();
                 requestServerSettingsSnapshot();
diff --git a/terminal_backends/ssh.py b/terminal_backends/ssh.py
index da3986f..6f0dac0 100644
--- a/terminal_backends/ssh.py
+++ b/terminal_backends/ssh.py
@@ -146,6 +146,12 @@ def metadata(self, cols=None, rows=None):
         metadata = super().metadata(cols=cols, rows=rows)
         if self.auth_method:
             metadata['auth_method'] = self.auth_method
+        if self._sftp_endpoint:
+            metadata['ssh_target'] = {
+                'host': self._sftp_endpoint['host'],
+                'port': self._sftp_endpoint['port'],
+                'username': self._sftp_endpoint['user'],
+            }
         return metadata
 
     def sftp_endpoint(self):
diff --git a/tests/agent_backend_smoke.py b/tests/agent_backend_smoke.py
index 51fa37b..c14dbb9 100644
--- a/tests/agent_backend_smoke.py
+++ b/tests/agent_backend_smoke.py
@@ -4452,6 +4452,7 @@ def make_sftp_test_bridge(session_token, terminal_id=standterm.TERMINAL_ID_MAIN)
         'port': 22,
         'route': 'direct',
     }
+    bridge.auth_method = None
     bridge._sftp_lock = threading.Lock()
     bridge._sftp_file_refs_lock = threading.Lock()
     bridge._sftp_file_refs = {}
@@ -4461,6 +4462,22 @@ def make_sftp_test_bridge(session_token, terminal_id=standterm.TERMINAL_ID_MAIN)
     return bridge
 
 
+def test_ssh_target_metadata_is_structured_and_access_scoped():
+    session = 'target-metadata-test'
+    bridge = make_sftp_test_bridge(session)
+    bridge._sftp_endpoint.update(password='not-public', route='not-an-endpoint')
+    expected = {'host': 'host.example', 'port': 22, 'username': 'tester'}
+    assert bridge.metadata()['ssh_target'] == expected
+    standterm.bridges[session] = {bridge.terminal_id: bridge}
+    try:
+        with patch.object(standterm, 'is_terminal_bridge_allowed_for_sid', return_value=True):
+            assert standterm.build_terminal_list(session, sid='allowed')[0]['ssh_target'] == expected
+        with patch.object(standterm, 'is_terminal_bridge_allowed_for_sid', return_value=False):
+            assert standterm.build_terminal_list(session, sid='denied') == []
+    finally:
+        standterm.bridges.pop(session)
+
+
 def make_local_file_test_bridge(session_token, terminal_id):
     return standterm.LocalShellBridge(
         session_token,
@@ -8664,6 +8681,7 @@ def main():
         test_transcript_store_sanitizes_terminal_output,
         test_transcript_retains_batched_terminal_output_and_utf8_boundaries,
         test_terminal_bridge_tracks_shared_session_metadata,
+        test_ssh_target_metadata_is_structured_and_access_scoped,
         test_ssh_input_records_agent_metadata_after_validation,
         test_agent_input_metadata_bounds_and_sanitized_preview,
         test_privacy_state_blocks_agent_context_and_redacts_input_metadata,
diff --git a/tests/agent_browser_smoke.py b/tests/agent_browser_smoke.py
index 9a14302..5e2d1b9 100644
--- a/tests/agent_browser_smoke.py
+++ b/tests/agent_browser_smoke.py
@@ -4314,7 +4314,8 @@ def test_ssh_profile_picker_and_settings_save_semantics(browser, access_url):
                 });
                 window.terminalTest.handleSshOutput({
                     terminal_id: terminalId, message_type: 'ssh_connected',
-                    connection_type: 'ssh', terminal_label: 'SSH - Build Server'
+                    connection_type: 'ssh', terminal_label: 'SSH - Build Server',
+                    ssh_target: {host: 'build.example', port: '22', username: 'builder'}
                 });
             }"""
         )
@@ -4383,19 +4384,20 @@ def test_ssh_profile_picker_and_settings_save_semantics(browser, access_url):
         preloaded_editor = page.evaluate(
             """() => ({
                 name: document.getElementById('ssh-profile-name').value,
-                host: document.getElementById('ssh-profile-host').value,
+                summary: document.getElementById('ssh-profile-route-summary').textContent,
                 saveDisabled: document.getElementById('ssh-profile-save').disabled
             })"""
         )
         check(
-            preloaded_editor == {'name': 'recent@recent.example', 'host': 'recent.example', 'saveDisabled': True},
-            'SSH Settings did not preload Quick Connect as a create-only draft',
+            preloaded_editor == {'name': 'builder@build.example', 'summary': 'New direct session: builder@build.example:22', 'saveDisabled': True},
+            'SSH Settings did not preload the active SSH tab as a create-only draft',
         )
         page.click('#ssh-profile-list button[data-profile-id="profile-a"]')
-        page.fill('#ssh-profile-username', 'builder2')
-        page.click('#ssh-profile-save')
+        page.click('#ssh-profile-edit-route')
+        page.get_by_label('Target Username', exact=True).fill('builder2')
+        page.get_by_role('button', name='Save route', exact=True).click()
         page.wait_for_function(
-            """() => document.getElementById('ssh-profile-status').innerText === 'Saved Build Server.'""",
+            """() => document.getElementById('ssh-profile-status').innerText === 'Saved Build Server. Changes apply to the next connection.'""",
             timeout=5000,
         )
         updated = page.evaluate("() => window.terminalTest.getSshSessionState()")
@@ -4411,17 +4413,20 @@ def test_ssh_profile_picker_and_settings_save_semantics(browser, access_url):
         reordered = page.evaluate("() => window.terminalTest.getSshSessionState()")
         check([profile['id'] for profile in reordered['profiles']] == ['profile-b', 'profile-a'], 'profile move used list index as identity')
 
-        page.fill('#ssh-profile-name', 'Build Server Copy')
-        page.fill('#ssh-profile-port', '2222')
         page.click('#ssh-profile-create')
+        page.get_by_label('Entry name', exact=True).fill('Build Server Copy')
+        page.get_by_label('Target Host', exact=True).fill('build.example')
+        page.get_by_label('Target Username', exact=True).fill('builder')
+        page.get_by_label('Target Port', exact=True).fill('2222')
+        page.get_by_role('button', name='Save route', exact=True).click()
         page.wait_for_function(
             """async () => (await window.terminalTest.getSshSessionState()).profiles.length === 3""",
             timeout=5000,
         )
         created = page.evaluate("() => window.terminalTest.getSshSessionState()")
         check(created['profiles'][-1]['name'] == 'Build Server Copy', 'Create did not add a separate profile')
-        check(created['profiles'][-1]['host'] == 'build.example', 'Create did not copy the loaded profile draft')
-        check(created['profiles'][-1]['port'] == '2222', 'Create did not retain edits made after Load')
+        check(created['profiles'][-1]['host'] == 'build.example', 'New session did not save its edited target')
+        check(created['profiles'][-1]['port'] == '2222', 'New session did not retain its port')
         created_profile_id = created['profiles'][-1]['id']
         check(created_profile_id != 'profile-a', 'Create reused the loaded stable ID')
         original_profile = next(profile for profile in created['profiles'] if profile['id'] == 'profile-a')
@@ -4535,20 +4540,9 @@ def test_browser_ssh_key_lifecycle_and_settings_transfer(browser, access_url):
             "() => document.getElementById('ssh-profile-name').value === 'Primary'",
             timeout=5000,
         )
-        page.check('#ssh-profile-key-enabled')
-        page.wait_for_function(
-            "() => document.getElementById('ssh-profile-key-status').innerText.includes('SHA256:')",
-            timeout=10000,
-        )
-        check(
-            page.locator('#ssh-profile-key-public').input_value().startswith('ssh-ed25519 '),
-            'generated browser SSH key did not expose an OpenSSH public key',
-        )
-        page.click('#ssh-profile-save')
-        page.wait_for_function(
-            "() => document.getElementById('ssh-profile-status').innerText === 'Saved Primary.'",
-            timeout=5000,
-        )
+        # Keep coverage of credentials owned by legacy profiles. New node keys
+        # are exercised through the managed route editor in its dedicated suite.
+        page.evaluate("() => window.terminalTest.createBrowserSshKeyForProfileForTest('profile-primary')")
         metadata = page.evaluate(
             "() => window.terminalTest.getBrowserSshKeyMetadataForTest('profile-primary')"
         )
@@ -4713,9 +4707,11 @@ def test_browser_ssh_key_lifecycle_and_settings_transfer(browser, access_url):
         page.click('#quick-settings')
         page.click('.settings-nav-item[data-tab="ssh-sessions"]')
         page.click('#ssh-profile-list button[data-profile-id="profile-primary"]')
-        page.wait_for_function("() => document.getElementById('ssh-profile-key-enabled').checked", timeout=5000)
-        page.fill('#ssh-profile-name', 'Primary Copy')
         page.click('#ssh-profile-create')
+        page.get_by_label('Entry name', exact=True).fill('Primary Copy')
+        page.get_by_label('Target Host', exact=True).fill('copy.example')
+        page.get_by_label('Target Username', exact=True).fill('copy')
+        page.get_by_role('button', name='Save route', exact=True).click()
         page.wait_for_function(
             """async () => (await window.terminalTest.getSshSessionState()).profiles
                 .some(profile => profile.name === 'Primary Copy')""",
@@ -4726,7 +4722,6 @@ def test_browser_ssh_key_lifecycle_and_settings_transfer(browser, access_url):
         check(copied['keyId'] is None, 'Create copied a browser key from the loaded profile')
 
         page.click('#ssh-profile-list button[data-profile-id="profile-primary"]')
-        page.wait_for_function("() => document.getElementById('ssh-profile-key-enabled').checked", timeout=5000)
         page.once('dialog', lambda dialog: dialog.accept())
         page.click('#ssh-profile-delete')
         page.wait_for_function(
diff --git a/tests/browser_popout_smoke.py b/tests/browser_popout_smoke.py
new file mode 100644
index 0000000..880e4e5
--- /dev/null
+++ b/tests/browser_popout_smoke.py
@@ -0,0 +1,182 @@
+"""Verify the non-Document-PiP path with actual popup input and lifecycle."""
+import argparse
+from urllib.parse import urlsplit
+
+from playwright.sync_api import TimeoutError as PlaywrightTimeoutError
+
+import agent_browser_smoke as fixture
+
+
+def open_terminal(page):
+    active = page.evaluate('() => window.terminalTest.getTerminalTabsState().activeTerminalId')
+    page.evaluate('id => window.terminalTest.showContextMenuForTest(id)', active)
+    assert 'Pop out' in page.locator('#pip-option').inner_text()
+    with page.expect_popup() as opened:
+        page.click('#pip-option')
+    popup = opened.value
+    popup.locator('.pip-terminal-host').wait_for()
+    assert popup.url == 'about:blank'
+    assert popup.evaluate('window.opener === null')
+    return popup, active
+
+
+def send_title(popup, title):
+    popup.locator('.xterm-helper-textarea').focus()
+    popup.keyboard.type(f"printf '\\033]2;{title}\\007'\n")
+    popup.wait_for_function('title => document.querySelector(".pip-application-title").textContent === title', arg=title)
+
+
+def wait_released(page, terminal_id=None):
+    page.wait_for_function('() => !window.terminalTest.getFloatingWindowForTest()')
+    if terminal_id:
+        page.wait_for_function(
+            'id => !window.terminalTest.getTerminalTabsState().tabs.find(t => t.id === id).inPip',
+            arg=terminal_id,
+        )
+
+
+def select_terminal(page, terminal_id):
+    page.click(f'.terminal-tab[data-terminal-id="{terminal_id}"]')
+
+
+def navigate_and_wait_released(page, popup, terminal_id, destination=None, allow_close_quirk=False):
+    try:
+        with popup.expect_event('close', timeout=5000):
+            popup.evaluate(
+                'url => setTimeout(() => url ? location.assign(url) : location.reload(), 0)',
+                destination,
+            )
+    except PlaywrightTimeoutError:
+        if not allow_close_quirk:
+            raise
+        # Linux WPE may refuse script-close after navigation. Restoring and
+        # releasing the original terminal is still required; report the gap.
+        wait_released(page, terminal_id)
+        assert popup.locator('.pip-terminal-host').count() == 0
+        popup.close()
+        print('LIMITATION: navigated popup restored its terminal but required browser close.', flush=True)
+        return 1
+    wait_released(page, terminal_id)
+    return 0
+
+
+def test_popup_input_files_and_cleanup(browser, url, allow_close_quirk=False):
+    print('Popup smoke: opening the connected Core page.', flush=True)
+    context, page = fixture.new_page(browser, url)
+    errors = []
+    page.on('pageerror', lambda error: errors.append(str(error)))
+    navigation_close_gaps = 0
+    try:
+        page.evaluate("Object.defineProperty(window, 'documentPictureInPicture', {value: undefined, configurable: true})")
+        page.click('#new-tab-btn')
+        page.click('#connectBtn')
+        page.wait_for_function('() => window.terminalTest.getActiveAgentState()?.connected === true')
+        popup, active = open_terminal(page)
+        popup.on('pageerror', lambda error: errors.append(str(error)))
+        send_title(popup, 'POPUP_INPUT_OK')
+        print('Popup smoke: child input passed.', flush=True)
+        old_size = popup.locator('.pip-title-meta').inner_text()
+        popup.set_viewport_size({'width': 500, 'height': 300})
+        popup.wait_for_function('old => document.querySelector(".pip-title-meta").textContent !== old', arg=old_size)
+        # A trusted click occurs inside the child. It must not create another popup.
+        count = len(context.pages)
+        popup.locator('.pip-sftp-button').click()
+        popup.locator('.sftp-pip-title').wait_for()
+        assert len(context.pages) == count
+        assert popup.locator('.sftp-pip-title').inner_text() == 'StandTerm - Files'
+        print('Popup smoke: trusted Files transition passed.', flush=True)
+        page.wait_for_function('id => !window.terminalTest.getTerminalTabsState().tabs.find(t => t.id === id).inPip', arg=active)
+        popup.close()
+        wait_released(page, active)
+        select_terminal(page, active)
+        # Native close restores an interactive terminal to its parent document.
+        page.locator('.terminal-pane.active .xterm-helper-textarea').focus()
+        page.keyboard.type("printf '\\033]2;RESTORED_INPUT_OK\\007'\n")
+        page.wait_for_function('() => document.getElementById("terminal-title").textContent === "RESTORED_INPUT_OK"')
+        popup, _ = open_terminal(page)
+        navigation_close_gaps += navigate_and_wait_released(page, popup, active, allow_close_quirk=allow_close_quirk)
+        select_terminal(page, active)
+        popup, _ = open_terminal(page)
+        parsed = urlsplit(url)
+        navigation_close_gaps += navigate_and_wait_released(
+            page, popup, active, f'{parsed.scheme}://{parsed.netloc}/robots.txt', allow_close_quirk,
+        )
+        select_terminal(page, active)
+        popup, _ = open_terminal(page)
+        popup.close()
+        wait_released(page, active)
+        select_terminal(page, active)
+
+        # Blocked admission keeps the terminal visible, then a new click retries.
+        print('Popup smoke: close, reload and navigation restored terminal state.', flush=True)
+        page.evaluate("""() => {
+            window.__popupOriginalOpen = window.open;
+            window.__popupAlerts = [];
+            window.alert = value => window.__popupAlerts.push(value);
+            window.open = () => null;
+            window.terminalTest.showContextMenuForTest(window.terminalTest.getTerminalTabsState().activeTerminalId);
+        }""")
+        page.click('#pip-option')
+        page.wait_for_function('() => window.__popupAlerts.length === 1')
+        assert 'Allow pop-up windows' in page.evaluate('window.__popupAlerts[0]')
+        wait_released(page, active)
+        page.evaluate('() => { window.open = window.__popupOriginalOpen; }')
+        popup, _ = open_terminal(page)
+        send_title(popup, 'RETRY_INPUT_OK')
+        print('Popup smoke: blocked popup retry passed.', flush=True)
+        popup.close()
+        wait_released(page, active)
+        select_terminal(page, active)
+        assert len(context.pages) == 1, [(item.url, item.is_closed()) for item in context.pages]
+
+        # Reentrant handlers in the same trusted click must share one admission.
+        page.evaluate("""() => {
+            window.__popupOpenCount = 0;
+            window.open = (...args) => {
+                window.__popupOpenCount++;
+                return window.__popupOriginalOpen(...args);
+            };
+            document.getElementById('pip-option').addEventListener('click', () => {
+                document.getElementById('pip-option').click();
+                document.getElementById('sftp-status-btn').click();
+            }, {once: true});
+        }""")
+        popup, _ = open_terminal(page)
+        assert page.evaluate('window.__popupOpenCount') == 1
+        assert len(context.pages) == 2, [(item.url, item.is_closed()) for item in context.pages]
+        popup.close()
+        wait_released(page, active)
+        select_terminal(page, active)
+        page.evaluate('() => { window.open = window.__popupOriginalOpen; }')
+
+        popup, _ = open_terminal(page)
+        with popup.expect_event('close'):
+            page.reload(wait_until='domcontentloaded')
+        page.wait_for_function('() => !!window.terminalTest')
+        assert not errors, errors
+        return navigation_close_gaps
+    finally:
+        fixture.close_context(context)
+
+
+if __name__ == '__main__':
+    parser = argparse.ArgumentParser()
+    parser.add_argument('--browser', choices=['chromium', 'webkit'], default='chromium')
+    parser.add_argument('--executable')
+    parser.add_argument('--allow-navigation-close-quirk', action='store_true',
+                        help='Report a navigated Linux WPE popup requiring browser close instead of failing.')
+    args = parser.parse_args()
+    server, url = fixture.start_server()
+    try:
+        with fixture.load_playwright()[0]() as playwright:
+            options = {'headless': True}
+            if args.executable:
+                options['executable_path'] = args.executable
+            browser = getattr(playwright, args.browser).launch(**options)
+            try:
+                gaps = test_popup_input_files_and_cleanup(browser, url, args.allow_navigation_close_quirk)
+                print(f'{args.browser} popup input, Files and restore: PASS; navigation auto-close gaps: {gaps}')
+            finally:
+                browser.close()
+    finally:
+        fixture.stop_server(server)
diff --git a/tests/ssh_profile_context_browser_smoke.py b/tests/ssh_profile_context_browser_smoke.py
new file mode 100644
index 0000000..a5d694c
--- /dev/null
+++ b/tests/ssh_profile_context_browser_smoke.py
@@ -0,0 +1,218 @@
+"""Keep the SSH profile editor bound to its current connection context."""
+import agent_browser_smoke as fixture
+from ssh_routes_browser_smoke import show_ssh, open_card
+
+
+def set_target(page, host, username, terminal_id='main'):
+    page.evaluate("""({host, username, terminalId}) => {
+        document.getElementById('host').value = host;
+        document.getElementById('port').value = '2222';
+        document.getElementById('username').value = username;
+        window.terminalTest.applyTerminalListForTest({terminals: [{
+            terminal_id: terminalId, connection_type: 'ssh', connected: true,
+            terminal_label: 'A display label is not an endpoint',
+            ssh_target: {host, port: '2222', username}
+        }]});
+    }""", {'host': host, 'username': username, 'terminalId': terminal_id})
+
+
+def open_profiles(page):
+    page.click('#quick-settings')
+    page.click('.settings-nav-item[data-tab="ssh-sessions"]')
+
+
+def editor(page):
+    return page.evaluate("""() => ({
+        name: document.getElementById('ssh-profile-name').value,
+        summary: document.getElementById('ssh-profile-route-summary').textContent,
+        saveDisabled: document.getElementById('ssh-profile-save').disabled
+    })""")
+
+
+def test_new_connection_replaces_previous_editor_context(browser, url):
+    context, page = fixture.new_page(browser, url)
+    try:
+        page.evaluate('() => window.terminalTest.setSshSessionState({profiles: [], history: []})')
+        set_target(page, 'first.example', 'first')
+        open_profiles(page)
+        page.fill('#ssh-profile-name', 'First profile')
+        page.click('#ssh-profile-create')
+        page.get_by_role('button', name='Save route', exact=True).click()
+        page.locator('#ssh-route-editor').wait_for(state='detached')
+        page.wait_for_function("() => document.getElementById('ssh-profile-status').textContent === 'Saved First profile. Changes apply to the next connection.'")
+        first = page.evaluate('() => window.terminalTest.getSshSessionState()')['profiles'][0]
+        page.click('#settings-close')
+        set_target(page, 'second.example', 'second')
+        open_profiles(page)
+        assert editor(page) == {'name': 'second@second.example',
+                                'summary': 'New direct session: second@second.example:2222',
+                                'saveDisabled': True}, editor(page)
+        # Reopening the same context preserves an unfinished draft.
+        page.fill('#ssh-profile-name', 'Second draft')
+        page.click('#settings-close')
+        open_profiles(page)
+        assert editor(page)['name'] == 'Second draft'
+        page.click('#ssh-profile-create')
+        page.get_by_role('button', name='Save route', exact=True).click()
+        page.locator('#ssh-route-editor').wait_for(state='detached')
+        page.wait_for_function("() => document.getElementById('ssh-profile-status').textContent === 'Saved Second draft. Changes apply to the next connection.'")
+        state = page.evaluate('() => window.terminalTest.getSshSessionState()')
+        assert len(state['profiles']) == 2
+        assert next(item for item in state['profiles'] if item['id'] == first['id']) == first
+        page.click('#settings-close')
+        # Restore two tabs from structured server metadata while Quick Connect
+        # still contains the second target. Selecting the first must use its own.
+        page.evaluate("""() => window.terminalTest.applyTerminalListForTest({terminals: [
+            {terminal_id: 'main', connection_type: 'ssh', connected: true, terminal_label: 'Second',
+             ssh_target: {host: 'second.example', port: '2222', username: 'second'}},
+            {terminal_id: 'first-tab', connection_type: 'ssh', connected: true, terminal_label: 'Unrelated title',
+             ssh_target: {host: 'first.example', port: '2222', username: 'first'}}
+        ]})""")
+        page.click('.terminal-tab[data-terminal-id="first-tab"]')
+        open_profiles(page)
+        assert 'first@first.example:2222' in editor(page)['summary'], editor(page)
+        assert editor(page)['saveDisabled'] is True
+        # Explicit profile selection remains an edit until the context changes.
+        page.click(f'#ssh-profile-list [data-profile-id="{first["id"]}"]')
+        page.fill('#ssh-profile-name', 'Unfinished explicit edit')
+        page.click('#settings-close')
+        open_profiles(page)
+        assert editor(page)['name'] == 'Unfinished explicit edit'
+        assert editor(page)['saveDisabled'] is False
+    finally:
+        fixture.close_context(context)
+
+
+def saved_state(page):
+    return page.evaluate('() => window.terminalTest.getSshSessionState()')
+
+
+def managed_editor(page):
+    page.click('#ssh-profile-edit-route')
+    page.locator('#ssh-route-editor').wait_for()
+    assert page.get_by_role('checkbox', name='Save route', exact=True).count() == 0
+
+
+def test_route_management_preserves_full_path_and_failed_draft(browser, url):
+    context, page = fixture.new_page(browser, url)
+    try:
+        show_ssh(page)
+        page.evaluate("""async () => {
+            await window.terminalTest.setSshSessionState({profiles: [
+                {id: 'route', name: 'Full route', host: 'target.test', port: '22', username: 'target'}
+            ], history: []});
+            const state = await window.terminalTest.getSshSessionState();
+            const target = state.nodes[0];
+            state.nodes.push({...structuredClone(target), id: 'jump',
+                endpoint: {host: 'jump.test', port: '2222', username: 'jumper'}, nextNodeId: target.id});
+            state.profiles[0].startNodeId = 'jump';
+            await window.terminalTest.setSshSessionState(state);
+        }""")
+        open_profiles(page)
+        page.click('#ssh-profile-list [data-profile-id="route"]')
+        assert editor(page)['summary'] == 'Core host → jumper@jump.test:2222 → target@target.test:22'
+        original = saved_state(page)
+        page.fill('#ssh-profile-name', 'Renamed route')
+        page.click('#ssh-profile-save')
+        page.wait_for_function("() => document.getElementById('ssh-profile-status').textContent === 'Saved Renamed route.'")
+        assert saved_state(page)['nodes'] == original['nodes']
+        managed_editor(page)
+        open_card(page, 'Jump 1')
+        page.get_by_label('Jump 1 Host', exact=True).fill('edited.jump')
+        open_card(page, 'Target')
+        page.get_by_label('Target Host', exact=True).fill('edited.target')
+        page.get_by_label('Target Use key', exact=True).check()
+        page.wait_for_function("() => document.querySelector('[aria-label=\"Target Public key\"]').value.startsWith('ssh-ed25519 ')")
+        public_key = page.get_by_label('Target Public key', exact=True).input_value()
+        page.get_by_role('button', name='Save route', exact=True).click()
+        page.locator('#ssh-route-editor').wait_for(state='detached')
+        state = saved_state(page)
+        assert state['profiles'][0]['id'] == 'route'
+        assert state['profiles'][0]['host'] == 'edited.target'
+        assert 'jumper@edited.jump:2222' in editor(page)['summary']
+        managed_editor(page)
+        assert page.get_by_label('Jump 1 Host', exact=True).input_value() == 'edited.jump'
+        open_card(page, 'Target')
+        assert page.get_by_label('Target Use key', exact=True).is_checked()
+        assert page.get_by_label('Target Public key', exact=True).input_value() == public_key
+        page.get_by_label('Target Host', exact=True).fill('cancelled.target')
+        page.get_by_role('button', name='Cancel', exact=True).click()
+        assert saved_state(page) == state
+        managed_editor(page)
+        open_card(page, 'Jump 1')
+        page.get_by_label('Jump 1 Host', exact=True).fill('unsaved.jump')
+        page.get_by_label('Jump 1 Use key', exact=True).check()
+        page.wait_for_function("() => document.querySelector('[aria-label=\"Jump 1 Public key\"]').value.startsWith('ssh-ed25519 ')")
+        # Simulate another tab committing while this editor retains its older revision.
+        page.evaluate("""async () => {
+            const state = await window.terminalTest.getSshSessionState();
+            state.profiles[0].name = 'Other window';
+            await window.terminalTest.setSshSessionState(state);
+        }""")
+        concurrent = saved_state(page)
+        page.evaluate("""() => {
+            const save = StandTermSshRoutes.save;
+            StandTermSshRoutes.save = (...args) => {
+                StandTermSshRoutes.save = save;
+                window.failedKeyIds = args[2].map(change => change.record.keyId);
+                return save(...args);
+            };
+        }""")
+        page.get_by_role('button', name='Save route', exact=True).click()
+        page.wait_for_function("() => document.querySelector('#ssh-route-editor > [role=status]').textContent.includes('changed in another window')")
+        assert saved_state(page) == concurrent
+        key_ids = page.evaluate('() => window.failedKeyIds')
+        assert len(key_ids) == 1
+        assert not page.evaluate('id => window.terminalTest.browserSshKeyRecordExistsForTest(id)', key_ids[0])
+        assert page.get_by_label('Jump 1 Host', exact=True).input_value() == 'unsaved.jump'
+        assert page.get_by_role('button', name='Save route', exact=True).is_enabled()
+        page.get_by_role('button', name='Cancel', exact=True).click()
+    finally:
+        fixture.close_context(context)
+
+
+def test_connect_rejects_changed_form_during_storage_load(browser, url):
+    context, page = fixture.new_page(browser, url)
+    try:
+        show_ssh(page)
+        page.fill('#host', 'first.test')
+        page.fill('#username', 'first')
+        page.check('#ssh-save-session')
+        original = saved_state(page)
+        page.evaluate("""() => {
+            const load = StandTermSshRoutes.load;
+            StandTermSshRoutes.load = async (...args) => {
+                StandTermSshRoutes.load = load;
+                await new Promise(resolve => { window.releaseSshLoad = resolve; });
+                return load(...args);
+            };
+            window.pendingPreparation = window.terminalTest.prepareSshConnectionForTest(true)
+                .then(() => 'unexpected success', error => error.message);
+        }""")
+        page.wait_for_function('() => !!window.releaseSshLoad')
+        page.fill('#host', 'second.test')
+        page.uncheck('#ssh-save-session')
+        page.evaluate('() => window.releaseSshLoad()')
+        error = page.evaluate('() => window.pendingPreparation')
+        assert 'settings changed' in error, error
+        assert saved_state(page) == original
+    finally:
+        fixture.close_context(context)
+
+
+if __name__ == '__main__':
+    server, url = fixture.start_server()
+    try:
+        with fixture.load_playwright()[0]() as playwright:
+            browser = playwright.chromium.launch(headless=True)
+            try:
+                test_new_connection_replaces_previous_editor_context(browser, url)
+                print('SSH profile editor context: PASS', flush=True)
+                test_route_management_preserves_full_path_and_failed_draft(browser, url)
+                print('SSH route management: PASS', flush=True)
+                test_connect_rejects_changed_form_during_storage_load(browser, url)
+                print('SSH preparation context: PASS', flush=True)
+            finally:
+                browser.close()
+    finally:
+        fixture.stop_server(server)
diff --git a/tests/ssh_routes_browser_smoke.py b/tests/ssh_routes_browser_smoke.py
index 6fbdad9..385c0e5 100644
--- a/tests/ssh_routes_browser_smoke.py
+++ b/tests/ssh_routes_browser_smoke.py
@@ -272,7 +272,6 @@ def test_receiver_and_owner_renames_preserve_credentials(browser, url):
             await window.terminalTest.setSshSessionState(state);
         }""")
         page.click('#ssh-profile-list button[data-profile-id="owner"]')
-        page.wait_for_function("() => document.getElementById('ssh-profile-key-enabled').checked")
         page.fill('#ssh-profile-name', 'Owner renamed')
         page.click('#ssh-profile-save')
         page.wait_for_function("() => document.getElementById('ssh-profile-status').innerText === 'Saved Owner renamed.'")

From f6018892957f5e2e0e9af5095324d938f7f105e1 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Wed, 16 Sep 2026 07:10:14 +0800
Subject: [PATCH 07/43] Edit Direct SSH settings inline with shared node fields

## Why
A single-node SSH entry requires an extra editor layer even though its fields
fit within Settings. Direct and jump nodes need consistent key and host identity
controls without duplicating their persistence behavior.

## What changed
- Show Direct node fields inline and save name, endpoint and key together.
- Share node controls and revision-checked graph/key persistence with routes.
- Carry incomplete drafts and temporary keys into Add jump node while keeping
  the inline draft on cancellation and preserving other node references.
- Keep multi-node details in the second layer and retain inline edits on reorder.

## Testing
SSH context, shared-node preservation, key persistence, incomplete route
promotion, cancel and cross-window save conflicts pass in isolated Chromium.
Existing route, profile/key transfer and PiP regressions pass. Narrow-window
controls, JavaScript syntax, Python compilation and static-site checks pass.
---
 README.md                                  |  20 +-
 static/js/standterm-ssh-route-editor.js    | 120 ++++++-----
 templates/index.html                       | 219 ++++++++++++++++-----
 tests/agent_browser_smoke.py               |  14 +-
 tests/ssh_profile_context_browser_smoke.py | 172 +++++++++++++++-
 tests/ssh_routes_browser_smoke.py          |   2 +-
 6 files changed, 424 insertions(+), 123 deletions(-)

diff --git a/README.md b/README.md
index ff0e452..cf07272 100644
--- a/README.md
+++ b/README.md
@@ -323,13 +323,19 @@ STANDTERM_HOST=127.0.0.1 STANDTERM_PORT=5000 ./run.sh
 
 Quick Connect can load saved SSH profiles and the six most recent successful
 SSH targets. Use **Settings > SSH Sessions** to create, update, reorder, or
-delete profiles and to clear history. The first level shows names, ordering, and
-full route summaries. **Save name** only renames the selected entry. **Edit
-connection…** opens every node in a separate editor, including host identity and
-**Use key**; Direct uses the same editor with one node. Its **Save route** button
-saves all nodes and referenced keys immediately for the next connection. **New
-session…** starts from the current SSH tab's target, or Quick Connect when no SSH
-tab is connected. Switching tabs or connections clears the previous edit selection.
+delete profiles and to clear history. Direct entries expose their single node
+in the first level: host, port, username, **Use key**, public key copy and host
+identity. **Save** stores the name, node and referenced key together. **Add jump
+node…** carries unsaved fields and temporary keys into the full route editor;
+cancelling returns to the unchanged Direct draft. Shared nodes in other entries
+remain unchanged by default.
+
+Multi-node entries show names, ordering and full route summaries in the first
+level. **Save name** only renames the selected entry. **Edit connection…** opens
+all nodes in a separate editor; **Save route** stores all node and referenced
+key changes for the next connection. **New session** starts an inline draft from
+the current SSH tab's target, or Quick Connect when no SSH tab is connected.
+Switching tabs or connections clears the previous edit selection.
 Profiles and history stay in the current
 browser and never store passwords. In Direct connect, **Save session** saves the
 profile and its referenced browser key when **Connect** is pressed, before SSH
diff --git a/static/js/standterm-ssh-route-editor.js b/static/js/standterm-ssh-route-editor.js
index d83bfe0..c51bc5e 100644
--- a/static/js/standterm-ssh-route-editor.js
+++ b/static/js/standterm-ssh-route-editor.js
@@ -2,9 +2,56 @@
     'use strict';
     const routes = window.StandTermSshRoutes;
 
+    routes.nodeFields = function({ parent, role, node, profiles, savedKeys, newKeys, keyAllowed,
+        createKey, copyPublicKey, hostIdentity, editorId, onBusy, onChange }) {
+        const fields = document.createElement('div');
+        fields.className = 'ssh-route-fields';
+        parent.append(fields);
+        const input = (label, value, parent = fields) => {
+            const wrapper = document.createElement('label');
+            wrapper.textContent = label;
+            const field = document.createElement('input');
+            field.value = value;
+            field.setAttribute('aria-label', `${role} ${label}`);
+            wrapper.append(field);
+            parent.append(wrapper);
+            return field;
+        };
+        const host = input('Host', node.endpoint.host);
+        const port = input('Port', node.endpoint.port);
+        const username = input('Username', node.endpoint.username);
+        port.inputMode = 'numeric';
+        const auth = StandTermSshNodeAuth({ parent: fields, role, authentication: node.authentication,
+            endpoint: () => ({ host: host.value, port: port.value, username: username.value }),
+            profiles, savedKeys, newKeys, keyAllowed, createKey, copyPublicKey, onBusy, onChange
+        });
+        const identity = document.createElement('details');
+        identity.className = 'ssh-host-identity';
+        const identityTitle = document.createElement('summary');
+        identityTitle.textContent = 'Host identity';
+        identity.append(identityTitle);
+        parent.append(identity);
+        const alias = input('Host key alias (optional)', node.hostKeyAlias, identity);
+        const identityBody = document.createElement('div');
+        identity.append(identityBody);
+        const identityControl = hostIdentity && StandTermSshHostIdentity({
+            parent: identityBody, editorId, nodeId: node.id, request: hostIdentity.request,
+            read: () => ({ ...routes.endpoint({ host: host.value, port: port.value, username: username.value }),
+                host_key_alias: alias.value.trim(), terminal_id: hostIdentity.terminalId })
+        });
+        identity.ontoggle = () => { if (identity.open) identityControl?.inspect(); };
+        for (const field of [host, port, username, alias]) field.addEventListener('input', () => {
+            auth.update(); identityControl?.invalidate();
+        });
+        return { host, port, username, alias, auth, read: () => ({
+            endpoint: { host: host.value, port: port.value, username: username.value },
+            hostKeyAlias: alias.value.trim(), authentication: auth.read()
+        }) };
+    };
+
     routes.edit = function({ state, entryId, target, onDone, keys = [], temporaryKeys = [], saveRoute = false, keyAllowed = false,
-        createKey, copyPublicKey, hostIdentity, mode = 'prepare', entryName = '' }) {
-        const original = routes.clone(state);
+        createKey, copyPublicKey, hostIdentity, mode = 'prepare', entryName = '', baseState = state }) {
+        const original = routes.clone(baseState);
         const savedKeys = [...keys];
         const newKeys = new Map(temporaryKeys.map(record => [record.keyId, record]));
         const editorId = routes.id();
@@ -169,6 +216,17 @@
             return true;
         }
 
+        function addJumpNode() {
+            canChangeOrder();
+            flush();
+            const current = path();
+            current.splice(current.length - 1, 0, { id: routes.id(),
+                endpoint: { host: '', port: '22', username: target.username || '' },
+                hostKeyAlias: '', nextNodeId: null, authentication: { method: 'password' } });
+            replacePath(current, current.length - 2);
+            controls[current.length - 2].host.focus();
+        }
+
         function render() {
             controls = [];
             rows.replaceChildren();
@@ -180,16 +238,7 @@
             preview.textContent = labelPath(result.path);
             result.path.forEach((node, index) => {
                 if (index === result.path.length - 1) {
-                    const add = button('Add jump node', () => {
-                        canChangeOrder();
-                        flush();
-                        const current = path();
-                        current.splice(current.length - 1, 0, { id: routes.id(),
-                            endpoint: { host: '', port: '22', username: target.username || '' },
-                            hostKeyAlias: '', nextNodeId: null, authentication: { method: 'password' } });
-                        replacePath(current, current.length - 2);
-                        controls[current.length - 2].host.focus();
-                    }, rows);
+                    const add = button('Add jump node', addJumpNode, rows);
                     add.className = 'ssh-route-add';
                 }
                 const fieldset = document.createElement('fieldset');
@@ -277,47 +326,12 @@
                 body.id = `ssh-route-card-body-${index}`;
                 toggle.setAttribute('aria-controls', body.id);
                 fieldset.append(body);
-                const fields = document.createElement('div');
-                fields.className = 'ssh-route-fields';
-                body.append(fields);
-                const input = (label, value, parent = fields) => {
-                    const wrapper = document.createElement('label');
-                    wrapper.textContent = label;
-                    const field = document.createElement('input');
-                    field.value = value;
-                    field.setAttribute('aria-label', `${role} ${label}`);
-                    wrapper.append(field);
-                    parent.append(wrapper);
-                    return field;
-                };
-                const host = input('Host', node.endpoint.host);
-                const port = input('Port', node.endpoint.port);
-                const username = input('Username', node.endpoint.username);
-                port.inputMode = 'numeric';
-                const auth = StandTermSshNodeAuth({ parent: fields, role, authentication: node.authentication,
-                    endpoint: () => ({ host: host.value, port: port.value, username: username.value }),
-                    profiles: draft.profiles, savedKeys, newKeys, keyAllowed, createKey, copyPublicKey,
+                const nodeFields = routes.nodeFields({ parent: body, role, node, profiles: draft.profiles,
+                    savedKeys, newKeys, keyAllowed, createKey, copyPublicKey, hostIdentity, editorId,
                     onBusy: delta => { pendingGenerations += delta; updateSaveState(); },
                     onChange: () => { updateSummary(); updateSaveState(); }
                 });
-                const identity = document.createElement('details');
-                identity.className = 'ssh-host-identity';
-                const identityTitle = document.createElement('summary');
-                identityTitle.textContent = 'Host identity';
-                identity.append(identityTitle);
-                body.append(identity);
-                const alias = input('Host key alias (optional)', node.hostKeyAlias, identity);
-                const identityBody = document.createElement('div');
-                identity.append(identityBody);
-                const identityControl = hostIdentity && StandTermSshHostIdentity({
-                    parent: identityBody, editorId, nodeId: node.id, request: hostIdentity.request,
-                    read: () => ({ ...routes.endpoint({ host: host.value, port: port.value, username: username.value }),
-                        host_key_alias: alias.value.trim(), terminal_id: hostIdentity.terminalId })
-                });
-                identity.ontoggle = () => { if (identity.open) identityControl?.inspect(); };
-                for (const field of [host, port, username, alias]) field.addEventListener('input', () => {
-                    auth.update(); identityControl?.invalidate();
-                });
+                const { host, port, username, alias, auth } = nodeFields;
                 const advanced = document.createElement('details');
                 const advancedTitle = document.createElement('summary');
                 advancedTitle.textContent = 'Advanced node settings';
@@ -326,10 +340,7 @@
                 const affected = document.createElement('p');
                 affected.textContent = `Referenced by: ${routes.references(draft, node.id).map(item => item.name || 'This Entry').join(', ')}`;
                 advanced.append(affected);
-                controls.push({ card: fieldset, handle, host, advanced, body, toggle, read: () => ({
-                    endpoint: { host: host.value, port: port.value, username: username.value },
-                    hostKeyAlias: alias.value.trim(), authentication: auth.read()
-                }) });
+                controls.push({ card: fieldset, handle, host, advanced, body, toggle, read: nodeFields.read });
                 const otherEntries = document.createElement('select');
                 otherEntries.setAttribute('aria-label', `${role} Next route`);
                 otherEntries.add(new Option('Choose the next route...', ''));
@@ -464,5 +475,6 @@
         document.body.append(dialog);
         render();
         dialog.showModal();
+        return { addJump: addJumpNode };
     };
 })();
diff --git a/templates/index.html b/templates/index.html
index 648d6fe..0dcdd13 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -396,6 +396,10 @@
         .ssh-profile-editor { display: grid; align-content: start; gap: 9px; }
         .ssh-profile-editor label { display: grid; gap: 4px; color: #aaa; font-size: 11px; }
         .ssh-profile-editor input { width: 100%; box-sizing: border-box; padding: 7px 8px; background: #2c2c2e; border: 1px solid #555; border-radius: 4px; color: #fff; outline: none; }
+        #ssh-profile-node .ssh-route-fields { grid-template-columns: minmax(0, 1fr) 70px; }
+        #ssh-profile-node .ssh-route-fields > label:nth-child(3) { grid-column: 1 / -1; }
+        #ssh-profile-node .ssh-key-toggle { display: flex; }
+        #ssh-profile-node details { margin-top: 10px; }
         .ssh-profile-actions { display: flex; gap: 8px; flex-wrap: wrap; }
         .ssh-profile-actions button { flex: 1; min-width: 86px; padding: 7px 9px; border: none; border-radius: 4px; background: #3a3a3c; color: #fff; cursor: pointer; }
         .ssh-profile-actions button.primary { background: #0a84ff; }
@@ -405,8 +409,8 @@
         #ssh-route-editor::backdrop { background: rgba(0, 0, 0, 0.55); }
         #ssh-route-editor h3 { margin: 0 0 14px; color: #64a9ff; }
         #ssh-route-editor label { display: grid; gap: 5px; color: #aaa; font-size: 12px; }
-        #ssh-route-editor input, #ssh-route-editor select { width: 100%; min-width: 0; box-sizing: border-box; padding: 7px 8px; background: #2c2c2e; color: #fff; border: 1px solid #555; border-radius: 4px; font-size: 12px; }
-        #ssh-route-editor input:focus, #ssh-route-editor select:focus { outline: 1px solid #0a84ff; }
+        #ssh-route-editor input, #ssh-route-editor select, #ssh-profile-node input, #ssh-profile-node select { width: 100%; min-width: 0; box-sizing: border-box; padding: 7px 8px; background: #2c2c2e; color: #fff; border: 1px solid #555; border-radius: 4px; font-size: 12px; }
+        #ssh-route-editor input:focus, #ssh-route-editor select:focus, #ssh-profile-node input:focus, #ssh-profile-node select:focus { outline: 1px solid #0a84ff; }
         #ssh-route-editor fieldset { position: relative; margin: 18px 0 0; padding: 6px; border: 1px solid #555; border-radius: 6px; background: #2a2a2b; min-width: 0; }
         #ssh-route-editor fieldset::before { content: '↓'; position: absolute; top: -18px; left: 20px; color: #888; }
         #ssh-route-editor fieldset[data-role="Target"] { border-color: #64a9ff; }
@@ -415,8 +419,8 @@
         .ssh-route-accessible-label { position: absolute; width: 1px; height: 1px; padding: 0; overflow: hidden; clip-path: inset(50%); white-space: nowrap; }
         #ssh-route-editor p { overflow-wrap: anywhere; line-height: 1.5; }
         #ssh-route-editor details { margin-top: 12px; }
-        #ssh-route-editor summary { cursor: pointer; color: #aaa; margin-bottom: 10px; }
-        #ssh-route-editor details > label { margin: 10px 0; }
+        #ssh-route-editor summary, #ssh-profile-node summary { cursor: pointer; color: #aaa; margin-bottom: 10px; }
+        #ssh-route-editor details > label, #ssh-profile-node details > label { margin: 10px 0; }
         .ssh-route-source { margin-top: 18px; color: #ddd; font-weight: 600; }
         .ssh-route-preview { padding: 10px; background: #1e1e1e; border-radius: 4px; }
         .ssh-route-heading, .ssh-route-fields { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 10px 14px; }
@@ -425,9 +429,9 @@
         .ssh-route-buttons { display: flex; gap: 8px; flex-wrap: wrap; margin-top: 10px; }
         .ssh-route-card-header { display: flex; align-items: center; gap: 4px; }
         .ssh-route-card-body { padding: 10px 6px 4px; }
-        #ssh-route-editor button { padding: 7px 10px; border: 1px solid #555; border-radius: 4px; background: #3a3a3c; color: #fff; cursor: pointer; font-size: 12px; }
-        #ssh-route-editor button:hover:not(:disabled) { background: #48484a; }
-        #ssh-route-editor button:disabled { opacity: 0.4; cursor: default; }
+        #ssh-route-editor button, #ssh-profile-node button { padding: 7px 10px; border: 1px solid #555; border-radius: 4px; background: #3a3a3c; color: #fff; cursor: pointer; font-size: 12px; }
+        #ssh-route-editor button:hover:not(:disabled), #ssh-profile-node button:hover:not(:disabled) { background: #48484a; }
+        #ssh-route-editor button:disabled, #ssh-profile-node button:disabled { opacity: 0.4; cursor: default; }
         #ssh-route-editor .ssh-route-card-header > button { flex-shrink: 0; padding: 5px 8px; border-color: transparent; background: transparent; }
         #ssh-route-editor .ssh-route-drag { cursor: grab; font-size: 18px; }
         #ssh-route-editor .ssh-route-card-toggle { display: flex; align-items: center; gap: 10px; flex: 1; min-width: 0; text-align: left; }
@@ -443,10 +447,10 @@
         .ssh-node-key p { font-size: 12px; white-space: pre-wrap; overflow-wrap: anywhere; }
         .ssh-key-row { display: grid; grid-template-columns: auto minmax(0, 1fr) auto; align-items: center; gap: 8px; }
         .ssh-key-toggle { display: flex; align-items: center; gap: 5px; white-space: nowrap; font-size: 12px; }
-        #controls .ssh-key-toggle input, #ssh-route-editor .ssh-key-toggle input { width: auto; margin: 0; padding: 0; }
-        #controls .ssh-node-public-key, #ssh-route-editor .ssh-node-public-key { width: 100%; min-width: 0; margin: 0; box-sizing: border-box; font: 11px monospace; }
-        #controls .ssh-node-public-key.inactive, #ssh-route-editor .ssh-node-public-key.inactive { background: #292929; color: #888; }
-        #controls .ssh-key-copy, #ssh-route-editor .ssh-key-copy { width: auto; margin: 0; padding: 7px; background: #444; }
+        #controls .ssh-key-toggle input, #ssh-route-editor .ssh-key-toggle input, #ssh-profile-node .ssh-key-toggle input { width: auto; margin: 0; padding: 0; }
+        #controls .ssh-node-public-key, #ssh-route-editor .ssh-node-public-key, #ssh-profile-node .ssh-node-public-key { width: 100%; min-width: 0; margin: 0; box-sizing: border-box; font: 11px monospace; }
+        #controls .ssh-node-public-key.inactive, #ssh-route-editor .ssh-node-public-key.inactive, #ssh-profile-node .ssh-node-public-key.inactive { background: #292929; color: #888; }
+        #controls .ssh-key-copy, #ssh-route-editor .ssh-key-copy, #ssh-profile-node .ssh-key-copy { width: auto; margin: 0; padding: 7px; background: #444; }
         .ssh-key-copy:disabled { opacity: 0.4; cursor: default; }
         .ssh-key-status { margin: 7px 0 12px; color: #999; font-size: 11px; }
         #controls input[type="password"]:disabled { background: #252525; color: #777; border-color: #3b3b3b; }
@@ -1055,12 +1059,13 @@ <h3>Settings</h3>
                                 <div class="ssh-profile-editor">
                                     <label>Profile name<input type="text" id="ssh-profile-name" maxlength="64" autocomplete="off"></label>
                                     <div class="ssh-profile-route-summary" id="ssh-profile-route-summary"></div>
+                                    <div id="ssh-profile-node" hidden></div>
                                     <div class="ssh-profile-actions">
                                         <button type="button" id="ssh-profile-edit-route">Edit connection…</button>
                                     </div>
-                                    <div class="settings-status">Select an entry to rename or reorder it. Edit connection opens all nodes and their key settings.</div>
+                                    <div class="settings-status" id="ssh-profile-help"></div>
                                     <div class="ssh-profile-actions">
-                                        <button type="button" id="ssh-profile-create">New session…</button>
+                                        <button type="button" id="ssh-profile-create">New session</button>
                                         <button type="button" class="primary" id="ssh-profile-save">Save name</button>
                                         <button type="button" class="danger" id="ssh-profile-delete">Delete</button>
                                     </div>
@@ -2157,6 +2162,8 @@ <h3>Recover StandTerm session</h3>
             const sshProfileStatus = document.getElementById('ssh-profile-status');
             const sshProfileList = document.getElementById('ssh-profile-list');
             const sshProfileNameInput = document.getElementById('ssh-profile-name');
+            const sshProfileNode = document.getElementById('ssh-profile-node');
+            const sshProfileHelp = document.getElementById('ssh-profile-help');
             const sshProfileRouteSummary = document.getElementById('ssh-profile-route-summary');
             const sshProfileEditRouteBtn = document.getElementById('ssh-profile-edit-route');
             const sshProfileCreateBtn = document.getElementById('ssh-profile-create');
@@ -2323,6 +2330,8 @@ <h3>Recover StandTerm session</h3>
             let editingSshProfileId = null;
             let sshProfileEditorContext = null;
             let sshProfileEditorVersion = 0;
+            let sshProfileNodeDraft = null;
+            let sshProfileNodeLoading = false;
             let quickConnectSshKeyRecord = null;
             let quickConnectKeyLoadVersion = 0;
             const handledSshSignRequestIds = new Set();
@@ -5012,17 +5021,97 @@ <h3>Recover StandTerm session</h3>
                 const target = useCurrentValues ? getSshProfileEditorContext().target : null;
                 sshProfileNameInput.value = target?.host
                     ? normalizeSshProfileName(`${target.username}@${target.host}`) : '';
-                renderSshProfileManager();
+                loadSshProfileNode(target).catch(err => setSshProfileStatus(err.message, true));
             }
 
-            function loadSshProfileEditor(profileId) {
+            async function loadSshProfileEditor(profileId) {
                 const profile = findSshProfile(profileId);
                 if (!profile) return;
-                ++sshProfileEditorVersion;
+                const version = ++sshProfileEditorVersion;
                 editingSshProfileId = profile.id;
                 sshProfileNameInput.value = profile.name;
-                setSshProfileStatus(`Selected ${profile.name}. Save name only renames this entry.`);
+                await loadSshProfileNode();
+                if (isCurrentSshProfileEditor(version)) setSshProfileStatus(`Selected ${profile.name}.`);
+            }
+
+            async function loadSshProfileNode(target = null) {
+                const version = sshProfileEditorVersion;
+                const profileId = editingSshProfileId;
+                const terminalId = activeTerminalId;
+                sshProfileNodeDraft = null;
+                sshProfileNodeLoading = true;
+                sshProfileNode.replaceChildren();
                 renderSshProfileManager();
+                try {
+                    await sshSessionWriteQueue.catch(() => {});
+                    const snapshot = await SshRoutes.load(openSshSessionsDb, normalizeLegacySshSessionState, true);
+                    if (!isCurrentSshProfileEditor(version)) return;
+                    if (snapshot.state.revision !== sshSessionState.revision) {
+                        throw new Error('SSH settings changed in another window. Reload before editing.');
+                    }
+                    const baseState = SshRoutes.clone(snapshot.state);
+                    let entry = snapshot.state.profiles.find(item => item.id === profileId);
+                    if (!entry) {
+                        if (profileId) throw new Error('This SSH entry was removed. Reload before editing.');
+                        const node = { id: SshRoutes.id(), nextNodeId: null, hostKeyAlias: '',
+                            endpoint: target || { host: '', port: '22', username: '' }, authentication: { method: 'password' } };
+                        entry = { id: SshRoutes.id(), name: '', startNodeId: node.id,
+                            sortOrder: snapshot.state.profiles.length, keyId: null, keyTarget: null };
+                        snapshot.state.nodes.push(node);
+                        snapshot.state.profiles.push(entry);
+                    }
+                    const route = SshRoutes.resolve(snapshot.state, entry.startNodeId);
+                    if (route.error || route.path.length !== 1) return;
+                    const draft = { state: snapshot.state, baseState, isNew: !profileId, entryId: entry.id, node: route.path[0],
+                        savedKeys: snapshot.keys, newKeys: new Map(), pending: 0, saving: false, fields: null };
+                    sshProfileNodeDraft = draft;
+                    draft.fields = SshRoutes.nodeFields({ parent: sshProfileNode, role: 'Target', node: draft.node,
+                        profiles: draft.state.profiles, savedKeys: draft.savedKeys, newKeys: draft.newKeys,
+                        keyAllowed: isBrowserSshKeyAllowedByPolicy(), createKey: createTemporarySshKey,
+                        copyPublicKey: value => copyToClipboard(value), editorId: SshRoutes.id(),
+                        hostIdentity: { request: requestSshHostIdentity, terminalId },
+                        onBusy: delta => { draft.pending += delta; renderSshProfileManager(); },
+                        onChange: () => renderSshProfileManager()
+                    });
+                } catch (err) {
+                    if (isCurrentSshProfileEditor(version)) throw err;
+                } finally {
+                    if (isCurrentSshProfileEditor(version)) {
+                        sshProfileNodeLoading = false;
+                        renderSshProfileManager();
+                    }
+                }
+            }
+
+            function readSshProfileNodeDraft() {
+                const current = sshProfileNodeDraft;
+                if (!current || current.pending || current.saving) throw new Error('Wait for the SSH settings to finish loading or saving.');
+                const state = SshRoutes.clone(current.state);
+                const entry = state.profiles.find(item => item.id === current.entryId);
+                const node = { ...current.node, ...current.fields.read() };
+                // Copy this entry's node without changing references from other routes.
+                // Incomplete values remain a draft until the shared save validation.
+                if (current.isNew) Object.assign(state.nodes.find(item => item.id === current.node.id), node);
+                else if (JSON.stringify(node) !== JSON.stringify(current.node)) entry.startNodeId = SshRoutes.copyPath(state, [node]);
+                entry.name = sshProfileNameInput.value.trim();
+                return { state, entryId: entry.id, temporaryKeys: [...current.newKeys.values()] };
+            }
+
+            async function persistSshProfileRoute(draft, entryId, temporaryKeys, version) {
+                const used = new Set(draft.nodes.map(node => node.authentication.keyRef?.keyId));
+                const operation = sshSessionWriteQueue.catch(() => {}).then(() => SshRoutes.save(
+                    openSshSessionsDb, draft, temporaryKeys.filter(record => used.has(record.keyId)).map(record => ({ type: 'put', record }))
+                ));
+                sshSessionWriteQueue = operation;
+                sshSessionState = await operation;
+                renderSshSessionState();
+                if (!isCurrentSshProfileEditor(version)) return;
+                const loading = loadSshProfileEditor(entryId);
+                const loadedVersion = sshProfileEditorVersion;
+                await loading;
+                if (isCurrentSshProfileEditor(loadedVersion)) {
+                    setSshProfileStatus(`Saved ${findSshProfile(entryId).name}. Changes apply to the next connection.`);
+                }
             }
 
             function describeSshProfile(profile) {
@@ -5031,39 +5120,39 @@ <h3>Recover StandTerm session</h3>
                 return `Core host → ${endpoints.join(' → ')}${route.error ? ' · Route needs repair' : ''}`;
             }
 
-            async function editSshProfileRoute(createNew = false) {
-                if (syncSshProfileEditorContext()) return;
+            async function editSshProfileRoute() {
+                if (syncSshProfileEditorContext() || sshProfileNodeLoading) return;
                 const version = sshProfileEditorVersion;
-                const profileId = createNew ? null : editingSshProfileId;
-                if (!createNew && !profileId) return;
+                const profileId = editingSshProfileId;
+                const inline = sshProfileNodeDraft;
+                if (!inline && !profileId) return;
                 const target = getSshProfileEditorContext().target;
-                const entryName = createNew && editingSshProfileId ? '' : sshProfileNameInput.value;
                 const terminalId = activeTerminalId;
-                await sshSessionWriteQueue.catch(() => {});
-                const snapshot = await SshRoutes.load(openSshSessionsDb, normalizeLegacySshSessionState, true);
-                if (!isCurrentSshProfileEditor(version)) return;
-                if (snapshot.state.revision !== sshSessionState.revision) {
-                    throw new Error('SSH settings changed in another window. Reload before editing.');
+                let snapshot;
+                let prepared;
+                if (inline) {
+                    prepared = readSshProfileNodeDraft();
+                    snapshot = { state: prepared.state, keys: inline.savedKeys };
+                } else {
+                    await sshSessionWriteQueue.catch(() => {});
+                    snapshot = await SshRoutes.load(openSshSessionsDb, normalizeLegacySshSessionState, true);
+                    if (!isCurrentSshProfileEditor(version)) return;
+                    if (snapshot.state.revision !== sshSessionState.revision) {
+                        throw new Error('SSH settings changed in another window. Reload before editing.');
+                    }
+                    const profile = snapshot.state.profiles.find(item => item.id === profileId);
+                    if (!profile) throw new Error('This SSH entry was removed. Reload before editing.');
+                    profile.name = sshProfileNameInput.value.trim();
                 }
-                const profile = snapshot.state.profiles.find(item => item.id === profileId);
-                if (!createNew && !profile) throw new Error('This SSH entry was removed. Reload before editing.');
-                if (profile) profile.name = entryName;
-                SshRoutes.edit({ state: snapshot.state, entryId: profileId, target, entryName,
+                const editor = SshRoutes.edit({ state: snapshot.state, entryId: prepared?.entryId || profileId, target,
+                    baseState: inline?.baseState || snapshot.state,
+                    temporaryKeys: prepared?.temporaryKeys || [],
                     mode: 'manage', keys: snapshot.keys, keyAllowed: isBrowserSshKeyAllowedByPolicy(),
                     createKey: createTemporarySshKey, copyPublicKey: value => copyToClipboard(value),
                     hostIdentity: { request: requestSshHostIdentity, terminalId },
-                    onDone: async (draft, entryId, temporaryKeys) => {
-                        const operation = sshSessionWriteQueue.catch(() => {}).then(() => SshRoutes.save(
-                            openSshSessionsDb, draft, temporaryKeys.map(record => ({ type: 'put', record }))
-                        ));
-                        sshSessionWriteQueue = operation;
-                        sshSessionState = await operation;
-                        renderSshSessionState();
-                        if (!isCurrentSshProfileEditor(version)) return;
-                        loadSshProfileEditor(entryId);
-                        setSshProfileStatus(`Saved ${findSshProfile(entryId).name}. Changes apply to the next connection.`);
-                    }
+                    onDone: (draft, entryId, temporaryKeys) => persistSshProfileRoute(draft, entryId, temporaryKeys, version)
                 });
+                if (inline) editor.addJump();
             }
 
             function renderSshProfileManager() {
@@ -5086,7 +5175,8 @@ <h3>Recover StandTerm session</h3>
                         target.className = 'ssh-profile-list-target';
                         target.innerText = describeSshProfile(profile);
                         button.append(name, target);
-                        button.onclick = () => loadSshProfileEditor(profile.id);
+                        button.onclick = () => loadSshProfileEditor(profile.id)
+                            .catch(err => setSshProfileStatus(err.message, true));
                         sshProfileList.appendChild(button);
                     });
                 }
@@ -5096,8 +5186,18 @@ <h3>Recover StandTerm session</h3>
                 sshProfileRouteSummary.textContent = profile ? describeSshProfile(profile)
                     : target.host ? `New direct session: ${target.username}@${target.host}:${target.port}`
                     : 'Select a saved entry, or create a new session.';
-                sshProfileEditRouteBtn.disabled = selectedIndex < 0;
-                sshProfileSaveBtn.disabled = selectedIndex < 0;
+                const direct = !profile || SshRoutes.resolve(sshSessionState, profile.startNodeId).path.length === 1;
+                const busy = sshProfileNodeLoading || !!(sshProfileNodeDraft?.pending || sshProfileNodeDraft?.saving);
+                sshProfileNode.hidden = !direct;
+                sshProfileNode.inert = !!sshProfileNodeDraft?.saving;
+                sshProfileNameInput.disabled = !!sshProfileNodeDraft?.saving;
+                sshProfileEditRouteBtn.textContent = direct ? 'Add jump node…' : 'Edit connection…';
+                sshProfileEditRouteBtn.disabled = busy || (direct && !sshProfileNodeDraft);
+                sshProfileSaveBtn.textContent = direct ? 'Save' : 'Save name';
+                sshProfileSaveBtn.disabled = busy || (direct ? !sshProfileNodeDraft : selectedIndex < 0);
+                sshProfileHelp.textContent = direct
+                    ? 'Save stores the name, connection settings and selected key. Changes apply to the next connection.'
+                    : 'Save name only renames this entry. Edit connection opens all route nodes and their key settings.';
                 sshProfileDeleteBtn.disabled = selectedIndex < 0;
                 sshProfileUpBtn.disabled = selectedIndex <= 0;
                 sshProfileDownBtn.disabled = selectedIndex < 0 || selectedIndex >= sshSessionState.profiles.length - 1;
@@ -5209,6 +5309,24 @@ <h3>Recover StandTerm session</h3>
                 if (syncSshProfileEditorContext()) return;
                 const version = sshProfileEditorVersion;
                 const profileId = editingSshProfileId;
+                if (sshProfileNodeLoading) return;
+                const inline = sshProfileNodeDraft;
+                if (inline) {
+                    const prepared = readSshProfileNodeDraft();
+                    const entry = prepared.state.profiles.find(item => item.id === prepared.entryId);
+                    const node = SshRoutes.checkedPath(prepared.state, entry)[0];
+                    SshRoutes.publicNode(node);
+                    if (node.authentication.method === 'browser-key' && !node.authentication.keyRef) {
+                        throw new Error('Choose or create a browser key for this node.');
+                    }
+                    if (!entry.name) entry.name = normalizeSshProfileName(`${node.endpoint.username}@${node.endpoint.host}`);
+                    if (entry.name.length > SSH_PROFILE_NAME_MAX_LENGTH) throw new Error(`Profile name must be ${SSH_PROFILE_NAME_MAX_LENGTH} characters or fewer.`);
+                    inline.saving = true;
+                    renderSshProfileManager();
+                    try { await persistSshProfileRoute(prepared.state, entry.id, prepared.temporaryKeys, version); }
+                    finally { inline.saving = false; renderSshProfileManager(); }
+                    return;
+                }
                 if (!findSshProfile(profileId)) return;
                 const name = sshProfileNameInput.value.trim();
                 if (!name || name.length > SSH_PROFILE_NAME_MAX_LENGTH) {
@@ -5266,6 +5384,8 @@ <h3>Recover StandTerm session</h3>
 
             async function moveEditingSshProfile(offset) {
                 const profileId = editingSshProfileId;
+                const inline = sshProfileNodeDraft;
+                let reorderedRevision = null;
                 await updateSshSessionState(nextState => {
                     const currentIndex = nextState.profiles.findIndex(profile => profile.id === profileId);
                     const nextIndex = currentIndex + offset;
@@ -5275,7 +5395,13 @@ <h3>Recover StandTerm session</h3>
                     profiles.splice(nextIndex, 0, profile);
                     profiles.forEach((item, index) => { item.sortOrder = index; });
                     nextState.profiles = profiles;
+                    if (inline?.state.revision === nextState.revision) reorderedRevision = nextState.revision + 1;
                 });
+                // Adopt only this successful local order change, retaining inline fields.
+                if (inline && sshProfileNodeDraft === inline && sshSessionState.revision === reorderedRevision) {
+                    inline.state = SshRoutes.clone(sshSessionState);
+                    inline.baseState = SshRoutes.clone(sshSessionState);
+                }
                 setSshProfileStatus('Profile order updated.');
             }
 
@@ -8073,7 +8199,8 @@ <h3>Recover StandTerm session</h3>
                 savePrefs(prefs);
             };
             sshProfileCreateBtn.onclick = () => {
-                editSshProfileRoute(true).catch(err => setSshProfileStatus(err.message || 'Profile could not be created.', true));
+                clearSshProfileEditor(true);
+                setSshProfileStatus('New direct session. Save creates a new entry.');
             };
             sshProfileEditRouteBtn.onclick = () => {
                 editSshProfileRoute().catch(err => setSshProfileStatus(err.message || 'Profile could not be edited.', true));
diff --git a/tests/agent_browser_smoke.py b/tests/agent_browser_smoke.py
index 5e2d1b9..c3caf26 100644
--- a/tests/agent_browser_smoke.py
+++ b/tests/agent_browser_smoke.py
@@ -4381,6 +4381,7 @@ def test_ssh_profile_picker_and_settings_save_semantics(browser, access_url):
 
         page.click('#quick-settings')
         page.click('.settings-nav-item[data-tab="ssh-sessions"]')
+        page.wait_for_function("() => !document.getElementById('ssh-profile-save').disabled")
         preloaded_editor = page.evaluate(
             """() => ({
                 name: document.getElementById('ssh-profile-name').value,
@@ -4389,13 +4390,12 @@ def test_ssh_profile_picker_and_settings_save_semantics(browser, access_url):
             })"""
         )
         check(
-            preloaded_editor == {'name': 'builder@build.example', 'summary': 'New direct session: builder@build.example:22', 'saveDisabled': True},
+            preloaded_editor == {'name': 'builder@build.example', 'summary': 'New direct session: builder@build.example:22', 'saveDisabled': False},
             'SSH Settings did not preload the active SSH tab as a create-only draft',
         )
         page.click('#ssh-profile-list button[data-profile-id="profile-a"]')
-        page.click('#ssh-profile-edit-route')
         page.get_by_label('Target Username', exact=True).fill('builder2')
-        page.get_by_role('button', name='Save route', exact=True).click()
+        page.click('#ssh-profile-save')
         page.wait_for_function(
             """() => document.getElementById('ssh-profile-status').innerText === 'Saved Build Server. Changes apply to the next connection.'""",
             timeout=5000,
@@ -4414,11 +4414,11 @@ def test_ssh_profile_picker_and_settings_save_semantics(browser, access_url):
         check([profile['id'] for profile in reordered['profiles']] == ['profile-b', 'profile-a'], 'profile move used list index as identity')
 
         page.click('#ssh-profile-create')
-        page.get_by_label('Entry name', exact=True).fill('Build Server Copy')
+        page.fill('#ssh-profile-name', 'Build Server Copy')
         page.get_by_label('Target Host', exact=True).fill('build.example')
         page.get_by_label('Target Username', exact=True).fill('builder')
         page.get_by_label('Target Port', exact=True).fill('2222')
-        page.get_by_role('button', name='Save route', exact=True).click()
+        page.click('#ssh-profile-save')
         page.wait_for_function(
             """async () => (await window.terminalTest.getSshSessionState()).profiles.length === 3""",
             timeout=5000,
@@ -4708,10 +4708,10 @@ def test_browser_ssh_key_lifecycle_and_settings_transfer(browser, access_url):
         page.click('.settings-nav-item[data-tab="ssh-sessions"]')
         page.click('#ssh-profile-list button[data-profile-id="profile-primary"]')
         page.click('#ssh-profile-create')
-        page.get_by_label('Entry name', exact=True).fill('Primary Copy')
+        page.fill('#ssh-profile-name', 'Primary Copy')
         page.get_by_label('Target Host', exact=True).fill('copy.example')
         page.get_by_label('Target Username', exact=True).fill('copy')
-        page.get_by_role('button', name='Save route', exact=True).click()
+        page.click('#ssh-profile-save')
         page.wait_for_function(
             """async () => (await window.terminalTest.getSshSessionState()).profiles
                 .some(profile => profile.name === 'Primary Copy')""",
diff --git a/tests/ssh_profile_context_browser_smoke.py b/tests/ssh_profile_context_browser_smoke.py
index a5d694c..c4c26cf 100644
--- a/tests/ssh_profile_context_browser_smoke.py
+++ b/tests/ssh_profile_context_browser_smoke.py
@@ -19,6 +19,7 @@ def set_target(page, host, username, terminal_id='main'):
 def open_profiles(page):
     page.click('#quick-settings')
     page.click('.settings-nav-item[data-tab="ssh-sessions"]')
+    page.wait_for_function("() => !document.getElementById('ssh-profile-save').disabled")
 
 
 def editor(page):
@@ -36,9 +37,7 @@ def test_new_connection_replaces_previous_editor_context(browser, url):
         set_target(page, 'first.example', 'first')
         open_profiles(page)
         page.fill('#ssh-profile-name', 'First profile')
-        page.click('#ssh-profile-create')
-        page.get_by_role('button', name='Save route', exact=True).click()
-        page.locator('#ssh-route-editor').wait_for(state='detached')
+        page.click('#ssh-profile-save')
         page.wait_for_function("() => document.getElementById('ssh-profile-status').textContent === 'Saved First profile. Changes apply to the next connection.'")
         first = page.evaluate('() => window.terminalTest.getSshSessionState()')['profiles'][0]
         page.click('#settings-close')
@@ -46,15 +45,13 @@ def test_new_connection_replaces_previous_editor_context(browser, url):
         open_profiles(page)
         assert editor(page) == {'name': 'second@second.example',
                                 'summary': 'New direct session: second@second.example:2222',
-                                'saveDisabled': True}, editor(page)
+                                'saveDisabled': False}, editor(page)
         # Reopening the same context preserves an unfinished draft.
         page.fill('#ssh-profile-name', 'Second draft')
         page.click('#settings-close')
         open_profiles(page)
         assert editor(page)['name'] == 'Second draft'
-        page.click('#ssh-profile-create')
-        page.get_by_role('button', name='Save route', exact=True).click()
-        page.locator('#ssh-route-editor').wait_for(state='detached')
+        page.click('#ssh-profile-save')
         page.wait_for_function("() => document.getElementById('ssh-profile-status').textContent === 'Saved Second draft. Changes apply to the next connection.'")
         state = page.evaluate('() => window.terminalTest.getSshSessionState()')
         assert len(state['profiles']) == 2
@@ -71,7 +68,7 @@ def test_new_connection_replaces_previous_editor_context(browser, url):
         page.click('.terminal-tab[data-terminal-id="first-tab"]')
         open_profiles(page)
         assert 'first@first.example:2222' in editor(page)['summary'], editor(page)
-        assert editor(page)['saveDisabled'] is True
+        assert editor(page)['saveDisabled'] is False
         # Explicit profile selection remains an edit until the context changes.
         page.click(f'#ssh-profile-list [data-profile-id="{first["id"]}"]')
         page.fill('#ssh-profile-name', 'Unfinished explicit edit')
@@ -174,6 +171,8 @@ def test_route_management_preserves_full_path_and_failed_draft(browser, url):
 def test_connect_rejects_changed_form_during_storage_load(browser, url):
     context, page = fixture.new_page(browser, url)
     try:
+        page.click('#new-tab-btn')
+        page.evaluate('() => window.terminalTest.captureTerminalIoForTest()')
         show_ssh(page)
         page.fill('#host', 'first.test')
         page.fill('#username', 'first')
@@ -200,6 +199,157 @@ def test_connect_rejects_changed_form_during_storage_load(browser, url):
         fixture.close_context(context)
 
 
+def inline_fields(page):
+    return page.locator('#ssh-profile-node')
+
+
+def wait_saved(page):
+    page.wait_for_function("() => document.getElementById('ssh-profile-status').textContent.endsWith('Changes apply to the next connection.')")
+
+
+def test_inline_direct_save_preserves_shared_nodes_and_order(browser, url):
+    context, page = fixture.new_page(browser, url)
+    try:
+        show_ssh(page)
+        page.evaluate("""async () => {
+            await window.terminalTest.setSshSessionState({profiles: [
+                {id: 'direct', name: 'Direct', host: 'old.test', port: '22', username: 'u'}
+            ], history: []});
+            const state = await window.terminalTest.getSshSessionState();
+            const target = state.nodes[0];
+            state.nodes.push({...structuredClone(target), id: 'jump',
+                endpoint: {host: 'jump.test', port: '22', username: 'j'}, nextNodeId: target.id});
+            state.profiles.push({...state.profiles[0], id: 'shared', name: 'Shared route',
+                sortOrder: 1, startNodeId: 'jump'});
+            await window.terminalTest.setSshSessionState(state);
+        }""")
+        original = saved_state(page)
+        open_profiles(page)
+        page.click('#ssh-profile-list [data-profile-id="direct"]')
+        fields = inline_fields(page)
+        fields.get_by_label('Target Host', exact=True).fill('edited.test')
+        page.fill('#ssh-profile-name', 'Edited Direct')
+        fields.locator('summary').click()
+        fields.get_by_label('Target Host key alias (optional)', exact=True).fill('lab')
+        fields.get_by_label('Target Use key', exact=True).check()
+        page.wait_for_function("() => document.querySelector('#ssh-profile-node [aria-label=\"Target Public key\"]').value.startsWith('ssh-ed25519 ')")
+        public_key = fields.get_by_label('Target Public key', exact=True).input_value()
+        page.click('#ssh-profile-down')
+        page.wait_for_function("() => document.getElementById('ssh-profile-status').textContent === 'Profile order updated.'")
+        assert fields.get_by_label('Target Host', exact=True).input_value() == 'edited.test'
+        page.click('#ssh-profile-save')
+        wait_saved(page)
+        state = saved_state(page)
+        assert [item['id'] for item in state['profiles']] == ['shared', 'direct']
+        for old in original['nodes']:
+            assert next(node for node in state['nodes'] if node['id'] == old['id']) == old
+        path = page.evaluate("""async () => {
+            const state = await window.terminalTest.getSshSessionState();
+            return StandTermSshRoutes.checkedPath(state, state.profiles.find(p => p.id === 'direct'));
+        }""")
+        assert path[0]['endpoint']['host'] == 'edited.test' and path[0]['hostKeyAlias'] == 'lab'
+        assert path[0]['authentication']['keyRef']['kind'] == 'credential'
+        page.click('#settings-close')
+        page.reload(wait_until='domcontentloaded')
+        page.wait_for_function('() => !!window.terminalTest')
+        open_profiles(page)
+        page.click('#ssh-profile-list [data-profile-id="direct"]')
+        fields.get_by_label('Target Host', exact=True).wait_for()
+        assert fields.get_by_label('Target Use key', exact=True).is_checked()
+        assert fields.get_by_label('Target Public key', exact=True).input_value() == public_key
+    finally:
+        fixture.close_context(context)
+
+
+def test_inline_draft_promotes_to_route_without_saving_on_cancel(browser, url):
+    context, page = fixture.new_page(browser, url)
+    try:
+        show_ssh(page)
+        page.evaluate('() => window.terminalTest.setSshSessionState({profiles: [], history: []})')
+        open_profiles(page)
+        fields = inline_fields(page)
+        page.fill('#ssh-profile-name', 'New draft')
+        fields.get_by_label('Target Host', exact=True).fill('target.test')
+        fields.get_by_label('Target Username', exact=True).fill('user')
+        fields.get_by_label('Target Port', exact=True).fill('2222')
+        fields.get_by_label('Target Use key', exact=True).check()
+        page.wait_for_function("() => document.querySelector('#ssh-profile-node [aria-label=\"Target Public key\"]').value.startsWith('ssh-ed25519 ')")
+        public_key = fields.get_by_label('Target Public key', exact=True).input_value()
+        original = saved_state(page)
+        page.click('#ssh-profile-edit-route')
+        modal = page.locator('#ssh-route-editor')
+        assert modal.get_by_label('Entry name', exact=True).input_value() == 'New draft'
+        assert modal.get_by_label('Jump 1 Host', exact=True).input_value() == ''
+        open_card(page, 'Target')
+        assert modal.get_by_label('Target Port', exact=True).input_value() == '2222'
+        assert modal.get_by_label('Target Public key', exact=True).input_value() == public_key
+        modal.get_by_role('button', name='Cancel', exact=True).click()
+        assert saved_state(page) == original
+        assert fields.get_by_label('Target Public key', exact=True).input_value() == public_key
+        # Incomplete inline edits can be completed after opening the full editor.
+        fields.get_by_label('Target Host', exact=True).fill('')
+        page.click('#ssh-profile-edit-route')
+        modal.get_by_label('Jump 1 Host', exact=True).fill('jump.test')
+        modal.get_by_label('Jump 1 Username', exact=True).fill('jumper')
+        open_card(page, 'Target')
+        modal.get_by_label('Target Host', exact=True).fill('target.test')
+        assert modal.get_by_label('Target Public key', exact=True).input_value() == public_key
+        modal.get_by_role('button', name='Save route', exact=True).click()
+        modal.wait_for(state='detached')
+        wait_saved(page)
+        state = saved_state(page)
+        assert len(state['profiles']) == 1 and state['profiles'][0]['name'] == 'New draft'
+        assert len(state['nodes']) == 2, state
+        assert fields.is_hidden()
+        assert page.locator('#ssh-profile-save').inner_text() == 'Save name'
+        assert 'jump.test' in editor(page)['summary'] and 'target.test' in editor(page)['summary']
+    finally:
+        fixture.close_context(context)
+
+
+def test_inline_conflict_retains_fields_and_does_not_store_key(browser, url):
+    context, page = fixture.new_page(browser, url)
+    try:
+        show_ssh(page)
+        page.evaluate("() => window.terminalTest.setSshSessionState({profiles:[{id:'direct',name:'Direct',host:'host.test',port:'22',username:'u'}],history:[]})")
+        open_profiles(page)
+        page.click('#ssh-profile-list [data-profile-id="direct"]')
+        fields = inline_fields(page)
+        fields.get_by_label('Target Host', exact=True).fill('unsaved.test')
+        fields.get_by_label('Target Use key', exact=True).check()
+        page.wait_for_function("() => document.querySelector('#ssh-profile-node [aria-label=\"Target Public key\"]').value.startsWith('ssh-ed25519 ')")
+        other = context.new_page()
+        other.goto(fixture.debug_url(url), wait_until='domcontentloaded')
+        other.wait_for_function('() => !!window.terminalTest')
+        other.evaluate("""async () => {
+            const state = await window.terminalTest.getSshSessionState();
+            state.profiles[0].name = 'Other window';
+            await window.terminalTest.setSshSessionState(state);
+        }""")
+        concurrent = saved_state(other)
+        page.evaluate("""() => {
+            const save = StandTermSshRoutes.save;
+            StandTermSshRoutes.save = (...args) => {
+                StandTermSshRoutes.save = save;
+                window.failedKeyIds = args[2].map(change => change.record.keyId);
+                return save(...args);
+            };
+        }""")
+        page.click('#ssh-profile-save')
+        page.wait_for_function("() => document.getElementById('ssh-profile-status').textContent.includes('changed in another window')")
+        assert page.locator('#ssh-profile-save').is_enabled()
+        assert fields.get_by_label('Target Host', exact=True).input_value() == 'unsaved.test'
+        assert fields.get_by_label('Target Use key', exact=True).is_checked()
+        key_ids = page.evaluate('() => window.failedKeyIds')
+        assert len(key_ids) == 1
+        assert not page.evaluate('id => window.terminalTest.browserSshKeyRecordExistsForTest(id)', key_ids[0])
+        other.reload(wait_until='domcontentloaded')
+        other.wait_for_function('() => !!window.terminalTest')
+        assert saved_state(other) == concurrent
+    finally:
+        fixture.close_context(context)
+
+
 if __name__ == '__main__':
     server, url = fixture.start_server()
     try:
@@ -212,6 +362,12 @@ def test_connect_rejects_changed_form_during_storage_load(browser, url):
                 print('SSH route management: PASS', flush=True)
                 test_connect_rejects_changed_form_during_storage_load(browser, url)
                 print('SSH preparation context: PASS', flush=True)
+                test_inline_direct_save_preserves_shared_nodes_and_order(browser, url)
+                print('Inline Direct save and references: PASS', flush=True)
+                test_inline_draft_promotes_to_route_without_saving_on_cancel(browser, url)
+                print('Inline Direct route promotion: PASS', flush=True)
+                test_inline_conflict_retains_fields_and_does_not_store_key(browser, url)
+                print('Inline Direct save conflict: PASS', flush=True)
             finally:
                 browser.close()
     finally:
diff --git a/tests/ssh_routes_browser_smoke.py b/tests/ssh_routes_browser_smoke.py
index 385c0e5..491f591 100644
--- a/tests/ssh_routes_browser_smoke.py
+++ b/tests/ssh_routes_browser_smoke.py
@@ -257,7 +257,7 @@ def test_receiver_and_owner_renames_preserve_credentials(browser, url):
         page.click('#ssh-profile-list button[data-profile-id="receiver"]')
         page.fill('#ssh-profile-name', 'Receiver renamed')
         page.click('#ssh-profile-save')
-        page.wait_for_function("() => document.getElementById('ssh-profile-status').innerText === 'Saved Receiver renamed.'")
+        page.wait_for_function("() => document.getElementById('ssh-profile-status').innerText === 'Saved Receiver renamed. Changes apply to the next connection.'")
         after = page.evaluate('() => window.terminalTest.getSshSessionState()')
         assert before['nodes'] == after['nodes'], 'Renaming the receiver modified route nodes'
         page.evaluate("""async () => {

From ef672e7c8f9139f8d8df59ae93c731f1e0fb680a Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Wed, 16 Sep 2026 09:42:56 +0800
Subject: [PATCH 08/43] Preview terminal color schemes in Settings

---
 templates/index.html | 42 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)

diff --git a/templates/index.html b/templates/index.html
index 0dcdd13..03f1c57 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -368,6 +368,10 @@
         .settings-row:last-child { border-bottom: none; }
         .settings-row label { flex: 1; color: #ddd; cursor: pointer; }
         .settings-row input, .settings-row select { background: #2c2c2e; border: 1px solid #555; color: #fff; padding: 4px 8px; border-radius: 4px; font-size: 12px; outline: none; }
+        .settings-theme-preview { margin: 8px 0; padding: 12px; border: 1px solid #555; border-radius: 5px; font: 12px/1.6 Consolas, "Courier New", monospace; overflow-wrap: anywhere; }
+        .settings-theme-cursor { display: inline-block; width: 0.6em; height: 1.1em; vertical-align: text-bottom; }
+        .settings-theme-palette { display: grid; grid-template-columns: 42px repeat(8, minmax(0, 1fr)); gap: 4px; align-items: center; margin-top: 8px; font-size: 10px; }
+        .settings-theme-swatch { height: 14px; border: 1px solid currentColor; border-radius: 2px; }
         .settings-value { color: #f2f2f2; text-align: right; overflow-wrap: anywhere; max-width: 58%; }
         .settings-status { color: #aaa; font-size: 12px; line-height: 1.4; margin-bottom: 10px; overflow-wrap: anywhere; }
         .settings-list { display: grid; gap: 6px; margin: 8px 0 0; padding: 0; list-style: none; color: #ddd; }
@@ -1032,6 +1036,14 @@ <h3>Settings</h3>
                                     </optgroup>
                                 </select>
                             </div>
+                            <div class="settings-theme-preview" id="settings-theme-preview" role="group" aria-label="Color scheme preview">
+                                <div><span data-theme-color="green">user@host</span>:<span data-theme-color="blue">~</span>$ ls</div>
+                                <div>README.md&nbsp; <span data-theme-color="cyan">logs/</span>&nbsp; <span data-theme-color="magenta">config.json</span></div>
+                                <div><span data-theme-color="green">Ready</span>&nbsp; <span data-theme-color="yellow">Warning</span>&nbsp; <span data-theme-color="red">Error</span></div>
+                                <div>$ <span class="settings-theme-cursor" aria-label="Cursor"></span></div>
+                                <div class="settings-theme-palette"></div>
+                            </div>
+                            <div class="settings-status">Preview only. Save Changes applies this theme.</div>
                             <div class="settings-row"><label for="pref-fontFace">Font face</label><input type="text" id="pref-fontFace"></div>
                             <div class="settings-row"><label for="pref-powerlineSymbols" title="Use the bundled Powerline symbols font as a fallback for prompt glyphs such as the branch symbol.">Enable Powerline symbol fallback</label><input type="checkbox" id="pref-powerlineSymbols"></div>
                             <div class="settings-row"><label for="pref-fontSize">Font size</label><input type="number" id="pref-fontSize" min="8" max="32"></div>
@@ -11271,6 +11283,35 @@ <h3>Recover StandTerm session</h3>
             }
 
             const settingsModal = document.getElementById('settings-modal');
+            function renderColorSchemePreview() {
+                const theme = SCHEMES[document.getElementById('pref-colorScheme').value] || SCHEMES.vintage;
+                const preview = document.getElementById('settings-theme-preview');
+                preview.style.backgroundColor = theme.background;
+                preview.style.color = theme.foreground;
+                preview.style.fontFamily = getTerminalFontFace();
+                preview.querySelectorAll('[data-theme-color]').forEach(element => {
+                    element.style.color = theme[element.dataset.themeColor];
+                });
+                preview.querySelector('.settings-theme-cursor').style.backgroundColor = theme.cursor;
+                const palette = preview.querySelector('.settings-theme-palette');
+                palette.replaceChildren();
+                for (const bright of [false, true]) {
+                    const label = document.createElement('span');
+                    label.textContent = bright ? 'Bright' : 'Normal';
+                    palette.appendChild(label);
+                    for (const color of ['black', 'red', 'green', 'yellow', 'blue', 'magenta', 'cyan', 'white']) {
+                        const key = bright ? `bright${color[0].toUpperCase()}${color.slice(1)}` : color;
+                        const swatch = document.createElement('span');
+                        swatch.className = 'settings-theme-swatch';
+                        swatch.style.backgroundColor = theme[key];
+                        swatch.title = `${bright ? 'Bright ' : ''}${color}: ${theme[key]}`;
+                        swatch.setAttribute('role', 'img');
+                        swatch.setAttribute('aria-label', swatch.title);
+                        palette.appendChild(swatch);
+                    }
+                }
+            }
+            document.getElementById('pref-colorScheme').onchange = renderColorSchemePreview;
             const openSettings = () => {
                 document.getElementById('pref-useCustomMenu').checked = prefs.useCustomMenu;
                 document.getElementById('pref-copyOnSelect').checked = prefs.copyOnSelect;
@@ -11280,6 +11321,7 @@ <h3>Recover StandTerm session</h3>
                 document.getElementById('pref-cjkWideAmbiguous').checked = prefs.cjkWideAmbiguous;
                 document.getElementById('pref-urlClickAction').value = prefs.urlClickAction;
                 document.getElementById('pref-colorScheme').value = prefs.colorScheme;
+                renderColorSchemePreview();
                 document.getElementById('pref-fontFace').value = prefs.fontFace;
                 document.getElementById('pref-powerlineSymbols').checked = prefs.powerlineSymbols;
                 document.getElementById('pref-fontSize').value = prefs.fontSize;

From 8d84f878a6b8836353253bdad0dc294788911638 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Wed, 16 Sep 2026 11:45:21 +0800
Subject: [PATCH 09/43] Advertise terminal RGB capabilities without changing
 TERM

## Why
tmux cannot infer StandTerm RGB support from COLORTERM alone and quantizes
truecolor output when its client capabilities omit RGB.

## What changed
- Answer bounded XTVERSION and XTGETTCAP queries with truthful capabilities.
- Isolate automatic replies from human input and deduplicate live viewers.
- Add a private POSIX terminfo overlay while preserving explicit overrides.
- Document the explicit RGB fallback required by remote tmux 3.4.

## Testing
Cover protocol bounds, authorization, replay, multiple viewers and overrides.
Verify actual RGB cells through Chromium with local and SSH tmux 3.4 clients,
including existing sessions, plus the complete 168-test backend smoke suite.
---
 README.md                                    |  20 +++
 app.py                                       |  18 +++
 static/js/standterm-capabilities.js          |  74 +++++++++
 templates/index.html                         |  23 ++-
 terminal_backends/base.py                    |  27 +++-
 terminal_backends/local_shell.py             |   2 +
 terminal_backends/terminfo.py                |  59 ++++++++
 terminal_capabilities.py                     |  37 +++++
 tests/agent_backend_smoke.py                 |  30 ++++
 tests/terminal_capabilities_browser_smoke.py | 150 +++++++++++++++++++
 tests/terminal_capabilities_smoke.cjs        |  52 +++++++
 tests/terminal_capabilities_smoke.py         | 125 ++++++++++++++++
 tests/terminal_capabilities_ssh_smoke.py     | 112 ++++++++++++++
 13 files changed, 721 insertions(+), 8 deletions(-)
 create mode 100644 static/js/standterm-capabilities.js
 create mode 100644 terminal_backends/terminfo.py
 create mode 100644 terminal_capabilities.py
 create mode 100644 tests/terminal_capabilities_browser_smoke.py
 create mode 100644 tests/terminal_capabilities_smoke.cjs
 create mode 100644 tests/terminal_capabilities_smoke.py
 create mode 100644 tests/terminal_capabilities_ssh_smoke.py

diff --git a/README.md b/README.md
index cf07272..279a537 100644
--- a/README.md
+++ b/README.md
@@ -277,6 +277,26 @@ xterm.js 24-bit color support without requiring a less widely installed terminfo
 entry. SSH sessions continue to request the compatible `xterm-256color` PTY;
 remote environment-variable propagation remains controlled by the SSH server.
 
+On POSIX hosts with `infocmp` and `tic`, Local Shell adds RGB flags to a private
+copy of the effective `xterm-256color` terminfo entry. This lets ordinary `tmux`
+clients detect truecolor without changing your tmux configuration or installed
+terminfo database. Explicit `TERMINFO` / `TERMINFO_DIRS` overrides are preserved;
+missing tools or compilation errors retain the normal shell environment. The
+private entry remains in temporary storage for detached processes to use.
+Native Windows shells do not use this overlay.
+
+StandTerm also answers XTVERSION as `StandTerm(<core version>)` and XTGETTCAP
+queries for `TN` / `name`, `Co` / `colors` (256 indexed colors), `RGB` (8 bits
+per component), and `Tc`. These replies do not advertise unsupported clipboard,
+extended-keyboard, or margin capabilities.
+
+Remote tmux 3.4 does not discover RGB from these queries. On such hosts, use
+`tmux -T RGB` (or `tmux -T RGB attach` for an existing session). For tmux 3.2+
+you can instead opt into `set -as terminal-features ',xterm-256color:RGB'` in
+your own tmux configuration and reattach. That setting applies to every client
+using that TERM, including other terminal applications. StandTerm does not
+modify remote configuration or install remote terminfo automatically.
+
 Windows Local Shell uses pywinpty 3.0.5 to avoid the fixed per-read delay in
 the older 2.x backend. The launchers refresh dependencies when `requirements.txt`
 changes; an existing running server must be restarted to use the new dependency.
diff --git a/app.py b/app.py
index ece18c7..73a9148 100644
--- a/app.py
+++ b/app.py
@@ -25,6 +25,7 @@
 from agent_tunnel import AgentTunnel, tunnel_ingress
 from ssh_tunnels import UserTunnel, parse_tunnel_spec, USER_TUNNEL_MAX_ACTIVE, USER_TUNNEL_MAX_RECORDS
 from core_version import CORE_VERSION
+from terminal_capabilities import build_capability_response
 from flask import Flask, Response, render_template, request, abort, make_response, redirect, send_file, jsonify, stream_with_context
 from flask_socketio import SocketIO, ConnectionRefusedError
 from external_agent_dispatch import ExternalAgentCommandDispatcher
@@ -11372,6 +11373,23 @@ def on_ssh_login_response(data):
             return
         bridge.resolve_login_input(request.sid, data)
 
+@socketio.on('terminal_capability_query')
+def on_terminal_capability_query(data):
+    session_token = socket_session_tokens.get(request.sid)
+    terminal_id = validate_terminal_id_payload(data)
+    if not session_token or not terminal_id:
+        return
+    bridge = get_allowed_bridge(session_token, terminal_id, request.sid)
+    if not bridge or request.sid not in bridge.attached_sids:
+        return
+    response = build_capability_response(data.get('kind'), data.get('names'))
+    if response:
+        query_identity = (data.get('kind'), data.get('names') if data.get('kind') == 'terminfo' else None)
+        bridge.write_capability_response(data.get('capability_epoch'), data.get('output_seq'),
+                                         data.get('query_index'), response,
+                                         query_identity=query_identity)
+
+
 @socketio.on('ssh_input')
 def on_ssh_input(data):
     session_token = socket_session_tokens.get(request.sid)
diff --git a/static/js/standterm-capabilities.js b/static/js/standterm-capabilities.js
new file mode 100644
index 0000000..394d082
--- /dev/null
+++ b/static/js/standterm-capabilities.js
@@ -0,0 +1,74 @@
+(function (root, factory) {
+    const api = factory();
+    if (typeof module === 'object' && module.exports) module.exports = api;
+    else root.StandTermCapabilities = api;
+})(typeof globalThis !== 'undefined' ? globalThis : this, function () {
+    'use strict';
+
+    class CapabilityAddon {
+        constructor(sendQuery) {
+            this.sendQuery = sendQuery;
+            this.queue = [];
+            this.current = null;
+            this.disposed = false;
+        }
+
+        activate(term) {
+            this.term = term;
+            this.handlers = [
+                term.parser.registerCsiHandler({ prefix: '>', final: 'q' }, params => {
+                    if (params.length !== 1 || params[0] !== 0) return false;
+                    this.query('version');
+                    return true;
+                }),
+                term.parser.registerDcsHandler({ intermediates: '+', final: 'q' }, (names, params) => {
+                    if (params.length !== 1 || params[0] !== 0) return false;
+                    // The server validates names and constructs the reply; never send raw input.
+                    if (names.length <= 1024) this.query('terminfo', names);
+                    return true;
+                })
+            ];
+        }
+
+        query(kind, names) {
+            const item = this.current;
+            if (!item) return;
+            if (item.queryCount++ >= 32) return;
+            const signature = JSON.stringify([kind, names]);
+            const queryIndex = item.queries.get(signature) || 0;
+            item.queries.set(signature, queryIndex + 1);
+            const context = item.context;
+            if (this.disposed || !context || context.replay || !context.capability_epoch) return;
+            this.sendQuery({ kind, names, output_seq: context.output_seq,
+                capability_epoch: context.capability_epoch, query_index: queryIndex });
+        }
+
+        write(data, context, callback) {
+            if (this.disposed) return;
+            this.queue.push({ data, context, callback, queries: new Map(), queryCount: 0 });
+            this.drain();
+        }
+
+        drain() {
+            if (this.disposed || this.current || !this.queue.length) return;
+            const item = this.current = this.queue.shift();
+            const epoch = item.context?.capability_epoch;
+            const cancel = epoch && this.epoch && epoch !== this.epoch ? '\x18' : '';
+            if (epoch) this.epoch = epoch;
+            // Preserve source metadata until xterm has finished parsing this write.
+            this.term.write(cancel + item.data, () => {
+                this.current = null;
+                if (!this.disposed && item.callback) item.callback();
+                this.drain();
+            });
+        }
+
+        dispose() {
+            this.disposed = true;
+            this.queue.length = 0;
+            for (const handler of this.handlers || []) handler.dispose();
+        }
+    }
+
+    return CapabilityAddon;
+});
diff --git a/templates/index.html b/templates/index.html
index 03f1c57..37dd745 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -1501,6 +1501,7 @@ <h3>Recover StandTerm session</h3>
         </div>
     </div>
 
+    <script src="{{ url_for('static', filename='js/standterm-capabilities.js') }}"></script>
     <script src="{{ url_for('static', filename='js/standterm-ssh-routes.js') }}"></script>
     <script src="{{ url_for('static', filename='js/standterm-ssh-node-auth.js') }}"></script>
     <script src="{{ url_for('static', filename='js/standterm-ssh-route-editor.js') }}"></script>
@@ -6514,6 +6515,11 @@ <h3>Recover StandTerm session</h3>
                 };
                 enableWebglRenderer(state);
                 terminals.set(terminalId, state);
+                state.capabilityAddon = new window.StandTermCapabilities(query => {
+                    if (!isCurrentTerminalState(state) || !socket.connected || !state.connected) return;
+                    socket.emit('terminal_capability_query', { terminal_id: state.id, ...query });
+                });
+                term.loadAddon(state.capabilityAddon);
                 term.onTitleChange(value => {
                     if (!isCurrentTerminalState(state)) return;
                     const title = normalizeTerminalApplicationTitle(value);
@@ -6760,8 +6766,10 @@ <h3>Recover StandTerm session</h3>
                         captureTerminalIo = true;
                         socket.off('ssh_output', handleSshOutputPayload);
                         const state = getActiveTerminalState();
-                        await Promise.all([state?.term, state?.agentTerminalMirror].filter(Boolean)
-                            .map(term => new Promise(resolve => term.write('', resolve))));
+                        await Promise.all([
+                            state && new Promise(resolve => state.capabilityAddon.write('', null, resolve)),
+                            state?.agentTerminalMirror && new Promise(resolve => state.agentTerminalMirror.write('', resolve))
+                        ].filter(Boolean));
                     },
                     clearEmitted() {
                         emitted.length = 0;
@@ -6870,7 +6878,7 @@ <h3>Recover StandTerm session</h3>
                         if (state.agentTerminalMirror) state.agentTerminalMirror.options.fontSize = Number(fontSize);
                         return true;
                     },
-                    getActiveTerminalBufferCellsForTest(row, useMirror = false) {
+                    getActiveTerminalBufferCellsForTest(row, useMirror = false, includeColors = false) {
                         const state = getActiveTerminalState();
                         const term = state && useMirror ? state.agentTerminalMirror : (state && state.term);
                         const activeBuffer = term && term.buffer && term.buffer.active;
@@ -6881,7 +6889,8 @@ <h3>Recover StandTerm session</h3>
                         const cells = [];
                         for (let column = 0; column < term.cols; column += 1) {
                             const cell = line.getCell(column);
-                            cells.push(cell ? { chars: cell.getChars(), width: cell.getWidth() } : null);
+                            cells.push(cell ? { chars: cell.getChars(), width: cell.getWidth(),
+                                ...(includeColors ? { fg: cell.getFgColor(), fgRgb: !!cell.isFgRGB() } : {}) } : null);
                         }
                         return cloneForTest(cells);
                     },
@@ -8641,10 +8650,10 @@ <h3>Recover StandTerm session</h3>
                 hideActionPrompt();
                 resetConnectButton();
             };
-            function writeTerminalOutput(state, data, outputSeq) {
+            function writeTerminalOutput(state, data, outputSeq, context = null) {
                 if (typeof data !== 'string') return;
                 const scheduleAfterMirror = writeAgentTerminalMirror(state, data, outputSeq, () => scheduleAgentViewportSnapshot(state));
-                state.term.write(data, scheduleAfterMirror ? undefined : () => scheduleAgentViewportSnapshot(state));
+                state.capabilityAddon.write(data, context, scheduleAfterMirror ? undefined : () => scheduleAgentViewportSnapshot(state));
             }
             function handleSshOutputPayload(data) {
                 if (!data || typeof data !== 'object') return;
@@ -8809,7 +8818,7 @@ <h3>Recover StandTerm session</h3>
                             state.lastOutputSeq = data.output_seq;
                         }
                         if (typeof data.data === 'string') {
-                            writeTerminalOutput(state, data.data, data.output_seq);
+                            writeTerminalOutput(state, data.data, data.output_seq, data);
                         }
                         break;
                     default:
diff --git a/terminal_backends/base.py b/terminal_backends/base.py
index 3eb48e5..38753ae 100644
--- a/terminal_backends/base.py
+++ b/terminal_backends/base.py
@@ -1,10 +1,13 @@
 import re
+import secrets
 import threading
 import time
 from collections import deque
 from dataclasses import dataclass
 from typing import Any, Optional
 
+from terminal_capabilities import CAPABILITY_RESPONSE_WINDOW, MAX_CAPABILITY_QUERIES_PER_OUTPUT
+
 
 @dataclass(frozen=True)
 class BackendPolicyContext:
@@ -199,6 +202,8 @@ def __init__(self, owner_session, terminal_id, runtime=None):
         self.cols = 80
         self.rows = 24
         self.output_seq = 0
+        self.capability_epoch = secrets.token_urlsafe(12)
+        self.capability_responses = {}
         self.last_output_at = None
         self.replay_buffer = deque()
         self.replay_buffer_bytes = 0
@@ -262,6 +267,7 @@ def emit_output(self, payload):
                 self.output_seq += 1
                 self.last_output_at = time.time()
                 payload.setdefault('output_seq', self.output_seq)
+                payload['capability_epoch'] = self.capability_epoch
                 self._remember_terminal_payload(payload)
                 self.runtime.append_transcript(
                     self.owner_session,
@@ -297,7 +303,26 @@ def _remember_terminal_payload(self, payload):
 
     def replay_to(self, sid):
         for payload in list(self.replay_buffer):
-            self.runtime.emit_socket('ssh_output', payload, room=sid)
+            self.runtime.emit_socket('ssh_output', dict(payload, replay=True), room=sid)
+
+    def write_capability_response(self, epoch, output_seq, query_index, response, *, query_identity=None):
+        with self.input_lock:
+            earliest = max(1, self.output_seq - CAPABILITY_RESPONSE_WINDOW + 1)
+            if (epoch != self.capability_epoch or type(output_seq) is not int
+                    or not earliest <= output_seq <= self.output_seq
+                    or type(query_index) is not int
+                    or not 0 <= query_index < MAX_CAPABILITY_QUERIES_PER_OUTPUT
+                    or self.closing):
+                return
+            self.capability_responses = {seq: indices for seq, indices in self.capability_responses.items()
+                                         if seq >= earliest}
+            indices = self.capability_responses.setdefault(output_seq, set())
+            # Include the reply identity: a viewer may have joined after a split query's prefix.
+            key = (query_identity if query_identity is not None else response, query_index)
+            if key in indices or len(indices) >= MAX_CAPABILITY_QUERIES_PER_OUTPUT:
+                return
+            indices.add(key)
+            self.write(response)
 
     def read_loop(self):
         raise NotImplementedError
diff --git a/terminal_backends/local_shell.py b/terminal_backends/local_shell.py
index 503caa8..772066a 100644
--- a/terminal_backends/local_shell.py
+++ b/terminal_backends/local_shell.py
@@ -9,6 +9,7 @@
 from pathlib import Path
 
 from .base import BackendSettingSchema, BackendStartFieldSchema, TerminalBackendPlugin, TerminalBridge
+from .terminfo import add_local_rgb_terminfo
 from runtime_logging import log_message
 
 try:
@@ -701,6 +702,7 @@ def _build_process_environment(self):
         env['TERM'] = self._ssh_term
         env['COLORTERM'] = 'truecolor'
         env['TERM_PROGRAM'] = 'StandTerm'
+        add_local_rgb_terminfo(env)
         return env
 
     def _connect_windows(self, cols, rows):
diff --git a/terminal_backends/terminfo.py b/terminal_backends/terminfo.py
new file mode 100644
index 0000000..c5bce2f
--- /dev/null
+++ b/terminal_backends/terminfo.py
@@ -0,0 +1,59 @@
+"""A process-scoped RGB hint without changing TERM or installed terminfo."""
+
+import functools
+import os
+import re
+import shutil
+import subprocess
+import sys
+import tempfile
+from pathlib import Path
+
+
+TERMINFO_TOOL_TIMEOUT = 2
+
+
+@functools.lru_cache(maxsize=4)
+def _rgb_terminfo(term, search_path, home):
+    infocmp = shutil.which('infocmp', path=search_path)
+    tic = shutil.which('tic', path=search_path)
+    if not infocmp or not tic:
+        return None
+    environment = dict(os.environ, HOME=home, PATH=search_path)
+    environment.pop('TERMINFO', None)
+    environment.pop('TERMINFO_DIRS', None)
+    directory = None
+    try:
+        def run(command, **kwargs):
+            return subprocess.run(command, env=environment, text=True, capture_output=True,
+                                  check=True, timeout=TERMINFO_TOOL_TIMEOUT, **kwargs).stdout
+
+        source = run([infocmp, '-x', '-1', term])
+        if re.search(r'^\s+(?:RGB|Tc)[,=#]', source, re.MULTILINE):
+            return None
+        lines = source.splitlines(keepends=True)
+        header = next(index for index, line in enumerate(lines) if line and not line.startswith('#'))
+        lines.insert(header + 1, '\tRGB, Tc,\n')
+        # Keep this private directory after Core exits: detached children may still use it.
+        directory = tempfile.mkdtemp(prefix='standterm-terminfo-')
+        source_path = Path(directory) / 'source.ti'
+        source_path.write_text(''.join(lines), encoding='utf-8')
+        run([tic, '-x', '-o', directory, str(source_path)])
+        compiled = run([infocmp, '-A', directory, '-x', '-1', term])
+        if not re.search(r'^\s+RGB,', compiled, re.MULTILINE):
+            raise ValueError('Compiled terminfo does not advertise RGB.')
+        return directory
+    except (OSError, subprocess.SubprocessError, ValueError, StopIteration):
+        if directory:
+            shutil.rmtree(directory, ignore_errors=True)
+        return None
+
+
+def add_local_rgb_terminfo(environment):
+    if (sys.platform.startswith('win') or environment.get('TERM') != 'xterm-256color'
+            or 'TERMINFO' in environment or 'TERMINFO_DIRS' in environment):
+        return
+    directory = _rgb_terminfo(environment['TERM'], environment.get('PATH', os.defpath),
+                             environment.get('HOME', str(Path.home())))
+    if directory:
+        environment['TERMINFO'] = directory
diff --git a/terminal_capabilities.py b/terminal_capabilities.py
new file mode 100644
index 0000000..75e8489
--- /dev/null
+++ b/terminal_capabilities.py
@@ -0,0 +1,37 @@
+"""Bounded, read-only replies for the capabilities of the shipped terminal."""
+
+import re
+
+from core_version import CORE_VERSION
+
+
+CAPABILITY_RESPONSE_WINDOW = 256
+MAX_CAPABILITY_QUERIES_PER_OUTPUT = 32
+MAX_CAPABILITY_NAMES = 16
+MAX_CAPABILITY_REQUEST_LENGTH = 1024
+
+
+def build_capability_response(kind, names=None):
+    if kind == 'version':
+        return f'\x1bP>|StandTerm({CORE_VERSION})\x1b\\'
+    if kind != 'terminfo' or not isinstance(names, str):
+        return None
+    if not names or len(names) > MAX_CAPABILITY_REQUEST_LENGTH:
+        return None
+    encoded_names = names.split(';')
+    if len(encoded_names) > MAX_CAPABILITY_NAMES:
+        return None
+    capabilities = {'TN': 'xterm-256color', 'name': 'xterm-256color',
+                    'Co': '256', 'colors': '256', 'RGB': '8', 'Tc': None}
+    replies = []
+    for encoded_name in encoded_names:
+        if not re.fullmatch(r'(?:[0-9a-fA-F]{2}){1,64}', encoded_name):
+            return None
+        name = bytes.fromhex(encoded_name).decode('ascii', errors='replace')
+        if name not in capabilities:
+            replies.append('\x1bP0+r\x1b\\')
+            break
+        value = capabilities[name]
+        encoded_value = '' if value is None else '=' + value.encode('ascii').hex()
+        replies.append(f'\x1bP1+r{encoded_name}{encoded_value}\x1b\\')
+    return ''.join(replies)
diff --git a/tests/agent_backend_smoke.py b/tests/agent_backend_smoke.py
index c14dbb9..bfdc888 100644
--- a/tests/agent_backend_smoke.py
+++ b/tests/agent_backend_smoke.py
@@ -8212,6 +8212,35 @@ def test_terminal_bridge_tracks_shared_session_metadata():
     assert metadata['terminal_quiet_ms'] >= 0
 
 
+def test_capability_queries_are_authorized_and_not_human_input():
+    client = make_client()
+    session_token = current_session_token()
+    bridge = add_dummy_bridge(session_token)
+    sid = current_sid_for_session(session_token)
+    bridge.attach(sid)
+    bridge.emit_output({'message_type': 'terminal', 'data': '\x1b[>q'})
+    query = {'terminal_id': standterm.TERMINAL_ID_MAIN, 'kind': 'version',
+             'capability_epoch': bridge.capability_epoch, 'output_seq': 1, 'query_index': 0}
+    with patch.object(standterm, 'note_agent_human_input_for_terminal') as human_input:
+        client.emit('terminal_capability_query', query)
+        client.emit('terminal_capability_query', query)
+        human_input.assert_not_called()
+    assert len(bridge.writes) == 1
+    assert 'StandTerm(' in bridge.writes[0]
+    assert not standterm.agent_user_input_metadata_store.get_recent(session_token, standterm.TERMINAL_ID_MAIN)
+    client.emit('terminal_capability_query', dict(query, kind='input', names='whoami\n', query_index=1))
+    client.emit('terminal_capability_query', dict(query, capability_epoch='old-bridge', query_index=1))
+    with patch.object(standterm, 'is_terminal_bridge_allowed_for_sid', return_value=False):
+        client.emit('terminal_capability_query', dict(query, query_index=1))
+    bridge.detach(sid)
+    client.emit('terminal_capability_query', dict(query, query_index=1))
+    assert len(bridge.writes) == 1
+    client.emit('ssh_input', {'terminal_id': standterm.TERMINAL_ID_MAIN, 'data': 'real input'})
+    assert bridge.writes[-1] == 'real input'
+    assert len(standterm.agent_user_input_metadata_store.get_recent(session_token, standterm.TERMINAL_ID_MAIN)) == 1
+    client.disconnect()
+
+
 def test_ssh_input_records_agent_metadata_after_validation():
     client = make_client()
     session_token = current_session_token()
@@ -8683,6 +8712,7 @@ def main():
         test_terminal_bridge_tracks_shared_session_metadata,
         test_ssh_target_metadata_is_structured_and_access_scoped,
         test_ssh_input_records_agent_metadata_after_validation,
+        test_capability_queries_are_authorized_and_not_human_input,
         test_agent_input_metadata_bounds_and_sanitized_preview,
         test_privacy_state_blocks_agent_context_and_redacts_input_metadata,
         test_ssh_input_does_not_record_invalid_or_oversized_metadata,
diff --git a/tests/terminal_capabilities_browser_smoke.py b/tests/terminal_capabilities_browser_smoke.py
new file mode 100644
index 0000000..ca30c20
--- /dev/null
+++ b/tests/terminal_capabilities_browser_smoke.py
@@ -0,0 +1,150 @@
+"""Verify real tmux output through an isolated Core and the shipped browser terminal."""
+
+import os
+import json
+from pathlib import Path
+import shlex
+import shutil
+import subprocess
+import sys
+import tempfile
+import time
+import textwrap
+
+import agent_browser_smoke as fixture
+
+
+def send(page, text):
+    page.evaluate("text => window.terminalTest.emitSocket('ssh_input', {terminal_id: 'main', data: text})", text)
+
+
+def client_info(socket_path):
+    result = subprocess.run(['tmux', '-S', str(socket_path), 'list-clients', '-F',
+                             '#{client_termname}|#{client_termtype}|#{client_termfeatures}'],
+                            capture_output=True, text=True)
+    return result.stdout.strip()
+
+
+def run_case(page, directory, name, *, baseline=False, explicit=False, existing=False):
+    socket_path = directory / name
+    command = ['tmux', '-S', str(socket_path), '-f', '/dev/null']
+    if explicit:
+        command += ['-T', 'RGB']
+    if existing:
+        environment = dict(os.environ, TERM='xterm-256color')
+        environment.pop('TERMINFO', None)
+        environment.pop('TERMINFO_DIRS', None)
+        subprocess.run(command + ['new-session', '-d', '-s', 'probe', '/bin/sh'],
+                       env=environment, check=True)
+    command += ['attach-session', '-t', 'probe'] if existing else ['new-session', '-s', 'probe', '/bin/sh']
+    prefix = 'env -u TERMINFO -u TERMINFO_DIRS ' if baseline else ''
+    try:
+        send(page, prefix + shlex.join(command) + '\r')
+        deadline = time.monotonic() + 10
+        info = ''
+        while time.monotonic() < deadline:
+            info = client_info(socket_path)
+            if 'StandTerm(' in info:
+                break
+            page.wait_for_timeout(100)
+        fixture.check('StandTerm(' in info, f'{name}: missing real XTVERSION reply: {info}')
+        expect_rgb = not baseline or explicit
+        fixture.check(('RGB' in info.split('|')[-1].split(',')) == expect_rgb, f'{name}: {info}')
+        send(page, "printf '\\033[2J\\033[H\\033[38;2;12;34;56mRGB_PROBE\\033[0m\\n'\r")
+        page.wait_for_function("() => window.terminalTest.getActiveTerminalBufferCellsForTest(0)?.slice(0, 9).map(c => c.chars).join('') === 'RGB_PROBE'")
+        cell = page.evaluate('() => window.terminalTest.getActiveTerminalBufferCellsForTest(0, false, true)[0]')
+        fixture.check((cell['fgRgb'] and cell['fg'] == 0x0c2238) == expect_rgb,
+                      f'{name}: RGB preservation mismatch: {cell}')
+        print(f'{name}: {info}; rendered cell={cell}', flush=True)
+    finally:
+        subprocess.run(['tmux', '-S', str(socket_path), 'kill-server'], capture_output=True)
+        page.wait_for_timeout(250)
+
+
+def check_query_replay(context, page, directory):
+    script = directory / 'query_probe.py'
+    result = directory / 'query_result.json'
+    ready = directory / 'query_ready'
+    finish = directory / 'query_finish'
+    again = directory / 'query_again'
+    script.write_text(textwrap.dedent(r'''
+        import json, os, select, sys, termios, time, tty
+        from pathlib import Path
+        fd = os.open('/dev/tty', os.O_RDWR)
+        previous = termios.tcgetattr(fd)
+        replies = b''
+        repeated = False
+        try:
+            tty.setraw(fd)
+            os.write(fd, b'\x1b[>q\x1bP+q524742\x1b\\')
+            deadline = time.monotonic() + 12
+            while time.monotonic() < deadline:
+                if select.select([fd], [], [], 0.05)[0]:
+                    replies += os.read(fd, 4096)
+                if replies.count(b'\x1b\\') >= 2:
+                    Path(sys.argv[2]).touch()
+                if Path(sys.argv[4]).exists() and not repeated:
+                    os.write(fd, b'\x1b[>q\x1bP+q524742\x1b\\')
+                    repeated = True
+                if Path(sys.argv[3]).exists():
+                    break
+        finally:
+            termios.tcsetattr(fd, termios.TCSANOW, previous)
+            os.close(fd)
+            Path(sys.argv[1]).write_text(json.dumps(replies.decode('ascii')))
+    '''))
+    send(page, shlex.join([sys.executable, str(script), str(result), str(ready), str(finish), str(again)]) + '\r')
+    deadline = time.monotonic() + 10
+    while not ready.exists() and time.monotonic() < deadline:
+        page.wait_for_timeout(50)
+    fixture.check(ready.exists(), 'live terminal did not answer capability queries')
+    second = context.new_page()
+    try:
+        second.goto(page.url, wait_until='domcontentloaded')
+        second.wait_for_function('() => window.terminalTest?.getActiveAgentState()?.connected')
+        page.reload(wait_until='domcontentloaded')
+        page.wait_for_function('() => window.terminalTest?.getActiveAgentState()?.connected')
+        again.touch()
+        page.wait_for_timeout(500)
+        finish.touch()
+        deadline = time.monotonic() + 3
+        while not result.exists() and time.monotonic() < deadline:
+            page.wait_for_timeout(50)
+        replies = json.loads(result.read_text())
+        # Existing xterm DA/color replies use a separate path; count the new protocol replies only.
+        fixture.check(replies.count('\x1bP>|StandTerm(') == 2, 'version replies duplicated or missing')
+        fixture.check(replies.count('\x1bP1+r524742=38\x1b\\') == 2, 'RGB replies duplicated or missing')
+        print('Core capability path: two live query rounds answered once each; refresh/replay silent: ok', flush=True)
+    finally:
+        finish.touch()
+        second.close()
+
+
+def main():
+    if not shutil.which('tmux') or not shutil.which('tic'):
+        raise RuntimeError('This smoke requires tmux and ncurses tools.')
+    server = None
+    try:
+        server, url = fixture.start_server()
+        with tempfile.TemporaryDirectory(prefix='standterm-tmux-browser-') as directory:
+            with fixture.load_playwright()[0]() as playwright:
+                browser = playwright.chromium.launch(headless=True)
+                context, page = fixture.new_page(browser, url)
+                try:
+                    run_case(page, Path(directory), 'baseline', baseline=True)
+                    run_case(page, Path(directory), 'automatic')
+                    run_case(page, Path(directory), 'existing', existing=True)
+                    run_case(page, Path(directory), 'explicit', baseline=True, explicit=True)
+                    check_query_replay(context, page, Path(directory))
+                    fixture.test_terminal_payload_text_is_not_control(browser, url)
+                    fixture.test_unicode_provider_keeps_emoji_text_in_separate_cells(browser, url)
+                finally:
+                    context.close()
+                    browser.close()
+    finally:
+        if server:
+            fixture.stop_server(server)
+
+
+if __name__ == '__main__':
+    main()
diff --git a/tests/terminal_capabilities_smoke.cjs b/tests/terminal_capabilities_smoke.cjs
new file mode 100644
index 0000000..86ff0e3
--- /dev/null
+++ b/tests/terminal_capabilities_smoke.cjs
@@ -0,0 +1,52 @@
+'use strict';
+
+const assert = require('node:assert/strict');
+const { Terminal } = require('../static/js/xterm.js');
+const CapabilityAddon = require('../static/js/standterm-capabilities.js');
+
+async function run() {
+    const queries = [];
+    const input = [];
+    const term = new Terminal({ allowProposedApi: true });
+    const addon = new CapabilityAddon(query => queries.push(query));
+    term.loadAddon(addon);
+    term.onData(data => input.push(data));
+    const context = (seq, replay = false) => ({ output_seq: seq, replay, capability_epoch: 'bridge-1' });
+    const write = (data, ctx) => new Promise(resolve => addon.write(data, ctx, resolve));
+    try {
+        await Promise.all([
+            write('\x1b[>q\x1bP+q524742;436f\x1b\\', context(1)),
+            write('\x1b[>q', context(2, true)),
+            write('\x1bP+q52', context(3, true)),
+            write('4742\x1b\\\x1b[>0q', context(4))
+        ]);
+        assert.deepEqual(queries.map(q => [q.kind, q.output_seq, q.query_index]),
+            [['version', 1, 0], ['terminfo', 1, 0], ['terminfo', 4, 0], ['version', 4, 0]]);
+        assert.equal(queries[1].names, '524742;436f');
+        assert.deepEqual(input, [], 'automatic replies must not enter human input');
+        await write('\x1bP+q' + '41'.repeat(1025) + '\x1b\\', context(5));
+        assert.equal(queries.length, 4);
+        await write('\x1b[38;2;12;34;56mX\x1b[0m', context(6));
+        const cell = term.buffer.active.getLine(0).getCell(0);
+        assert.ok(cell.isFgRGB());
+        assert.equal(cell.getFgColor(), 0x0c2238);
+        await write('\x1b[?69$p', context(7));
+        assert.deepEqual(input, ['\x1b[?69;0$y'], 'unsupported margins must stay unsupported');
+        await write('\x1bP+q52', context(8));
+        await write('4742\x1b\\', { ...context(1), capability_epoch: 'bridge-2' });
+        assert.equal(queries.length, 4, 'a new bridge must not finish an old query');
+        // A late viewer without the DCS prefix must still identify the following version query identically.
+        const lateQueries = [];
+        const late = new Terminal({ allowProposedApi: true });
+        const lateAddon = new CapabilityAddon(query => lateQueries.push(query));
+        late.loadAddon(lateAddon);
+        await new Promise(resolve => lateAddon.write('4742\x1b\\\x1b[>0q', context(4), resolve));
+        assert.deepEqual(lateQueries[0], queries[3]);
+        late.dispose();
+        console.log('Shipped xterm: live, replay, fragmented queries, input isolation, RGB: ok');
+    } finally {
+        term.dispose();
+    }
+}
+
+run().catch(error => { console.error(error); process.exitCode = 1; });
diff --git a/tests/terminal_capabilities_smoke.py b/tests/terminal_capabilities_smoke.py
new file mode 100644
index 0000000..425c8a8
--- /dev/null
+++ b/tests/terminal_capabilities_smoke.py
@@ -0,0 +1,125 @@
+"""Run with Python; no application dependencies or live terminals are required."""
+
+import os
+from pathlib import Path
+import shutil
+import subprocess
+import sys
+import tempfile
+from types import SimpleNamespace
+import unittest
+from unittest.mock import patch
+
+sys.path.insert(0, str(Path(__file__).resolve().parents[1]))
+
+from terminal_capabilities import build_capability_response
+from terminal_backends.base import TerminalBridge
+from terminal_backends.terminfo import add_local_rgb_terminfo, _rgb_terminfo
+
+
+class RecordingBridge(TerminalBridge):
+    def write(self, data):
+        self.writes.append(data)
+
+
+class CapabilityTests(unittest.TestCase):
+    def test_truthful_bounded_responses(self):
+        self.assertIn('StandTerm(', build_capability_response('version'))
+        self.assertEqual(build_capability_response('terminfo', '524742;436f;5463'),
+                         '\x1bP1+r524742=38\x1b\\\x1bP1+r436f=323536\x1b\\\x1bP1+r5463\x1b\\')
+        self.assertEqual(build_capability_response('terminfo', '4d73;524742'), '\x1bP0+r\x1b\\')
+        for names in ('', 'g1', '123', 'ff', '1b5b324a', '00'):
+            result = build_capability_response('terminfo', names)
+            self.assertIn(result, (None, '\x1bP0+r\x1b\\'))
+        for names in (None, [], '41' * 1025, ';'.join(['524742'] * 17)):
+            self.assertIsNone(build_capability_response('terminfo', names))
+        self.assertIsNone(build_capability_response('input', 'rm -rf'))
+
+    def test_replay_multiple_viewers_and_stale_generation(self):
+        emitted = []
+        runtime = SimpleNamespace(max_replay_events=256, max_replay_bytes=65536,
+                                  append_transcript=lambda *args: None, update_headless_mirror=None,
+                                  emit_socket=lambda *args, **kwargs: emitted.append((args, kwargs)))
+        bridge = RecordingBridge('session', 'main', runtime=runtime)
+        bridge.writes = []
+        bridge.attach('first')
+        bridge.attach('second')
+        bridge.emit_output({'message_type': 'terminal', 'data': '\x1b[>q'})
+        epoch = bridge.capability_epoch
+        for _ in range(2):
+            bridge.write_capability_response(epoch, 1, 0, 'version')
+        bridge.write_capability_response(epoch, 1, 1, 'other-query')
+        self.assertEqual(bridge.writes, ['version', 'other-query'])
+        bridge.replay_to('second')
+        self.assertTrue(emitted[-1][0][1]['replay'])
+        self.assertNotIn('replay', bridge.replay_buffer[0])
+        for args in [('old', 1, 2), (epoch, 2, 0), (epoch, True, 0), (epoch, 1, 32)]:
+            bridge.write_capability_response(*args, 'invalid')
+        bridge.output_seq = 300
+        bridge.write_capability_response(epoch, 300, 0, 'fresh')
+        bridge.write_capability_response(epoch, 1, 0, 'expired')
+        self.assertEqual(bridge.writes, ['version', 'other-query', 'fresh'])
+        self.assertEqual(list(bridge.capability_responses), [300])
+        bridge.closing = True
+        bridge.write_capability_response(epoch, 300, 1, 'closed')
+        self.assertEqual(len(bridge.writes), 3)
+
+    @unittest.skipUnless(shutil.which('tic') and shutil.which('infocmp'), 'ncurses tools unavailable')
+    def test_effective_user_entry_is_preserved(self):
+        with tempfile.TemporaryDirectory(prefix='standterm-terminfo-custom-') as home:
+            env = dict(os.environ, HOME=home, TERM='xterm-256color')
+            env.pop('TERMINFO', None)
+            env.pop('TERMINFO_DIRS', None)
+            source = subprocess.check_output(['infocmp', '-x', '-1', 'xterm-256color'], env=env, text=True)
+            source += '\tStandTermTestFlag,\n'
+            path = Path(home) / 'custom.ti'
+            path.write_text(source)
+            subprocess.run(['tic', '-x', '-o', str(Path(home) / '.terminfo'), str(path)], check=True)
+            add_local_rgb_terminfo(env)
+            compiled = subprocess.check_output(['infocmp', '-x', '-1', 'xterm-256color'], env=env, text=True)
+            self.assertIn('StandTermTestFlag,', compiled)
+            self.assertIn('\tRGB,', compiled)
+            shutil.rmtree(env['TERMINFO'])
+            _rgb_terminfo.cache_clear()
+
+    def test_preserve_overrides_and_fall_back(self):
+        for extra in ({'TERMINFO': '/custom'}, {'TERMINFO_DIRS': ''}, {'TERM': 'vt100'}):
+            env = dict(TERM='xterm-256color', **{'PATH': os.defpath})
+            env.update(extra)
+            before = dict(env)
+            with patch('terminal_backends.terminfo._rgb_terminfo') as compile_entry:
+                add_local_rgb_terminfo(env)
+                compile_entry.assert_not_called()
+            self.assertEqual(env, before)
+        with patch('terminal_backends.terminfo.sys.platform', 'win32'):
+            env = {'TERM': 'xterm-256color'}
+            add_local_rgb_terminfo(env)
+            self.assertNotIn('TERMINFO', env)
+        _rgb_terminfo.cache_clear()
+        self.assertIsNone(_rgb_terminfo('xterm-256color', '/nonexistent', '/tmp'))
+        with patch('terminal_backends.terminfo.subprocess.run', side_effect=subprocess.TimeoutExpired('tic', 2)):
+            self.assertIsNone(_rgb_terminfo('xterm-256color', os.defpath, '/tmp'))
+        _rgb_terminfo.cache_clear()
+
+    @unittest.skipUnless(shutil.which('tic') and shutil.which('infocmp'), 'ncurses tools unavailable')
+    def test_compiled_overlay_preserves_base_and_system_fallback(self):
+        with tempfile.TemporaryDirectory(prefix='standterm-terminfo-test-') as home:
+            env = dict(os.environ, HOME=home, TERM='xterm-256color')
+            env.pop('TERMINFO', None)
+            env.pop('TERMINFO_DIRS', None)
+            before = subprocess.check_output(['infocmp', '-x', '-1', 'xterm-256color'], env=env, text=True)
+            add_local_rgb_terminfo(env)
+            directory = env.get('TERMINFO')
+            self.assertIsNotNone(directory)
+            after = subprocess.check_output(['infocmp', '-x', '-1', 'xterm-256color'], env=env, text=True)
+            lines = lambda text: {line.strip() for line in text.splitlines() if line.startswith('\t')}
+            self.assertEqual(lines(after) - lines(before), {'RGB,', 'Tc,'})
+            self.assertFalse(lines(before) - lines(after))
+            subprocess.run(['infocmp', 'vt100'], env=env, check=True, capture_output=True)
+            self.assertEqual(Path(directory).stat().st_mode & 0o777, 0o700)
+            shutil.rmtree(directory)
+            _rgb_terminfo.cache_clear()
+
+
+if __name__ == '__main__':
+    unittest.main()
diff --git a/tests/terminal_capabilities_ssh_smoke.py b/tests/terminal_capabilities_ssh_smoke.py
new file mode 100644
index 0000000..5fea0cf
--- /dev/null
+++ b/tests/terminal_capabilities_ssh_smoke.py
@@ -0,0 +1,112 @@
+"""Exercise real SSH PTYs and tmux with the shipped xterm in Chromium."""
+
+from pathlib import Path
+import queue
+import shlex
+import subprocess
+import threading
+import time
+from types import MethodType, SimpleNamespace
+
+import agent_browser_smoke as browser_fixture
+from ssh_jump_smoke import SSHJumpTests, server
+from terminal_backends.base import TerminalBridge
+from terminal_capabilities import build_capability_response
+
+
+def main():
+    fixture = SSHJumpTests()
+    fixture.setUp()
+    try:
+        host = fixture.stack.enter_context(server())
+        bridge = fixture.bridge([host])
+        bridge._ssh_term = 'xterm-256color'
+        outputs = queue.Queue()
+        bridge.runtime = SimpleNamespace(
+            emit_socket=lambda event, payload, **kwargs: outputs.put(payload),
+            append_transcript=lambda *args: None, update_headless_mirror=None,
+            unregister_bridge=lambda *args: None, sleep=time.sleep,
+            max_replay_events=256, max_replay_bytes=65536,
+        )
+        bridge.emit_output = MethodType(TerminalBridge.emit_output, bridge)
+        bridge.attach('test-sid')
+        route = fixture.route([host])
+        fixture.trust(route, [host])
+        success, error = fixture.connect(bridge, route)
+        assert success, error
+        reader = threading.Thread(target=bridge.read_loop, daemon=True)
+        reader.start()
+        with browser_fixture.load_playwright()[0]() as playwright:
+            browser = playwright.chromium.launch(headless=True)
+            page = browser.new_page()
+            page.add_script_tag(path=str(browser_fixture.ROOT / 'static/js/xterm.js'))
+            page.add_script_tag(path=str(browser_fixture.ROOT / 'static/js/standterm-capabilities.js'))
+
+            def query(payload):
+                reply = build_capability_response(payload['kind'], payload.get('names'))
+                if reply:
+                    bridge.write_capability_response(payload['capability_epoch'], payload['output_seq'],
+                                                     payload['query_index'], reply,
+                                                     query_identity=(payload['kind'], payload.get('names')))
+
+            page.expose_function('capabilityQuery', query)
+            page.expose_function('terminalReply', bridge.write)
+            page.evaluate("""() => {
+                window.term = new Terminal({ allowProposedApi: true, cols: 80, rows: 24 });
+                window.addon = new StandTermCapabilities(query => window.capabilityQuery(query));
+                term.loadAddon(addon);
+                term.onData(data => window.terminalReply(data));
+            }""")
+
+            def pump():
+                while not outputs.empty():
+                    payload = outputs.get_nowait()
+                    if payload.get('message_type') == 'terminal':
+                        page.evaluate('p => new Promise(resolve => addon.write(p.data, p, resolve))', payload)
+                page.wait_for_timeout(50)
+
+            for explicit in (False, True):
+                socket_path = fixture.directory / ('explicit.sock' if explicit else 'plain.sock')
+                command = ['tmux', '-S', str(socket_path), '-f', '/dev/null']
+                if explicit:
+                    command += ['-T', 'RGB']
+                command += ['new-session', '-s', 'probe', '/bin/sh']
+                try:
+                    bridge.write(shlex.join(command) + '\r')
+                    deadline = time.monotonic() + 10
+                    info = ''
+                    while time.monotonic() < deadline:
+                        pump()
+                        info = subprocess.run(['tmux', '-S', str(socket_path), 'list-clients', '-F',
+                                               '#{client_termname}|#{client_termtype}|#{client_termfeatures}'],
+                                              capture_output=True, text=True).stdout.strip()
+                        if 'StandTerm(' in info:
+                            break
+                    assert 'StandTerm(' in info, info
+                    assert ('RGB' in info.split('|')[-1].split(',')) == explicit, info
+                    bridge.write("printf '\\033[2J\\033[H\\033[38;2;12;34;56mRGB_PROBE\\033[0m\\n'\r")
+                    deadline = time.monotonic() + 5
+                    while time.monotonic() < deadline:
+                        pump()
+                        cell = page.evaluate("""() => {
+                            const c = term.buffer.active.getLine(0).getCell(0);
+                            return { text: c.getChars(), fg: c.getFgColor(), rgb: !!c.isFgRGB() };
+                        }""")
+                        if cell['text'] == 'R':
+                            break
+                    assert cell['text'] == 'R', cell
+                    assert (cell['rgb'] and cell['fg'] == 0x0c2238) == explicit, cell
+                    print(f'SSH {"explicit" if explicit else "plain"}: {info}; cell={cell}', flush=True)
+                finally:
+                    subprocess.run(['tmux', '-S', str(socket_path), 'kill-server'], capture_output=True)
+                    for _ in range(5):
+                        pump()
+            browser.close()
+        bridge.close()
+        reader.join(timeout=3)
+    finally:
+        fixture.doCleanups()
+
+
+if __name__ == '__main__':
+    main()

From 690fad25b4f53996a813396f0d5cbeef6b3b4d77 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Wed, 16 Sep 2026 23:28:04 +0800
Subject: [PATCH 10/43] Distinguish direct and routed SSH connection panes

---
 templates/index.html | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/templates/index.html b/templates/index.html
index 37dd745..186772c 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -489,9 +489,13 @@
         #controls input, #controls select { display: block; width: 100%; margin-bottom: 15px; padding: 10px; background: #333; border: 1px solid #555; color: white; border-radius: 4px; box-sizing: border-box; }
         #controls button { width: 100%; padding: 12px; background: #0a84ff; border: none; color: white; border-radius: 4px; cursor: pointer; font-weight: bold; }
         #controls button:hover { background: #007aff; }
-        .ssh-preparation-pane { border: 1px solid #444; border-radius: 5px; margin: 10px 0; }
-        #controls .ssh-preparation-heading { display: flex; align-items: center; gap: 8px; padding: 10px; background: #292929; text-align: left; }
-        #controls .ssh-preparation-heading[aria-expanded="true"] { background: #233146; }
+        #ssh-direct-pane { --ssh-pane-accent: #78b4ef; --ssh-pane-border: #3e5872; --ssh-pane-heading: #28384a; --ssh-pane-selected: #304b68; background: #222a33; }
+        #ssh-route-pane { --ssh-pane-accent: #c2a4e4; --ssh-pane-border: #615078; --ssh-pane-heading: #3a3047; --ssh-pane-selected: #503e63; background: #2b2633; }
+        .ssh-preparation-pane { border: 1px solid var(--ssh-pane-border); border-left: 3px solid var(--ssh-pane-accent); border-radius: 5px; margin: 10px 0; }
+        #controls .ssh-preparation-heading, #controls .ssh-preparation-heading:hover { display: flex; align-items: center; gap: 8px; padding: 10px; background: var(--ssh-pane-heading); text-align: left; }
+        #controls .ssh-preparation-heading[aria-expanded="true"], #controls .ssh-preparation-heading[aria-expanded="true"]:hover { background: var(--ssh-pane-selected); }
+        #controls .ssh-preparation-heading:focus-visible { outline: 2px solid var(--ssh-pane-accent); outline-offset: 2px; }
+        .ssh-pane-selection { color: var(--ssh-pane-accent); }
         .ssh-preparation-heading small { margin-left: auto; color: #aaa; font-weight: normal; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
         .ssh-preparation-body { padding: 12px; }
         .ssh-preparation-body[hidden] { display: none; }

From ed2bcdb8b2188e7101e6bbefedf55542f6360e13 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Thu, 17 Sep 2026 21:28:37 +0800
Subject: [PATCH 11/43] Add one-click Agent Mint action

---
 README.md                    |  13 +++--
 templates/index.html         | 105 +++++++++++++++++++++++++++++++++++
 tests/agent_backend_smoke.py |  14 +++++
 tests/agent_browser_smoke.py |  76 ++++++++++++++++++++++++-
 4 files changed, 201 insertions(+), 7 deletions(-)

diff --git a/README.md b/README.md
index 279a537..704709b 100644
--- a/README.md
+++ b/README.md
@@ -316,8 +316,12 @@ states the token status; tab labels include remaining idle seconds, for example
 does not mean an agent is currently executing.
 Revocation, invalidation, or disabling access removes the tint, and connection
 warnings take priority. Background tabs update without opening the Agent panel.
-The tab-row Mint and Mint 3× buttons sit beside Pause Agent when the Agent panel
-is hidden, and always target the active terminal.
+The **🤖 Agent Mint** action is the leftmost action in the right-side tab tools.
+It applies the permission selected in **Settings > General > Agent Access** to
+the active terminal, waits for Core to confirm it, and mints a standard token.
+The default is **Full + Mint**. The tab-row Mint and Mint 3× buttons remain
+beside Pause Agent when the Agent panel is hidden, and always target the active
+terminal; compact windows keep those actions in the Agent panel.
 
 This development build also enables an **experimental IME positioning PoC**:
 the composition overlay follows its starting input line during terminal redraws.
@@ -768,8 +772,9 @@ Typical local flow:
 
 1. Launch StandTerm and open the browser.
 2. Connect a terminal.
-3. Open the Agent panel for that terminal.
-4. Mint a standard or 3x-idle external-agent token from the browser Agent UI.
+3. Choose **🤖 Agent Mint** to apply the saved permission and mint a standard
+   token for that terminal in one action. The default is **Full + Mint**.
+4. For another permission or a 3x-idle token, use the browser Agent panel.
    When the Agent panel is hidden, the same actions are available in the status
    bar for the active terminal.
 5. On a local tab, open **Agent Info for Current Tab** in the toolbar. **Copy URL** provides the
diff --git a/templates/index.html b/templates/index.html
index 186772c..bbaa254 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -60,6 +60,8 @@
         #agent-toggle-btn.shifted { margin-left: 0; }
         .agent-status-mint { display: none; }
         .agent-status-mint.visible { display: inline-flex; align-items: center; justify-content: center; }
+        #agent-access-mint-btn { border-color: #2d756e; color: #8ce9df; }
+        #agent-access-mint-btn:not(:disabled):hover { border-color: #40e0d0; background: #173a37; color: #fff; }
         #new-tab-btn { width: 26px; padding: 0; font-size: 20px; }
         body.operator-observing #status-bar { background: #5a1010; border-top-color: #ff453a; color: #fff; }
         #terminal { position: absolute; top: 0; left: 0; right: 0; height: calc(100vh - var(--status-bar-height)); width: 100vw; background: #000; z-index: 1; display: none; }
@@ -926,6 +928,9 @@
             border-radius: 5px; cursor: pointer; font-weight: 700;
         }
         #session-recovery-message { min-height: 18px; margin-top: 10px; color: #ff9f0a; font-size: 12px; }
+        @media (max-width: 760px) {
+            .agent-status-mint.visible { display: none; }
+        }
         @media (max-width: 620px) {
             .settings-nav { width: 104px; }
             .settings-nav-item { padding: 9px 10px; }
@@ -1009,6 +1014,17 @@ <h3>Settings</h3>
                                 <select id="pref-urlClickAction"><option value="overlay">Overlay</option><option value="popup">Popup Window</option><option value="newtab">New Tab</option></select>
                             </div>
                         </fieldset>
+                        <fieldset class="settings-fieldset">
+                            <legend>Agent Access</legend>
+                            <div class="settings-row"><label for="pref-agentAccessMintMode">Agent Mint action</label>
+                                <select id="pref-agentAccessMintMode">
+                                    <option value="observe">Observer + Mint</option>
+                                    <option value="approval_pending">Approval + Mint</option>
+                                    <option value="direct_active">Full + Mint</option>
+                                </select>
+                            </div>
+                            <div class="settings-status">The tab-bar action applies this permission to the current tab, then mints a standard token.</div>
+                        </fieldset>
                         <fieldset class="settings-fieldset">
                             <legend>Import &amp; Export</legend>
                             <div class="settings-status" id="settings-transfer-status">Exports include browser preferences, SSH profiles, and SSH history. SSH keys are never included.</div>
@@ -1301,6 +1317,7 @@ <h3 id="browser-auth-help-title">Manual browser authorization</h3>
         <button id="agent-status-mint-btn" class="status-action agent-status-mint" title="Mint a standard external-agent token for the active terminal">Mint</button>
         <button id="agent-status-mint-3x-btn" class="status-action agent-status-mint" title="Mint a 3x idle-time external-agent token for the active terminal">Mint 3&times;</button>
         <div id="terminal-tools">
+            <button id="agent-access-mint-btn" class="status-action" type="button" title="Grant Full access and mint a standard token for the current tab">&#x1F916; Agent Mint</button>
             <button id="agent-connect-btn" class="status-action" type="button" title="Copy the agent prompt for the current tab's environment">Agent Info for Current Tab</button>
             <button id="agent-toggle-btn" class="status-action" type="button" title="Show Agent panel">Show Agent Panel</button>
             <button id="agent-tunnel-btn" class="status-action" type="button" title="Set up remote Agent access through this SSH connection" hidden>Agent Tunnel</button>
@@ -1542,6 +1559,11 @@ <h3>Recover StandTerm session</h3>
         const AGENT_MODE_APPROVAL_PENDING = 'approval_pending';
         const AGENT_MODE_DIRECT_ACTIVE = 'direct_active';
         const AGENT_MODE_PAUSED = 'paused';
+        const AGENT_ACCESS_MINT_MODE_OPTIONS = [
+            AGENT_MODE_OBSERVE,
+            AGENT_MODE_APPROVAL_PENDING,
+            AGENT_MODE_DIRECT_ACTIVE
+        ];
         const AGENT_OPEN_ACTION_STATUSES = new Set([
             'pending_approval',
             'direct_pending',
@@ -1602,6 +1624,7 @@ <h3>Recover StandTerm session</h3>
             colorScheme: 'vintage',
             cursorStyle: 'block',
             showTerminalTitleInStatusBar: true,
+            agentAccessMintMode: AGENT_MODE_DIRECT_ACTIVE,
             // Render East Asian Ambiguous characters (box drawing, symbols)
             // as wide cells. Keep this off by default; enable it only for
             // legacy BBS/screen setups that require wide ambiguous width.
@@ -1645,10 +1668,15 @@ <h3>Recover StandTerm session</h3>
             const text = String(value).trim();
             return CURSOR_STYLE_OPTIONS.includes(text) ? text : fallback;
         }
+        function normalizeAgentAccessMintMode(value, fallback = PREF_DEFAULTS.agentAccessMintMode) {
+            const text = String(value).trim();
+            return AGENT_ACCESS_MINT_MODE_OPTIONS.includes(text) ? text : fallback;
+        }
         let prefs = loadPrefs();
         prefs.fontSize = normalizeFontSize(prefs.fontSize);
         prefs.fontWeight = normalizeFontWeight(prefs.fontWeight);
         prefs.cursorStyle = normalizeCursorStyle(prefs.cursorStyle);
+        prefs.agentAccessMintMode = normalizeAgentAccessMintMode(prefs.agentAccessMintMode);
 
         const UNICODE11_WIDTH_PROVIDER_VERSION = '11';
         const CJK_WIDTH_PROVIDER_VERSION = 'ptt-cjk';
@@ -2234,6 +2262,7 @@ <h3>Recover StandTerm session</h3>
             const agentExternalToken3xBtn = document.getElementById('agent-external-token-3x-btn');
             const agentStatusMintBtn = document.getElementById('agent-status-mint-btn');
             const agentStatusMint3xBtn = document.getElementById('agent-status-mint-3x-btn');
+            const agentAccessMintBtn = document.getElementById('agent-access-mint-btn');
             const agentGatePrivacy = document.getElementById('agent-gate-privacy');
             const agentGateHuman = document.getElementById('agent-gate-human');
             const agentGatePause = document.getElementById('agent-gate-pause');
@@ -2366,6 +2395,7 @@ <h3>Recover StandTerm session</h3>
             let agentPanelPosition = null;
             let agentPanelDrag = null;
             let agentExternalTokenCountdownTimer = null;
+            const agentAccessMintPending = new Set();
             let pipTerminalState = null;
             let sftpPipState = null;
             let contextMenuTerminalId = null;
@@ -3624,6 +3654,20 @@ <h3>Recover StandTerm session</h3>
                 }
             }
 
+            function updateAgentAccessMintButton() {
+                const state = getActiveTerminalState();
+                const token = getCurrentAgentExternalToken(state);
+                const starting = !!(state && agentAccessMintPending.has(state.id));
+                const minting = !!(token && token.status === 'minting');
+                const available = canUseAgentPanel(state) && !starting && !minting;
+                agentAccessMintBtn.disabled = !available;
+                agentAccessMintBtn.innerText = starting ? 'Starting…' : (minting ? 'Minting…' : '🤖 Agent Mint');
+                const modeLabel = formatAgentModeLabel(prefs.agentAccessMintMode);
+                agentAccessMintBtn.title = state
+                    ? `Grant ${modeLabel} access and mint a standard token for ${getTerminalDisplayLabel(state)} (${state.id})`
+                    : `Grant ${modeLabel} access and mint a standard token for the current tab`;
+            }
+
             function applyAgentExternalTokenState(data) {
                 if (!data || typeof data.terminal_id !== 'string') return;
                 const state = terminals.get(data.terminal_id);
@@ -3756,6 +3800,7 @@ <h3>Recover StandTerm session</h3>
                 agentProviderRunBtn.disabled = agentMockInput.disabled;
                 updateAgentExternalUi(usable, mode, agent, state);
                 updateAgentStatusMintButtons();
+                updateAgentAccessMintButton();
                 updatePipStatus(pipTerminalState);
                 renderAgentGateState(state);
                 renderAgentStatusPanel(state);
@@ -5980,6 +6025,9 @@ <h3>Recover StandTerm session</h3>
                 if ('fontSize' in result) result.fontSize = normalizeFontSize(result.fontSize);
                 if ('fontWeight' in result) result.fontWeight = normalizeFontWeight(result.fontWeight);
                 if ('cursorStyle' in result) result.cursorStyle = normalizeCursorStyle(result.cursorStyle);
+                if ('agentAccessMintMode' in result) {
+                    result.agentAccessMintMode = normalizeAgentAccessMintMode(result.agentAccessMintMode);
+                }
                 return result;
             }
 
@@ -8323,6 +8371,32 @@ <h3>Recover StandTerm session</h3>
                 socket.emit(eventName, { terminal_id: state.id, mode });
             }
 
+            function waitForAgentMode(state, mode, previousModeVersion, timeoutMs = 5000) {
+                return new Promise((resolve, reject) => {
+                    const deadline = Date.now() + timeoutMs;
+                    const check = () => {
+                        if (!canUseAgentPanel(state)) {
+                            reject(new Error('Agent access is unavailable for this terminal.'));
+                            return;
+                        }
+                        if (
+                            state.agent.mode === mode
+                            && !state.agent.paused
+                            && state.agent.modeVersion !== previousModeVersion
+                        ) {
+                            resolve();
+                            return;
+                        }
+                        if (Date.now() >= deadline) {
+                            reject(new Error('Timed out while applying Agent access permission.'));
+                            return;
+                        }
+                        setTimeout(check, 25);
+                    };
+                    check();
+                });
+            }
+
             function pauseAgentForState(state) {
                 if (!socket || !socket.connected || !hasAgentPauseCapability(state)) return;
                 socket.emit('agent_pause', { terminal_id: state.id });
@@ -8473,6 +8547,32 @@ <h3>Recover StandTerm session</h3>
                 if (agentStatusMint3xBtn.disabled) return;
                 mintAgentExternalToken(getActiveTerminalState(), 3);
             };
+            agentAccessMintBtn.onclick = async () => {
+                const state = getActiveTerminalState();
+                if (!canUseAgentPanel(state) || agentAccessMintPending.has(state.id)) return;
+                const targetMode = normalizeAgentAccessMintMode(prefs.agentAccessMintMode);
+                agentAccessMintPending.add(state.id);
+                updateAgentAccessMintButton();
+                try {
+                    if (state.agent.mode !== targetMode || state.agent.paused) {
+                        const previousModeVersion = state.agent.modeVersion;
+                        setAgentMode(state, targetMode);
+                        await waitForAgentMode(state, targetMode, previousModeVersion);
+                    }
+                    await mintAgentExternalToken(state, 1);
+                } catch (error) {
+                    if (isCurrentTerminalState(state)) {
+                        setAgentExternalTokenState(state, {
+                            status: 'error',
+                            command: `error: ${error.message || error}`,
+                            errorCode: 'agent_access_mint_failed'
+                        });
+                    }
+                } finally {
+                    agentAccessMintPending.delete(state.id);
+                    updateAgentPanel();
+                }
+            };
             function getPendingAgentAction(state) {
                 return state && state.agent ? state.agent.pendingAction : null;
             }
@@ -11333,6 +11433,7 @@ <h3>Recover StandTerm session</h3>
                 document.getElementById('pref-showDetailedSshLabels').checked = prefs.showDetailedSshLabels;
                 document.getElementById('pref-cjkWideAmbiguous').checked = prefs.cjkWideAmbiguous;
                 document.getElementById('pref-urlClickAction').value = prefs.urlClickAction;
+                document.getElementById('pref-agentAccessMintMode').value = prefs.agentAccessMintMode;
                 document.getElementById('pref-colorScheme').value = prefs.colorScheme;
                 renderColorSchemePreview();
                 document.getElementById('pref-fontFace').value = prefs.fontFace;
@@ -11547,6 +11648,10 @@ <h3>Recover StandTerm session</h3>
                 prefs.showDetailedSshLabels = document.getElementById('pref-showDetailedSshLabels').checked;
                 prefs.cjkWideAmbiguous = document.getElementById('pref-cjkWideAmbiguous').checked;
                 prefs.urlClickAction = document.getElementById('pref-urlClickAction').value;
+                prefs.agentAccessMintMode = normalizeAgentAccessMintMode(
+                    document.getElementById('pref-agentAccessMintMode').value,
+                    prefs.agentAccessMintMode
+                );
                 prefs.colorScheme = document.getElementById('pref-colorScheme').value;
                 prefs.fontFace = document.getElementById('pref-fontFace').value;
                 prefs.powerlineSymbols = document.getElementById('pref-powerlineSymbols').checked;
diff --git a/tests/agent_backend_smoke.py b/tests/agent_backend_smoke.py
index bfdc888..f4ef123 100644
--- a/tests/agent_backend_smoke.py
+++ b/tests/agent_backend_smoke.py
@@ -1970,6 +1970,20 @@ def test_external_agent_observe_cannot_send():
     assert result['error_code'] == standterm.AGENT_ERROR_MODE_NOT_WRITABLE
     assert bridge.writes == []
 
+    started_at = time.monotonic()
+    captured_result = standterm.process_external_agent_command({
+        'op': 'send-wait',
+        'token': token,
+        'terminal_id': standterm.TERMINAL_ID_MAIN,
+        'kind': 'text',
+        'text': 'blocked\n',
+        'wait_ms': standterm.AGENT_EXTERNAL_TAIL_MAX_WAIT_MS,
+    })
+    assert captured_result['status'] == standterm.AGENT_STATUS_FAILED
+    assert captured_result['error_code'] == standterm.AGENT_ERROR_MODE_NOT_WRITABLE
+    assert time.monotonic() - started_at < 0.5
+    assert bridge.writes == []
+
     client.disconnect()
 
 
diff --git a/tests/agent_browser_smoke.py b/tests/agent_browser_smoke.py
index c3caf26..467f8ef 100644
--- a/tests/agent_browser_smoke.py
+++ b/tests/agent_browser_smoke.py
@@ -601,6 +601,71 @@ def test_toolbar_pause_targets_main_tab_not_panel_override(browser, access_url):
         close_context(context)
 
 
+def test_agent_mint_quick_action_applies_saved_permission(browser, access_url):
+    context, page = new_page(browser, access_url)
+    try:
+        placement = page.evaluate(
+            """() => ({
+                firstTool: document.querySelector('#terminal-tools > :first-child')?.id,
+                text: document.getElementById('agent-access-mint-btn').innerText,
+                disabled: document.getElementById('agent-access-mint-btn').disabled,
+                panelVisible: document.getElementById('agent-panel').classList.contains('visible')
+            })"""
+        )
+        check(placement == {
+            'firstTool': 'agent-access-mint-btn',
+            'text': '🤖 Agent Mint',
+            'disabled': False,
+            'panelVisible': False,
+        }, 'Agent Mint was not the ready leftmost right-side action')
+
+        page.click('#quick-settings')
+        check(page.locator('#pref-agentAccessMintMode').input_value() == 'direct_active',
+              'Agent Mint permission did not default to Full + Mint')
+        page.click('#settings-close')
+
+        clear_emitted(page)
+        page.click('#agent-access-mint-btn')
+        page.wait_for_function(
+            """() => {
+                const state = window.terminalTest.getActiveAgentState();
+                return state?.mode === 'direct_active' && state?.external_token?.status === 'active';
+            }""",
+            timeout=10000,
+        )
+        minted = active_agent_state(page)
+        check(minted['mode'] == 'direct_active', 'one-click Agent Mint did not apply Full permission')
+        check(minted['external_token']['idleTimeoutMultiplier'] == 1,
+              'one-click Agent Mint did not mint the standard token lifetime')
+        check(page.locator('#agent-access-mint-btn').inner_text() == '🤖 Agent Mint',
+              'Agent Mint action did not return to its ready label')
+        mode_events = [
+            entry['args'][0] for entry in get_emitted(page, 'agent_mode_set')
+            if entry['args'] and entry['args'][0].get('terminal_id') == TERMINAL_ID
+        ]
+        check(mode_events == [{'terminal_id': TERMINAL_ID, 'mode': 'direct_active'}],
+              'Agent Mint did not make one structured Full permission request')
+
+        emit_socket(page, 'agent_mode_set', {'terminal_id': TERMINAL_ID, 'mode': 'disabled'})
+        wait_for_agent(page, "state.mode === 'disabled'")
+        page.click('#quick-settings')
+        page.select_option('#pref-agentAccessMintMode', 'approval_pending')
+        page.click('#settings-save')
+        clear_emitted(page)
+        page.click('#agent-access-mint-btn')
+        page.wait_for_function(
+            """() => {
+                const state = window.terminalTest.getActiveAgentState();
+                return state?.mode === 'approval_pending' && state?.external_token?.status === 'active';
+            }""",
+            timeout=10000,
+        )
+        check('Grant Approval access' in page.locator('#agent-access-mint-btn').get_attribute('title'),
+              'Agent Mint title did not reflect the saved permission')
+    finally:
+        close_context(context)
+
+
 def test_agent_panel_can_be_dragged(browser, access_url):
     context, page = new_page(browser, access_url)
     try:
@@ -2033,12 +2098,16 @@ def token_event(status, remaining_ms):
         page.evaluate('id => window.terminalTest.switchTerminalForTest(id)', TERMINAL_ID)
         set_agent_mode(page, 'direct', 'direct_active')
         page.set_viewport_size({'width': 640, 'height': 600})
-        for selector in ['#new-tab-btn', '#agent-pause-btn', '#agent-status-mint-btn',
-                         '#agent-status-mint-3x-btn', '#agent-toggle-btn', '#quick-settings']:
+        for selector in ['#new-tab-btn', '#agent-pause-btn', '#agent-access-mint-btn',
+                         '#agent-toggle-btn', '#quick-settings']:
             bounds = page.locator(selector).bounding_box()
             check(bounds is not None and bounds['x'] >= 0 and bounds['x'] + bounds['width'] <= 640,
                   f'{selector} is clipped beside the compact tab row')
-        page.click('#agent-status-mint-btn')
+        check(page.locator('#agent-status-mint-btn').is_hidden(),
+              'compact tab row did not hide the redundant standard Mint action')
+        check(page.locator('#agent-status-mint-3x-btn').is_hidden(),
+              'compact tab row did not move the 3x Mint action into the Agent panel')
+        page.click('#agent-access-mint-btn')
         page.wait_for_selector(main_tab + '.agent-token-active', state='attached')
         page.click('#agent-pause-btn')
         wait_for_agent(page, "state.mode === 'paused'")
@@ -4748,6 +4817,7 @@ def main():
         test_platform_passkey_recovers_live_session_without_access_token,
         test_agent_panel_can_be_dragged,
         test_toolbar_pause_targets_main_tab_not_panel_override,
+        test_agent_mint_quick_action_applies_saved_permission,
         test_terminal_pip_hides_selected_tab_and_keeps_background_tab,
         test_sftp_status_actions_and_terminal_pip_transition,
         test_sftp_send_context_action_is_limited_to_connected_ssh_tabs,

From 9ce1c870b07d4f5ba6dccaec9c8093035a12fd59 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sat, 19 Sep 2026 18:01:02 +0800
Subject: [PATCH 12/43] Keep Files actions visible in short windows

---
 templates/index.html         |  4 ++++
 tests/agent_browser_smoke.py | 17 ++++++++++++++++-
 2 files changed, 20 insertions(+), 1 deletion(-)

diff --git a/templates/index.html b/templates/index.html
index bbaa254..25925ac 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -148,6 +148,8 @@
         .sftp-source-pane, .sftp-destination-pane {
             min-width: 0; min-height: 0; display: flex; flex-direction: column; gap: 10px; overflow: hidden;
         }
+        .sftp-source-pane { overflow-y: auto; }
+        .sftp-source-pane > :not(.sftp-directory-list) { flex-shrink: 0; }
         .sftp-destination-pane {
             animation: sftp-destination-slide 0.16s ease-out;
         }
@@ -9118,6 +9120,7 @@ <h3>Recover StandTerm session</h3>
                 state.elements.conflict.classList.remove('visible');
                 setSftpPipStatus(state, 'Ready to upload.');
                 updateSftpSelectedFile(state);
+                state.elements.selectedFile.scrollIntoView({ block: 'nearest' });
             }
 
             function getSftpRemoteFilePath(state, file) {
@@ -9190,6 +9193,7 @@ <h3>Recover StandTerm session</h3>
                 state.preparedDownload = null;
                 state.downloadConsumed = false;
                 prepareSftpDownloadTicket(state, file);
+                state.elements.fileOperation.scrollIntoView({ block: 'nearest' });
             }
 
             function getSftpRenameValidation(state) {
diff --git a/tests/agent_browser_smoke.py b/tests/agent_browser_smoke.py
index 467f8ef..8ca40a8 100644
--- a/tests/agent_browser_smoke.py
+++ b/tests/agent_browser_smoke.py
@@ -1064,6 +1064,7 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
                 const typeaheadMatch = pipDocument.activeElement?.dataset.entryName;
                 const files = [...pipDocument.querySelectorAll('.sftp-file-entry')];
                 const reference = files.find(button => button.dataset.entryName === 'reference.txt');
+                pipDocument.documentElement.style.height = '360px';
                 reference.click();
                 const preparing = {
                     disabled: pipDocument.querySelector('.sftp-file-download').disabled,
@@ -1097,6 +1098,11 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
                     downloadReady: !pipDocument.querySelector('.sftp-file-download').disabled,
                     selected: reference.classList.contains('selected'),
                     selectedPressed: reference.getAttribute('aria-pressed'),
+                    sourceOverflow: pipDocument.defaultView.getComputedStyle(
+                        pipDocument.querySelector('.sftp-source-pane')).overflowY,
+                    actionBottom: pipDocument.querySelector('.sftp-file-operation-actions')
+                        .getBoundingClientRect().bottom,
+                    viewportHeight: pipDocument.documentElement.clientHeight,
                     status: pipDocument.querySelector('.sftp-transfer-status').innerText
                 };
             }"""
@@ -1114,6 +1120,9 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
         check(file_ui['preparing'] == {'disabled': True, 'text': 'Preparing…'}, 'SFTP Download was enabled before its ticket was ready')
         check(file_ui['downloadReady'] is True, 'SFTP Download was not enabled after its ticket became ready')
         check(file_ui['selected'] is True and file_ui['selectedPressed'] == 'true', 'selected Files row was not highlighted')
+        check(file_ui['sourceOverflow'] == 'auto', 'short Files source pane did not provide a scroll fallback')
+        check(file_ui['actionBottom'] <= file_ui['viewportHeight'], 'short Files window clipped the selected file actions')
+        page.evaluate("() => { documentPictureInPicture.window.document.documentElement.style.height = ''; }")
         check(
             file_ui['status'] == 'Selected reference.txt. Click Download to save it.',
             'selecting a file implied that it had already downloaded',
@@ -1464,6 +1473,7 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
                     type: 'text/plain',
                     lastModified: Date.UTC(2026, 8, 2, 2, 20)
                 }));
+                pipDocument.documentElement.style.height = '360px';
                 input.files = transfer.files;
                 input.dispatchEvent(new Event('change', { bubbles: true }));
                 const card = pipDocument.querySelector('.sftp-selected-file');
@@ -1471,8 +1481,11 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
                     visible: card.classList.contains('visible'),
                     path: pipDocument.querySelector('.sftp-selected-file-path').innerText,
                     meta: pipDocument.querySelector('.sftp-selected-file-meta').innerText,
-                    actions: [...card.querySelectorAll('button')].map(button => button.innerText)
+                    actions: [...card.querySelectorAll('button')].map(button => button.innerText),
+                    actionBottom: card.querySelector('.sftp-file-operation-actions').getBoundingClientRect().bottom,
+                    viewportHeight: pipDocument.documentElement.clientHeight
                 };
+                pipDocument.documentElement.style.height = '';
                 pipDocument.querySelector('.sftp-local-copy').click();
                 const request = window.terminalTest.getEmitted()
                     .find(item => item.event === 'sftp_browse_request' && item.args[0].terminal_id === 'main');
@@ -1497,6 +1510,8 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
         check(local_file_picker['path'] == 'local-upload.txt', 'selected local file card omitted the browser file name')
         check('6 B (6 bytes)' in local_file_picker['meta'] and '2026' in local_file_picker['meta'], 'selected local file card omitted exact metadata')
         check(local_file_picker['actions'] == ['Send', 'Copy to…'], 'selected local file card actions were unclear')
+        check(local_file_picker['actionBottom'] <= local_file_picker['viewportHeight'],
+              'short Files window clipped the selected local file actions')
         check(local_file_picker['sessions'] == ['main', 'term-2'], 'local file Copy to omitted an eligible Files destination')
         check(local_file_picker['sourcePath'] == 'local-upload.txt', 'local file destination pane omitted its source card')
         clear_emitted(page)

From 7a791073b7d12df7a5d21202589d4c3e1b920ee2 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sat, 19 Sep 2026 19:26:44 +0800
Subject: [PATCH 13/43] Add cross-tab Agent transfer queue

---
 README.md                     |   3 +
 app.py                        |  58 ++++++
 docs/agent_socket_contract.md |  20 +++
 templates/index.html          | 329 +++++++++++++++++++++++++++++++++-
 tests/agent_backend_smoke.py  |  55 ++++++
 tests/agent_browser_smoke.py  |  62 +++++--
 6 files changed, 509 insertions(+), 18 deletions(-)

diff --git a/README.md b/README.md
index 704709b..8e13cf3 100644
--- a/README.md
+++ b/README.md
@@ -542,6 +542,9 @@ atomic commit barrier has been crossed and cancellation is no longer possible.
 Keep Files open for the final result; closing the system PiP window does not
 cancel the backend transaction. Agent-initiated copies use the same bounded
 transfer core but still require their separate, fresh **Approve copy** decision.
+After approval, progress moves to the cross-tab **Transfer Queue** between Files
+and Settings. It can stop a running copy, and finished entries disappear after
+about ten seconds.
 If the backend cannot determine whether an SSH publish succeeded, inspect the
 destination before retrying; a blind retry may duplicate or replace a file that
 was already published.
diff --git a/app.py b/app.py
index 73a9148..51febd3 100644
--- a/app.py
+++ b/app.py
@@ -325,6 +325,7 @@ def parse_positive_int_env(name, default):
 AGENT_EVENT_PROVIDER_RUN_REQUEST = 'agent_provider_run_request'
 AGENT_EVENT_ACTION_APPROVE = 'agent_action_approve'
 AGENT_EVENT_ACTION_REJECT = 'agent_action_reject'
+AGENT_EVENT_ACTION_CANCEL = 'agent_action_cancel'
 AGENT_EVENT_VIEWPORT_SNAPSHOT = 'agent_viewport_snapshot'
 AGENT_EVENT_VIEWPORT_RENDER_REQUEST = 'agent_viewport_render_request'
 AGENT_EVENT_VIEWPORT_RENDER_RESULT = 'agent_viewport_render_result'
@@ -413,6 +414,7 @@ def parse_positive_int_env(name, default):
 AGENT_ERROR_EXTERNAL_AGENT_DISABLED = 'agent_external_disabled'
 AGENT_ERROR_HUMAN_INPUT_ACTIVE = 'agent_human_input_active'
 AGENT_ERROR_FILE_COPY_BUSY = 'file_copy_busy'
+AGENT_ERROR_FILE_COPY_CANCELLED = 'file_copy_cancelled_by_operator'
 AGENT_ERROR_FILE_COPY_PUBLISH_OUTCOME_UNKNOWN = 'file_copy_publish_outcome_unknown'
 AGENT_REASON_DETACHED = 'agent_detached'
 AGENT_REASON_DISABLED = 'agent_disabled'
@@ -516,6 +518,7 @@ def parse_positive_int_env(name, default):
 AGENT_AUDIT_PROPOSAL_CREATED = 'proposal_created'
 AGENT_AUDIT_ACTION_APPROVE = 'action_approve'
 AGENT_AUDIT_ACTION_REJECT = 'action_reject'
+AGENT_AUDIT_ACTION_CANCEL = 'action_cancel'
 AGENT_AUDIT_ACTION_RESULT = 'action_result'
 AGENT_AUDIT_DIRECT_WRITE = 'direct_write'
 AGENT_AUDIT_TERMINAL_CLEANUP = 'terminal_cleanup'
@@ -10184,6 +10187,61 @@ def on_agent_action_reject(data):
         emit_agent_state(request.sid, state)
 
 
+@socketio.on(AGENT_EVENT_ACTION_CANCEL)
+def on_agent_action_cancel(data):
+    session_token = socket_session_tokens.get(request.sid)
+    terminal_id = validate_terminal_id_payload(data)
+    if not session_token or not terminal_id or not isinstance(data, dict):
+        return
+    action_id = data.get('action_id')
+    proposal_id = data.get('proposal_id')
+    if not isinstance(action_id, str) and not isinstance(proposal_id, str):
+        emit_agent_error(request.sid, terminal_id, AGENT_ERROR_ACTION_NOT_FOUND)
+        return
+    with agent_lock:
+        state = get_agent_state(session_token, terminal_id, request.sid)
+        if not state:
+            emit_agent_error(request.sid, terminal_id, AGENT_ERROR_NOT_ATTACHED)
+            return
+        action, error_code = validate_agent_action_decision(state, data)
+        if error_code:
+            emit_agent_decision_error(request.sid, terminal_id, state, action, error_code)
+            return
+        if action.get('action_type') != AGENT_ACTION_FILE_COPY:
+            emit_agent_action_failure(request.sid, action, AGENT_ERROR_ACTION_NOT_ALLOWED)
+            emit_agent_state(request.sid, state)
+            return
+        if action.get('status') not in {AGENT_STATUS_APPROVED, AGENT_STATUS_RUNNING}:
+            emit_agent_action_result(
+                request.sid,
+                action,
+                action.get('status') or AGENT_STATUS_FAILED,
+            )
+            emit_agent_state(request.sid, state)
+            return
+        if not transition_agent_file_copy_action(
+            state,
+            action,
+            AGENT_FILE_COPY_EVENT_CANCEL,
+            error_code=AGENT_ERROR_FILE_COPY_CANCELLED,
+        ):
+            emit_agent_action_result(
+                request.sid,
+                action,
+                action.get('status') or AGENT_STATUS_FAILED,
+            )
+            emit_agent_state(request.sid, state)
+            return
+        record_agent_audit_event(state, AGENT_AUDIT_ACTION_CANCEL, action=action)
+        emit_agent_action_result(
+            request.sid,
+            action,
+            AGENT_STATUS_FAILED,
+            error_code=AGENT_ERROR_FILE_COPY_CANCELLED,
+        )
+        emit_agent_state(request.sid, state)
+
+
 @socketio.on(AGENT_EVENT_VIEWPORT_SNAPSHOT)
 def on_agent_viewport_snapshot(data):
     session_token = socket_session_tokens.get(request.sid)
diff --git a/docs/agent_socket_contract.md b/docs/agent_socket_contract.md
index 5bda44a..aeb7f7f 100644
--- a/docs/agent_socket_contract.md
+++ b/docs/agent_socket_contract.md
@@ -49,6 +49,7 @@ terminal display text.
 
 The mock Agent panel may send `agent_mode_set`, `agent_suggestion_request`,
 `agent_provider_run_request`, `agent_action_approve`, `agent_action_reject`,
+`agent_action_cancel`,
 `agent_privacy_set`, and `agent_pause`. The approval panel must display only
 the public action metadata returned by the backend, including `escaped_preview`;
 it must not receive or render the raw terminal input payload.
@@ -820,6 +821,11 @@ that the user requested a copy as authorization. The authorizing viewer shows
 file-copy approval globally even when another terminal tab is active; ordinary
 terminal-input approvals remain scoped to their terminal tab.
 
+After approval, the authorizing viewer moves the copy into a cross-tab Transfer
+Queue. The queue may request cancellation while the action is `approved` or
+`running`. Once the action is `committing`, the destination publish attempt is
+already inside the commit barrier and cannot be cancelled.
+
 The browser Files UI has a separate human-initiated **Copy to…** path. Its final
 **Copy** button is the explicit authorization for that one browser transaction,
 so it does not create an Agent action. It shares the bounded backend stream,
@@ -1151,6 +1157,20 @@ Payload:
 
 Rejects a pending action for this exact sid and terminal.
 
+### `agent_action_cancel`
+
+Payload:
+
+```json
+{ "terminal_id": "main", "action_id": "...", "proposal_id": "agp_..." }
+```
+
+Stops an approved or running `file_copy` for this exact sid and source
+terminal. A successful stop transitions the action to `failed` with
+`file_copy_cancelled_by_operator`, which prevents the worker from reading the
+next source chunk or entering the commit barrier. A request received after the
+action reaches `committing` returns the authoritative current action unchanged.
+
 ### `agent_viewport_snapshot`
 
 Payload:
diff --git a/templates/index.html b/templates/index.html
index 25925ac..fd62e7e 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -796,6 +796,14 @@
             order: 1;
         }
         #agent-action-box.visible { display: flex; flex-direction: column; gap: 8px; }
+        #agent-action-box.file-copy {
+            max-height: min(320px, 48dvh);
+            padding: 7px;
+            margin-top: 6px;
+        }
+        #agent-action-box.file-copy #agent-action-preview,
+        #agent-action-box.file-copy #agent-action-meta,
+        #agent-action-box.file-copy #agent-action-pause-btn { display: none; }
         #agent-action-content { display: grid; gap: 8px; min-height: 0; overflow: auto; overscroll-behavior: contain; }
         #agent-action-controls { flex-shrink: 0; }
         #agent-action-meta { display: grid; grid-template-columns: minmax(0, 1fr) minmax(0, 1fr); gap: 6px 10px; color: #bbb; overflow-wrap: anywhere; }
@@ -811,6 +819,13 @@
             overflow-wrap: anywhere;
         }
         #agent-file-copy-details.visible { display: grid; }
+        #agent-action-box.file-copy #agent-file-copy-details { padding: 6px 8px; gap: 4px; }
+        #agent-file-copy-details .agent-file-copy-route {
+            display: grid;
+            grid-template-columns: 34px minmax(0, 1fr);
+            gap: 6px;
+        }
+        #agent-file-copy-details .agent-file-copy-label { color: #aaa; }
         #agent-file-copy-warning { color: #ff9f0a; font-weight: 700; }
         .agent-preview {
             max-height: 120px;
@@ -842,6 +857,114 @@
         /* Quick Settings Button */
         #quick-settings { cursor: pointer; opacity: 0.6; transition: opacity 0.2s; padding: 0 5px; }
         #quick-settings:hover { opacity: 1; color: #0a84ff; }
+        #transfer-queue-btn { cursor: pointer; padding: 0 5px; }
+        #transfer-queue-btn[hidden] { display: none; }
+        #transfer-queue-count {
+            display: inline-flex;
+            min-width: 15px;
+            height: 15px;
+            padding: 0 3px;
+            box-sizing: border-box;
+            align-items: center;
+            justify-content: center;
+            border-radius: 8px;
+            background: #0a84ff;
+            color: #fff;
+            font-size: 10px;
+            font-weight: 700;
+        }
+        #transfer-queue-panel {
+            display: none;
+            position: fixed;
+            top: calc(var(--tab-bar-height) + 7px);
+            right: 8px;
+            z-index: 220;
+            width: min(430px, calc(100vw - 16px));
+            max-height: min(440px, calc(100dvh - var(--tab-bar-height) - 36px));
+            box-sizing: border-box;
+            overflow: hidden;
+            border: 1px solid #454545;
+            border-radius: 10px;
+            background: #202020;
+            color: #eee;
+            box-shadow: 0 10px 28px rgba(0, 0, 0, 0.48);
+        }
+        #transfer-queue-panel.visible { display: flex; flex-direction: column; }
+        #transfer-queue-header {
+            display: flex;
+            align-items: center;
+            gap: 8px;
+            padding: 9px 10px 7px;
+            border-bottom: 1px solid #383838;
+        }
+        #transfer-queue-title { flex: 1; font-size: 13px; }
+        #transfer-queue-header button,
+        .transfer-queue-stop {
+            border: 0;
+            border-radius: 5px;
+            background: transparent;
+            color: #bbb;
+            cursor: pointer;
+            font-size: 12px;
+        }
+        #transfer-queue-close { width: 26px; height: 26px; font-size: 18px !important; }
+        #transfer-queue-list { min-height: 0; overflow: auto; }
+        .transfer-queue-item {
+            display: grid;
+            grid-template-columns: 30px minmax(0, 1fr) auto;
+            gap: 8px;
+            align-items: start;
+            padding: 10px;
+            border-bottom: 1px solid #343434;
+        }
+        .transfer-queue-item:last-child { border-bottom: 0; }
+        .transfer-queue-icon {
+            display: flex;
+            width: 28px;
+            height: 28px;
+            align-items: center;
+            justify-content: center;
+            border-radius: 50%;
+            background: #303030;
+            color: #7ab8ff;
+            font-size: 16px;
+        }
+        .transfer-queue-name {
+            overflow: hidden;
+            color: #f2f2f2;
+            font-size: 12px;
+            font-weight: 600;
+            text-overflow: ellipsis;
+            white-space: nowrap;
+        }
+        .transfer-queue-route,
+        .transfer-queue-status {
+            margin-top: 3px;
+            overflow: hidden;
+            color: #aaa;
+            font: 11px/1.35 Consolas, "Courier New", monospace;
+            text-overflow: ellipsis;
+            white-space: nowrap;
+        }
+        .transfer-queue-progress {
+            height: 3px;
+            margin-top: 7px;
+            overflow: hidden;
+            border-radius: 2px;
+            background: #444;
+        }
+        .transfer-queue-progress > span {
+            display: block;
+            height: 100%;
+            background: #0a84ff;
+            transition: width 0.2s ease;
+        }
+        .transfer-queue-item.completed .transfer-queue-icon { color: #54c96b; }
+        .transfer-queue-item.failed .transfer-queue-icon { color: #ff6961; }
+        .transfer-queue-stop { min-width: 38px; padding: 5px 6px; }
+        .transfer-queue-stop:hover:not(:disabled),
+        #transfer-queue-header button:hover { background: #383838; color: #fff; }
+        .transfer-queue-stop:disabled { cursor: default; opacity: 0.45; }
         #debug-hud {
             position: fixed;
             right: 10px;
@@ -1325,6 +1448,7 @@ <h3 id="browser-auth-help-title">Manual browser authorization</h3>
             <button id="agent-tunnel-btn" class="status-action" type="button" title="Set up remote Agent access through this SSH connection" hidden>Agent Tunnel</button>
             <button id="ssh-tunnels-btn" class="status-action" type="button" title="Manage TCP port forwarding through this SSH connection" hidden>Tunnels</button>
             <button id="sftp-status-btn" class="status-action status-sftp" type="button" title="Open Files" aria-label="Open Files" hidden>&#x1F4C1;</button>
+            <button id="transfer-queue-btn" class="status-action" type="button" title="Transfer Queue" aria-label="Transfer Queue" hidden><span aria-hidden="true">&#x21C4;</span> <span id="transfer-queue-count">0</span></button>
             <button id="quick-settings" class="status-action" type="button" title="Settings" aria-label="Settings">&#x2699;&#xFE0F;</button>
             <details id="tab-more">
                 <summary class="status-action" title="More terminal actions" aria-label="More terminal actions">&#x22EF;</summary>
@@ -1332,6 +1456,14 @@ <h3 id="browser-auth-help-title">Manual browser authorization</h3>
             </details>
         </div>
     </div>
+    <section id="transfer-queue-panel" aria-label="Transfer Queue" aria-hidden="true">
+        <div id="transfer-queue-header">
+            <strong id="transfer-queue-title">Transfer Queue</strong>
+            <button id="transfer-queue-clear" type="button">Clear finished</button>
+            <button id="transfer-queue-close" type="button" aria-label="Close Transfer Queue">&times;</button>
+        </div>
+        <div id="transfer-queue-list" aria-live="polite"></div>
+    </section>
     <dialog id="agent-connect-dialog" aria-labelledby="agent-connect-title">
         <h3 id="agent-connect-title">Agent Info for Current Tab</h3>
         <p>For an agent running on the <strong>Core host</strong>. If you launched Core with <code>run_wsl.bat</code>, this means WSL, not the Windows browser environment. It can access any individually authorized tab.</p>
@@ -1487,10 +1619,10 @@ <h4>Add tunnel</h4>
             <div id="agent-action-content" tabindex="0" aria-label="Agent action details">
                 <div class="agent-preview" id="agent-action-preview"></div>
                 <div id="agent-file-copy-details">
-                    <div>source: <span id="agent-file-copy-source"></span></div>
-                    <div>destination: <span id="agent-file-copy-destination"></span></div>
-                    <div>size: <span id="agent-file-copy-size"></span></div>
-                    <div>conflict: <span id="agent-file-copy-conflict"></span></div>
+                    <div class="agent-file-copy-route"><span class="agent-file-copy-label">From</span><span id="agent-file-copy-source"></span></div>
+                    <div class="agent-file-copy-route"><span class="agent-file-copy-label">To</span><span id="agent-file-copy-destination"></span></div>
+                    <div class="agent-file-copy-route"><span class="agent-file-copy-label">Size</span><span id="agent-file-copy-size"></span></div>
+                    <span id="agent-file-copy-conflict" hidden></span>
                     <div id="agent-file-copy-warning"></div>
                 </div>
                 <div id="agent-action-meta">
@@ -1574,6 +1706,7 @@ <h3>Recover StandTerm session</h3>
             'committing'
         ]);
         const AGENT_VIEWPORT_SNAPSHOT_DEBOUNCE_MS = 250;
+        const TRANSFER_QUEUE_FINISHED_RETENTION_MS = 10000;
         const AGENT_SNAPSHOT_BLOCKED_PRIVACY_STATES = new Set(['private_input', 'paste_review', 'paused']);
         const AGENT_VIEWPORT_RENDER_MAX_PIXELS = 4096 * 4096;
         const AGENT_VIEWPORT_RENDER_MAX_IMAGE_BYTES = 1024 * 1024;
@@ -2307,6 +2440,12 @@ <h3>Recover StandTerm session</h3>
             const newTabBtn = document.getElementById('new-tab-btn');
             const closeTabsBtn = document.getElementById('close-tabs-btn');
             const sftpStatusBtn = document.getElementById('sftp-status-btn');
+            const transferQueueBtn = document.getElementById('transfer-queue-btn');
+            const transferQueueCount = document.getElementById('transfer-queue-count');
+            const transferQueuePanel = document.getElementById('transfer-queue-panel');
+            const transferQueueList = document.getElementById('transfer-queue-list');
+            const transferQueueClearBtn = document.getElementById('transfer-queue-clear');
+            const transferQueueCloseBtn = document.getElementById('transfer-queue-close');
             const sessionRecoveryModal = document.getElementById('session-recovery-modal');
             const sessionRecoveryForm = document.getElementById('session-recovery-form');
             const sessionRecoveryToken = document.getElementById('session-recovery-token');
@@ -2394,6 +2533,8 @@ <h3>Recover StandTerm session</h3>
             let agentPanelVisible = false;
             let agentPanelTerminalIdOverride = null;
             const agentDecisionActionIds = new Set();
+            const agentTransfers = new Map();
+            let transferQueueVisible = false;
             let agentPanelPosition = null;
             let agentPanelDrag = null;
             let agentExternalTokenCountdownTimer = null;
@@ -3686,8 +3827,15 @@ <h3>Recover StandTerm session</h3>
             }
 
             function renderAgentActionPanel(state) {
-                const action = state && state.agent ? state.agent.pendingAction : null;
+                const pendingAction = state && state.agent ? state.agent.pendingAction : null;
+                const isPendingFileCopy = pendingAction
+                    && pendingAction.action_type === 'file_copy'
+                    && pendingAction.status === 'pending_approval';
+                const action = pendingAction && (pendingAction.action_type !== 'file_copy' || isPendingFileCopy)
+                    ? pendingAction
+                    : null;
                 agentActionBox.classList.toggle('visible', !!action);
+                agentActionBox.classList.toggle('file-copy', !!isPendingFileCopy);
                 if (!action) {
                     agentActionPreview.innerText = '';
                     agentFileCopyDetails.classList.remove('visible');
@@ -3703,6 +3851,7 @@ <h3>Recover StandTerm session</h3>
                     agentActionControl.innerText = 'no';
                     agentActionStatus.innerText = '--';
                     agentApproveBtn.innerText = 'Approve';
+                    agentRejectBtn.innerText = 'Reject';
                     agentApproveBtn.disabled = true;
                     agentRejectBtn.disabled = true;
                     agentActionPauseBtn.disabled = true;
@@ -3731,7 +3880,7 @@ <h3>Recover StandTerm session</h3>
                     } else if (action.destination_exists) {
                         agentFileCopyWarning.innerText = 'The destination exists. Approval reveals the conflict result; no file will be copied.';
                     } else {
-                        agentFileCopyWarning.innerText = 'The source file will be preserved.';
+                        agentFileCopyWarning.innerText = '';
                     }
                 }
                 if (isFileCopy) {
@@ -3755,6 +3904,7 @@ <h3>Recover StandTerm session</h3>
                     ? (action.status || '--')
                     : `${action.status || '--'} · ${percent}%`;
                 agentApproveBtn.innerText = isFileCopy ? 'Approve copy' : 'Approve';
+                agentRejectBtn.innerText = isFileCopy ? 'Deny' : 'Reject';
                 const canDecide = canUseAgentPanel(state)
                     && action.status === 'pending_approval'
                     && !!action.action_id
@@ -4550,6 +4700,7 @@ <h3>Recover StandTerm session</h3>
                     state.agent.actionRevisions.set(actionId, actionRevision);
                 }
                 if (actionId && status !== 'pending_approval') agentDecisionActionIds.delete(actionId);
+                if (isFileCopy) updateAgentTransfer(data);
                 state.agent.lastAction = {
                     actionId,
                     actionRevision,
@@ -7589,6 +7740,17 @@ <h3>Recover StandTerm session</h3>
                 for (const terminalId of [...sshLoginFlows.keys()]) discardSshLogin(terminalId);
                 handledSshSignRequestIds.clear();
                 agentDecisionActionIds.clear();
+                agentTransfers.forEach(record => {
+                    if (isFinishedAgentTransfer(record.action)) return;
+                    record.action = {
+                        ...record.action,
+                        status: 'failed',
+                        error_code: 'connection_lost'
+                    };
+                    record.cancelPending = false;
+                    scheduleAgentTransferRemoval(record);
+                });
+                renderTransferQueue();
                 clearSessionRenewTimer();
                 setServerConnectionState('unavailable');
                 terminals.forEach(state => {
@@ -8965,6 +9127,148 @@ <h3>Recover StandTerm session</h3>
                 return `${size.toFixed(size >= 10 ? 1 : 2)} ${unit}`;
             }
 
+            function isFinishedAgentTransfer(action) {
+                return !!action && ['completed', 'failed'].includes(action.status);
+            }
+
+            function agentTransferFilename(action) {
+                const path = typeof action.destination_path === 'string' ? action.destination_path : '';
+                const parts = path.split(/[\\/]/).filter(Boolean);
+                return parts.at(-1) || 'File transfer';
+            }
+
+            function agentTransferStatusText(action) {
+                const copied = normalizeAgentCount(action.bytes_copied);
+                const total = normalizeAgentCount(action.total_bytes || action.source_size);
+                const amount = total > 0 ? `${formatSftpBytes(copied)} of ${formatSftpBytes(total)}` : formatSftpBytes(copied);
+                if (action.status === 'approved') return `Starting · ${formatSftpBytes(total)}`;
+                if (action.status === 'running') {
+                    const percent = total > 0 ? Math.min(100, Math.floor(copied * 100 / total)) : 0;
+                    return `${percent}% · ${amount}`;
+                }
+                if (action.status === 'committing') return `Finishing · ${formatSftpBytes(total)}`;
+                if (action.status === 'completed') return `Completed · ${formatSftpBytes(total)}`;
+                if (action.error_code === 'file_copy_cancelled_by_operator') return 'Stopped';
+                return action.error_code ? `Failed · ${action.error_code}` : 'Failed';
+            }
+
+            function removeAgentTransfer(actionId) {
+                const record = agentTransfers.get(actionId);
+                if (!record) return;
+                if (record.removeTimer) clearTimeout(record.removeTimer);
+                agentTransfers.delete(actionId);
+                renderTransferQueue();
+            }
+
+            function scheduleAgentTransferRemoval(record) {
+                if (record.removeTimer || !isFinishedAgentTransfer(record.action)) return;
+                const actionId = record.action.action_id;
+                record.removeTimer = setTimeout(() => {
+                    const current = agentTransfers.get(actionId);
+                    if (current === record && isFinishedAgentTransfer(current.action)) {
+                        agentTransfers.delete(actionId);
+                        renderTransferQueue();
+                    }
+                }, TRANSFER_QUEUE_FINISHED_RETENTION_MS);
+            }
+
+            function updateAgentTransfer(data) {
+                if (!data || data.action_type !== 'file_copy' || typeof data.action_id !== 'string') return;
+                const status = typeof data.status === 'string' ? data.status : '';
+                const existing = agentTransfers.get(data.action_id);
+                const visibleStatus = ['approved', 'running', 'committing', 'completed'].includes(status);
+                if (!existing && !visibleStatus) return;
+                const record = existing || { action: data, cancelPending: false, removeTimer: null };
+                if (!existing) {
+                    agentTransfers.set(data.action_id, record);
+                    transferQueueVisible = true;
+                }
+                record.action = data;
+                if (!['approved', 'running'].includes(status)) record.cancelPending = false;
+                if (isFinishedAgentTransfer(data)) {
+                    scheduleAgentTransferRemoval(record);
+                } else if (record.removeTimer) {
+                    clearTimeout(record.removeTimer);
+                    record.removeTimer = null;
+                }
+                renderTransferQueue();
+            }
+
+            function renderTransferQueue() {
+                const records = [...agentTransfers.values()];
+                transferQueueBtn.hidden = records.length === 0;
+                transferQueueCount.innerText = String(records.length);
+                if (!records.length) transferQueueVisible = false;
+                transferQueuePanel.classList.toggle('visible', transferQueueVisible && records.length > 0);
+                transferQueuePanel.setAttribute('aria-hidden', transferQueueVisible && records.length > 0 ? 'false' : 'true');
+                transferQueueClearBtn.disabled = !records.some(record => isFinishedAgentTransfer(record.action));
+                transferQueueList.replaceChildren();
+                records.forEach(record => {
+                    const action = record.action;
+                    const item = document.createElement('div');
+                    item.className = `transfer-queue-item ${isFinishedAgentTransfer(action) ? action.status : ''}`;
+                    item.dataset.actionId = action.action_id;
+
+                    const icon = document.createElement('div');
+                    icon.className = 'transfer-queue-icon';
+                    icon.setAttribute('aria-hidden', 'true');
+                    icon.innerText = action.status === 'completed' ? '✓' : (action.status === 'failed' ? '!' : '⇄');
+
+                    const content = document.createElement('div');
+                    const name = document.createElement('div');
+                    name.className = 'transfer-queue-name';
+                    name.innerText = agentTransferFilename(action);
+                    const route = document.createElement('div');
+                    route.className = 'transfer-queue-route';
+                    route.innerText = `${formatSftpEndpoint(action.source_endpoint)}:${action.source_path || ''} → ${formatSftpEndpoint(action.destination_endpoint)}:${action.destination_path || ''}`;
+                    route.title = route.innerText;
+                    const status = document.createElement('div');
+                    status.className = 'transfer-queue-status';
+                    status.innerText = agentTransferStatusText(action);
+                    content.append(name, route, status);
+                    if (action.status !== 'failed') {
+                        const total = normalizeAgentCount(action.total_bytes || action.source_size);
+                        const copied = normalizeAgentCount(action.bytes_copied);
+                        const percent = action.status === 'completed' || action.status === 'committing'
+                            ? 100
+                            : (total > 0 ? Math.min(100, copied * 100 / total) : 0);
+                        const progress = document.createElement('div');
+                        progress.className = 'transfer-queue-progress';
+                        progress.setAttribute('role', 'progressbar');
+                        progress.setAttribute('aria-valuemin', '0');
+                        progress.setAttribute('aria-valuemax', '100');
+                        progress.setAttribute('aria-valuenow', String(Math.floor(percent)));
+                        const bar = document.createElement('span');
+                        bar.style.width = `${percent}%`;
+                        progress.appendChild(bar);
+                        content.appendChild(progress);
+                    }
+
+                    const button = document.createElement('button');
+                    button.className = 'transfer-queue-stop';
+                    button.type = 'button';
+                    if (isFinishedAgentTransfer(action)) {
+                        button.innerText = '×';
+                        button.title = 'Dismiss';
+                        button.setAttribute('aria-label', `Dismiss ${agentTransferFilename(action)}`);
+                        button.onclick = () => removeAgentTransfer(action.action_id);
+                    } else {
+                        button.innerText = action.status === 'committing' ? '…' : 'Stop';
+                        button.disabled = action.status === 'committing' || record.cancelPending;
+                        button.title = action.status === 'committing' ? 'The destination is being published and cannot be stopped' : 'Stop transfer';
+                        button.onclick = () => {
+                            const state = terminals.get(action.terminal_id);
+                            if (!state || !socket || !socket.connected || button.disabled) return;
+                            record.cancelPending = true;
+                            renderTransferQueue();
+                            socket.emit('agent_action_cancel', buildAgentActionDecisionPayload(state, action));
+                        };
+                    }
+                    item.append(icon, content, button);
+                    transferQueueList.appendChild(item);
+                });
+            }
+
             function formatSftpDetailedBytes(value) {
                 const bytes = Math.max(0, Math.trunc(Number(value) || 0));
                 return `${formatSftpBytes(bytes)} (${bytes} bytes)`;
@@ -11455,6 +11759,19 @@ <h3>Recover StandTerm session</h3>
             };
             document.getElementById('settings-option').onclick = openSettings;
             document.getElementById('quick-settings').onclick = openSettings;
+            transferQueueBtn.onclick = () => {
+                transferQueueVisible = !transferQueueVisible;
+                renderTransferQueue();
+            };
+            transferQueueCloseBtn.onclick = () => {
+                transferQueueVisible = false;
+                renderTransferQueue();
+            };
+            transferQueueClearBtn.onclick = () => {
+                [...agentTransfers.entries()].forEach(([actionId, record]) => {
+                    if (isFinishedAgentTransfer(record.action)) removeAgentTransfer(actionId);
+                });
+            };
             // This interface exposes only existing page actions, not native privileges.
             // Desktop checks its own window/origin before invoking it. Targets are IDs,
             // never terminal labels or other display text.
diff --git a/tests/agent_backend_smoke.py b/tests/agent_backend_smoke.py
index f4ef123..fa4f71c 100644
--- a/tests/agent_backend_smoke.py
+++ b/tests/agent_backend_smoke.py
@@ -4684,6 +4684,61 @@ def upload_stream(stream, upload, expected_size, before_read_callback=None,
     assert completed['result']['source_preserved'] is True
     assert completed['result']['destination_path'] == '/srv/output/payload (1).bin'
 
+    stop_started = threading.Event()
+    stop_gate = threading.Event()
+    stop_finished = threading.Event()
+
+    def stopped_upload(stream, _upload, expected_size, before_read_callback=None,
+                       progress_callback=None, pre_commit_callback=None,
+                       report_publish_outcome_unknown=False):
+        assert report_publish_outcome_unknown is True
+        stop_started.set()
+        assert stop_gate.wait(2), 'stopped file copy gate was not released'
+        try:
+            before_read_callback(0, expected_size)
+        finally:
+            stop_finished.set()
+        raise AssertionError('operator stop should prevent the next file read')
+
+    destination_bridge.upload_sftp_stream = stopped_upload
+    stopped_pending = standterm.process_external_agent_command({
+        'op': 'file-copy',
+        'token': source_token,
+        'terminal_id': source_terminal_id,
+        'source_path': '/srv/input/../payload.bin',
+        'destination_token': destination_token,
+        'destination_terminal_id': destination_terminal_id,
+        'destination_path': '/srv/output/payload.bin',
+        'conflict_mode': 'keep_both',
+    })
+    stopped_action = last_payload(client, standterm.AGENT_EVENT_ACTION_REQUEST)
+    client.emit(standterm.AGENT_EVENT_ACTION_APPROVE, {
+        'terminal_id': source_terminal_id,
+        'action_id': stopped_action['action_id'],
+        'proposal_id': stopped_action['proposal_id'],
+    })
+    assert stopped_pending['status'] == standterm.AGENT_STATUS_PENDING_APPROVAL
+    assert stop_started.wait(1), 'file copy did not start before operator stop'
+    client.emit(standterm.AGENT_EVENT_ACTION_CANCEL, {
+        'terminal_id': source_terminal_id,
+        'action_id': stopped_action['action_id'],
+        'proposal_id': stopped_action['proposal_id'],
+    })
+    stopped_result = last_payload(client, standterm.AGENT_EVENT_ACTION_RESULT)
+    assert stopped_result['status'] == standterm.AGENT_STATUS_FAILED
+    assert stopped_result['error_code'] == standterm.AGENT_ERROR_FILE_COPY_CANCELLED
+    stop_gate.set()
+    assert stop_finished.wait(1), 'stopped file copy worker did not exit'
+    stopped = standterm.process_external_agent_command({
+        'op': 'action-status',
+        'token': source_token,
+        'terminal_id': source_terminal_id,
+        'action_id': stopped_action['action_id'],
+    })
+    assert stopped['status'] == standterm.AGENT_STATUS_FAILED
+    assert stopped['error_code'] == standterm.AGENT_ERROR_FILE_COPY_CANCELLED
+
+    destination_bridge.upload_sftp_stream = upload_stream
     rejected_pending = standterm.process_external_agent_command({
         'op': 'file-copy',
         'token': source_token,
diff --git a/tests/agent_browser_smoke.py b/tests/agent_browser_smoke.py
index 8ca40a8..83d6b9d 100644
--- a/tests/agent_browser_smoke.py
+++ b/tests/agent_browser_smoke.py
@@ -2685,9 +2685,12 @@ def test_file_copy_approval_shows_canonical_plan(browser, access_url):
                 source: document.getElementById('agent-file-copy-source').innerText,
                 destination: document.getElementById('agent-file-copy-destination').innerText,
                 size: document.getElementById('agent-file-copy-size').innerText,
-                conflict: document.getElementById('agent-file-copy-conflict').innerText,
                 warning: document.getElementById('agent-file-copy-warning').innerText,
                 approve: document.getElementById('agent-approve-btn').innerText,
+                deny: document.getElementById('agent-reject-btn').innerText,
+                previewDisplay: getComputedStyle(document.getElementById('agent-action-preview')).display,
+                metaDisplay: getComputedStyle(document.getElementById('agent-action-meta')).display,
+                actionHeight: document.getElementById('agent-action-box').getBoundingClientRect().height,
                 approveDisabled: document.getElementById('agent-approve-btn').disabled
             })"""
         )
@@ -2695,9 +2698,11 @@ def test_file_copy_approval_shows_canonical_plan(browser, access_url):
         check(details['source'] == 'builder@source.example:22:/srv/releases/image.bin', 'source plan was not exact')
         check(details['destination'] == 'Local Shell (bash):/tmp/image.bin', 'destination plan was not exact')
         check(details['size'] == '1.50 KiB', 'source size was not rendered')
-        check(details['conflict'] == 'replace', 'replace mode was not rendered')
         check('atomically replace' in details['warning'], 'replace warning was not explicit')
         check(details['approve'] == 'Approve copy', 'copy approval button was not explicit')
+        check(details['deny'] == 'Deny', 'copy denial button was not concise')
+        check(details['previewDisplay'] == 'none' and details['metaDisplay'] == 'none', 'generic action details expanded the copy prompt')
+        check(details['actionHeight'] < 220, 'copy approval prompt was not compact')
         check(details['approveDisabled'] is False, 'copy approval button was unexpectedly disabled')
         page.evaluate(
             """payload => window.terminalTest.applyAgentActionPayloadForTest(payload)""",
@@ -2796,16 +2801,32 @@ def test_file_copy_approval_is_global_and_decision_is_single_shot(browser, acces
         )
         progress = page.evaluate(
             """() => ({
-                visible: document.getElementById('agent-action-box').classList.contains('visible'),
-                bytes: document.getElementById('agent-action-bytes').innerText,
-                status: document.getElementById('agent-action-status').innerText,
-                approveDisabled: document.getElementById('agent-approve-btn').disabled
+                actionVisible: document.getElementById('agent-action-box').classList.contains('visible'),
+                queueButtonVisible: !document.getElementById('transfer-queue-btn').hidden,
+                queueVisible: document.getElementById('transfer-queue-panel').classList.contains('visible'),
+                count: document.getElementById('transfer-queue-count').innerText,
+                status: document.querySelector('.transfer-queue-status')?.innerText,
+                progress: document.querySelector('.transfer-queue-progress')?.getAttribute('aria-valuenow'),
+                stop: document.querySelector('.transfer-queue-stop')?.innerText,
+                toolbarOrder: [
+                    document.getElementById('sftp-status-btn').nextElementSibling.id,
+                    document.getElementById('transfer-queue-btn').nextElementSibling.id
+                ]
             })"""
         )
-        check(progress['visible'] is True, 'running file copy progress was hidden')
-        check(progress['bytes'] == '768 B / 1.50 KiB', 'file copy byte progress was incorrect')
-        check(progress['status'] == 'running · 50%', 'file copy percentage was incorrect')
-        check(progress['approveDisabled'] is True, 'running file copy could still be approved')
+        check(progress['actionVisible'] is False, 'running file copy kept the approval prompt open')
+        check(progress['queueButtonVisible'] is True and progress['queueVisible'] is True, 'running transfer queue was hidden')
+        check(progress['count'] == '1', 'transfer queue count was incorrect')
+        check(progress['status'] == '50% · 768 B of 1.50 KiB', 'file copy progress was incorrect')
+        check(progress['progress'] == '50', 'file copy progress bar was incorrect')
+        check(progress['stop'] == 'Stop', 'running transfer could not be stopped')
+        check(progress['toolbarOrder'] == ['transfer-queue-btn', 'quick-settings'], 'transfer queue was not between Files and Settings')
+
+        clear_emitted(page)
+        page.click('.transfer-queue-stop')
+        cancel_events = get_emitted(page, 'agent_action_cancel')
+        check(len(cancel_events) == 1, 'transfer stop did not emit one cancellation')
+        check(cancel_events[0]['args'][0]['terminal_id'] == 'main', 'transfer stop targeted the active tab instead of its source tab')
 
         page.evaluate(
             "payload => window.terminalTest.applyAgentActionPayloadForTest(payload)",
@@ -2820,6 +2841,18 @@ def test_file_copy_approval_is_global_and_decision_is_single_shot(browser, acces
         )
         check(monotonic['last_action']['status'] == 'completed', 'stale progress replaced the completed action')
         check(monotonic['pending_action'] is None, 'stale progress reopened the completed action')
+        completed_queue = page.evaluate(
+            """() => ({
+                status: document.querySelector('.transfer-queue-status')?.innerText,
+                dismiss: document.querySelector('.transfer-queue-stop')?.innerText,
+                buttonVisible: !document.getElementById('transfer-queue-btn').hidden
+            })"""
+        )
+        check(completed_queue['status'] == 'Completed · 1.50 KiB', 'completed transfer result was not retained')
+        check(completed_queue['dismiss'] == '×', 'completed transfer did not offer dismissal')
+        check(completed_queue['buttonVisible'] is True, 'completed transfer disappeared immediately')
+        page.wait_for_selector('#transfer-queue-btn', state='hidden', timeout=12000)
+        check(page.locator('#transfer-queue-panel').get_attribute('aria-hidden') == 'true', 'empty transfer queue stayed open')
         page.click('#agent-panel-close-btn')
         page.evaluate(
             """payload => window.terminalTest.applyAgentActionPayloadForTest(payload)""",
@@ -2871,14 +2904,17 @@ def test_file_copy_approval_keeps_controls_visible_with_long_paths(browser, acce
             geometry = page.evaluate("""() => {
                 const panel = document.getElementById('agent-panel').getBoundingClientRect();
                 const content = document.getElementById('agent-action-content');
-                const buttons = ['agent-approve-btn', 'agent-reject-btn', 'agent-action-pause-btn'].map(id => {
+                const actionBox = document.getElementById('agent-action-box').getBoundingClientRect();
+                const buttons = ['agent-approve-btn', 'agent-reject-btn'].map(id => {
                     const button = document.getElementById(id);
                     const r = button.getBoundingClientRect();
                     return r.top >= 0 && r.bottom <= innerHeight && r.left >= 0 && r.right <= innerWidth
                         && document.elementFromPoint(r.x + r.width / 2, r.y + r.height / 2) === button;
                 });
                 return { buttons, panel: { top: panel.top, bottom: panel.bottom, height: panel.height },
-                    hits: ['agent-approve-btn', 'agent-reject-btn', 'agent-action-pause-btn'].map(id => {
+                    actionHeight: actionBox.height,
+                    pauseDisplay: getComputedStyle(document.getElementById('agent-action-pause-btn')).display,
+                    hits: ['agent-approve-btn', 'agent-reject-btn'].map(id => {
                         const r = document.getElementById(id).getBoundingClientRect();
                         const hit = document.elementFromPoint(r.x + r.width / 2, r.y + r.height / 2);
                         return { id: hit?.id, tag: hit?.tagName };
@@ -2890,6 +2926,8 @@ def test_file_copy_approval_keeps_controls_visible_with_long_paths(browser, acce
             }""")
             check(all(geometry['buttons']), f'long copy details hid or covered an approval control: {geometry}')
             check(geometry['panelFits'], 'approval panel exceeded the viewport')
+            check(geometry['actionHeight'] <= min(320, height * 0.48) + 1, 'copy approval card exceeded its compact limit')
+            check(geometry['pauseDisplay'] == 'none', 'copy approval showed the unrelated pause control')
             check(geometry['scrollable'], 'long copy details were not scrollable')
             check(geometry['noHorizontalOverflow'], 'long paths caused horizontal overflow')
             page.evaluate("document.getElementById('agent-action-content').scrollTop = 999999")

From ed7e4dfea753089be03f9d39a7f22faf15252258 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sat, 19 Sep 2026 21:42:40 +0800
Subject: [PATCH 14/43] Preserve agent targets and bound capture waits

## Why
Treating main as an omitted terminal can route explicitly targeted input to
another handoff terminal. Continuous output can extend capture settling
indefinitely after the initial output wait.

## What changed
- Preserve explicit terminal and token selections while retaining latest-handoff defaults.
- Bound capture by wait_ms and retain completed writes and captured output on timeout.
- Document the contracts and add a staged UI copy review and translation table draft.

## Testing
Backend smoke checks pass across 169 cases, including multi-terminal isolation,
CLI mismatch rejection without writes, continuous and late output, and capture
timeouts. All 56 CLI/helper smoke cases pass, including explicit overrides and
omitted-target defaults. The 19-row copy table passes key and placeholder checks.
---
 app.py                        |   7 ++-
 docs/agent_socket_contract.md |  25 +++++---
 docs/agent_ui_review_plan.md  | 112 ++++++++++++++++++++++++++++++++++
 docs/ui_copy_review.tsv       |  20 ++++++
 scripts/agent_cli.py          |   2 +-
 scripts/agent_repl.py         |   2 +-
 tests/agent_backend_smoke.py  |  80 +++++++++++++++++++++++-
 tests/agent_repl_smoke.py     |  31 +++++++++-
 8 files changed, 264 insertions(+), 15 deletions(-)
 create mode 100644 docs/agent_ui_review_plan.md
 create mode 100644 docs/ui_copy_review.tsv

diff --git a/app.py b/app.py
index 51febd3..e6f326c 100644
--- a/app.py
+++ b/app.py
@@ -4387,6 +4387,7 @@ def build_external_agent_send_capture_payload(bridge, state, before_output_seq,
                                               strip_ansi=False):
     wait_ms = parse_external_agent_send_capture_wait_ms(wait_ms)
     settle_ms = parse_external_agent_send_capture_settle_ms(settle_ms)
+    deadline = time.monotonic() + wait_ms / 1000.0
     context_error = get_external_agent_capture_context_error(state)
     if context_error:
         return None, context_error
@@ -4395,7 +4396,6 @@ def build_external_agent_send_capture_payload(bridge, state, before_output_seq,
         since_output_seq=before_output_seq,
         limit=limit,
     )
-    deadline = time.monotonic() + wait_ms / 1000.0
     timed_out = False
 
     while not tail['events'] and not tail['gap']['detected']:
@@ -4422,8 +4422,9 @@ def build_external_agent_send_capture_payload(bridge, state, before_output_seq,
             context_error = get_external_agent_capture_context_error(state)
             if context_error:
                 return None, context_error
-            remaining = settle_deadline - time.monotonic()
+            remaining = min(settle_deadline, deadline) - time.monotonic()
             if remaining <= 0:
+                timed_out = settle_deadline > deadline
                 break
             with bridge.output_condition:
                 bridge.output_condition.wait(timeout=min(remaining, 0.25))
@@ -4436,7 +4437,7 @@ def build_external_agent_send_capture_payload(bridge, state, before_output_seq,
                 tail = latest
                 last_output_seq = latest['output_seq']
                 settle_deadline = time.monotonic() + settle_ms / 1000.0
-        settled = True
+        settled = not timed_out
 
     context_error = get_external_agent_capture_context_error(state)
     if context_error:
diff --git a/docs/agent_socket_contract.md b/docs/agent_socket_contract.md
index aeb7f7f..c315acf 100644
--- a/docs/agent_socket_contract.md
+++ b/docs/agent_socket_contract.md
@@ -178,9 +178,13 @@ browser-facing address is retained as `browser_url`.
 Tokenless agentinfo exposes only a structured terminal-id-to-handoff-path index,
 never the token-bearing file contents. A caller can therefore use
 `--agentinfo <path-or-url> --terminal <id>` to resolve the matching local token.
-Omitting `--terminal` preserves the latest-handoff behavior. Per-terminal files
-are written atomically with restrictive permissions and removed when their
-matching token is revoked or its terminal/viewer binding is invalidated. Each
+Omitting `--terminal` preserves the latest-handoff behavior. An explicit
+`--terminal`, including `main`, takes precedence over the handoff terminal.
+An explicit token also takes precedence over the handoff token; the server
+validates that the effective token belongs to the selected terminal before
+allowing a write. Per-terminal files are written atomically with restrictive
+permissions and removed when their matching token is revoked or its
+terminal/viewer binding is invalidated. Each
 server process uses a distinct directory so an old launch is never selected as
 the current instance; graceful shutdown removes the current directory, while
 fresh agentinfo generation prunes handoffs whose tokens expired or became
@@ -978,10 +982,17 @@ adds typed observation metadata:
 }
 ```
 
-If no terminal output arrives before `wait_ms`, the send may still be
-`completed`; the timeout is reported only as `capture.status: "timeout"` and
-`capture.timed_out: true`. In approval mode, capture is not executed because no
-bytes have been written yet; the response remains `pending_approval` and
+`wait_ms` bounds the entire capture after the write, including waiting for the
+first output and for `settle_ms` of output silence. New output restarts the
+silence interval but never extends the total capture deadline. If no output
+arrives, or output does not settle within that deadline, the send remains
+`completed`; only capture reports `status: "timeout"`, `timed_out: true`, and
+`settled: false`. Output already captured is retained, with the usual cursor and
+event-limit metadata. A capture timeout does not undo the write and must not
+cause the caller to resend the input automatically.
+
+In approval mode, capture is not executed because no bytes have been written
+yet; the response remains `pending_approval` and
 includes `capture.status: "skipped"` with reason `pending_approval`. Captured
 tail events are display data only and must not be parsed as StandTerm control
 state. `strip_ansi` affects only the captured `events[*].data` formatting and
diff --git a/docs/agent_ui_review_plan.md b/docs/agent_ui_review_plan.md
new file mode 100644
index 0000000..d02f3e9
--- /dev/null
+++ b/docs/agent_ui_review_plan.md
@@ -0,0 +1,112 @@
+# Agent reliability, UI copy, and localization plan
+
+## Scope and decisions
+
+Complete reliability fixes before changing UI copy or introducing localization.
+The traverse brief is review input, not a requirement to expand public discovery.
+
+| Decision | Resolution |
+| --- | --- |
+| Tokenless agentinfo | Keep the limited bootstrap and handoff index. Do not expose all ungranted terminals or add localization metadata. |
+| Omitted terminal | Preserve latest-handoff compatibility. Explicit terminal and token arguments remain authoritative. |
+| Capture timeout | `wait_ms` bounds the entire capture after the write, including settling. Retain the completed write and captured events on timeout; never resend automatically. |
+| Agent Mint default | Preserve the saved permission and current Full default. Copy changes do not change authorization. |
+| Display and control | Localized text is display data. Keep protocol values, error codes, terminal IDs, and control decisions independent of wording. |
+
+## Work sequence
+
+| Order | Work | State | Exit criteria |
+| --- | --- | --- | --- |
+| 1 | Preserve explicit CLI and REPL terminal selection | Implemented and validated | Explicit `main` and other IDs survive handoff loading; omitted IDs retain defaults; mismatched tokens cannot write. |
+| 2 | Bound capture settling by the total deadline | Implemented and validated | Quiet, continuous, late, and absent output produce bounded results without replaying input; the send result survives a capture timeout. |
+| 3 | Review English UI copy and terminology | Initial review table prepared | Review each proposed change for target, permissions, consequences, and next action; check related tooltips, Desktop help, and tests before applying it. |
+| 4 | Finalize the translation exchange table | Draft schema prepared | Stable keys, approved English source, context, and placeholder constraints are sufficient for an independent translator. |
+| 5 | Pilot localization in one complete Core workflow | Deferred | Cover static and dynamic text, titles, and accessible names; preserve connected sessions and authorization; support English fallback. |
+| 6 | Translate and integrate approved rows | Deferred | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
+| 7 | Expand Core and Desktop coverage | Deferred | Verify secondary windows, native menus, setup, diagnostics, packaging, and representative layouts. |
+
+## Validation of the reliability changes
+
+The new explicit-terminal regression failed before the CLI/REPL fix. The new
+continuous-output regression failed before the capture deadline fix.
+
+| Check | Result |
+| --- | --- |
+| Complete backend smoke suite | 169 checks passed. |
+| Complete CLI/helper smoke suite | 56 checks passed. |
+| Independent read-only diff review | No correctness or regression findings; separate in-memory checks covered deadline boundaries and explicit overrides. |
+| Initial copy-review table | 19 unique keys; valid columns and placeholders; translation cells intentionally empty. |
+| Diff whitespace check | Passed. |
+
+These checks ran in WSL. Browser, Desktop packaging, and physical UART checks
+were not rerun for these backend/helper changes. No runtime UI wording changed.
+
+## Deferred UI work
+
+Stages 3 and 4 do not change runtime UI text. Translation does not start until
+the English source for the selected workflow is reviewed. Extra screen diffing,
+render hints, key aliases, and byte-limit options remain optional optimizations.
+Unverified UART end-to-end coverage is a qualification gap, not evidence that
+UART is broken.
+
+## Copy review and AI translation exchange
+
+The adjacent `ui_copy_review.tsv` is an initial review table, not a complete
+catalog or a runtime resource. `en` contains a proposed source revision;
+`zh-TW` is intentionally empty. `current_en` is the visible English text, with
+dynamic values normalized to the named placeholders declared in the row.
+HTML emphasis is omitted from the table. Source references identify the current
+implementation and can move as the code changes.
+
+| Column | Ownership and purpose |
+| --- | --- |
+| `key` | Stable semantic identity, maintained by the implementer; never translate it. |
+| `current_en` | Review baseline, not a second runtime source. |
+| `en` | Proposed English source; becomes translation input only after review. |
+| `zh-TW` | Target-language text; the only field an outsourced translation agent edits. |
+| `context` | Meaning, audience, and placement. |
+| `placeholders` | Named runtime values that must remain unchanged in translation. |
+| `constraints` | Scope, safety, terminology, and formatting requirements. |
+| `status` | `proposed`, `retain`, or `remove` during copy review; use `source-approved` before translation and `translation-reviewed` after review. |
+| `source` | Implementation location for checking behavior and surrounding text. |
+
+Use UTF-8 TSV with one physical line per row. Represent intended line breaks as
+literal `\n`; disallow literal tabs or newlines inside cells. Use a proper TSV
+reader/writer for spreadsheet exchange. A removal row has an empty `en` cell
+and must not be translated. Empty translations fall back to English; they do
+not mean that the UI text should be removed.
+
+For translation, export only source-approved rows with their context and
+constraints. Keep the key set and all non-target cells unchanged on return.
+Validate duplicate/missing keys, named placeholder multiplicity, and unknown
+columns before accepting an AI-produced file. Render interpolated values as
+text; do not let translations introduce executable markup.
+
+Keep terminal output, commands, paths, fingerprints, protocol enums, and error
+codes unchanged. Human-facing labels may be localized independently of the
+machine-facing connection prompt. Do not translate an arbitrary backend error
+by matching its English message; use a known structured error code or preserve
+the original diagnostic as fallback.
+
+## Localization implementation boundary
+
+Use the approved table as the only manually maintained catalog and generate
+runtime dictionaries from it. A small exporter/validator and lookup helper are
+sufficient for a pilot; a new UI framework or bundler is not required. Keep the
+current direct-launch workflow and verify generated resources during packaging.
+
+Store language as a local display preference, not server-global session state.
+Do not reload a connected UI merely to change its language. A first version
+may apply the choice on the next UI opening; live switching across all open
+windows is a separate scope decision.
+
+The pilot must include dynamic states, `title`, `aria-label`, document language,
+and a narrow-window check. Keep behavior tests tied to IDs and typed state;
+assert localized wording in dedicated presentation checks. Fix the locale of
+existing English smoke tests so OS language does not change their results.
+
+The initial estimate is 4-7 engineering days for common Core workflows and
+15-25 days cumulatively for full Core plus Desktop. These are preliminary
+estimates, excluding the reliability fixes, website and CLI documentation,
+remote terminal output, and complete live language switching. A full string
+inventory and pilot are needed before committing to a delivery estimate.
diff --git a/docs/ui_copy_review.tsv b/docs/ui_copy_review.tsv
new file mode 100644
index 0000000..f5b581c
--- /dev/null
+++ b/docs/ui_copy_review.tsv
@@ -0,0 +1,20 @@
+key	current_en	en	zh-TW	context	placeholders	constraints	status	source
+browser.auth.warning	YOU SHALL NOT PASS!!			Decorative warning above the browser authorization form.		Remove only this decorative warning; keep the authorization state and recovery actions.	remove	templates/index.html:1345
+browser.auth.required	Unauthorized browser	Browser authorization required		Title above the browser authorization form.		Do not imply that an Agent token can authorize a browser.	proposed	templates/index.html:1346
+browser.auth.instructions	First time? Please use an Auth URL.	Paste a browser authorization URL to continue.		Instruction above the browser authorization URL input.		Keep browser authorization separate from Agent access and the launcher Access URL.	proposed	templates/index.html:1347
+agent.access.grant	Agent Mint	Authorize agent		Primary action applies the saved permission and creates a token for the active tab.		Retain a tooltip naming the target and permission and explaining token creation; this action can grant direct input.	proposed	templates/index.html:1445
+agent.connection.title	Agent Info for Current Tab	Agent connection		Connection info for the environment selected by the active tab.		Show the Core or SSH host nearby. This dialog does not restrict grants to the active tab.	proposed	templates/index.html:1446
+agent.connection.copy	Copy Prompt	Copy Prompt		Copies connection instructions for an external agent.		Keep the adjacent destination environment visible. Copying does not authorize or mint.	retain	templates/index.html:1486
+agent.permission.observe	Observer	Read only		Agent permission selector.		Keep the underlying observe value unchanged; this mode cannot send terminal input.	proposed	templates/index.html:3555
+agent.permission.approval	Approval	Approval required		Agent permission selector.		Keep approval_pending unchanged; input waits for human approval.	proposed	templates/index.html:3556
+agent.permission.direct	Full	Direct input		Agent permission selector.		Keep direct_active unchanged; do not imply unrestricted file-copy authority.	proposed	templates/index.html:3557
+agent.permission.observe_hint	Observer can read terminal output. It cannot type.	Read terminal output without sending input.		Explanation for the read-only permission.		No promise of access through pause, privacy, expiry, or other gates.	proposed	templates/index.html:3563
+agent.permission.approval_hint	Approval lets the agent propose input. You approve before it is sent. Remote file copies always need separate approval.	Approve each input before it is sent. File copies require separate approval.		Explanation for approval-mode Agent access.		File copies include supported local endpoints; do not describe them as remote-only.	proposed	templates/index.html:3564
+agent.permission.direct_hint	Full lets the agent type into this terminal without approval. Remote file copies still need separate approval.	Allow input without individual approval. File copies still require approval.		Explanation for direct-mode Agent access.		Retain the file-copy exception; do not change other input gates.	proposed	templates/index.html:3565
+agent.token.create	Mint token	Create token		Advanced action for a tab whose Agent access is already enabled.		Distinguish token creation from changing the permission or enabling access.	proposed	templates/index.html:1594
+agent.token.expired	Permission expired. Renew the token to continue.	Token expired. Renew it to continue.		Expired token hint in the Agent panel.		Expiry concerns the token; it does not necessarily reset the selected permission.	proposed	templates/index.html:3762
+agent.token.idle_remaining	Permission expires in {seconds}s without activity.	Token expires in {seconds}s without activity.		Token idle countdown in the Agent panel.	{seconds}	Use the typed remaining idle time; map secondsRemaining to seconds when implementing.	proposed	templates/index.html:3764
+agent.copy.replace	This will atomically replace an existing regular file ({size}).	Replace the existing file ({size}).		Warning before approval of a replace-mode Agent file copy.	{size}	Keep the destination path, size, and replacement consequence visible. Atomic publication remains a backend guarantee.	proposed	templates/index.html:3876
+agent.copy.keep_both	The displayed destination is the exact keep-both name selected by the backend.	Copy to the destination shown; keep the existing file.		Warning for a keep-both copy using the canonical destination.		Do not imply the user can edit the chosen path in this approval dialog.	proposed	templates/index.html:3879
+agent.transfer.stop	Stop	Stop		Stops a running transfer before publication.		Do not merge with Reject, Pause, Disable, Close, or Dismiss; each has a different effect.	retain	templates/index.html:9256
+agent.transfer.committing	The destination is being published and cannot be stopped	Finishing the copy; it can no longer be stopped.		Tooltip while transfer publication has crossed the cancellation barrier.		Keep the stop control disabled; do not imply a finished or failed result.	proposed	templates/index.html:9258
diff --git a/scripts/agent_cli.py b/scripts/agent_cli.py
index ed84106..5103cf5 100644
--- a/scripts/agent_cli.py
+++ b/scripts/agent_cli.py
@@ -227,7 +227,7 @@ def apply_handoff(args):
         args.url = payload.get('url')
     if not args.token:
         args.token = payload.get('token')
-    if args.terminal in (None, 'main') and isinstance(payload.get('terminal_id'), str):
+    if args.terminal is None and isinstance(payload.get('terminal_id'), str):
         args.terminal = payload['terminal_id']
     if not args.terminal:
         args.terminal = 'main'
diff --git a/scripts/agent_repl.py b/scripts/agent_repl.py
index da06530..9d95f53 100644
--- a/scripts/agent_repl.py
+++ b/scripts/agent_repl.py
@@ -182,7 +182,7 @@ def apply_handoff(args):
         args.url = payload.get('url')
     if not args.token:
         args.token = payload.get('token')
-    if args.terminal in (None, 'main') and isinstance(payload.get('terminal_id'), str):
+    if args.terminal is None and isinstance(payload.get('terminal_id'), str):
         args.terminal = payload['terminal_id']
     if not args.terminal:
         args.terminal = 'main'
diff --git a/tests/agent_backend_smoke.py b/tests/agent_backend_smoke.py
index fa4f71c..d17c8f6 100644
--- a/tests/agent_backend_smoke.py
+++ b/tests/agent_backend_smoke.py
@@ -2322,6 +2322,67 @@ def test_external_agent_send_wait_times_out_without_output():
     client.disconnect()
 
 
+def test_external_agent_send_capture_bounds_settle_and_preserves_written_result():
+    cases = (
+        ('settled', [0.01], False),
+        ('continuous', [0.01 + index * 0.02 for index in range(20)], True),
+        ('late', [0.09], True),
+    )
+    for name, output_times, timed_out in cases:
+        client = make_client()
+        session_token = current_session_token()
+        bridge = add_dummy_bridge(session_token)
+        sid = current_sid_for_session(session_token)
+        client.emit(standterm.AGENT_EVENT_ATTACH, {'terminal_id': standterm.TERMINAL_ID_MAIN})
+        client.emit(standterm.AGENT_EVENT_MODE_SET, {
+            'terminal_id': standterm.TERMINAL_ID_MAIN,
+            'mode': 'direct',
+        })
+        token, _record, error_code = standterm.mint_external_agent_attach_token(
+            session_token, standterm.TERMINAL_ID_MAIN, sid,
+        )
+        assert error_code is None
+        clock = [0.0]
+        pending = list(output_times)
+        emitted = []
+
+        def wait_for_output(timeout):
+            wake_at = clock[0] + timeout
+            if pending and pending[0] <= wake_at:
+                clock[0] = pending.pop(0)
+                text = f'{name}-{len(emitted)}\n'
+                emitted.append(text)
+                bridge.emit_output({'message_type': 'terminal', 'data': text})
+            else:
+                clock[0] = wake_at
+
+        try:
+            with patch.object(standterm.time, 'monotonic', side_effect=lambda: clock[0]), \
+                    patch.object(bridge.output_condition, 'wait', side_effect=wait_for_output):
+                result = standterm.process_external_agent_command({
+                    'op': 'send-wait',
+                    'token': token,
+                    'terminal_id': standterm.TERMINAL_ID_MAIN,
+                    'data': 'run-once\n',
+                    'wait_ms': 100,
+                    'settle_ms': 30,
+                })
+            assert clock[0] <= 0.1 + 1e-9, name
+            assert result['status'] == standterm.AGENT_STATUS_COMPLETED
+            assert result['bytes_written'] == len('run-once\n')
+            assert bridge.writes == ['run-once\n']
+            capture = result['capture']
+            assert capture['status'] == ('timeout' if timed_out else 'ok'), name
+            assert capture['timed_out'] is timed_out, name
+            assert capture['settled'] is not timed_out, name
+            assert [event['data'] for event in capture['events']] == emitted
+            assert emitted
+            if timed_out:
+                assert abs(clock[0] - 0.1) < 1e-9, name
+        finally:
+            client.disconnect()
+
+
 def test_external_agent_approval_send_capture_is_pending_without_capture():
     client = make_client()
     session_token = current_session_token()
@@ -3007,7 +3068,7 @@ def test_external_agent_per_terminal_handoffs_are_isolated_and_cli_resolvable():
     flask_client = make_flask_client()
     client = make_socket_client(flask_client)
     session_token = current_session_token()
-    terminal_ids = ('term-2', 'term-3')
+    terminal_ids = ('main', 'term-2', 'term-3')
     bridges_by_terminal = {}
     for terminal_id in terminal_ids:
         bridge = DummyBridge(session_token, terminal_id)
@@ -3106,9 +3167,25 @@ def send_to_terminal(terminal_id):
             for thread in threads:
                 thread.join()
             assert all(result['status'] == standterm.AGENT_STATUS_COMPLETED for result in results.values())
+            assert bridges_by_terminal['main'].writes == ['main-input\n']
             assert bridges_by_terminal['term-2'].writes == ['term-2-input\n']
             assert bridges_by_terminal['term-3'].writes == ['term-3-input\n']
 
+            def post_cli_command(_url, payload, **_kwargs):
+                result = standterm.process_external_agent_command(payload)
+                return 200, result
+
+            output = io.StringIO()
+            with patch.object(sys, 'argv', [
+                'agent_cli.py', '--handoff', str(standterm.EXTERNAL_AGENT_HANDOFF_PATH),
+                '--terminal', 'main', 'send', '--text', 'wrong-target\n',
+            ]), patch.object(agent_cli, 'post_json', side_effect=post_cli_command), \
+                    contextlib.redirect_stdout(output):
+                assert agent_cli.main() == 1
+            assert json.loads(output.getvalue())['error_code'] == standterm.AGENT_ERROR_TERMINAL_MISMATCH
+            for terminal_id in terminal_ids:
+                assert bridges_by_terminal[terminal_id].writes == [f'{terminal_id}-input\n']
+
             mismatch = standterm.process_external_agent_command({
                 'op': 'screen',
                 'token': minted['term-3']['token'],
@@ -8675,6 +8752,7 @@ def main():
         test_external_agent_direct_send_capture_returns_tail_after_write,
         test_external_agent_send_wait_strip_ansi_formats_capture_only_when_requested,
         test_external_agent_send_wait_times_out_without_output,
+        test_external_agent_send_capture_bounds_settle_and_preserves_written_result,
         test_external_agent_approval_send_capture_is_pending_without_capture,
         test_external_agent_send_capture_reports_pause_as_nested_capture_error,
         test_human_input_lease_blocks_external_agent_send,
diff --git a/tests/agent_repl_smoke.py b/tests/agent_repl_smoke.py
index 6ef9f8a..25ebcc0 100644
--- a/tests/agent_repl_smoke.py
+++ b/tests/agent_repl_smoke.py
@@ -378,7 +378,7 @@ def test_cli_and_repl_apply_handoff_defaults(tmp_path=None):
         handoff=str(handoff_path),
         url=None,
         token=None,
-        terminal='main',
+        terminal=None,
         ca_file=None,
     )
     cli.apply_handoff(cli_args)
@@ -391,7 +391,7 @@ def test_cli_and_repl_apply_handoff_defaults(tmp_path=None):
         handoff=str(handoff_path),
         url='http://override',
         token=None,
-        terminal='main',
+        terminal=None,
         ca_file=None,
     )
     repl.apply_handoff(repl_args)
@@ -403,6 +403,32 @@ def test_cli_and_repl_apply_handoff_defaults(tmp_path=None):
         handoff_path.unlink(missing_ok=True)
 
 
+def test_cli_and_repl_preserve_explicit_terminal_and_token():
+    with tempfile.TemporaryDirectory(prefix='standterm-handoff-selection-smoke-') as temp_dir:
+        handoff_path = Path(temp_dir) / 'handoff.json'
+        handoff_path.write_text(json.dumps({
+            'url': 'http://127.0.0.1:5012',
+            'token': 'agt_handoff',
+            'terminal_id': 'term-2',
+        }), encoding='utf-8')
+        old_argv = sys.argv
+        try:
+            for helper, command in ((cli, ['hello']), (repl, ['--no-initial-screen'])):
+                for terminal in (None, 'main', 'term-3'):
+                    for token in (None, 'agt_override'):
+                        sys.argv = [helper.__file__, '--handoff', str(handoff_path)]
+                        if terminal is not None:
+                            sys.argv.extend(['--terminal', terminal])
+                        if token is not None:
+                            sys.argv.extend(['--token', token])
+                        sys.argv.extend(command)
+                        args = helper.parse_args()
+                        assert args.terminal == (terminal if terminal is not None else 'term-2')
+                        assert args.token == (token or 'agt_handoff')
+        finally:
+            sys.argv = old_argv
+
+
 def test_agentinfo_bootstraps_jsonl_repl_and_type_helpers():
     with tempfile.TemporaryDirectory(prefix='standterm-agentinfo-helper-smoke-') as temp_dir:
         temp_path = Path(temp_dir)
@@ -1416,6 +1442,7 @@ def main():
         test_repl_startup_type_stops_on_fatal_error,
         test_format_token_status_reports_idle_countdown,
         test_cli_and_repl_apply_handoff_defaults,
+        test_cli_and_repl_preserve_explicit_terminal_and_token,
         test_agentinfo_bootstraps_jsonl_repl_and_type_helpers,
         test_cli_plain_send_payload_uses_structured_text,
         test_cli_screen_tail_lines_payload,

From cf9958d65b04c177f534a7e0b783785b4f9605b0 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sat, 19 Sep 2026 22:17:50 +0800
Subject: [PATCH 15/43] Define Agent terminology and translate review copy

---
 docs/agent_ui_review_plan.md | 40 +++++++++++++++++++++++++++++-------
 docs/ui_copy_review.tsv      | 36 ++++++++++++++++----------------
 2 files changed, 51 insertions(+), 25 deletions(-)

diff --git a/docs/agent_ui_review_plan.md b/docs/agent_ui_review_plan.md
index d02f3e9..cb99e53 100644
--- a/docs/agent_ui_review_plan.md
+++ b/docs/agent_ui_review_plan.md
@@ -13,16 +13,37 @@ The traverse brief is review input, not a requirement to expand public discovery
 | Agent Mint default | Preserve the saved permission and current Full default. Copy changes do not change authorization. |
 | Display and control | Localized text is display data. Keep protocol values, error codes, terminal IDs, and control decisions independent of wording. |
 
+## Agreed terminology
+
+The operator confirmed the following terminology. Keep these distinctions in
+both the English source and Traditional Chinese translations.
+
+| Concept | English UI wording | Traditional Chinese (Taiwan) | Meaning and boundary |
+| --- | --- | --- | --- |
+| Agent | Agent | Agent | Retain the name; avoid confusing the terminal agent with a network proxy. |
+| Grant access | Authorize agent | 授權 Agent | The operator permits Agent access to the selected terminal. The primary action also applies the saved permission and creates a token; identify the permission and target in nearby text or the tooltip. |
+| Allowed operations | Permission | 權限 | Determines what an authorized Agent may do. |
+| Connection credential | Token | 權杖 | Presented by the Agent when connecting. Expiry does not necessarily reset the selected permission. |
+| Create a credential | Create token | 建立權杖 | Creates a token for already enabled access; do not conflate it with changing permission or the primary Authorize agent action. |
+| Observe mode | Read only | 唯讀 | Reads terminal information but cannot send terminal input. |
+| Approval mode | Approval required | 需核准 | Each input proposal requires human approval before it is sent. |
+| Direct mode | Direct input | 直接輸入 | Input does not require individual approval; file copies still require approval and other input gates still apply. |
+
+The protocol values `observe`, `approval_pending`, and `direct_active` remain
+unchanged. Permission labels describe behavior, not unrestricted authority.
+Pause, Disable, Stop, Cancel, Reject, Close, and Dismiss remain distinct actions;
+do not consolidate them merely to shorten labels.
+
 ## Work sequence
 
 | Order | Work | State | Exit criteria |
 | --- | --- | --- | --- |
 | 1 | Preserve explicit CLI and REPL terminal selection | Implemented and validated | Explicit `main` and other IDs survive handoff loading; omitted IDs retain defaults; mismatched tokens cannot write. |
 | 2 | Bound capture settling by the total deadline | Implemented and validated | Quiet, continuous, late, and absent output produce bounded results without replaying input; the send result survives a capture timeout. |
-| 3 | Review English UI copy and terminology | Initial review table prepared | Review each proposed change for target, permissions, consequences, and next action; check related tooltips, Desktop help, and tests before applying it. |
-| 4 | Finalize the translation exchange table | Draft schema prepared | Stable keys, approved English source, context, and placeholder constraints are sufficient for an independent translator. |
+| 3 | Review English UI copy and terminology | Core terms agreed; initial English sources reviewed | Review each proposed change for target, permissions, consequences, and next action; check related tooltips, Desktop help, and tests before applying it. |
+| 4 | Finalize the translation exchange table | Initial exchange validated with an independent translator | Stable keys, approved English source, context, and placeholder constraints are sufficient for an independent translator. |
 | 5 | Pilot localization in one complete Core workflow | Deferred | Cover static and dynamic text, titles, and accessible names; preserve connected sessions and authorization; support English fallback. |
-| 6 | Translate and integrate approved rows | Deferred | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
+| 6 | Translate and integrate approved rows | Initial translations reviewed; runtime integration deferred | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
 | 7 | Expand Core and Desktop coverage | Deferred | Verify secondary windows, native menus, setup, diagnostics, packaging, and representative layouts. |
 
 ## Validation of the reliability changes
@@ -35,7 +56,8 @@ continuous-output regression failed before the capture deadline fix.
 | Complete backend smoke suite | 169 checks passed. |
 | Complete CLI/helper smoke suite | 56 checks passed. |
 | Independent read-only diff review | No correctness or regression findings; separate in-memory checks covered deadline boundaries and explicit overrides. |
-| Initial copy-review table | 19 unique keys; valid columns and placeholders; translation cells intentionally empty. |
+| Initial copy-review table | 19 unique keys; valid columns and placeholders. |
+| Translation exchange | 18 translations reviewed; one removal row excluded. All translator edits were confined to the target column; keys, placeholders, and agreed terminology were verified before the reviewer updated statuses. |
 | Diff whitespace check | Passed. |
 
 These checks ran in WSL. Browser, Desktop packaging, and physical UART checks
@@ -52,8 +74,9 @@ UART is broken.
 ## Copy review and AI translation exchange
 
 The adjacent `ui_copy_review.tsv` is an initial review table, not a complete
-catalog or a runtime resource. `en` contains a proposed source revision;
-`zh-TW` is intentionally empty. `current_en` is the visible English text, with
+catalog or a runtime resource. `en` contains the reviewed English source;
+`zh-TW` holds its translation when available. `current_en` is the visible
+English text, with
 dynamic values normalized to the named placeholders declared in the row.
 HTML emphasis is omitted from the table. Source references identify the current
 implementation and can move as the code changes.
@@ -62,7 +85,7 @@ implementation and can move as the code changes.
 | --- | --- |
 | `key` | Stable semantic identity, maintained by the implementer; never translate it. |
 | `current_en` | Review baseline, not a second runtime source. |
-| `en` | Proposed English source; becomes translation input only after review. |
+| `en` | English source; becomes translation input only after review. |
 | `zh-TW` | Target-language text; the only field an outsourced translation agent edits. |
 | `context` | Meaning, audience, and placement. |
 | `placeholders` | Named runtime values that must remain unchanged in translation. |
@@ -78,6 +101,9 @@ not mean that the UI text should be removed.
 
 For translation, export only source-approved rows with their context and
 constraints. Keep the key set and all non-target cells unchanged on return.
+Source approval records editorial review for translation, not deployment to
+the UI. A translation agent fills only the target-language column; the reviewer
+updates the status after checking its meaning and formatting.
 Validate duplicate/missing keys, named placeholder multiplicity, and unknown
 columns before accepting an AI-produced file. Render interpolated values as
 text; do not let translations introduce executable markup.
diff --git a/docs/ui_copy_review.tsv b/docs/ui_copy_review.tsv
index f5b581c..da7c2c2 100644
--- a/docs/ui_copy_review.tsv
+++ b/docs/ui_copy_review.tsv
@@ -1,20 +1,20 @@
 key	current_en	en	zh-TW	context	placeholders	constraints	status	source
 browser.auth.warning	YOU SHALL NOT PASS!!			Decorative warning above the browser authorization form.		Remove only this decorative warning; keep the authorization state and recovery actions.	remove	templates/index.html:1345
-browser.auth.required	Unauthorized browser	Browser authorization required		Title above the browser authorization form.		Do not imply that an Agent token can authorize a browser.	proposed	templates/index.html:1346
-browser.auth.instructions	First time? Please use an Auth URL.	Paste a browser authorization URL to continue.		Instruction above the browser authorization URL input.		Keep browser authorization separate from Agent access and the launcher Access URL.	proposed	templates/index.html:1347
-agent.access.grant	Agent Mint	Authorize agent		Primary action applies the saved permission and creates a token for the active tab.		Retain a tooltip naming the target and permission and explaining token creation; this action can grant direct input.	proposed	templates/index.html:1445
-agent.connection.title	Agent Info for Current Tab	Agent connection		Connection info for the environment selected by the active tab.		Show the Core or SSH host nearby. This dialog does not restrict grants to the active tab.	proposed	templates/index.html:1446
-agent.connection.copy	Copy Prompt	Copy Prompt		Copies connection instructions for an external agent.		Keep the adjacent destination environment visible. Copying does not authorize or mint.	retain	templates/index.html:1486
-agent.permission.observe	Observer	Read only		Agent permission selector.		Keep the underlying observe value unchanged; this mode cannot send terminal input.	proposed	templates/index.html:3555
-agent.permission.approval	Approval	Approval required		Agent permission selector.		Keep approval_pending unchanged; input waits for human approval.	proposed	templates/index.html:3556
-agent.permission.direct	Full	Direct input		Agent permission selector.		Keep direct_active unchanged; do not imply unrestricted file-copy authority.	proposed	templates/index.html:3557
-agent.permission.observe_hint	Observer can read terminal output. It cannot type.	Read terminal output without sending input.		Explanation for the read-only permission.		No promise of access through pause, privacy, expiry, or other gates.	proposed	templates/index.html:3563
-agent.permission.approval_hint	Approval lets the agent propose input. You approve before it is sent. Remote file copies always need separate approval.	Approve each input before it is sent. File copies require separate approval.		Explanation for approval-mode Agent access.		File copies include supported local endpoints; do not describe them as remote-only.	proposed	templates/index.html:3564
-agent.permission.direct_hint	Full lets the agent type into this terminal without approval. Remote file copies still need separate approval.	Allow input without individual approval. File copies still require approval.		Explanation for direct-mode Agent access.		Retain the file-copy exception; do not change other input gates.	proposed	templates/index.html:3565
-agent.token.create	Mint token	Create token		Advanced action for a tab whose Agent access is already enabled.		Distinguish token creation from changing the permission or enabling access.	proposed	templates/index.html:1594
-agent.token.expired	Permission expired. Renew the token to continue.	Token expired. Renew it to continue.		Expired token hint in the Agent panel.		Expiry concerns the token; it does not necessarily reset the selected permission.	proposed	templates/index.html:3762
-agent.token.idle_remaining	Permission expires in {seconds}s without activity.	Token expires in {seconds}s without activity.		Token idle countdown in the Agent panel.	{seconds}	Use the typed remaining idle time; map secondsRemaining to seconds when implementing.	proposed	templates/index.html:3764
-agent.copy.replace	This will atomically replace an existing regular file ({size}).	Replace the existing file ({size}).		Warning before approval of a replace-mode Agent file copy.	{size}	Keep the destination path, size, and replacement consequence visible. Atomic publication remains a backend guarantee.	proposed	templates/index.html:3876
-agent.copy.keep_both	The displayed destination is the exact keep-both name selected by the backend.	Copy to the destination shown; keep the existing file.		Warning for a keep-both copy using the canonical destination.		Do not imply the user can edit the chosen path in this approval dialog.	proposed	templates/index.html:3879
-agent.transfer.stop	Stop	Stop		Stops a running transfer before publication.		Do not merge with Reject, Pause, Disable, Close, or Dismiss; each has a different effect.	retain	templates/index.html:9256
-agent.transfer.committing	The destination is being published and cannot be stopped	Finishing the copy; it can no longer be stopped.		Tooltip while transfer publication has crossed the cancellation barrier.		Keep the stop control disabled; do not imply a finished or failed result.	proposed	templates/index.html:9258
+browser.auth.required	Unauthorized browser	Browser authorization required	需要瀏覽器授權	Title above the browser authorization form.		Do not imply that an Agent token can authorize a browser.	translation-reviewed	templates/index.html:1346
+browser.auth.instructions	First time? Please use an Auth URL.	Paste a browser authorization URL to continue.	貼上瀏覽器授權網址以繼續。	Instruction above the browser authorization URL input.		Keep browser authorization separate from Agent access and the launcher Access URL.	translation-reviewed	templates/index.html:1347
+agent.access.grant	Agent Mint	Authorize agent	授權 Agent	Primary action applies the saved permission and creates a token for the active tab.		Retain a tooltip naming the target and permission and explaining token creation; this action can grant direct input.	translation-reviewed	templates/index.html:1445
+agent.connection.title	Agent Info for Current Tab	Agent connection	Agent 連線	Connection info for the environment selected by the active tab.		Show the Core or SSH host nearby. This dialog does not restrict grants to the active tab.	translation-reviewed	templates/index.html:1446
+agent.connection.copy	Copy Prompt	Copy Prompt	複製連線指引	Copies connection instructions for an external agent.		Keep the adjacent destination environment visible. Copying does not authorize or mint.	translation-reviewed	templates/index.html:1486
+agent.permission.observe	Observer	Read only	唯讀	Agent permission selector.		Keep the underlying observe value unchanged; this mode cannot send terminal input.	translation-reviewed	templates/index.html:3555
+agent.permission.approval	Approval	Approval required	需核准	Agent permission selector.		Keep approval_pending unchanged; input waits for human approval.	translation-reviewed	templates/index.html:3556
+agent.permission.direct	Full	Direct input	直接輸入	Agent permission selector.		Keep direct_active unchanged; do not imply unrestricted file-copy authority.	translation-reviewed	templates/index.html:3557
+agent.permission.observe_hint	Observer can read terminal output. It cannot type.	Read terminal output without sending input.	讀取終端輸出，不傳送輸入。	Explanation for the read-only permission.		No promise of access through pause, privacy, expiry, or other gates.	translation-reviewed	templates/index.html:3563
+agent.permission.approval_hint	Approval lets the agent propose input. You approve before it is sent. Remote file copies always need separate approval.	Approve each input before it is sent. File copies require separate approval.	每筆輸入都需經您核准後才會送出。檔案複製需另外核准。	Explanation for approval-mode Agent access.		File copies include supported local endpoints; do not describe them as remote-only.	translation-reviewed	templates/index.html:3564
+agent.permission.direct_hint	Full lets the agent type into this terminal without approval. Remote file copies still need separate approval.	Allow input without individual approval. File copies still require approval.	允許直接輸入，無需逐次核准。檔案複製仍需核准。	Explanation for direct-mode Agent access.		Retain the file-copy exception; do not change other input gates.	translation-reviewed	templates/index.html:3565
+agent.token.create	Mint token	Create token	建立權杖	Advanced action for a tab whose Agent access is already enabled.		Distinguish token creation from changing the permission or enabling access.	translation-reviewed	templates/index.html:1594
+agent.token.expired	Permission expired. Renew the token to continue.	Token expired. Renew it to continue.	權杖已過期。請更新權杖以繼續。	Expired token hint in the Agent panel.		Expiry concerns the token; it does not necessarily reset the selected permission.	translation-reviewed	templates/index.html:3762
+agent.token.idle_remaining	Permission expires in {seconds}s without activity.	Token expires in {seconds}s without activity.	若無活動，權杖將在 {seconds} 秒後過期。	Token idle countdown in the Agent panel.	{seconds}	Use the typed remaining idle time; map secondsRemaining to seconds when implementing.	translation-reviewed	templates/index.html:3764
+agent.copy.replace	This will atomically replace an existing regular file ({size}).	Replace the existing file ({size}).	將覆寫既有檔案（{size}）。	Warning before approval of a replace-mode Agent file copy.	{size}	Keep the destination path, size, and replacement consequence visible. Atomic publication remains a backend guarantee.	translation-reviewed	templates/index.html:3876
+agent.copy.keep_both	The displayed destination is the exact keep-both name selected by the backend.	Copy to the destination shown; keep the existing file.	複製到顯示的目的地，並保留既有檔案。	Warning for a keep-both copy using the canonical destination.		Do not imply the user can edit the chosen path in this approval dialog.	translation-reviewed	templates/index.html:3879
+agent.transfer.stop	Stop	Stop	停止	Stops a running transfer before publication.		Do not merge with Reject, Pause, Disable, Close, or Dismiss; each has a different effect.	translation-reviewed	templates/index.html:9256
+agent.transfer.committing	The destination is being published and cannot be stopped	Finishing the copy; it can no longer be stopped.	正在完成複製，已無法停止。	Tooltip while transfer publication has crossed the cancellation barrier.		Keep the stop control disabled; do not imply a finished or failed result.	translation-reviewed	templates/index.html:9258

From b522feba07598d39ca878e88ea63b150b0c070cb Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sat, 19 Sep 2026 22:34:40 +0800
Subject: [PATCH 16/43] Add table-driven Agent language preview

## What changed
- Clarify Agent authorization, permission and token wording while preserving protocol values and access behavior.
- Generate reviewed English and Traditional Chinese messages from a translation exchange table with English fallback.
- Apply the saved local language on the next page opening and include required resources in Core bundles.

## Testing
Agent browser coverage includes both languages, token lifecycle, unchanged active sessions after saving language, connection info and approval flows. Translation validation, safe interpolation, bilingual dialog layouts and Core bundle selection pass.
---
 .github/workflows/smoke.yml     |   7 ++
 README.md                       |  31 ++++--
 desktop/core-files.cjs          |   3 +-
 desktop/main.cjs                |   6 +-
 docs/agent_ui_review_plan.md    |  68 ++++++++++--
 docs/ui_copy_review.tsv         |  63 +++++++++++
 scripts/build_ui_messages.py    |  87 +++++++++++++++
 scripts/run_smoke_tests.py      |   5 +
 static/js/standterm-i18n.js     |  37 +++++++
 static/js/standterm-messages.js | 174 +++++++++++++++++++++++++++++
 templates/index.html            | 188 +++++++++++++++++---------------
 tests/agent_browser_smoke.py    | 124 +++++++++++++++++++--
 tests/ui_i18n_smoke.cjs         |  97 ++++++++++++++++
 tests/ui_messages_smoke.py      | 137 +++++++++++++++++++++++
 14 files changed, 902 insertions(+), 125 deletions(-)
 create mode 100644 scripts/build_ui_messages.py
 create mode 100644 static/js/standterm-i18n.js
 create mode 100644 static/js/standterm-messages.js
 create mode 100644 tests/ui_i18n_smoke.cjs
 create mode 100644 tests/ui_messages_smoke.py

diff --git a/.github/workflows/smoke.yml b/.github/workflows/smoke.yml
index 769682a..1cf0994 100644
--- a/.github/workflows/smoke.yml
+++ b/.github/workflows/smoke.yml
@@ -25,3 +25,10 @@ jobs:
 
       - name: Run headless smoke tests
         run: tools/.venv_linux/bin/python scripts/run_smoke_tests.py
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+
+      - name: Check UI translation lookup
+        run: node tests/ui_i18n_smoke.cjs
diff --git a/README.md b/README.md
index 8e13cf3..17c1ebe 100644
--- a/README.md
+++ b/README.md
@@ -316,13 +316,20 @@ states the token status; tab labels include remaining idle seconds, for example
 does not mean an agent is currently executing.
 Revocation, invalidation, or disabling access removes the tint, and connection
 warnings take priority. Background tabs update without opening the Agent panel.
-The **🤖 Agent Mint** action is the leftmost action in the right-side tab tools.
-It applies the permission selected in **Settings > General > Agent Access** to
+The **🤖 Authorize agent** action is the leftmost action in the right-side tab tools.
+It applies the permission selected in **Settings > General > Agent access** to
 the active terminal, waits for Core to confirm it, and mints a standard token.
-The default is **Full + Mint**. The tab-row Mint and Mint 3× buttons remain
-beside Pause Agent when the Agent panel is hidden, and always target the active
+The default is **Direct input + token**. The tab-row Create token and Create
+token 3× buttons remain beside Pause Agent when the Agent panel is hidden, and always target the active
 terminal; compact windows keep those actions in the Agent panel.
 
+**Settings > General > Language (Agent preview)** selects English or Traditional
+Chinese (Taiwan) for Agent access and local connection information. The choice
+applies the next time the page opens; saving it does not reload the current
+page or change its connections and grants. Other areas remain in English.
+The [copy and translation table](docs/ui_copy_review.tsv) and
+[localization plan](docs/agent_ui_review_plan.md) describe the review workflow.
+
 This development build also enables an **experimental IME positioning PoC**:
 the composition overlay follows its starting input line during terminal redraws.
 It is not yet qualified with real Windows/macOS candidate windows. See
@@ -723,7 +730,7 @@ Python helpers, discovery, and per-tab permissions as a local external agent,
 including normal file-copy approval between two authorized tabs.
 
 The dialog shows the remote **Agent Info URL** with **Copy URL** and **Copy
-Prompt** actions. **Agent Info for Current Tab** appears in the toolbar only after that
+Prompt** actions. **Agent connection** appears in the toolbar only after that
 SSH tab's tunnel is ready, and opens the same prompt and activity information.
 The URL's `127.0.0.1` belongs to the SSH host. Paste the prompt
 to the agent there; it identifies the SSH host and tab and includes the existing skill and discovery
@@ -749,7 +756,7 @@ handoffs live in a private temporary directory on the SSH host. The tunnel
 exposes only scoped Agent discovery and commands over HTTP inside SSH.
 
 Disabling or pausing access in Agent Panel immediately restricts remote access.
-**Start / Renew Access**, a new Enable, or an explicit browser Mint can renew
+**Start / Renew Access**, a new Enable, or an explicit browser Create token can renew
 expired or revoked grants. Reading info, checking the tunnel, ordinary mode
 changes, and resume do not renew invalid grants. **Stop Tunnel**, SSH disconnect, or browser viewer disconnect
 revokes this tunnel's grants and pending input without revoking local agents.
@@ -775,19 +782,19 @@ Typical local flow:
 
 1. Launch StandTerm and open the browser.
 2. Connect a terminal.
-3. Choose **🤖 Agent Mint** to apply the saved permission and mint a standard
-   token for that terminal in one action. The default is **Full + Mint**.
+3. Choose **🤖 Authorize agent** to apply the saved permission and mint a standard
+   token for that terminal in one action. The default is **Direct input + token**.
 4. For another permission or a 3x-idle token, use the browser Agent panel.
    When the Agent panel is hidden, the same actions are available in the status
    bar for the active terminal.
-5. On a local tab, open **Agent Info for Current Tab** in the toolbar. **Copy URL** provides the
+5. On a local tab, open **Agent connection** in the toolbar. **Copy URL** provides the
    local Agent Info URL; **Copy Prompt** includes the skill, discovery
    command, and instructions to run `hello` for each intended tab. Give this to
    the agent running in the Core host environment (WSL when Core runs in WSL).
    The dialog shows each tab's last authenticated request to confirm access.
 
-Reading or copying a prompt does not mint tokens. The single **Agent Info for
-Current Tab** button chooses the environment from the active tab: local tabs
+Reading or copying a prompt does not mint tokens. The single **Agent connection**
+button chooses the environment from the active tab: local tabs
 show Core host information; SSH tabs show that host's information after **Agent
 Tunnel** is ready. The dialog identifies where to run the agent. This choice
 does not narrow access to one tab; permissions still follow Agent Panel.
@@ -892,7 +899,7 @@ stderr.
 any two attached SSH or Local Shell terminals. Both terminals need separately
 minted external-agent tokens from the same browser session. Every copy opens a
 dedicated browser approval card showing the backend-canonical source,
-destination, size, and conflict behavior; Full mode does not bypass this
+destination, size, and conflict behavior; Direct input mode does not bypass this
 per-operation approval. File-copy approval appears even when a different
 terminal tab is active, while ordinary command approvals remain terminal
 scoped. Approved copies expose typed byte progress through the browser card and
diff --git a/desktop/core-files.cjs b/desktop/core-files.cjs
index 52f3fc1..976fd83 100644
--- a/desktop/core-files.cjs
+++ b/desktop/core-files.cjs
@@ -7,7 +7,8 @@ const SKILL_DIRS = ['standterm-external-agent-skill', 'standterm-file-transfer',
 const REQUIRED = ['app.py', 'core_version.py', 'requirements.txt', 'README.md', 'run.sh', 'run.bat',
   'run.command', 'run_at_wsl.bat', 'run_at_wsl+screen.bat', 'install.sh', 'install.ps1', 'install.command',
   'LICENSE', 'THIRD-PARTY-NOTICES.md', 'desktop/backend.py', 'desktop/runtime.py', 'docs/agent_socket_contract.md',
-  'docs/backend_plugin_contract.md', 'docs/venv_prompt.txt',
+  'docs/backend_plugin_contract.md', 'docs/venv_prompt.txt', 'docs/ui_copy_review.tsv',
+  'static/js/standterm-i18n.js', 'static/js/standterm-messages.js',
   ...['cli', 'jsonl', 'repl', 'shcmd', 'scp', 'type', 'rsfile', 'mcp'].map(name => `scripts/agent_${name}.py`),
   ...SKILL_DIRS.flatMap(name => ['SKILL.md', 'boot_prompt.txt', 'skill_prompt.txt']
     .map(file => `docs/examples/${name}/${file}`)),
diff --git a/desktop/main.cjs b/desktop/main.cjs
index 8a23554..d244f67 100644
--- a/desktop/main.cjs
+++ b/desktop/main.cjs
@@ -411,9 +411,9 @@ async function start() {
         type: 'info', title: 'StandTerm Agent', message: 'Give your agent a StandTerm prompt',
         detail: 'Select the tab where your agent runs. Use Agent Panel to enable access and choose permissions '
           + 'on each tab it may operate.\n\n'
-          + 'For an SSH agent, start Agent Tunnel on its SSH tab. Agent Info for Current Tab appears after setup succeeds. '
-          + 'For a local agent, mint a token in Agent Panel.\n\n'
-          + 'Open Agent Info for Current Tab, choose Copy Prompt, and paste it into your agent with the intended task. '
+          + 'For an SSH agent, start Agent Tunnel on its SSH tab. Agent connection appears after setup succeeds. '
+          + 'For a local agent, use Authorize agent on each intended tab.\n\n'
+          + 'Open Agent connection, choose Copy Prompt, and paste it into your agent with the intended task. '
           + 'Follow the environment shown in that dialog.\n\n'
           + 'Skills do not need to be installed first. The prompt leads to the bundled skills and helpers; '
           + 'Agent Info also provides installation instructions when persistent skills are wanted.',
diff --git a/docs/agent_ui_review_plan.md b/docs/agent_ui_review_plan.md
index cb99e53..efea0e7 100644
--- a/docs/agent_ui_review_plan.md
+++ b/docs/agent_ui_review_plan.md
@@ -10,7 +10,7 @@ The traverse brief is review input, not a requirement to expand public discovery
 | Tokenless agentinfo | Keep the limited bootstrap and handoff index. Do not expose all ungranted terminals or add localization metadata. |
 | Omitted terminal | Preserve latest-handoff compatibility. Explicit terminal and token arguments remain authoritative. |
 | Capture timeout | `wait_ms` bounds the entire capture after the write, including settling. Retain the completed write and captured events on timeout; never resend automatically. |
-| Agent Mint default | Preserve the saved permission and current Full default. Copy changes do not change authorization. |
+| Primary authorization default | Preserve the saved permission and current Direct input default. Copy changes do not change authorization. |
 | Display and control | Localized text is display data. Keep protocol values, error codes, terminal IDs, and control decisions independent of wording. |
 
 ## Agreed terminology
@@ -42,8 +42,8 @@ do not consolidate them merely to shorten labels.
 | 2 | Bound capture settling by the total deadline | Implemented and validated | Quiet, continuous, late, and absent output produce bounded results without replaying input; the send result survives a capture timeout. |
 | 3 | Review English UI copy and terminology | Core terms agreed; initial English sources reviewed | Review each proposed change for target, permissions, consequences, and next action; check related tooltips, Desktop help, and tests before applying it. |
 | 4 | Finalize the translation exchange table | Initial exchange validated with an independent translator | Stable keys, approved English source, context, and placeholder constraints are sufficient for an independent translator. |
-| 5 | Pilot localization in one complete Core workflow | Deferred | Cover static and dynamic text, titles, and accessible names; preserve connected sessions and authorization; support English fallback. |
-| 6 | Translate and integrate approved rows | Initial translations reviewed; runtime integration deferred | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
+| 5 | Pilot Agent access and local connection information | Implemented; validation below | Cover static and dynamic text, titles, and accessible names; preserve connected sessions and authorization; support English fallback. |
+| 6 | Translate and integrate approved rows | Pilot translations reviewed and integrated; remaining workflows deferred | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
 | 7 | Expand Core and Desktop coverage | Deferred | Verify secondary windows, native menus, setup, diagnostics, packaging, and representative layouts. |
 
 ## Validation of the reliability changes
@@ -61,22 +61,25 @@ continuous-output regression failed before the capture deadline fix.
 | Diff whitespace check | Passed. |
 
 These checks ran in WSL. Browser, Desktop packaging, and physical UART checks
-were not rerun for these backend/helper changes. No runtime UI wording changed.
+were not rerun for these backend/helper changes. The subsequent UI pilot is
+validated separately below.
 
 ## Deferred UI work
 
-Stages 3 and 4 do not change runtime UI text. Translation does not start until
-the English source for the selected workflow is reviewed. Extra screen diffing,
-render hints, key aliases, and byte-limit options remain optional optimizations.
+Browser authorization, file-copy review text, Agent diagnostics, SSH tunnel setup,
+secondary windows, and Desktop localization remain outside this pilot. Reviewed
+rows in the table do not imply that every screen has integrated them. Translation
+starts only after the English source for the selected workflow is reviewed.
+Extra screen diffing, render hints, key aliases, and byte-limit options remain optional optimizations.
 Unverified UART end-to-end coverage is a qualification gap, not evidence that
 UART is broken.
 
 ## Copy review and AI translation exchange
 
-The adjacent `ui_copy_review.tsv` is an initial review table, not a complete
-catalog or a runtime resource. `en` contains the reviewed English source;
-`zh-TW` holds its translation when available. `current_en` is the visible
-English text, with
+The adjacent `ui_copy_review.tsv` is the editable source for the pilot catalog and
+future copy review; it does not inventory the entire product. `en` contains the
+reviewed English source; `zh-TW` holds its translation when available.
+`current_en` records the English review baseline, with
 dynamic values normalized to the named placeholders declared in the row.
 HTML emphasis is omitted from the table. Source references identify the current
 implementation and can move as the code changes.
@@ -136,3 +139,46 @@ The initial estimate is 4-7 engineering days for common Core workflows and
 estimates, excluding the reliability fixes, website and CLI documentation,
 remote terminal output, and complete live language switching. A full string
 inventory and pilot are needed before committing to a delivery estimate.
+
+## Pilot implementation and translation handoff
+
+The table contains 82 rows: 81 reviewed translations and one removal row.
+The pilot integrates 75 keys; six reviewed keys belong to deferred workflows.
+An independent translator edited only the 63 new target cells. The integrator
+checked unchanged metadata and placeholders, clarified that Settings changes
+the default permission, and reviewed the translations before changing statuses.
+
+Generate the checked-in browser catalog with
+`python scripts/build_ui_messages.py`; use `--check` to reject a stale catalog.
+The standard headless checks validate the table and generated output. CI also
+runs `node tests/ui_i18n_smoke.cjs` for lookup, interpolation and safe DOM output.
+English source rows require `source-approved` or `translation-reviewed`; target
+text is exported only from `translation-reviewed` rows. Empty translations use
+English. Removed rows are excluded. Runtime needs only the generated assets;
+no new build tool or third-party localization dependency is required. Core
+packaging includes the source table and both runtime scripts.
+
+To outsource another translation batch, send the table and agreed terminology
+above. Ask the translator to edit only target cells in the selected source-approved
+rows and return the same UTF-8 TSV. Compare all other cells and the complete key
+set against the sent copy, review the meaning, then update statuses and regenerate.
+Never accept source or metadata changes merely because placeholder checks pass.
+
+The local `uiLanguage` preference supports `en` and `zh-TW`; unknown values
+fall back to English. Save applies on the next page opening. The active page
+retains its locale and its existing terminal connections, permissions and tokens.
+Machine prompts, protocol values and backend diagnostics are unchanged.
+
+| Pilot check | Result |
+| --- | --- |
+| Complete Agent browser smoke suite | 51 cases passed, including the new Traditional Chinese authorization, connection-info and next-opening language case. |
+| Active session preservation | Saving a language choice retained the socket, terminal session, permission and token; it emitted no authorization or connection mutation. A new page applied the saved language. |
+| Table/exporter tests | Six cases passed; the checked-in catalog also passed `--check`. |
+| Translation lookup tests | Six cases passed for fallback, literal interpolation, safe display attributes and browser loading. |
+| Integrated key audit | All 75 keys have English and reviewed Traditional Chinese text. |
+| Bilingual connection-dialog layout | All controls fit at 600, 800 and 1280 pixel viewport widths. |
+| Core bundle selection | Three focused tests passed, including required catalog assets and source table. |
+| Independent read-only review | No correctness or security findings in permission control, language persistence, interpolation or fallback. |
+
+These checks ran with WSL Chromium and local test servers. Native Desktop
+packaging and physical UART qualification were not part of this UI pilot.
diff --git a/docs/ui_copy_review.tsv b/docs/ui_copy_review.tsv
index da7c2c2..6ac0d24 100644
--- a/docs/ui_copy_review.tsv
+++ b/docs/ui_copy_review.tsv
@@ -18,3 +18,66 @@ agent.copy.replace	This will atomically replace an existing regular file ({size}
 agent.copy.keep_both	The displayed destination is the exact keep-both name selected by the backend.	Copy to the destination shown; keep the existing file.	複製到顯示的目的地，並保留既有檔案。	Warning for a keep-both copy using the canonical destination.		Do not imply the user can edit the chosen path in this approval dialog.	translation-reviewed	templates/index.html:3879
 agent.transfer.stop	Stop	Stop	停止	Stops a running transfer before publication.		Do not merge with Reject, Pause, Disable, Close, or Dismiss; each has a different effect.	translation-reviewed	templates/index.html:9256
 agent.transfer.committing	The destination is being published and cannot be stopped	Finishing the copy; it can no longer be stopped.	正在完成複製，已無法停止。	Tooltip while transfer publication has crossed the cancellation barrier.		Keep the stop control disabled; do not imply a finished or failed result.	translation-reviewed	templates/index.html:9258
+settings.language.label	Language (Agent preview)	Language (Agent preview)	語言（Agent 預覽）	Local display preference for the limited Agent workflow pilot.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+settings.language.hint	Applies to Agent access and connection info next time you open this page. Other areas remain in English.	Applies to Agent access and local connection info next time you open this page. Other areas remain in English.	下次開啟此頁面時套用於 Agent 存取與本機連線資訊，其他區域仍顯示英文。	Language change never reloads an active terminal.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+settings.agent.legend	Agent access	Agent access	Agent 存取	Settings fieldset title.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+settings.agent.permission	Default Agent permission	Default Agent permission	Agent 預設權限	Saved permission used by the Authorize agent button; saving alone does not grant access.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+settings.agent.hint	Authorize agent applies this permission to the current tab and creates a standard token.	Authorize agent applies this permission to the current tab and creates a standard token.	「授權 Agent」會將此權限套用至目前分頁，並建立標準權杖。	Explain the primary button without implying that saving a setting authorizes a tab.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+settings.agent.observe	Read only + token	Read only + token	唯讀 + 權杖	Authorize agent setting option; keep the read-only meaning.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+settings.agent.approval	Approval required + token	Approval required + token	需核准 + 權杖	Authorize agent setting option; each input proposal needs approval.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+settings.agent.direct	Direct input + token	Direct input + token	直接輸入 + 權杖	Authorize agent setting option; file-copy approval is still required.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+common.close	Close	Close	關閉	Close a dialog without cancelling terminal work.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+common.refresh	Refresh Status	Refresh Status	更新狀態	Refresh displayed status, not the page.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+common.copy_url	Copy URL	Copy URL	複製網址	Copy the URL without granting access.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.name	Agent	Agent	Agent	Product term; retain Agent.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.panel.show	Show Agent Panel	Show Agent Panel	顯示 Agent 面板	Show the Agent panel.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.panel.hide	Hide Agent Panel	Hide Agent Panel	隱藏 Agent 面板	Hide the Agent panel; do not disable Agent access.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.panel.open	Open Agent Panel	Open Agent Panel	開啟 Agent 面板	Open the permission panel from connection info.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.panel.pending	{count} pending	{count} pending	{count} 筆待核准	Count of input proposals waiting for human action.	{count}	Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.permission.label	Agent permission	Agent permission	Agent 權限	Accessible label for the permission selector.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.permission.paused	Paused	Paused	已暫停	Agent access is paused.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.permission.off	Off	Off	已停用	Agent access is disabled.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.permission.paused_hint	Agent access is paused. Choose a permission to resume, or disable access.	Agent access is paused. Choose a permission to resume, or disable access.	Agent 存取已暫停。選擇權限以恢復存取，或停用存取。	Paused access is not a token expiry.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.permission.disabled_hint	Enable Agent access to choose its permission.	Enable Agent access to choose its permission.	啟用 Agent 存取後，即可選擇權限。	No implicit authorization on connection.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.access.enable	Enable external agent	Enable external agent	啟用外部 Agent	Enable the Agent panel in read-only mode.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.access.disable	Disable external agent	Disable external agent	停用外部 Agent	Disable Agent access for this terminal.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.access.enable_title	Enable Agent access in Read only mode	Enable Agent access in Read only mode	以唯讀模式啟用 Agent 存取	Enable action tooltip; does not create a token.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.access.disable_title	Disable Agent access for this terminal	Disable Agent access for this terminal	停用此終端的 Agent 存取	Disable action tooltip.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.access.starting	Starting…	Starting…	啟動中…	Primary authorization action is in progress.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.access.grant_title	Authorize {permission} access and create a standard token for {target}	Authorize {permission} access and create a standard token for {target}	授權 Agent 以「{permission}」權限存取 {target}，並建立標準權杖	Primary action tooltip names the permission and terminal target.	{permission} {target}	Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.access.current_tab	the current tab	the current tab	目前分頁	Fallback target in a tooltip when no terminal is selected.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.token.creating	Creating token…	Creating token…	正在建立權杖…	Token creation is in progress.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.token.create_3x	Create token 3×	Create token 3×	建立權杖 3×	Create a token with three times the standard idle lifetime.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.token.renew	Renew token	Renew token	更新權杖	Renew a credential; do not imply a permission change.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.token.renew_3x	Renew token 3×	Renew token 3×	更新權杖 3×	Renew a token with three times the standard idle lifetime.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.token.connect_required	Connect a terminal before creating a token.	Connect a terminal before creating a token.	請先連線至終端，再建立權杖。	Prerequisite for token creation.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.token.resume_required	Resume Agent access before creating a token.	Resume Agent access before creating a token.	請先恢復 Agent 存取，再建立權杖。	Paused state prevents token creation.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.token.enable_required	Enable external agent before creating a token.	Enable external agent before creating a token.	請先啟用外部 Agent，再建立權杖。	Disabled state prevents token creation.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.token.revoked	Token revoked. Renew it to continue.	Token revoked. Renew it to continue.	權杖已撤銷。請更新權杖以繼續。	Revocation differs from idle expiry.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.token.ready	Token created for this terminal and permission.	Token created for this terminal and permission.	已為此終端與權限建立權杖。	Token creation succeeded.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.token.invalidated	Token invalidated. Create a new token to continue.	Token invalidated. Create a new token to continue.	權杖已失效。請建立新權杖以繼續。	Binding changed; do not say the permission was reset.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.token.local_hint	Create a local-only token for this terminal and permission.	Create a local-only token for this terminal and permission.	為此終端與權限建立僅限本機使用的權杖。	The command endpoint is loopback-only.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.token.target_title	Create a standard token for {target}	Create a standard token for {target}	為 {target} 建立標準權杖	Toolbar token action tooltip.	{target}	Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.token.target_3x_title	Create a token with 3× idle time for {target}	Create a token with 3× idle time for {target}	為 {target} 建立閒置期限為標準 3 倍的權杖	Toolbar extended-token action tooltip.	{target}	Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.token.command	Agent command	Agent command	Agent 指令	Accessible label of the generated command field; never translate its value.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.token.command_output	Command output	Command output	指令輸出	Expandable area containing a generated Agent command.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.token.tab_active	Agent token active ({permission}); {seconds}s remaining without activity	Agent token active ({permission}); {seconds}s remaining without activity	Agent 權杖有效（{permission}）；若無活動，將在 {seconds} 秒後過期	Tab tooltip; activity means use of the Agent token.	{permission} {seconds}	Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.token.tab_expired	Agent token expired; create a new token to continue	Agent token expired; create a new token to continue	Agent 權杖已過期；請建立新權杖以繼續	Tab tooltip for an expired token.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.pause.action	Pause Agent	Pause Agent	暫停 Agent	Pause Agent access; do not close or disconnect the terminal.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.pause.target	Pause Agent access for {target}	Pause Agent access for {target}	暫停 {target} 的 Agent 存取	Pause action tooltip naming its target.	{target}	Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.tooltip	Copy the agent prompt for the current tab's environment	Copy the agent prompt for the current tab's environment	複製目前分頁所在環境的 Agent 連線指引	The active tab selects the execution environment, not the grant scope.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.environment	Run the agent where Core runs (WSL if Core runs in WSL). It can access only individually authorized tabs.	Run the agent where Core runs (WSL if Core runs in WSL). It can access only individually authorized tabs.	請在 Core 所在環境執行 Agent（若 Core 在 WSL 中執行，Agent 也須在 WSL 中執行）。Agent 僅能存取已個別授權的分頁。	Core-host connection info; distinguish Windows browser from WSL Core.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.step_authorize	Choose Authorize agent on each intended tab. Change its permission in Settings or the Agent panel.	Choose the default permission in Settings, then Authorize agent on each intended tab. Adjust an authorized tab in the Agent panel.	先在 Settings 選擇預設權限，再於各個要開放存取的分頁選擇「授權 Agent」。已授權分頁的權限可在 Agent 面板調整。	Local connection setup step; the primary action creates the token.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.step_copy	Copy the prompt to the agent running on the Core host.	Copy the prompt to the agent running on the Core host.	將連線指引複製給在 Core 主機上執行的 Agent。	Give the prompt to the correct runtime environment.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.step_confirm	Run discover, then hello. Authenticated requests appear below.	Run discover, then hello. Authenticated requests appear below.	先執行 discover，再執行 hello。已通過驗證的請求會顯示在下方。	Keep discover and hello unchanged as command names.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.url	Agent Info URL	Agent Info URL	Agent 資訊網址	Label and accessible name for the tokenless bootstrap URL.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.prompt	Agent connection prompt	Agent connection prompt	Agent 連線指引	Accessible name for a copied instruction field; do not translate its value.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.request_at	last authenticated request {time}	last authenticated request {time}	最近一次通過驗證的請求：{time}	Reports an authenticated request, not a persistent connection or successful input.	{time}	Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.waiting	waiting for agent	waiting for agent	等待 Agent	A grant exists, but no authenticated request has been observed.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.no_grants	No active grants. Authorize the intended tabs first.	No active grants. Authorize the intended tabs first.	目前沒有有效授權。請先授權要開放存取的分頁。	Do not expose ungranted tabs in public discovery.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.copied	Copied. Paste this to the agent in the indicated environment.	Copied. Paste this to the agent in the indicated environment.	已複製。請貼給在指定環境執行的 Agent。	Clipboard copy succeeded; this does not grant access.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.copy_failed	Not copied. Text selected; press {shortcut} to copy it manually.	Not copied. Text selected; press {shortcut} to copy it manually.	複製失敗，已選取文字。請按 {shortcut} 手動複製。	Clipboard fallback; preserve the keyboard shortcut placeholder.	{shortcut}	Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.disconnected	Core is disconnected. Reconnect before copying connection info.	Core is disconnected. Reconnect before copying connection info.	Core 連線已中斷。請重新連線後再複製連線資訊。	No valid Core connection info is available.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.loading	Loading connection info…	Loading connection info…	正在載入連線資訊…	Connection info request is pending.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.ready	Copy Prompt to the agent running on the Core host. Its first authenticated request confirms access.	Copy Prompt to the agent running on the Core host. Its first authenticated request confirms access.	按「複製連線指引」，再貼給在 Core 主機上執行的 Agent。Agent 首次通過驗證的請求可確認其存取權。	Keep request activity separate from terminal input success.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.unavailable	Connection info unavailable.	Connection info unavailable.	無法取得連線資訊。	Fallback when the server does not provide a diagnostic message.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
diff --git a/scripts/build_ui_messages.py b/scripts/build_ui_messages.py
new file mode 100644
index 0000000..82297be
--- /dev/null
+++ b/scripts/build_ui_messages.py
@@ -0,0 +1,87 @@
+#!/usr/bin/env python3
+"""Validate the translation table and generate the browser/CommonJS catalog."""
+
+import argparse
+from collections import Counter
+import csv
+import json
+from pathlib import Path
+import re
+
+
+ROOT = Path(__file__).resolve().parents[1]
+SOURCE = ROOT / 'docs' / 'ui_copy_review.tsv'
+OUTPUT = ROOT / 'static' / 'js' / 'standterm-messages.js'
+FIELDS = ['key', 'current_en', 'en', 'zh-TW', 'context', 'placeholders', 'constraints', 'status', 'source']
+STATUSES = {'proposed', 'retain', 'remove', 'source-approved', 'translation-reviewed'}
+PLACEHOLDER = re.compile(r'\{[A-Za-z_][A-Za-z0-9_]*\}')
+
+
+def build_catalog(source):
+    messages = {'en': {}, 'zh-TW': {}}
+    seen = set()
+    with source.open(encoding='utf-8-sig', newline='') as handle:
+        reader = csv.DictReader(handle, delimiter='\t')
+        if reader.fieldnames != FIELDS:
+            raise ValueError('Unexpected translation table columns')
+        for row in reader:
+            key = row['key']
+            if None in row or any(value is None for value in row.values()):
+                raise ValueError(f'Invalid columns for {key}')
+            if not re.fullmatch(r'[a-z][a-z0-9_]*(?:\.[a-z][a-z0-9_]*)+', key) or key in seen:
+                raise ValueError(f'Invalid or duplicate key: {key}')
+            seen.add(key)
+            if any(any(char in value for char in '\t\r\n') for value in row.values()):
+                raise ValueError(f'Use escaped line breaks in {key}')
+            if row['status'] not in STATUSES:
+                raise ValueError(f'Unknown status for {key}')
+            if row['status'] == 'remove':
+                if row['en'] or row['zh-TW']:
+                    raise ValueError(f'Removal row must have empty text: {key}')
+                continue
+            if not row['en'].strip():
+                raise ValueError(f'Missing English source: {key}')
+            expected = Counter(PLACEHOLDER.findall(row['placeholders']))
+            for language in ('en', 'zh-TW'):
+                text = row[language]
+                if text and Counter(PLACEHOLDER.findall(text)) != expected:
+                    raise ValueError(f'Placeholder mismatch in {key}: {language}')
+            if row['status'] not in {'source-approved', 'translation-reviewed'}:
+                continue
+            messages['en'][key] = row['en'].replace('\\n', '\n')
+            if row['status'] == 'translation-reviewed' and row['zh-TW'].strip():
+                messages['zh-TW'][key] = row['zh-TW'].replace('\\n', '\n')
+    return messages
+
+
+def render_catalog(messages):
+    payload = json.dumps(messages, ensure_ascii=True, indent=4, sort_keys=True)
+    return (
+        '// Generated by scripts/build_ui_messages.py. Edit docs/ui_copy_review.tsv.\n'
+        '(function (root) {\n'
+        "    'use strict';\n"
+        f'    const messages = {payload};\n'
+        "    if (typeof module === 'object' && module.exports) module.exports = messages;\n"
+        '    else root.StandTermMessages = messages;\n'
+        '})(globalThis);\n'
+    )
+
+
+def main(argv=None):
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument('--check', action='store_true', help='Fail if the committed catalog is stale')
+    args = parser.parse_args(argv)
+    try:
+        expected = render_catalog(build_catalog(SOURCE))
+        if args.check:
+            if not OUTPUT.is_file() or OUTPUT.read_text(encoding='utf-8') != expected:
+                raise ValueError('UI catalog is stale; run scripts/build_ui_messages.py')
+        else:
+            OUTPUT.write_text(expected, encoding='utf-8')
+    except (OSError, ValueError) as exc:
+        parser.exit(1, f'{exc}\n')
+    return 0
+
+
+if __name__ == '__main__':
+    raise SystemExit(main())
diff --git a/scripts/run_smoke_tests.py b/scripts/run_smoke_tests.py
index c291652..f96ee89 100644
--- a/scripts/run_smoke_tests.py
+++ b/scripts/run_smoke_tests.py
@@ -13,6 +13,8 @@
     'ssh_forwarding.py',
     'ssh_tunnels.py',
     'scripts/access_window.py',
+    'scripts/build_ui_messages.py',
+    'tests/ui_messages_smoke.py',
     'tests/access_window_smoke.py',
     'tests/server_startup_smoke.py',
     'scripts/agent_cli.py',
@@ -38,6 +40,7 @@
 ]
 
 HEADLESS_SMOKE_TESTS = [
+    'tests/ui_messages_smoke.py',
     'tests/access_window_smoke.py',
     'tests/terminal_read_smoke.py',
     'tests/ssh_start_smoke.py',
@@ -74,6 +77,8 @@ def main(argv=None):
             [sys.executable, '-m', 'py_compile', *COMPILE_TARGETS],
         )
 
+    run_step('Check generated UI catalog', [sys.executable, 'scripts/build_ui_messages.py', '--check'])
+
     for test_path in HEADLESS_SMOKE_TESTS:
         run_step(test_path, [sys.executable, test_path])
 
diff --git a/static/js/standterm-i18n.js b/static/js/standterm-i18n.js
new file mode 100644
index 0000000..98ee408
--- /dev/null
+++ b/static/js/standterm-i18n.js
@@ -0,0 +1,37 @@
+(function (root, factory) {
+    if (typeof module === 'object' && module.exports) module.exports = factory();
+    else root.StandTermI18n = factory();
+})(globalThis, function () {
+    'use strict';
+
+    function normalizeLocale(value) {
+        return value === 'zh-TW' ? 'zh-TW' : 'en';
+    }
+
+    function create(messages, requestedLocale) {
+        const locale = normalizeLocale(requestedLocale);
+        const english = messages.en || {};
+        const translated = messages[locale] || {};
+        const own = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
+        function t(key, params = {}) {
+            const template = (own(translated, key) && translated[key])
+                || (own(english, key) && english[key]) || key;
+            return template.replace(/\{([A-Za-z_][A-Za-z0-9_]*)\}/g,
+                (placeholder, name) => own(params, name) ? String(params[name]) : placeholder);
+        }
+
+        function apply(root) {
+            root.querySelectorAll('[data-i18n]').forEach(element => {
+                element.textContent = t(element.dataset.i18n);
+            });
+            for (const attribute of ['title', 'aria-label', 'placeholder']) {
+                root.querySelectorAll(`[data-i18n-${attribute}]`).forEach(element => {
+                    element.setAttribute(attribute, t(element.getAttribute(`data-i18n-${attribute}`)));
+                });
+            }
+        }
+        return { locale, t, apply };
+    }
+
+    return { normalizeLocale, create };
+});
diff --git a/static/js/standterm-messages.js b/static/js/standterm-messages.js
new file mode 100644
index 0000000..7ea72c1
--- /dev/null
+++ b/static/js/standterm-messages.js
@@ -0,0 +1,174 @@
+// Generated by scripts/build_ui_messages.py. Edit docs/ui_copy_review.tsv.
+(function (root) {
+    'use strict';
+    const messages = {
+    "en": {
+        "agent.access.current_tab": "the current tab",
+        "agent.access.disable": "Disable external agent",
+        "agent.access.disable_title": "Disable Agent access for this terminal",
+        "agent.access.enable": "Enable external agent",
+        "agent.access.enable_title": "Enable Agent access in Read only mode",
+        "agent.access.grant": "Authorize agent",
+        "agent.access.grant_title": "Authorize {permission} access and create a standard token for {target}",
+        "agent.access.starting": "Starting\u2026",
+        "agent.connection.copied": "Copied. Paste this to the agent in the indicated environment.",
+        "agent.connection.copy": "Copy Prompt",
+        "agent.connection.copy_failed": "Not copied. Text selected; press {shortcut} to copy it manually.",
+        "agent.connection.disconnected": "Core is disconnected. Reconnect before copying connection info.",
+        "agent.connection.environment": "Run the agent where Core runs (WSL if Core runs in WSL). It can access only individually authorized tabs.",
+        "agent.connection.loading": "Loading connection info\u2026",
+        "agent.connection.no_grants": "No active grants. Authorize the intended tabs first.",
+        "agent.connection.prompt": "Agent connection prompt",
+        "agent.connection.ready": "Copy Prompt to the agent running on the Core host. Its first authenticated request confirms access.",
+        "agent.connection.request_at": "last authenticated request {time}",
+        "agent.connection.step_authorize": "Choose the default permission in Settings, then Authorize agent on each intended tab. Adjust an authorized tab in the Agent panel.",
+        "agent.connection.step_confirm": "Run discover, then hello. Authenticated requests appear below.",
+        "agent.connection.step_copy": "Copy the prompt to the agent running on the Core host.",
+        "agent.connection.title": "Agent connection",
+        "agent.connection.tooltip": "Copy the agent prompt for the current tab's environment",
+        "agent.connection.unavailable": "Connection info unavailable.",
+        "agent.connection.url": "Agent Info URL",
+        "agent.connection.waiting": "waiting for agent",
+        "agent.copy.keep_both": "Copy to the destination shown; keep the existing file.",
+        "agent.copy.replace": "Replace the existing file ({size}).",
+        "agent.name": "Agent",
+        "agent.panel.hide": "Hide Agent Panel",
+        "agent.panel.open": "Open Agent Panel",
+        "agent.panel.pending": "{count} pending",
+        "agent.panel.show": "Show Agent Panel",
+        "agent.pause.action": "Pause Agent",
+        "agent.pause.target": "Pause Agent access for {target}",
+        "agent.permission.approval": "Approval required",
+        "agent.permission.approval_hint": "Approve each input before it is sent. File copies require separate approval.",
+        "agent.permission.direct": "Direct input",
+        "agent.permission.direct_hint": "Allow input without individual approval. File copies still require approval.",
+        "agent.permission.disabled_hint": "Enable Agent access to choose its permission.",
+        "agent.permission.label": "Agent permission",
+        "agent.permission.observe": "Read only",
+        "agent.permission.observe_hint": "Read terminal output without sending input.",
+        "agent.permission.off": "Off",
+        "agent.permission.paused": "Paused",
+        "agent.permission.paused_hint": "Agent access is paused. Choose a permission to resume, or disable access.",
+        "agent.token.command": "Agent command",
+        "agent.token.command_output": "Command output",
+        "agent.token.connect_required": "Connect a terminal before creating a token.",
+        "agent.token.create": "Create token",
+        "agent.token.create_3x": "Create token 3\u00d7",
+        "agent.token.creating": "Creating token\u2026",
+        "agent.token.enable_required": "Enable external agent before creating a token.",
+        "agent.token.expired": "Token expired. Renew it to continue.",
+        "agent.token.idle_remaining": "Token expires in {seconds}s without activity.",
+        "agent.token.invalidated": "Token invalidated. Create a new token to continue.",
+        "agent.token.local_hint": "Create a local-only token for this terminal and permission.",
+        "agent.token.ready": "Token created for this terminal and permission.",
+        "agent.token.renew": "Renew token",
+        "agent.token.renew_3x": "Renew token 3\u00d7",
+        "agent.token.resume_required": "Resume Agent access before creating a token.",
+        "agent.token.revoked": "Token revoked. Renew it to continue.",
+        "agent.token.tab_active": "Agent token active ({permission}); {seconds}s remaining without activity",
+        "agent.token.tab_expired": "Agent token expired; create a new token to continue",
+        "agent.token.target_3x_title": "Create a token with 3\u00d7 idle time for {target}",
+        "agent.token.target_title": "Create a standard token for {target}",
+        "agent.transfer.committing": "Finishing the copy; it can no longer be stopped.",
+        "agent.transfer.stop": "Stop",
+        "browser.auth.instructions": "Paste a browser authorization URL to continue.",
+        "browser.auth.required": "Browser authorization required",
+        "common.close": "Close",
+        "common.copy_url": "Copy URL",
+        "common.refresh": "Refresh Status",
+        "settings.agent.approval": "Approval required + token",
+        "settings.agent.direct": "Direct input + token",
+        "settings.agent.hint": "Authorize agent applies this permission to the current tab and creates a standard token.",
+        "settings.agent.legend": "Agent access",
+        "settings.agent.observe": "Read only + token",
+        "settings.agent.permission": "Default Agent permission",
+        "settings.language.hint": "Applies to Agent access and local connection info next time you open this page. Other areas remain in English.",
+        "settings.language.label": "Language (Agent preview)"
+    },
+    "zh-TW": {
+        "agent.access.current_tab": "\u76ee\u524d\u5206\u9801",
+        "agent.access.disable": "\u505c\u7528\u5916\u90e8 Agent",
+        "agent.access.disable_title": "\u505c\u7528\u6b64\u7d42\u7aef\u7684 Agent \u5b58\u53d6",
+        "agent.access.enable": "\u555f\u7528\u5916\u90e8 Agent",
+        "agent.access.enable_title": "\u4ee5\u552f\u8b80\u6a21\u5f0f\u555f\u7528 Agent \u5b58\u53d6",
+        "agent.access.grant": "\u6388\u6b0a Agent",
+        "agent.access.grant_title": "\u6388\u6b0a Agent \u4ee5\u300c{permission}\u300d\u6b0a\u9650\u5b58\u53d6 {target}\uff0c\u4e26\u5efa\u7acb\u6a19\u6e96\u6b0a\u6756",
+        "agent.access.starting": "\u555f\u52d5\u4e2d\u2026",
+        "agent.connection.copied": "\u5df2\u8907\u88fd\u3002\u8acb\u8cbc\u7d66\u5728\u6307\u5b9a\u74b0\u5883\u57f7\u884c\u7684 Agent\u3002",
+        "agent.connection.copy": "\u8907\u88fd\u9023\u7dda\u6307\u5f15",
+        "agent.connection.copy_failed": "\u8907\u88fd\u5931\u6557\uff0c\u5df2\u9078\u53d6\u6587\u5b57\u3002\u8acb\u6309 {shortcut} \u624b\u52d5\u8907\u88fd\u3002",
+        "agent.connection.disconnected": "Core \u9023\u7dda\u5df2\u4e2d\u65b7\u3002\u8acb\u91cd\u65b0\u9023\u7dda\u5f8c\u518d\u8907\u88fd\u9023\u7dda\u8cc7\u8a0a\u3002",
+        "agent.connection.environment": "\u8acb\u5728 Core \u6240\u5728\u74b0\u5883\u57f7\u884c Agent\uff08\u82e5 Core \u5728 WSL \u4e2d\u57f7\u884c\uff0cAgent \u4e5f\u9808\u5728 WSL \u4e2d\u57f7\u884c\uff09\u3002Agent \u50c5\u80fd\u5b58\u53d6\u5df2\u500b\u5225\u6388\u6b0a\u7684\u5206\u9801\u3002",
+        "agent.connection.loading": "\u6b63\u5728\u8f09\u5165\u9023\u7dda\u8cc7\u8a0a\u2026",
+        "agent.connection.no_grants": "\u76ee\u524d\u6c92\u6709\u6709\u6548\u6388\u6b0a\u3002\u8acb\u5148\u6388\u6b0a\u8981\u958b\u653e\u5b58\u53d6\u7684\u5206\u9801\u3002",
+        "agent.connection.prompt": "Agent \u9023\u7dda\u6307\u5f15",
+        "agent.connection.ready": "\u6309\u300c\u8907\u88fd\u9023\u7dda\u6307\u5f15\u300d\uff0c\u518d\u8cbc\u7d66\u5728 Core \u4e3b\u6a5f\u4e0a\u57f7\u884c\u7684 Agent\u3002Agent \u9996\u6b21\u901a\u904e\u9a57\u8b49\u7684\u8acb\u6c42\u53ef\u78ba\u8a8d\u5176\u5b58\u53d6\u6b0a\u3002",
+        "agent.connection.request_at": "\u6700\u8fd1\u4e00\u6b21\u901a\u904e\u9a57\u8b49\u7684\u8acb\u6c42\uff1a{time}",
+        "agent.connection.step_authorize": "\u5148\u5728 Settings \u9078\u64c7\u9810\u8a2d\u6b0a\u9650\uff0c\u518d\u65bc\u5404\u500b\u8981\u958b\u653e\u5b58\u53d6\u7684\u5206\u9801\u9078\u64c7\u300c\u6388\u6b0a Agent\u300d\u3002\u5df2\u6388\u6b0a\u5206\u9801\u7684\u6b0a\u9650\u53ef\u5728 Agent \u9762\u677f\u8abf\u6574\u3002",
+        "agent.connection.step_confirm": "\u5148\u57f7\u884c discover\uff0c\u518d\u57f7\u884c hello\u3002\u5df2\u901a\u904e\u9a57\u8b49\u7684\u8acb\u6c42\u6703\u986f\u793a\u5728\u4e0b\u65b9\u3002",
+        "agent.connection.step_copy": "\u5c07\u9023\u7dda\u6307\u5f15\u8907\u88fd\u7d66\u5728 Core \u4e3b\u6a5f\u4e0a\u57f7\u884c\u7684 Agent\u3002",
+        "agent.connection.title": "Agent \u9023\u7dda",
+        "agent.connection.tooltip": "\u8907\u88fd\u76ee\u524d\u5206\u9801\u6240\u5728\u74b0\u5883\u7684 Agent \u9023\u7dda\u6307\u5f15",
+        "agent.connection.unavailable": "\u7121\u6cd5\u53d6\u5f97\u9023\u7dda\u8cc7\u8a0a\u3002",
+        "agent.connection.url": "Agent \u8cc7\u8a0a\u7db2\u5740",
+        "agent.connection.waiting": "\u7b49\u5f85 Agent",
+        "agent.copy.keep_both": "\u8907\u88fd\u5230\u986f\u793a\u7684\u76ee\u7684\u5730\uff0c\u4e26\u4fdd\u7559\u65e2\u6709\u6a94\u6848\u3002",
+        "agent.copy.replace": "\u5c07\u8986\u5beb\u65e2\u6709\u6a94\u6848\uff08{size}\uff09\u3002",
+        "agent.name": "Agent",
+        "agent.panel.hide": "\u96b1\u85cf Agent \u9762\u677f",
+        "agent.panel.open": "\u958b\u555f Agent \u9762\u677f",
+        "agent.panel.pending": "{count} \u7b46\u5f85\u6838\u51c6",
+        "agent.panel.show": "\u986f\u793a Agent \u9762\u677f",
+        "agent.pause.action": "\u66ab\u505c Agent",
+        "agent.pause.target": "\u66ab\u505c {target} \u7684 Agent \u5b58\u53d6",
+        "agent.permission.approval": "\u9700\u6838\u51c6",
+        "agent.permission.approval_hint": "\u6bcf\u7b46\u8f38\u5165\u90fd\u9700\u7d93\u60a8\u6838\u51c6\u5f8c\u624d\u6703\u9001\u51fa\u3002\u6a94\u6848\u8907\u88fd\u9700\u53e6\u5916\u6838\u51c6\u3002",
+        "agent.permission.direct": "\u76f4\u63a5\u8f38\u5165",
+        "agent.permission.direct_hint": "\u5141\u8a31\u76f4\u63a5\u8f38\u5165\uff0c\u7121\u9700\u9010\u6b21\u6838\u51c6\u3002\u6a94\u6848\u8907\u88fd\u4ecd\u9700\u6838\u51c6\u3002",
+        "agent.permission.disabled_hint": "\u555f\u7528 Agent \u5b58\u53d6\u5f8c\uff0c\u5373\u53ef\u9078\u64c7\u6b0a\u9650\u3002",
+        "agent.permission.label": "Agent \u6b0a\u9650",
+        "agent.permission.observe": "\u552f\u8b80",
+        "agent.permission.observe_hint": "\u8b80\u53d6\u7d42\u7aef\u8f38\u51fa\uff0c\u4e0d\u50b3\u9001\u8f38\u5165\u3002",
+        "agent.permission.off": "\u5df2\u505c\u7528",
+        "agent.permission.paused": "\u5df2\u66ab\u505c",
+        "agent.permission.paused_hint": "Agent \u5b58\u53d6\u5df2\u66ab\u505c\u3002\u9078\u64c7\u6b0a\u9650\u4ee5\u6062\u5fa9\u5b58\u53d6\uff0c\u6216\u505c\u7528\u5b58\u53d6\u3002",
+        "agent.token.command": "Agent \u6307\u4ee4",
+        "agent.token.command_output": "\u6307\u4ee4\u8f38\u51fa",
+        "agent.token.connect_required": "\u8acb\u5148\u9023\u7dda\u81f3\u7d42\u7aef\uff0c\u518d\u5efa\u7acb\u6b0a\u6756\u3002",
+        "agent.token.create": "\u5efa\u7acb\u6b0a\u6756",
+        "agent.token.create_3x": "\u5efa\u7acb\u6b0a\u6756 3\u00d7",
+        "agent.token.creating": "\u6b63\u5728\u5efa\u7acb\u6b0a\u6756\u2026",
+        "agent.token.enable_required": "\u8acb\u5148\u555f\u7528\u5916\u90e8 Agent\uff0c\u518d\u5efa\u7acb\u6b0a\u6756\u3002",
+        "agent.token.expired": "\u6b0a\u6756\u5df2\u904e\u671f\u3002\u8acb\u66f4\u65b0\u6b0a\u6756\u4ee5\u7e7c\u7e8c\u3002",
+        "agent.token.idle_remaining": "\u82e5\u7121\u6d3b\u52d5\uff0c\u6b0a\u6756\u5c07\u5728 {seconds} \u79d2\u5f8c\u904e\u671f\u3002",
+        "agent.token.invalidated": "\u6b0a\u6756\u5df2\u5931\u6548\u3002\u8acb\u5efa\u7acb\u65b0\u6b0a\u6756\u4ee5\u7e7c\u7e8c\u3002",
+        "agent.token.local_hint": "\u70ba\u6b64\u7d42\u7aef\u8207\u6b0a\u9650\u5efa\u7acb\u50c5\u9650\u672c\u6a5f\u4f7f\u7528\u7684\u6b0a\u6756\u3002",
+        "agent.token.ready": "\u5df2\u70ba\u6b64\u7d42\u7aef\u8207\u6b0a\u9650\u5efa\u7acb\u6b0a\u6756\u3002",
+        "agent.token.renew": "\u66f4\u65b0\u6b0a\u6756",
+        "agent.token.renew_3x": "\u66f4\u65b0\u6b0a\u6756 3\u00d7",
+        "agent.token.resume_required": "\u8acb\u5148\u6062\u5fa9 Agent \u5b58\u53d6\uff0c\u518d\u5efa\u7acb\u6b0a\u6756\u3002",
+        "agent.token.revoked": "\u6b0a\u6756\u5df2\u64a4\u92b7\u3002\u8acb\u66f4\u65b0\u6b0a\u6756\u4ee5\u7e7c\u7e8c\u3002",
+        "agent.token.tab_active": "Agent \u6b0a\u6756\u6709\u6548\uff08{permission}\uff09\uff1b\u82e5\u7121\u6d3b\u52d5\uff0c\u5c07\u5728 {seconds} \u79d2\u5f8c\u904e\u671f",
+        "agent.token.tab_expired": "Agent \u6b0a\u6756\u5df2\u904e\u671f\uff1b\u8acb\u5efa\u7acb\u65b0\u6b0a\u6756\u4ee5\u7e7c\u7e8c",
+        "agent.token.target_3x_title": "\u70ba {target} \u5efa\u7acb\u9592\u7f6e\u671f\u9650\u70ba\u6a19\u6e96 3 \u500d\u7684\u6b0a\u6756",
+        "agent.token.target_title": "\u70ba {target} \u5efa\u7acb\u6a19\u6e96\u6b0a\u6756",
+        "agent.transfer.committing": "\u6b63\u5728\u5b8c\u6210\u8907\u88fd\uff0c\u5df2\u7121\u6cd5\u505c\u6b62\u3002",
+        "agent.transfer.stop": "\u505c\u6b62",
+        "browser.auth.instructions": "\u8cbc\u4e0a\u700f\u89bd\u5668\u6388\u6b0a\u7db2\u5740\u4ee5\u7e7c\u7e8c\u3002",
+        "browser.auth.required": "\u9700\u8981\u700f\u89bd\u5668\u6388\u6b0a",
+        "common.close": "\u95dc\u9589",
+        "common.copy_url": "\u8907\u88fd\u7db2\u5740",
+        "common.refresh": "\u66f4\u65b0\u72c0\u614b",
+        "settings.agent.approval": "\u9700\u6838\u51c6 + \u6b0a\u6756",
+        "settings.agent.direct": "\u76f4\u63a5\u8f38\u5165 + \u6b0a\u6756",
+        "settings.agent.hint": "\u300c\u6388\u6b0a Agent\u300d\u6703\u5c07\u6b64\u6b0a\u9650\u5957\u7528\u81f3\u76ee\u524d\u5206\u9801\uff0c\u4e26\u5efa\u7acb\u6a19\u6e96\u6b0a\u6756\u3002",
+        "settings.agent.legend": "Agent \u5b58\u53d6",
+        "settings.agent.observe": "\u552f\u8b80 + \u6b0a\u6756",
+        "settings.agent.permission": "Agent \u9810\u8a2d\u6b0a\u9650",
+        "settings.language.hint": "\u4e0b\u6b21\u958b\u555f\u6b64\u9801\u9762\u6642\u5957\u7528\u65bc Agent \u5b58\u53d6\u8207\u672c\u6a5f\u9023\u7dda\u8cc7\u8a0a\uff0c\u5176\u4ed6\u5340\u57df\u4ecd\u986f\u793a\u82f1\u6587\u3002",
+        "settings.language.label": "\u8a9e\u8a00\uff08Agent \u9810\u89bd\uff09"
+    }
+};
+    if (typeof module === 'object' && module.exports) module.exports = messages;
+    else root.StandTermMessages = messages;
+})(globalThis);
diff --git a/templates/index.html b/templates/index.html
index fd62e7e..948e8c8 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -1,5 +1,5 @@
 <!DOCTYPE html>
-<html>
+<html lang="en">
 <head>
     <title>StandTerm</title>
     <!-- Local Fallback Assets -->
@@ -1129,6 +1129,10 @@ <h3>Settings</h3>
                     <div class="settings-tab active" id="tab-general">
                         <fieldset class="settings-fieldset">
                             <legend>General</legend>
+                            <div class="settings-row"><label for="pref-uiLanguage" data-i18n="settings.language.label">Language (Agent preview)</label>
+                                <select id="pref-uiLanguage"><option value="en">English</option><option value="zh-TW" lang="zh-TW">繁體中文（台灣）</option></select>
+                            </div>
+                            <div class="settings-status" data-i18n="settings.language.hint">Applies to Agent access and local connection info next time you open this page. Other areas remain in English.</div>
                             <div class="settings-row"><label for="pref-useCustomMenu">Enable custom context menu</label><input type="checkbox" id="pref-useCustomMenu"></div>
                             <div class="settings-row"><label for="pref-copyOnSelect">Copy on select</label><input type="checkbox" id="pref-copyOnSelect"></div>
                             <div class="settings-row"><label for="pref-enablePicPreview">Enable pic preview</label><input type="checkbox" id="pref-enablePicPreview"></div>
@@ -1140,15 +1144,15 @@ <h3>Settings</h3>
                             </div>
                         </fieldset>
                         <fieldset class="settings-fieldset">
-                            <legend>Agent Access</legend>
-                            <div class="settings-row"><label for="pref-agentAccessMintMode">Agent Mint action</label>
+                            <legend data-i18n="settings.agent.legend">Agent access</legend>
+                            <div class="settings-row"><label for="pref-agentAccessMintMode" data-i18n="settings.agent.permission">Default Agent permission</label>
                                 <select id="pref-agentAccessMintMode">
-                                    <option value="observe">Observer + Mint</option>
-                                    <option value="approval_pending">Approval + Mint</option>
-                                    <option value="direct_active">Full + Mint</option>
+                                    <option value="observe" data-i18n="settings.agent.observe">Read only + token</option>
+                                    <option value="approval_pending" data-i18n="settings.agent.approval">Approval required + token</option>
+                                    <option value="direct_active" data-i18n="settings.agent.direct">Direct input + token</option>
                                 </select>
                             </div>
-                            <div class="settings-status">The tab-bar action applies this permission to the current tab, then mints a standard token.</div>
+                            <div class="settings-status" data-i18n="settings.agent.hint">Authorize agent applies this permission to the current tab and creates a standard token.</div>
                         </fieldset>
                         <fieldset class="settings-fieldset">
                             <legend>Import &amp; Export</legend>
@@ -1438,12 +1442,12 @@ <h3 id="browser-auth-help-title">Manual browser authorization</h3>
             <div id="tabs-list"></div>
             <button id="new-tab-btn" class="status-action" type="button" title="New terminal tab" aria-label="New terminal tab">+</button>
         </div>
-        <button id="agent-pause-btn" class="status-action" type="button" title="Pause Agent terminal input">Pause Agent</button>
-        <button id="agent-status-mint-btn" class="status-action agent-status-mint" title="Mint a standard external-agent token for the active terminal">Mint</button>
-        <button id="agent-status-mint-3x-btn" class="status-action agent-status-mint" title="Mint a 3x idle-time external-agent token for the active terminal">Mint 3&times;</button>
+        <button id="agent-pause-btn" class="status-action" type="button" title="Pause Agent access" data-i18n="agent.pause.action">Pause Agent</button>
+        <button id="agent-status-mint-btn" class="status-action agent-status-mint" title="Create a standard token for the active terminal">Create token</button>
+        <button id="agent-status-mint-3x-btn" class="status-action agent-status-mint" title="Create a token with 3× idle time for the active terminal">Create token 3&times;</button>
         <div id="terminal-tools">
-            <button id="agent-access-mint-btn" class="status-action" type="button" title="Grant Full access and mint a standard token for the current tab">&#x1F916; Agent Mint</button>
-            <button id="agent-connect-btn" class="status-action" type="button" title="Copy the agent prompt for the current tab's environment">Agent Info for Current Tab</button>
+            <button id="agent-access-mint-btn" class="status-action" type="button" title="Authorize Direct input access and create a standard token for the current tab" data-i18n="agent.access.grant">Authorize agent</button>
+            <button id="agent-connect-btn" class="status-action" type="button" title="Copy the agent prompt for the current tab's environment" data-i18n="agent.connection.title" data-i18n-title="agent.connection.tooltip">Agent connection</button>
             <button id="agent-toggle-btn" class="status-action" type="button" title="Show Agent panel">Show Agent Panel</button>
             <button id="agent-tunnel-btn" class="status-action" type="button" title="Set up remote Agent access through this SSH connection" hidden>Agent Tunnel</button>
             <button id="ssh-tunnels-btn" class="status-action" type="button" title="Manage TCP port forwarding through this SSH connection" hidden>Tunnels</button>
@@ -1465,26 +1469,26 @@ <h3 id="browser-auth-help-title">Manual browser authorization</h3>
         <div id="transfer-queue-list" aria-live="polite"></div>
     </section>
     <dialog id="agent-connect-dialog" aria-labelledby="agent-connect-title">
-        <h3 id="agent-connect-title">Agent Info for Current Tab</h3>
-        <p>For an agent running on the <strong>Core host</strong>. If you launched Core with <code>run_wsl.bat</code>, this means WSL, not the Windows browser environment. It can access any individually authorized tab.</p>
+        <h3 id="agent-connect-title" data-i18n="agent.connection.title">Agent connection</h3>
+        <p data-i18n="agent.connection.environment">Run the agent where Core runs (WSL if Core runs in WSL). It can access only individually authorized tabs.</p>
         <ol class="agent-connect-steps">
-            <li>On each target tab, open the Agent panel, enable external agent, choose its permission, and click <strong>Mint</strong>.</li>
-            <li>Click <strong>Copy Prompt</strong> below and paste it to the agent running on the Core host.</li>
-            <li>Ask the agent to run <strong>discover</strong>, then <strong>hello</strong>. Its authenticated requests appear below.</li>
+            <li data-i18n="agent.connection.step_authorize">Choose the default permission in Settings, then Authorize agent on each intended tab. Adjust an authorized tab in the Agent panel.</li>
+            <li data-i18n="agent.connection.step_copy">Copy the prompt to the agent running on the Core host.</li>
+            <li data-i18n="agent.connection.step_confirm">Run discover, then hello. Authenticated requests appear below.</li>
         </ol>
         <div class="agent-connect-url">
-            <label for="agent-connect-url">Agent Info URL</label>
-            <input id="agent-connect-url" readonly aria-label="Agent Info URL">
-            <button id="agent-connect-copy-url" type="button" disabled>Copy URL</button>
+            <label for="agent-connect-url" data-i18n="agent.connection.url">Agent Info URL</label>
+            <input id="agent-connect-url" readonly aria-label="Agent Info URL" data-i18n-aria-label="agent.connection.url">
+            <button id="agent-connect-copy-url" type="button" disabled data-i18n="common.copy_url">Copy URL</button>
         </div>
         <p id="agent-connect-message" role="status"></p>
         <p id="agent-connect-activity" class="agent-connect-activity" aria-live="polite"></p>
-        <textarea id="agent-connect-info" readonly aria-label="Local agent prompt" hidden></textarea>
+        <textarea id="agent-connect-info" readonly aria-label="Local agent prompt" hidden data-i18n-aria-label="agent.connection.prompt"></textarea>
         <div class="agent-tunnel-actions">
-            <button id="agent-connect-open-panel" type="button">Open Agent Panel</button>
-            <button id="agent-connect-refresh" type="button">Refresh Status</button>
-            <button id="agent-connect-copy" type="button" disabled>Copy Prompt</button>
-            <button id="agent-connect-close" type="button">Close</button>
+            <button id="agent-connect-open-panel" type="button" data-i18n="agent.panel.open">Open Agent Panel</button>
+            <button id="agent-connect-refresh" type="button" data-i18n="common.refresh">Refresh Status</button>
+            <button id="agent-connect-copy" type="button" disabled data-i18n="agent.connection.copy">Copy Prompt</button>
+            <button id="agent-connect-close" type="button" data-i18n="common.close">Close</button>
         </div>
     </dialog>
     <dialog id="agent-tunnel-dialog" aria-labelledby="agent-tunnel-title">
@@ -1565,19 +1569,19 @@ <h4>Add tunnel</h4>
     <div id="payload-log"></div>
     <div id="agent-panel">
         <div id="agent-panel-header">
-            <span id="agent-panel-title">Agent</span>
+            <span id="agent-panel-title" data-i18n="agent.name">Agent</span>
             <span id="agent-panel-state">disabled</span>
-            <button type="button" id="agent-panel-close-btn" title="Hide Agent panel" aria-label="Hide Agent panel">&times;</button>
+            <button type="button" id="agent-panel-close-btn" title="Hide Agent panel" aria-label="Hide Agent panel" data-i18n-title="agent.panel.hide" data-i18n-aria-label="agent.panel.hide">&times;</button>
         </div>
         <div id="agent-panel-body">
             <div id="agent-access-row">
                 <button type="button" id="agent-access-toggle-btn">Enable external agent</button>
                 <span id="agent-access-summary">Off</span>
             </div>
-            <div id="agent-mode-controls" aria-label="External agent permission">
-                <button type="button" data-agent-mode="observe" aria-pressed="false">Observer</button>
-                <button type="button" data-agent-mode="approval_pending">Approval</button>
-                <button type="button" data-agent-mode="direct_active">Full</button>
+            <div id="agent-mode-controls" aria-label="External agent permission" data-i18n-aria-label="agent.permission.label">
+                <button type="button" data-agent-mode="observe" aria-pressed="false" data-i18n="agent.permission.observe">Read only</button>
+                <button type="button" data-agent-mode="approval_pending" data-i18n="agent.permission.approval">Approval required</button>
+                <button type="button" data-agent-mode="direct_active" data-i18n="agent.permission.direct">Direct input</button>
             </div>
             <div id="agent-permission-hint">Enable external agent to choose what a local agent can do.</div>
             <div id="agent-gate-state">
@@ -1591,13 +1595,13 @@ <h4>Add tunnel</h4>
             </div>
             <div id="agent-external-box">
                 <div id="agent-external-actions">
-                    <button type="button" id="agent-external-token-btn">Mint token</button>
-                    <button type="button" id="agent-external-token-3x-btn">Mint token 3&times;</button>
+                    <button type="button" id="agent-external-token-btn" data-i18n="agent.token.create">Create token</button>
+                    <button type="button" id="agent-external-token-3x-btn" data-i18n="agent.token.create_3x">Create token 3×</button>
                 </div>
                 <div id="agent-external-hint">Enable external agent before minting a token.</div>
                 <details id="agent-external-output">
-                    <summary>Command output</summary>
-                    <textarea id="agent-external-command" rows="6" readonly spellcheck="false" aria-label="External agent command"></textarea>
+                    <summary data-i18n="agent.token.command_output">Command output</summary>
+                    <textarea id="agent-external-command" rows="6" readonly spellcheck="false" aria-label="External agent command" data-i18n-aria-label="agent.token.command"></textarea>
                 </details>
             </div>
             <details id="agent-advanced-tools">
@@ -1656,6 +1660,8 @@ <h3>Recover StandTerm session</h3>
         </div>
     </div>
 
+    <script src="{{ url_for('static', filename='js/standterm-messages.js') }}"></script>
+    <script src="{{ url_for('static', filename='js/standterm-i18n.js') }}"></script>
     <script src="{{ url_for('static', filename='js/standterm-capabilities.js') }}"></script>
     <script src="{{ url_for('static', filename='js/standterm-ssh-routes.js') }}"></script>
     <script src="{{ url_for('static', filename='js/standterm-ssh-node-auth.js') }}"></script>
@@ -1742,6 +1748,7 @@ <h3>Recover StandTerm session</h3>
             return WINDOWS_TERMINAL_FONT_FACE;
         }
         const PREF_DEFAULTS = {
+            uiLanguage: 'en',
             useCustomMenu: true,
             copyOnSelect: false,
             enablePicPreview: true,
@@ -1808,6 +1815,11 @@ <h3>Recover StandTerm session</h3>
             return AGENT_ACCESS_MINT_MODE_OPTIONS.includes(text) ? text : fallback;
         }
         let prefs = loadPrefs();
+        prefs.uiLanguage = window.StandTermI18n.normalizeLocale(prefs.uiLanguage);
+        const uiText = window.StandTermI18n.create(window.StandTermMessages, prefs.uiLanguage);
+        const t = uiText.t;
+        uiText.apply(document);
+        document.documentElement.lang = uiText.locale;
         prefs.fontSize = normalizeFontSize(prefs.fontSize);
         prefs.fontWeight = normalizeFontWeight(prefs.fontWeight);
         prefs.cursorStyle = normalizeCursorStyle(prefs.cursorStyle);
@@ -2890,8 +2902,8 @@ <h3>Recover StandTerm session</h3>
                 document.getElementById(elementId).textContent = entries.length ? entries.map(entry => {
                     const time = Number(entry.last_request_at);
                     return `${entry.terminal_id}: ${time > 0 && Number.isFinite(time)
-                        ? `last authenticated request ${new Date(time * 1000).toLocaleString()}` : 'waiting for agent'}`;
-                }).join('\n') : 'No active grants. Enable Agent and authorize the intended tabs first.';
+                        ? t('agent.connection.request_at', { time: new Date(time * 1000).toLocaleString(uiText.locale) }) : t('agent.connection.waiting')}`;
+                }).join('\n') : t('agent.connection.no_grants');
             }
 
             function setAgentConnectionMessage(element, message, copyFailed = false) {
@@ -2905,12 +2917,12 @@ <h3>Recover StandTerm session</h3>
                 if (!field.value) return;
                 try {
                     await navigator.clipboard.writeText(field.value);
-                    setAgentConnectionMessage(messageElement, 'Copied. Paste this to the agent in the indicated environment.');
+                    setAgentConnectionMessage(messageElement, t('agent.connection.copied'));
                 } catch (_error) {
                     field.focus();
                     field.select();
                     const shortcut = isApplePlatform() ? 'Command+C' : 'Ctrl+C';
-                    setAgentConnectionMessage(messageElement, `Not copied. Text selected; press ${shortcut} to copy it manually.`, true);
+                    setAgentConnectionMessage(messageElement, t('agent.connection.copy_failed', { shortcut }), true);
                     messageElement.scrollIntoView({ block: 'nearest' });
                 }
             }
@@ -2925,10 +2937,10 @@ <h3>Recover StandTerm session</h3>
                 document.getElementById('agent-connect-copy').disabled = true;
                 document.getElementById('agent-connect-copy-url').disabled = true;
                 if (!socket.connected) {
-                    setAgentConnectionMessage(agentConnectMessage, 'Core is disconnected. Reconnect before copying connection info.');
+                    setAgentConnectionMessage(agentConnectMessage, t('agent.connection.disconnected'));
                     return;
                 }
-                setAgentConnectionMessage(agentConnectMessage, 'Loading connection info…');
+                setAgentConnectionMessage(agentConnectMessage, t('agent.connection.loading'));
                 socket.emit('agent_connect_info', result => {
                     if (requestId !== agentConnectRequest || !agentConnectDialog.open) return;
                     const available = result && result.status === 'ok';
@@ -2940,8 +2952,8 @@ <h3>Recover StandTerm session</h3>
                     agentConnectActivity = available ? result.terminals || [] : [];
                     renderAgentConnectionActivity('agent-connect-activity', agentConnectActivity);
                     setAgentConnectionMessage(agentConnectMessage, available
-                        ? 'Copy Prompt to the agent running on the Core host. Its first authenticated request confirms access.'
-                        : result?.message || 'Connection info unavailable.');
+                        ? t('agent.connection.ready')
+                        : result?.message || t('agent.connection.unavailable'));
                 });
             }
 
@@ -3144,7 +3156,7 @@ <h3>Recover StandTerm session</h3>
             });
 
             function setAgentTunnelInfoView(infoView) {
-                document.getElementById('agent-tunnel-title').textContent = infoView ? 'Agent Info for Current Tab' : 'Agent Tunnel';
+                document.getElementById('agent-tunnel-title').textContent = infoView ? t('agent.connection.title') : 'Agent Tunnel';
                 document.getElementById('agent-tunnel-setup').hidden = infoView;
                 document.getElementById('agent-tunnel-apply').hidden = infoView;
                 document.getElementById('agent-tunnel-stop').hidden = infoView;
@@ -3381,7 +3393,7 @@ <h3>Recover StandTerm session</h3>
                 agentPauseBtn.classList.toggle('visible', visible);
                 agentToggleBtn.classList.toggle('shifted', visible);
                 agentPauseBtn.disabled = !(visible && socket && socket.connected && state && state.connected);
-                agentPauseBtn.title = state ? `Pause Agent input for ${getTerminalDisplayLabel(state)} (${state.id})` : 'Pause Agent input';
+                agentPauseBtn.title = t('agent.pause.target', { target: state ? `${getTerminalDisplayLabel(state)} (${state.id})` : t('agent.access.current_tab') });
                 agentPauseBtn.setAttribute('aria-label', agentPauseBtn.title);
                 updatePipStatus(pipTerminalState);
             }
@@ -3552,19 +3564,19 @@ <h3>Recover StandTerm session</h3>
             }
 
             function formatAgentModeLabel(mode) {
-                if (mode === AGENT_MODE_OBSERVE) return 'Observer';
-                if (mode === AGENT_MODE_APPROVAL_PENDING) return 'Approval';
-                if (mode === AGENT_MODE_DIRECT_ACTIVE) return 'Full';
-                if (mode === AGENT_MODE_PAUSED) return 'Paused';
-                return 'Off';
+                if (mode === AGENT_MODE_OBSERVE) return t('agent.permission.observe');
+                if (mode === AGENT_MODE_APPROVAL_PENDING) return t('agent.permission.approval');
+                if (mode === AGENT_MODE_DIRECT_ACTIVE) return t('agent.permission.direct');
+                if (mode === AGENT_MODE_PAUSED) return t('agent.permission.paused');
+                return t('agent.permission.off');
             }
 
             function formatExternalAgentPermissionHint(mode) {
-                if (mode === AGENT_MODE_OBSERVE) return 'Observer can read terminal output. It cannot type.';
-                if (mode === AGENT_MODE_APPROVAL_PENDING) return 'Approval lets the agent propose input. You approve before it is sent. Remote file copies always need separate approval.';
-                if (mode === AGENT_MODE_DIRECT_ACTIVE) return 'Full lets the agent type into this terminal without approval. Remote file copies still need separate approval.';
-                if (mode === AGENT_MODE_PAUSED) return 'Agent input is paused. Choose a permission to resume or disable access.';
-                return 'Enable external agent to choose what a local agent can do.';
+                if (mode === AGENT_MODE_OBSERVE) return t('agent.permission.observe_hint');
+                if (mode === AGENT_MODE_APPROVAL_PENDING) return t('agent.permission.approval_hint');
+                if (mode === AGENT_MODE_DIRECT_ACTIVE) return t('agent.permission.direct_hint');
+                if (mode === AGENT_MODE_PAUSED) return t('agent.permission.paused_hint');
+                return t('agent.permission.disabled_hint');
             }
 
             function clearAgentExternalTokenCountdownTimer() {
@@ -3737,37 +3749,37 @@ <h3>Recover StandTerm session</h3>
                 agentExternalTokenBtn.disabled = disabled;
                 agentExternalToken3xBtn.disabled = disabled;
                 agentExternalTokenBtn.innerText = minting
-                    ? 'Minting...'
-                    : (hasRenewableAgentExternalToken(state) ? 'Renew token' : 'Mint token');
+                    ? t('agent.token.creating')
+                    : (hasRenewableAgentExternalToken(state) ? t('agent.token.renew') : t('agent.token.create'));
                 agentExternalToken3xBtn.innerText = minting
-                    ? 'Minting...'
-                    : (hasRenewableAgentExternalToken(state) ? 'Renew token 3×' : 'Mint token 3×');
+                    ? t('agent.token.creating')
+                    : (hasRenewableAgentExternalToken(state) ? t('agent.token.renew_3x') : t('agent.token.create_3x'));
                 if (!usable) {
-                    agentExternalHint.innerText = 'Connect a terminal before minting a token.';
+                    agentExternalHint.innerText = t('agent.token.connect_required');
                 } else if (minting) {
-                    agentExternalHint.innerText = 'Minting external agent token...';
+                    agentExternalHint.innerText = t('agent.token.creating');
                 } else if (paused) {
-                    agentExternalHint.innerText = 'Resume Observer, Approval, or Full before minting a token.';
+                    agentExternalHint.innerText = t('agent.token.resume_required');
                 } else if (mode === AGENT_MODE_DISABLED) {
-                    agentExternalHint.innerText = 'Enable external agent before minting a token.';
+                    agentExternalHint.innerText = t('agent.token.enable_required');
                 } else if (hasRenewableAgentExternalToken(state) && agent) {
                     if (token.status === 'revoked') {
-                        agentExternalHint.innerText = 'Permission revoked. Renew the token to continue.';
+                        agentExternalHint.innerText = t('agent.token.revoked');
                         return;
                     }
                     const secondsRemaining = getAgentExternalTokenSecondsRemaining(agent);
                     if (secondsRemaining === null) {
-                        agentExternalHint.innerText = 'Token minted for this terminal and permission.';
+                        agentExternalHint.innerText = t('agent.token.ready');
                     } else if (secondsRemaining <= 0) {
-                        agentExternalHint.innerText = 'Permission expired. Renew the token to continue.';
+                        agentExternalHint.innerText = t('agent.token.expired');
                     } else {
-                        agentExternalHint.innerText = `Permission expires in ${secondsRemaining}s without activity.`;
+                        agentExternalHint.innerText = t('agent.token.idle_remaining', { seconds: secondsRemaining });
                     }
                     scheduleAgentExternalTokenCountdown(secondsRemaining);
                 } else if (token && token.status === 'invalidated') {
-                    agentExternalHint.innerText = 'Permission invalidated. Mint a new token to continue.';
+                    agentExternalHint.innerText = t('agent.token.invalidated');
                 } else {
-                    agentExternalHint.innerText = 'Mint a local-only token for this terminal and permission.';
+                    agentExternalHint.innerText = t('agent.token.local_hint');
                 }
             }
 
@@ -3788,12 +3800,12 @@ <h3>Recover StandTerm session</h3>
                     button.classList.toggle('visible', available);
                     button.disabled = !available || minting;
                 });
-                agentStatusMintBtn.innerText = minting ? 'Minting...' : 'Mint';
-                agentStatusMint3xBtn.innerText = minting ? 'Minting...' : 'Mint 3×';
+                agentStatusMintBtn.innerText = minting ? t('agent.token.creating') : t('agent.token.create');
+                agentStatusMint3xBtn.innerText = minting ? t('agent.token.creating') : t('agent.token.create_3x');
                 if (state) {
                     const target = state.label || state.id;
-                    agentStatusMintBtn.title = `Mint a standard external-agent token for ${target}`;
-                    agentStatusMint3xBtn.title = `Mint a 3× idle-time external-agent token for ${target}`;
+                    agentStatusMintBtn.title = t('agent.token.target_title', { target });
+                    agentStatusMint3xBtn.title = t('agent.token.target_3x_title', { target });
                 }
             }
 
@@ -3804,11 +3816,12 @@ <h3>Recover StandTerm session</h3>
                 const minting = !!(token && token.status === 'minting');
                 const available = canUseAgentPanel(state) && !starting && !minting;
                 agentAccessMintBtn.disabled = !available;
-                agentAccessMintBtn.innerText = starting ? 'Starting…' : (minting ? 'Minting…' : '🤖 Agent Mint');
+                agentAccessMintBtn.innerText = starting ? t('agent.access.starting') : (minting ? t('agent.token.creating') : `🤖 ${t('agent.access.grant')}`);
                 const modeLabel = formatAgentModeLabel(prefs.agentAccessMintMode);
-                agentAccessMintBtn.title = state
-                    ? `Grant ${modeLabel} access and mint a standard token for ${getTerminalDisplayLabel(state)} (${state.id})`
-                    : `Grant ${modeLabel} access and mint a standard token for the current tab`;
+                agentAccessMintBtn.title = t('agent.access.grant_title', {
+                    permission: modeLabel,
+                    target: state ? `${getTerminalDisplayLabel(state)} (${state.id})` : t('agent.access.current_tab')
+                });
             }
 
             function applyAgentExternalTokenState(data) {
@@ -3925,21 +3938,21 @@ <h3>Recover StandTerm session</h3>
                 agentPanel.classList.toggle('visible', usable && agentPanelVisible);
                 const mainPanelVisible = agentPanelVisible && !agentPanelTerminalIdOverride;
                 agentToggleBtn.disabled = !canUseAgentPanel(getActiveTerminalState());
-                agentToggleBtn.innerText = mainPanelVisible ? 'Hide Agent Panel' : 'Show Agent Panel';
-                agentToggleBtn.title = mainPanelVisible ? 'Hide Agent panel' : 'Show Agent panel';
+                agentToggleBtn.innerText = t(mainPanelVisible ? 'agent.panel.hide' : 'agent.panel.show');
+                agentToggleBtn.title = t(mainPanelVisible ? 'agent.panel.hide' : 'agent.panel.show');
                 const agent = state ? state.agent : null;
                 const mode = agent ? agent.mode : AGENT_MODE_DISABLED;
                 const pending = agent ? agent.pendingActions : 0;
                 const accessEnabled = mode !== AGENT_MODE_DISABLED;
                 const modeLabel = formatAgentModeLabel(mode);
-                agentPanelState.innerText = state ? `${state.label || state.id} · ${modeLabel}${pending ? ` · ${pending} pending` : ''}` : 'Off';
+                agentPanelState.innerText = state ? `${state.label || state.id} · ${modeLabel}${pending ? ` · ${t('agent.panel.pending', { count: pending })}` : ''}` : t('agent.permission.off');
                 agentAccessToggleBtn.disabled = !usable;
-                agentAccessToggleBtn.innerText = accessEnabled ? 'Disable external agent' : 'Enable external agent';
+                agentAccessToggleBtn.innerText = t(accessEnabled ? 'agent.access.disable' : 'agent.access.enable');
                 agentAccessToggleBtn.classList.toggle('disable', accessEnabled);
                 agentAccessToggleBtn.title = accessEnabled
-                    ? 'Turn off external agent access for this terminal'
-                    : 'Enable external agent access in Observer mode';
-                agentAccessSummary.innerText = accessEnabled ? modeLabel : 'Off';
+                    ? t('agent.access.disable_title')
+                    : t('agent.access.enable_title');
+                agentAccessSummary.innerText = accessEnabled ? modeLabel : t('agent.permission.off');
                 agentPermissionHint.innerText = formatExternalAgentPermissionHint(mode);
                 agentModeButtons.forEach(button => {
                     const buttonMode = button.dataset.agentMode;
@@ -6172,6 +6185,7 @@ <h3>Recover StandTerm session</h3>
                 Object.entries(PREF_DEFAULTS).forEach(([key, defaultValue]) => {
                     if (typeof source[key] === typeof defaultValue) result[key] = source[key];
                 });
+                if ('uiLanguage' in result) result.uiLanguage = window.StandTermI18n.normalizeLocale(result.uiLanguage);
                 if (result.urlClickAction && !['overlay', 'popup', 'newtab'].includes(result.urlClickAction)) delete result.urlClickAction;
                 if (result.colorScheme && !SCHEMES[result.colorScheme]) delete result.colorScheme;
                 if (result.fontFace) result.fontFace = result.fontFace.slice(0, 240);
@@ -6425,8 +6439,8 @@ <h3>Recover StandTerm session</h3>
                 if (state.agentCountdownEl.textContent !== countdown) state.agentCountdownEl.textContent = countdown;
                 state.agentCountdownEl.hidden = !active;
                 const title = active
-                    ? `${label}\nExternal agent token active (${formatAgentModeLabel(state.agent.mode)}); ${secondsRemaining}s remaining without activity`
-                    : expired ? `${label}\nExternal agent token expired; mint again to continue` : label;
+                    ? `${label}\n${t('agent.token.tab_active', { permission: formatAgentModeLabel(state.agent.mode), seconds: secondsRemaining })}`
+                    : expired ? `${label}\n${t('agent.token.tab_expired')}` : label;
                 if (state.tabEl.title !== title) {
                     state.tabEl.title = title;
                     state.tabEl.setAttribute('aria-label', title);
@@ -11734,6 +11748,7 @@ <h3>Recover StandTerm session</h3>
             }
             document.getElementById('pref-colorScheme').onchange = renderColorSchemePreview;
             const openSettings = () => {
+                document.getElementById('pref-uiLanguage').value = prefs.uiLanguage;
                 document.getElementById('pref-useCustomMenu').checked = prefs.useCustomMenu;
                 document.getElementById('pref-copyOnSelect').checked = prefs.copyOnSelect;
                 document.getElementById('pref-enablePicPreview').checked = prefs.enablePicPreview;
@@ -11962,6 +11977,7 @@ <h3>Recover StandTerm session</h3>
                 };
             });
             document.getElementById('settings-save').onclick = () => {
+                prefs.uiLanguage = window.StandTermI18n.normalizeLocale(document.getElementById('pref-uiLanguage').value);
                 prefs.useCustomMenu = document.getElementById('pref-useCustomMenu').checked;
                 prefs.copyOnSelect = document.getElementById('pref-copyOnSelect').checked;
                 prefs.enablePicPreview = document.getElementById('pref-enablePicPreview').checked;
diff --git a/tests/agent_browser_smoke.py b/tests/agent_browser_smoke.py
index 83d6b9d..1ed2cc1 100644
--- a/tests/agent_browser_smoke.py
+++ b/tests/agent_browser_smoke.py
@@ -142,9 +142,12 @@ def stop_server(proc):
         proc.wait(timeout=5)
 
 
-def new_page(browser, access_url):
-    context = browser.new_context(viewport={'width': 1280, 'height': 800})
+def new_page(browser, access_url, ui_language=None):
+    context = browser.new_context(viewport={'width': 1280, 'height': 800}, locale='en-US')
     page = context.new_page()
+    if ui_language is not None:
+        preferences = json.dumps({'uiLanguage': ui_language})
+        page.add_init_script(f"localStorage.setItem('terminal.pref.v1', JSON.stringify({preferences}));")
     page.goto(debug_url(access_url), wait_until='domcontentloaded')
     # Keep debug-only overlays from covering controls during normal UI tests.
     page.add_style_tag(content='#debug-hud, #payload-log { display: none !important; }')
@@ -614,7 +617,7 @@ def test_agent_mint_quick_action_applies_saved_permission(browser, access_url):
         )
         check(placement == {
             'firstTool': 'agent-access-mint-btn',
-            'text': '🤖 Agent Mint',
+            'text': '🤖 Authorize agent',
             'disabled': False,
             'panelVisible': False,
         }, 'Agent Mint was not the ready leftmost right-side action')
@@ -637,7 +640,7 @@ def test_agent_mint_quick_action_applies_saved_permission(browser, access_url):
         check(minted['mode'] == 'direct_active', 'one-click Agent Mint did not apply Full permission')
         check(minted['external_token']['idleTimeoutMultiplier'] == 1,
               'one-click Agent Mint did not mint the standard token lifetime')
-        check(page.locator('#agent-access-mint-btn').inner_text() == '🤖 Agent Mint',
+        check(page.locator('#agent-access-mint-btn').inner_text() == '🤖 Authorize agent',
               'Agent Mint action did not return to its ready label')
         mode_events = [
             entry['args'][0] for entry in get_emitted(page, 'agent_mode_set')
@@ -660,12 +663,108 @@ def test_agent_mint_quick_action_applies_saved_permission(browser, access_url):
             }""",
             timeout=10000,
         )
-        check('Grant Approval access' in page.locator('#agent-access-mint-btn').get_attribute('title'),
+        check('Authorize Approval required access' in page.locator('#agent-access-mint-btn').get_attribute('title'),
               'Agent Mint title did not reflect the saved permission')
     finally:
         close_context(context)
 
 
+def test_agent_language_preview_preserves_access_and_applies_on_next_page(browser, access_url):
+    context, page = new_page(browser, access_url, ui_language='zh-TW')
+    token_requests = []
+    page.on('request', lambda request: token_requests.append(request.url)
+            if request.method == 'POST' and urllib.parse.urlparse(request.url).path == '/agent/external/token'
+            else None)
+    try:
+        check(page.locator('html').get_attribute('lang') == 'zh-TW', 'saved language did not set the document language')
+        check(page.inner_text('#agent-access-mint-btn') == '🤖 授權 Agent', 'authorization action was not localized')
+        check(page.inner_text('#agent-connect-btn') == 'Agent 連線', 'connection action was not localized')
+        clear_emitted(page)
+        page.click('#agent-access-mint-btn')
+        wait_for_agent(page, "state.mode === 'direct_active' && state.external_token?.status === 'active'")
+        check(len(token_requests) == 1, 'localized authorization did not create exactly one token')
+        check([entry['args'][0] for entry in get_emitted(page, 'agent_mode_set')] == [
+            {'terminal_id': TERMINAL_ID, 'mode': 'direct_active'}
+        ], 'localized authorization changed the permission protocol value')
+        check('--token' in active_agent_state(page)['external_token']['command'],
+              'localized authorization did not preserve the generated command')
+
+        page.click('#agent-toggle-btn')
+        page.wait_for_selector('#agent-panel.visible')
+        modes = page.locator('[data-agent-mode]').evaluate_all(
+            "buttons => buttons.map(button => ({value: button.dataset.agentMode, label: button.innerText}))"
+        )
+        check(modes == [
+            {'value': 'observe', 'label': '唯讀'},
+            {'value': 'approval_pending', 'label': '需核准'},
+            {'value': 'direct_active', 'label': '直接輸入'},
+        ], 'localized permission labels changed their protocol values')
+        check(page.locator('#agent-mode-controls').get_attribute('aria-label') == 'Agent 權限',
+              'permission selector accessible name was not localized')
+        check(page.inner_text('#agent-external-token-btn') == '更新權杖', 'active token action was not localized')
+        check('檔案複製仍需核准' in page.inner_text('#agent-permission-hint'),
+              'localized direct input omitted file-copy approval')
+        page.click('#agent-panel-close-btn')
+
+        page.evaluate('''() => Object.defineProperty(navigator, 'clipboard', {
+            configurable: true, value: {writeText: async text => {window.copiedAgentText = text;}}
+        })''')
+        page.click('#agent-connect-btn')
+        page.wait_for_selector('#agent-connect-copy:not([disabled])')
+        check(page.get_by_role('dialog', name='Agent 連線').is_visible(), 'connection dialog accessible name was not localized')
+        check(page.locator('#agent-connect-url').get_attribute('aria-label') == 'Agent 資訊網址',
+              'connection URL accessible name was not localized')
+        check(page.locator('#agent-connect-info').get_attribute('aria-label') == 'Agent 連線指引',
+              'connection prompt accessible name was not localized')
+        check(page.inner_text('#agent-connect-copy') == '複製連線指引', 'connection copy action was not localized')
+        check('main: 等待 Agent' in page.inner_text('#agent-connect-activity'),
+              'localized connection activity did not distinguish a grant from Agent activity')
+        prompt = page.input_value('#agent-connect-info')
+        check('Run discover, then hello' in prompt, 'display language translated the machine-facing connection prompt')
+        page.click('#agent-connect-copy')
+        page.wait_for_function('text => window.copiedAgentText === text', arg=prompt)
+        check('已複製' in page.inner_text('#agent-connect-message'), 'clipboard result was not localized')
+        page.click('#agent-connect-close')
+
+        page.evaluate('() => { window.languagePreviewSentinel = true; }')
+        before = active_agent_state(page)
+        socket_before = page.evaluate('() => window.terminalTest.getSocketState()')
+        requests_before = len(token_requests)
+        page.click('#quick-settings')
+        check(page.input_value('#pref-uiLanguage') == 'zh-TW', 'settings did not show the saved language')
+        check(page.input_value('#pref-agentAccessMintMode') == 'direct_active', 'language changed the saved permission')
+        page.select_option('#pref-uiLanguage', 'en')
+        clear_emitted(page)
+        page.click('#settings-save')
+        page.wait_for_selector('#settings-modal.open', state='hidden')
+        check(page.evaluate("() => JSON.parse(localStorage.getItem('terminal.pref.v1')).uiLanguage") == 'en',
+              'settings did not save the display preference')
+        check(page.evaluate('() => window.languagePreviewSentinel === true'), 'saving language reloaded the active page')
+        check(page.inner_text('#agent-access-mint-btn') == '🤖 授權 Agent', 'language changed before opening another page')
+        check(page.locator('html').get_attribute('lang') == 'zh-TW', 'active document language changed before reopening')
+        after = active_agent_state(page)
+        for field in ['terminal_id', 'connected', 'session_id', 'viewer_id', 'agent_binding_id',
+                      'mode', 'mode_version', 'external_token']:
+            check(after[field] == before[field], f'saving language changed Agent state field {field}')
+        check(page.evaluate('() => window.terminalTest.getSocketState()') == socket_before,
+              'saving language changed the active socket')
+        check(len(token_requests) == requests_before, 'saving language created or renewed a token')
+        check(not any(entry['event'] in {'agent_attach', 'agent_detach', 'agent_mode_set', 'agent_pause', 'start_ssh', 'stop_ssh'}
+                      for entry in get_emitted(page)), 'saving language emitted an access or connection mutation')
+
+        next_page = context.new_page()
+        next_page.goto(debug_url(access_url), wait_until='domcontentloaded')
+        next_page.wait_for_function('() => !!window.terminalTest', timeout=10000)
+        check(next_page.locator('html').get_attribute('lang') == 'en', 'new page did not apply the saved language')
+        check(next_page.inner_text('#agent-access-mint-btn') == '🤖 Authorize agent', 'new page did not show English authorization')
+        check(next_page.inner_text('#agent-connect-btn') == 'Agent connection', 'new page did not show English connection text')
+        check(next_page.locator('#agent-mode-controls').get_attribute('aria-label') == 'Agent permission',
+              'new page did not apply English accessible names')
+        check(page.inner_text('#agent-access-mint-btn') == '🤖 授權 Agent', 'new page changed the existing page language')
+    finally:
+        close_context(context)
+
+
 def test_agent_panel_can_be_dragged(browser, access_url):
     context, page = new_page(browser, access_url)
     try:
@@ -1989,9 +2088,9 @@ def test_agent_panel_status_gates_and_external_hint(browser, access_url):
             })"""
         )
         check(enabled_external['accessText'] == 'Disable external agent', 'agent access toggle did not offer disable after enabling')
-        check(enabled_external['modeLabels'] == ['Observer', 'Approval', 'Full'], 'agent permission buttons did not use user-facing labels')
+        check(enabled_external['modeLabels'] == ['Read only', 'Approval required', 'Direct input'], 'agent permission buttons did not use user-facing labels')
         check(enabled_external['buttonDisabled'] is False, 'external token button did not enable in observe mode')
-        check('Mint' in enabled_external['hint'], 'external token hint did not show available state')
+        check('Create a local-only token' in enabled_external['hint'], 'external token hint did not show available state')
 
         panel_mint_state = page.evaluate(
             """() => ({
@@ -2063,7 +2162,7 @@ def test_external_token_tab_indicator_tracks_background_lifecycle(browser, acces
               'Background tab lost its minted-token indicator')
         check(page.locator('.terminal-tab.active.agent-token-active').count() == 0,
               'New tab inherited the other terminal token indicator')
-        check('External agent token active' in page.locator(main_tab).get_attribute('title'),
+        check('Agent token active' in page.locator(main_tab).get_attribute('title'),
               'Active token has no text explanation')
         color = lambda: page.locator(main_tab + ' .tab-state').evaluate(
             'element => getComputedStyle(element).backgroundColor')
@@ -2098,7 +2197,7 @@ def token_event(status, remaining_ms):
         token_event('revoked', 60000)
         check(page.locator(main_tab + '.agent-token-active').count() == 0, 'Revoked token stayed bright')
         check(page.locator(main_tab + '.agent-token-expired').count() == 0, 'Revocation was shown as expiry')
-        check('External agent token' not in page.locator(main_tab).get_attribute('title'),
+        check('Agent token' not in page.locator(main_tab).get_attribute('title'),
               'Revoked token tooltip remained stale')
         check(page.locator(main_tab + ' .tab-agent-countdown').is_hidden(),
               'Revoked token retained a countdown label')
@@ -2190,7 +2289,7 @@ def test_session_recovery_new_tab_can_renew_external_agent_token(browser, access
                 command: document.getElementById('agent-external-command').value
             })"""
         )
-        check(recovered_token_ui['buttonText'] == 'Mint token', 'new terminal reused stale external token command state')
+        check(recovered_token_ui['buttonText'] == 'Create token', 'new terminal reused stale external token command state')
         check(recovered_token_ui['command'] == '', 'new terminal kept stale external token command text')
         page.evaluate("() => document.getElementById('agent-external-token-btn').click()")
         page.wait_for_function(
@@ -4001,7 +4100,7 @@ def test_core_agent_connect_info_can_be_copied_and_confirmed(browser, access_url
         check('No active grants' in page.inner_text('#agent-connect-activity'), 'Missing authorization was not explained')
         check(page.locator('#agent-tunnel-btn').is_hidden(), 'Local shell offered an SSH tunnel')
         check(page.locator('#agent-remote-info-btn').count() == 0, 'A separate remote Agent Info button remains')
-        check(page.inner_text('#agent-connect-btn') == 'Agent Info for Current Tab', 'Info button did not identify its tab context')
+        check(page.inner_text('#agent-connect-btn') == 'Agent connection', 'Info button did not identify the Agent connection workflow')
         check(page.inner_text('#agent-connect-copy') == 'Copy Prompt', 'Local info did not offer a prompt')
         page.click('#agent-connect-copy-url')
         page.wait_for_function('url => window.copiedAgentText === url', arg=agentinfo_url)
@@ -4137,7 +4236,7 @@ def ready(carrier, port):
         page.wait_for_function('text => window.copiedAgentText === text', arg=prompt)
         page.click('#agent-tunnel-close')
         page.click('#agent-connect-btn')
-        check(page.inner_text('#agent-tunnel-title') == 'Agent Info for Current Tab', 'Remote shortcut opened the wrong view')
+        check(page.inner_text('#agent-tunnel-title') == 'Agent connection', 'Remote shortcut opened the wrong view')
         check(page.locator('#agent-tunnel-setup').is_hidden(), 'Remote info repeated setup controls')
         check(page.locator('#agent-tunnel-copy').is_hidden(), 'Remote shortcut offered a stale cached prompt')
         page.evaluate('payload => window.terminalTest.completeAgentTunnelRequestForTest(1, payload)', first)
@@ -4871,6 +4970,7 @@ def main():
         test_agent_panel_can_be_dragged,
         test_toolbar_pause_targets_main_tab_not_panel_override,
         test_agent_mint_quick_action_applies_saved_permission,
+        test_agent_language_preview_preserves_access_and_applies_on_next_page,
         test_terminal_pip_hides_selected_tab_and_keeps_background_tab,
         test_sftp_status_actions_and_terminal_pip_transition,
         test_sftp_send_context_action_is_limited_to_connected_ssh_tabs,
diff --git a/tests/ui_i18n_smoke.cjs b/tests/ui_i18n_smoke.cjs
new file mode 100644
index 0000000..e5d1722
--- /dev/null
+++ b/tests/ui_i18n_smoke.cjs
@@ -0,0 +1,97 @@
+'use strict';
+
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const { test } = require('node:test');
+const vm = require('node:vm');
+const i18n = require('../static/js/standterm-i18n.js');
+
+test('reviewed translations fall back to English and unknown keys remain visible', () => {
+    const messages = { en: { 'test.ready': 'Ready', 'test.pending': 'Pending', 'test.empty': 'Empty' },
+        'zh-TW': { 'test.ready': 'Ready translation', 'test.empty': '' } };
+    const translated = i18n.create(messages, 'zh-TW');
+    assert.equal(translated.locale, 'zh-TW');
+    assert.equal(translated.t('test.ready'), 'Ready translation');
+    assert.equal(translated.t('test.pending'), 'Pending');
+    assert.equal(translated.t('test.empty'), 'Empty');
+    assert.equal(translated.t('test.missing'), 'test.missing');
+    assert.equal(i18n.create({ en: messages.en }, 'zh-TW').t('test.ready'), 'Ready');
+    assert.equal(i18n.create({}, 'en').t('test.missing'), 'test.missing');
+});
+
+test('unsupported locale input consistently selects English', () => {
+    for (const locale of [undefined, null, '', 'en', 'fr', 'zh-CN', 'zh-TW<script>', {}, 1]) {
+        const translator = i18n.create({ en: { 'test.ready': 'Ready' },
+            'zh-TW': { 'test.ready': 'Ready translation' } }, locale);
+        assert.equal(translator.locale, 'en');
+        assert.equal(translator.t('test.ready'), 'Ready');
+    }
+});
+
+test('interpolation is literal, nonrecursive and preserves missing placeholders', () => {
+    const translator = i18n.create({ en: {
+        'test.message': '{host} / {host} / {count} / {enabled} / {missing}',
+    } }, 'en');
+    assert.equal(translator.t('test.message', { host: '{count} <$&>', count: 0, enabled: false }),
+        '{count} <$&> / {count} <$&> / 0 / false / {missing}');
+    assert.equal(translator.t('test.message'), '{host} / {host} / {count} / {enabled} / {missing}');
+});
+
+test('prototype properties cannot become messages or interpolation values', () => {
+    const english = Object.assign(Object.create({ 'test.inherited': 'Not a message' }),
+        { 'test.message': '{host}' });
+    const translated = Object.create({ 'test.message': 'Not a translation' });
+    const translator = i18n.create({ en: english, 'zh-TW': translated }, 'zh-TW');
+    assert.equal(translator.t('test.inherited'), 'test.inherited');
+    assert.equal(translator.t('toString'), 'toString');
+    assert.equal(translator.t('test.message', Object.create({ host: 'Not a parameter' })), '{host}');
+});
+
+function element(attributes) {
+    return {
+        attributes: { ...attributes },
+        dataset: { i18n: attributes['data-i18n'] },
+        textContent: 'Original text',
+        set innerHTML(_value) { assert.fail('Translations must not be interpreted as HTML'); },
+        getAttribute(name) { return this.attributes[name]; },
+        setAttribute(name, value) { this.attributes[name] = value; },
+    };
+}
+
+test('DOM application uses text and only the allowed display attributes', () => {
+    const markup = '<img src=x onerror="alert(1)"> & {host}';
+    const translated = i18n.create({ en: { 'test.text': markup, 'test.attribute': 'Display label' } }, 'en');
+    const button = element({ 'data-i18n': 'test.text', 'data-i18n-title': 'test.attribute',
+        'data-i18n-aria-label': 'test.attribute', 'data-agent-mode': 'observe' });
+    const input = element({ 'data-i18n-placeholder': 'test.attribute', value: 'operator input' });
+    const link = element({ 'data-i18n-href': 'test.text', href: '/unchanged',
+        'data-i18n-onclick': 'test.text', onclick: 'unchanged',
+        'data-i18n-value': 'test.text', value: 'typed-control-value' });
+    const elements = [button, input, link];
+    const root = { querySelectorAll(selector) {
+        const match = /^\[([a-z0-9-]+)\]$/.exec(selector);
+        assert.ok(match, `Unexpected selector: ${selector}`);
+        return elements.filter(item => Object.hasOwn(item.attributes, match[1]));
+    } };
+    translated.apply(root);
+    assert.equal(button.textContent, markup);
+    assert.equal(button.attributes.title, 'Display label');
+    assert.equal(button.attributes['aria-label'], 'Display label');
+    assert.equal(button.attributes['data-agent-mode'], 'observe');
+    assert.equal(input.attributes.placeholder, 'Display label');
+    assert.equal(input.attributes.value, 'operator input');
+    assert.equal(input.textContent, 'Original text');
+    assert.equal(link.attributes.href, '/unchanged');
+    assert.equal(link.attributes.onclick, 'unchanged');
+    assert.equal(link.attributes.value, 'typed-control-value');
+    assert.equal(link.textContent, 'Original text');
+});
+
+test('the browser entry point exposes the same translation API without CommonJS', () => {
+    const context = vm.createContext({});
+    vm.runInContext(fs.readFileSync(path.join(__dirname, '../static/js/standterm-i18n.js'), 'utf8'), context);
+    const translator = context.StandTermI18n.create({ en: { 'test.ready': 'Ready' } }, 'en');
+    assert.equal(translator.t('test.ready'), 'Ready');
+    assert.equal(typeof translator.apply, 'function');
+});
diff --git a/tests/ui_messages_smoke.py b/tests/ui_messages_smoke.py
new file mode 100644
index 0000000..e76b8db
--- /dev/null
+++ b/tests/ui_messages_smoke.py
@@ -0,0 +1,137 @@
+#!/usr/bin/env python3
+"""Exercise translation review gates and generated-catalog checks in isolation."""
+
+import csv
+from pathlib import Path
+import runpy
+import shutil
+import subprocess
+import sys
+import tempfile
+import unittest
+
+
+ROOT = Path(__file__).resolve().parents[1]
+BUILDER = ROOT / 'scripts' / 'build_ui_messages.py'
+BUILD_CATALOG = runpy.run_path(str(BUILDER))['build_catalog']
+FIELDS = ['key', 'current_en', 'en', 'zh-TW', 'context', 'placeholders', 'constraints', 'status', 'source']
+
+
+def message(key='test.message', **changes):
+    row = dict.fromkeys(FIELDS, '')
+    row.update(key=key, en='Ready', context='Test fixture', status='source-approved')
+    row.update(changes)
+    return row
+
+
+def write_table(path, rows):
+    with path.open('w', encoding='utf-8', newline='') as handle:
+        writer = csv.DictWriter(handle, fieldnames=FIELDS, delimiter='\t')
+        writer.writeheader()
+        writer.writerows(rows)
+
+
+class UiMessagesSmoke(unittest.TestCase):
+    def setUp(self):
+        self.directory = tempfile.TemporaryDirectory(prefix='standterm-ui-messages-')
+        self.addCleanup(self.directory.cleanup)
+        self.source = Path(self.directory.name) / 'messages.tsv'
+
+    def catalog(self, rows):
+        write_table(self.source, rows)
+        return BUILD_CATALOG(self.source)
+
+    def test_only_approved_sources_and_reviewed_translations_ship(self):
+        rows = [message(f'test.{status.replace("-", "_")}', status=status, **{'zh-TW': 'Ready translation'})
+                for status in ('proposed', 'retain', 'source-approved', 'translation-reviewed')]
+        rows.append(message('test.removed', status='remove', en=''))
+        self.assertEqual(self.catalog(rows), {
+            'en': {'test.source_approved': 'Ready', 'test.translation_reviewed': 'Ready'},
+            'zh-TW': {'test.translation_reviewed': 'Ready translation'},
+        })
+        self.assertEqual(self.catalog([message(status='translation-reviewed')])['zh-TW'], {})
+
+    def test_placeholder_names_and_multiplicity_must_match(self):
+        source = message(en='{host} connects to {host} using {port}',
+                         placeholders='{host} {host} {port}', status='translation-reviewed',
+                         **{'zh-TW': '{port}: {host} -> {host}'})
+        self.assertEqual(self.catalog([source])['zh-TW']['test.message'], '{port}: {host} -> {host}')
+        for changes in (
+            {'en': '{host} using {port}'},
+            {'zh-TW': '{host} using {port}'},
+            {'zh-TW': '{host} {host} {hostname}'},
+            {'zh-TW': '{host} {host} {port} {port}'},
+        ):
+            with self.subTest(changes=changes), self.assertRaisesRegex(ValueError, 'Placeholder mismatch'):
+                self.catalog([{**source, **changes}])
+
+    def test_invalid_rows_fail_instead_of_silently_shipping(self):
+        cases = [
+            ([message('Invalid.Key')], 'Invalid or duplicate key'),
+            ([message(), message()], 'Invalid or duplicate key'),
+            ([message(status='approved')], 'Unknown status'),
+            ([message(en=' ')], 'Missing English source'),
+            ([message(status='remove')], 'Removal row'),
+            ([message(status='remove', en='', **{'zh-TW': 'Still present'})], 'Removal row'),
+            ([message(context='First line\nSecond line')], 'Use escaped line breaks'),
+            ([message(context='First\tSecond')], 'Use escaped line breaks'),
+            ([message(status='proposed', en='Hello {name}')], 'Placeholder mismatch'),
+        ]
+        for rows, error in cases:
+            with self.subTest(rows=rows), self.assertRaisesRegex(ValueError, error):
+                self.catalog(rows)
+
+    def test_header_and_row_width_are_validated(self):
+        self.source.write_text('key\ten\n', encoding='utf-8')
+        with self.assertRaisesRegex(ValueError, 'Unexpected translation table columns'):
+            BUILD_CATALOG(self.source)
+        for values in (list(message().values())[:-1], [*message().values(), 'extra']):
+            self.source.write_text('\t'.join(FIELDS) + '\n' + '\t'.join(values) + '\n', encoding='utf-8')
+            with self.subTest(values=values), self.assertRaisesRegex(ValueError, 'Invalid columns'):
+                BUILD_CATALOG(self.source)
+
+    def test_escaped_line_breaks_and_utf8_bom(self):
+        row = message(en='First\\nSecond')
+        write_table(self.source, [row])
+        self.source.write_bytes(b'\xef\xbb\xbf' + self.source.read_bytes())
+        self.assertEqual(BUILD_CATALOG(self.source)['en']['test.message'], 'First\nSecond')
+
+    def test_cli_check_detects_missing_and_stale_output_without_writing(self):
+        root = Path(self.directory.name)
+        script = root / 'scripts' / BUILDER.name
+        source = root / 'docs' / 'ui_copy_review.tsv'
+        output = root / 'static' / 'js' / 'standterm-messages.js'
+        for path in (script, source, output):
+            path.parent.mkdir(parents=True, exist_ok=True)
+        shutil.copyfile(BUILDER, script)
+        write_table(source, [message()])
+
+        def invoke(*args):
+            return subprocess.run([sys.executable, str(script), *args], capture_output=True,
+                                  text=True, timeout=10, check=False)
+
+        missing = invoke('--check')
+        self.assertEqual(missing.returncode, 1)
+        self.assertIn('catalog is stale', missing.stderr)
+        self.assertFalse(output.exists())
+        generated = invoke()
+        self.assertEqual(generated.returncode, 0, generated.stderr)
+        original = output.read_bytes()
+        original_mtime = output.stat().st_mtime_ns
+        fresh = invoke('--check')
+        self.assertEqual(fresh.returncode, 0, fresh.stderr)
+        self.assertEqual(output.stat().st_mtime_ns, original_mtime)
+        write_table(source, [message(en='Updated')])
+        stale = invoke('--check')
+        self.assertEqual(stale.returncode, 1)
+        self.assertIn('catalog is stale', stale.stderr)
+        self.assertEqual(output.read_bytes(), original)
+        self.assertEqual(output.stat().st_mtime_ns, original_mtime)
+        regenerated = invoke()
+        self.assertEqual(regenerated.returncode, 0, regenerated.stderr)
+        self.assertNotEqual(output.read_bytes(), original)
+        self.assertEqual(invoke('--check').returncode, 0)
+
+
+if __name__ == '__main__':
+    unittest.main()

From fe5e07ff2c16f3adcce26cdc395aed73a3e3eba3 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sat, 19 Sep 2026 23:18:11 +0800
Subject: [PATCH 17/43] Localize browser access and Agent approvals

## What changed
- Clarify browser authorization and session recovery with bilingual static, pending and error text while retaining the English login fallback.
- Distinguish input approval, file-copy approval, rejection, pause and transfer cancellation without changing their protocol bindings.
- Keep uncertain copy results visible in both details and the transfer queue, preserving diagnostic codes and exact paths.

## Testing
The full browser and backend suites cover access-token rejection, device recovery, stale proposals, exact file-copy plans and cancellation barriers. Focused bilingual checks after the final layout correction verify visible warnings, safe dismissal and narrow windows. Catalog validation and English fallback checks pass.
---
 README.md                        |   9 +-
 app.py                           |  69 ++++--
 docs/agent_ui_review_plan.md     |  57 ++++-
 docs/ui_copy_phase2_proposal.md  | 104 ++++++++
 docs/ui_copy_phase2_proposal.tsv |  41 ++++
 docs/ui_copy_review.tsv          | 106 +++++++-
 static/js/standterm-messages.js  | 184 +++++++++++++-
 templates/index.html             | 220 +++++++++--------
 tests/agent_backend_smoke.py     |   7 +-
 tests/agent_browser_smoke.py     | 404 ++++++++++++++++++++++++++++---
 10 files changed, 1025 insertions(+), 176 deletions(-)
 create mode 100644 docs/ui_copy_phase2_proposal.md
 create mode 100644 docs/ui_copy_phase2_proposal.tsv

diff --git a/README.md b/README.md
index 17c1ebe..b388ff1 100644
--- a/README.md
+++ b/README.md
@@ -323,8 +323,9 @@ The default is **Direct input + token**. The tab-row Create token and Create
 token 3× buttons remain beside Pause Agent when the Agent panel is hidden, and always target the active
 terminal; compact windows keep those actions in the Agent panel.
 
-**Settings > General > Language (Agent preview)** selects English or Traditional
-Chinese (Taiwan) for Agent access and local connection information. The choice
+**Settings > General > Language (preview)** selects English or Traditional
+Chinese (Taiwan) for browser access and recovery, Agent permissions, input and
+file-copy approvals, transfer results, and local connection information. The choice
 applies the next time the page opens; saving it does not reload the current
 page or change its connections and grants. Other areas remain in English.
 The [copy and translation table](docs/ui_copy_review.tsv) and
@@ -640,8 +641,8 @@ To enable recovery:
    select **Arm existing passkey** before relying on recovery for that live
    process.
 
-When the session cookie is missing, select **Recover live session with device**
-on the Access Required page or in the in-app recovery prompt. Recovery succeeds
+When the session cookie is missing, select **Verify with device**
+on the Access Required page or in the **Restore StandTerm access** dialog. Recovery succeeds
 only while that session remains active in the same `app.py` process. A backend
 restart, expired session, closed terminal bridge, or disconnected remote host
 cannot be reconstructed by the passkey.
diff --git a/app.py b/app.py
index e6f326c..1b1b521 100644
--- a/app.py
+++ b/app.py
@@ -5630,7 +5630,7 @@ def build_access_required_response():
 <head>
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>StandTerm Access Required</title>
+  <title>StandTerm access required</title>
   <style>
     body {
       font-family: system-ui, sans-serif;
@@ -5695,19 +5695,21 @@ def build_access_required_response():
 </head>
 <body>
   <main>
-    <h1>StandTerm access required</h1>
-    <p>Enter the access token printed by the launcher, or open the full Access URL.</p>
+    <h1 data-i18n="browser.access.required">StandTerm access required</h1>
+    <p data-i18n="browser.access.instructions">Enter the launcher’s access token, or open its full Access URL.</p>
     <form id="access-login-form" method="post" action="/login" autocomplete="off">
-      <label for="access-token">Access token</label>
+      <label for="access-token" data-i18n="browser.recovery.token_label">Access token</label>
       <input id="access-token" name="token" type="password" autofocus required>
-      <button type="submit">Unlock</button>
+      <button type="submit" data-i18n="browser.recovery.submit">Use access token</button>
     </form>
-    <div id="access-recovery-divider" class="divider">or</div>
-    <button id="access-recovery-button" class="secondary" type="button">Recover live session with device</button>
+    <div id="access-recovery-divider" class="divider" data-i18n="common.or">or</div>
+    <button id="access-recovery-button" class="secondary" type="button" data-i18n="browser.recovery.device">Verify with device</button>
     <p id="access-login-status" class="hint" role="status"></p>
-    <p class="hint">Device recovery uses Windows Hello, Touch ID, or another platform passkey previously registered for this hostname. It only restores a session still running in this StandTerm process.</p>
-    <p class="hint">For Windows browsers connecting to a WSL IP over HTTPS, the browser may also require trusting the StandTerm local CA.</p>
+    <p class="hint" data-i18n="browser.recovery.hint">Use a device registered for this hostname and enabled for a still-valid session, or enter the current launcher’s access token. After StandTerm restarts, use the current access token.</p>
+    <p class="hint" data-i18n="browser.access.ca_hint">For Windows browsers connecting to a WSL IP over HTTPS, the browser may also require trusting the StandTerm local CA.</p>
   </main>
+  <script src="/static/js/standterm-messages.js"></script>
+  <script src="/static/js/standterm-i18n.js"></script>
   <script>
     (() => {
       const form = document.getElementById('access-login-form');
@@ -5717,6 +5719,30 @@ def build_access_required_response():
       const recoveryDivider = document.getElementById('access-recovery-divider');
       if (!form || !tokenInput) return;
 
+      let requestedLocale = 'en';
+      try {
+        const stored = JSON.parse(localStorage.getItem('terminal.pref.v1'));
+        if (stored && typeof stored === 'object' && !Array.isArray(stored)) {
+          requestedLocale = stored.uiLanguage;
+        }
+      } catch (exc) {
+        // Invalid or unavailable preferences retain the English access form.
+      }
+      let uiText = null;
+      if (window.StandTermI18n && window.StandTermMessages) {
+        uiText = window.StandTermI18n.create(window.StandTermMessages, requestedLocale);
+      }
+      const t = (key, fallback) => {
+        if (!uiText) return fallback;
+        const translated = uiText.t(key);
+        return translated === key ? fallback : translated;
+      };
+      document.querySelectorAll('[data-i18n]').forEach(element => {
+        element.textContent = t(element.dataset.i18n, element.textContent);
+      });
+      document.documentElement.lang = uiText ? uiText.locale : 'en';
+      document.title = t('browser.access.required', 'StandTerm access required');
+
       const base64urlToBytes = value => {
         const padding = '='.repeat((4 - (value.length % 4)) % 4);
         const binary = atob(value.replace(/-/g, '+').replace(/_/g, '/') + padding);
@@ -5758,7 +5784,13 @@ def build_access_required_response():
       const readJsonResponse = async response => {
         const payload = await response.json().catch(() => ({}));
         if (!response.ok || payload.status !== 'ok') {
-          throw new Error(payload.message || 'Platform recovery failed.');
+          let message = payload.message || t('browser.recovery.failed', 'Device recovery failed.');
+          if (payload.error_code === 'session_recovery_not_configured') {
+            message = t('browser.recovery.not_configured', message);
+          } else if (payload.error_code === 'session_recovery_no_live_session') {
+            message = t('browser.recovery.no_live_session', message);
+          }
+          throw new Error(message);
         }
         return payload;
       };
@@ -5770,7 +5802,7 @@ def build_access_required_response():
 
       if (recoveryButton) recoveryButton.addEventListener('click', async () => {
         recoveryButton.disabled = true;
-        if (statusEl) statusEl.textContent = 'Waiting for device verification...';
+        if (statusEl) statusEl.textContent = t('browser.recovery.verifying_device', 'Waiting for device verification…');
         try {
           const optionsResponse = await fetch('/session-recovery/authenticate/options', {
             method: 'POST',
@@ -5798,9 +5830,10 @@ def build_access_required_response():
           appUrl.searchParams.delete('token');
           window.location.replace(`${appUrl.pathname}${appUrl.search}${appUrl.hash}` || '/');
         } catch (exc) {
-          if (statusEl) statusEl.textContent = exc && exc.message
-            ? exc.message
-            : 'Platform recovery was cancelled or failed.';
+          if (statusEl) statusEl.textContent = exc && exc.name === 'NotAllowedError'
+            ? t('browser.recovery.device_cancelled', 'Device verification was cancelled or no matching passkey is available.')
+            : (exc && exc.message ? exc.message
+              : t('browser.recovery.cancelled_or_failed', 'Device verification was cancelled or failed.'));
           recoveryButton.disabled = false;
         }
       });
@@ -5810,7 +5843,7 @@ def build_access_required_response():
         const token = tokenInput.value || '';
         const body = new URLSearchParams();
         body.set('token', token);
-        if (statusEl) statusEl.textContent = 'Unlocking...';
+        if (statusEl) statusEl.textContent = t('browser.recovery.checking', 'Checking access token…');
         try {
           const response = await fetch('/login', {
             method: 'POST',
@@ -5821,7 +5854,7 @@ def build_access_required_response():
             body,
           });
           if (!response.ok) {
-            if (statusEl) statusEl.textContent = 'Access token was not accepted.';
+            if (statusEl) statusEl.textContent = t('browser.recovery.token_rejected', 'Access token was not accepted.');
             return;
           }
           const appUrl = new URL(window.location.href);
@@ -5832,7 +5865,7 @@ def build_access_required_response():
             headers: { 'Accept': 'text/html' },
           });
           if (!appResponse.ok) {
-            throw new Error('Unable to load StandTerm.');
+            throw new Error(t('browser.access.load_failed', 'Unable to load StandTerm.'));
           }
           const html = await appResponse.text();
           window.standtermPendingAccessToken = token;
@@ -5841,7 +5874,7 @@ def build_access_required_response():
           document.write(html);
           document.close();
         } catch (exc) {
-          if (statusEl) statusEl.textContent = 'Unable to unlock. Check the connection and try again.';
+          if (statusEl) statusEl.textContent = t('browser.access.unlock_failed', 'Cannot restore access. Check the connection and try again.');
         }
       });
     })();
diff --git a/docs/agent_ui_review_plan.md b/docs/agent_ui_review_plan.md
index efea0e7..9db4b2a 100644
--- a/docs/agent_ui_review_plan.md
+++ b/docs/agent_ui_review_plan.md
@@ -43,7 +43,7 @@ do not consolidate them merely to shorten labels.
 | 3 | Review English UI copy and terminology | Core terms agreed; initial English sources reviewed | Review each proposed change for target, permissions, consequences, and next action; check related tooltips, Desktop help, and tests before applying it. |
 | 4 | Finalize the translation exchange table | Initial exchange validated with an independent translator | Stable keys, approved English source, context, and placeholder constraints are sufficient for an independent translator. |
 | 5 | Pilot Agent access and local connection information | Implemented; validation below | Cover static and dynamic text, titles, and accessible names; preserve connected sessions and authorization; support English fallback. |
-| 6 | Translate and integrate approved rows | Pilot translations reviewed and integrated; remaining workflows deferred | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
+| 6 | Translate and integrate approved rows | Agent pilot plus browser access/recovery and Agent approvals/transfers integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
 | 7 | Expand Core and Desktop coverage | Deferred | Verify secondary windows, native menus, setup, diagnostics, packaging, and representative layouts. |
 
 ## Validation of the reliability changes
@@ -66,9 +66,8 @@ validated separately below.
 
 ## Deferred UI work
 
-Browser authorization, file-copy review text, Agent diagnostics, SSH tunnel setup,
-secondary windows, and Desktop localization remain outside this pilot. Reviewed
-rows in the table do not imply that every screen has integrated them. Translation
+General connection forms, Agent diagnostics, SSH tunnel setup, secondary windows,
+and Desktop localization remain outside the completed workflows. Translation
 starts only after the English source for the selected workflow is reviewed.
 Extra screen diffing, render hints, key aliases, and byte-limit options remain optional optimizations.
 Unverified UART end-to-end coverage is a qualification gap, not evidence that
@@ -142,8 +141,8 @@ inventory and pilot are needed before committing to a delivery estimate.
 
 ## Pilot implementation and translation handoff
 
-The table contains 82 rows: 81 reviewed translations and one removal row.
-The pilot integrates 75 keys; six reviewed keys belong to deferred workflows.
+The initial pilot contained 82 rows: 81 reviewed translations and one removal row.
+It integrated 75 keys; six reviewed keys were reserved for the next phase.
 An independent translator edited only the 63 new target cells. The integrator
 checked unchanged metadata and placeholders, clarified that Settings changes
 the default permission, and reviewed the translations before changing statuses.
@@ -182,3 +181,49 @@ Machine prompts, protocol values and backend diagnostics are unchanged.
 
 These checks ran with WSL Chromium and local test servers. Native Desktop
 packaging and physical UART qualification were not part of this UI pilot.
+
+## Browser access, recovery, approval and transfer implementation
+
+The accepted [phase-two proposal](ui_copy_phase2_proposal.md) is implemented.
+The authoritative table now contains 170 rows: 169 reviewed messages and one
+decorative removal. All 169 exported keys are referenced by the integrated UI.
+The companion proposal TSV remains a historical snapshot; do not export it to
+the runtime catalog or append its duplicate keys to the authoritative table.
+
+Browser authorization, the separate initial access page, recovery prompts and
+manual authorization help now share reviewed English and Traditional Chinese
+copy. Pending, rejected, reconnect and reset states use the same catalog.
+Initial access retains its English HTML form when JavaScript or translation
+assets are unavailable. Known recovery errors use typed error codes; unknown
+server diagnostics retain their original messages. Credentials, auth routes,
+recovery eligibility and public discovery scope are unchanged.
+
+Agent approval distinguishes input from file copies. Reject handles one proposal;
+Pause Agent retains its terminal scope. Transfer cancellation distinguishes a
+pending request from an operator-confirmed stop and stays disabled after the
+commit barrier. Dismiss actions hide entries without issuing file operations.
+Canonical endpoints, paths, sizes, proposal bindings and raw diagnostic codes
+remain intact.
+
+Independent read-only implementation reviews found no control or authorization
+regressions. A subsequent browser layout check found that existing single-line
+ellipsis hid the end of unknown-publication warnings, despite the full strings
+being present in the DOM. Only that typed error now enables wrapping in Agent
+details and the transfer queue. The critic accepted this correction and clarified
+that its earlier review established text content, not visual completeness.
+
+| Check | Result |
+| --- | --- |
+| Complete Agent browser suite | 56 top-level cases passed, including English/Traditional Chinese access and recovery, exact input decisions, file-copy plans, stop states and dismissal. |
+| Complete Agent backend suite | 169 cases passed, including browser grants, recovery eligibility, stale proposals and transfer commit/cancel boundaries. |
+| Final warning-layout correction | Five focused approval/transfer cases passed after the CSS correction; both locales preserve full warning text at 1280 and 480 pixel widths. |
+| Initial access fallback | Real token login passed with JavaScript disabled and with both translation assets blocked; invalid Agent-style token input remained rejected. |
+| Browser URL validation | Native invalid-URL validation stays in place; parser/scheme/missing-grant branches preserve their behavior. A syntactically valid authorization URL only navigates, without claiming authorization succeeded. |
+| Catalog and lookup | Six exporter tests and six lookup tests passed; generated catalog freshness and all 169 referenced bilingual keys verified. |
+| Static verification | Python compilation and diff whitespace checks passed. |
+
+The browser suite ran before the final warning-only layout correction; the five
+focused cases above validate that final correction. Native Desktop packaging,
+real platform authenticator prompts and physical UART were not requalified.
+Core packaging already requires both runtime catalog files and the source table;
+this phase adds no new runtime asset or dependency.
diff --git a/docs/ui_copy_phase2_proposal.md b/docs/ui_copy_phase2_proposal.md
new file mode 100644
index 0000000..3329c7e
--- /dev/null
+++ b/docs/ui_copy_phase2_proposal.md
@@ -0,0 +1,104 @@
+# Browser access and Agent approval copy proposal
+
+Status: accepted proposal snapshot. The browser access/recovery and Agent
+approval/transfer messages are now integrated through `ui_copy_review.tsv`.
+Authorization, recovery eligibility and transfer control rules are unchanged. The companion `ui_copy_phase2_proposal.tsv`
+contains 40 candidate rows: 39 proposed messages and one decorative removal.
+This is a focused decision set, not a claim of complete string coverage.
+
+## Decision and boundaries
+
+Use short action labels with precise adjacent context. Distinguish credentials,
+authorization, approval, pending work, confirmed results, and uncertain results.
+The next implementation should use the existing translation-table workflow and
+keep the protocol, authorization rules and entry points stable.
+
+| Concept | English | Traditional Chinese | Boundary |
+| --- | --- | --- | --- |
+| Browser authorization | Authorize browser | 授權瀏覽器 | Uses a browser authorization URL containing a one-time `authorize` grant. |
+| Initial access or expired-session recovery | Use access token | 使用存取權杖 | Uses the current launcher's access token or full Access URL, not an Agent token. |
+| Device recovery | Verify with device | 使用裝置驗證 | Requires a credential registered for the hostname and enabled for a still-valid session. A restart requires the current launcher token. |
+| Grant terminal access | Authorize agent | 授權 Agent | Existing terminology; independent of browser access. |
+| Approve one input proposal | Approve input | 核准輸入 | Does not promise command execution or bypass subsequent validation. |
+| Approve one copy proposal | Approve copy | 核准複製 | Keep exact endpoints, paths, size, and conflict consequences visible. |
+| Reject one proposal | Reject | 拒絕 | Same `agent_action_reject` path for input and copy; does not revoke access. |
+| Pause terminal Agent access | Pause Agent | 暫停 Agent | Different scope from rejecting a proposal or stopping one transfer. |
+| Request transfer cancellation | Stop / Stopping… | 停止／正在停止… | A request is not confirmation; cancellation remains unavailable after the commit barrier. |
+| Confirmed operator cancellation | Stopped | 已停止 | Select only from `file_copy_cancelled_by_operator`; do not infer from disconnection. |
+| Hide a finished transfer entry | Dismiss | 隱藏此筆 | Does not delete files or cancel work. |
+
+Prefer `Restore StandTerm access` over `Restore browser access` so the recovery
+dialog cannot be mistaken for the separate browser-authorization gate. Remove
+`YOU SHALL NOT PASS!!`, retain the authorization state and launcher identity,
+and replace metaphorical progress text with the actual operation.
+
+Do not use `Execute` for arbitrary input, `Cancel` for every negative action,
+or `Failed` alone for an unconfirmed destination update. The proposed unknown
+result warning must appear in both Agent details and the transfer queue, with
+the route and diagnostic code preserved. It must not introduce automatic retries.
+
+The shorter replacement warning retains the existing destination file size.
+Omitting `atomically` from visible copy does not change the backend guarantee.
+Keep-both text refers to the exact backend-selected destination already shown.
+
+## Implementation order and source evidence
+
+| Step | Scope | Current implementation and test evidence |
+| --- | --- | --- |
+| 1 | Browser authorization gate and reconnect notice | `templates/index.html:1334`, `:5756`, `:7824`, `:8499`; browser tests `test_browser_authorization_gate_hides_connection_controls`, `test_server_unavailable_waits_for_reconnect`, `test_retry_now_resubscribes_after_socket_disconnect`. |
+| 2 | Initial access page and live-session recovery | Separate server-rendered page in `app.py:5626`, recovery dialog in `templates/index.html:1649`; `session_recovery.py:510` filters hostname and bound credentials; `app.py:6462` validates the bound session. Browser tests cover initial access, invalid-session reconnect and device recovery; backend test `test_session_recovery_unauthenticated_options_offer_only_armed_credentials` covers eligibility. |
+| 3 | Input and copy approval | `templates/index.html:3842` renders proposals; `:8774` and `:8787` send typed approval/rejection payloads. Browser tests cover stale proposals, canonical copy plans, single-shot decisions and long-path layouts. |
+| 4 | Transfer result wording | `templates/index.html:3656` currently warns in details, while `:9154` renders queue status. Backend unknown-publication fixture in `tests/agent_backend_smoke.py:5058` distinguishes uncertain publication from safe cancellation. |
+
+Initial access is not rendered by the main template. Reusing the current main
+page translator alone will not cover it. During implementation, verify catalog
+availability and saved-language handling on that separate page; keep the
+existing no-JavaScript login form and English fallback. Do not change auth
+exemptions or grant scope just to load translated text.
+
+After these decisions are accepted, inventory companion progress, validation,
+help, accessible-name and reset text before marking either workflow fully
+translated. The table already includes key retry and token-checking transitions;
+it does not enumerate every backend diagnostic or manual authorization help step.
+Use structured error codes for known diagnostic translations and retain the
+original message for unknown errors. Never classify errors by English wording.
+
+## Independent adversarial review and adjudication
+
+The read-only critic reviewed source and tests with a bounded investigation.
+There were no High or Critical findings. The integrator verified the material
+citations and made the following decisions; the critic reported no remaining
+substantive disagreement after the response.
+
+| Finding | Severity | Evidence | Critic remedy | Main response | Resolution | Validation |
+| --- | --- | --- | --- | --- | --- | --- |
+| Unknown publication remains a generic failure in the queue | Medium | `templates/index.html:3656`, `:9166`; browser test currently checks details at `tests/agent_browser_smoke.py:2816` | Show the warning on both surfaces using the existing error enum; retain route and code | Accept; table explicitly names both surfaces | Included in proposal; runtime unchanged | Add one unknown-result fixture that asserts details and queue; verify no retry is emitted. |
+| Device recovery wording omits hostname and live-session binding | Medium | `session_recovery.py:510-530`, `app.py:6462` | Keep the eligibility and restart boundary beside the short device button | Accept; shared hint now includes registration, enabled recovery and a still-valid session | Included in proposal | Exercise registered-but-unbound, expired session, different hostname and restart failure paths; preserve access-token fallback. |
+| Dynamic/reset text can restore old terminology | Low | `templates/index.html:5756`, `:7829-7832`, `:11843-11868`; `app.py:5813` | Include reconnect, token-checking and device-verification transitions | Accept; added five rows and both static/dynamic source references | Included in proposal | Verify pending, failure and reset states in English and Traditional Chinese. |
+| Recovery title can be confused with browser authorization | Optional wording | Distinct `/login` and browser `authorize` paths | Prefer Restore StandTerm access | Modify the initial title proposal accordingly | Included in proposal | Review the two gates together; neither should suggest that an Agent token can unlock the browser. |
+
+Preserved despite possible shortening: credential distinctions, the restart
+restriction, canonical paths, replacement consequences and the check-before-retry
+warning. Preserved despite possible expansion: short buttons and no visible
+atomic-publication jargon. Full platform-recovery settings and generic Files
+window localization remain deferred until their respective workflows are scoped.
+No unresolved authorization-policy choice remains in this proposal.
+
+## Translation handoff and validation
+
+This proposal file is not the runtime catalog. Reused keys are intentional:
+some candidates already exist in `ui_copy_review.tsv`; merge by key after review,
+never append duplicate rows. Keep approved runtime rows unchanged until that
+merge is deliberate. For a translation handoff, approve English first, then
+allow edits only to target-language cells. Validate the returned key set and
+all non-target fields against the sent copy before reviewing the translations.
+
+At proposal time, the table validator accepted all 40 candidate rows and
+exported none because they remained proposed or marked for removal. This file
+retains those historical statuses; the authoritative table records the reviewed
+implementation rows. See `agent_ui_review_plan.md` for implementation validation. Implementation validation covers the related browser and backend cases,
+both languages at narrow widths, and the initial access form with JavaScript disabled.
+
+The accepted rows were merged by key, with companion progress, validation,
+manual-authorization help and accessible names added during implementation.
+Further UI expansion remains a separate scoped task.
diff --git a/docs/ui_copy_phase2_proposal.tsv b/docs/ui_copy_phase2_proposal.tsv
new file mode 100644
index 0000000..849fd82
--- /dev/null
+++ b/docs/ui_copy_phase2_proposal.tsv
@@ -0,0 +1,41 @@
+key	current_en	en	zh-TW	context	placeholders	constraints	status	source
+browser.auth.warning	YOU SHALL NOT PASS!!			Decorative warning above browser authorization.		Remove only decoration. Preserve authorization gate, launcher ID and recovery actions.	remove	templates/index.html:1349
+browser.auth.required	Unauthorized browser	Browser authorization required	需要瀏覽器授權	Terminal access gate after initial StandTerm access.		Do not confuse browser authorization with launcher access or Agent access.	proposed	templates/index.html:1350
+browser.auth.instructions	First time? Please use an Auth URL.	Paste a browser authorization URL to continue.	貼上瀏覽器授權網址以繼續。	Instruction for the URL containing the one-time authorize grant.		Keep browser authorization URL distinct from the launcher Access URL.	proposed	templates/index.html:5756
+browser.auth.submit	OK	Authorize browser	授權瀏覽器	Submit the browser authorization URL.		Button names intent; navigation and validation do not imply successful authorization.	proposed	templates/index.html:1354
+browser.auth.opening	Opening the gate...	Opening authorization URL…	正在開啟授權網址…	Navigation after syntactic URL checks.		Do not say authorized or connected before the server confirms it.	proposed	templates/index.html:8518
+browser.auth.download	Download authorization file manually	Download authorization file	下載授權檔	Manual browser authorization fallback.		Downloading does not complete authorization; preserve adjacent manual placement help and automatic checking.	proposed	templates/index.html:1359
+browser.connection.unavailable	Server not available	Cannot reach StandTerm	無法連線至 StandTerm	Browser cannot reach the Core service.		Do not assert the server has stopped, restarted or lost terminal sessions.	proposed	templates/index.html:1335
+browser.connection.retry	Retry Now	Reconnect now	立即重新連線	Explicit retry of the browser socket connection.		Does not resend terminal input, repeat a file copy, or reconnect SSH by itself.	proposed	templates/index.html:7824
+browser.connection.unavailable_hint	StandTerm is not running or cannot be reached. This page will keep checking and reconnect automatically. If the server restarted, you may be asked for the current access token.	This page will keep trying to reconnect. If StandTerm restarted, use the access token from its current launcher.	此頁面會持續嘗試重新連線。若 StandTerm 已重新啟動，請使用目前啟動器提供的存取權杖。	Adjacent explanation of automatic connection retries.		Do not imply terminal commands or failed transfers are retried.	proposed	templates/index.html:1336
+browser.recovery.title	Recover StandTerm session	Restore StandTerm access	恢復 StandTerm 存取	Expired/missing session recovery dialog.		Restore UI access, not a terminated shell or a grant to every terminal.	proposed	templates/index.html:1651
+browser.recovery.hint	Use a registered device to recover a live session, or enter the access token printed by the current launcher. A restarted server always requires its current token.	Use a device registered for this hostname and enabled for a still-valid session, or enter the current launcher’s access token. After StandTerm restarts, use the current access token.	使用已於此主機名稱註冊、且已為仍有效的工作階段啟用復原功能的裝置，或輸入目前啟動器提供的存取權杖。StandTerm 重新啟動後，請使用目前的存取權杖。	Recovery eligibility and restart boundary beside short buttons.		Keep hostname registration, live-session binding and restart restrictions. Share the explanation across both surfaces; do not promise terminal process restoration.	proposed	templates/index.html:1652; app.py:5708
+browser.recovery.token_label		Access token	存取權杖	Visible and accessible label for the recovery password input; also matches initial access form.		Explicitly identifies launcher access token, not Agent token. Empty baseline means new label on recovery dialog.	proposed	templates/index.html:1654; app.py:5701
+browser.recovery.submit	Unlock	Use access token	使用存取權杖	Submit token to /login on initial gate and recovery dialog.		Keep POST /login and token validation unchanged. Do not call this Agent authorization.	proposed	templates/index.html:1655; app.py:5703
+browser.recovery.device	Recover live session with device	Verify with device	使用裝置驗證	Platform credential verification; full eligibility stays in adjacent help.		Do not advertise as a bypass after Core restart or as proof that a registered/armed credential exists.	proposed	templates/index.html:1657; app.py:5706
+browser.recovery.saved	Use remembered token	Use saved access token	使用已儲存的存取權杖	Use the existing browser token vault value.		Do not imply the saved token is guaranteed valid or that Agent credentials are reused.	proposed	templates/index.html:1658
+browser.access.required	StandTerm access required	StandTerm access required	需要 StandTerm 存取權限	Separate server-rendered initial access gate.		This surface exists before the main template loads; preserve no-JS login fallback.	proposed	app.py:5698
+browser.access.instructions	Enter the access token printed by the launcher, or open the full Access URL.	Enter the launcher’s access token, or open its full Access URL.	輸入啟動器提供的存取權杖，或開啟其完整 Access URL。	Initial access token source.		Retain Access URL spelling used by the launcher; never replace with browser authorization URL.	proposed	app.py:5699
+agent.approval.input	Approve	Approve input	核准輸入	Approve one exact pending terminal-input proposal.		Do not say Execute; input need not be a command and approval can still fail typed checks.	proposed	templates/index.html:3919
+agent.approval.copy	Approve copy	Approve copy	核准複製	Approve the canonical file-copy proposal.		Keep endpoints, paths, size and replacement warning visible; direct input does not bypass approval.	proposed	templates/index.html:3919
+agent.approval.reject	Reject / Deny	Reject	拒絕	Reject one pending input or file-copy proposal via agent_action_reject.		Does not disable Agent access, pause all operations or revoke a token.	proposed	templates/index.html:3920; templates/index.html:8787
+agent.approval.pause	Pause	Pause Agent	暫停 Agent	Pause access for the terminal shown by the Agent panel.		Not equivalent to rejecting this proposal or stopping only this transfer.	proposed	templates/index.html:1644; templates/index.html:8800
+agent.approval.newline	newline:	Ends with newline	以換行結尾	Display action.ends_with_newline with localized yes/no.		Do not infer command execution from newline or inspect translated text for control.	proposed	templates/index.html:1636
+agent.approval.control	control:	Contains control characters	含控制字元	Display action.contains_control_chars with localized yes/no.		Keep escaped_preview unchanged and safely rendered as text.	proposed	templates/index.html:1637
+agent.copy.source	From	From	來源	Canonical source endpoint and path label.		Translate only the label; preserve exact endpoint and path values.	proposed	templates/index.html:1626
+agent.copy.destination	To	To	目的地	Canonical destination endpoint and path label.		Translate only the label; do not replace paths with a friendly or editable approximation.	proposed	templates/index.html:1627
+agent.copy.size	Size	Size	大小	Source file size.		Do not confuse with the existing destination size in the replacement warning.	proposed	templates/index.html:1628
+agent.copy.replace	This will atomically replace an existing regular file ({size}).	Replace the existing file ({size}).	將覆寫既有檔案（{size}）。	Warning for replace with an existing regular destination file.	{size}	Keep existing destination size and replacement consequence; atomic implementation is not a user-facing guarantee of success.	proposed	templates/index.html:3890
+agent.copy.keep_both	The displayed destination is the exact keep-both name selected by the backend.	Copy to the destination shown; keep the existing file.	複製到顯示的目的地，並保留既有檔案。	keep_both resolves a canonical destination before approval.		Do not imply the operator may edit this name or that the original destination will be replaced.	proposed	templates/index.html:3893
+agent.copy.replace_missing	Replace was requested, but no destination file existed during preflight.	Replace requested; no destination file existed when checked.	已要求覆寫；檢查時目的地沒有檔案。	Replace intent when preflight observed no destination file.		Describe the preflight observation; do not claim the destination remains absent or a race cannot occur.	proposed	templates/index.html:3891
+agent.transfer.stop	Stop	Stop	停止	Request cancellation before commit.		Keep existing cancellation barrier and disabled state; clicking alone is not confirmation of cancellation.	proposed	templates/index.html:9270
+agent.transfer.stopping	Stop (disabled while cancelPending)	Stopping…	正在停止…	Show a pending cancellation request until backend result.		Display only while record.cancelPending. Do not map a request to stopped or safe destination.	proposed	templates/index.html:9271
+agent.transfer.stopped	Stopped	Stopped	已停止	Confirmed operator cancellation.		Use only file_copy_cancelled_by_operator; disconnect or generic failure does not establish that publication was prevented.	proposed	templates/index.html:9165
+agent.transfer.committing	The destination is being published and cannot be stopped	Finishing the copy; it can no longer be stopped.	正在完成複製，已無法停止。	Disabled Stop tooltip during committing.		Not a success or failure result. Do not enable Stop after the commit barrier.	proposed	templates/index.html:9272
+agent.transfer.dismiss	Dismiss	Dismiss	隱藏此筆	Hide a finished transfer record.		Does not delete a file or cancel work. Preserve accessible name containing the filename.	proposed	templates/index.html:9266
+agent.copy.result_unknown	destination may have changed; inspect it before retrying	Copy result unknown. The destination may have changed; check it before retrying.	無法確認複製結果。目的地可能已變更，請先檢查再重試。	Ambiguous destination publication; show in Agent details and transfer queue.		Select by file_copy_publish_outcome_unknown. Retain diagnostic code, never auto-retry or claim destination unchanged.	proposed	templates/index.html:3656; templates/index.html:9166
+browser.connection.reconnecting	Retrying...	Reconnecting…	正在重新連線…	Pending socket retry; reset to browser.connection.retry.		Plain text. Show only for the existing typed/local state; do not claim success or alter retries.	proposed	templates/index.html:7829; templates/index.html:7832
+browser.recovery.checking	Unlocking...	Checking access token…	正在驗證存取權杖…	Pending access-token submission on initial gate and recovery dialog.		Plain text. Show only for the existing typed/local state; do not claim success or alter retries.	proposed	app.py:5813; templates/index.html:11843
+browser.recovery.checking_saved	Unlocking with remembered token...	Checking saved access token…	正在驗證已儲存的存取權杖…	Pending submission of token-vault contents.		Plain text. Show only for the existing typed/local state; do not claim success or alter retries.	proposed	templates/index.html:11854
+browser.recovery.verifying_device	Waiting for device verification...	Waiting for device verification…	等待裝置驗證…	Pending platform credential ceremony on both access surfaces.		Plain text. Show only for the existing typed/local state; do not claim success or alter retries.	proposed	app.py:5773; templates/index.html:11868
+browser.recovery.token_rejected	Access token was not accepted.	Access token was not accepted.	存取權杖未通過驗證。	Unsuccessful /login response.		Plain text. Show only for the existing typed/local state; do not claim success or alter retries.	proposed	app.py:5824; templates/index.html:8125
diff --git a/docs/ui_copy_review.tsv b/docs/ui_copy_review.tsv
index 6ac0d24..5b31dd1 100644
--- a/docs/ui_copy_review.tsv
+++ b/docs/ui_copy_review.tsv
@@ -1,7 +1,7 @@
 key	current_en	en	zh-TW	context	placeholders	constraints	status	source
-browser.auth.warning	YOU SHALL NOT PASS!!			Decorative warning above the browser authorization form.		Remove only this decorative warning; keep the authorization state and recovery actions.	remove	templates/index.html:1345
-browser.auth.required	Unauthorized browser	Browser authorization required	需要瀏覽器授權	Title above the browser authorization form.		Do not imply that an Agent token can authorize a browser.	translation-reviewed	templates/index.html:1346
-browser.auth.instructions	First time? Please use an Auth URL.	Paste a browser authorization URL to continue.	貼上瀏覽器授權網址以繼續。	Instruction above the browser authorization URL input.		Keep browser authorization separate from Agent access and the launcher Access URL.	translation-reviewed	templates/index.html:1347
+browser.auth.warning	YOU SHALL NOT PASS!!			Decorative warning above browser authorization.		Remove only decoration. Preserve authorization gate, launcher ID and recovery actions.	remove	templates/index.html:1349
+browser.auth.required	Unauthorized browser	Browser authorization required	需要瀏覽器授權	Terminal access gate after initial StandTerm access.		Do not confuse browser authorization with launcher access or Agent access.	translation-reviewed	templates/index.html:1350
+browser.auth.instructions	First time? Please use an Auth URL.	Paste a browser authorization URL to continue.	貼上瀏覽器授權網址以繼續。	Instruction for the URL containing the one-time authorize grant.		Keep browser authorization URL distinct from the launcher Access URL.	translation-reviewed	templates/index.html:5756
 agent.access.grant	Agent Mint	Authorize agent	授權 Agent	Primary action applies the saved permission and creates a token for the active tab.		Retain a tooltip naming the target and permission and explaining token creation; this action can grant direct input.	translation-reviewed	templates/index.html:1445
 agent.connection.title	Agent Info for Current Tab	Agent connection	Agent 連線	Connection info for the environment selected by the active tab.		Show the Core or SSH host nearby. This dialog does not restrict grants to the active tab.	translation-reviewed	templates/index.html:1446
 agent.connection.copy	Copy Prompt	Copy Prompt	複製連線指引	Copies connection instructions for an external agent.		Keep the adjacent destination environment visible. Copying does not authorize or mint.	translation-reviewed	templates/index.html:1486
@@ -14,12 +14,12 @@ agent.permission.direct_hint	Full lets the agent type into this terminal without
 agent.token.create	Mint token	Create token	建立權杖	Advanced action for a tab whose Agent access is already enabled.		Distinguish token creation from changing the permission or enabling access.	translation-reviewed	templates/index.html:1594
 agent.token.expired	Permission expired. Renew the token to continue.	Token expired. Renew it to continue.	權杖已過期。請更新權杖以繼續。	Expired token hint in the Agent panel.		Expiry concerns the token; it does not necessarily reset the selected permission.	translation-reviewed	templates/index.html:3762
 agent.token.idle_remaining	Permission expires in {seconds}s without activity.	Token expires in {seconds}s without activity.	若無活動，權杖將在 {seconds} 秒後過期。	Token idle countdown in the Agent panel.	{seconds}	Use the typed remaining idle time; map secondsRemaining to seconds when implementing.	translation-reviewed	templates/index.html:3764
-agent.copy.replace	This will atomically replace an existing regular file ({size}).	Replace the existing file ({size}).	將覆寫既有檔案（{size}）。	Warning before approval of a replace-mode Agent file copy.	{size}	Keep the destination path, size, and replacement consequence visible. Atomic publication remains a backend guarantee.	translation-reviewed	templates/index.html:3876
-agent.copy.keep_both	The displayed destination is the exact keep-both name selected by the backend.	Copy to the destination shown; keep the existing file.	複製到顯示的目的地，並保留既有檔案。	Warning for a keep-both copy using the canonical destination.		Do not imply the user can edit the chosen path in this approval dialog.	translation-reviewed	templates/index.html:3879
-agent.transfer.stop	Stop	Stop	停止	Stops a running transfer before publication.		Do not merge with Reject, Pause, Disable, Close, or Dismiss; each has a different effect.	translation-reviewed	templates/index.html:9256
-agent.transfer.committing	The destination is being published and cannot be stopped	Finishing the copy; it can no longer be stopped.	正在完成複製，已無法停止。	Tooltip while transfer publication has crossed the cancellation barrier.		Keep the stop control disabled; do not imply a finished or failed result.	translation-reviewed	templates/index.html:9258
-settings.language.label	Language (Agent preview)	Language (Agent preview)	語言（Agent 預覽）	Local display preference for the limited Agent workflow pilot.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
-settings.language.hint	Applies to Agent access and connection info next time you open this page. Other areas remain in English.	Applies to Agent access and local connection info next time you open this page. Other areas remain in English.	下次開啟此頁面時套用於 Agent 存取與本機連線資訊，其他區域仍顯示英文。	Language change never reloads an active terminal.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.copy.replace	This will atomically replace an existing regular file ({size}).	Replace the existing file ({size}).	將覆寫既有檔案（{size}）。	Warning for replace with an existing regular destination file.	{size}	Keep existing destination size and replacement consequence; atomic implementation is not a user-facing guarantee of success.	translation-reviewed	templates/index.html:3890
+agent.copy.keep_both	The displayed destination is the exact keep-both name selected by the backend.	Copy to the destination shown; keep the existing file.	複製到顯示的目的地，並保留既有檔案。	keep_both resolves a canonical destination before approval.		Do not imply the operator may edit this name or that the original destination will be replaced.	translation-reviewed	templates/index.html:3893
+agent.transfer.stop	Stop	Stop	停止	Request cancellation before commit.		Keep existing cancellation barrier and disabled state; clicking alone is not confirmation of cancellation.	translation-reviewed	templates/index.html:9270
+agent.transfer.committing	The destination is being published and cannot be stopped	Finishing the copy; it can no longer be stopped.	正在完成複製，已無法停止。	Disabled Stop tooltip during committing.		Not a success or failure result. Do not enable Stop after the commit barrier.	translation-reviewed	templates/index.html:9272
+settings.language.label	Language (Agent preview)	Language (preview)	語言（預覽）	Local display preference for the limited Agent workflow pilot.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+settings.language.hint	Applies to Agent access and connection info next time you open this page. Other areas remain in English.	Applies next time you open this page: browser access, Agent permissions, approvals, transfers and local connection info. Other areas remain in English.	下次開啟此頁面時套用於瀏覽器存取、Agent 權限、核准、傳輸及本機連線資訊，其他區域仍顯示英文。	Language change never reloads an active terminal.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 settings.agent.legend	Agent access	Agent access	Agent 存取	Settings fieldset title.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 settings.agent.permission	Default Agent permission	Default Agent permission	Agent 預設權限	Saved permission used by the Authorize agent button; saving alone does not grant access.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 settings.agent.hint	Authorize agent applies this permission to the current tab and creates a standard token.	Authorize agent applies this permission to the current tab and creates a standard token.	「授權 Agent」會將此權限套用至目前分頁，並建立標準權杖。	Explain the primary button without implying that saving a setting authorizes a tab.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
@@ -81,3 +81,91 @@ agent.connection.disconnected	Core is disconnected. Reconnect before copying con
 agent.connection.loading	Loading connection info…	Loading connection info…	正在載入連線資訊…	Connection info request is pending.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 agent.connection.ready	Copy Prompt to the agent running on the Core host. Its first authenticated request confirms access.	Copy Prompt to the agent running on the Core host. Its first authenticated request confirms access.	按「複製連線指引」，再貼給在 Core 主機上執行的 Agent。Agent 首次通過驗證的請求可確認其存取權。	Keep request activity separate from terminal input success.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 agent.connection.unavailable	Connection info unavailable.	Connection info unavailable.	無法取得連線資訊。	Fallback when the server does not provide a diagnostic message.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+browser.auth.submit	OK	Authorize browser	授權瀏覽器	Submit the browser authorization URL.		Button names intent; navigation and validation do not imply successful authorization.	translation-reviewed	templates/index.html:1354
+browser.auth.opening	Opening the gate...	Opening authorization URL…	正在開啟授權網址…	Navigation after syntactic URL checks.		Do not say authorized or connected before the server confirms it.	translation-reviewed	templates/index.html:8518
+browser.auth.download	Download authorization file manually	Download authorization file	下載授權檔	Manual browser authorization fallback.		Downloading does not complete authorization; preserve adjacent manual placement help and automatic checking.	translation-reviewed	templates/index.html:1359
+browser.connection.unavailable	Server not available	Cannot reach StandTerm	無法連線至 StandTerm	Browser cannot reach the Core service.		Do not assert the server has stopped, restarted or lost terminal sessions.	translation-reviewed	templates/index.html:1335
+browser.connection.retry	Retry Now	Reconnect now	立即重新連線	Explicit retry of the browser socket connection.		Does not resend terminal input, repeat a file copy, or reconnect SSH by itself.	translation-reviewed	templates/index.html:7824
+browser.connection.unavailable_hint	StandTerm is not running or cannot be reached. This page will keep checking and reconnect automatically. If the server restarted, you may be asked for the current access token.	This page will keep trying to reconnect. If StandTerm restarted, use the access token from its current launcher.	此頁面會持續嘗試重新連線。若 StandTerm 已重新啟動，請使用目前啟動器提供的存取權杖。	Adjacent explanation of automatic connection retries.		Do not imply terminal commands or failed transfers are retried.	translation-reviewed	templates/index.html:1336
+browser.recovery.title	Recover StandTerm session	Restore StandTerm access	恢復 StandTerm 存取	Expired/missing session recovery dialog.		Restore UI access, not a terminated shell or a grant to every terminal.	translation-reviewed	templates/index.html:1651
+browser.recovery.hint	Use a registered device to recover a live session, or enter the access token printed by the current launcher. A restarted server always requires its current token.	Use a device registered for this hostname and enabled for a still-valid session, or enter the current launcher’s access token. After StandTerm restarts, use the current access token.	使用已於此主機名稱註冊、且已為仍有效的工作階段啟用復原功能的裝置，或輸入目前啟動器提供的存取權杖。StandTerm 重新啟動後，請使用目前的存取權杖。	Recovery eligibility and restart boundary beside short buttons.		Keep hostname registration, live-session binding and restart restrictions. Share the explanation across both surfaces; do not promise terminal process restoration.	translation-reviewed	templates/index.html:1652; app.py:5708
+browser.recovery.token_label		Access token	存取權杖	Visible and accessible label for the recovery password input; also matches initial access form.		Explicitly identifies launcher access token, not Agent token. Empty baseline means new label on recovery dialog.	translation-reviewed	templates/index.html:1654; app.py:5701
+browser.recovery.submit	Unlock	Use access token	使用存取權杖	Submit token to /login on initial gate and recovery dialog.		Keep POST /login and token validation unchanged. Do not call this Agent authorization.	translation-reviewed	templates/index.html:1655; app.py:5703
+browser.recovery.device	Recover live session with device	Verify with device	使用裝置驗證	Platform credential verification; full eligibility stays in adjacent help.		Do not advertise as a bypass after Core restart or as proof that a registered/armed credential exists.	translation-reviewed	templates/index.html:1657; app.py:5706
+browser.recovery.saved	Use remembered token	Use saved access token	使用已儲存的存取權杖	Use the existing browser token vault value.		Do not imply the saved token is guaranteed valid or that Agent credentials are reused.	translation-reviewed	templates/index.html:1658
+browser.access.required	StandTerm access required	StandTerm access required	需要 StandTerm 存取權限	Separate server-rendered initial access gate.		This surface exists before the main template loads; preserve no-JS login fallback.	translation-reviewed	app.py:5698
+browser.access.instructions	Enter the access token printed by the launcher, or open the full Access URL.	Enter the launcher’s access token, or open its full Access URL.	輸入啟動器提供的存取權杖，或開啟其完整 Access URL。	Initial access token source.		Retain Access URL spelling used by the launcher; never replace with browser authorization URL.	translation-reviewed	app.py:5699
+browser.connection.reconnecting	Retrying...	Reconnecting…	正在重新連線…	Pending socket retry; reset to browser.connection.retry.		Plain text. Show only for the existing typed/local state; do not claim success or alter retries.	translation-reviewed	templates/index.html:7829; templates/index.html:7832
+browser.recovery.checking	Unlocking...	Checking access token…	正在驗證存取權杖…	Pending access-token submission on initial gate and recovery dialog.		Plain text. Show only for the existing typed/local state; do not claim success or alter retries.	translation-reviewed	app.py:5813; templates/index.html:11843
+browser.recovery.checking_saved	Unlocking with remembered token...	Checking saved access token…	正在驗證已儲存的存取權杖…	Pending submission of token-vault contents.		Plain text. Show only for the existing typed/local state; do not claim success or alter retries.	translation-reviewed	templates/index.html:11854
+browser.recovery.verifying_device	Waiting for device verification...	Waiting for device verification…	等待裝置驗證…	Pending platform credential ceremony on both access surfaces.		Plain text. Show only for the existing typed/local state; do not claim success or alter retries.	translation-reviewed	app.py:5773; templates/index.html:11868
+browser.recovery.token_rejected	Access token was not accepted.	Access token was not accepted.	存取權杖未通過驗證。	Unsuccessful /login response.		Plain text. Show only for the existing typed/local state; do not claim success or alter retries.	translation-reviewed	app.py:5824; templates/index.html:8125
+common.or	or	or	或	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.url_label	Browser authorization URL	Browser authorization URL	瀏覽器授權網址	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.url_placeholder	Paste Browser Authorization URL	Paste browser authorization URL	貼上瀏覽器授權網址	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.invalid_url	That does not look like a complete Auth URL.	Enter a complete browser authorization URL.	請輸入完整的瀏覽器授權網址。	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.invalid_scheme	Auth URLs must use HTTP or HTTPS.	Browser authorization URLs must use HTTP or HTTPS.	瀏覽器授權網址必須使用 HTTP 或 HTTPS。	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.missing_grant	That URL is missing its one-time authorization code.	This URL has no one-time browser authorization code.	此網址缺少一次性瀏覽器授權碼。	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.authorizing	Authorizing this browser from the launch URL...	Authorizing this browser…	正在授權此瀏覽器…	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.authorized	Welcome aboard. Loading connection options...	Browser authorized. Loading connection options…	瀏覽器已授權。正在載入連線選項…	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.preparing	Preparing browser authorization...	Preparing browser authorization…	正在準備瀏覽器授權…	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.requesting_file	Requesting authorization file from server...	Requesting authorization file…	正在要求授權檔…	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.downloaded	Downloaded {filename}. Move it to {directory}; this page will spot it automatically.	Downloaded {filename}. Move it to {directory} on the StandTerm host. This page checks for it automatically.	已下載 {filename}。請移至 StandTerm 主機上的 {directory}。此頁面會自動檢查。	Browser access and recovery display text.	{filename} {directory}	Download is not authorization. Keep filename and host directory unchanged.	translation-reviewed	templates/index.html
+browser.auth.no_response	No authorization response from server. Refresh this page, then try the manual download again.	No authorization response. Refresh this page, then download the file again.	未收到授權回應。請重新整理此頁面，再次下載授權檔。	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.file_not_accepted	Still locked. Put the downloaded file in the authorized directory, then download a fresh file to retry.	Authorization is still required. Check the file location, then download a fresh file to retry.	仍需授權。請檢查檔案位置，再下載新的授權檔重試。	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.disconnected	Socket is not connected yet. Wait until the Socket status is Connected, then try again.	Wait for the StandTerm connection, then try again.	請等候 StandTerm 連線完成後再試一次。	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.help_title	Manual browser authorization	Manual browser authorization	手動授權瀏覽器	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.help_button	How to use the authorization file	How to use the authorization file	授權檔使用方式	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.help_download	Download the authorization file for this browser.	Download the authorization file for this browser.	下載此瀏覽器的授權檔。	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.help_move	Move it into {directory} on the StandTerm host.	Move the file to this directory on the StandTerm host:	將授權檔移至 StandTerm 主機上的此目錄：	The unchanged directory is a separate code element, not a translated parameter.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.help_wait	Keep this page open. StandTerm checks for the file automatically and unlocks the connection options when it is accepted.	Keep this page open. StandTerm checks for the file automatically and enables connection options when it is accepted.	請保持此頁面開啟。StandTerm 會自動檢查授權檔，接受後即可使用連線選項。	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.ca_title	HTTPS still grumpy?	HTTPS certificate warning?	出現 HTTPS 憑證警告？	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.ca_download	Download StandTerm CA	Download StandTerm CA	下載 StandTerm CA	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.auth.ca_import	and import it into the browser host's trusted root certificates.	Import it into the browser host’s trusted root certificates.	將其匯入瀏覽器所在主機的受信任根憑證。	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.connection.connected	Connected	Connected	已連線	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.connection.required	Access token required	Access token required	需要存取權杖	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.connection.retrying	Server not available (retrying)	Cannot reach StandTerm (reconnecting)	無法連線至 StandTerm（正在重連）	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.connection.connecting	Connecting...	Connecting…	正在連線…	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.recovery.current_token	Enter the access token printed by the current StandTerm launcher.	Enter the access token from the current StandTerm launcher.	請輸入目前 StandTerm 啟動器提供的存取權杖。	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.recovery.expired	Session expired. Enter the access token again.	Session expired. Use the current launcher’s access token.	工作階段已失效。請使用目前啟動器提供的存取權杖。	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html
+browser.recovery.failed	Platform recovery failed.	Device recovery failed.	裝置復原失敗。	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html; app.py:build_access_required_response
+browser.recovery.cancelled_or_failed	Platform recovery was cancelled or failed.	Device verification was cancelled or failed.	裝置驗證已取消或失敗。	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	app.py:build_access_required_response
+browser.recovery.device_cancelled	Device verification was cancelled or no matching passkey is available.	Device verification was cancelled or no matching passkey is available.	裝置驗證已取消，或沒有符合的通行金鑰。	Browser access and recovery display text.		Select by NotAllowedError; it does not prove whether the user cancelled or no credential matched.	translation-reviewed	templates/index.html; app.py:build_access_required_response
+browser.recovery.not_configured	No device recovery is registered for this hostname. Use the current launcher’s access token.	No device recovery is registered for this hostname. Use the current launcher’s access token.	此主機名稱尚未註冊裝置復原功能。請使用目前啟動器提供的存取權杖。	Display only for session_recovery_not_configured; keep other diagnostics unchanged.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html; app.py:build_access_required_response
+browser.recovery.no_live_session	No valid session is enabled for this device. Use the current launcher’s access token.	No valid session is enabled for this device. Use the current launcher’s access token.	此裝置沒有已啟用復原功能的有效工作階段。請使用目前啟動器提供的存取權杖。	Display only for session_recovery_no_live_session; does not imply a shell was recovered.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	templates/index.html; app.py:build_access_required_response
+browser.access.ca_hint	For Windows browsers connecting to a WSL IP over HTTPS, the browser may also require trusting the StandTerm local CA.	For Windows browsers connecting to a WSL IP over HTTPS, the browser may also require trusting the StandTerm local CA.	Windows 瀏覽器透過 HTTPS 連至 WSL IP 時，可能也需要信任 StandTerm 本機 CA。	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	app.py:build_access_required_response
+browser.access.load_failed	Unable to load StandTerm.	Unable to load StandTerm.	無法載入 StandTerm。	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	app.py:build_access_required_response
+browser.access.unlock_failed	Unable to unlock. Check the connection and try again.	Cannot restore access. Check the connection and try again.	無法恢復存取。請檢查連線後再試一次。	Browser access and recovery display text.		Preserve typed status, authentication and retry behavior; render text safely.	translation-reviewed	app.py:build_access_required_response
+agent.approval.input	Approve	Approve input	核准輸入	Approve one exact pending terminal-input proposal.		Do not say Execute; input need not be a command and approval can still fail typed checks.	translation-reviewed	templates/index.html:3919
+agent.approval.copy	Approve copy	Approve copy	核准複製	Approve the canonical file-copy proposal.		Keep endpoints, paths, size and replacement warning visible; direct input does not bypass approval.	translation-reviewed	templates/index.html:3919
+agent.approval.reject	Reject / Deny	Reject	拒絕	Reject one pending input or file-copy proposal via agent_action_reject.		Does not disable Agent access, pause all operations or revoke a token.	translation-reviewed	templates/index.html:3920; templates/index.html:8787
+agent.approval.pause	Pause	Pause Agent	暫停 Agent	Pause access for the terminal shown by the Agent panel.		Not equivalent to rejecting this proposal or stopping only this transfer.	translation-reviewed	templates/index.html:1644; templates/index.html:8800
+agent.approval.newline	newline:	Ends with newline	以換行結尾	Display action.ends_with_newline with localized yes/no.		Do not infer command execution from newline or inspect translated text for control.	translation-reviewed	templates/index.html:1636
+agent.approval.control	control:	Contains control characters	含控制字元	Display action.contains_control_chars with localized yes/no.		Keep escaped_preview unchanged and safely rendered as text.	translation-reviewed	templates/index.html:1637
+agent.copy.source	From	From	來源	Canonical source endpoint and path label.		Translate only the label; preserve exact endpoint and path values.	translation-reviewed	templates/index.html:1626
+agent.copy.destination	To	To	目的地	Canonical destination endpoint and path label.		Translate only the label; do not replace paths with a friendly or editable approximation.	translation-reviewed	templates/index.html:1627
+agent.copy.size	Size	Size	大小	Source file size.		Do not confuse with the existing destination size in the replacement warning.	translation-reviewed	templates/index.html:1628
+agent.copy.replace_missing	Replace was requested, but no destination file existed during preflight.	Replace requested; no destination file existed when checked.	已要求覆寫；檢查時目的地沒有檔案。	Replace intent when preflight observed no destination file.		Describe the preflight observation; do not claim the destination remains absent or a race cannot occur.	translation-reviewed	templates/index.html:3891
+agent.transfer.stopping	Stop (disabled while cancelPending)	Stopping…	正在停止…	Show a pending cancellation request until backend result.		Display only while record.cancelPending. Do not map a request to stopped or safe destination.	translation-reviewed	templates/index.html:9271
+agent.transfer.stopped	Stopped	Stopped	已停止	Confirmed operator cancellation.		Use only file_copy_cancelled_by_operator; disconnect or generic failure does not establish that publication was prevented.	translation-reviewed	templates/index.html:9165
+agent.transfer.dismiss	Dismiss	Dismiss	隱藏此筆	Hide a finished transfer record.		Does not delete a file or cancel work. Preserve accessible name containing the filename.	translation-reviewed	templates/index.html:9266
+agent.copy.result_unknown	destination may have changed; inspect it before retrying	Copy result unknown. The destination may have changed; check it before retrying.	無法確認複製結果。目的地可能已變更，請先檢查再重試。	Ambiguous destination publication; show in Agent details and transfer queue.		Select by file_copy_publish_outcome_unknown. Retain diagnostic code, never auto-retry or claim destination unchanged.	translation-reviewed	templates/index.html:3656; templates/index.html:9166
+common.yes	Yes	Yes	是	Boolean display label, not a protocol value.		Display only; preserve typed conditions and exact data values.	translation-reviewed	templates/index.html
+common.no	No	No	否	Boolean display label, not a protocol value.		Display only; preserve typed conditions and exact data values.	translation-reviewed	templates/index.html
+agent.transfer.starting	Starting	Starting	準備開始	Approved transfer is starting; not completed.		Display only; preserve typed conditions and exact data values.	translation-reviewed	templates/index.html
+agent.transfer.finishing	Finishing	Finishing	正在完成	Committing; not yet confirmed complete.		Display only; preserve typed conditions and exact data values.	translation-reviewed	templates/index.html
+agent.transfer.completed	Completed	Completed	已完成	Confirmed completed status only.		Display only; preserve typed conditions and exact data values.	translation-reviewed	templates/index.html
+agent.transfer.failed	Failed	Failed	失敗	Generic failure; keep raw error code and distinguish unknown publication.		Display only; preserve typed conditions and exact data values.	translation-reviewed	templates/index.html
+agent.transfer.amount	{copied} of {total}	{copied} of {total}	{copied}／{total}	Formatted copied and total byte sizes.	{copied} {total}	Display only; preserve typed conditions and exact data values.	translation-reviewed	templates/index.html
+agent.transfer.stop_hint	Stop transfer	Stop transfer	停止傳輸	Request cancellation; no guarantee until backend confirmation.		Display only; preserve typed conditions and exact data values.	translation-reviewed	templates/index.html
+agent.transfer.dismiss_file	Dismiss {filename}	Dismiss {filename}	隱藏 {filename}	Accessible label. Hide a finished entry; do not delete the file.	{filename}	Display only; preserve typed conditions and exact data values.	translation-reviewed	templates/index.html
+agent.copy.destination_exists	Destination exists. Approval reports the conflict; no file is copied.	Destination exists. Approval reports the conflict; no file is copied.	目的地已有檔案。核准後只會回報衝突，不會複製檔案。	Conflict mode fail with an existing destination; no overwrite.		Display only; preserve typed conditions and exact data values.	translation-reviewed	templates/index.html
+agent.copy.after_approval	After approval	After approval	核准後	Pending copy byte-count label.		Display only; preserve typed conditions and exact data values.	translation-reviewed	templates/index.html
+agent.approval.target	Target	Target	目標	Keep exact target identity beside the label.		Display only; preserve typed conditions and exact data values.	translation-reviewed	templates/index.html
+agent.approval.bytes	Bytes	Bytes	位元組	Byte count from structured action metadata.		Display only; preserve typed conditions and exact data values.	translation-reviewed	templates/index.html
+agent.approval.lines	Lines	Lines	行數	Line count from structured action metadata.		Display only; preserve typed conditions and exact data values.	translation-reviewed	templates/index.html
+agent.approval.status	Status	Status	狀態	Display label; raw status enum remains unchanged.		Display only; preserve typed conditions and exact data values.	translation-reviewed	templates/index.html
+agent.transfer.queue	Transfer Queue	Transfer Queue	傳輸佇列	Title and accessible name for the Agent transfer queue.		Display only; preserve underlying actions.	translation-reviewed	templates/index.html
+agent.transfer.clear_finished	Clear finished	Dismiss finished	隱藏已結束項目	Hide completed or failed transfer entries; no files are deleted.		Display only; preserve underlying actions.	translation-reviewed	templates/index.html
+agent.transfer.close_queue	Close Transfer Queue	Close Transfer Queue	關閉傳輸佇列	Hide the queue without stopping transfers.		Display only; preserve underlying actions.	translation-reviewed	templates/index.html
+agent.approval.details	Agent action details	Agent action details	Agent 操作詳情	Accessible name for the focusable proposal details.		Display only; preserve underlying actions.	translation-reviewed	templates/index.html
diff --git a/static/js/standterm-messages.js b/static/js/standterm-messages.js
index 7ea72c1..4769759 100644
--- a/static/js/standterm-messages.js
+++ b/static/js/standterm-messages.js
@@ -11,6 +11,17 @@
         "agent.access.grant": "Authorize agent",
         "agent.access.grant_title": "Authorize {permission} access and create a standard token for {target}",
         "agent.access.starting": "Starting\u2026",
+        "agent.approval.bytes": "Bytes",
+        "agent.approval.control": "Contains control characters",
+        "agent.approval.copy": "Approve copy",
+        "agent.approval.details": "Agent action details",
+        "agent.approval.input": "Approve input",
+        "agent.approval.lines": "Lines",
+        "agent.approval.newline": "Ends with newline",
+        "agent.approval.pause": "Pause Agent",
+        "agent.approval.reject": "Reject",
+        "agent.approval.status": "Status",
+        "agent.approval.target": "Target",
         "agent.connection.copied": "Copied. Paste this to the agent in the indicated environment.",
         "agent.connection.copy": "Copy Prompt",
         "agent.connection.copy_failed": "Not copied. Text selected; press {shortcut} to copy it manually.",
@@ -29,8 +40,15 @@
         "agent.connection.unavailable": "Connection info unavailable.",
         "agent.connection.url": "Agent Info URL",
         "agent.connection.waiting": "waiting for agent",
+        "agent.copy.after_approval": "After approval",
+        "agent.copy.destination": "To",
+        "agent.copy.destination_exists": "Destination exists. Approval reports the conflict; no file is copied.",
         "agent.copy.keep_both": "Copy to the destination shown; keep the existing file.",
         "agent.copy.replace": "Replace the existing file ({size}).",
+        "agent.copy.replace_missing": "Replace requested; no destination file existed when checked.",
+        "agent.copy.result_unknown": "Copy result unknown. The destination may have changed; check it before retrying.",
+        "agent.copy.size": "Size",
+        "agent.copy.source": "From",
         "agent.name": "Agent",
         "agent.panel.hide": "Hide Agent Panel",
         "agent.panel.open": "Open Agent Panel",
@@ -69,21 +87,91 @@
         "agent.token.tab_expired": "Agent token expired; create a new token to continue",
         "agent.token.target_3x_title": "Create a token with 3\u00d7 idle time for {target}",
         "agent.token.target_title": "Create a standard token for {target}",
+        "agent.transfer.amount": "{copied} of {total}",
+        "agent.transfer.clear_finished": "Dismiss finished",
+        "agent.transfer.close_queue": "Close Transfer Queue",
         "agent.transfer.committing": "Finishing the copy; it can no longer be stopped.",
+        "agent.transfer.completed": "Completed",
+        "agent.transfer.dismiss": "Dismiss",
+        "agent.transfer.dismiss_file": "Dismiss {filename}",
+        "agent.transfer.failed": "Failed",
+        "agent.transfer.finishing": "Finishing",
+        "agent.transfer.queue": "Transfer Queue",
+        "agent.transfer.starting": "Starting",
         "agent.transfer.stop": "Stop",
+        "agent.transfer.stop_hint": "Stop transfer",
+        "agent.transfer.stopped": "Stopped",
+        "agent.transfer.stopping": "Stopping\u2026",
+        "browser.access.ca_hint": "For Windows browsers connecting to a WSL IP over HTTPS, the browser may also require trusting the StandTerm local CA.",
+        "browser.access.instructions": "Enter the launcher\u2019s access token, or open its full Access URL.",
+        "browser.access.load_failed": "Unable to load StandTerm.",
+        "browser.access.required": "StandTerm access required",
+        "browser.access.unlock_failed": "Cannot restore access. Check the connection and try again.",
+        "browser.auth.authorized": "Browser authorized. Loading connection options\u2026",
+        "browser.auth.authorizing": "Authorizing this browser\u2026",
+        "browser.auth.ca_download": "Download StandTerm CA",
+        "browser.auth.ca_import": "Import it into the browser host\u2019s trusted root certificates.",
+        "browser.auth.ca_title": "HTTPS certificate warning?",
+        "browser.auth.disconnected": "Wait for the StandTerm connection, then try again.",
+        "browser.auth.download": "Download authorization file",
+        "browser.auth.downloaded": "Downloaded {filename}. Move it to {directory} on the StandTerm host. This page checks for it automatically.",
+        "browser.auth.file_not_accepted": "Authorization is still required. Check the file location, then download a fresh file to retry.",
+        "browser.auth.help_button": "How to use the authorization file",
+        "browser.auth.help_download": "Download the authorization file for this browser.",
+        "browser.auth.help_move": "Move the file to this directory on the StandTerm host:",
+        "browser.auth.help_title": "Manual browser authorization",
+        "browser.auth.help_wait": "Keep this page open. StandTerm checks for the file automatically and enables connection options when it is accepted.",
         "browser.auth.instructions": "Paste a browser authorization URL to continue.",
+        "browser.auth.invalid_scheme": "Browser authorization URLs must use HTTP or HTTPS.",
+        "browser.auth.invalid_url": "Enter a complete browser authorization URL.",
+        "browser.auth.missing_grant": "This URL has no one-time browser authorization code.",
+        "browser.auth.no_response": "No authorization response. Refresh this page, then download the file again.",
+        "browser.auth.opening": "Opening authorization URL\u2026",
+        "browser.auth.preparing": "Preparing browser authorization\u2026",
+        "browser.auth.requesting_file": "Requesting authorization file\u2026",
         "browser.auth.required": "Browser authorization required",
+        "browser.auth.submit": "Authorize browser",
+        "browser.auth.url_label": "Browser authorization URL",
+        "browser.auth.url_placeholder": "Paste browser authorization URL",
+        "browser.connection.connected": "Connected",
+        "browser.connection.connecting": "Connecting\u2026",
+        "browser.connection.reconnecting": "Reconnecting\u2026",
+        "browser.connection.required": "Access token required",
+        "browser.connection.retry": "Reconnect now",
+        "browser.connection.retrying": "Cannot reach StandTerm (reconnecting)",
+        "browser.connection.unavailable": "Cannot reach StandTerm",
+        "browser.connection.unavailable_hint": "This page will keep trying to reconnect. If StandTerm restarted, use the access token from its current launcher.",
+        "browser.recovery.cancelled_or_failed": "Device verification was cancelled or failed.",
+        "browser.recovery.checking": "Checking access token\u2026",
+        "browser.recovery.checking_saved": "Checking saved access token\u2026",
+        "browser.recovery.current_token": "Enter the access token from the current StandTerm launcher.",
+        "browser.recovery.device": "Verify with device",
+        "browser.recovery.device_cancelled": "Device verification was cancelled or no matching passkey is available.",
+        "browser.recovery.expired": "Session expired. Use the current launcher\u2019s access token.",
+        "browser.recovery.failed": "Device recovery failed.",
+        "browser.recovery.hint": "Use a device registered for this hostname and enabled for a still-valid session, or enter the current launcher\u2019s access token. After StandTerm restarts, use the current access token.",
+        "browser.recovery.no_live_session": "No valid session is enabled for this device. Use the current launcher\u2019s access token.",
+        "browser.recovery.not_configured": "No device recovery is registered for this hostname. Use the current launcher\u2019s access token.",
+        "browser.recovery.saved": "Use saved access token",
+        "browser.recovery.submit": "Use access token",
+        "browser.recovery.title": "Restore StandTerm access",
+        "browser.recovery.token_label": "Access token",
+        "browser.recovery.token_rejected": "Access token was not accepted.",
+        "browser.recovery.verifying_device": "Waiting for device verification\u2026",
         "common.close": "Close",
         "common.copy_url": "Copy URL",
+        "common.no": "No",
+        "common.or": "or",
         "common.refresh": "Refresh Status",
+        "common.yes": "Yes",
         "settings.agent.approval": "Approval required + token",
         "settings.agent.direct": "Direct input + token",
         "settings.agent.hint": "Authorize agent applies this permission to the current tab and creates a standard token.",
         "settings.agent.legend": "Agent access",
         "settings.agent.observe": "Read only + token",
         "settings.agent.permission": "Default Agent permission",
-        "settings.language.hint": "Applies to Agent access and local connection info next time you open this page. Other areas remain in English.",
-        "settings.language.label": "Language (Agent preview)"
+        "settings.language.hint": "Applies next time you open this page: browser access, Agent permissions, approvals, transfers and local connection info. Other areas remain in English.",
+        "settings.language.label": "Language (preview)"
     },
     "zh-TW": {
         "agent.access.current_tab": "\u76ee\u524d\u5206\u9801",
@@ -94,6 +182,17 @@
         "agent.access.grant": "\u6388\u6b0a Agent",
         "agent.access.grant_title": "\u6388\u6b0a Agent \u4ee5\u300c{permission}\u300d\u6b0a\u9650\u5b58\u53d6 {target}\uff0c\u4e26\u5efa\u7acb\u6a19\u6e96\u6b0a\u6756",
         "agent.access.starting": "\u555f\u52d5\u4e2d\u2026",
+        "agent.approval.bytes": "\u4f4d\u5143\u7d44",
+        "agent.approval.control": "\u542b\u63a7\u5236\u5b57\u5143",
+        "agent.approval.copy": "\u6838\u51c6\u8907\u88fd",
+        "agent.approval.details": "Agent \u64cd\u4f5c\u8a73\u60c5",
+        "agent.approval.input": "\u6838\u51c6\u8f38\u5165",
+        "agent.approval.lines": "\u884c\u6578",
+        "agent.approval.newline": "\u4ee5\u63db\u884c\u7d50\u5c3e",
+        "agent.approval.pause": "\u66ab\u505c Agent",
+        "agent.approval.reject": "\u62d2\u7d55",
+        "agent.approval.status": "\u72c0\u614b",
+        "agent.approval.target": "\u76ee\u6a19",
         "agent.connection.copied": "\u5df2\u8907\u88fd\u3002\u8acb\u8cbc\u7d66\u5728\u6307\u5b9a\u74b0\u5883\u57f7\u884c\u7684 Agent\u3002",
         "agent.connection.copy": "\u8907\u88fd\u9023\u7dda\u6307\u5f15",
         "agent.connection.copy_failed": "\u8907\u88fd\u5931\u6557\uff0c\u5df2\u9078\u53d6\u6587\u5b57\u3002\u8acb\u6309 {shortcut} \u624b\u52d5\u8907\u88fd\u3002",
@@ -112,8 +211,15 @@
         "agent.connection.unavailable": "\u7121\u6cd5\u53d6\u5f97\u9023\u7dda\u8cc7\u8a0a\u3002",
         "agent.connection.url": "Agent \u8cc7\u8a0a\u7db2\u5740",
         "agent.connection.waiting": "\u7b49\u5f85 Agent",
+        "agent.copy.after_approval": "\u6838\u51c6\u5f8c",
+        "agent.copy.destination": "\u76ee\u7684\u5730",
+        "agent.copy.destination_exists": "\u76ee\u7684\u5730\u5df2\u6709\u6a94\u6848\u3002\u6838\u51c6\u5f8c\u53ea\u6703\u56de\u5831\u885d\u7a81\uff0c\u4e0d\u6703\u8907\u88fd\u6a94\u6848\u3002",
         "agent.copy.keep_both": "\u8907\u88fd\u5230\u986f\u793a\u7684\u76ee\u7684\u5730\uff0c\u4e26\u4fdd\u7559\u65e2\u6709\u6a94\u6848\u3002",
         "agent.copy.replace": "\u5c07\u8986\u5beb\u65e2\u6709\u6a94\u6848\uff08{size}\uff09\u3002",
+        "agent.copy.replace_missing": "\u5df2\u8981\u6c42\u8986\u5beb\uff1b\u6aa2\u67e5\u6642\u76ee\u7684\u5730\u6c92\u6709\u6a94\u6848\u3002",
+        "agent.copy.result_unknown": "\u7121\u6cd5\u78ba\u8a8d\u8907\u88fd\u7d50\u679c\u3002\u76ee\u7684\u5730\u53ef\u80fd\u5df2\u8b8a\u66f4\uff0c\u8acb\u5148\u6aa2\u67e5\u518d\u91cd\u8a66\u3002",
+        "agent.copy.size": "\u5927\u5c0f",
+        "agent.copy.source": "\u4f86\u6e90",
         "agent.name": "Agent",
         "agent.panel.hide": "\u96b1\u85cf Agent \u9762\u677f",
         "agent.panel.open": "\u958b\u555f Agent \u9762\u677f",
@@ -152,21 +258,91 @@
         "agent.token.tab_expired": "Agent \u6b0a\u6756\u5df2\u904e\u671f\uff1b\u8acb\u5efa\u7acb\u65b0\u6b0a\u6756\u4ee5\u7e7c\u7e8c",
         "agent.token.target_3x_title": "\u70ba {target} \u5efa\u7acb\u9592\u7f6e\u671f\u9650\u70ba\u6a19\u6e96 3 \u500d\u7684\u6b0a\u6756",
         "agent.token.target_title": "\u70ba {target} \u5efa\u7acb\u6a19\u6e96\u6b0a\u6756",
+        "agent.transfer.amount": "{copied}\uff0f{total}",
+        "agent.transfer.clear_finished": "\u96b1\u85cf\u5df2\u7d50\u675f\u9805\u76ee",
+        "agent.transfer.close_queue": "\u95dc\u9589\u50b3\u8f38\u4f47\u5217",
         "agent.transfer.committing": "\u6b63\u5728\u5b8c\u6210\u8907\u88fd\uff0c\u5df2\u7121\u6cd5\u505c\u6b62\u3002",
+        "agent.transfer.completed": "\u5df2\u5b8c\u6210",
+        "agent.transfer.dismiss": "\u96b1\u85cf\u6b64\u7b46",
+        "agent.transfer.dismiss_file": "\u96b1\u85cf {filename}",
+        "agent.transfer.failed": "\u5931\u6557",
+        "agent.transfer.finishing": "\u6b63\u5728\u5b8c\u6210",
+        "agent.transfer.queue": "\u50b3\u8f38\u4f47\u5217",
+        "agent.transfer.starting": "\u6e96\u5099\u958b\u59cb",
         "agent.transfer.stop": "\u505c\u6b62",
+        "agent.transfer.stop_hint": "\u505c\u6b62\u50b3\u8f38",
+        "agent.transfer.stopped": "\u5df2\u505c\u6b62",
+        "agent.transfer.stopping": "\u6b63\u5728\u505c\u6b62\u2026",
+        "browser.access.ca_hint": "Windows \u700f\u89bd\u5668\u900f\u904e HTTPS \u9023\u81f3 WSL IP \u6642\uff0c\u53ef\u80fd\u4e5f\u9700\u8981\u4fe1\u4efb StandTerm \u672c\u6a5f CA\u3002",
+        "browser.access.instructions": "\u8f38\u5165\u555f\u52d5\u5668\u63d0\u4f9b\u7684\u5b58\u53d6\u6b0a\u6756\uff0c\u6216\u958b\u555f\u5176\u5b8c\u6574 Access URL\u3002",
+        "browser.access.load_failed": "\u7121\u6cd5\u8f09\u5165 StandTerm\u3002",
+        "browser.access.required": "\u9700\u8981 StandTerm \u5b58\u53d6\u6b0a\u9650",
+        "browser.access.unlock_failed": "\u7121\u6cd5\u6062\u5fa9\u5b58\u53d6\u3002\u8acb\u6aa2\u67e5\u9023\u7dda\u5f8c\u518d\u8a66\u4e00\u6b21\u3002",
+        "browser.auth.authorized": "\u700f\u89bd\u5668\u5df2\u6388\u6b0a\u3002\u6b63\u5728\u8f09\u5165\u9023\u7dda\u9078\u9805\u2026",
+        "browser.auth.authorizing": "\u6b63\u5728\u6388\u6b0a\u6b64\u700f\u89bd\u5668\u2026",
+        "browser.auth.ca_download": "\u4e0b\u8f09 StandTerm CA",
+        "browser.auth.ca_import": "\u5c07\u5176\u532f\u5165\u700f\u89bd\u5668\u6240\u5728\u4e3b\u6a5f\u7684\u53d7\u4fe1\u4efb\u6839\u6191\u8b49\u3002",
+        "browser.auth.ca_title": "\u51fa\u73fe HTTPS \u6191\u8b49\u8b66\u544a\uff1f",
+        "browser.auth.disconnected": "\u8acb\u7b49\u5019 StandTerm \u9023\u7dda\u5b8c\u6210\u5f8c\u518d\u8a66\u4e00\u6b21\u3002",
+        "browser.auth.download": "\u4e0b\u8f09\u6388\u6b0a\u6a94",
+        "browser.auth.downloaded": "\u5df2\u4e0b\u8f09 {filename}\u3002\u8acb\u79fb\u81f3 StandTerm \u4e3b\u6a5f\u4e0a\u7684 {directory}\u3002\u6b64\u9801\u9762\u6703\u81ea\u52d5\u6aa2\u67e5\u3002",
+        "browser.auth.file_not_accepted": "\u4ecd\u9700\u6388\u6b0a\u3002\u8acb\u6aa2\u67e5\u6a94\u6848\u4f4d\u7f6e\uff0c\u518d\u4e0b\u8f09\u65b0\u7684\u6388\u6b0a\u6a94\u91cd\u8a66\u3002",
+        "browser.auth.help_button": "\u6388\u6b0a\u6a94\u4f7f\u7528\u65b9\u5f0f",
+        "browser.auth.help_download": "\u4e0b\u8f09\u6b64\u700f\u89bd\u5668\u7684\u6388\u6b0a\u6a94\u3002",
+        "browser.auth.help_move": "\u5c07\u6388\u6b0a\u6a94\u79fb\u81f3 StandTerm \u4e3b\u6a5f\u4e0a\u7684\u6b64\u76ee\u9304\uff1a",
+        "browser.auth.help_title": "\u624b\u52d5\u6388\u6b0a\u700f\u89bd\u5668",
+        "browser.auth.help_wait": "\u8acb\u4fdd\u6301\u6b64\u9801\u9762\u958b\u555f\u3002StandTerm \u6703\u81ea\u52d5\u6aa2\u67e5\u6388\u6b0a\u6a94\uff0c\u63a5\u53d7\u5f8c\u5373\u53ef\u4f7f\u7528\u9023\u7dda\u9078\u9805\u3002",
         "browser.auth.instructions": "\u8cbc\u4e0a\u700f\u89bd\u5668\u6388\u6b0a\u7db2\u5740\u4ee5\u7e7c\u7e8c\u3002",
+        "browser.auth.invalid_scheme": "\u700f\u89bd\u5668\u6388\u6b0a\u7db2\u5740\u5fc5\u9808\u4f7f\u7528 HTTP \u6216 HTTPS\u3002",
+        "browser.auth.invalid_url": "\u8acb\u8f38\u5165\u5b8c\u6574\u7684\u700f\u89bd\u5668\u6388\u6b0a\u7db2\u5740\u3002",
+        "browser.auth.missing_grant": "\u6b64\u7db2\u5740\u7f3a\u5c11\u4e00\u6b21\u6027\u700f\u89bd\u5668\u6388\u6b0a\u78bc\u3002",
+        "browser.auth.no_response": "\u672a\u6536\u5230\u6388\u6b0a\u56de\u61c9\u3002\u8acb\u91cd\u65b0\u6574\u7406\u6b64\u9801\u9762\uff0c\u518d\u6b21\u4e0b\u8f09\u6388\u6b0a\u6a94\u3002",
+        "browser.auth.opening": "\u6b63\u5728\u958b\u555f\u6388\u6b0a\u7db2\u5740\u2026",
+        "browser.auth.preparing": "\u6b63\u5728\u6e96\u5099\u700f\u89bd\u5668\u6388\u6b0a\u2026",
+        "browser.auth.requesting_file": "\u6b63\u5728\u8981\u6c42\u6388\u6b0a\u6a94\u2026",
         "browser.auth.required": "\u9700\u8981\u700f\u89bd\u5668\u6388\u6b0a",
+        "browser.auth.submit": "\u6388\u6b0a\u700f\u89bd\u5668",
+        "browser.auth.url_label": "\u700f\u89bd\u5668\u6388\u6b0a\u7db2\u5740",
+        "browser.auth.url_placeholder": "\u8cbc\u4e0a\u700f\u89bd\u5668\u6388\u6b0a\u7db2\u5740",
+        "browser.connection.connected": "\u5df2\u9023\u7dda",
+        "browser.connection.connecting": "\u6b63\u5728\u9023\u7dda\u2026",
+        "browser.connection.reconnecting": "\u6b63\u5728\u91cd\u65b0\u9023\u7dda\u2026",
+        "browser.connection.required": "\u9700\u8981\u5b58\u53d6\u6b0a\u6756",
+        "browser.connection.retry": "\u7acb\u5373\u91cd\u65b0\u9023\u7dda",
+        "browser.connection.retrying": "\u7121\u6cd5\u9023\u7dda\u81f3 StandTerm\uff08\u6b63\u5728\u91cd\u9023\uff09",
+        "browser.connection.unavailable": "\u7121\u6cd5\u9023\u7dda\u81f3 StandTerm",
+        "browser.connection.unavailable_hint": "\u6b64\u9801\u9762\u6703\u6301\u7e8c\u5617\u8a66\u91cd\u65b0\u9023\u7dda\u3002\u82e5 StandTerm \u5df2\u91cd\u65b0\u555f\u52d5\uff0c\u8acb\u4f7f\u7528\u76ee\u524d\u555f\u52d5\u5668\u63d0\u4f9b\u7684\u5b58\u53d6\u6b0a\u6756\u3002",
+        "browser.recovery.cancelled_or_failed": "\u88dd\u7f6e\u9a57\u8b49\u5df2\u53d6\u6d88\u6216\u5931\u6557\u3002",
+        "browser.recovery.checking": "\u6b63\u5728\u9a57\u8b49\u5b58\u53d6\u6b0a\u6756\u2026",
+        "browser.recovery.checking_saved": "\u6b63\u5728\u9a57\u8b49\u5df2\u5132\u5b58\u7684\u5b58\u53d6\u6b0a\u6756\u2026",
+        "browser.recovery.current_token": "\u8acb\u8f38\u5165\u76ee\u524d StandTerm \u555f\u52d5\u5668\u63d0\u4f9b\u7684\u5b58\u53d6\u6b0a\u6756\u3002",
+        "browser.recovery.device": "\u4f7f\u7528\u88dd\u7f6e\u9a57\u8b49",
+        "browser.recovery.device_cancelled": "\u88dd\u7f6e\u9a57\u8b49\u5df2\u53d6\u6d88\uff0c\u6216\u6c92\u6709\u7b26\u5408\u7684\u901a\u884c\u91d1\u9470\u3002",
+        "browser.recovery.expired": "\u5de5\u4f5c\u968e\u6bb5\u5df2\u5931\u6548\u3002\u8acb\u4f7f\u7528\u76ee\u524d\u555f\u52d5\u5668\u63d0\u4f9b\u7684\u5b58\u53d6\u6b0a\u6756\u3002",
+        "browser.recovery.failed": "\u88dd\u7f6e\u5fa9\u539f\u5931\u6557\u3002",
+        "browser.recovery.hint": "\u4f7f\u7528\u5df2\u65bc\u6b64\u4e3b\u6a5f\u540d\u7a31\u8a3b\u518a\u3001\u4e14\u5df2\u70ba\u4ecd\u6709\u6548\u7684\u5de5\u4f5c\u968e\u6bb5\u555f\u7528\u5fa9\u539f\u529f\u80fd\u7684\u88dd\u7f6e\uff0c\u6216\u8f38\u5165\u76ee\u524d\u555f\u52d5\u5668\u63d0\u4f9b\u7684\u5b58\u53d6\u6b0a\u6756\u3002StandTerm \u91cd\u65b0\u555f\u52d5\u5f8c\uff0c\u8acb\u4f7f\u7528\u76ee\u524d\u7684\u5b58\u53d6\u6b0a\u6756\u3002",
+        "browser.recovery.no_live_session": "\u6b64\u88dd\u7f6e\u6c92\u6709\u5df2\u555f\u7528\u5fa9\u539f\u529f\u80fd\u7684\u6709\u6548\u5de5\u4f5c\u968e\u6bb5\u3002\u8acb\u4f7f\u7528\u76ee\u524d\u555f\u52d5\u5668\u63d0\u4f9b\u7684\u5b58\u53d6\u6b0a\u6756\u3002",
+        "browser.recovery.not_configured": "\u6b64\u4e3b\u6a5f\u540d\u7a31\u5c1a\u672a\u8a3b\u518a\u88dd\u7f6e\u5fa9\u539f\u529f\u80fd\u3002\u8acb\u4f7f\u7528\u76ee\u524d\u555f\u52d5\u5668\u63d0\u4f9b\u7684\u5b58\u53d6\u6b0a\u6756\u3002",
+        "browser.recovery.saved": "\u4f7f\u7528\u5df2\u5132\u5b58\u7684\u5b58\u53d6\u6b0a\u6756",
+        "browser.recovery.submit": "\u4f7f\u7528\u5b58\u53d6\u6b0a\u6756",
+        "browser.recovery.title": "\u6062\u5fa9 StandTerm \u5b58\u53d6",
+        "browser.recovery.token_label": "\u5b58\u53d6\u6b0a\u6756",
+        "browser.recovery.token_rejected": "\u5b58\u53d6\u6b0a\u6756\u672a\u901a\u904e\u9a57\u8b49\u3002",
+        "browser.recovery.verifying_device": "\u7b49\u5f85\u88dd\u7f6e\u9a57\u8b49\u2026",
         "common.close": "\u95dc\u9589",
         "common.copy_url": "\u8907\u88fd\u7db2\u5740",
+        "common.no": "\u5426",
+        "common.or": "\u6216",
         "common.refresh": "\u66f4\u65b0\u72c0\u614b",
+        "common.yes": "\u662f",
         "settings.agent.approval": "\u9700\u6838\u51c6 + \u6b0a\u6756",
         "settings.agent.direct": "\u76f4\u63a5\u8f38\u5165 + \u6b0a\u6756",
         "settings.agent.hint": "\u300c\u6388\u6b0a Agent\u300d\u6703\u5c07\u6b64\u6b0a\u9650\u5957\u7528\u81f3\u76ee\u524d\u5206\u9801\uff0c\u4e26\u5efa\u7acb\u6a19\u6e96\u6b0a\u6756\u3002",
         "settings.agent.legend": "Agent \u5b58\u53d6",
         "settings.agent.observe": "\u552f\u8b80 + \u6b0a\u6756",
         "settings.agent.permission": "Agent \u9810\u8a2d\u6b0a\u9650",
-        "settings.language.hint": "\u4e0b\u6b21\u958b\u555f\u6b64\u9801\u9762\u6642\u5957\u7528\u65bc Agent \u5b58\u53d6\u8207\u672c\u6a5f\u9023\u7dda\u8cc7\u8a0a\uff0c\u5176\u4ed6\u5340\u57df\u4ecd\u986f\u793a\u82f1\u6587\u3002",
-        "settings.language.label": "\u8a9e\u8a00\uff08Agent \u9810\u89bd\uff09"
+        "settings.language.hint": "\u4e0b\u6b21\u958b\u555f\u6b64\u9801\u9762\u6642\u5957\u7528\u65bc\u700f\u89bd\u5668\u5b58\u53d6\u3001Agent \u6b0a\u9650\u3001\u6838\u51c6\u3001\u50b3\u8f38\u53ca\u672c\u6a5f\u9023\u7dda\u8cc7\u8a0a\uff0c\u5176\u4ed6\u5340\u57df\u4ecd\u986f\u793a\u82f1\u6587\u3002",
+        "settings.language.label": "\u8a9e\u8a00\uff08\u9810\u89bd\uff09"
     }
 };
     if (typeof module === 'object' && module.exports) module.exports = messages;
diff --git a/templates/index.html b/templates/index.html
index 948e8c8..23ac4be 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -566,7 +566,6 @@
         #local-shell-fields { display: none; }
         #uart-fields { display: none; }
         #browser-auth-box { display: none; }
-        #browser-auth-warning { margin-bottom: 8px; color: #ff453a; font-size: 1.35rem; font-weight: 800; text-align: center; }
         #browser-auth-title { margin-bottom: 6px; color: #fff; font-size: 1rem; font-weight: 700; text-align: center; }
         #browser-auth-message { min-height: 34px; margin-bottom: 14px; color: #bbb; font-size: 12px; line-height: 1.4; text-align: center; overflow-wrap: anywhere; }
         #browser-auth-url-form { display: flex; align-items: stretch; gap: 8px; }
@@ -946,6 +945,11 @@
             text-overflow: ellipsis;
             white-space: nowrap;
         }
+        #agent-status-detail.outcome-unknown,
+        .transfer-queue-status.outcome-unknown {
+            white-space: normal;
+            overflow-wrap: anywhere;
+        }
         .transfer-queue-progress {
             height: 3px;
             margin-top: 7px;
@@ -1129,10 +1133,10 @@ <h3>Settings</h3>
                     <div class="settings-tab active" id="tab-general">
                         <fieldset class="settings-fieldset">
                             <legend>General</legend>
-                            <div class="settings-row"><label for="pref-uiLanguage" data-i18n="settings.language.label">Language (Agent preview)</label>
+                            <div class="settings-row"><label for="pref-uiLanguage" data-i18n="settings.language.label">Language (preview)</label>
                                 <select id="pref-uiLanguage"><option value="en">English</option><option value="zh-TW" lang="zh-TW">繁體中文（台灣）</option></select>
                             </div>
-                            <div class="settings-status" data-i18n="settings.language.hint">Applies to Agent access and local connection info next time you open this page. Other areas remain in English.</div>
+                            <div class="settings-status" data-i18n="settings.language.hint">Applies next time you open this page: browser access, Agent permissions, approvals, transfers and local connection info. Other areas remain in English.</div>
                             <div class="settings-row"><label for="pref-useCustomMenu">Enable custom context menu</label><input type="checkbox" id="pref-useCustomMenu"></div>
                             <div class="settings-row"><label for="pref-copyOnSelect">Copy on select</label><input type="checkbox" id="pref-copyOnSelect"></div>
                             <div class="settings-row"><label for="pref-enablePicPreview">Enable pic preview</label><input type="checkbox" id="pref-enablePicPreview"></div>
@@ -1332,9 +1336,9 @@ <h2>StandTerm</h2>
             <span id="launcher-session-id">Session ID: {{ launcher_instance_id }}</span>
         </div>
         <div id="server-availability-message" role="status" aria-live="polite">
-            <strong>Server not available</strong>
-            <div>StandTerm is not running or cannot be reached. This page will keep checking and reconnect automatically. If the server restarted, you may be asked for the current access token.</div>
-            <button type="button" id="server-retry-now">Retry Now</button>
+            <strong data-i18n="browser.connection.unavailable">Cannot reach StandTerm</strong>
+            <div data-i18n="browser.connection.unavailable_hint">This page will keep trying to reconnect. If StandTerm restarted, use the access token from its current launcher.</div>
+            <button type="button" id="server-retry-now" data-i18n="browser.connection.retry">Reconnect now</button>
         </div>
         <div id="errorBox" class="error-msg"></div>
         <div id="actionBox" class="action-box">
@@ -1346,18 +1350,17 @@ <h2>StandTerm</h2>
             </div>
         </div>
         <div id="browser-auth-box">
-            <div id="browser-auth-warning">YOU SHALL NOT PASS!!</div>
-            <div id="browser-auth-title">Unauthorized browser</div>
-            <div id="browser-auth-message">First time? Please use an Auth URL.</div>
+            <div id="browser-auth-title" data-i18n="browser.auth.required">Browser authorization required</div>
+            <div id="browser-auth-message" data-i18n="browser.auth.instructions">Paste a browser authorization URL to continue.</div>
             <form id="browser-auth-url-form">
-                <input id="browser-auth-url-input" type="url" inputmode="url" autocomplete="off" spellcheck="false" placeholder="Paste Browser Authorization URL">
-                <button id="browser-auth-url-submit" type="submit">OK</button>
+                <input id="browser-auth-url-input" type="url" inputmode="url" autocomplete="off" spellcheck="false" placeholder="Paste browser authorization URL" aria-label="Browser authorization URL" data-i18n-placeholder="browser.auth.url_placeholder" data-i18n-aria-label="browser.auth.url_label">
+                <button id="browser-auth-url-submit" type="submit" data-i18n="browser.auth.submit">Authorize browser</button>
             </form>
             <div id="browser-auth-url-error"></div>
-            <div class="browser-auth-divider">or</div>
+            <div class="browser-auth-divider" data-i18n="common.or">or</div>
             <div id="browser-auth-actions">
-                <button id="authorizeBrowserBtn" type="button">Download authorization file manually</button>
-                <button id="browser-auth-help-btn" type="button" title="How to use the authorization file" aria-label="How to use the authorization file">&#x2753;</button>
+                <button id="authorizeBrowserBtn" type="button" data-i18n="browser.auth.download">Download authorization file</button>
+                <button id="browser-auth-help-btn" type="button" title="How to use the authorization file" aria-label="How to use the authorization file" data-i18n-title="browser.auth.help_button" data-i18n-aria-label="browser.auth.help_button">&#x2753;</button>
             </div>
         </div>
         <div id="connection-form">
@@ -1423,16 +1426,16 @@ <h2>StandTerm</h2>
     <div id="browser-auth-help-modal" aria-hidden="true">
         <div class="browser-auth-help-box" role="dialog" aria-modal="true" aria-labelledby="browser-auth-help-title">
             <div class="browser-auth-help-header">
-                <h3 id="browser-auth-help-title">Manual browser authorization</h3>
-                <button id="browser-auth-help-close" type="button" aria-label="Close">X</button>
+                <h3 id="browser-auth-help-title" data-i18n="browser.auth.help_title">Manual browser authorization</h3>
+                <button id="browser-auth-help-close" type="button" aria-label="Close" data-i18n-aria-label="common.close">X</button>
             </div>
             <div class="browser-auth-help-body">
                 <ol>
-                    <li>Download the authorization file for this browser.</li>
-                    <li>Move it into <code id="browser-auth-help-dir">authorized/</code> on the StandTerm host.</li>
-                    <li>Keep this page open. StandTerm checks for the file automatically and unlocks the connection options when it is accepted.</li>
+                    <li data-i18n="browser.auth.help_download">Download the authorization file for this browser.</li>
+                    <li><span data-i18n="browser.auth.help_move">Move the file to this directory on the StandTerm host:</span> <code id="browser-auth-help-dir">authorized/</code></li>
+                    <li data-i18n="browser.auth.help_wait">Keep this page open. StandTerm checks for the file automatically and enables connection options when it is accepted.</li>
                 </ol>
-                <p id="browser-auth-ca-help"><strong>HTTPS still grumpy?</strong> <a id="browser-auth-ca-link" href="#">Download StandTerm CA</a> and import it into the browser host's trusted root certificates.</p>
+                <p id="browser-auth-ca-help"><strong data-i18n="browser.auth.ca_title">HTTPS certificate warning?</strong> <a id="browser-auth-ca-link" href="#" data-i18n="browser.auth.ca_download">Download StandTerm CA</a> <span data-i18n="browser.auth.ca_import">Import it into the browser host’s trusted root certificates.</span></p>
             </div>
         </div>
     </div>
@@ -1452,7 +1455,7 @@ <h3 id="browser-auth-help-title">Manual browser authorization</h3>
             <button id="agent-tunnel-btn" class="status-action" type="button" title="Set up remote Agent access through this SSH connection" hidden>Agent Tunnel</button>
             <button id="ssh-tunnels-btn" class="status-action" type="button" title="Manage TCP port forwarding through this SSH connection" hidden>Tunnels</button>
             <button id="sftp-status-btn" class="status-action status-sftp" type="button" title="Open Files" aria-label="Open Files" hidden>&#x1F4C1;</button>
-            <button id="transfer-queue-btn" class="status-action" type="button" title="Transfer Queue" aria-label="Transfer Queue" hidden><span aria-hidden="true">&#x21C4;</span> <span id="transfer-queue-count">0</span></button>
+            <button id="transfer-queue-btn" class="status-action" type="button" title="Transfer Queue" aria-label="Transfer Queue" data-i18n-title="agent.transfer.queue" data-i18n-aria-label="agent.transfer.queue" hidden><span aria-hidden="true">&#x21C4;</span> <span id="transfer-queue-count">0</span></button>
             <button id="quick-settings" class="status-action" type="button" title="Settings" aria-label="Settings">&#x2699;&#xFE0F;</button>
             <details id="tab-more">
                 <summary class="status-action" title="More terminal actions" aria-label="More terminal actions">&#x22EF;</summary>
@@ -1460,11 +1463,11 @@ <h3 id="browser-auth-help-title">Manual browser authorization</h3>
             </details>
         </div>
     </div>
-    <section id="transfer-queue-panel" aria-label="Transfer Queue" aria-hidden="true">
+    <section id="transfer-queue-panel" aria-label="Transfer Queue" aria-hidden="true" data-i18n-aria-label="agent.transfer.queue">
         <div id="transfer-queue-header">
-            <strong id="transfer-queue-title">Transfer Queue</strong>
-            <button id="transfer-queue-clear" type="button">Clear finished</button>
-            <button id="transfer-queue-close" type="button" aria-label="Close Transfer Queue">&times;</button>
+            <strong id="transfer-queue-title" data-i18n="agent.transfer.queue">Transfer Queue</strong>
+            <button id="transfer-queue-clear" type="button" data-i18n="agent.transfer.clear_finished">Dismiss finished</button>
+            <button id="transfer-queue-close" type="button" aria-label="Close Transfer Queue" data-i18n-aria-label="agent.transfer.close_queue">&times;</button>
         </div>
         <div id="transfer-queue-list" aria-live="polite"></div>
     </section>
@@ -1620,42 +1623,43 @@ <h4>Add tunnel</h4>
             </details>
         </div>
         <div id="agent-action-box">
-            <div id="agent-action-content" tabindex="0" aria-label="Agent action details">
+            <div id="agent-action-content" tabindex="0" aria-label="Agent action details" data-i18n-aria-label="agent.approval.details">
                 <div class="agent-preview" id="agent-action-preview"></div>
                 <div id="agent-file-copy-details">
-                    <div class="agent-file-copy-route"><span class="agent-file-copy-label">From</span><span id="agent-file-copy-source"></span></div>
-                    <div class="agent-file-copy-route"><span class="agent-file-copy-label">To</span><span id="agent-file-copy-destination"></span></div>
-                    <div class="agent-file-copy-route"><span class="agent-file-copy-label">Size</span><span id="agent-file-copy-size"></span></div>
+                    <div class="agent-file-copy-route"><span class="agent-file-copy-label" data-i18n="agent.copy.source">From</span><span id="agent-file-copy-source"></span></div>
+                    <div class="agent-file-copy-route"><span class="agent-file-copy-label" data-i18n="agent.copy.destination">To</span><span id="agent-file-copy-destination"></span></div>
+                    <div class="agent-file-copy-route"><span class="agent-file-copy-label" data-i18n="agent.copy.size">Size</span><span id="agent-file-copy-size"></span></div>
                     <span id="agent-file-copy-conflict" hidden></span>
                     <div id="agent-file-copy-warning"></div>
                 </div>
                 <div id="agent-action-meta">
-                    <span>target: <span id="agent-action-target">--</span></span>
-                    <span>bytes: <span id="agent-action-bytes">0</span></span>
-                    <span>lines: <span id="agent-action-lines">0</span></span>
-                    <span>newline: <span id="agent-action-newline">no</span></span>
-                    <span>control: <span id="agent-action-control">no</span></span>
-                    <span>status: <span id="agent-action-status">--</span></span>
+                    <span><span data-i18n="agent.approval.target">Target</span>: <span id="agent-action-target">--</span></span>
+                    <span><span data-i18n="agent.approval.bytes">Bytes</span>: <span id="agent-action-bytes">0</span></span>
+                    <span><span data-i18n="agent.approval.lines">Lines</span>: <span id="agent-action-lines">0</span></span>
+                    <span><span data-i18n="agent.approval.newline">Ends with newline</span>: <span id="agent-action-newline" data-i18n="common.no">No</span></span>
+                    <span><span data-i18n="agent.approval.control">Contains control characters</span>: <span id="agent-action-control" data-i18n="common.no">No</span></span>
+                    <span><span data-i18n="agent.approval.status">Status</span>: <span id="agent-action-status">--</span></span>
                 </div>
             </div>
             <div id="agent-action-controls">
-                <button type="button" id="agent-approve-btn">Approve</button>
-                <button type="button" id="agent-reject-btn">Reject</button>
-                <button type="button" id="agent-action-pause-btn">Pause</button>
+                <button type="button" id="agent-approve-btn" data-i18n="agent.approval.input">Approve input</button>
+                <button type="button" id="agent-reject-btn" data-i18n="agent.approval.reject">Reject</button>
+                <button type="button" id="agent-action-pause-btn" data-i18n="agent.approval.pause">Pause Agent</button>
             </div>
         </div>
     </div>
 
     <div id="session-recovery-modal">
         <div class="session-recovery-box">
-            <h3>Recover StandTerm session</h3>
-            <p>Use a registered device to recover a live session, or enter the access token printed by the current launcher. A restarted server always requires its current token.</p>
+            <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
+            <p data-i18n="browser.recovery.hint">Use a device registered for this hostname and enabled for a still-valid session, or enter the current launcher’s access token. After StandTerm restarts, use the current access token.</p>
             <form id="session-recovery-form" autocomplete="off">
+                <label for="session-recovery-token" data-i18n="browser.recovery.token_label">Access token</label>
                 <input id="session-recovery-token" name="token" type="password" required>
-                <button type="submit">Unlock</button>
+                <button type="submit" data-i18n="browser.recovery.submit">Use access token</button>
             </form>
-            <button id="session-recovery-platform" type="button">Recover live session with device</button>
-            <button id="session-recovery-remembered-token" type="button">Use remembered token</button>
+            <button id="session-recovery-platform" type="button" data-i18n="browser.recovery.device">Verify with device</button>
+            <button id="session-recovery-remembered-token" type="button" data-i18n="browser.recovery.saved">Use saved access token</button>
             <div id="session-recovery-message"></div>
         </div>
     </div>
@@ -3641,6 +3645,7 @@ <h3>Recover StandTerm session</h3>
                 const action = state && state.agent ? state.agent.lastAction : null;
                 const hasError = isAgentActionError(action);
                 agentStatusBox.classList.toggle('error', hasError);
+                agentStatusDetail.classList.toggle('outcome-unknown', !!(action && action.errorCode === 'file_copy_publish_outcome_unknown'));
                 if (!action) {
                     agentStatusMain.innerText = 'last: none';
                     agentStatusDetail.innerText = 'error: none';
@@ -3654,7 +3659,7 @@ <h3>Recover StandTerm session</h3>
                 if (action.errorCode) parts.push(`error: ${action.errorCode}`);
                 else parts.push('error: none');
                 if (action.errorCode === 'file_copy_publish_outcome_unknown') {
-                    parts.push('destination may have changed; inspect it before retrying');
+                    parts.push(t('agent.copy.result_unknown'));
                 }
                 if (action.bytesWritten !== null && Number.isFinite(Number(action.bytesWritten))) {
                     parts.push(`written: ${action.bytesWritten}`);
@@ -3860,11 +3865,11 @@ <h3>Recover StandTerm session</h3>
                     agentActionTarget.innerText = '--';
                     agentActionBytes.innerText = '0';
                     agentActionLines.innerText = '0';
-                    agentActionNewline.innerText = 'no';
-                    agentActionControl.innerText = 'no';
+                    agentActionNewline.innerText = t('common.no');
+                    agentActionControl.innerText = t('common.no');
                     agentActionStatus.innerText = '--';
-                    agentApproveBtn.innerText = 'Approve';
-                    agentRejectBtn.innerText = 'Reject';
+                    agentApproveBtn.innerText = t('agent.approval.input');
+                    agentRejectBtn.innerText = t('agent.approval.reject');
                     agentApproveBtn.disabled = true;
                     agentRejectBtn.disabled = true;
                     agentActionPauseBtn.disabled = true;
@@ -3886,12 +3891,12 @@ <h3>Recover StandTerm session</h3>
                     agentFileCopyConflict.innerText = String(action.conflict_mode || 'fail').replace('_', ' ');
                     if (action.conflict_mode === 'replace') {
                         agentFileCopyWarning.innerText = action.destination_exists
-                            ? `This will atomically replace an existing regular file (${formatSftpBytes(action.destination_existing_size)}).`
-                            : 'Replace was requested, but no destination file existed during preflight.';
+                            ? t('agent.copy.replace', { size: formatSftpBytes(action.destination_existing_size) })
+                            : t('agent.copy.replace_missing');
                     } else if (action.conflict_mode === 'keep_both') {
-                        agentFileCopyWarning.innerText = 'The displayed destination is the exact keep-both name selected by the backend.';
+                        agentFileCopyWarning.innerText = t('agent.copy.keep_both');
                     } else if (action.destination_exists) {
-                        agentFileCopyWarning.innerText = 'The destination exists. Approval reveals the conflict result; no file will be copied.';
+                        agentFileCopyWarning.innerText = t('agent.copy.destination_exists');
                     } else {
                         agentFileCopyWarning.innerText = '';
                     }
@@ -3900,14 +3905,14 @@ <h3>Recover StandTerm session</h3>
                     const copied = normalizeAgentCount(action.bytes_copied);
                     const total = normalizeAgentCount(action.total_bytes || action.source_size);
                     agentActionBytes.innerText = action.status === 'pending_approval'
-                        ? 'after approval'
+                        ? t('agent.copy.after_approval')
                         : `${formatSftpBytes(copied)} / ${formatSftpBytes(total)}`;
                 } else {
                     agentActionBytes.innerText = String(normalizeAgentCount(action.byte_length));
                 }
                 agentActionLines.innerText = isFileCopy ? '--' : String(normalizeAgentCount(action.line_count));
-                agentActionNewline.innerText = isFileCopy ? '--' : (action.ends_with_newline ? 'yes' : 'no');
-                agentActionControl.innerText = isFileCopy ? '--' : (action.contains_control_chars ? 'yes' : 'no');
+                agentActionNewline.innerText = isFileCopy ? '--' : t(action.ends_with_newline ? 'common.yes' : 'common.no');
+                agentActionControl.innerText = isFileCopy ? '--' : t(action.contains_control_chars ? 'common.yes' : 'common.no');
                 const copied = normalizeAgentCount(action.bytes_copied);
                 const total = normalizeAgentCount(action.total_bytes || action.source_size);
                 const percent = isFileCopy && total > 0
@@ -3916,8 +3921,8 @@ <h3>Recover StandTerm session</h3>
                 agentActionStatus.innerText = percent === null
                     ? (action.status || '--')
                     : `${action.status || '--'} · ${percent}%`;
-                agentApproveBtn.innerText = isFileCopy ? 'Approve copy' : 'Approve';
-                agentRejectBtn.innerText = isFileCopy ? 'Deny' : 'Reject';
+                agentApproveBtn.innerText = t(isFileCopy ? 'agent.approval.copy' : 'agent.approval.input');
+                agentRejectBtn.innerText = t('agent.approval.reject');
                 const canDecide = canUseAgentPanel(state)
                     && action.status === 'pending_approval'
                     && !!action.action_id
@@ -5754,7 +5759,7 @@ <h3>Recover StandTerm session</h3>
                 browserAuthBox.style.display = !serverUnavailable && authorizationRequired ? 'block' : 'none';
                 connectionForm.style.display = serverUnavailable || authorizationRequired ? 'none' : 'block';
                 browserAuthMessage.innerText = authorizationRequired
-                    ? (message || 'First time? Please use an Auth URL.')
+                    ? (message || t('browser.auth.instructions'))
                     : '';
                 browserAuthHelpDir.innerText = terminalPolicy.authorized_dir || 'authorized/';
                 browserAuthCaHelp.style.display = terminalPolicy.ca_download_url ? 'block' : 'none';
@@ -5994,7 +5999,7 @@ <h3>Recover StandTerm session</h3>
             }
 
             function registerBrowserIdentity() {
-                if (!socket || !socket.connected) return Promise.reject(new Error('Socket is not connected yet.'));
+                if (!socket || !socket.connected) return Promise.reject(new Error(t('browser.auth.disconnected')));
                 return getBrowserIdentity()
                     .then(identity => {
                         socket.emit('register_browser_identity', {
@@ -6017,7 +6022,7 @@ <h3>Recover StandTerm session</h3>
                     cleanUrl.searchParams.delete('authorize');
                     window.history.replaceState({}, document.title, cleanUrl.toString());
                 } catch (e) {}
-                updateBrowserAuthUi('Authorizing this browser from the launch URL...');
+                updateBrowserAuthUi(t('browser.auth.authorizing'));
                 socket.emit('browser_authorization_grant', {
                     grant_token: BROWSER_AUTH_GRANT
                 });
@@ -6284,7 +6289,7 @@ <h3>Recover StandTerm session</h3>
                 if (browserPairingResponseTimer) clearTimeout(browserPairingResponseTimer);
                 browserPairingResponseTimer = setTimeout(() => {
                     setBrowserAuthBusy(false);
-                    updateBrowserAuthUi('No authorization response from server. Refresh this page, then try the manual download again.');
+                    updateBrowserAuthUi(t('browser.auth.no_response'));
                 }, 5000);
             }
 
@@ -6306,7 +6311,7 @@ <h3>Recover StandTerm session</h3>
                 const check = () => {
                     if (Date.now() >= browserPairingCheckExpiresAt) {
                         stopBrowserPairingAutoCheck();
-                        updateBrowserAuthUi('Still locked. Put the downloaded file in the authorized directory, then download a fresh file to retry.');
+                        updateBrowserAuthUi(t('browser.auth.file_not_accepted'));
                         return;
                     }
                     if (socket && socket.connected) socket.emit('check_browser_pairing');
@@ -7229,7 +7234,7 @@ <h3>Recover StandTerm session</h3>
                         return isAccessTokenRemembered();
                     },
                     showSessionRecoveryForTest(message) {
-                        showSessionRecovery(message || 'Session expired. Enter the access token again.');
+                        showSessionRecovery(message || t('browser.recovery.expired'));
                     },
                     applyTerminalPolicy(policy) {
                         applyTerminalPolicy(cloneForTest(policy));
@@ -7548,7 +7553,7 @@ <h3>Recover StandTerm session</h3>
                 });
                 if (isSessionRequiredConnectError(err)) {
                     setServerConnectionState('session_required');
-                    showSessionRecovery('Enter the access token printed by the current StandTerm launcher.');
+                    showSessionRecovery(t('browser.recovery.current_token'));
                 } else {
                     setServerConnectionState('unavailable');
                 }
@@ -7690,7 +7695,7 @@ <h3>Recover StandTerm session</h3>
                 setBrowserAuthBusy(false);
                 if (!data || typeof data.filename !== 'string' || typeof data.content !== 'string') return;
                 downloadTextFile(data.filename, data.content);
-                updateBrowserAuthUi(`Downloaded ${data.filename}. Move it to ${data.authorized_dir}; this page will spot it automatically.`);
+                updateBrowserAuthUi(t('browser.auth.downloaded', { filename: data.filename, directory: data.authorized_dir }));
                 startBrowserPairingAutoCheck();
             });
             socket.on('browser_authorization_status', data => {
@@ -7704,7 +7709,7 @@ <h3>Recover StandTerm session</h3>
                 if (data.status === 'authorized') {
                     stopBrowserPairingAutoCheck();
                     userSelectedConnectionType = null;
-                    updateBrowserAuthUi('Welcome aboard. Loading connection options...');
+                    updateBrowserAuthUi(t('browser.auth.authorized'));
                     updatePolicyDebugPanel('browser_authorized', data);
                     if (socket && socket.connected) socket.emit('refresh_terminal_policy');
                 } else if (data.message) {
@@ -7803,16 +7808,16 @@ <h3>Recover StandTerm session</h3>
                 }
                 updateBrowserAuthUi();
                 if (state === 'available') {
-                    socketStatusEl.innerText = 'Connected';
+                    socketStatusEl.innerText = t('browser.connection.connected');
                     socketStatusEl.style.color = '#34c759';
                 } else if (state === 'session_required') {
-                    socketStatusEl.innerText = 'Access token required';
+                    socketStatusEl.innerText = t('browser.connection.required');
                     socketStatusEl.style.color = '#ff453a';
                 } else if (state === 'unavailable') {
-                    socketStatusEl.innerText = 'Server not available (retrying)';
+                    socketStatusEl.innerText = t('browser.connection.retrying');
                     socketStatusEl.style.color = '#ff9f0a';
                 } else {
-                    socketStatusEl.innerText = 'Connecting...';
+                    socketStatusEl.innerText = t('browser.connection.connecting');
                     socketStatusEl.style.color = '#ffcc00';
                 }
                 connectBtn.disabled = state !== 'available';
@@ -7826,10 +7831,10 @@ <h3>Recover StandTerm session</h3>
                 });
                 if (serverRetryNowBtn) {
                     serverRetryNowBtn.disabled = true;
-                    serverRetryNowBtn.innerText = 'Retrying...';
+                    serverRetryNowBtn.innerText = t('browser.connection.reconnecting');
                     setTimeout(() => {
                         serverRetryNowBtn.disabled = false;
-                        serverRetryNowBtn.innerText = 'Retry Now';
+                        serverRetryNowBtn.innerText = t('browser.connection.retry');
                     }, 1000);
                 }
                 const manager = socket.io;
@@ -7932,7 +7937,7 @@ <h3>Recover StandTerm session</h3>
             async function readPlatformRecoveryResponse(response) {
                 const payload = await response.json().catch(() => ({}));
                 if (!response.ok || payload.status !== 'ok') {
-                    const error = new Error(payload.message || 'Platform session recovery failed.');
+                    const error = new Error(payload.message || t('browser.recovery.failed'));
                     error.errorCode = payload.error_code || null;
                     throw error;
                 }
@@ -7941,9 +7946,15 @@ <h3>Recover StandTerm session</h3>
 
             function formatPlatformRecoveryError(error) {
                 if (error && error.name === 'NotAllowedError') {
-                    return 'Device verification was cancelled or no matching passkey is available.';
+                    return t('browser.recovery.device_cancelled');
+                }
+                if (error && error.errorCode === 'session_recovery_not_configured') {
+                    return t('browser.recovery.not_configured');
                 }
-                return error && error.message ? error.message : 'Platform session recovery failed.';
+                if (error && error.errorCode === 'session_recovery_no_live_session') {
+                    return t('browser.recovery.no_live_session');
+                }
+                return error && error.message ? error.message : t('browser.recovery.failed');
             }
 
             async function registerPlatformRecoveryCredential() {
@@ -8077,7 +8088,7 @@ <h3>Recover StandTerm session</h3>
                         headers: { 'Accept': 'application/json' },
                     });
                     if (!response.ok) {
-                        showSessionRecovery('Session expired. Enter the access token again.');
+                        showSessionRecovery(t('browser.recovery.expired'));
                         return;
                     }
                     const result = await response.json().catch(() => ({}));
@@ -8122,7 +8133,7 @@ <h3>Recover StandTerm session</h3>
                     body,
                 });
                 if (!response.ok) {
-                    throw new Error('Access token was not accepted.');
+                    throw new Error(t('browser.recovery.token_rejected'));
                 }
             }
 
@@ -8145,7 +8156,7 @@ <h3>Recover StandTerm session</h3>
                     headers: { 'Accept': 'application/json' },
                 });
                 if (!response.ok) {
-                    showSessionRecovery('Session expired. Enter the access token again.');
+                    showSessionRecovery(t('browser.recovery.expired'));
                     throw new Error('Session expired.');
                 }
                 const result = await response.json();
@@ -8501,21 +8512,21 @@ <h3>Recover StandTerm session</h3>
                 try {
                     authorizationUrl = new URL(browserAuthUrlInput.value.trim());
                 } catch (e) {
-                    setBrowserAuthUrlError('That does not look like a complete Auth URL.');
+                    setBrowserAuthUrlError(t('browser.auth.invalid_url'));
                     browserAuthUrlInput.focus();
                     return;
                 }
                 if (!['http:', 'https:'].includes(authorizationUrl.protocol)) {
-                    setBrowserAuthUrlError('Auth URLs must use HTTP or HTTPS.');
+                    setBrowserAuthUrlError(t('browser.auth.invalid_scheme'));
                     browserAuthUrlInput.focus();
                     return;
                 }
                 if (!authorizationUrl.searchParams.get('authorize')) {
-                    setBrowserAuthUrlError('That URL is missing its one-time authorization code.');
+                    setBrowserAuthUrlError(t('browser.auth.missing_grant'));
                     browserAuthUrlInput.focus();
                     return;
                 }
-                browserAuthMessage.innerText = 'Opening the gate...';
+                browserAuthMessage.innerText = t('browser.auth.opening');
                 window.location.assign(authorizationUrl.toString());
             };
             browserAuthUrlInput.oninput = () => setBrowserAuthUrlError('');
@@ -8526,15 +8537,15 @@ <h3>Recover StandTerm session</h3>
             };
             authorizeBrowserBtn.onclick = () => {
                 if (!socket || !socket.connected) {
-                    updateBrowserAuthUi('Socket is not connected yet. Wait until the Socket status is Connected, then try again.');
+                    updateBrowserAuthUi(t('browser.auth.disconnected'));
                     return;
                 }
                 clearBrowserPairingResponseTimer();
                 setBrowserAuthBusy(true);
-                updateBrowserAuthUi('Preparing browser authorization...');
+                updateBrowserAuthUi(t('browser.auth.preparing'));
                 registerBrowserIdentity()
                     .then(() => {
-                        updateBrowserAuthUi('Requesting authorization file from server...');
+                        updateBrowserAuthUi(t('browser.auth.requesting_file'));
                         socket.emit('request_browser_pairing');
                         startBrowserPairingResponseTimer();
                     })
@@ -9154,16 +9165,21 @@ <h3>Recover StandTerm session</h3>
             function agentTransferStatusText(action) {
                 const copied = normalizeAgentCount(action.bytes_copied);
                 const total = normalizeAgentCount(action.total_bytes || action.source_size);
-                const amount = total > 0 ? `${formatSftpBytes(copied)} of ${formatSftpBytes(total)}` : formatSftpBytes(copied);
-                if (action.status === 'approved') return `Starting · ${formatSftpBytes(total)}`;
+                const amount = total > 0
+                    ? t('agent.transfer.amount', { copied: formatSftpBytes(copied), total: formatSftpBytes(total) })
+                    : formatSftpBytes(copied);
+                if (action.status === 'approved') return `${t('agent.transfer.starting')} · ${formatSftpBytes(total)}`;
                 if (action.status === 'running') {
                     const percent = total > 0 ? Math.min(100, Math.floor(copied * 100 / total)) : 0;
                     return `${percent}% · ${amount}`;
                 }
-                if (action.status === 'committing') return `Finishing · ${formatSftpBytes(total)}`;
-                if (action.status === 'completed') return `Completed · ${formatSftpBytes(total)}`;
-                if (action.error_code === 'file_copy_cancelled_by_operator') return 'Stopped';
-                return action.error_code ? `Failed · ${action.error_code}` : 'Failed';
+                if (action.status === 'committing') return `${t('agent.transfer.finishing')} · ${formatSftpBytes(total)}`;
+                if (action.status === 'completed') return `${t('agent.transfer.completed')} · ${formatSftpBytes(total)}`;
+                if (action.error_code === 'file_copy_cancelled_by_operator') return t('agent.transfer.stopped');
+                if (action.error_code === 'file_copy_publish_outcome_unknown') {
+                    return `${t('agent.copy.result_unknown')} · ${action.error_code}`;
+                }
+                return action.error_code ? `${t('agent.transfer.failed')} · ${action.error_code}` : t('agent.transfer.failed');
             }
 
             function removeAgentTransfer(actionId) {
@@ -9238,6 +9254,7 @@ <h3>Recover StandTerm session</h3>
                     route.title = route.innerText;
                     const status = document.createElement('div');
                     status.className = 'transfer-queue-status';
+                    status.classList.toggle('outcome-unknown', action.error_code === 'file_copy_publish_outcome_unknown');
                     status.innerText = agentTransferStatusText(action);
                     content.append(name, route, status);
                     if (action.status !== 'failed') {
@@ -9263,13 +9280,14 @@ <h3>Recover StandTerm session</h3>
                     button.type = 'button';
                     if (isFinishedAgentTransfer(action)) {
                         button.innerText = '×';
-                        button.title = 'Dismiss';
-                        button.setAttribute('aria-label', `Dismiss ${agentTransferFilename(action)}`);
+                        button.title = t('agent.transfer.dismiss');
+                        button.setAttribute('aria-label', t('agent.transfer.dismiss_file', { filename: agentTransferFilename(action) }));
                         button.onclick = () => removeAgentTransfer(action.action_id);
                     } else {
-                        button.innerText = action.status === 'committing' ? '…' : 'Stop';
+                        button.innerText = action.status === 'committing' ? '…'
+                            : t(record.cancelPending ? 'agent.transfer.stopping' : 'agent.transfer.stop');
                         button.disabled = action.status === 'committing' || record.cancelPending;
-                        button.title = action.status === 'committing' ? 'The destination is being published and cannot be stopped' : 'Stop transfer';
+                        button.title = t(action.status === 'committing' ? 'agent.transfer.committing' : 'agent.transfer.stop_hint');
                         button.onclick = () => {
                             const state = terminals.get(action.terminal_id);
                             if (!state || !socket || !socket.connected || button.disabled) return;
@@ -11840,10 +11858,10 @@ <h3>Recover StandTerm session</h3>
             if (sessionRecoveryForm) {
                 sessionRecoveryForm.onsubmit = event => {
                     event.preventDefault();
-                    if (sessionRecoveryMessage) sessionRecoveryMessage.textContent = 'Unlocking...';
+                    if (sessionRecoveryMessage) sessionRecoveryMessage.textContent = t('browser.recovery.checking');
                     submitSessionRecoveryToken(sessionRecoveryToken ? sessionRecoveryToken.value : '')
                         .catch(err => {
-                            if (sessionRecoveryMessage) sessionRecoveryMessage.textContent = err.message || 'Access token was not accepted.';
+                            if (sessionRecoveryMessage) sessionRecoveryMessage.textContent = err.message || t('browser.recovery.token_rejected');
                         });
                 };
             }
@@ -11851,10 +11869,10 @@ <h3>Recover StandTerm session</h3>
                 sessionRecoveryRememberedTokenBtn.onclick = () => {
                     if (!isAccessTokenRemembered()) return;
                     sessionRecoveryRememberedTokenBtn.disabled = true;
-                    if (sessionRecoveryMessage) sessionRecoveryMessage.textContent = 'Unlocking with remembered token...';
+                    if (sessionRecoveryMessage) sessionRecoveryMessage.textContent = t('browser.recovery.checking_saved');
                     submitRememberedSessionRecoveryToken()
                         .catch(err => {
-                            if (sessionRecoveryMessage) sessionRecoveryMessage.textContent = err.message || 'Access token was not accepted.';
+                            if (sessionRecoveryMessage) sessionRecoveryMessage.textContent = err.message || t('browser.recovery.token_rejected');
                         })
                         .finally(() => {
                             sessionRecoveryRememberedTokenBtn.disabled = false;
@@ -11865,7 +11883,7 @@ <h3>Recover StandTerm session</h3>
             if (sessionRecoveryPlatformBtn) {
                 sessionRecoveryPlatformBtn.onclick = () => {
                     sessionRecoveryPlatformBtn.disabled = true;
-                    if (sessionRecoveryMessage) sessionRecoveryMessage.textContent = 'Waiting for device verification...';
+                    if (sessionRecoveryMessage) sessionRecoveryMessage.textContent = t('browser.recovery.verifying_device');
                     recoverSessionWithPlatformCredential()
                         .catch(error => {
                             if (sessionRecoveryMessage) {
@@ -11917,7 +11935,7 @@ <h3>Recover StandTerm session</h3>
             if (platformRecoveryArmBtn) {
                 platformRecoveryArmBtn.onclick = () => {
                     platformRecoveryArmBtn.disabled = true;
-                    if (platformRecoveryStatus) platformRecoveryStatus.textContent = 'Waiting for device verification...';
+                    if (platformRecoveryStatus) platformRecoveryStatus.textContent = t('browser.recovery.verifying_device');
                     authenticatePlatformRecoveryCredential()
                         .then(() => {
                             if (platformRecoveryStatus) {
diff --git a/tests/agent_backend_smoke.py b/tests/agent_backend_smoke.py
index d17c8f6..491bc8b 100644
--- a/tests/agent_backend_smoke.py
+++ b/tests/agent_backend_smoke.py
@@ -4002,11 +4002,12 @@ def set(self, value):
 def test_browser_authorization_gate_ui_contract():
     template = (Path(__file__).resolve().parents[1] / 'templates' / 'index.html').read_text(encoding='utf-8')
 
-    assert 'YOU SHALL NOT PASS!!' in template
-    assert 'First time? Please use an Auth URL.' in template
+    assert 'YOU SHALL NOT PASS!!' not in template
+    assert 'Browser authorization required' in template
+    assert 'Paste a browser authorization URL to continue.' in template
     assert 'Session ID: {{ launcher_instance_id }}' in template
     assert 'id="browser-auth-url-input"' in template
-    assert 'Download authorization file manually' in template
+    assert 'Download authorization file' in template
     assert 'id="browser-auth-help-modal"' in template
     assert "authorizationUrl.searchParams.get('authorize')" in template
     assert "const serverUnavailable = serverConnectionState === 'unavailable';" in template
diff --git a/tests/agent_browser_smoke.py b/tests/agent_browser_smoke.py
index 1ed2cc1..a9cc07d 100644
--- a/tests/agent_browser_smoke.py
+++ b/tests/agent_browser_smoke.py
@@ -165,18 +165,63 @@ def new_page(browser, access_url, ui_language=None):
     return context, page
 
 
-def test_access_required_page_accepts_token_login(browser, access_url):
+def test_access_required_page_accepts_token_login(browser, access_url, ui_language='en'):
     parsed = urllib.parse.urlparse(access_url)
     token = urllib.parse.parse_qs(parsed.query)['token'][0]
     base_url = urllib.parse.urlunparse(parsed._replace(query='', fragment=''))
     login_url = debug_url(base_url)
-    context = browser.new_context(viewport={'width': 1280, 'height': 800})
+    context = browser.new_context(viewport={'width': 1280, 'height': 800}, locale='en-US')
     page = context.new_page()
+    page.add_init_script("localStorage.setItem('terminal.pref.v1', JSON.stringify(" + json.dumps({'uiLanguage': ui_language}) + "));")
+    zh = ui_language == 'zh-TW'
+    pending_login = []
+    page.route('**/login', lambda route: pending_login.append(route))
     try:
         page.goto(login_url, wait_until='domcontentloaded')
         page.wait_for_selector('#access-token', timeout=5000)
+        check(page.inner_text('h1') == ('需要 StandTerm 存取權限' if zh else 'StandTerm access required'),
+              'initial gate title did not match its language')
+        check(page.locator('html').get_attribute('lang') == ui_language, 'initial gate did not apply the saved language')
+        check(page.get_by_label('存取權杖' if zh else 'Access token').count() == 1, 'initial token field lacks its accessible label')
+        check(page.inner_text('button[type="submit"]') == ('使用存取權杖' if zh else 'Use access token'),
+              'initial gate confused access-token login with browser authorization')
+        check(page.inner_text('#access-recovery-button') == ('使用裝置驗證' if zh else 'Verify with device'),
+              'initial device verification action did not match its language')
+        instructions = page.inner_text('main > p:first-of-type')
+        check('Access URL' in instructions and ('啟動器' if zh else 'launcher') in instructions,
+              'initial access instructions did not identify the launcher Access URL')
+        hint = page.inner_text('main')
+        for phrase in (['主機名稱', '仍有效的工作階段', '啟用', '重新啟動', '目前的存取權杖'] if zh else
+                       ['registered for this hostname', 'enabled for a still-valid session', 'After StandTerm restarts', 'current access token']):
+            check(phrase in hint, f'initial recovery hint omitted eligibility or restart detail: {phrase}')
+        pending_device = []
+        page.route('**/session-recovery/authenticate/options', lambda route: pending_device.append(route))
+        page.click('#access-recovery-button')
+        device_pending_text = '等待裝置驗證…' if zh else 'Waiting for device verification…'
+        page.wait_for_function('text => document.getElementById("access-login-status").textContent === text', arg=device_pending_text)
+        check(page.locator('#access-recovery-button').is_disabled(), 'device verification allowed repeated submission while pending')
+        check(len(pending_device) == 1, 'device verification did not issue one options request')
+        pending_device.pop().fulfill(status=400, content_type='application/json',
+                                     body=json.dumps({'status': 'error', 'message': 'Device fixture unavailable.'}))
+        page.wait_for_function('() => !document.getElementById("access-recovery-button").disabled')
+        check(page.inner_text('#access-recovery-button') == ('使用裝置驗證' if zh else 'Verify with device'),
+              'failed device verification did not retain its localized reset label')
+        check(page.inner_text('#access-login-status') == 'Device fixture unavailable.',
+              'device error fallback did not preserve the server diagnostic')
+        page.fill('#access-token', 'agt_not_a_launcher_access_token')
+        page.click('button[type="submit"]')
+        pending_text = '正在驗證存取權杖…' if zh else 'Checking access token…'
+        page.wait_for_function('text => document.getElementById("access-login-status").textContent === text', arg=pending_text)
+        check(len(pending_login) == 1, 'initial login did not issue one pending request')
+        pending_login.pop().continue_()
+        rejected_text = '存取權杖未通過驗證。' if zh else 'Access token was not accepted.'
+        page.wait_for_function('text => document.getElementById("access-login-status").textContent === text', arg=rejected_text)
+        check(page.locator('#connectBtn').count() == 0, 'an Agent token bypassed the initial access gate')
         page.fill('#access-token', token)
         page.click('button[type="submit"]')
+        page.wait_for_function('text => document.getElementById("access-login-status").textContent === text', arg=pending_text)
+        check(len(pending_login) == 1, 'initial token retry did not submit one request')
+        pending_login.pop().continue_()
         page.wait_for_function('() => !!window.terminalTest', timeout=10000)
         page.wait_for_function(
             "() => window.terminalTest.getSocketState().connected === true",
@@ -192,9 +237,41 @@ def test_access_required_page_accepts_token_login(browser, access_url):
         close_context(context)
 
 
-def test_browser_authorization_gate_hides_connection_controls(browser, access_url):
-    context = browser.new_context(viewport={'width': 390, 'height': 844})
+def test_initial_access_login_falls_back_without_localization_or_javascript(browser, access_url):
+    parsed = urllib.parse.urlparse(access_url)
+    token = urllib.parse.parse_qs(parsed.query)['token'][0]
+    base_url = urllib.parse.urlunparse(parsed._replace(query='', fragment=''))
+    localization_assets = re.compile(r'/static/js/standterm-(?:i18n|messages)\.js(?:\?.*)?$')
+    for javascript_enabled in [False, True]:
+        context = browser.new_context(viewport={'width': 1280, 'height': 800}, locale='en-US',
+                                      java_script_enabled=javascript_enabled)
+        page = context.new_page()
+        try:
+            if javascript_enabled:
+                page.add_init_script("localStorage.setItem('terminal.pref.v1', JSON.stringify({uiLanguage: 'zh-TW'}));")
+                page.route(localization_assets, lambda route: route.abort())
+            response = page.goto(debug_url(base_url), wait_until='domcontentloaded')
+            check(response.status == 401, 'fallback fixture did not start without an authenticated session')
+            check(page.inner_text('h1') == 'StandTerm access required', 'fallback did not retain the English initial gate')
+            check(page.inner_text('button[type="submit"]') == 'Use access token', 'fallback lost the token submission label')
+            check(page.locator('#access-login-form').get_attribute('method') == 'post', 'fallback changed the login method')
+            check(page.locator('#access-login-form').get_attribute('action') == '/login', 'fallback changed the login endpoint')
+            if javascript_enabled:
+                page.unroute(localization_assets)
+            page.fill('#access-token', token)
+            page.click('button[type="submit"]')
+            page.wait_for_selector('#connectBtn', state='attached', timeout=10000)
+            check(context.request.get(base_url).status == 200, 'fallback login did not establish an authenticated session')
+            check('token=' not in page.url, 'fallback login exposed its access token in the URL')
+        finally:
+            close_context(context)
+
+
+def test_browser_authorization_gate_hides_connection_controls(browser, access_url, ui_language='en'):
+    context = browser.new_context(viewport={'width': 390, 'height': 844}, locale='en-US')
     page = context.new_page()
+    page.add_init_script("localStorage.setItem('terminal.pref.v1', JSON.stringify(" + json.dumps({'uiLanguage': ui_language}) + "));")
+    zh = ui_language == 'zh-TW'
     try:
         page.goto(debug_url(access_url), wait_until='domcontentloaded')
         page.wait_for_function('() => !!window.terminalTest', timeout=10000)
@@ -224,7 +301,8 @@ def test_browser_authorization_gate_hides_connection_controls(browser, access_ur
                 return {
                     title: document.querySelector('#controls h2').innerText,
                     sessionId: document.getElementById('launcher-session-id').innerText,
-                    warning: document.getElementById('browser-auth-warning').innerText,
+                    warningPresent: !!document.getElementById('browser-auth-warning'),
+                    authorizationTitle: document.getElementById('browser-auth-title').innerText,
                     message: document.getElementById('browser-auth-message').innerText,
                     connectionDisplay: getComputedStyle(document.getElementById('connection-form')).display,
                     sshVisible: document.getElementById('ssh-fields').getClientRects().length > 0,
@@ -235,23 +313,43 @@ def test_browser_authorization_gate_hides_connection_controls(browser, access_ur
         check(state['title'] == 'StandTerm', 'authorization gate does not show the StandTerm product name')
         check(state['sessionId'].startswith('Session ID: '), 'authorization gate does not show the launcher session ID')
         check(len(state['sessionId']) > len('Session ID: '), 'authorization gate launcher session ID is empty')
-        check(state['warning'] == 'YOU SHALL NOT PASS!!', 'authorization gate warning is missing')
-        check(state['message'] == 'First time? Please use an Auth URL.', 'authorization gate first-use hint is missing')
+        check(state['warningPresent'] is False, 'authorization gate retained the decorative warning')
+        check(state['authorizationTitle'] == ('需要瀏覽器授權' if zh else 'Browser authorization required'),
+              'browser authorization title did not match its language')
+        check(state['message'] == ('貼上瀏覽器授權網址以繼續。' if zh else 'Paste a browser authorization URL to continue.'),
+              'authorization gate first-use hint is missing')
+        check(page.inner_text('#browser-auth-url-submit') == ('授權瀏覽器' if zh else 'Authorize browser'),
+              'browser authorization submit action did not name its purpose')
         check(state['connectionDisplay'] == 'none', 'authorization gate left connection controls visible')
         check(state['sshVisible'] is False, 'authorization gate left SSH fields visible')
         check(state['actionsInsideControls'] is True, 'authorization gate actions overflow the controls panel')
 
-        page.fill('#browser-auth-url-input', 'https://example.test/?token=abc')
+        original_url = page.url
+        page.fill('#browser-auth-url-input', 'not a URL')
         page.click('#browser-auth-url-submit')
-        check(
-            'one-time authorization code' in page.locator('#browser-auth-url-error').inner_text(),
-            'authorization gate accepted a URL without an authorization grant',
-        )
+        check(page.locator('#browser-auth-url-input').evaluate('input => input.validity.typeMismatch'),
+              'authorization URL input lost native URL validation')
+        check(page.url == original_url and page.inner_text('#browser-auth-url-error') == '',
+              'native validation navigated or invoked the custom URL parser')
+        invalid_inputs = [
+            ('', '請輸入完整的瀏覽器授權網址。' if zh else 'Enter a complete browser authorization URL.'),
+            ('ftp://example.test/?authorize=fixture', '瀏覽器授權網址必須使用 HTTP 或 HTTPS。' if zh else 'Browser authorization URLs must use HTTP or HTTPS.'),
+            (access_url, '此網址缺少一次性瀏覽器授權碼。' if zh else 'This URL has no one-time browser authorization code.'),
+            ('https://example.test/?token=agt_not_browser_authorization', '此網址缺少一次性瀏覽器授權碼。' if zh else 'This URL has no one-time browser authorization code.'),
+        ]
+        for value, expected in invalid_inputs:
+            page.fill('#browser-auth-url-input', value)
+            check(page.inner_text('#browser-auth-url-error') == '', 'editing an authorization URL did not reset its validation error')
+            page.click('#browser-auth-url-submit')
+            check(page.inner_text('#browser-auth-url-error') == expected, 'authorization URL validation used the wrong message')
+            check(page.url == original_url, 'malformed authorization input navigated away from the gate')
+            check(page.evaluate('() => window.terminalTest.getTerminalPolicy().browser_authorization.authorized') is False,
+                  'malformed authorization input changed the grant state')
 
         page.click('#browser-auth-help-btn')
         page.wait_for_selector('#browser-auth-help-modal.open', timeout=5000)
         check(
-            'checks for the file automatically' in page.locator('.browser-auth-help-body').inner_text(),
+            ('自動檢查授權檔' if zh else 'checks for the file automatically') in page.locator('.browser-auth-help-body').inner_text(),
             'manual authorization help does not explain automatic checking',
         )
         page.click('#browser-auth-help-close')
@@ -259,6 +357,16 @@ def test_browser_authorization_gate_hides_connection_controls(browser, access_ur
             page.locator('#browser-auth-help-modal').get_attribute('aria-hidden') == 'true',
             'manual authorization help did not close',
         )
+        parsed = urllib.parse.urlparse(access_url)
+        authorization_url = urllib.parse.urlunparse(parsed._replace(query='authorize=browser-smoke-fixture', fragment=''))
+        page.route(authorization_url, lambda route: route.fulfill(status=204))
+        page.fill('#browser-auth-url-input', authorization_url)
+        with page.expect_request(authorization_url):
+            page.click('#browser-auth-url-submit', no_wait_after=True)
+        check(page.inner_text('#browser-auth-message') == ('正在開啟授權網址…' if zh else 'Opening authorization URL…'),
+              'syntactically valid authorization URL did not show the pending navigation state')
+        check(page.evaluate('() => window.terminalTest.getTerminalPolicy().browser_authorization.authorized') is False,
+              'opening an authorization URL claimed authorization before server confirmation')
     finally:
         close_context(context)
 
@@ -270,9 +378,11 @@ def close_context(context):
         pass
 
 
-def test_server_unavailable_waits_for_reconnect(browser, access_url):
-    context = browser.new_context(viewport={'width': 1280, 'height': 800})
+def test_server_unavailable_waits_for_reconnect(browser, access_url, ui_language='en'):
+    context = browser.new_context(viewport={'width': 1280, 'height': 800}, locale='en-US')
     page = context.new_page()
+    page.add_init_script("localStorage.setItem('terminal.pref.v1', JSON.stringify(" + json.dumps({'uiLanguage': ui_language}) + "));")
+    zh = ui_language == 'zh-TW'
     try:
         page.goto(debug_url(access_url), wait_until='domcontentloaded')
         page.wait_for_function('() => !!window.terminalTest', timeout=10000)
@@ -298,15 +408,21 @@ def test_server_unavailable_waits_for_reconnect(browser, access_url):
                 connectDisabled: document.getElementById('connectBtn').disabled
             })"""
         )
-        check(unavailable['socketStatus'] == 'Server not available (retrying)', 'socket status did not identify server unavailability')
-        check('keep checking and reconnect automatically' in unavailable['message'], 'server unavailable guidance did not explain automatic recovery')
+        check(unavailable['socketStatus'] == ('無法連線至 StandTerm（正在重連）' if zh else 'Cannot reach StandTerm (reconnecting)'),
+              'socket status did not identify server unavailability')
+        check(('此頁面會持續嘗試重新連線' if zh else 'This page will keep trying to reconnect') in unavailable['message'],
+              'server unavailable guidance did not explain automatic recovery')
+        check(('目前啟動器提供的存取權杖' if zh else 'access token from its current launcher') in unavailable['message'],
+              'reconnect guidance did not distinguish the current launcher token after a restart')
         check(unavailable['messageDisplay'] == 'block', 'server unavailable guidance was not visible')
         check(unavailable['connectionFormDisplay'] == 'none', 'connection picker remained visible while the server was unavailable')
         check(unavailable['connectDisabled'] is True, 'terminal connect button remained enabled while the server was unavailable')
         check(page.locator('#server-retry-now').is_visible(), 'Retry Now was not visible with the disconnect warning')
+        check(page.inner_text('#server-retry-now') == ('立即重新連線' if zh else 'Reconnect now'),
+              'reconnect action did not match its language')
         page.click('#server-retry-now')
         check(
-            page.locator('#server-retry-now').inner_text() == 'Retrying...',
+            page.locator('#server-retry-now').inner_text() == ('正在重新連線…' if zh else 'Reconnecting…'),
             'Retry Now did not trigger an immediate reconnect attempt',
         )
         check(
@@ -316,6 +432,9 @@ def test_server_unavailable_waits_for_reconnect(browser, access_url):
             ),
             'Retry Now did not record an explicit reconnect attempt',
         )
+        page.wait_for_function('text => document.getElementById("server-retry-now").innerText === text',
+                               arg='立即重新連線' if zh else 'Reconnect now')
+        check(page.locator('#server-retry-now').is_enabled(), 'pending retry did not reset its control')
 
         context.set_offline(False)
         page.wait_for_function(
@@ -334,6 +453,7 @@ def test_server_unavailable_waits_for_reconnect(browser, access_url):
         check(recovered['messageDisplay'] == 'none', 'server unavailable guidance remained visible after reconnect')
         check(recovered['connectionFormDisplay'] == 'block', 'connection picker did not return after reconnect')
         check(recovered['connectDisabled'] is False, 'terminal connect button did not recover after reconnect')
+        check(page.inner_text('#socketStatus') == ('已連線' if zh else 'Connected'), 'reconnected socket status did not match its language')
     finally:
         close_context(context)
 
@@ -367,11 +487,15 @@ def test_retry_now_resubscribes_after_socket_disconnect(browser, access_url):
         close_context(context)
 
 
-def test_invalid_session_reconnect_prompts_for_current_token(browser, access_url):
+def test_invalid_session_reconnect_prompts_for_current_token(browser, access_url, ui_language='en'):
     parsed = urllib.parse.urlparse(access_url)
     token = urllib.parse.parse_qs(parsed.query)['token'][0]
-    context = browser.new_context(viewport={'width': 1280, 'height': 800})
+    context = browser.new_context(viewport={'width': 1280, 'height': 800}, locale='en-US')
     page = context.new_page()
+    page.add_init_script("localStorage.setItem('terminal.pref.v1', JSON.stringify(" + json.dumps({'uiLanguage': ui_language}) + "));")
+    zh = ui_language == 'zh-TW'
+    pending_login = []
+    page.route('**/login', lambda route: pending_login.append(route))
     try:
         page.goto(debug_url(access_url), wait_until='domcontentloaded')
         page.wait_for_function('() => !!window.terminalTest', timeout=10000)
@@ -400,13 +524,50 @@ def test_invalid_session_reconnect_prompts_for_current_token(browser, access_url
             })"""
         )
         check(recovery['serverState'] == 'session_required', 'invalid session did not use the structured session-required state')
-        check(recovery['title'] == 'Recover StandTerm session', 'session recovery title is incorrect')
-        check('registered device' in recovery['detail'], 'session recovery did not offer device verification')
-        check('restarted server' in recovery['detail'], 'session recovery did not explain the backend restart boundary')
-        check('current StandTerm launcher' in recovery['message'], 'session recovery did not request the current launcher token')
+        check(recovery['title'] == ('恢復 StandTerm 存取' if zh else 'Restore StandTerm access'), 'session recovery title is incorrect')
+        for phrase in (['主機名稱', '仍有效的工作階段', '啟用', '重新啟動', '目前的存取權杖'] if zh else
+                       ['registered for this hostname', 'enabled for a still-valid session', 'After StandTerm restarts', 'current access token']):
+            check(phrase in recovery['detail'], f'recovery hint omitted eligibility or restart detail: {phrase}')
+        check(recovery['message'] == ('請輸入目前 StandTerm 啟動器提供的存取權杖。' if zh else 'Enter the access token from the current StandTerm launcher.'),
+              'session recovery did not request the current launcher token')
+        check(page.get_by_label('存取權杖' if zh else 'Access token', exact=True).count() == 1,
+              'recovery token input lacks its accessible name')
+        check(page.inner_text('#session-recovery-form button[type="submit"]') == ('使用存取權杖' if zh else 'Use access token'),
+              'recovery submit action did not identify launcher access')
+        check(page.inner_text('#session-recovery-platform') == ('使用裝置驗證' if zh else 'Verify with device'),
+              'recovery device action did not match its language')
+        check(page.inner_text('#session-recovery-remembered-token') == ('使用已儲存的存取權杖' if zh else 'Use saved access token'),
+              'saved-token action did not match its language')
+
+        page.click('#session-recovery-remembered-token')
+        saved_pending_text = '正在驗證已儲存的存取權杖…' if zh else 'Checking saved access token…'
+        page.wait_for_function('text => document.getElementById("session-recovery-message").textContent === text', arg=saved_pending_text)
+        check(page.locator('#session-recovery-remembered-token').is_disabled(), 'saved-token request did not disable repeated submission')
+        check(len(pending_login) == 1, 'saved-token recovery did not issue one request')
+        pending_login.pop().fulfill(status=401, body='')
+        rejected_text = '存取權杖未通過驗證。' if zh else 'Access token was not accepted.'
+        page.wait_for_function('text => document.getElementById("session-recovery-message").textContent === text', arg=rejected_text)
+        check(page.locator('#session-recovery-remembered-token').is_enabled(), 'rejected saved token did not reset its control')
+        check(page.inner_text('#session-recovery-remembered-token') == ('使用已儲存的存取權杖' if zh else 'Use saved access token'),
+              'saved-token control lost its localized reset label')
+
+        page.fill('#session-recovery-token', 'agt_not_a_launcher_access_token')
+        page.click('#session-recovery-form button[type="submit"]')
+        pending_text = '正在驗證存取權杖…' if zh else 'Checking access token…'
+        page.wait_for_function('text => document.getElementById("session-recovery-message").textContent === text', arg=pending_text)
+        check(len(pending_login) == 1, 'recovery did not submit one pending token request')
+        pending_login.pop().continue_()
+        rejected_text = '存取權杖未通過驗證。' if zh else 'Access token was not accepted.'
+        page.wait_for_function('text => document.getElementById("session-recovery-message").textContent === text', arg=rejected_text)
+        check(page.locator('#session-recovery-modal.open').is_visible(), 'an Agent token bypassed session recovery')
+        check(page.evaluate('() => window.terminalTest.getSocketState().serverConnectionState') == 'session_required',
+              'rejected token changed the structured recovery state')
 
         page.fill('#session-recovery-token', token)
         page.click('#session-recovery-form button[type="submit"]')
+        page.wait_for_function('text => document.getElementById("session-recovery-message").textContent === text', arg=pending_text)
+        check(len(pending_login) == 1, 'recovery retry did not submit one pending token request')
+        pending_login.pop().continue_()
         page.wait_for_function(
             "() => window.terminalTest.getSocketState().connected === true",
             timeout=10000,
@@ -415,10 +576,20 @@ def test_invalid_session_reconnect_prompts_for_current_token(browser, access_url
             page.evaluate("() => window.terminalTest.getSocketState().serverConnectionState") == 'available',
             'valid current token did not restore the server connection',
         )
+        check(page.locator('#session-recovery-modal.open').count() == 0, 'successful recovery did not close its dialog')
+        check(page.inner_text('#session-recovery-message') == '', 'successful recovery retained a pending or rejected message')
+        check(page.input_value('#session-recovery-token') == '', 'successful recovery retained the entered access token')
     finally:
         close_context(context)
 
 
+def test_browser_access_and_recovery_in_traditional_chinese(browser, access_url):
+    test_access_required_page_accepts_token_login(browser, access_url, ui_language='zh-TW')
+    test_browser_authorization_gate_hides_connection_controls(browser, access_url, ui_language='zh-TW')
+    test_server_unavailable_waits_for_reconnect(browser, access_url, ui_language='zh-TW')
+    test_invalid_session_reconnect_prompts_for_current_token(browser, access_url, ui_language='zh-TW')
+
+
 def test_platform_passkey_recovers_live_session_without_access_token(browser, access_url):
     parsed = urllib.parse.urlparse(access_url)
     localhost_access_url = urllib.parse.urlunparse(parsed._replace(
@@ -2701,6 +2872,8 @@ def test_approval_payload_and_stale_rejections(browser, access_url):
         attach_agent(page)
         set_agent_mode(page, 'approval', 'approval_pending')
         action = request_agent_action(page, ':\n')
+        check(page.inner_text('#agent-approve-btn') == 'Approve input', 'input approval did not name the proposed input')
+        check(page.inner_text('#agent-reject-btn') == 'Reject', 'input rejection label changed its meaning')
 
         clear_emitted(page)
         page.evaluate("() => document.getElementById('agent-approve-btn').click()")
@@ -2738,8 +2911,9 @@ def test_approval_payload_and_stale_rejections(browser, access_url):
         close_context(context)
 
 
-def test_file_copy_approval_shows_canonical_plan(browser, access_url):
-    context, page = new_page(browser, access_url)
+def test_file_copy_approval_shows_canonical_plan(browser, access_url, ui_language='en'):
+    context, page = new_page(browser, access_url, ui_language=ui_language)
+    zh = ui_language == 'zh-TW'
     try:
         attach_agent(page)
         set_agent_mode(page, 'direct', 'direct_active')
@@ -2797,31 +2971,194 @@ def test_file_copy_approval_shows_canonical_plan(browser, access_url):
         check(details['source'] == 'builder@source.example:22:/srv/releases/image.bin', 'source plan was not exact')
         check(details['destination'] == 'Local Shell (bash):/tmp/image.bin', 'destination plan was not exact')
         check(details['size'] == '1.50 KiB', 'source size was not rendered')
-        check('atomically replace' in details['warning'], 'replace warning was not explicit')
-        check(details['approve'] == 'Approve copy', 'copy approval button was not explicit')
-        check(details['deny'] == 'Deny', 'copy denial button was not concise')
+        check(details['warning'] == ('將覆寫既有檔案（64 B）。' if zh else 'Replace the existing file (64 B).'),
+              'replace warning did not retain the existing destination size and overwrite consequence')
+        check(details['approve'] == ('核准複製' if zh else 'Approve copy'), 'copy approval button was not explicit')
+        check(details['deny'] == ('拒絕' if zh else 'Reject'), 'copy rejection button changed its meaning')
         check(details['previewDisplay'] == 'none' and details['metaDisplay'] == 'none', 'generic action details expanded the copy prompt')
         check(details['actionHeight'] < 220, 'copy approval prompt was not compact')
         check(details['approveDisabled'] is False, 'copy approval button was unexpectedly disabled')
+        copy_payload = active_agent_state(page)['pending_action']
+        page.evaluate('payload => window.terminalTest.applyAgentActionPayloadForTest(payload)', {
+            **copy_payload, 'action_revision': 1, 'conflict_mode': 'keep_both',
+            'destination_path': '/tmp/image (2).bin',
+        })
+        check(page.inner_text('#agent-file-copy-destination') == 'Local Shell (bash):/tmp/image (2).bin',
+              'keep-both translation changed the canonical destination filename')
+        check(page.inner_text('#agent-file-copy-warning') == ('複製到顯示的目的地，並保留既有檔案。' if zh else
+              'Copy to the destination shown; keep the existing file.'), 'keep-both warning did not preserve the existing file')
+        page.evaluate('payload => window.terminalTest.applyAgentActionPayloadForTest(payload)', {
+            **copy_payload, 'action_revision': 2, 'status': 'running', 'bytes_copied': 768, 'total_bytes': 1536,
+        })
+        clear_emitted(page)
         page.evaluate(
             """payload => window.terminalTest.applyAgentActionPayloadForTest(payload)""",
             {
                 'action_id': 'copy-action-1',
                 'action_type': 'file_copy',
+                'action_revision': 3,
                 'status': 'failed',
                 'terminal_id': TERMINAL_ID,
                 'error_code': 'file_copy_publish_outcome_unknown',
             },
         )
         status_detail = page.locator('#agent-status-detail').inner_text()
+        unknown_warning = ('無法確認複製結果。目的地可能已變更，請先檢查再重試。' if zh else
+                           'Copy result unknown. The destination may have changed; check it before retrying.')
         check(
-            'destination may have changed; inspect it before retrying' in status_detail,
+            unknown_warning in status_detail and 'file_copy_publish_outcome_unknown' in status_detail,
             'publish outcome warning was not explicit',
         )
+        queue_text = page.inner_text('.transfer-queue-item[data-action-id="copy-action-1"]')
+        check(unknown_warning in queue_text and 'file_copy_publish_outcome_unknown' in queue_text,
+              'transfer queue lost the unknown-result warning or diagnostic code')
+        for width in [1280, 480]:
+            page.set_viewport_size({'width': width, 'height': 700})
+            for selector in ['#agent-status-detail', '.transfer-queue-status']:
+                visible_warning = page.locator(selector).evaluate('''element => ({
+                    wraps: getComputedStyle(element).whiteSpace !== 'nowrap',
+                    fits: element.scrollWidth <= element.clientWidth,
+                    height: element.clientHeight
+                })''')
+                check(visible_warning['wraps'] and visible_warning['fits'] and visible_warning['height'] > 0,
+                      f'unknown-result warning is clipped at {width}px: {selector}')
+        check(not any(entry['event'] in {'agent_action_approve', 'agent_action_cancel', 'agent_suggestion_request', 'ssh_input'}
+                      for entry in get_emitted(page)), 'unknown publication outcome automatically retried an operation')
+    finally:
+        close_context(context)
+
+
+def test_localized_input_decisions_preserve_exact_proposal(browser, access_url):
+    context, page = new_page(browser, access_url, ui_language='zh-TW')
+    try:
+        attach_agent(page)
+        set_agent_mode(page, 'approval', 'approval_pending')
+        state = active_agent_state(page)
+        for decision in ['approve', 'reject']:
+            action = {
+                'action_id': f'localized-input-{decision}',
+                'proposal_id': f'localized-proposal-{decision}',
+                'action_type': 'terminal_input', 'action_revision': 0,
+                'status': 'pending_approval', 'terminal_id': TERMINAL_ID,
+                'escaped_preview': '<b>Approve copy</b> \\n',
+                'byte_length': 26, 'line_count': 1,
+                'ends_with_newline': False, 'contains_control_chars': False,
+                **{field: state[field] for field in ['session_id', 'viewer_id', 'agent_binding_id', 'mode_version', 'privacy_version']},
+            }
+            result = page.evaluate(
+                """({action, decision}) => {
+                    window.terminalTest.applyAgentActionPayloadForTest(action);
+                    window.terminalTest.clearEmitted();
+                    const approve = document.getElementById('agent-approve-btn');
+                    const reject = document.getElementById('agent-reject-btn');
+                    const preview = document.getElementById('agent-action-preview');
+                    const labels = {approve: approve.innerText, reject: reject.innerText,
+                        preview: preview.innerText, markup: preview.querySelectorAll('b').length};
+                    const button = decision === 'approve' ? approve : reject;
+                    button.click();
+                    button.click();
+                    return {labels, events: window.terminalTest.getEmitted(),
+                        locked: approve.disabled && reject.disabled,
+                        mode: window.terminalTest.getActiveAgentState().mode};
+                }""",
+                {'action': action, 'decision': decision},
+            )
+            check(result['labels']['approve'] == '核准輸入' and result['labels']['reject'] == '拒絕',
+                  'localized input decision labels did not distinguish input from copy')
+            check(result['labels']['preview'] == action['escaped_preview'] and result['labels']['markup'] == 0,
+                  'proposal display text was translated or interpreted as markup')
+            check(len(result['events']) == 1 and result['events'][0]['event'] == f'agent_action_{decision}',
+                  'localized input decision emitted another action or more than one decision')
+            check(result['events'][0]['args'][0] == approval_payload_from_action(action),
+                  'localized input decision changed the exact proposal binding')
+            check(result['locked'] and result['mode'] == 'approval_pending',
+                  'one input decision changed permission or remained repeatable')
+    finally:
+        close_context(context)
+
+
+def test_agent_transfer_stop_states_and_dismissal(browser, access_url, ui_language='en'):
+    context, page = new_page(browser, access_url, ui_language=ui_language)
+    zh = ui_language == 'zh-TW'
+    try:
+        attach_agent(page)
+        state = active_agent_state(page)
+        action = {
+            'action_id': 'localized-transfer-stop', 'proposal_id': 'localized-transfer-proposal',
+            'action_type': 'file_copy', 'action_revision': 1,
+            'status': 'running', 'terminal_id': TERMINAL_ID,
+            'destination_terminal_id': 'fixture-destination',
+            'source_endpoint': {'route': 'local', 'shell': 'bash', 'platform': 'linux'},
+            'destination_endpoint': {'route': 'direct', 'host': 'destination.example', 'user': 'builder', 'port': 22},
+            'source_path': '/fixture/source.bin', 'destination_path': '/fixture/existing.bin',
+            'source_size': 1536, 'total_bytes': 1536, 'bytes_copied': 768,
+            **{field: state[field] for field in ['session_id', 'viewer_id', 'agent_binding_id', 'mode_version', 'privacy_version']},
+        }
+        result = page.evaluate(
+            """action => {
+                const apply = payload => window.terminalTest.applyAgentActionPayloadForTest(payload);
+                const button = () => document.querySelector('.transfer-queue-stop');
+                const status = () => document.querySelector('.transfer-queue-status').innerText;
+                apply(action);
+                window.terminalTest.clearEmitted();
+                const running = button().innerText;
+                button().click();
+                const pending = {text: button().innerText, disabled: button().disabled, status: status()};
+                button().click();
+                const cancellations = window.terminalTest.getEmitted();
+                apply({...action, action_revision: 2, status: 'committing'});
+                window.terminalTest.clearEmitted();
+                const committing = {disabled: button().disabled, title: button().title, status: status()};
+                button().click();
+                committing.events = window.terminalTest.getEmitted();
+                apply({...action, action_revision: 3, status: 'failed', error_code: 'file_copy_cancelled_by_operator'});
+                const stopped = {status: status(), title: button().title, aria: button().getAttribute('aria-label')};
+                const lastAction = window.terminalTest.getActiveAgentState().last_action;
+                window.terminalTest.clearEmitted();
+                button().click();
+                return {running, pending, cancellations, committing, stopped,
+                    dismissed: document.querySelectorAll('.transfer-queue-item').length === 0,
+                    dismissEvents: window.terminalTest.getEmitted(),
+                    lastActionUnchanged: JSON.stringify(lastAction) === JSON.stringify(window.terminalTest.getActiveAgentState().last_action)};
+            }""",
+            action,
+        )
+        check(result['running'] == ('停止' if zh else 'Stop'), 'running transfer did not offer Stop')
+        check(result['pending']['text'] == ('正在停止…' if zh else 'Stopping…') and result['pending']['disabled'],
+              'pending cancellation did not remain distinct from a confirmed stop')
+        check(result['pending']['status'] != ('已停止' if zh else 'Stopped'), 'Stop click claimed backend-confirmed cancellation')
+        check(len(result['cancellations']) == 1 and result['cancellations'][0]['event'] == 'agent_action_cancel',
+              'Stop emitted more than one cancellation or another operation')
+        check(result['cancellations'][0]['args'][0] == approval_payload_from_action(action),
+              'transfer cancellation changed the proposal binding')
+        check(result['committing']['disabled'] and not result['committing']['events'], 'committing transfer remained cancellable')
+        check(result['committing']['title'] == ('正在完成複製，已無法停止。' if zh else 'Finishing the copy; it can no longer be stopped.'),
+              'committing tooltip implied completion or allowed stopping')
+        check(result['stopped']['status'] == ('已停止' if zh else 'Stopped'), 'operator cancellation was not shown as confirmed stopped')
+        check(result['stopped']['title'] == ('隱藏此筆' if zh else 'Dismiss') and 'existing.bin' in result['stopped']['aria'],
+              'finished transfer dismissal lost its meaning or filename')
+        check(result['dismissed'] and not result['dismissEvents'] and result['lastActionUnchanged'],
+              'Dismiss changed the transfer result or emitted a file operation')
+
+        failed = {**action, 'action_id': 'localized-disconnected-copy', 'proposal_id': 'localized-disconnected-proposal'}
+        result = page.evaluate(
+            """action => {
+                window.terminalTest.applyAgentActionPayloadForTest(action);
+                window.terminalTest.applyAgentActionPayloadForTest({...action, action_revision: 2,
+                    status: 'failed', error_code: 'terminal_disconnected'});
+                return document.querySelector('.transfer-queue-status').innerText;
+            }""", failed)
+        check('terminal_disconnected' in result and result != ('已停止' if zh else 'Stopped'),
+              'generic disconnection was misrepresented as confirmed cancellation')
     finally:
         close_context(context)
 
 
+def test_agent_copy_and_transfer_states_in_traditional_chinese(browser, access_url):
+    test_file_copy_approval_shows_canonical_plan(browser, access_url, ui_language='zh-TW')
+    test_agent_transfer_stop_states_and_dismissal(browser, access_url, ui_language='zh-TW')
+
+
 def test_file_copy_approval_is_global_and_decision_is_single_shot(browser, access_url):
     context, page = new_page(browser, access_url)
     try:
@@ -3030,7 +3367,7 @@ def test_file_copy_approval_keeps_controls_visible_with_long_paths(browser, acce
             check(geometry['scrollable'], 'long copy details were not scrollable')
             check(geometry['noHorizontalOverflow'], 'long paths caused horizontal overflow')
             page.evaluate("document.getElementById('agent-action-content').scrollTop = 999999")
-            check('atomically replace' in page.locator('#agent-file-copy-warning').inner_text(), 'replace warning was lost')
+            check('Replace the existing file (64 B).' == page.locator('#agent-file-copy-warning').inner_text(), 'replace warning was lost')
             page.locator('#agent-approve-btn').click(trial=True)
             page.locator('#agent-reject-btn').click(trial=True)
         clear_emitted(page)
@@ -4962,10 +5299,12 @@ def main():
     sync_playwright, PlaywrightError, _ = load_playwright()
     tests = [
         test_access_required_page_accepts_token_login,
+        test_initial_access_login_falls_back_without_localization_or_javascript,
         test_browser_authorization_gate_hides_connection_controls,
         test_server_unavailable_waits_for_reconnect,
         test_retry_now_resubscribes_after_socket_disconnect,
         test_invalid_session_reconnect_prompts_for_current_token,
+        test_browser_access_and_recovery_in_traditional_chinese,
         test_platform_passkey_recovers_live_session_without_access_token,
         test_agent_panel_can_be_dragged,
         test_toolbar_pause_targets_main_tab_not_panel_override,
@@ -4987,7 +5326,10 @@ def main():
         test_clipboard_paste_targets_and_native_review,
         test_clipboard_paste_encoding_is_consistent,
         test_approval_payload_and_stale_rejections,
+        test_localized_input_decisions_preserve_exact_proposal,
         test_file_copy_approval_shows_canonical_plan,
+        test_agent_transfer_stop_states_and_dismissal,
+        test_agent_copy_and_transfer_states_in_traditional_chinese,
         test_file_copy_approval_is_global_and_decision_is_single_shot,
         test_file_copy_approval_keeps_controls_visible_with_long_paths,
         test_ime_anchor_poc_loads_and_fails_open,

From 0dab58933add66b76c0daa4f79290478c4cb0519 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sun, 20 Sep 2026 00:48:18 +0800
Subject: [PATCH 18/43] Localize connection forms and SSH login

---
 README.md                                |   3 +-
 docs/agent_ui_review_plan.md             |  52 ++++-
 docs/ui_copy_review.tsv                  | 108 +++++++++-
 static/js/standterm-messages.js          | 216 ++++++++++++++++++-
 static/js/standterm-ssh-host-identity.js |  28 ++-
 static/js/standterm-ssh-login.js         |  47 ++--
 static/js/standterm-ssh-node-auth.js     |  42 ++--
 templates/index.html                     | 112 +++++-----
 tests/connection_i18n_browser_smoke.py   | 263 +++++++++++++++++++++++
 tests/ssh_login_browser_smoke.py         |  98 ++++++++-
 10 files changed, 858 insertions(+), 111 deletions(-)
 create mode 100644 tests/connection_i18n_browser_smoke.py

diff --git a/README.md b/README.md
index b388ff1..6f4221b 100644
--- a/README.md
+++ b/README.md
@@ -325,7 +325,8 @@ terminal; compact windows keep those actions in the Agent panel.
 
 **Settings > General > Language (preview)** selects English or Traditional
 Chinese (Taiwan) for browser access and recovery, Agent permissions, input and
-file-copy approvals, transfer results, and local connection information. The choice
+file-copy approvals, transfer results, local connection information, connection
+forms and SSH login (including direct browser-key and host-fingerprint controls). The choice
 applies the next time the page opens; saving it does not reload the current
 page or change its connections and grants. Other areas remain in English.
 The [copy and translation table](docs/ui_copy_review.tsv) and
diff --git a/docs/agent_ui_review_plan.md b/docs/agent_ui_review_plan.md
index 9db4b2a..966fdbd 100644
--- a/docs/agent_ui_review_plan.md
+++ b/docs/agent_ui_review_plan.md
@@ -43,7 +43,7 @@ do not consolidate them merely to shorten labels.
 | 3 | Review English UI copy and terminology | Core terms agreed; initial English sources reviewed | Review each proposed change for target, permissions, consequences, and next action; check related tooltips, Desktop help, and tests before applying it. |
 | 4 | Finalize the translation exchange table | Initial exchange validated with an independent translator | Stable keys, approved English source, context, and placeholder constraints are sufficient for an independent translator. |
 | 5 | Pilot Agent access and local connection information | Implemented; validation below | Cover static and dynamic text, titles, and accessible names; preserve connected sessions and authorization; support English fallback. |
-| 6 | Translate and integrate approved rows | Agent pilot plus browser access/recovery and Agent approvals/transfers integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
+| 6 | Translate and integrate approved rows | Agent pilot, browser access/recovery, Agent approvals/transfers and connection/login controls integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
 | 7 | Expand Core and Desktop coverage | Deferred | Verify secondary windows, native menus, setup, diagnostics, packaging, and representative layouts. |
 
 ## Validation of the reliability changes
@@ -66,7 +66,7 @@ validated separately below.
 
 ## Deferred UI work
 
-General connection forms, Agent diagnostics, SSH tunnel setup, secondary windows,
+Full SSH route/profile editors, Agent diagnostics, SSH tunnel setup, secondary windows,
 and Desktop localization remain outside the completed workflows. Translation
 starts only after the English source for the selected workflow is reviewed.
 Extra screen diffing, render hints, key aliases, and byte-limit options remain optional optimizations.
@@ -227,3 +227,51 @@ focused cases above validate that final correction. Native Desktop packaging,
 real platform authenticator prompts and physical UART were not requalified.
 Core packaging already requires both runtime catalog files and the source table;
 this phase adds no new runtime asset or dependency.
+
+## Connection forms and SSH login implementation
+
+The connection form, direct/history picker, saved-route summary, per-node SSH
+login, direct browser-key controls and direct host-fingerprint controls now use
+the same reviewed catalog. The table contains 274 rows: 273 bilingual messages
+and the existing decorative removal. All exported keys have source references.
+`Save session` now reads `Save connection profile`; this saves reusable settings,
+not the terminal's execution state. The Local Shell tooltip identifies the
+StandTerm host as the execution host. TCP port and UART port remain distinct.
+
+SSH `authenticated`, `shell` and `complete` display `Authenticated`, `Opening
+terminal` and `Complete`. Intermediate nodes can complete without opening their
+own terminal. Schema defaults, manually edited fields, backend shell/serial option
+labels, raw endpoints, key references, fingerprints and server diagnostics remain
+unchanged. Dynamic modules take an optional translator; callers outside this
+phase retain English fallback. The full route/profile editors, tunnel setup,
+Desktop UI and general backend diagnostics remain deferred.
+
+The independent adversarial review completed two bounded passes. It identified
+implementation constraints rather than existing runtime defects; the final
+source review found no material regression.
+
+| Finding | Severity | Evidence | Critic remedy | Main response | Resolution | Validation |
+| --- | --- | --- | --- | --- | --- | --- |
+| SSH phase labels also validate incoming enum values | Medium guard | `standterm-ssh-login.js` labels and handle | Preserve all enum keys; translate only values | Accept | All 12 phase keys and target authenticated-to-shell mapping remain intact | Bilingual phase/prompt tests and real three-hop login |
+| Optional translation must distinguish lookup parameters from fallback copy | Medium guard | `standterm-i18n.js` lookup contract and three SSH factories | Use a thin local fallback wrapper | Accept | Inject `translate(key, params)`; interpolate fallback once only when no key resolves | Missing/absent translator and literal-placeholder tests |
+| Longer wording could clarify Saved routes | Optional wording | Route heading and surrounding SSH form | Consider a longer connection-route label | Keep the shorter label in the existing SSH context | Critic accepted the scoped wording | Desktop/narrow-width label fit checks |
+
+The review added explicit fallback and enum coverage. It did not expand public
+agentinfo or change permission policy, connection routing, default cancel focus,
+or retry behavior. Full editor localization is deferred until its complete
+editing/saving workflow receives a separate copy review. No policy question is
+outstanding for this phase.
+
+| Check | Result |
+| --- | --- |
+| Complete Agent browser suite | 56 top-level cases passed, including localized browser access, approvals, transfers, schema controls, credential redaction and host-key action binding. |
+| SSH preparation browser suite | Nine cases passed, including atomic temporary keys, saved per-hop authentication, fingerprint management, background login and history retention. |
+| SSH login browser suite | Five cases passed, including real three-hop password login, English/Traditional Chinese stale and background prompts, exact host-key/password replies, all phase enums and missing/absent translation fallback. |
+| Connection localization browser suite | Three cases passed: bilingual exact SSH payloads, schema/edited values, raw shell/serial labels, key references, literal placeholders, and stale fingerprint-action binding. |
+| Connection layout | English and Traditional Chinese form headings, actions and save-profile labels fit at 1280 and 480 pixel widths. |
+| Catalog | Six exporter and six lookup tests passed; generated catalog freshness and all 273 referenced bilingual keys verified. |
+
+Validation ran in WSL Chromium. Native Desktop, physical UART and complete
+route/profile editor localization were not qualified by this phase. The next
+candidate is a separate review of those editors' naming, saving and key-retention
+copy before expanding their translation coverage.
diff --git a/docs/ui_copy_review.tsv b/docs/ui_copy_review.tsv
index 5b31dd1..cb4004d 100644
--- a/docs/ui_copy_review.tsv
+++ b/docs/ui_copy_review.tsv
@@ -18,8 +18,8 @@ agent.copy.replace	This will atomically replace an existing regular file ({size}
 agent.copy.keep_both	The displayed destination is the exact keep-both name selected by the backend.	Copy to the destination shown; keep the existing file.	複製到顯示的目的地，並保留既有檔案。	keep_both resolves a canonical destination before approval.		Do not imply the operator may edit this name or that the original destination will be replaced.	translation-reviewed	templates/index.html:3893
 agent.transfer.stop	Stop	Stop	停止	Request cancellation before commit.		Keep existing cancellation barrier and disabled state; clicking alone is not confirmation of cancellation.	translation-reviewed	templates/index.html:9270
 agent.transfer.committing	The destination is being published and cannot be stopped	Finishing the copy; it can no longer be stopped.	正在完成複製，已無法停止。	Disabled Stop tooltip during committing.		Not a success or failure result. Do not enable Stop after the commit barrier.	translation-reviewed	templates/index.html:9272
-settings.language.label	Language (Agent preview)	Language (preview)	語言（預覽）	Local display preference for the limited Agent workflow pilot.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
-settings.language.hint	Applies to Agent access and connection info next time you open this page. Other areas remain in English.	Applies next time you open this page: browser access, Agent permissions, approvals, transfers and local connection info. Other areas remain in English.	下次開啟此頁面時套用於瀏覽器存取、Agent 權限、核准、傳輸及本機連線資訊，其他區域仍顯示英文。	Language change never reloads an active terminal.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+settings.language.label	Language (Agent preview)	Language (preview)	語言（預覽）	Local display preference for the implemented browser, Agent and connection workflows.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+settings.language.hint	Applies to Agent access and connection info next time you open this page. Other areas remain in English.	Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms and SSH login. Other areas remain in English.	下次開啟此頁面時套用於瀏覽器與 Agent 存取、核准、傳輸、連線表單及 SSH 登入，其他區域仍顯示英文。	Language change never reloads an active terminal.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 settings.agent.legend	Agent access	Agent access	Agent 存取	Settings fieldset title.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 settings.agent.permission	Default Agent permission	Default Agent permission	Agent 預設權限	Saved permission used by the Authorize agent button; saving alone does not grant access.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 settings.agent.hint	Authorize agent applies this permission to the current tab and creates a standard token.	Authorize agent applies this permission to the current tab and creates a standard token.	「授權 Agent」會將此權限套用至目前分頁，並建立標準權杖。	Explain the primary button without implying that saving a setting authorizes a tab.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
@@ -169,3 +169,107 @@ agent.transfer.queue	Transfer Queue	Transfer Queue	傳輸佇列	Title and access
 agent.transfer.clear_finished	Clear finished	Dismiss finished	隱藏已結束項目	Hide completed or failed transfer entries; no files are deleted.		Display only; preserve underlying actions.	translation-reviewed	templates/index.html
 agent.transfer.close_queue	Close Transfer Queue	Close Transfer Queue	關閉傳輸佇列	Hide the queue without stopping transfers.		Display only; preserve underlying actions.	translation-reviewed	templates/index.html
 agent.approval.details	Agent action details	Agent action details	Agent 操作詳情	Accessible name for the focusable proposal details.		Display only; preserve underlying actions.	translation-reviewed	templates/index.html
+connection.local_shell	Local Shell	Local Shell	本機 Shell	Connection form label.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.local_shell_hint	Runs on the StandTerm host.	Runs on the StandTerm host.	在 StandTerm 主機上執行。	Distinguishes Core host from browser device.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.direct	Direct connect	Direct connect	直接連線	Connection form label.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.routes	Saved routes	Saved routes	已儲存路徑	Connection form label.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.host	Host	Host	主機	SSH account field; password is not a key passphrase.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.port	Port	Port	連接埠	SSH account field; password is not a key passphrase.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.username	Username	Username	使用者名稱	SSH account field; password is not a key passphrase.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.password	Password (Optional)	Password (optional)	密碼（選填）	SSH account field; password is not a key passphrase.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.history_profiles	History & Profiles	History & Profiles	紀錄與連線設定	Direct connection picker.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.host_identity	Host identity	Host identity	主機身分	Saved SSH host identity inspection.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.host_alias	Host key alias (optional)	Host key alias (optional)	主機金鑰別名（選填）	Connection form label.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.saved_route	Saved route	Saved route	已儲存路徑	Accessible route selector name.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.edit_route	Edit route...	Edit route...	編輯路徑…	Opens the route editor, deferred from localization.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.save_history	Save history	Save history	儲存連線紀錄	Connection form label.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.save_profile	Save session	Save connection profile	儲存連線設定	Saves reusable settings, not terminal execution state.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.shell	Shell	Shell	Shell	Accessible selector name; backend option labels remain raw.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.uart_port	UART port	UART port	序列埠	Accessible selector name; backend option labels remain raw.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.baud	Baud rate	Baud rate	鮑率	Accessible selector name; backend option labels remain raw.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.uart_example	COM3 or /dev/ttyUSB0	COM3 or /dev/ttyUSB0	COM3 或 /dev/ttyUSB0	Device path examples remain literal.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.connect_route	Connect via {name}	Connect via {name}	透過 {name} 連線	Connection display only; interpolated names and endpoints are untrusted plain text.	{name}	Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.select_route	Select a route to connect	Select a route to connect	選擇要連線的路徑	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.connect_direct	Connect directly	Connect directly	直接連線	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.connect_local	Connect to Local Shell	Connect to Local Shell	連線至本機 Shell	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.connect_uart	Connect to UART	Connect to UART	連線至 UART	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.connect_terminal	Connect to Terminal	Connect to Terminal	連線至終端	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.choose_route	Choose a saved route...	Choose a saved route...	選擇已儲存路徑…	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.no_routes	No saved routes	No saved routes	沒有已儲存路徑	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.invalid_route	Invalid route	Invalid route	路徑無效	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.jump	{count} jump	{count} jump	{count} 個中繼站	Connection display only; interpolated names and endpoints are untrusted plain text.	{count}	Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.jumps	{count} jumps	{count} jumps	{count} 個中繼站	Connection display only; interpolated names and endpoints are untrusted plain text.	{count}	Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.direct_route	Direct	Direct	直接連線	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.none_selected	None selected	None selected	尚未選擇	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.repair_route	Invalid route — edit before connecting.	Invalid route — edit before connecting.	路徑無效，請先編輯再連線。	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.route_hint	Select a saved route, or use Edit route to create one.	Select a saved route, or use Edit route to create one.	選擇已儲存路徑，或使用「編輯路徑」建立路徑。	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.will_save	Will save on Connect.	Will save on Connect.	將於按下連線時儲存。	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.temporary_route	Temporary route — not saved.	Temporary route — not saved.	暫用路徑，尚未儲存。	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.cancelled	Connection cancelled.	Connection cancelled.	已取消連線。	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.profile_modified	Based on: {name} (modified)	Based on: {name} (modified)	使用設定：{name}（已修改）	Connection display only; interpolated names and endpoints are untrusted plain text.	{name}	Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.profile	Profile: {name}	Profile: {name}	連線設定：{name}	Connection display only; interpolated names and endpoints are untrusted plain text.	{name}	Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.direct_profiles	Direct Profiles	Direct Profiles	直接連線設定	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.direct_history	Direct History	Direct History	直接連線紀錄	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.empty_history	No saved profiles or successful SSH connections yet.	No saved profiles or successful SSH connections yet.	尚無已儲存的連線設定或成功的 SSH 連線紀錄。	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.history_updated	SSH history updated.	SSH history updated.	已更新 SSH 連線紀錄。	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.history_failed	SSH history could not be saved.	SSH history could not be saved.	無法儲存 SSH 連線紀錄。	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.manual_port	Manual COM or /dev...	Manual port…	手動輸入序列埠…	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.connecting	Connecting...	Connecting...	連線中…	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.disconnected	Disconnected	Disconnected	已中斷連線	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.setup_key	Setting up key...	Setting up key...	正在設定金鑰…	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.route_ready	Route ready. Connect to log in at each site.	Route ready. Connect to log in at each site.	路徑已備妥。按下連線後，依序登入各站。	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.failed	Connection failed.	Connection failed.	連線失敗。	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.verify_authenticate	Verifying host and authenticating	Verifying host and authenticating	正在驗證主機與身分	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.progress	SSH {hop}/{total}: {host}:{port} — {phase}	SSH {hop}/{total}: {host}:{port} — {phase}	SSH {hop}/{total}：{host}:{port} — {phase}	Connection display only; interpolated names and endpoints are untrusted plain text.	{hop}, {total}, {host}, {port}, {phase}	Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+connection.role_direct	Direct	Direct	直接連線	Connection display only; interpolated names and endpoints are untrusted plain text.		Display only. Preserve typed values, raw endpoint data, credentials and option values.	translation-reviewed	templates/index.html
+ssh.login.progress	SSH connection progress	SSH connection progress	SSH 連線進度	Accessible name of the multi-node SSH progress strip.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:15
+ssh.login.waiting	Waiting	Waiting	等待中	Node phase waiting; no connection has completed.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:35
+ssh.login.connecting	Connecting	Connecting	連線中	Node phase connect.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:36
+ssh.login.forwarding	Opening next hop	Opening next hop	正在連往下一站	Node phase forward; opening the next SSH hop.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:37
+ssh.login.verifying	Verifying host	Verifying host	正在驗證主機	Node phase verify_and_authenticate; does not claim trust has already passed.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:38
+ssh.login.local_keys	Trying local keys	Trying local keys	正在嘗試本機金鑰	Node phase local_keys; keys available on the Core host, not browser key creation.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:39
+ssh.login.host_key	Confirm host key	Confirm host key	確認主機金鑰	Node phase host_key requires a host-key decision.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:40
+ssh.login.password_required	Requires password	Requires password	需要密碼	Node phase password; account password, not private-key passphrase.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:41
+ssh.login.authenticating	Authenticating	Authenticating	驗證身分中	Node phase authenticate; user authentication is pending.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:42
+ssh.login.authenticated	OK	Authenticated	已驗證	Node phase authenticated; an intermediate node need not have an open terminal.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:43
+ssh.login.opening_terminal	Opening terminal	Opening terminal	正在開啟終端	Node phase shell; terminal opening is pending.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:44
+ssh.login.complete	OK	Complete	已完成	Node phase complete; applied to both intermediate nodes and the target after successful connection.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:45
+ssh.login.failed	Failed	Failed	失敗	Node phase failed.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:46
+ssh.login.target	Target	Target	目標主機	Last node in the route; display label only.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:49
+ssh.login.node	Node {number}	Node {number}	節點 {number}	Intermediate route node with its one-based position.	{number}	Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions. Preserve placeholder names and multiplicity; interpolate once.	translation-reviewed	static/js/standterm-ssh-login.js:50
+ssh.login.cancel	Cancel connection	Cancel connection	取消連線	Cancel the pending SSH connection; host-key prompt keeps this as the default focus.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:79
+ssh.login.back	Back to connection settings	Back to connection settings	返回連線設定	Return from a failed login attempt to its existing connection settings.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:80
+ssh.login.password	Password	Password	密碼	Account password input label; not a private-key passphrase.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:138
+ssh.login.password_for_node	{role} password	{role} password	{role}密碼	Accessible password input name with the displayed node role.	{role}	Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions. Preserve placeholder names and multiplicity; interpolate once.	translation-reviewed	static/js/standterm-ssh-login.js:142
+ssh.login.submit	Log in	Log in	登入	Submit the account password for the current SSH login prompt.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:145
+ssh.login.remember_host_key	Remember this host key?	Remember this host key?	記住此主機金鑰？	Fallback question only when the backend supplies no host-key question.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:151
+ssh.login.trust	Trust and continue	Trust and continue	信任並繼續	Accept this specific pending SSH host key and continue the connection.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-login.js:153
+ssh.key.use_for_node	{role} Use key	{role} Use key	{role}使用金鑰	Accessible key-authentication toggle name with caller-supplied display role.	{role}	Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions. Preserve placeholder names and multiplicity; interpolate once.	translation-reviewed	static/js/standterm-ssh-node-auth.js:23
+ssh.key.use	Use key	Use key	使用金鑰	Toggle browser-key authentication for this exact endpoint.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-node-auth.js:25
+ssh.key.public_for_node	{role} Public key	{role} Public key	{role}公鑰	Accessible read-only public key field name with caller-supplied display role.	{role}	Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions. Preserve placeholder names and multiplicity; interpolate once.	translation-reviewed	static/js/standterm-ssh-node-auth.js:29
+ssh.key.no_key	No key for this endpoint	No key for this endpoint	此端點沒有金鑰	Placeholder for an empty public-key field.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-node-auth.js:31
+ssh.key.copy_public	Copy public key	Copy public key	複製公鑰	Copy button title and accessible name; copies the public key only.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-node-auth.js:36
+ssh.key.browser_for_node	{role} Browser key	{role} Browser key	{role}瀏覽器金鑰	Accessible saved browser-key selector name with caller-supplied display role.	{role}	Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions. Preserve placeholder names and multiplicity; interpolate once.	translation-reviewed	static/js/standterm-ssh-node-auth.js:40
+ssh.key.choose_saved	Choose a saved key...	Choose a saved key...	選擇已儲存的金鑰…	Empty option in the saved-key selector; option value remains empty.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-node-auth.js:72
+ssh.key.saved_unavailable	Saved key unavailable for this endpoint	Saved key unavailable for this endpoint	已儲存的金鑰無法用於此端點	Selected key reference has no available matching record for this endpoint.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-node-auth.js:74
+ssh.key.creating	Creating key…	Creating key…	正在建立金鑰…	Key generation in progress.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-node-auth.js:83
+ssh.key.requires_authorization	Key authentication requires localhost or an authorized HTTPS connection.	Key authentication requires localhost or an authorized HTTPS connection.	金鑰驗證需要 localhost 或已授權的 HTTPS 連線。	Existing keyAllowed restriction; do not broaden localhost or authorized HTTPS eligibility.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-node-auth.js:84
+ssh.key.temporary	Temporary key. Save the session or route to keep it.	Temporary key. Save the connection profile or route to keep it.	暫存金鑰。儲存連線設定或路徑即可保留。	New browser key retained only when its session or route is saved.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-node-auth.js:86
+ssh.key.saved	Saved key. Copy it to the remote account’s authorized_keys if needed.	Saved key. Copy it to the remote account’s authorized_keys if needed.	已儲存的金鑰。如有需要，請將公鑰複製到遠端帳號的 authorized_keys。	Saved browser key guidance; authorized_keys receives the public key, never the private key.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-node-auth.js:87
+ssh.key.selection_unavailable	The selected key is unavailable. Choose a saved key or turn Use key off and on to create one.	The selected key is unavailable. Choose a saved key or turn Use key off and on to create one.	所選金鑰無法使用。請選擇已儲存的金鑰，或關閉再開啟「使用金鑰」以建立新金鑰。	Unavailable selection recovery guidance; keep both existing choices.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-node-auth.js:88
+ssh.key.choose_hint	Choose which saved key to use.	Choose which saved key to use.	選擇要使用的已儲存金鑰。	Multiple compatible saved keys are available.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-node-auth.js:89
+ssh.key.create_hint	Select Use key to create a key for this endpoint.	Select Use key to create a key for this endpoint.	勾選「使用金鑰」以為此端點建立金鑰。	No compatible key has been selected; key creation remains explicit.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-node-auth.js:90
+ssh.key.creation_failed	Browser key creation failed.	Browser key creation failed.	瀏覽器金鑰建立失敗。	Fallback only when key creation throws without an error message.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-node-auth.js:111
+ssh.host_identity.check	Check saved fingerprint	Check saved fingerprint	檢查已儲存的指紋	Inspect fingerprints already saved for this host identity.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-host-identity.js:29
+ssh.host_identity.forget	Forget saved fingerprint…	Forget saved fingerprint…	忘記已儲存的指紋…	Prepare fingerprint removal; this button does not itself confirm removal.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-host-identity.js:30
+ssh.host_identity.hint	Check the saved fingerprint for this host identity.	Check the saved fingerprint for this host identity.	檢查此主機身分已儲存的指紋。	Initial or invalidated identity display; no trust result implied.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-host-identity.js:35
+ssh.host_identity.no_fingerprint	No saved fingerprint.	No saved fingerprint.	沒有已儲存的指紋。	Inspect returned an empty fingerprint list.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-host-identity.js:41
+ssh.host_identity.verify_on_connect	The server will be verified when connecting.	The server will be verified when connecting.	將於連線時驗證伺服器。	Inspection only reads saved identity data; connection-time verification is still required.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-host-identity.js:41
+ssh.host_identity.checking	Checking host identity…	Checking host identity…	正在檢查主機身分…	Existing identity request is pending.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-host-identity.js:54
+ssh.host_identity.stale	SSH host identity reply is stale. Check again.	SSH host identity reply is stale. Check again.	SSH 主機身分回覆已失效。請重新檢查。	Reply request/editor/node binding does not match the pending request.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-host-identity.js:59
+ssh.host_identity.unavailable	SSH host identity is unavailable.	SSH host identity is unavailable.	無法取得 SSH 主機身分。	Fallback only when an identity failure has no backend or exception message.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-host-identity.js:61
+ssh.host_identity.forget_now	Forget now	Forget now	立即忘記	Confirm removal of the fingerprint bound to the pending action.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-host-identity.js:68
+ssh.host_identity.keep	Keep fingerprint	Keep fingerprint	保留指紋	Cancel the pending fingerprint removal; retains default focus.		Plain text. Keep typed state, request binding, key references, fingerprints and endpoint values unchanged. Do not translate backend messages or questions.	translation-reviewed	static/js/standterm-ssh-host-identity.js:69
+connection.trust_key	Trust key	Trust key	信任金鑰	Existing typed SSH action prompt button.		Display only. Preserve action binding, payload and default cancel focus.	translation-reviewed	templates/index.html
+connection.forget_key	Forget key	Forget key	忘記金鑰	Existing typed SSH action prompt button.		Display only. Preserve action binding, payload and default cancel focus.	translation-reviewed	templates/index.html
+common.cancel	Cancel	Cancel	取消	Existing typed SSH action prompt button.		Display only. Preserve action binding, payload and default cancel focus.	translation-reviewed	templates/index.html
diff --git a/static/js/standterm-messages.js b/static/js/standterm-messages.js
index 4769759..030b660 100644
--- a/static/js/standterm-messages.js
+++ b/static/js/standterm-messages.js
@@ -158,20 +158,124 @@
         "browser.recovery.token_label": "Access token",
         "browser.recovery.token_rejected": "Access token was not accepted.",
         "browser.recovery.verifying_device": "Waiting for device verification\u2026",
+        "common.cancel": "Cancel",
         "common.close": "Close",
         "common.copy_url": "Copy URL",
         "common.no": "No",
         "common.or": "or",
         "common.refresh": "Refresh Status",
         "common.yes": "Yes",
+        "connection.baud": "Baud rate",
+        "connection.cancelled": "Connection cancelled.",
+        "connection.choose_route": "Choose a saved route...",
+        "connection.connect_direct": "Connect directly",
+        "connection.connect_local": "Connect to Local Shell",
+        "connection.connect_route": "Connect via {name}",
+        "connection.connect_terminal": "Connect to Terminal",
+        "connection.connect_uart": "Connect to UART",
+        "connection.connecting": "Connecting...",
+        "connection.direct": "Direct connect",
+        "connection.direct_history": "Direct History",
+        "connection.direct_profiles": "Direct Profiles",
+        "connection.direct_route": "Direct",
+        "connection.disconnected": "Disconnected",
+        "connection.edit_route": "Edit route...",
+        "connection.empty_history": "No saved profiles or successful SSH connections yet.",
+        "connection.failed": "Connection failed.",
+        "connection.forget_key": "Forget key",
+        "connection.history_failed": "SSH history could not be saved.",
+        "connection.history_profiles": "History & Profiles",
+        "connection.history_updated": "SSH history updated.",
+        "connection.host": "Host",
+        "connection.host_alias": "Host key alias (optional)",
+        "connection.host_identity": "Host identity",
+        "connection.invalid_route": "Invalid route",
+        "connection.jump": "{count} jump",
+        "connection.jumps": "{count} jumps",
+        "connection.local_shell": "Local Shell",
+        "connection.local_shell_hint": "Runs on the StandTerm host.",
+        "connection.manual_port": "Manual port\u2026",
+        "connection.no_routes": "No saved routes",
+        "connection.none_selected": "None selected",
+        "connection.password": "Password (optional)",
+        "connection.port": "Port",
+        "connection.profile": "Profile: {name}",
+        "connection.profile_modified": "Based on: {name} (modified)",
+        "connection.progress": "SSH {hop}/{total}: {host}:{port} \u2014 {phase}",
+        "connection.repair_route": "Invalid route \u2014 edit before connecting.",
+        "connection.role_direct": "Direct",
+        "connection.route_hint": "Select a saved route, or use Edit route to create one.",
+        "connection.route_ready": "Route ready. Connect to log in at each site.",
+        "connection.routes": "Saved routes",
+        "connection.save_history": "Save history",
+        "connection.save_profile": "Save connection profile",
+        "connection.saved_route": "Saved route",
+        "connection.select_route": "Select a route to connect",
+        "connection.setup_key": "Setting up key...",
+        "connection.shell": "Shell",
+        "connection.temporary_route": "Temporary route \u2014 not saved.",
+        "connection.trust_key": "Trust key",
+        "connection.uart_example": "COM3 or /dev/ttyUSB0",
+        "connection.uart_port": "UART port",
+        "connection.username": "Username",
+        "connection.verify_authenticate": "Verifying host and authenticating",
+        "connection.will_save": "Will save on Connect.",
         "settings.agent.approval": "Approval required + token",
         "settings.agent.direct": "Direct input + token",
         "settings.agent.hint": "Authorize agent applies this permission to the current tab and creates a standard token.",
         "settings.agent.legend": "Agent access",
         "settings.agent.observe": "Read only + token",
         "settings.agent.permission": "Default Agent permission",
-        "settings.language.hint": "Applies next time you open this page: browser access, Agent permissions, approvals, transfers and local connection info. Other areas remain in English.",
-        "settings.language.label": "Language (preview)"
+        "settings.language.hint": "Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms and SSH login. Other areas remain in English.",
+        "settings.language.label": "Language (preview)",
+        "ssh.host_identity.check": "Check saved fingerprint",
+        "ssh.host_identity.checking": "Checking host identity\u2026",
+        "ssh.host_identity.forget": "Forget saved fingerprint\u2026",
+        "ssh.host_identity.forget_now": "Forget now",
+        "ssh.host_identity.hint": "Check the saved fingerprint for this host identity.",
+        "ssh.host_identity.keep": "Keep fingerprint",
+        "ssh.host_identity.no_fingerprint": "No saved fingerprint.",
+        "ssh.host_identity.stale": "SSH host identity reply is stale. Check again.",
+        "ssh.host_identity.unavailable": "SSH host identity is unavailable.",
+        "ssh.host_identity.verify_on_connect": "The server will be verified when connecting.",
+        "ssh.key.browser_for_node": "{role} Browser key",
+        "ssh.key.choose_hint": "Choose which saved key to use.",
+        "ssh.key.choose_saved": "Choose a saved key...",
+        "ssh.key.copy_public": "Copy public key",
+        "ssh.key.create_hint": "Select Use key to create a key for this endpoint.",
+        "ssh.key.creating": "Creating key\u2026",
+        "ssh.key.creation_failed": "Browser key creation failed.",
+        "ssh.key.no_key": "No key for this endpoint",
+        "ssh.key.public_for_node": "{role} Public key",
+        "ssh.key.requires_authorization": "Key authentication requires localhost or an authorized HTTPS connection.",
+        "ssh.key.saved": "Saved key. Copy it to the remote account\u2019s authorized_keys if needed.",
+        "ssh.key.saved_unavailable": "Saved key unavailable for this endpoint",
+        "ssh.key.selection_unavailable": "The selected key is unavailable. Choose a saved key or turn Use key off and on to create one.",
+        "ssh.key.temporary": "Temporary key. Save the connection profile or route to keep it.",
+        "ssh.key.use": "Use key",
+        "ssh.key.use_for_node": "{role} Use key",
+        "ssh.login.authenticated": "Authenticated",
+        "ssh.login.authenticating": "Authenticating",
+        "ssh.login.back": "Back to connection settings",
+        "ssh.login.cancel": "Cancel connection",
+        "ssh.login.complete": "Complete",
+        "ssh.login.connecting": "Connecting",
+        "ssh.login.failed": "Failed",
+        "ssh.login.forwarding": "Opening next hop",
+        "ssh.login.host_key": "Confirm host key",
+        "ssh.login.local_keys": "Trying local keys",
+        "ssh.login.node": "Node {number}",
+        "ssh.login.opening_terminal": "Opening terminal",
+        "ssh.login.password": "Password",
+        "ssh.login.password_for_node": "{role} password",
+        "ssh.login.password_required": "Requires password",
+        "ssh.login.progress": "SSH connection progress",
+        "ssh.login.remember_host_key": "Remember this host key?",
+        "ssh.login.submit": "Log in",
+        "ssh.login.target": "Target",
+        "ssh.login.trust": "Trust and continue",
+        "ssh.login.verifying": "Verifying host",
+        "ssh.login.waiting": "Waiting"
     },
     "zh-TW": {
         "agent.access.current_tab": "\u76ee\u524d\u5206\u9801",
@@ -329,20 +433,124 @@
         "browser.recovery.token_label": "\u5b58\u53d6\u6b0a\u6756",
         "browser.recovery.token_rejected": "\u5b58\u53d6\u6b0a\u6756\u672a\u901a\u904e\u9a57\u8b49\u3002",
         "browser.recovery.verifying_device": "\u7b49\u5f85\u88dd\u7f6e\u9a57\u8b49\u2026",
+        "common.cancel": "\u53d6\u6d88",
         "common.close": "\u95dc\u9589",
         "common.copy_url": "\u8907\u88fd\u7db2\u5740",
         "common.no": "\u5426",
         "common.or": "\u6216",
         "common.refresh": "\u66f4\u65b0\u72c0\u614b",
         "common.yes": "\u662f",
+        "connection.baud": "\u9b91\u7387",
+        "connection.cancelled": "\u5df2\u53d6\u6d88\u9023\u7dda\u3002",
+        "connection.choose_route": "\u9078\u64c7\u5df2\u5132\u5b58\u8def\u5f91\u2026",
+        "connection.connect_direct": "\u76f4\u63a5\u9023\u7dda",
+        "connection.connect_local": "\u9023\u7dda\u81f3\u672c\u6a5f Shell",
+        "connection.connect_route": "\u900f\u904e {name} \u9023\u7dda",
+        "connection.connect_terminal": "\u9023\u7dda\u81f3\u7d42\u7aef",
+        "connection.connect_uart": "\u9023\u7dda\u81f3 UART",
+        "connection.connecting": "\u9023\u7dda\u4e2d\u2026",
+        "connection.direct": "\u76f4\u63a5\u9023\u7dda",
+        "connection.direct_history": "\u76f4\u63a5\u9023\u7dda\u7d00\u9304",
+        "connection.direct_profiles": "\u76f4\u63a5\u9023\u7dda\u8a2d\u5b9a",
+        "connection.direct_route": "\u76f4\u63a5\u9023\u7dda",
+        "connection.disconnected": "\u5df2\u4e2d\u65b7\u9023\u7dda",
+        "connection.edit_route": "\u7de8\u8f2f\u8def\u5f91\u2026",
+        "connection.empty_history": "\u5c1a\u7121\u5df2\u5132\u5b58\u7684\u9023\u7dda\u8a2d\u5b9a\u6216\u6210\u529f\u7684 SSH \u9023\u7dda\u7d00\u9304\u3002",
+        "connection.failed": "\u9023\u7dda\u5931\u6557\u3002",
+        "connection.forget_key": "\u5fd8\u8a18\u91d1\u9470",
+        "connection.history_failed": "\u7121\u6cd5\u5132\u5b58 SSH \u9023\u7dda\u7d00\u9304\u3002",
+        "connection.history_profiles": "\u7d00\u9304\u8207\u9023\u7dda\u8a2d\u5b9a",
+        "connection.history_updated": "\u5df2\u66f4\u65b0 SSH \u9023\u7dda\u7d00\u9304\u3002",
+        "connection.host": "\u4e3b\u6a5f",
+        "connection.host_alias": "\u4e3b\u6a5f\u91d1\u9470\u5225\u540d\uff08\u9078\u586b\uff09",
+        "connection.host_identity": "\u4e3b\u6a5f\u8eab\u5206",
+        "connection.invalid_route": "\u8def\u5f91\u7121\u6548",
+        "connection.jump": "{count} \u500b\u4e2d\u7e7c\u7ad9",
+        "connection.jumps": "{count} \u500b\u4e2d\u7e7c\u7ad9",
+        "connection.local_shell": "\u672c\u6a5f Shell",
+        "connection.local_shell_hint": "\u5728 StandTerm \u4e3b\u6a5f\u4e0a\u57f7\u884c\u3002",
+        "connection.manual_port": "\u624b\u52d5\u8f38\u5165\u5e8f\u5217\u57e0\u2026",
+        "connection.no_routes": "\u6c92\u6709\u5df2\u5132\u5b58\u8def\u5f91",
+        "connection.none_selected": "\u5c1a\u672a\u9078\u64c7",
+        "connection.password": "\u5bc6\u78bc\uff08\u9078\u586b\uff09",
+        "connection.port": "\u9023\u63a5\u57e0",
+        "connection.profile": "\u9023\u7dda\u8a2d\u5b9a\uff1a{name}",
+        "connection.profile_modified": "\u4f7f\u7528\u8a2d\u5b9a\uff1a{name}\uff08\u5df2\u4fee\u6539\uff09",
+        "connection.progress": "SSH {hop}/{total}\uff1a{host}:{port} \u2014 {phase}",
+        "connection.repair_route": "\u8def\u5f91\u7121\u6548\uff0c\u8acb\u5148\u7de8\u8f2f\u518d\u9023\u7dda\u3002",
+        "connection.role_direct": "\u76f4\u63a5\u9023\u7dda",
+        "connection.route_hint": "\u9078\u64c7\u5df2\u5132\u5b58\u8def\u5f91\uff0c\u6216\u4f7f\u7528\u300c\u7de8\u8f2f\u8def\u5f91\u300d\u5efa\u7acb\u8def\u5f91\u3002",
+        "connection.route_ready": "\u8def\u5f91\u5df2\u5099\u59a5\u3002\u6309\u4e0b\u9023\u7dda\u5f8c\uff0c\u4f9d\u5e8f\u767b\u5165\u5404\u7ad9\u3002",
+        "connection.routes": "\u5df2\u5132\u5b58\u8def\u5f91",
+        "connection.save_history": "\u5132\u5b58\u9023\u7dda\u7d00\u9304",
+        "connection.save_profile": "\u5132\u5b58\u9023\u7dda\u8a2d\u5b9a",
+        "connection.saved_route": "\u5df2\u5132\u5b58\u8def\u5f91",
+        "connection.select_route": "\u9078\u64c7\u8981\u9023\u7dda\u7684\u8def\u5f91",
+        "connection.setup_key": "\u6b63\u5728\u8a2d\u5b9a\u91d1\u9470\u2026",
+        "connection.shell": "Shell",
+        "connection.temporary_route": "\u66ab\u7528\u8def\u5f91\uff0c\u5c1a\u672a\u5132\u5b58\u3002",
+        "connection.trust_key": "\u4fe1\u4efb\u91d1\u9470",
+        "connection.uart_example": "COM3 \u6216 /dev/ttyUSB0",
+        "connection.uart_port": "\u5e8f\u5217\u57e0",
+        "connection.username": "\u4f7f\u7528\u8005\u540d\u7a31",
+        "connection.verify_authenticate": "\u6b63\u5728\u9a57\u8b49\u4e3b\u6a5f\u8207\u8eab\u5206",
+        "connection.will_save": "\u5c07\u65bc\u6309\u4e0b\u9023\u7dda\u6642\u5132\u5b58\u3002",
         "settings.agent.approval": "\u9700\u6838\u51c6 + \u6b0a\u6756",
         "settings.agent.direct": "\u76f4\u63a5\u8f38\u5165 + \u6b0a\u6756",
         "settings.agent.hint": "\u300c\u6388\u6b0a Agent\u300d\u6703\u5c07\u6b64\u6b0a\u9650\u5957\u7528\u81f3\u76ee\u524d\u5206\u9801\uff0c\u4e26\u5efa\u7acb\u6a19\u6e96\u6b0a\u6756\u3002",
         "settings.agent.legend": "Agent \u5b58\u53d6",
         "settings.agent.observe": "\u552f\u8b80 + \u6b0a\u6756",
         "settings.agent.permission": "Agent \u9810\u8a2d\u6b0a\u9650",
-        "settings.language.hint": "\u4e0b\u6b21\u958b\u555f\u6b64\u9801\u9762\u6642\u5957\u7528\u65bc\u700f\u89bd\u5668\u5b58\u53d6\u3001Agent \u6b0a\u9650\u3001\u6838\u51c6\u3001\u50b3\u8f38\u53ca\u672c\u6a5f\u9023\u7dda\u8cc7\u8a0a\uff0c\u5176\u4ed6\u5340\u57df\u4ecd\u986f\u793a\u82f1\u6587\u3002",
-        "settings.language.label": "\u8a9e\u8a00\uff08\u9810\u89bd\uff09"
+        "settings.language.hint": "\u4e0b\u6b21\u958b\u555f\u6b64\u9801\u9762\u6642\u5957\u7528\u65bc\u700f\u89bd\u5668\u8207 Agent \u5b58\u53d6\u3001\u6838\u51c6\u3001\u50b3\u8f38\u3001\u9023\u7dda\u8868\u55ae\u53ca SSH \u767b\u5165\uff0c\u5176\u4ed6\u5340\u57df\u4ecd\u986f\u793a\u82f1\u6587\u3002",
+        "settings.language.label": "\u8a9e\u8a00\uff08\u9810\u89bd\uff09",
+        "ssh.host_identity.check": "\u6aa2\u67e5\u5df2\u5132\u5b58\u7684\u6307\u7d0b",
+        "ssh.host_identity.checking": "\u6b63\u5728\u6aa2\u67e5\u4e3b\u6a5f\u8eab\u5206\u2026",
+        "ssh.host_identity.forget": "\u5fd8\u8a18\u5df2\u5132\u5b58\u7684\u6307\u7d0b\u2026",
+        "ssh.host_identity.forget_now": "\u7acb\u5373\u5fd8\u8a18",
+        "ssh.host_identity.hint": "\u6aa2\u67e5\u6b64\u4e3b\u6a5f\u8eab\u5206\u5df2\u5132\u5b58\u7684\u6307\u7d0b\u3002",
+        "ssh.host_identity.keep": "\u4fdd\u7559\u6307\u7d0b",
+        "ssh.host_identity.no_fingerprint": "\u6c92\u6709\u5df2\u5132\u5b58\u7684\u6307\u7d0b\u3002",
+        "ssh.host_identity.stale": "SSH \u4e3b\u6a5f\u8eab\u5206\u56de\u8986\u5df2\u5931\u6548\u3002\u8acb\u91cd\u65b0\u6aa2\u67e5\u3002",
+        "ssh.host_identity.unavailable": "\u7121\u6cd5\u53d6\u5f97 SSH \u4e3b\u6a5f\u8eab\u5206\u3002",
+        "ssh.host_identity.verify_on_connect": "\u5c07\u65bc\u9023\u7dda\u6642\u9a57\u8b49\u4f3a\u670d\u5668\u3002",
+        "ssh.key.browser_for_node": "{role}\u700f\u89bd\u5668\u91d1\u9470",
+        "ssh.key.choose_hint": "\u9078\u64c7\u8981\u4f7f\u7528\u7684\u5df2\u5132\u5b58\u91d1\u9470\u3002",
+        "ssh.key.choose_saved": "\u9078\u64c7\u5df2\u5132\u5b58\u7684\u91d1\u9470\u2026",
+        "ssh.key.copy_public": "\u8907\u88fd\u516c\u9470",
+        "ssh.key.create_hint": "\u52fe\u9078\u300c\u4f7f\u7528\u91d1\u9470\u300d\u4ee5\u70ba\u6b64\u7aef\u9ede\u5efa\u7acb\u91d1\u9470\u3002",
+        "ssh.key.creating": "\u6b63\u5728\u5efa\u7acb\u91d1\u9470\u2026",
+        "ssh.key.creation_failed": "\u700f\u89bd\u5668\u91d1\u9470\u5efa\u7acb\u5931\u6557\u3002",
+        "ssh.key.no_key": "\u6b64\u7aef\u9ede\u6c92\u6709\u91d1\u9470",
+        "ssh.key.public_for_node": "{role}\u516c\u9470",
+        "ssh.key.requires_authorization": "\u91d1\u9470\u9a57\u8b49\u9700\u8981 localhost \u6216\u5df2\u6388\u6b0a\u7684 HTTPS \u9023\u7dda\u3002",
+        "ssh.key.saved": "\u5df2\u5132\u5b58\u7684\u91d1\u9470\u3002\u5982\u6709\u9700\u8981\uff0c\u8acb\u5c07\u516c\u9470\u8907\u88fd\u5230\u9060\u7aef\u5e33\u865f\u7684 authorized_keys\u3002",
+        "ssh.key.saved_unavailable": "\u5df2\u5132\u5b58\u7684\u91d1\u9470\u7121\u6cd5\u7528\u65bc\u6b64\u7aef\u9ede",
+        "ssh.key.selection_unavailable": "\u6240\u9078\u91d1\u9470\u7121\u6cd5\u4f7f\u7528\u3002\u8acb\u9078\u64c7\u5df2\u5132\u5b58\u7684\u91d1\u9470\uff0c\u6216\u95dc\u9589\u518d\u958b\u555f\u300c\u4f7f\u7528\u91d1\u9470\u300d\u4ee5\u5efa\u7acb\u65b0\u91d1\u9470\u3002",
+        "ssh.key.temporary": "\u66ab\u5b58\u91d1\u9470\u3002\u5132\u5b58\u9023\u7dda\u8a2d\u5b9a\u6216\u8def\u5f91\u5373\u53ef\u4fdd\u7559\u3002",
+        "ssh.key.use": "\u4f7f\u7528\u91d1\u9470",
+        "ssh.key.use_for_node": "{role}\u4f7f\u7528\u91d1\u9470",
+        "ssh.login.authenticated": "\u5df2\u9a57\u8b49",
+        "ssh.login.authenticating": "\u9a57\u8b49\u8eab\u5206\u4e2d",
+        "ssh.login.back": "\u8fd4\u56de\u9023\u7dda\u8a2d\u5b9a",
+        "ssh.login.cancel": "\u53d6\u6d88\u9023\u7dda",
+        "ssh.login.complete": "\u5df2\u5b8c\u6210",
+        "ssh.login.connecting": "\u9023\u7dda\u4e2d",
+        "ssh.login.failed": "\u5931\u6557",
+        "ssh.login.forwarding": "\u6b63\u5728\u9023\u5f80\u4e0b\u4e00\u7ad9",
+        "ssh.login.host_key": "\u78ba\u8a8d\u4e3b\u6a5f\u91d1\u9470",
+        "ssh.login.local_keys": "\u6b63\u5728\u5617\u8a66\u672c\u6a5f\u91d1\u9470",
+        "ssh.login.node": "\u7bc0\u9ede {number}",
+        "ssh.login.opening_terminal": "\u6b63\u5728\u958b\u555f\u7d42\u7aef",
+        "ssh.login.password": "\u5bc6\u78bc",
+        "ssh.login.password_for_node": "{role}\u5bc6\u78bc",
+        "ssh.login.password_required": "\u9700\u8981\u5bc6\u78bc",
+        "ssh.login.progress": "SSH \u9023\u7dda\u9032\u5ea6",
+        "ssh.login.remember_host_key": "\u8a18\u4f4f\u6b64\u4e3b\u6a5f\u91d1\u9470\uff1f",
+        "ssh.login.submit": "\u767b\u5165",
+        "ssh.login.target": "\u76ee\u6a19\u4e3b\u6a5f",
+        "ssh.login.trust": "\u4fe1\u4efb\u4e26\u7e7c\u7e8c",
+        "ssh.login.verifying": "\u6b63\u5728\u9a57\u8b49\u4e3b\u6a5f",
+        "ssh.login.waiting": "\u7b49\u5f85\u4e2d"
     }
 };
     if (typeof module === 'object' && module.exports) module.exports = messages;
diff --git a/static/js/standterm-ssh-host-identity.js b/static/js/standterm-ssh-host-identity.js
index 8c742be..a810411 100644
--- a/static/js/standterm-ssh-host-identity.js
+++ b/static/js/standterm-ssh-host-identity.js
@@ -1,7 +1,13 @@
 (function() {
     'use strict';
 
-    window.StandTermSshHostIdentity = function({ parent, read, request, editorId, nodeId }) {
+    window.StandTermSshHostIdentity = function({ parent, read, request, editorId, nodeId, translate }) {
+        const t = (key, fallback, params = {}) => {
+            const translated = typeof translate === 'function' ? translate(key, params) : key;
+            if (translated !== key) return translated;
+            return fallback.replace(/\{([A-Za-z_][A-Za-z0-9_]*)\}/g,
+                (placeholder, name) => Object.hasOwn(params, name) ? String(params[name]) : placeholder);
+        };
         const status = document.createElement('p');
         status.className = 'ssh-host-identity-status';
         status.setAttribute('role', 'status');
@@ -20,19 +26,19 @@
             container.append(value);
             return value;
         };
-        const refresh = button('Check saved fingerprint', () => perform('inspect'));
-        const forget = button('Forget saved fingerprint…', () => perform('prepare_forget'));
+        const refresh = button(t('ssh.host_identity.check', 'Check saved fingerprint'), () => perform('inspect'));
+        const forget = button(t('ssh.host_identity.forget', 'Forget saved fingerprint…'), () => perform('prepare_forget'));
         function invalidate() {
             revision += 1;
             pendingAction = null;
             confirmation.replaceChildren();
-            status.textContent = 'Check the saved fingerprint for this host identity.';
+            status.textContent = t('ssh.host_identity.hint', 'Check the saved fingerprint for this host identity.');
             refresh.disabled = false;
             forget.hidden = true;
         }
         function show(result) {
             const fingerprints = Array.isArray(result.fingerprints) ? result.fingerprints : [];
-            status.textContent = `${result.identity}\n${fingerprints.length ? fingerprints.join('\n') : 'No saved fingerprint.'}\nThe server will be verified when connecting.`;
+            status.textContent = `${result.identity}\n${fingerprints.length ? fingerprints.join('\n') : t('ssh.host_identity.no_fingerprint', 'No saved fingerprint.')}\n${t('ssh.host_identity.verify_on_connect', 'The server will be verified when connecting.')}`;
             forget.hidden = !fingerprints.length;
         }
         async function perform(operation, action = null) {
@@ -45,22 +51,22 @@
             refresh.disabled = true;
             forget.disabled = true;
             confirmation.replaceChildren();
-            status.textContent = 'Checking host identity…';
+            status.textContent = t('ssh.host_identity.checking', 'Checking host identity…');
             try {
                 const result = await request(payload);
                 if (!parent.isConnected || revision !== token || JSON.stringify(read()) !== snapshot) return;
                 if (!result || result.request_id !== payload.request_id || result.editor_id !== editorId || result.node_id !== nodeId) {
-                    throw new Error('SSH host identity reply is stale. Check again.');
+                    throw new Error(t('ssh.host_identity.stale', 'SSH host identity reply is stale. Check again.'));
                 }
-                if (result.status === 'failed') throw new Error(result.message || 'SSH host identity is unavailable.');
+                if (result.status === 'failed') throw new Error(result.message || t('ssh.host_identity.unavailable', 'SSH host identity is unavailable.'));
                 if (result.status === 'confirm') {
                     pendingAction = result.action_id;
                     status.textContent = result.message;
                     const question = document.createElement('p');
                     question.textContent = result.question;
                     confirmation.append(question);
-                    button('Forget now', () => { if (pendingAction === result.action_id) perform('confirm', pendingAction); }, confirmation);
-                    const cancel = button('Keep fingerprint', () => { if (pendingAction === result.action_id) perform('cancel', pendingAction); }, confirmation);
+                    button(t('ssh.host_identity.forget_now', 'Forget now'), () => { if (pendingAction === result.action_id) perform('confirm', pendingAction); }, confirmation);
+                    const cancel = button(t('ssh.host_identity.keep', 'Keep fingerprint'), () => { if (pendingAction === result.action_id) perform('cancel', pendingAction); }, confirmation);
                     cancel.focus();
                 } else {
                     pendingAction = null;
@@ -68,7 +74,7 @@
                     else show(result);
                 }
             } catch (err) {
-                if (parent.isConnected && revision === token) status.textContent = err.message || 'SSH host identity is unavailable.';
+                if (parent.isConnected && revision === token) status.textContent = err.message || t('ssh.host_identity.unavailable', 'SSH host identity is unavailable.');
             } finally {
                 if (revision === token) { refresh.disabled = false; forget.disabled = false; }
             }
diff --git a/static/js/standterm-ssh-login.js b/static/js/standterm-ssh-login.js
index d328691..2c9ec91 100644
--- a/static/js/standterm-ssh-login.js
+++ b/static/js/standterm-ssh-login.js
@@ -1,12 +1,18 @@
 (function() {
     'use strict';
 
-    window.StandTermSshLogin = function({ terminalId, attemptId, route, send, cancel, back, isActive }) {
+    window.StandTermSshLogin = function({ terminalId, attemptId, route, send, cancel, back, isActive, translate }) {
+        const t = (key, fallback, params = {}) => {
+            const translated = typeof translate === 'function' ? translate(key, params) : key;
+            if (translated !== key) return translated;
+            return fallback.replace(/\{([A-Za-z_][A-Za-z0-9_]*)\}/g,
+                (placeholder, name) => Object.hasOwn(params, name) ? String(params[name]) : placeholder);
+        };
         const element = document.createElement('section');
         element.className = 'ssh-login-flow';
         const progress = document.createElement('div');
         progress.className = 'ssh-login-progress';
-        progress.setAttribute('aria-label', 'SSH connection progress');
+        progress.setAttribute('aria-label', t('ssh.login.progress', 'SSH connection progress'));
         const source = document.createElement('span');
         source.textContent = 'Core';
         source.dataset.phase = 'complete';
@@ -25,12 +31,23 @@
             parent.append(value);
             return value;
         };
-        const labels = { waiting: 'Waiting', connect: 'Connecting', forward: 'Opening next hop',
-            verify_and_authenticate: 'Verifying host', local_keys: 'Trying local keys', host_key: 'Confirm host key',
-            password: 'Requires password', authenticate: 'Authenticating', authenticated: 'OK',
-            shell: 'Opening terminal', complete: 'OK', failed: 'Failed' };
+        const labels = {
+            waiting: t('ssh.login.waiting', 'Waiting'),
+            connect: t('ssh.login.connecting', 'Connecting'),
+            forward: t('ssh.login.forwarding', 'Opening next hop'),
+            verify_and_authenticate: t('ssh.login.verifying', 'Verifying host'),
+            local_keys: t('ssh.login.local_keys', 'Trying local keys'),
+            host_key: t('ssh.login.host_key', 'Confirm host key'),
+            password: t('ssh.login.password_required', 'Requires password'),
+            authenticate: t('ssh.login.authenticating', 'Authenticating'),
+            authenticated: t('ssh.login.authenticated', 'Authenticated'),
+            shell: t('ssh.login.opening_terminal', 'Opening terminal'),
+            complete: t('ssh.login.complete', 'Complete'),
+            failed: t('ssh.login.failed', 'Failed'),
+        };
         const nodes = route.map((node, index) => {
-            const role = index === route.length - 1 ? 'Target' : `Node ${index + 1}`;
+            const role = index === route.length - 1 ? t('ssh.login.target', 'Target')
+                : t('ssh.login.node', 'Node {number}', { number: index + 1 });
             const marker = document.createElement('span');
             marker.textContent = role;
             marker.dataset.phase = 'waiting';
@@ -59,8 +76,8 @@
             return { id: node.node_id, role, card, marker, status, body, phase: 'waiting', request: null };
         });
         element.append(message, actions);
-        const cancelButton = button('Cancel connection', cancel, actions);
-        const backButton = button('Back to connection settings', back, actions);
+        const cancelButton = button(t('ssh.login.cancel', 'Cancel connection'), cancel, actions);
+        const backButton = button(t('ssh.login.back', 'Back to connection settings'), back, actions);
         backButton.hidden = true;
         let activeIndex = -1;
         let finished = false;
@@ -118,23 +135,23 @@
             if (data.kind === 'password') {
                 const form = document.createElement('form');
                 const label = document.createElement('label');
-                label.textContent = 'Password';
+                label.textContent = t('ssh.login.password', 'Password');
                 const input = document.createElement('input');
                 input.type = 'password';
                 input.autocomplete = 'off';
-                input.setAttribute('aria-label', `${node.role} password`);
+                input.setAttribute('aria-label', t('ssh.login.password_for_node', '{role} password', { role: node.role }));
                 label.append(input);
                 form.append(label);
-                const submit = button('Log in', () => {}, form);
+                const submit = button(t('ssh.login.submit', 'Log in'), () => {}, form);
                 submit.type = 'submit';
                 form.onsubmit = event => { event.preventDefault(); reply({ password: input.value }); };
                 node.body.append(form);
             } else {
                 const question = document.createElement('p');
-                question.textContent = data.question || 'Remember this host key?';
+                question.textContent = data.question || t('ssh.login.remember_host_key', 'Remember this host key?');
                 node.body.append(question);
-                button('Trust and continue', () => reply({ accept: true }), node.body);
-                button('Cancel connection', cancel, node.body).dataset.defaultFocus = 'true';
+                button(t('ssh.login.trust', 'Trust and continue'), () => reply({ accept: true }), node.body);
+                button(t('ssh.login.cancel', 'Cancel connection'), cancel, node.body).dataset.defaultFocus = 'true';
             }
             requestAnimationFrame(focus);
             return true;
diff --git a/static/js/standterm-ssh-node-auth.js b/static/js/standterm-ssh-node-auth.js
index 9b6498a..ddde659 100644
--- a/static/js/standterm-ssh-node-auth.js
+++ b/static/js/standterm-ssh-node-auth.js
@@ -4,7 +4,13 @@
 
     window.StandTermSshNodeAuth = function({ parent, role, authentication, endpoint, profiles,
         savedKeys, newKeys, keyAllowed, createKey, copyPublicKey, onBusy, onChange,
-        useKeyInput, labelElement, resetOnEndpointChange = false }) {
+        useKeyInput, labelElement, resetOnEndpointChange = false, translate }) {
+        const t = (key, fallback, params = {}) => {
+            const translated = typeof translate === 'function' ? translate(key, params) : key;
+            if (translated !== key) return translated;
+            return fallback.replace(/\{([A-Za-z_][A-Za-z0-9_]*)\}/g,
+                (placeholder, name) => Object.hasOwn(params, name) ? String(params[name]) : placeholder);
+        };
         const panel = document.createElement('div');
         panel.className = 'ssh-node-key';
         const row = document.createElement('div');
@@ -14,24 +20,24 @@
         label.hidden = false;
         const useKey = useKeyInput || document.createElement('input');
         useKey.type = 'checkbox';
-        useKey.setAttribute('aria-label', `${role} Use key`);
+        useKey.setAttribute('aria-label', t('ssh.key.use_for_node', '{role} Use key', { role }));
         useKey.checked = authentication.method === 'browser-key';
-        label.replaceChildren(useKey, document.createTextNode('Use key'));
+        label.replaceChildren(useKey, document.createTextNode(t('ssh.key.use', 'Use key')));
         const publicKey = document.createElement('input');
         publicKey.type = 'text';
         publicKey.className = 'ssh-node-public-key';
-        publicKey.setAttribute('aria-label', `${role} Public key`);
+        publicKey.setAttribute('aria-label', t('ssh.key.public_for_node', '{role} Public key', { role }));
         publicKey.readOnly = true;
-        publicKey.placeholder = 'No key for this endpoint';
+        publicKey.placeholder = t('ssh.key.no_key', 'No key for this endpoint');
         const copy = document.createElement('button');
         copy.type = 'button';
         copy.className = 'ssh-key-copy';
         copy.innerHTML = '<svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" aria-hidden="true"><rect x="8" y="8" width="12" height="13" rx="2"/><path d="M16 8V5a2 2 0 0 0-2-2H5a2 2 0 0 0-2 2v9a2 2 0 0 0 2 2h3"/></svg>';
-        copy.title = 'Copy public key';
-        copy.setAttribute('aria-label', 'Copy public key');
+        copy.title = t('ssh.key.copy_public', 'Copy public key');
+        copy.setAttribute('aria-label', t('ssh.key.copy_public', 'Copy public key'));
         row.append(label, publicKey, copy);
         const keys = document.createElement('select');
-        keys.setAttribute('aria-label', `${role} Browser key`);
+        keys.setAttribute('aria-label', t('ssh.key.browser_for_node', '{role} Browser key', { role }));
         const status = document.createElement('p');
         status.className = 'ssh-key-status';
         panel.append(row, keys, status);
@@ -63,9 +69,9 @@
             if (!selected && available.length === 1) selected = reference(available[0]);
             currentRecord = selected && available.find(record => record.keyId === selected.keyId
                 && JSON.stringify(reference(record)) === JSON.stringify(selected));
-            keys.replaceChildren(new Option('Choose a saved key...', ''));
+            keys.replaceChildren(new Option(t('ssh.key.choose_saved', 'Choose a saved key...'), ''));
             for (const record of available) keys.add(new Option(record.fingerprint, record.keyId));
-            if (selected && !currentRecord) keys.add(new Option('Saved key unavailable for this endpoint', selected.keyId));
+            if (selected && !currentRecord) keys.add(new Option(t('ssh.key.saved_unavailable', 'Saved key unavailable for this endpoint'), selected.keyId));
             keys.value = selected?.keyId || '';
             keys.hidden = available.length < 2 && (!selected || !!currentRecord);
             keys.disabled = generating || !keyAllowed;
@@ -74,14 +80,14 @@
             publicKey.title = currentRecord?.fingerprint || '';
             publicKey.classList.toggle('inactive', !useKey.checked);
             copy.disabled = !currentRecord;
-            status.textContent = generating ? 'Creating key…' : !keyAllowed
-                ? 'Key authentication requires localhost or an authorized HTTPS connection.'
+            status.textContent = generating ? t('ssh.key.creating', 'Creating key…') : !keyAllowed
+                ? t('ssh.key.requires_authorization', 'Key authentication requires localhost or an authorized HTTPS connection.')
                 : currentRecord ? newKeys.has(currentRecord.keyId)
-                    ? 'Temporary key. Save the session or route to keep it.'
-                    : 'Saved key. Copy it to the remote account’s authorized_keys if needed.'
-                : selected ? 'The selected key is unavailable. Choose a saved key or turn Use key off and on to create one.'
-                : available.length > 1 ? 'Choose which saved key to use.'
-                : 'Select Use key to create a key for this endpoint.';
+                    ? t('ssh.key.temporary', 'Temporary key. Save the connection profile or route to keep it.')
+                    : t('ssh.key.saved', 'Saved key. Copy it to the remote account’s authorized_keys if needed.')
+                : selected ? t('ssh.key.selection_unavailable', 'The selected key is unavailable. Choose a saved key or turn Use key off and on to create one.')
+                : available.length > 1 ? t('ssh.key.choose_hint', 'Choose which saved key to use.')
+                : t('ssh.key.create_hint', 'Select Use key to create a key for this endpoint.');
         }
         useKey.onchange = async () => {
             if (!useKey.checked) { update(); onChange(); return; }
@@ -102,7 +108,7 @@
                 newKeys.set(record.keyId, record);
                 if (isCurrent()) selected = reference(record);
             } catch (err) {
-                errorMessage = err.message || 'Browser key creation failed.';
+                errorMessage = err.message || t('ssh.key.creation_failed', 'Browser key creation failed.');
             } finally {
                 generating = false;
                 onBusy(-1);
diff --git a/templates/index.html b/templates/index.html
index 23ac4be..e826983 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -1136,7 +1136,7 @@ <h3>Settings</h3>
                             <div class="settings-row"><label for="pref-uiLanguage" data-i18n="settings.language.label">Language (preview)</label>
                                 <select id="pref-uiLanguage"><option value="en">English</option><option value="zh-TW" lang="zh-TW">繁體中文（台灣）</option></select>
                             </div>
-                            <div class="settings-status" data-i18n="settings.language.hint">Applies next time you open this page: browser access, Agent permissions, approvals, transfers and local connection info. Other areas remain in English.</div>
+                            <div class="settings-status" data-i18n="settings.language.hint">Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms and SSH login. Other areas remain in English.</div>
                             <div class="settings-row"><label for="pref-useCustomMenu">Enable custom context menu</label><input type="checkbox" id="pref-useCustomMenu"></div>
                             <div class="settings-row"><label for="pref-copyOnSelect">Copy on select</label><input type="checkbox" id="pref-copyOnSelect"></div>
                             <div class="settings-row"><label for="pref-enablePicPreview">Enable pic preview</label><input type="checkbox" id="pref-enablePicPreview"></div>
@@ -1366,57 +1366,57 @@ <h2>StandTerm</h2>
         <div id="connection-form">
             <div class="mode-selector" id="modeSelector">
                 <label data-mode="ssh"><input type="radio" name="connection_type" value="ssh">SSH</label>
-                <label data-mode="local_shell"><input type="radio" name="connection_type" value="local_shell">Local Shell</label>
+                <label data-mode="local_shell" title="Runs on the StandTerm host." data-i18n-title="connection.local_shell_hint"><input type="radio" name="connection_type" value="local_shell"><span data-i18n="connection.local_shell">Local Shell</span></label>
                 <label data-mode="uart"><input type="radio" name="connection_type" value="uart">UART</label>
             </div>
             <div id="ssh-fields">
                 <section class="ssh-preparation-pane" id="ssh-direct-pane">
-                    <button type="button" id="ssh-direct-heading" class="ssh-preparation-heading" aria-expanded="true" aria-controls="ssh-direct-body"><span class="ssh-pane-selection">●</span>Direct connect<small id="ssh-direct-summary"></small></button>
+                    <button type="button" id="ssh-direct-heading" class="ssh-preparation-heading" aria-expanded="true" aria-controls="ssh-direct-body"><span class="ssh-pane-selection">●</span><span data-i18n="connection.direct">Direct connect</span><small id="ssh-direct-summary"></small></button>
                     <div class="ssh-preparation-body" id="ssh-direct-body">
                         <div id="ssh-profile-indicator"></div>
                         <div style="display: flex; gap: 10px;">
-                            <input type="text" id="host" placeholder="Host" value="127.0.0.1" style="flex: 3;">
-                            <input type="text" id="port" placeholder="Port" value="22" style="flex: 1;">
+                            <input type="text" id="host" placeholder="Host" aria-label="Host" data-i18n-placeholder="connection.host" data-i18n-aria-label="connection.host" value="127.0.0.1" style="flex: 3;">
+                            <input type="text" id="port" placeholder="Port" aria-label="Port" data-i18n-placeholder="connection.port" data-i18n-aria-label="connection.port" value="22" style="flex: 1;">
                         </div>
-                        <input type="text" id="username" placeholder="Username" value="aska">
-                        <input type="password" id="password" placeholder="Password (Optional)">
+                        <input type="text" id="username" placeholder="Username" aria-label="Username" data-i18n-placeholder="connection.username" data-i18n-aria-label="connection.username" value="aska">
+                        <input type="password" id="password" placeholder="Password (optional)" aria-label="Password (optional)" data-i18n-placeholder="connection.password" data-i18n-aria-label="connection.password">
                         <div id="ssh-direct-key">
                             <label id="ssh-use-browser-key-label"><input type="checkbox" id="ssh-use-browser-key">Use key</label>
                         </div>
                         <div class="ssh-session-picker">
-                            <button type="button" id="ssh-session-picker-toggle" aria-expanded="false" aria-controls="ssh-session-picker-panel">History &amp; Profiles</button>
+                            <button type="button" id="ssh-session-picker-toggle" aria-expanded="false" aria-controls="ssh-session-picker-panel" data-i18n="connection.history_profiles">History &amp; Profiles</button>
                             <div id="ssh-session-picker-panel" role="listbox"></div>
                         </div>
                         <details class="ssh-host-identity" id="ssh-direct-identity">
-                            <summary>Host identity</summary>
-                            <label>Host key alias (optional)<input id="ssh-direct-alias" autocomplete="off"></label>
+                            <summary data-i18n="connection.host_identity">Host identity</summary>
+                            <label><span data-i18n="connection.host_alias">Host key alias (optional)</span><input id="ssh-direct-alias" autocomplete="off"></label>
                             <div id="ssh-direct-identity-body"></div>
                         </details>
                     </div>
                 </section>
                 <section class="ssh-preparation-pane" id="ssh-route-pane">
-                    <button type="button" id="ssh-route-heading" class="ssh-preparation-heading" aria-expanded="false" aria-controls="ssh-route-body"><span class="ssh-pane-selection">○</span>Saved routes<small id="ssh-route-summary"></small></button>
+                    <button type="button" id="ssh-route-heading" class="ssh-preparation-heading" aria-expanded="false" aria-controls="ssh-route-body"><span class="ssh-pane-selection">○</span><span data-i18n="connection.routes">Saved routes</span><small id="ssh-route-summary"></small></button>
                     <div class="ssh-preparation-body" id="ssh-route-body" hidden>
-                        <select id="ssh-route-picker" aria-label="Saved route"></select>
+                        <select id="ssh-route-picker" aria-label="Saved route" data-i18n-aria-label="connection.saved_route"></select>
                         <div id="ssh-route-path"></div>
-                        <button type="button" id="ssh-edit-route">Edit route...</button>
+                        <button type="button" id="ssh-edit-route" data-i18n="connection.edit_route">Edit route...</button>
                     </div>
                 </section>
                 <div class="ssh-save-options">
-                    <label><input type="checkbox" id="ssh-save-history" checked>Save history</label>
-                    <label><input type="checkbox" id="ssh-save-session">Save session</label>
+                    <label><input type="checkbox" id="ssh-save-history" checked><span data-i18n="connection.save_history">Save history</span></label>
+                    <label><input type="checkbox" id="ssh-save-session"><span data-i18n="connection.save_profile">Save connection profile</span></label>
                 </div>
-                <button type="button" id="ssh-cancel-start" hidden>Cancel connection</button>
+                <button type="button" id="ssh-cancel-start" data-i18n="ssh.login.cancel" hidden>Cancel connection</button>
                 <div id="ssh-session-message" aria-live="polite"></div>
             </div>
             <div id="local-shell-fields">
-                <select id="local-shell-kind"></select>
+                <select id="local-shell-kind" aria-label="Shell" data-i18n-aria-label="connection.shell"></select>
             </div>
             <div id="uart-fields">
-                <select id="uart-port-select"></select>
-                <input type="text" id="uart-port" list="uart-port-list" placeholder="COM3 or /dev/ttyUSB0">
+                <select id="uart-port-select" aria-label="UART port" data-i18n-aria-label="connection.uart_port"></select>
+                <input type="text" id="uart-port" aria-label="UART port" data-i18n-aria-label="connection.uart_port" list="uart-port-list" placeholder="COM3 or /dev/ttyUSB0" data-i18n-placeholder="connection.uart_example">
                 <datalist id="uart-port-list"></datalist>
-                <select id="uart-baud"></select>
+                <select id="uart-baud" aria-label="Baud rate" data-i18n-aria-label="connection.baud"></select>
             </div>
             <button id="connectBtn">Connect to SSH</button>
         </div>
@@ -4788,10 +4788,11 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 if (mode === 'ssh') {
                     const entry = currentSshRouteEntry();
                     return sshPreparationMode === 'route'
-                        ? entry ? `Connect via ${entry.name || `${entry.username}@${entry.host}`}` : 'Select a route to connect'
-                        : 'Connect directly';
+                        ? entry ? t('connection.connect_route', { name: entry.name || `${entry.username}@${entry.host}` }) : t('connection.select_route')
+                        : t('connection.connect_direct');
                 }
-                return `Connect to ${CONNECTION_LABELS[mode] || 'Terminal'}`;
+                return t(mode === 'local_shell' ? 'connection.connect_local'
+                    : mode === 'uart' ? 'connection.connect_uart' : 'connection.connect_terminal');
             }
 
             function populateSshFields() {
@@ -4871,19 +4872,19 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const picker = document.getElementById('ssh-route-picker');
                 const entries = [...sshSessionState.profiles, ...sshSessionState.history].filter(item => !sshRouteDraft || item.id !== sshRouteDraft.entryId);
                 if (sshRouteDraft && entry) entries.unshift(entry);
-                picker.replaceChildren(new Option(entries.length ? 'Choose a saved route...' : 'No saved routes', ''));
+                picker.replaceChildren(new Option(entries.length ? t('connection.choose_route') : t('connection.no_routes'), ''));
                 for (const item of entries) {
                     const resolved = SshRoutes.resolve(sshRouteDraft && item.id === sshRouteDraft.entryId ? source : sshSessionState, item.startNodeId);
                     const jumps = Math.max(0, resolved.path.length - 1);
-                    picker.add(new Option(`${item.name || `${item.username}@${item.host}`} · ${resolved.error ? 'Invalid route' : jumps ? `${jumps} ${jumps === 1 ? 'jump' : 'jumps'}` : 'Direct'}`, item.id));
+                    picker.add(new Option(`${item.name || `${item.username}@${item.host}`} · ${resolved.error ? t('connection.invalid_route') : jumps ? t(jumps === 1 ? 'connection.jump' : 'connection.jumps', { count: jumps }) : t('connection.direct_route')}`, item.id));
                 }
                 picker.value = entry?.id || '';
-                document.getElementById('ssh-route-summary').textContent = entry?.name || (entry ? `${entry.username}@${entry.host}` : 'None selected');
+                document.getElementById('ssh-route-summary').textContent = entry?.name || (entry ? `${entry.username}@${entry.host}` : t('connection.none_selected'));
                 document.getElementById('ssh-route-path').textContent = path.length
-                    ? `Core → ${path.map(node => `${node.endpoint.username}@${node.endpoint.host}:${node.endpoint.port}`).join(' → ')}\n${result.error ? 'Invalid route — edit before connecting.' : `${path.length - 1} ${path.length === 2 ? 'jump' : 'jumps'}`}`
-                    : 'Select a saved route, or use Edit route to create one.';
+                    ? `Core → ${path.map(node => `${node.endpoint.username}@${node.endpoint.host}:${node.endpoint.port}`).join(' → ')}\n${result.error ? t('connection.repair_route') : t(path.length === 2 ? 'connection.jump' : 'connection.jumps', { count: path.length - 1 })}`
+                    : t('connection.route_hint');
                 if (sshRouteDraft) document.getElementById('ssh-route-path').textContent += sshRouteDraft.saveRoute
-                    ? '\nWill save on Connect.' : '\nTemporary route — not saved.';
+                    ? `\n${t('connection.will_save')}` : `\n${t('connection.temporary_route')}`;
                 renderSshPreparation();
             }
 
@@ -4908,7 +4909,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 hideActionPrompt();
                 resetConnectButton();
                 document.getElementById('ssh-cancel-start').hidden = true;
-                setSshSessionMessage('Connection cancelled.');
+                setSshSessionMessage(t('connection.cancelled'));
                 updateActiveTerminalUi();
             }
 
@@ -4929,7 +4930,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const terminalId = formData.terminal_id;
                 discardSshLogin(terminalId);
                 const flow = StandTermSshLogin({
-                    terminalId, attemptId: formData.attempt_id, route: formData.route,
+                    terminalId, attemptId: formData.attempt_id, route: formData.route, translate: t,
                     isActive: () => activeTerminalId === terminalId && sshLoginFlows.get(terminalId) === flow,
                     send: payload => {
                         if (socket.connected && pendingSshConnectionDrafts.get(terminalId)?.attemptId === payload.attempt_id) {
@@ -5116,8 +5117,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 }
                 const modified = getSshTargetKey(profile) !== getSshTargetKey(getCurrentSshTarget());
                 sshProfileIndicator.innerText = modified
-                    ? `Based on: ${profile.name} (modified)`
-                    : `Profile: ${profile.name}`;
+                    ? t('connection.profile_modified', { name: profile.name })
+                    : t('connection.profile', { name: profile.name });
                 sshProfileIndicator.style.display = 'block';
                 refreshQuickConnectSshKey(false);
             }
@@ -5213,12 +5214,12 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     const route = SshRoutes.resolve(sshSessionState, entry.startNodeId);
                     return !route.error && route.path.length === 1;
                 });
-                appendSshPickerGroup('Direct Profiles', direct(sshSessionState.profiles), 'profile');
-                appendSshPickerGroup('Direct History', direct(sshSessionState.history), 'history');
+                appendSshPickerGroup(t('connection.direct_profiles'), direct(sshSessionState.profiles), 'profile');
+                appendSshPickerGroup(t('connection.direct_history'), direct(sshSessionState.history), 'history');
                 if (!sshSessionPickerPanel.children.length) {
                     const empty = document.createElement('div');
                     empty.className = 'ssh-session-picker-empty';
-                    empty.innerText = 'No saved profiles or successful SSH connections yet.';
+                    empty.innerText = t('connection.empty_history');
                     sshSessionPickerPanel.appendChild(empty);
                 }
                 updateSshProfileIndicator();
@@ -5533,8 +5534,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                         draftState.history = [...draftState.history.filter(entry => entry.id === currentDraft.entryId),
                             ...SshRoutes.clone(sshSessionState.history.filter(entry => entry.id !== currentDraft.entryId))];
                     }
-                    setSshSessionMessage('SSH history updated.');
-                } catch (err) { setSshSessionMessage(err.message || 'SSH history could not be saved.', true); }
+                    setSshSessionMessage(t('connection.history_updated'));
+                } catch (err) { setSshSessionMessage(err.message || t('connection.history_failed'), true); }
                 finally { savingSshHistory = false; }
             }
 
@@ -5661,7 +5662,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 if (detectedDevices.length > 0) {
                     const manualOption = document.createElement('option');
                     manualOption.value = UART_MANUAL_PORT_VALUE;
-                    manualOption.innerText = 'Manual COM or /dev...';
+                    manualOption.innerText = t('connection.manual_port');
                     uartPortSelect.appendChild(manualOption);
                     uartPortSelect.style.display = '';
 
@@ -6576,13 +6577,13 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 }
                 if (agentConnectDialog.open && !socket.connected) requestAgentConnectInfo();
                 if (!state) return;
-                sshStatusEl.innerText = state.connected ? getTerminalDisplayLabel(state) : (state.connecting ? 'Connecting' : 'Disconnected');
+                sshStatusEl.innerText = state.connected ? getTerminalDisplayLabel(state) : (state.connecting ? t('ssh.login.connecting') : t('connection.disconnected'));
                 sshStatusEl.style.color = state.connected ? '#34c759' : (state.connecting ? '#ffcc00' : '#ff9f0a');
                 document.getElementById('uptime-section').style.display = state.connectedAt ? 'inline' : 'none';
                 document.getElementById('controls').style.display = state.connected ? 'none' : 'block';
                 renderSshLogin();
                 if (state.connecting) {
-                    connectBtn.innerText = 'Connecting...';
+                    connectBtn.innerText = t('connection.connecting');
                     connectBtn.disabled = true;
                 } else {
                     resetConnectButton();
@@ -8212,9 +8213,9 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 pendingAction = actionType;
                 pendingActionId = actionId || null;
                 pendingActionTerminalId = terminalId;
-                actionYesBtn.innerText = actionType === 'confirm_ssh_host_key' ? 'Trust key'
-                    : (actionType === 'forget_ssh_host_key' ? 'Forget key' : 'Yes');
-                actionNoBtn.innerText = actionType === 'offer_localhost_key_setup' ? 'No' : 'Cancel';
+                actionYesBtn.innerText = actionType === 'confirm_ssh_host_key' ? t('connection.trust_key')
+                    : (actionType === 'forget_ssh_host_key' ? t('connection.forget_key') : t('common.yes'));
+                actionNoBtn.innerText = actionType === 'offer_localhost_key_setup' ? t('common.no') : t('common.cancel');
                 actionMessageEl.innerText = message || '';
                 actionQuestionEl.innerText = question || '';
                 actionBox.style.display = 'block';
@@ -8346,7 +8347,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     sshPreparedKeys.set(draft.payload, temporaryKeys);
                 }
                 document.getElementById('ssh-cancel-start').hidden = formData.connection_type !== 'ssh';
-                connectBtn.innerText = "Connecting...";
+                connectBtn.innerText = t('connection.connecting');
                 connectBtn.disabled = true;
                 updatePolicyDebugPanel('submit_connection', sshConnectionDiagnostic(formData));
             }
@@ -8386,7 +8387,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 });
             }
             directKeyControl = StandTermSshNodeAuth({
-                parent: document.getElementById('ssh-direct-key'), role: 'Direct', authentication: { method: 'password' },
+                parent: document.getElementById('ssh-direct-key'), role: t('connection.role_direct'), translate: t, authentication: { method: 'password' },
                 endpoint: getCurrentSshTarget, profiles: [], savedKeys: [], newKeys: directTemporarySshKeys,
                 keyAllowed: isBrowserSshKeyAllowedByPolicy(), createKey: createTemporarySshKey,
                 copyPublicKey: value => copyToClipboard(value), useKeyInput: sshUseBrowserKeyInput,
@@ -8395,7 +8396,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 onChange: () => { invalidateSshRetry(); applyQuickConnectKeySelection(); }
             });
             const directHostIdentity = StandTermSshHostIdentity({
-                parent: document.getElementById('ssh-direct-identity-body'), editorId: SshRoutes.id(), nodeId: 'direct',
+                parent: document.getElementById('ssh-direct-identity-body'), translate: t, editorId: SshRoutes.id(), nodeId: 'direct',
                 read: () => ({ ...SshRoutes.endpoint(getCurrentSshTarget()), terminal_id: activeTerminalId,
                     host_key_alias: document.getElementById('ssh-direct-alias').value.trim() }), request: requestSshHostIdentity
             });
@@ -8435,7 +8436,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                             selectedSshRouteEntry = entryId;
                             selectSshPreparationMode('route');
                             renderSshSessionState();
-                            setSshSessionMessage('Route ready. Connect to log in at each site.');
+                            setSshSessionMessage(t('connection.route_ready'));
                         }
                     });
                 } catch (err) { setSshSessionMessage(err.message, true); }
@@ -8926,7 +8927,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 pendingReconnect = { terminalId, actionId, sourceAttemptId: draft?.attemptId || null,
                     payload: draft?.payload.interactive_login ? draft.payload : getConnectionFormData() };
                 hideActionPrompt();
-                connectBtn.innerText = "Setting up key...";
+                connectBtn.innerText = t('connection.setup_key');
                 connectBtn.disabled = true;
                 socket.emit('setup_localhost_key_access', {
                     action_id: actionId, terminal_id: terminalId
@@ -8979,14 +8980,15 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     case 'ssh_connect_progress':
                         sshLoginFlows.get(state.id)?.handle(data);
                         if (state.id === activeTerminalId) {
-                            const phases = { connect: 'Connecting', forward: 'Opening the next hop',
-                                verify_and_authenticate: 'Verifying host and authenticating', shell: 'Opening terminal' };
-                            setSshSessionMessage(`SSH ${data.hop}/${data.total}: ${data.host}:${data.port} — ${phases[data.phase] || 'Connecting'}`);
+                            const phases = { connect: t('ssh.login.connecting'), forward: t('ssh.login.forwarding'),
+                                verify_and_authenticate: t('connection.verify_authenticate'), shell: t('ssh.login.opening_terminal') };
+                            setSshSessionMessage(t('connection.progress', { hop: data.hop, total: data.total,
+                                host: data.host, port: data.port, phase: phases[data.phase] || t('ssh.login.connecting') }));
                         }
                         break;
                     case 'connection_error':
                         const failedDraft = pendingSshConnectionDrafts.get(state.id);
-                        sshLoginFlows.get(state.id)?.finish(false, data.message || 'Connection failed.', data.route_context);
+                        sshLoginFlows.get(state.id)?.finish(false, data.message || t('connection.failed'), data.route_context);
                         if (data.action_type === 'confirm_ssh_host_key' && failedDraft && data.action_id) {
                             failedDraft.trustActionId = data.action_id;
                         } else if (data.action_type === 'offer_localhost_key_setup' && failedDraft && data.action_id) {
@@ -8998,7 +9000,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                         state.error = true;
                         state.connectedAt = null;
                         if (state.id === activeTerminalId) {
-                            showError(data.message || 'Connection failed.');
+                            showError(data.message || t('connection.failed'));
                             resetConnectButton();
                             if (['offer_localhost_key_setup', 'confirm_ssh_host_key'].includes(data.action_type) && data.action_id) {
                                 showActionPrompt(data.action_message, data.action_question, data.action_type, data.action_id, state.id);
@@ -9076,7 +9078,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                         state.needsReplay = false;
                         if (successfulSshDraft) {
                             recordSuccessfulSshConnection(successfulSshDraft)
-                                .catch(err => setSshSessionMessage(err.message || 'SSH history could not be saved.', true));
+                                .catch(err => setSshSessionMessage(err.message || t('connection.history_failed'), true));
                         }
                         requestOperatorObservationState(state);
                         if (state.id === activeTerminalId) {
diff --git a/tests/connection_i18n_browser_smoke.py b/tests/connection_i18n_browser_smoke.py
new file mode 100644
index 0000000..0fb12a5
--- /dev/null
+++ b/tests/connection_i18n_browser_smoke.py
@@ -0,0 +1,263 @@
+"""Check localized connection controls without opening SSH or UART targets."""
+from pathlib import Path
+import sys
+from unittest.mock import patch
+
+sys.path.insert(0, str(Path(__file__).resolve().parent))
+import agent_browser_smoke as fixture
+import ssh_routes_browser_smoke as routes_fixture
+
+
+def new_module_page(browser, ui_language=None):
+    context = browser.new_context(viewport={'width': 1100, 'height': 900}, locale='en-US')
+    page = context.new_page()
+    page.set_content('<main id="fixture"></main>')
+    for name in ['standterm-messages', 'standterm-i18n', 'standterm-ssh-routes',
+                 'standterm-ssh-login', 'standterm-ssh-node-auth', 'standterm-ssh-host-identity']:
+        page.add_script_tag(path=str(fixture.ROOT / 'static' / 'js' / f'{name}.js'))
+    page.evaluate("""locale => {
+        window.fixtureTranslate = locale === null ? undefined : locale === 'missing' ? key => key
+            : StandTermI18n.create(StandTermMessages, locale).t;
+    }""", ui_language)
+    return context, page
+
+
+def translated(page, key, params=None):
+    value = page.evaluate('({key, params}) => fixtureTranslate(key, params)', {'key': key, 'params': params or {}})
+    assert value != key, f'Missing fixture translation: {key}'
+    return value
+
+
+def test_connection_labels_preserve_schema_values_and_start_payload(browser, url):
+    for locale in ['en', 'zh-TW']:
+        context, page = fixture.new_page(browser, url, ui_language=locale)
+        try:
+            page.click('#new-tab-btn')
+            page.evaluate('() => window.terminalTest.captureSshStartsForTest()')
+            page.evaluate("""() => window.terminalTest.setSshSessionState({version:2,revision:0,history:[],
+                profiles:[{id:'locale-route',name:'<b>Disconnect</b>',startNodeId:'locale-jump'}],
+                nodes:[{id:'locale-jump',endpoint:{host:'jump.test',port:'2221',username:'jump-user'},
+                        authentication:{method:'password'},hostKeyAlias:'',nextNodeId:'locale-target'},
+                       {id:'locale-target',endpoint:{host:'target.test',port:'2223',username:'target-user'},
+                        authentication:{method:'password'},hostKeyAlias:'',nextNodeId:null}]})""")
+            routes_fixture.show_ssh(page)
+            page.evaluate("""() => {
+                const policy = window.terminalTest.getTerminalPolicy();
+                policy.force_connection = null;
+                policy.connection_options.forEach(option => { option.allowed = true; });
+                const ssh = policy.connection_options.find(option => option.connection_type === 'ssh');
+                ssh.start_fields = [
+                    {name:'host',value_type:'string',input_type:'text',default_value:'schema.test'},
+                    {name:'port',value_type:'integer',input_type:'text',default_value:22},
+                    {name:'username',value_type:'string',input_type:'text',default_value:'schema-user'},
+                    {name:'password',value_type:'string',input_type:'password',secret:true}];
+                const shell = policy.connection_options.find(option => option.connection_type === 'local_shell');
+                shell.start_fields = [{name:'local_shell_kind',value_type:'enum',input_type:'select',default_value:'alpha',
+                    options:[{value:'alpha',label:'Alpha Shell'},{value:'beta',label:'Beta Shell'}]}];
+                const uart = policy.connection_options.find(option => option.connection_type === 'uart');
+                uart.available_ports = [{device:'COM3',label:'COM3 (Windows)',backend:'windows'}];
+                uart.start_fields = [{name:'serial_port',value_type:'string',input_type:'text',default_value:''},
+                    {name:'baud_rate',value_type:'integer',input_type:'select',default_value:9600,
+                     options:[{value:9600,label:'9600'},{value:115200,label:'115200'}]}];
+                window.terminalTest.applyTerminalPolicy(policy);
+            }""")
+            expected = {'host': '主機', 'port': '連接埠', 'username': '使用者名稱', 'password': '密碼（選填）'} if locale == 'zh-TW' else {
+                'host': 'Host', 'port': 'Port', 'username': 'Username', 'password': 'Password (optional)'}
+            for field, label in expected.items():
+                assert page.locator(f'#{field}').get_attribute('placeholder') == label
+            assert ('直接連線' if locale == 'zh-TW' else 'Direct connect') in page.inner_text('#ssh-direct-heading')
+            assert ('已儲存路徑' if locale == 'zh-TW' else 'Saved routes') in page.inner_text('#ssh-route-heading')
+            assert page.locator('#ssh-save-session').locator('..').inner_text() == (
+                '儲存連線設定' if locale == 'zh-TW' else 'Save connection profile')
+            for field, value in {'host':'manual.test', 'port':'2222', 'username':'manual-user', 'password':'fixture-password'}.items():
+                page.fill(f'#{field}', value)
+            form = page.evaluate('() => window.terminalTest.getConnectionFormDataForTest()')
+            assert all(form[key] == value for key, value in {
+                'host':'manual.test', 'port':'2222', 'username':'manual-user', 'password':'fixture-password', 'connection_type':'ssh'}.items())
+            prepared = page.evaluate('() => window.terminalTest.prepareSshConnectionForTest()')
+            assert prepared['password'] == 'fixture-password'
+
+            page.click('#ssh-route-heading')
+            page.select_option('#ssh-route-picker', 'locale-route')
+            assert '<b>Disconnect</b>' in page.locator('#ssh-route-picker option:checked').inner_text()
+            assert page.locator('#ssh-route-pane b').count() == 0
+            route = page.evaluate('() => window.terminalTest.prepareSshConnectionForTest()')
+            assert [(node['host'], node['port'], node['username']) for node in route['route']] == [
+                ('jump.test', '2221', 'jump-user'), ('target.test', '2223', 'target-user')]
+            assert 'jump.test' in page.inner_text('#ssh-route-path') and 'target.test' in page.inner_text('#ssh-route-path')
+            page.click('#ssh-direct-heading')
+            restored_form = page.evaluate('() => window.terminalTest.getConnectionFormDataForTest()')
+            assert restored_form == form, 'Switching route changed direct fields: ' + ', '.join(
+                key for key in set(form) | set(restored_form) if form.get(key) != restored_form.get(key))
+            page.evaluate("""() => {
+                window.terminalTest.captureSshStartsForTest();
+                window.terminalTest.clearEmitted();
+                document.getElementById('connectBtn').textContent = 'Disconnect / Cancel connection';
+            }""")
+            page.click('#connectBtn')
+            page.wait_for_function('() => window.terminalTest.getEmitted().some(item => item.event === "start_ssh")')
+            starts = fixture.get_emitted(page, 'start_ssh')
+            assert len(starts) == 1
+            payload = starts[0]['args'][0]
+            assert len(payload['route']) == 1
+            assert payload['attempt_id'] and payload['route'][0]['node_id']
+            assert payload == {
+                **{key:form[key] for key in ['connection_type','terminal_id','host','port','username','host_key_alias']},
+                'attempt_id':payload['attempt_id'],
+                'route':[{**{key:form[key] for key in ['host','port','username','host_key_alias']},
+                          'node_id':payload['route'][0]['node_id']}],
+            }
+            assert 'fixture-password' not in repr(starts), 'Diagnostics exposed a password'
+            schema = page.evaluate("""() => {
+                const set = (id, value, event) => {
+                    const field = document.getElementById(id);
+                    field.value = value; field.dispatchEvent(new Event(event, {bubbles:true}));
+                };
+                set('host','edited-schema.test','input');
+                set('password','schema-password','input');
+                window.terminalTest.setConnectionTypeForTest('uart');
+                const uartOptions = [...document.getElementById('uart-port-select').options].map(item => [item.value,item.text]);
+                set('uart-port-select','__manual__','change');
+                set('uart-port','/dev/fixture-serial','input');
+                set('uart-baud','115200','change');
+                const uart = window.terminalTest.getConnectionFormDataForTest();
+                window.terminalTest.setConnectionTypeForTest('local_shell');
+                const shellOptions = [...document.getElementById('local-shell-kind').options].map(item => [item.value,item.text]);
+                set('local-shell-kind','beta','change');
+                const shell = window.terminalTest.getConnectionFormDataForTest();
+                const policy = window.terminalTest.getTerminalPolicy();
+                for (const option of policy.connection_options) {
+                    for (const field of option.start_fields || []) {
+                        if (field.name === 'host') field.default_value = 'changed-default.test';
+                        if (field.name === 'baud_rate') field.default_value = 9600;
+                        if (field.name === 'local_shell_kind') field.default_value = 'alpha';
+                    }
+                }
+                window.terminalTest.applyTerminalPolicy(policy);
+                const values = Object.fromEntries(['host','password','uart-port','uart-baud','local-shell-kind'].map(id => [id,document.getElementById(id).value]));
+                return {uartOptions,shellOptions,uart,shell,values};
+            }""")
+            assert schema['uartOptions'] == [['COM3','COM3 (Windows)'],
+                ['__manual__','手動輸入序列埠…' if locale == 'zh-TW' else 'Manual port…']]
+            assert schema['shellOptions'] == [['alpha','Alpha Shell'],['beta','Beta Shell']]
+            assert schema['uart'] == {'connection_type':'uart','terminal_id':form['terminal_id'],
+                                      'serial_port':'/dev/fixture-serial','baud_rate':'115200'}
+            assert schema['shell'] == {'connection_type':'local_shell','terminal_id':form['terminal_id'],'local_shell_kind':'beta'}
+            assert schema['values'] == {'host':'edited-schema.test','password':'schema-password','uart-port':'/dev/fixture-serial',
+                                        'uart-baud':'115200','local-shell-kind':'beta'}
+        finally:
+            fixture.close_context(context)
+
+
+def test_node_key_translation_preserves_key_reference_and_endpoint(browser, url):
+    for locale in [None, 'missing', 'zh-TW']:
+        context, page = new_module_page(browser, locale)
+        try:
+            page.evaluate("""() => {
+                window.keyEndpoint = {host:'key.test',port:'2222',username:'builder'};
+                window.keyRecord = {kind:'credential',keyId:'fixture-key',targetKey:StandTermSshRoutes.endpointKey(keyEndpoint),
+                    publicKeyOpenSsh:'ssh-ed25519 AAAA fixture',fingerprint:'SHA256:fixture'};
+                window.copiedPublicKey = null;
+                window.keyControl = StandTermSshNodeAuth({parent:document.getElementById('fixture'),role:'{role}<b>&',
+                    authentication:{method:'password'},endpoint:() => keyEndpoint,profiles:[],savedKeys:[keyRecord],newKeys:new Map(),
+                    keyAllowed:true,resetOnEndpointChange:true,createKey:() => {throw new Error('Unexpected key generation');},
+                    copyPublicKey:value => {copiedPublicKey = value;},onBusy:() => {},onChange:() => {},translate:fixtureTranslate});
+            }""")
+            use_label = '{role}<b>&使用金鑰' if locale == 'zh-TW' else '{role}<b>& Use key'
+            public_label = '{role}<b>&公鑰' if locale == 'zh-TW' else '{role}<b>& Public key'
+            copy_label = translated(page, 'ssh.key.copy_public') if locale == 'zh-TW' else 'Copy public key'
+            page.get_by_role('checkbox', name=use_label, exact=True).check()
+            assert page.get_by_role('textbox', name=public_label, exact=True).input_value() == 'ssh-ed25519 AAAA fixture'
+            assert page.get_by_role('textbox', name=public_label, exact=True).get_attribute('title') == 'SHA256:fixture'
+            assert page.locator('#fixture b').count() == 0, 'Display role was interpreted as markup'
+            expected = page.evaluate('() => ({method:"browser-key",keyRef:{kind:"credential",keyId:keyRecord.keyId,targetKey:keyRecord.targetKey}})')
+            assert page.evaluate('() => keyControl.read()') == expected
+            page.get_by_role('button', name=copy_label, exact=True).click()
+            assert page.evaluate('() => copiedPublicKey') == 'ssh-ed25519 AAAA fixture'
+            page.get_by_role('checkbox', name=use_label, exact=True).uncheck()
+            assert page.evaluate('() => keyControl.read()') == {'method':'password'}
+            page.get_by_role('checkbox', name=use_label, exact=True).check()
+            page.evaluate("() => { keyEndpoint = {...keyEndpoint, host:'other.test'}; keyControl.update(); }")
+            assert page.evaluate('() => keyControl.read()') == {'method':'password'}
+            assert page.get_by_role('textbox', name=public_label, exact=True).input_value() == ''
+            assert page.get_by_role('button', name=copy_label, exact=True).is_disabled()
+        finally:
+            fixture.close_context(context)
+
+
+def test_host_identity_translation_preserves_confirmation_binding(browser, url):
+    for locale in [None, 'missing', 'zh-TW']:
+        context, page = new_module_page(browser, locale)
+        try:
+            page.evaluate("""() => {
+                window.identityTarget = {host:'identity.test',port:'2222',username:'builder',host_key_alias:'fixture-alias'};
+                window.identityRequests = []; window.identityPending = [];
+                window.identityControl = StandTermSshHostIdentity({parent:document.getElementById('fixture'),
+                    editorId:'fixture-editor',nodeId:'fixture-node',read:() => identityTarget,translate:fixtureTranslate,
+                    request:payload => new Promise(resolve => {identityRequests.push(payload);identityPending.push(resolve);})});
+            }""")
+            check_label = translated(page, 'ssh.host_identity.check') if locale == 'zh-TW' else 'Check saved fingerprint'
+            keep_label = translated(page, 'ssh.host_identity.keep') if locale == 'zh-TW' else 'Keep fingerprint'
+            page.get_by_role('button', name=check_label, exact=True).click()
+            request = page.evaluate('() => identityRequests[0]')
+            assert {key:request[key] for key in ['operation','editor_id','node_id','host','port','host_key_alias']} == {
+                'operation':'inspect','editor_id':'fixture-editor','node_id':'fixture-node',
+                'host':'identity.test','port':'2222','host_key_alias':'fixture-alias'}
+            page.evaluate("""() => identityPending.shift()({...identityRequests.at(-1),status:'confirm',action_id:'observed-fingerprint',
+                message:'SHA256:fixture <b>Cancel connection</b>',question:'Keep this exact fingerprint?'})""")
+            page.wait_for_function('text => document.activeElement?.textContent === text', arg=keep_label)
+            assert page.locator('.ssh-host-identity-status').inner_text() == 'SHA256:fixture <b>Cancel connection</b>'
+            assert page.locator('.ssh-host-identity-status b').count() == 0
+            page.get_by_role('button', name=keep_label, exact=True).click()
+            cancellation = page.evaluate('() => identityRequests.at(-1)')
+            assert cancellation == {**request, 'request_id':cancellation['request_id'], 'operation':'cancel', 'action_id':'observed-fingerprint'}
+            assert cancellation['request_id'] != request['request_id']
+            page.evaluate("""() => {
+                identityTarget = {...identityTarget,host:'edited.test'};
+                identityControl.invalidate();
+                identityPending.shift()({...identityRequests.at(-1),status:'confirm',action_id:'stale-fingerprint',
+                    message:'STALE RESPONSE',question:'Forget it?'});
+            }""")
+            assert page.locator('.ssh-host-identity-confirm button').count() == 0
+            assert 'STALE RESPONSE' not in page.inner_text('#fixture')
+            assert page.evaluate('() => identityRequests.length') == 2
+            page.get_by_role('button', name=check_label, exact=True).click()
+            inspected = page.evaluate('() => identityRequests.at(-1)')
+            assert inspected['host'] == 'edited.test'
+            page.evaluate("""() => identityPending.shift()({...identityRequests.at(-1),status:'confirm',action_id:'current-fingerprint',
+                message:'SHA256:current',question:'Forget this fingerprint?'})""")
+            page.wait_for_function('text => document.activeElement?.textContent === text', arg=keep_label)
+            forget_label = translated(page, 'ssh.host_identity.forget_now') if locale == 'zh-TW' else 'Forget now'
+            page.get_by_role('button', name=forget_label, exact=True).click()
+            confirmed = page.evaluate('() => identityRequests.at(-1)')
+            assert confirmed == {**inspected, 'request_id':confirmed['request_id'], 'operation':'confirm', 'action_id':'current-fingerprint'}
+            assert confirmed['request_id'] != inspected['request_id']
+        finally:
+            fixture.close_context(context)
+
+
+def main():
+    original_popen = fixture.subprocess.Popen
+    def launch(args, **kwargs):
+        if len(args) > 1 and args[1] == 'app.py':
+            args = ['--default-connection' if value == '--force-connection' else value for value in args]
+        return original_popen(args, **kwargs)
+    with patch.object(fixture.subprocess, 'Popen', side_effect=launch):
+        proc, url = fixture.start_server()
+    try:
+        with fixture.load_playwright()[0]() as playwright:
+            browser = playwright.chromium.launch(headless=True)
+            try:
+                for test in [test_connection_labels_preserve_schema_values_and_start_payload,
+                             test_node_key_translation_preserves_key_reference_and_endpoint,
+                             test_host_identity_translation_preserves_confirmation_binding]:
+                    test(browser, url)
+                    print(test.__name__ + ': ok', flush=True)
+            finally:
+                browser.close()
+    finally:
+        fixture.stop_server(proc)
+
+
+if __name__ == '__main__':
+    main()
diff --git a/tests/ssh_login_browser_smoke.py b/tests/ssh_login_browser_smoke.py
index 42bb552..06bd37c 100644
--- a/tests/ssh_login_browser_smoke.py
+++ b/tests/ssh_login_browser_smoke.py
@@ -8,6 +8,7 @@
 sys.path.insert(0, str(Path(__file__).resolve().parent))
 import ssh_routes_browser_smoke as routes_fixture
 from ssh_login_smoke import password_server
+from connection_i18n_browser_smoke import new_module_page, translated
 
 fixture = routes_fixture.fixture
 
@@ -64,8 +65,8 @@ def test_real_login_cards_preserve_completed_hops(browser, url):
             fixture.close_context(context)
 
 
-def test_background_and_stale_prompts_cannot_steal_focus(browser, url):
-    context, page = fixture.new_page(browser, url)
+def test_background_and_stale_prompts_cannot_steal_focus(browser, url, ui_language='en'):
+    context, page = fixture.new_page(browser, url, ui_language=ui_language)
     try:
         routes_fixture.show_ssh(page)
         page.fill('#host', 'example.test')
@@ -88,7 +89,7 @@ def test_background_and_stale_prompts_cannot_steal_focus(browser, url):
         page.evaluate('data => window.terminalTest.handleSshOutput(data)', {**prompt, 'attempt_id':'older-attempt', 'request_id':'older'})
         page.evaluate('data => window.terminalTest.handleSshOutput(data)', {'message_type':'connection_error', 'terminal_id':'main', 'message':'uncorrelated'})
         assert page.locator('#ssh-login-panel input').input_value() == 'private-draft'
-        page.locator('.ssh-login-actions').get_by_role('button', name='Cancel connection', exact=True).click()
+        page.locator('.ssh-login-actions').get_by_role('button', name='取消連線' if ui_language == 'zh-TW' else 'Cancel connection', exact=True).click()
         assert not page.locator('#ssh-login-panel').is_visible()
         page.click('#connectBtn')
         page.wait_for_selector('.ssh-login-card')
@@ -98,6 +99,95 @@ def test_background_and_stale_prompts_cannot_steal_focus(browser, url):
         fixture.close_context(context)
 
 
+def test_localized_background_and_stale_prompts(browser, url):
+    test_background_and_stale_prompts_cannot_steal_focus(browser, url, ui_language='zh-TW')
+
+
+def test_login_translation_preserves_prompt_binding_and_safe_focus(browser, url):
+    for locale in [None, 'missing', 'zh-TW']:
+        context, page = new_module_page(browser, locale)
+        try:
+            phases = {
+                'waiting': ('waiting', 'Waiting'), 'connect': ('connecting', 'Connecting'),
+                'forward': ('forwarding', 'Opening next hop'),
+                'verify_and_authenticate': ('verifying', 'Verifying host'),
+                'local_keys': ('local_keys', 'Trying local keys'), 'host_key': ('host_key', 'Confirm host key'),
+                'password': ('password_required', 'Requires password'), 'authenticate': ('authenticating', 'Authenticating'),
+                'authenticated': ('authenticated', 'Authenticated'), 'shell': ('opening_terminal', 'Opening terminal'),
+                'complete': ('complete', 'Complete'), 'failed': ('failed', 'Failed'),
+            }
+            observed = page.evaluate("""phases => phases.map(phase => {
+                const flow = StandTermSshLogin({terminalId:'phase-terminal',attemptId:'phase-attempt',
+                    route:[{node_id:'first-node',host:'jump.test',port:'22',username:'user'},
+                           {node_id:'target-node',host:'target.test',port:'22',username:'user'}],
+                    send:() => {throw new Error('Progress sent a login reply');},cancel:() => {},back:() => {},
+                    isActive:() => true,translate:fixtureTranslate});
+                const accepted = flow.handle({terminal_id:'phase-terminal',attempt_id:'phase-attempt',node_id:'first-node',
+                    hop:1,total:2,message_type:'ssh_login_progress',phase,message:'Authenticated'});
+                const card = flow.element.querySelector('.ssh-login-card');
+                const result = {accepted,phase:card.dataset.phase,label:card.querySelector('.ssh-login-card-status').textContent};
+                flow.destroy();
+                return result;
+            })""", [*phases, 'Authenticated', '已驗證', '__proto__', 'unknown'])
+            for (phase, (key, english)), result in zip(phases.items(), observed):
+                label = translated(page, 'ssh.login.' + key) if locale == 'zh-TW' else english
+                assert result == {'accepted':True, 'phase':phase, 'label':label}
+            assert all(not result['accepted'] and result['phase'] == 'waiting' for result in observed[len(phases):]), (
+                'Display labels or unknown phases were accepted as protocol control')
+            page.evaluate("""() => {
+                window.loginReplies = []; window.loginCancelled = 0;
+                window.loginFlow = StandTermSshLogin({terminalId:'fixture-terminal',attemptId:'fixture-attempt',
+                    route:[{node_id:'first-node',host:'jump.test',port:'2222',username:'jump-user'},
+                           {node_id:'target-node',host:'target.test',port:'2223',username:'target-user'}],
+                    send:payload => loginReplies.push(payload),cancel:() => {loginCancelled++;},back:() => {},
+                    isActive:() => true,translate:fixtureTranslate});
+                document.getElementById('fixture').append(loginFlow.element);
+            }""")
+            prompt = {'message_type':'ssh_login_prompt', 'terminal_id':'fixture-terminal', 'attempt_id':'fixture-attempt',
+                      'node_id':'first-node', 'hop':1, 'total':2, 'request_id':'host-key-request',
+                      'kind':'host_key', 'phase':'host_key', 'message':'SHA256:fixture <b>Authenticated</b>',
+                      'question':'Password text does not change this host-key request.'}
+            assert page.evaluate('data => loginFlow.handle(data)', prompt)
+            cancel_label = translated(page, 'ssh.login.cancel') if locale == 'zh-TW' else 'Cancel connection'
+            trust_label = translated(page, 'ssh.login.trust') if locale == 'zh-TW' else 'Trust and continue'
+            page.wait_for_function('text => document.activeElement?.textContent === text', arg=cancel_label)
+            body = page.locator('.ssh-login-card[data-node-id="first-node"] .ssh-login-card-body')
+            assert body.locator('b').count() == 0
+            assert 'SHA256:fixture <b>Authenticated</b>' in body.inner_text()
+            body.get_by_role('button', name=trust_label, exact=True).click()
+            binding = {key:prompt[key] for key in ['terminal_id','attempt_id','node_id','request_id','kind']}
+            assert page.evaluate('() => loginReplies') == [{**binding, 'accept':True}]
+            assert not page.evaluate('data => loginFlow.handle(data)', prompt), 'Duplicate request reopened a host-key prompt'
+
+            password_prompt = {**prompt, 'request_id':'password-request', 'kind':'password', 'phase':'password',
+                               'message':'message_type=connection_error <b>Trust and continue</b>'}
+            assert page.evaluate('data => loginFlow.handle(data)', password_prompt)
+            password = body.locator('input[type="password"]')
+            page.wait_for_function('() => document.activeElement?.type === "password"')
+            role = translated(page, 'ssh.login.node', {'number':1}) if locale == 'zh-TW' else 'Node 1'
+            accessible_name = translated(page, 'ssh.login.password_for_node', {'role':role}) if locale == 'zh-TW' else 'Node 1 password'
+            assert password.get_attribute('aria-label') == accessible_name
+            password.fill('fixture-password-value')
+            assert not page.evaluate('data => loginFlow.handle(data)', {**password_prompt, 'attempt_id':'stale-attempt', 'request_id':'stale-request'})
+            assert password.input_value() == 'fixture-password-value'
+            login_label = translated(page, 'ssh.login.submit') if locale == 'zh-TW' else 'Log in'
+            body.get_by_role('button', name=login_label, exact=True).click()
+            binding = {key:password_prompt[key] for key in ['terminal_id','attempt_id','node_id','request_id','kind']}
+            assert page.evaluate('() => loginReplies.at(-1)') == {**binding, 'password':'fixture-password-value'}
+            assert page.evaluate('() => loginReplies.length') == 2
+            assert body.locator('input').count() == 0
+            assert page.locator('.ssh-login-card').first.get_attribute('data-phase') == 'authenticate'
+            page.evaluate('data => loginFlow.handle(data)', {**password_prompt, 'message_type':'ssh_login_progress', 'phase':'authenticated'})
+            assert page.locator('.ssh-login-card-status').first.inner_text() == ('已驗證' if locale == 'zh-TW' else 'Authenticated')
+            assert page.locator('.ssh-login-card').first.get_attribute('data-phase') == 'authenticated'
+            page.evaluate("() => loginFlow.finish(true, 'Raw server completion', {})")
+            assert page.locator('.ssh-login-card-status').all_inner_texts() == [('已完成' if locale == 'zh-TW' else 'Complete')] * 2
+            assert page.locator('.ssh-login-card').evaluate_all('cards => cards.every(card => card.dataset.phase === "complete")')
+            assert page.locator('.ssh-login-message').inner_text() == 'Raw server completion'
+        finally:
+            fixture.close_context(context)
+
+
 def test_local_key_setup_retries_keep_cards_and_original_attempt_binding(browser, url):
     context, page = fixture.new_page(browser, url)
     try:
@@ -163,6 +253,8 @@ def launch(args, **kwargs):
                 browser = playwright.chromium.launch(headless=True)
                 try:
                     for test in (test_real_login_cards_preserve_completed_hops, test_background_and_stale_prompts_cannot_steal_focus,
+                                 test_localized_background_and_stale_prompts,
+                                 test_login_translation_preserves_prompt_binding_and_safe_focus,
                                  test_local_key_setup_retries_keep_cards_and_original_attempt_binding):
                         test(browser, url)
                         print(test.__name__ + ': ok', flush=True)

From ee9e85578b772c2e14ca09e0e63b511c1fca989a Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sun, 20 Sep 2026 01:05:31 +0800
Subject: [PATCH 19/43] Localize SSH route and profile editors

---
 README.md                                  |  11 +-
 docs/agent_ui_review_plan.md               |  50 +++-
 docs/ui_copy_review.tsv                    | 101 ++++++-
 static/js/standterm-messages.js            | 206 +++++++++++++-
 static/js/standterm-ssh-route-editor.js    | 149 ++++++----
 templates/index.html                       | 116 ++++----
 tests/agent_browser_smoke.py               |   2 +-
 tests/ssh_editor_i18n_browser_smoke.py     | 313 +++++++++++++++++++++
 tests/ssh_profile_context_browser_smoke.py |   2 +-
 9 files changed, 818 insertions(+), 132 deletions(-)
 create mode 100644 tests/ssh_editor_i18n_browser_smoke.py

diff --git a/README.md b/README.md
index 6f4221b..1cbd9d9 100644
--- a/README.md
+++ b/README.md
@@ -326,7 +326,8 @@ terminal; compact windows keep those actions in the Agent panel.
 **Settings > General > Language (preview)** selects English or Traditional
 Chinese (Taiwan) for browser access and recovery, Agent permissions, input and
 file-copy approvals, transfer results, local connection information, connection
-forms and SSH login (including direct browser-key and host-fingerprint controls). The choice
+forms, SSH login, and SSH profile/route editors (including browser-key and
+host-fingerprint controls). The choice
 applies the next time the page opens; saving it does not reload the current
 page or change its connections and grants. Other areas remain in English.
 The [copy and translation table](docs/ui_copy_review.tsv) and
@@ -352,10 +353,10 @@ Useful launcher options:
 STANDTERM_HOST=127.0.0.1 STANDTERM_PORT=5000 ./run.sh
 ```
 
-## Browser-managed SSH Sessions And Keys
+## Browser-managed SSH Profiles And Keys
 
 Quick Connect can load saved SSH profiles and the six most recent successful
-SSH targets. Use **Settings > SSH Sessions** to create, update, reorder, or
+SSH targets. Use **Settings > SSH profiles** to create, update, reorder, or
 delete profiles and to clear history. Direct entries expose their single node
 in the first level: host, port, username, **Use key**, public key copy and host
 identity. **Save** stores the name, node and referenced key together. **Add jump
@@ -366,11 +367,11 @@ remain unchanged by default.
 Multi-node entries show names, ordering and full route summaries in the first
 level. **Save name** only renames the selected entry. **Edit connection…** opens
 all nodes in a separate editor; **Save route** stores all node and referenced
-key changes for the next connection. **New session** starts an inline draft from
+key changes for the next connection. **New profile** starts an inline draft from
 the current SSH tab's target, or Quick Connect when no SSH tab is connected.
 Switching tabs or connections clears the previous edit selection.
 Profiles and history stay in the current
-browser and never store passwords. In Direct connect, **Save session** saves the
+browser and never store passwords. In Direct connect, **Save connection profile** saves the
 profile and its referenced browser key when **Connect** is pressed, before SSH
 starts. A failed connection does not undo that explicit save. History records
 only successful connections and does not implicitly save a profile or private key.
diff --git a/docs/agent_ui_review_plan.md b/docs/agent_ui_review_plan.md
index 966fdbd..29ccab9 100644
--- a/docs/agent_ui_review_plan.md
+++ b/docs/agent_ui_review_plan.md
@@ -43,7 +43,7 @@ do not consolidate them merely to shorten labels.
 | 3 | Review English UI copy and terminology | Core terms agreed; initial English sources reviewed | Review each proposed change for target, permissions, consequences, and next action; check related tooltips, Desktop help, and tests before applying it. |
 | 4 | Finalize the translation exchange table | Initial exchange validated with an independent translator | Stable keys, approved English source, context, and placeholder constraints are sufficient for an independent translator. |
 | 5 | Pilot Agent access and local connection information | Implemented; validation below | Cover static and dynamic text, titles, and accessible names; preserve connected sessions and authorization; support English fallback. |
-| 6 | Translate and integrate approved rows | Agent pilot, browser access/recovery, Agent approvals/transfers and connection/login controls integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
+| 6 | Translate and integrate approved rows | Agent pilot, browser access/recovery, Agent approvals/transfers, connection/login controls and SSH route/profile editors integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
 | 7 | Expand Core and Desktop coverage | Deferred | Verify secondary windows, native menus, setup, diagnostics, packaging, and representative layouts. |
 
 ## Validation of the reliability changes
@@ -66,7 +66,7 @@ validated separately below.
 
 ## Deferred UI work
 
-Full SSH route/profile editors, Agent diagnostics, SSH tunnel setup, secondary windows,
+Agent diagnostics, SSH tunnel setup, secondary windows,
 and Desktop localization remain outside the completed workflows. Translation
 starts only after the English source for the selected workflow is reviewed.
 Extra screen diffing, render hints, key aliases, and byte-limit options remain optional optimizations.
@@ -275,3 +275,49 @@ Validation ran in WSL Chromium. Native Desktop, physical UART and complete
 route/profile editor localization were not qualified by this phase. The next
 candidate is a separate review of those editors' naming, saving and key-retention
 copy before expanding their translation coverage.
+
+## SSH route and profile editors
+
+The route editor and Settings SSH profiles now share the reviewed catalog,
+including inline node fields, browser-key controls, host identity, edit scope,
+repair suggestions, deletion confirmations and save feedback. The table contains
+373 rows: 372 referenced bilingual messages and the existing decorative removal.
+`SSH Sessions` and `New session` now read `SSH profiles` and `New profile` so saved
+connection settings are not confused with running terminals.
+
+Prepare-mode **Done** returns an edited draft. Its **Save route on Connect**
+checkbox requests persistence at Connect. Manage-mode **Save route** persists
+immediately and changes only future connections. Existing repair/reorder guidance
+incorrectly named Done in both modes; the copy now uses the actual mode's action.
+The advanced reference/copy controls explain that they replace the selected
+node's following route, and copied nodes retain their credential references.
+
+| Finding | Severity | Evidence | Critic remedy | Main response | Resolution | Validation |
+| --- | --- | --- | --- | --- | --- | --- |
+| Management repair guidance names a nonexistent Done button | Medium | Route editor mode-specific action and three hardcoded instructions | Resolve the action label from typed mode | Accept | Keep Save route and Done, inserting the correct label in repair/reorder/append guidance | Route regression and bilingual editor checks |
+| Shared edits, route order and tail replacement have different scope | Medium guard | replaceDraftNode, moveCard and copyPath | State tail replacement and retained key references separately | Accept | Add adjacent reference/copy help; preserve shared-edit notice and entry-only reorder semantics | Shared-node, copy/reference and stored-node regressions |
+| Cancel must not imply discarding an existing parent draft or its keys | Medium guard | Editor clones incoming draft and closes without saving | Keep Cancel scoped to this dialog | Accept | Preserve simple Cancel label and parent draft behavior | Preparation and inline-to-route cancellation tests |
+| Deleting a profile does not always delete its keys | Medium guard | Owner-key branch versus independent credential records | Keep separate confirmation messages and test actual key outcomes | Modify | Preserve both confirmations; reuse existing legacy-key deletion test and add credential-retention coverage | Legacy-key lifecycle and bilingual deletion checks |
+| Referenced legacy owner deletion lacks an explicit blocked-deletion regression in the reviewed files | Low, existing gap | requireUnreferencedSshKey and targeted test inventory | Add owner/receiver/history fixture | Defer | Runtime reference guard remains unchanged; add coverage when changing legacy key deletion or rebinding | Source review only for this branch |
+
+Two bounded independent review passes found no remaining material regression.
+The reviewer independently checked placeholders and missing-translation fallback.
+Raw role markers, entry/node IDs, scope values, references, endpoints, credentials,
+unknown model/backend errors and persistence decisions remain unchanged. Existing
+model/storage diagnostics may remain English; this phase does not infer error
+codes from diagnostic text. Settings outside SSH profiles, Desktop, tunnels and
+secondary windows remain outside the completed localization scope.
+
+| Check | Result |
+| --- | --- |
+| Route editor browser suite | Seven cases passed, including shared references, copy/reorder, cycle repair, migration and trust retry binding. |
+| Profile context browser suite | Six cases passed, including changed terminal context, atomic save failure, inline promotion and stale storage revisions. |
+| Preparation browser suite | Nine cases passed, including parent drafts, temporary keys, cancellation and background history. |
+| Existing profile/key regressions | Two cases passed, including settings save semantics and actual legacy private-key deletion. |
+| Bilingual editor suite | Four cases passed in both languages: prepare/cancel persistence boundaries, managed stale-save rejection, entry/all with copy/reference, exact delete/clear scope and independent credential retention. Cycle repair in both modes uses the actual completion label and does not call onDone before final confirmation. |
+| Layout | English/Traditional Chinese action labels and consequence text fit at 1280 and 480 pixel widths. |
+| Catalog | Six exporter and six lookup tests passed; all 372 exported keys are referenced and the generated catalog is current. |
+
+Validation uses WSL Chromium. Native Desktop and physical UART were not part of
+this phase. The next candidate is a separate copy review of settings import/export
+and its replacement/key-retention consequences before expanding that workflow.
diff --git a/docs/ui_copy_review.tsv b/docs/ui_copy_review.tsv
index cb4004d..a6e6a92 100644
--- a/docs/ui_copy_review.tsv
+++ b/docs/ui_copy_review.tsv
@@ -19,7 +19,7 @@ agent.copy.keep_both	The displayed destination is the exact keep-both name selec
 agent.transfer.stop	Stop	Stop	停止	Request cancellation before commit.		Keep existing cancellation barrier and disabled state; clicking alone is not confirmation of cancellation.	translation-reviewed	templates/index.html:9270
 agent.transfer.committing	The destination is being published and cannot be stopped	Finishing the copy; it can no longer be stopped.	正在完成複製，已無法停止。	Disabled Stop tooltip during committing.		Not a success or failure result. Do not enable Stop after the commit barrier.	translation-reviewed	templates/index.html:9272
 settings.language.label	Language (Agent preview)	Language (preview)	語言（預覽）	Local display preference for the implemented browser, Agent and connection workflows.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
-settings.language.hint	Applies to Agent access and connection info next time you open this page. Other areas remain in English.	Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms and SSH login. Other areas remain in English.	下次開啟此頁面時套用於瀏覽器與 Agent 存取、核准、傳輸、連線表單及 SSH 登入，其他區域仍顯示英文。	Language change never reloads an active terminal.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+settings.language.hint	Applies to Agent access and connection info next time you open this page. Other areas remain in English.	Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms, SSH login and profile/route editors. Other areas remain in English.	下次開啟此頁面時套用於瀏覽器與 Agent 存取、核准、傳輸、連線表單、SSH 登入及連線設定／路徑編輯器，其他區域仍顯示英文。	Language change never reloads an active terminal.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 settings.agent.legend	Agent access	Agent access	Agent 存取	Settings fieldset title.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 settings.agent.permission	Default Agent permission	Default Agent permission	Agent 預設權限	Saved permission used by the Authorize agent button; saving alone does not grant access.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 settings.agent.hint	Authorize agent applies this permission to the current tab and creates a standard token.	Authorize agent applies this permission to the current tab and creates a standard token.	「授權 Agent」會將此權限套用至目前分頁，並建立標準權杖。	Explain the primary button without implying that saving a setting authorizes a tab.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
@@ -273,3 +273,102 @@ ssh.host_identity.keep	Keep fingerprint	Keep fingerprint	保留指紋	Cancel the
 connection.trust_key	Trust key	Trust key	信任金鑰	Existing typed SSH action prompt button.		Display only. Preserve action binding, payload and default cancel focus.	translation-reviewed	templates/index.html
 connection.forget_key	Forget key	Forget key	忘記金鑰	Existing typed SSH action prompt button.		Display only. Preserve action binding, payload and default cancel focus.	translation-reviewed	templates/index.html
 common.cancel	Cancel	Cancel	取消	Existing typed SSH action prompt button.		Display only. Preserve action binding, payload and default cancel focus.	translation-reviewed	templates/index.html
+ssh.profiles.title	SSH Sessions	SSH profiles	SSH 連線設定	SSH profile management control.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.stored	Profiles are stored only in this browser.	Profiles are stored only in this browser.	連線設定只儲存在此瀏覽器。	SSH profile management control.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.move_up	Move Up	Move Up	上移	SSH profile management control.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.move_down	Move Down	Move Down	下移	SSH profile management control.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.move_up_label	Move profile up	Move profile up	上移連線設定	Accessible profile list ordering action.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.move_down_label	Move profile down	Move profile down	下移連線設定	Accessible profile list ordering action.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.name	Profile name	Profile name	連線設定名稱	Name of saved reusable settings.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.edit	Edit connection…	Edit connection…	編輯連線…	SSH profile management control.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.create	New session	New profile	新增連線設定	SSH profile management control.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.save_name	Save name	Save name	儲存名稱	SSH profile management control.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.delete	Delete	Delete	刪除	Starts confirmation for deleting the selected profile.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.history	History	History	連線紀錄	Recent successful SSH connections.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.clear_history	Clear History	Clear History	清除連線紀錄	SSH profile management control.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.from_tab	New direct session from the current SSH tab. Select a profile to edit an existing entry.	New direct profile from the current SSH tab. Select a saved profile to edit it.	以目前 SSH 分頁建立直接連線設定；選取已儲存的設定即可編輯。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.from_form	New session from Quick Connect. Select a profile to edit an existing entry.	New profile from the connection form. Select a saved profile to edit it.	以連線表單建立設定；選取已儲存的設定即可編輯。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.changed_elsewhere	SSH settings changed in another window. Reload before editing.	SSH settings changed in another window. Reload before editing.	SSH 設定已在其他視窗變更。請重新載入後再編輯。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.removed_edit	This SSH entry was removed. Reload before editing.	This SSH entry was removed. Reload before editing.	此 SSH 連線設定已移除。請重新載入後再編輯。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.wait	Wait for the SSH settings to finish loading or saving.	Wait for the SSH settings to finish loading or saving.	請等候 SSH 設定載入或儲存完成。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.empty	No saved SSH profiles.	No saved SSH profiles.	沒有已儲存的 SSH 連線設定。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.select_or_create	Select a saved entry, or create a new session.	Select a saved profile, or create a new one.	選取已儲存的連線設定，或新增設定。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.add_jump	Add jump node…	Add jump node…	新增中繼站…	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.save	Save	Save	儲存	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.save_help	Save stores the name, connection settings and selected key. Changes apply to the next connection.	Save stores the name, connection settings and selected key. Changes apply to the next connection.	「儲存」會保存名稱、連線設定與所選金鑰，變更於下次連線生效。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.rename_help	Save name only renames this entry. Edit connection opens all route nodes and their key settings.	Save name only renames this entry. Edit connection opens all route nodes and their key settings.	「儲存名稱」只更改名稱。「編輯連線」可編輯整條路徑的節點與金鑰設定。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.storage_unavailable	SSH Sessions storage is unavailable.	SSH profile storage is unavailable.	無法使用 SSH 連線設定儲存空間。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.choose_key	Choose or create a browser key for this node.	Choose or create a browser key for this node.	請為此節點選擇或建立瀏覽器金鑰。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.removed_save	This SSH entry was removed. Reload before saving.	This SSH entry was removed. Reload before saving.	此 SSH 連線設定已移除。請重新載入後再儲存。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.confirm_clear	Clear all SSH connection history?	Clear all SSH connection history?	清除所有 SSH 連線紀錄？	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.history_cleared	SSH history cleared.	SSH history cleared.	已清除 SSH 連線紀錄。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.order_updated	Profile order updated.	Profile order updated.	已更新連線設定順序。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.connection_changed	The connection changed. Cancel and reopen the route editor.	The connection changed. Cancel and reopen the route editor.	連線已變更。請取消並重新開啟路徑編輯器。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.new_hint	New direct session. Save creates a new entry.	New direct profile. Save creates a new entry.	新的直接連線設定。按下「儲存」即可建立。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.edit_failed	Profile could not be edited.	Profile could not be edited.	無法編輯連線設定。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.save_failed	Profile could not be saved.	Profile could not be saved.	無法儲存連線設定。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.delete_failed	Profile could not be deleted.	Profile could not be deleted.	無法刪除連線設定。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.move_failed	Profile could not be moved.	Profile could not be moved.	無法移動連線設定。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.clear_failed	SSH history could not be cleared.	SSH history could not be cleared.	無法清除 SSH 連線紀錄。	SSH profile editor status or validation; raw error messages remain unchanged.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.selected	Selected {name}.	Selected {name}.	已選取 {name}。	Profile display/confirmation with literal raw names or count placeholders.	{name}	Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.saved_next	Saved {name}. Changes apply to the next connection.	Saved {name}. Changes apply to the next connection.	已儲存 {name}，變更於下次連線生效。	Profile display/confirmation with literal raw names or count placeholders.	{name}	Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.new_direct	New direct profile: {username}@{host}:{port}	New direct profile: {username}@{host}:{port}	新的直接連線設定：{username}@{host}:{port}	Profile display/confirmation with literal raw names or count placeholders.	{username}, {host}, {port}	Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.history_count	{count} / {limit} recent successful connections	{count} / {limit} recent successful connections	最近成功連線：{count} / {limit} 筆	Profile display/confirmation with literal raw names or count placeholders.	{count}, {limit}	Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.name_max	Profile name must be {limit} characters or fewer.	Profile name must be {limit} characters or fewer.	連線設定名稱不得超過 {limit} 個字元。	Profile display/confirmation with literal raw names or count placeholders.	{limit}	Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.name_length	Profile name must be 1–{limit} characters.	Profile name must be 1–{limit} characters.	連線設定名稱須為 1 至 {limit} 個字元。	Profile display/confirmation with literal raw names or count placeholders.	{limit}	Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.saved	Saved {name}.	Saved {name}.	已儲存 {name}。	Profile display/confirmation with literal raw names or count placeholders.	{name}	Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.confirm_delete_key	Delete SSH profile {name} and its non-recoverable browser private key?	Delete SSH profile {name} and its non-recoverable browser private key?	刪除 SSH 連線設定 {name} 及其無法復原的瀏覽器私鑰？	Profile display/confirmation with literal raw names or count placeholders.	{name}	Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.confirm_delete	Delete SSH profile {name}?	Delete SSH profile {name}?	刪除 SSH 連線設定 {name}？	Profile display/confirmation with literal raw names or count placeholders.	{name}	Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.deleted	Deleted {name}.	Deleted {name}.	已刪除 {name}。	Profile display/confirmation with literal raw names or count placeholders.	{name}	Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.key_dependents	Browser key is used by: {entries}. Change those routes before removing or rebinding the key.	Browser key is used by: {entries}. Change those routes before removing or rebinding the key.	以下連線設定正在使用此瀏覽器金鑰：{entries}。請先修改這些路徑，再移除或重新綁定金鑰。	Profile display/confirmation with literal raw names or count placeholders.	{entries}	Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.profiles.route_repair	Route needs repair	Route needs repair	路徑需要修復	Typed resolve error display; never infer errors from message text.		Display only. Preserve entry/node IDs, credentials, persistence timing, edit scope, confirmation and stale-context checks.	translation-reviewed	templates/index.html
+ssh.editor.field_for_node	{role} {label}	{role} {label}	{role} {label}	Accessible input label with displayed node role and field label.	{role} {label}	Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw. Preserve placeholder names and multiplicity; interpolate once as plain text.	translation-reviewed	static/js/standterm-ssh-route-editor.js:21
+ssh.editor.save_route	Save route	Save route	儲存路徑	Managed-mode save button and prepare-mode save checkbox accessible name; timing is described by adjacent help.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:73
+ssh.editor.done	Done	Done	完成	Prepare-mode button validates and returns the connection draft without itself saving it.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:73
+ssh.editor.title	SSH route	SSH route	SSH 路徑	Route editor title.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:87
+ssh.editor.entry_name	Entry name	Entry name	連線設定名稱	Entry name placeholder and accessible input label.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:90
+ssh.editor.scope	Edit scope	Edit scope	編輯範圍	Accessible name of the entry/all scope selector.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:94
+ssh.editor.scope_entry	Only this Entry	Only this Entry	僅此連線設定	Display label for the unchanged entry scope value.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:95
+ssh.editor.scope_all	Apply node edits to all references	Apply node edits to all references	將節點修改套用至所有引用設定	Display label for the unchanged all scope value; reordering/removal still has entry-only scope.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:96
+ssh.editor.save_failed	SSH route could not be saved.	SSH route could not be saved.	無法儲存 SSH 路徑。	Fallback only when a failed editor action has no error message.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:118
+ssh.editor.core_host	Core host	Core host	Core 主機	Route preview origin; browser device is not the SSH origin.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:122
+ssh.editor.review_before_reorder	Select Done to review the invalid link before changing card order.	Select {action} to review the invalid link before changing card order.	變更卡片順序前，請選擇「{action}」以檢查無效連結。	Invalid-link reorder guard; action is the actual Done or Save route button label for the typed mode.	{action}	Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw. Preserve placeholder names and multiplicity; interpolate once as plain text.	translation-reviewed	static/js/standterm-ssh-route-editor.js:165
+ssh.editor.cycle_rejected	{path} → {host}: cycle rejected. Choose an explicit target or cancel.	{path} → {host}: cycle rejected. Choose an explicit target or cancel.	{path} → {host}：無法使用含迴圈的路徑。請明確選擇目標主機或取消。	Cycle rejection notice before explicit repair selection; preserve path and repeated host exactly.	{path} {host}	Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw. Preserve placeholder names and multiplicity; interpolate once as plain text.	translation-reviewed	static/js/standterm-ssh-route-editor.js:214
+ssh.editor.remove_loop	Remove loop	Remove loop	移除迴圈	Label for the existing erase-loop repair candidate rule.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:219
+ssh.editor.stop_before_back_edge	Stop before back edge	Stop before back edge	在回連前停止	Label for the existing repair alternative that stops before the back edge.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:219
+ssh.editor.repair_candidate	{rule}: {path}; target {target}	{rule}: {path}; target {target}	{rule}：{path}；目標主機 {target}	Repair candidate button; show exact candidate route and final user@host:port.	{rule} {path} {target}	Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw. Preserve placeholder names and multiplicity; interpolate once as plain text.	translation-reviewed	static/js/standterm-ssh-route-editor.js:220
+ssh.editor.repair_selected	Repair selected. Review the target, then select Done.	Repair selected. Review the target, then select {action}.	已選擇修復方式。請檢查目標主機，再選擇「{action}」。	Repair updates the draft; the mode-specific completion action remains required.	{action}	Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw. Preserve placeholder names and multiplicity; interpolate once as plain text.	translation-reviewed	static/js/standterm-ssh-route-editor.js:230
+ssh.editor.add_jump	Add jump node	Add jump node	新增中繼站	Insert an incomplete jump card before the current target.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:259
+ssh.editor.jump	Jump {number}	Jump {number}	中繼站 {number}	Display role for one-based intermediate card; dataset.role remains original Jump N.	{number}	Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw. Preserve placeholder names and multiplicity; interpolate once as plain text.	translation-reviewed	static/js/standterm-ssh-route-editor.js:266
+ssh.editor.reorder_node	Reorder {role}	Reorder {role}	重新排序{role}	Accessible drag handle label for the displayed node role.	{role}	Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw. Preserve placeholder names and multiplicity; interpolate once as plain text.	translation-reviewed	static/js/standterm-ssh-route-editor.js:275
+ssh.editor.reorder_hint	Drag to reorder, or use the arrow keys	Drag to reorder, or use the arrow keys	拖曳以重新排序，或使用方向鍵	Drag handle tooltip; existing keyboard behavior is unchanged.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:276
+ssh.editor.edit_node	Edit {role}	Edit {role}	編輯{role}	Accessible card expansion button label.	{role}	Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw. Preserve placeholder names and multiplicity; interpolate once as plain text.	translation-reviewed	static/js/standterm-ssh-route-editor.js:279
+ssh.editor.move_up	Move up	Move up	上移	Move-up button accessible name and title.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:324
+ssh.editor.move_down	Move down	Move down	下移	Move-down button accessible name and title.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:328
+ssh.editor.remove	Remove	Remove	移除	Accessible card removal button name; removes a node from this draft route.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:340
+ssh.editor.remove_node	Remove {role}	Remove {role}	移除{role}	Removal tooltip with displayed node role.	{role}	Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw. Preserve placeholder names and multiplicity; interpolate once as plain text.	translation-reviewed	static/js/standterm-ssh-route-editor.js:341
+ssh.editor.advanced_node	Advanced node settings	Advanced node settings	進階節點設定	Details summary for node references and appended routes.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:357
+ssh.editor.references	Referenced by: {entries}	Referenced by: {entries}	引用此節點：{entries}	Existing referencing entry names; preserve user-provided names as plain text.	{entries}	Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw. Preserve placeholder names and multiplicity; interpolate once as plain text.	translation-reviewed	static/js/standterm-ssh-route-editor.js:361
+ssh.editor.this_entry	This Entry	This Entry	此連線設定	Display fallback for an unnamed referencing entry.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:362
+ssh.editor.next_route_for_node	{role} Next route	{role} Next route	{role}後續路徑	Accessible next-route selector name; option values remain entry IDs.	{role}	Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw. Preserve placeholder names and multiplicity; interpolate once as plain text.	translation-reviewed	static/js/standterm-ssh-route-editor.js:366
+ssh.editor.choose_next_route	Choose the next route...	Choose the next route...	選擇後續路徑…	Empty option in the next-route selector.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:367
+ssh.editor.append_hint		Replaces this node's following route. Copied nodes keep their key references.	會取代此節點原有的後續路徑。複製的節點保留原金鑰引用。	Adjacent help for reference/copy actions: existing tail is replaced and copied nodes retain credential references.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:374
+ssh.editor.copy_route	Copy route after this node	Copy route after this node	在此節點後接上路徑副本	Copy the selected route nodes after this node; key references are retained.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:377
+ssh.editor.reference_route	Reference route after this node	Reference route after this node	在此節點後引用路徑	Reference the selected route after this node; affects shared-node topology only as existing behavior defines.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:377
+ssh.editor.choose_route_to_append	Choose a route to append.	Choose a route to append.	選擇要接續的路徑。	No next route is selected; the action fails before changing the draft.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:379
+ssh.editor.repair_before_copy	Repair the selected route before copying it.	Repair the selected route before copying it.	請先修復所選路徑，再進行複製。	Existing typed invalid-path guard before copying route nodes.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:385
+ssh.editor.route_appended	Route appended. Review the final target, then select Done to check the links.	Route appended. Review the final target, then select {action} to check the links.	已接續路徑。請檢查最終目標主機，再選擇「{action}」以檢查連結。	Draft tail replacement is complete; validate via the actual mode-specific completion button.	{action}	Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw. Preserve placeholder names and multiplicity; interpolate once as plain text.	translation-reviewed	static/js/standterm-ssh-route-editor.js:389
+ssh.editor.enter_host	Enter host	Enter host	輸入主機	Card summary fallback when the host input is empty; never used in endpoint data.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:400
+ssh.editor.password	Password	Password	密碼	Authentication summary for password method; not a key passphrase.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:402
+ssh.editor.key	Key	Key	金鑰	Authentication summary when browser-key method has a key reference.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:403
+ssh.editor.key_unavailable	Key unavailable	Key unavailable	金鑰無法使用	Authentication summary when browser-key method has no selected reference.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:403
+ssh.editor.alias	Alias: {alias}	Alias: {alias}	別名：{alias}	Card tooltip host-key alias label; alias remains exact user data.	{alias}	Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw. Preserve placeholder names and multiplicity; interpolate once as plain text.	translation-reviewed	static/js/standterm-ssh-route-editor.js:404
+ssh.editor.save_on_connect	Save route on Connect	Save route on Connect	連線時儲存路徑	Prepare-only checkbox; Done still only returns the draft, and Connect performs opted-in saving.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:426
+ssh.editor.key_required	Choose or create a browser key for this node.	Choose or create a browser key for this node.	請為此節點選擇或建立瀏覽器金鑰。	Existing validation for browser-key method without a key reference.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:442
+ssh.editor.saving	Saving route…	Saving route…	正在儲存路徑…	Managed-mode onDone persistence in progress; not shown for prepare mode.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:465
+ssh.editor.entry_name_optional	Entry name (optional)	Entry name (optional)	連線設定名稱（選填）	Visible entry name input label.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:478
+ssh.editor.advanced_sharing	Advanced sharing	Advanced sharing	進階共用設定	Details summary for edit scope.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:486
+ssh.editor.scope_notice	Node edits also affect: {entries}. Reordering and removing cards only change this Entry.	Node edits also affect: {entries}. Reordering and removing cards only change this Entry.	節點編輯也會影響：{entries}。重新排序與移除卡片只會變更此連線設定。	All-scope notice distinguishes shared field edits from entry-only reordering/removal; preserve entry names.	{entries}	Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw. Preserve placeholder names and multiplicity; interpolate once as plain text.	translation-reviewed	static/js/standterm-ssh-route-editor.js:492
+ssh.editor.order_help	Connect from Core through the cards, top to bottom. The last card is the Target. Drag the handle or use ↑ / ↓. Up to {max} jumps.	Connect from Core through the cards, top to bottom. The last card is the Target. Drag the handle or use ↑ / ↓. Up to {max} jumps.	從 Core 依卡片由上到下連線。最後一張卡片是目標主機。可拖曳把手或使用 ↑／↓。最多 {max} 個中繼站。	Card order, target position, controls and existing maximum jump count.	{max}	Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw. Preserve placeholder names and multiplicity; interpolate once as plain text.	translation-reviewed	static/js/standterm-ssh-route-editor.js:497
+ssh.editor.manage_help	Save route stores all nodes and selected keys. Changes apply to the next connection.	Save route stores all nodes and selected keys. Changes apply to the next connection.	「儲存路徑」會儲存所有節點及所選金鑰。變更將套用至下次連線。	Managed mode stores the route via onDone; does not change an existing live connection.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:499
+ssh.editor.prepare_help	Done returns to connection settings. Connect saves only when Save route is selected.	Done updates the connection draft without saving. Connect saves only when Save route is selected.	「完成」只更新連線草稿，不會儲存。僅在勾選「儲存路徑」時，才會於連線時儲存。	Prepare mode returns a draft; persistent saving happens later on Connect only when selected.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:500
diff --git a/static/js/standterm-messages.js b/static/js/standterm-messages.js
index 030b660..48a5980 100644
--- a/static/js/standterm-messages.js
+++ b/static/js/standterm-messages.js
@@ -226,8 +226,58 @@
         "settings.agent.legend": "Agent access",
         "settings.agent.observe": "Read only + token",
         "settings.agent.permission": "Default Agent permission",
-        "settings.language.hint": "Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms and SSH login. Other areas remain in English.",
+        "settings.language.hint": "Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms, SSH login and profile/route editors. Other areas remain in English.",
         "settings.language.label": "Language (preview)",
+        "ssh.editor.add_jump": "Add jump node",
+        "ssh.editor.advanced_node": "Advanced node settings",
+        "ssh.editor.advanced_sharing": "Advanced sharing",
+        "ssh.editor.alias": "Alias: {alias}",
+        "ssh.editor.append_hint": "Replaces this node's following route. Copied nodes keep their key references.",
+        "ssh.editor.choose_next_route": "Choose the next route...",
+        "ssh.editor.choose_route_to_append": "Choose a route to append.",
+        "ssh.editor.copy_route": "Copy route after this node",
+        "ssh.editor.core_host": "Core host",
+        "ssh.editor.cycle_rejected": "{path} \u2192 {host}: cycle rejected. Choose an explicit target or cancel.",
+        "ssh.editor.done": "Done",
+        "ssh.editor.edit_node": "Edit {role}",
+        "ssh.editor.enter_host": "Enter host",
+        "ssh.editor.entry_name": "Entry name",
+        "ssh.editor.entry_name_optional": "Entry name (optional)",
+        "ssh.editor.field_for_node": "{role} {label}",
+        "ssh.editor.jump": "Jump {number}",
+        "ssh.editor.key": "Key",
+        "ssh.editor.key_required": "Choose or create a browser key for this node.",
+        "ssh.editor.key_unavailable": "Key unavailable",
+        "ssh.editor.manage_help": "Save route stores all nodes and selected keys. Changes apply to the next connection.",
+        "ssh.editor.move_down": "Move down",
+        "ssh.editor.move_up": "Move up",
+        "ssh.editor.next_route_for_node": "{role} Next route",
+        "ssh.editor.order_help": "Connect from Core through the cards, top to bottom. The last card is the Target. Drag the handle or use \u2191 / \u2193. Up to {max} jumps.",
+        "ssh.editor.password": "Password",
+        "ssh.editor.prepare_help": "Done updates the connection draft without saving. Connect saves only when Save route is selected.",
+        "ssh.editor.reference_route": "Reference route after this node",
+        "ssh.editor.references": "Referenced by: {entries}",
+        "ssh.editor.remove": "Remove",
+        "ssh.editor.remove_loop": "Remove loop",
+        "ssh.editor.remove_node": "Remove {role}",
+        "ssh.editor.reorder_hint": "Drag to reorder, or use the arrow keys",
+        "ssh.editor.reorder_node": "Reorder {role}",
+        "ssh.editor.repair_before_copy": "Repair the selected route before copying it.",
+        "ssh.editor.repair_candidate": "{rule}: {path}; target {target}",
+        "ssh.editor.repair_selected": "Repair selected. Review the target, then select {action}.",
+        "ssh.editor.review_before_reorder": "Select {action} to review the invalid link before changing card order.",
+        "ssh.editor.route_appended": "Route appended. Review the final target, then select {action} to check the links.",
+        "ssh.editor.save_failed": "SSH route could not be saved.",
+        "ssh.editor.save_on_connect": "Save route on Connect",
+        "ssh.editor.save_route": "Save route",
+        "ssh.editor.saving": "Saving route\u2026",
+        "ssh.editor.scope": "Edit scope",
+        "ssh.editor.scope_all": "Apply node edits to all references",
+        "ssh.editor.scope_entry": "Only this Entry",
+        "ssh.editor.scope_notice": "Node edits also affect: {entries}. Reordering and removing cards only change this Entry.",
+        "ssh.editor.stop_before_back_edge": "Stop before back edge",
+        "ssh.editor.this_entry": "This Entry",
+        "ssh.editor.title": "SSH route",
         "ssh.host_identity.check": "Check saved fingerprint",
         "ssh.host_identity.checking": "Checking host identity\u2026",
         "ssh.host_identity.forget": "Forget saved fingerprint\u2026",
@@ -275,7 +325,56 @@
         "ssh.login.target": "Target",
         "ssh.login.trust": "Trust and continue",
         "ssh.login.verifying": "Verifying host",
-        "ssh.login.waiting": "Waiting"
+        "ssh.login.waiting": "Waiting",
+        "ssh.profiles.add_jump": "Add jump node\u2026",
+        "ssh.profiles.changed_elsewhere": "SSH settings changed in another window. Reload before editing.",
+        "ssh.profiles.choose_key": "Choose or create a browser key for this node.",
+        "ssh.profiles.clear_failed": "SSH history could not be cleared.",
+        "ssh.profiles.clear_history": "Clear History",
+        "ssh.profiles.confirm_clear": "Clear all SSH connection history?",
+        "ssh.profiles.confirm_delete": "Delete SSH profile {name}?",
+        "ssh.profiles.confirm_delete_key": "Delete SSH profile {name} and its non-recoverable browser private key?",
+        "ssh.profiles.connection_changed": "The connection changed. Cancel and reopen the route editor.",
+        "ssh.profiles.create": "New profile",
+        "ssh.profiles.delete": "Delete",
+        "ssh.profiles.delete_failed": "Profile could not be deleted.",
+        "ssh.profiles.deleted": "Deleted {name}.",
+        "ssh.profiles.edit": "Edit connection\u2026",
+        "ssh.profiles.edit_failed": "Profile could not be edited.",
+        "ssh.profiles.empty": "No saved SSH profiles.",
+        "ssh.profiles.from_form": "New profile from the connection form. Select a saved profile to edit it.",
+        "ssh.profiles.from_tab": "New direct profile from the current SSH tab. Select a saved profile to edit it.",
+        "ssh.profiles.history": "History",
+        "ssh.profiles.history_cleared": "SSH history cleared.",
+        "ssh.profiles.history_count": "{count} / {limit} recent successful connections",
+        "ssh.profiles.key_dependents": "Browser key is used by: {entries}. Change those routes before removing or rebinding the key.",
+        "ssh.profiles.move_down": "Move Down",
+        "ssh.profiles.move_down_label": "Move profile down",
+        "ssh.profiles.move_failed": "Profile could not be moved.",
+        "ssh.profiles.move_up": "Move Up",
+        "ssh.profiles.move_up_label": "Move profile up",
+        "ssh.profiles.name": "Profile name",
+        "ssh.profiles.name_length": "Profile name must be 1\u2013{limit} characters.",
+        "ssh.profiles.name_max": "Profile name must be {limit} characters or fewer.",
+        "ssh.profiles.new_direct": "New direct profile: {username}@{host}:{port}",
+        "ssh.profiles.new_hint": "New direct profile. Save creates a new entry.",
+        "ssh.profiles.order_updated": "Profile order updated.",
+        "ssh.profiles.removed_edit": "This SSH entry was removed. Reload before editing.",
+        "ssh.profiles.removed_save": "This SSH entry was removed. Reload before saving.",
+        "ssh.profiles.rename_help": "Save name only renames this entry. Edit connection opens all route nodes and their key settings.",
+        "ssh.profiles.route_repair": "Route needs repair",
+        "ssh.profiles.save": "Save",
+        "ssh.profiles.save_failed": "Profile could not be saved.",
+        "ssh.profiles.save_help": "Save stores the name, connection settings and selected key. Changes apply to the next connection.",
+        "ssh.profiles.save_name": "Save name",
+        "ssh.profiles.saved": "Saved {name}.",
+        "ssh.profiles.saved_next": "Saved {name}. Changes apply to the next connection.",
+        "ssh.profiles.select_or_create": "Select a saved profile, or create a new one.",
+        "ssh.profiles.selected": "Selected {name}.",
+        "ssh.profiles.storage_unavailable": "SSH profile storage is unavailable.",
+        "ssh.profiles.stored": "Profiles are stored only in this browser.",
+        "ssh.profiles.title": "SSH profiles",
+        "ssh.profiles.wait": "Wait for the SSH settings to finish loading or saving."
     },
     "zh-TW": {
         "agent.access.current_tab": "\u76ee\u524d\u5206\u9801",
@@ -501,8 +600,58 @@
         "settings.agent.legend": "Agent \u5b58\u53d6",
         "settings.agent.observe": "\u552f\u8b80 + \u6b0a\u6756",
         "settings.agent.permission": "Agent \u9810\u8a2d\u6b0a\u9650",
-        "settings.language.hint": "\u4e0b\u6b21\u958b\u555f\u6b64\u9801\u9762\u6642\u5957\u7528\u65bc\u700f\u89bd\u5668\u8207 Agent \u5b58\u53d6\u3001\u6838\u51c6\u3001\u50b3\u8f38\u3001\u9023\u7dda\u8868\u55ae\u53ca SSH \u767b\u5165\uff0c\u5176\u4ed6\u5340\u57df\u4ecd\u986f\u793a\u82f1\u6587\u3002",
+        "settings.language.hint": "\u4e0b\u6b21\u958b\u555f\u6b64\u9801\u9762\u6642\u5957\u7528\u65bc\u700f\u89bd\u5668\u8207 Agent \u5b58\u53d6\u3001\u6838\u51c6\u3001\u50b3\u8f38\u3001\u9023\u7dda\u8868\u55ae\u3001SSH \u767b\u5165\u53ca\u9023\u7dda\u8a2d\u5b9a\uff0f\u8def\u5f91\u7de8\u8f2f\u5668\uff0c\u5176\u4ed6\u5340\u57df\u4ecd\u986f\u793a\u82f1\u6587\u3002",
         "settings.language.label": "\u8a9e\u8a00\uff08\u9810\u89bd\uff09",
+        "ssh.editor.add_jump": "\u65b0\u589e\u4e2d\u7e7c\u7ad9",
+        "ssh.editor.advanced_node": "\u9032\u968e\u7bc0\u9ede\u8a2d\u5b9a",
+        "ssh.editor.advanced_sharing": "\u9032\u968e\u5171\u7528\u8a2d\u5b9a",
+        "ssh.editor.alias": "\u5225\u540d\uff1a{alias}",
+        "ssh.editor.append_hint": "\u6703\u53d6\u4ee3\u6b64\u7bc0\u9ede\u539f\u6709\u7684\u5f8c\u7e8c\u8def\u5f91\u3002\u8907\u88fd\u7684\u7bc0\u9ede\u4fdd\u7559\u539f\u91d1\u9470\u5f15\u7528\u3002",
+        "ssh.editor.choose_next_route": "\u9078\u64c7\u5f8c\u7e8c\u8def\u5f91\u2026",
+        "ssh.editor.choose_route_to_append": "\u9078\u64c7\u8981\u63a5\u7e8c\u7684\u8def\u5f91\u3002",
+        "ssh.editor.copy_route": "\u5728\u6b64\u7bc0\u9ede\u5f8c\u63a5\u4e0a\u8def\u5f91\u526f\u672c",
+        "ssh.editor.core_host": "Core \u4e3b\u6a5f",
+        "ssh.editor.cycle_rejected": "{path} \u2192 {host}\uff1a\u7121\u6cd5\u4f7f\u7528\u542b\u8ff4\u5708\u7684\u8def\u5f91\u3002\u8acb\u660e\u78ba\u9078\u64c7\u76ee\u6a19\u4e3b\u6a5f\u6216\u53d6\u6d88\u3002",
+        "ssh.editor.done": "\u5b8c\u6210",
+        "ssh.editor.edit_node": "\u7de8\u8f2f{role}",
+        "ssh.editor.enter_host": "\u8f38\u5165\u4e3b\u6a5f",
+        "ssh.editor.entry_name": "\u9023\u7dda\u8a2d\u5b9a\u540d\u7a31",
+        "ssh.editor.entry_name_optional": "\u9023\u7dda\u8a2d\u5b9a\u540d\u7a31\uff08\u9078\u586b\uff09",
+        "ssh.editor.field_for_node": "{role} {label}",
+        "ssh.editor.jump": "\u4e2d\u7e7c\u7ad9 {number}",
+        "ssh.editor.key": "\u91d1\u9470",
+        "ssh.editor.key_required": "\u8acb\u70ba\u6b64\u7bc0\u9ede\u9078\u64c7\u6216\u5efa\u7acb\u700f\u89bd\u5668\u91d1\u9470\u3002",
+        "ssh.editor.key_unavailable": "\u91d1\u9470\u7121\u6cd5\u4f7f\u7528",
+        "ssh.editor.manage_help": "\u300c\u5132\u5b58\u8def\u5f91\u300d\u6703\u5132\u5b58\u6240\u6709\u7bc0\u9ede\u53ca\u6240\u9078\u91d1\u9470\u3002\u8b8a\u66f4\u5c07\u5957\u7528\u81f3\u4e0b\u6b21\u9023\u7dda\u3002",
+        "ssh.editor.move_down": "\u4e0b\u79fb",
+        "ssh.editor.move_up": "\u4e0a\u79fb",
+        "ssh.editor.next_route_for_node": "{role}\u5f8c\u7e8c\u8def\u5f91",
+        "ssh.editor.order_help": "\u5f9e Core \u4f9d\u5361\u7247\u7531\u4e0a\u5230\u4e0b\u9023\u7dda\u3002\u6700\u5f8c\u4e00\u5f35\u5361\u7247\u662f\u76ee\u6a19\u4e3b\u6a5f\u3002\u53ef\u62d6\u66f3\u628a\u624b\u6216\u4f7f\u7528 \u2191\uff0f\u2193\u3002\u6700\u591a {max} \u500b\u4e2d\u7e7c\u7ad9\u3002",
+        "ssh.editor.password": "\u5bc6\u78bc",
+        "ssh.editor.prepare_help": "\u300c\u5b8c\u6210\u300d\u53ea\u66f4\u65b0\u9023\u7dda\u8349\u7a3f\uff0c\u4e0d\u6703\u5132\u5b58\u3002\u50c5\u5728\u52fe\u9078\u300c\u5132\u5b58\u8def\u5f91\u300d\u6642\uff0c\u624d\u6703\u65bc\u9023\u7dda\u6642\u5132\u5b58\u3002",
+        "ssh.editor.reference_route": "\u5728\u6b64\u7bc0\u9ede\u5f8c\u5f15\u7528\u8def\u5f91",
+        "ssh.editor.references": "\u5f15\u7528\u6b64\u7bc0\u9ede\uff1a{entries}",
+        "ssh.editor.remove": "\u79fb\u9664",
+        "ssh.editor.remove_loop": "\u79fb\u9664\u8ff4\u5708",
+        "ssh.editor.remove_node": "\u79fb\u9664{role}",
+        "ssh.editor.reorder_hint": "\u62d6\u66f3\u4ee5\u91cd\u65b0\u6392\u5e8f\uff0c\u6216\u4f7f\u7528\u65b9\u5411\u9375",
+        "ssh.editor.reorder_node": "\u91cd\u65b0\u6392\u5e8f{role}",
+        "ssh.editor.repair_before_copy": "\u8acb\u5148\u4fee\u5fa9\u6240\u9078\u8def\u5f91\uff0c\u518d\u9032\u884c\u8907\u88fd\u3002",
+        "ssh.editor.repair_candidate": "{rule}\uff1a{path}\uff1b\u76ee\u6a19\u4e3b\u6a5f {target}",
+        "ssh.editor.repair_selected": "\u5df2\u9078\u64c7\u4fee\u5fa9\u65b9\u5f0f\u3002\u8acb\u6aa2\u67e5\u76ee\u6a19\u4e3b\u6a5f\uff0c\u518d\u9078\u64c7\u300c{action}\u300d\u3002",
+        "ssh.editor.review_before_reorder": "\u8b8a\u66f4\u5361\u7247\u9806\u5e8f\u524d\uff0c\u8acb\u9078\u64c7\u300c{action}\u300d\u4ee5\u6aa2\u67e5\u7121\u6548\u9023\u7d50\u3002",
+        "ssh.editor.route_appended": "\u5df2\u63a5\u7e8c\u8def\u5f91\u3002\u8acb\u6aa2\u67e5\u6700\u7d42\u76ee\u6a19\u4e3b\u6a5f\uff0c\u518d\u9078\u64c7\u300c{action}\u300d\u4ee5\u6aa2\u67e5\u9023\u7d50\u3002",
+        "ssh.editor.save_failed": "\u7121\u6cd5\u5132\u5b58 SSH \u8def\u5f91\u3002",
+        "ssh.editor.save_on_connect": "\u9023\u7dda\u6642\u5132\u5b58\u8def\u5f91",
+        "ssh.editor.save_route": "\u5132\u5b58\u8def\u5f91",
+        "ssh.editor.saving": "\u6b63\u5728\u5132\u5b58\u8def\u5f91\u2026",
+        "ssh.editor.scope": "\u7de8\u8f2f\u7bc4\u570d",
+        "ssh.editor.scope_all": "\u5c07\u7bc0\u9ede\u4fee\u6539\u5957\u7528\u81f3\u6240\u6709\u5f15\u7528\u8a2d\u5b9a",
+        "ssh.editor.scope_entry": "\u50c5\u6b64\u9023\u7dda\u8a2d\u5b9a",
+        "ssh.editor.scope_notice": "\u7bc0\u9ede\u7de8\u8f2f\u4e5f\u6703\u5f71\u97ff\uff1a{entries}\u3002\u91cd\u65b0\u6392\u5e8f\u8207\u79fb\u9664\u5361\u7247\u53ea\u6703\u8b8a\u66f4\u6b64\u9023\u7dda\u8a2d\u5b9a\u3002",
+        "ssh.editor.stop_before_back_edge": "\u5728\u56de\u9023\u524d\u505c\u6b62",
+        "ssh.editor.this_entry": "\u6b64\u9023\u7dda\u8a2d\u5b9a",
+        "ssh.editor.title": "SSH \u8def\u5f91",
         "ssh.host_identity.check": "\u6aa2\u67e5\u5df2\u5132\u5b58\u7684\u6307\u7d0b",
         "ssh.host_identity.checking": "\u6b63\u5728\u6aa2\u67e5\u4e3b\u6a5f\u8eab\u5206\u2026",
         "ssh.host_identity.forget": "\u5fd8\u8a18\u5df2\u5132\u5b58\u7684\u6307\u7d0b\u2026",
@@ -550,7 +699,56 @@
         "ssh.login.target": "\u76ee\u6a19\u4e3b\u6a5f",
         "ssh.login.trust": "\u4fe1\u4efb\u4e26\u7e7c\u7e8c",
         "ssh.login.verifying": "\u6b63\u5728\u9a57\u8b49\u4e3b\u6a5f",
-        "ssh.login.waiting": "\u7b49\u5f85\u4e2d"
+        "ssh.login.waiting": "\u7b49\u5f85\u4e2d",
+        "ssh.profiles.add_jump": "\u65b0\u589e\u4e2d\u7e7c\u7ad9\u2026",
+        "ssh.profiles.changed_elsewhere": "SSH \u8a2d\u5b9a\u5df2\u5728\u5176\u4ed6\u8996\u7a97\u8b8a\u66f4\u3002\u8acb\u91cd\u65b0\u8f09\u5165\u5f8c\u518d\u7de8\u8f2f\u3002",
+        "ssh.profiles.choose_key": "\u8acb\u70ba\u6b64\u7bc0\u9ede\u9078\u64c7\u6216\u5efa\u7acb\u700f\u89bd\u5668\u91d1\u9470\u3002",
+        "ssh.profiles.clear_failed": "\u7121\u6cd5\u6e05\u9664 SSH \u9023\u7dda\u7d00\u9304\u3002",
+        "ssh.profiles.clear_history": "\u6e05\u9664\u9023\u7dda\u7d00\u9304",
+        "ssh.profiles.confirm_clear": "\u6e05\u9664\u6240\u6709 SSH \u9023\u7dda\u7d00\u9304\uff1f",
+        "ssh.profiles.confirm_delete": "\u522a\u9664 SSH \u9023\u7dda\u8a2d\u5b9a {name}\uff1f",
+        "ssh.profiles.confirm_delete_key": "\u522a\u9664 SSH \u9023\u7dda\u8a2d\u5b9a {name} \u53ca\u5176\u7121\u6cd5\u5fa9\u539f\u7684\u700f\u89bd\u5668\u79c1\u9470\uff1f",
+        "ssh.profiles.connection_changed": "\u9023\u7dda\u5df2\u8b8a\u66f4\u3002\u8acb\u53d6\u6d88\u4e26\u91cd\u65b0\u958b\u555f\u8def\u5f91\u7de8\u8f2f\u5668\u3002",
+        "ssh.profiles.create": "\u65b0\u589e\u9023\u7dda\u8a2d\u5b9a",
+        "ssh.profiles.delete": "\u522a\u9664",
+        "ssh.profiles.delete_failed": "\u7121\u6cd5\u522a\u9664\u9023\u7dda\u8a2d\u5b9a\u3002",
+        "ssh.profiles.deleted": "\u5df2\u522a\u9664 {name}\u3002",
+        "ssh.profiles.edit": "\u7de8\u8f2f\u9023\u7dda\u2026",
+        "ssh.profiles.edit_failed": "\u7121\u6cd5\u7de8\u8f2f\u9023\u7dda\u8a2d\u5b9a\u3002",
+        "ssh.profiles.empty": "\u6c92\u6709\u5df2\u5132\u5b58\u7684 SSH \u9023\u7dda\u8a2d\u5b9a\u3002",
+        "ssh.profiles.from_form": "\u4ee5\u9023\u7dda\u8868\u55ae\u5efa\u7acb\u8a2d\u5b9a\uff1b\u9078\u53d6\u5df2\u5132\u5b58\u7684\u8a2d\u5b9a\u5373\u53ef\u7de8\u8f2f\u3002",
+        "ssh.profiles.from_tab": "\u4ee5\u76ee\u524d SSH \u5206\u9801\u5efa\u7acb\u76f4\u63a5\u9023\u7dda\u8a2d\u5b9a\uff1b\u9078\u53d6\u5df2\u5132\u5b58\u7684\u8a2d\u5b9a\u5373\u53ef\u7de8\u8f2f\u3002",
+        "ssh.profiles.history": "\u9023\u7dda\u7d00\u9304",
+        "ssh.profiles.history_cleared": "\u5df2\u6e05\u9664 SSH \u9023\u7dda\u7d00\u9304\u3002",
+        "ssh.profiles.history_count": "\u6700\u8fd1\u6210\u529f\u9023\u7dda\uff1a{count} / {limit} \u7b46",
+        "ssh.profiles.key_dependents": "\u4ee5\u4e0b\u9023\u7dda\u8a2d\u5b9a\u6b63\u5728\u4f7f\u7528\u6b64\u700f\u89bd\u5668\u91d1\u9470\uff1a{entries}\u3002\u8acb\u5148\u4fee\u6539\u9019\u4e9b\u8def\u5f91\uff0c\u518d\u79fb\u9664\u6216\u91cd\u65b0\u7d81\u5b9a\u91d1\u9470\u3002",
+        "ssh.profiles.move_down": "\u4e0b\u79fb",
+        "ssh.profiles.move_down_label": "\u4e0b\u79fb\u9023\u7dda\u8a2d\u5b9a",
+        "ssh.profiles.move_failed": "\u7121\u6cd5\u79fb\u52d5\u9023\u7dda\u8a2d\u5b9a\u3002",
+        "ssh.profiles.move_up": "\u4e0a\u79fb",
+        "ssh.profiles.move_up_label": "\u4e0a\u79fb\u9023\u7dda\u8a2d\u5b9a",
+        "ssh.profiles.name": "\u9023\u7dda\u8a2d\u5b9a\u540d\u7a31",
+        "ssh.profiles.name_length": "\u9023\u7dda\u8a2d\u5b9a\u540d\u7a31\u9808\u70ba 1 \u81f3 {limit} \u500b\u5b57\u5143\u3002",
+        "ssh.profiles.name_max": "\u9023\u7dda\u8a2d\u5b9a\u540d\u7a31\u4e0d\u5f97\u8d85\u904e {limit} \u500b\u5b57\u5143\u3002",
+        "ssh.profiles.new_direct": "\u65b0\u7684\u76f4\u63a5\u9023\u7dda\u8a2d\u5b9a\uff1a{username}@{host}:{port}",
+        "ssh.profiles.new_hint": "\u65b0\u7684\u76f4\u63a5\u9023\u7dda\u8a2d\u5b9a\u3002\u6309\u4e0b\u300c\u5132\u5b58\u300d\u5373\u53ef\u5efa\u7acb\u3002",
+        "ssh.profiles.order_updated": "\u5df2\u66f4\u65b0\u9023\u7dda\u8a2d\u5b9a\u9806\u5e8f\u3002",
+        "ssh.profiles.removed_edit": "\u6b64 SSH \u9023\u7dda\u8a2d\u5b9a\u5df2\u79fb\u9664\u3002\u8acb\u91cd\u65b0\u8f09\u5165\u5f8c\u518d\u7de8\u8f2f\u3002",
+        "ssh.profiles.removed_save": "\u6b64 SSH \u9023\u7dda\u8a2d\u5b9a\u5df2\u79fb\u9664\u3002\u8acb\u91cd\u65b0\u8f09\u5165\u5f8c\u518d\u5132\u5b58\u3002",
+        "ssh.profiles.rename_help": "\u300c\u5132\u5b58\u540d\u7a31\u300d\u53ea\u66f4\u6539\u540d\u7a31\u3002\u300c\u7de8\u8f2f\u9023\u7dda\u300d\u53ef\u7de8\u8f2f\u6574\u689d\u8def\u5f91\u7684\u7bc0\u9ede\u8207\u91d1\u9470\u8a2d\u5b9a\u3002",
+        "ssh.profiles.route_repair": "\u8def\u5f91\u9700\u8981\u4fee\u5fa9",
+        "ssh.profiles.save": "\u5132\u5b58",
+        "ssh.profiles.save_failed": "\u7121\u6cd5\u5132\u5b58\u9023\u7dda\u8a2d\u5b9a\u3002",
+        "ssh.profiles.save_help": "\u300c\u5132\u5b58\u300d\u6703\u4fdd\u5b58\u540d\u7a31\u3001\u9023\u7dda\u8a2d\u5b9a\u8207\u6240\u9078\u91d1\u9470\uff0c\u8b8a\u66f4\u65bc\u4e0b\u6b21\u9023\u7dda\u751f\u6548\u3002",
+        "ssh.profiles.save_name": "\u5132\u5b58\u540d\u7a31",
+        "ssh.profiles.saved": "\u5df2\u5132\u5b58 {name}\u3002",
+        "ssh.profiles.saved_next": "\u5df2\u5132\u5b58 {name}\uff0c\u8b8a\u66f4\u65bc\u4e0b\u6b21\u9023\u7dda\u751f\u6548\u3002",
+        "ssh.profiles.select_or_create": "\u9078\u53d6\u5df2\u5132\u5b58\u7684\u9023\u7dda\u8a2d\u5b9a\uff0c\u6216\u65b0\u589e\u8a2d\u5b9a\u3002",
+        "ssh.profiles.selected": "\u5df2\u9078\u53d6 {name}\u3002",
+        "ssh.profiles.storage_unavailable": "\u7121\u6cd5\u4f7f\u7528 SSH \u9023\u7dda\u8a2d\u5b9a\u5132\u5b58\u7a7a\u9593\u3002",
+        "ssh.profiles.stored": "\u9023\u7dda\u8a2d\u5b9a\u53ea\u5132\u5b58\u5728\u6b64\u700f\u89bd\u5668\u3002",
+        "ssh.profiles.title": "SSH \u9023\u7dda\u8a2d\u5b9a",
+        "ssh.profiles.wait": "\u8acb\u7b49\u5019 SSH \u8a2d\u5b9a\u8f09\u5165\u6216\u5132\u5b58\u5b8c\u6210\u3002"
     }
 };
     if (typeof module === 'object' && module.exports) module.exports = messages;
diff --git a/static/js/standterm-ssh-route-editor.js b/static/js/standterm-ssh-route-editor.js
index c51bc5e..673073c 100644
--- a/static/js/standterm-ssh-route-editor.js
+++ b/static/js/standterm-ssh-route-editor.js
@@ -3,7 +3,13 @@
     const routes = window.StandTermSshRoutes;
 
     routes.nodeFields = function({ parent, role, node, profiles, savedKeys, newKeys, keyAllowed,
-        createKey, copyPublicKey, hostIdentity, editorId, onBusy, onChange }) {
+        createKey, copyPublicKey, hostIdentity, editorId, onBusy, onChange, translate }) {
+        const t = (key, fallback, params = {}) => {
+            const translated = typeof translate === 'function' ? translate(key, params) : key;
+            if (translated !== key) return translated;
+            return fallback.replace(/\{([A-Za-z_][A-Za-z0-9_]*)\}/g,
+                (placeholder, name) => Object.hasOwn(params, name) ? String(params[name]) : placeholder);
+        };
         const fields = document.createElement('div');
         fields.className = 'ssh-route-fields';
         parent.append(fields);
@@ -12,30 +18,30 @@
             wrapper.textContent = label;
             const field = document.createElement('input');
             field.value = value;
-            field.setAttribute('aria-label', `${role} ${label}`);
+            field.setAttribute('aria-label', t('ssh.editor.field_for_node', '{role} {label}', { role, label }));
             wrapper.append(field);
             parent.append(wrapper);
             return field;
         };
-        const host = input('Host', node.endpoint.host);
-        const port = input('Port', node.endpoint.port);
-        const username = input('Username', node.endpoint.username);
+        const host = input(t('connection.host', 'Host'), node.endpoint.host);
+        const port = input(t('connection.port', 'Port'), node.endpoint.port);
+        const username = input(t('connection.username', 'Username'), node.endpoint.username);
         port.inputMode = 'numeric';
         const auth = StandTermSshNodeAuth({ parent: fields, role, authentication: node.authentication,
             endpoint: () => ({ host: host.value, port: port.value, username: username.value }),
-            profiles, savedKeys, newKeys, keyAllowed, createKey, copyPublicKey, onBusy, onChange
+            profiles, savedKeys, newKeys, keyAllowed, createKey, copyPublicKey, onBusy, onChange, translate
         });
         const identity = document.createElement('details');
         identity.className = 'ssh-host-identity';
         const identityTitle = document.createElement('summary');
-        identityTitle.textContent = 'Host identity';
+        identityTitle.textContent = t('connection.host_identity', 'Host identity');
         identity.append(identityTitle);
         parent.append(identity);
-        const alias = input('Host key alias (optional)', node.hostKeyAlias, identity);
+        const alias = input(t('connection.host_alias', 'Host key alias (optional)'), node.hostKeyAlias, identity);
         const identityBody = document.createElement('div');
         identity.append(identityBody);
         const identityControl = hostIdentity && StandTermSshHostIdentity({
-            parent: identityBody, editorId, nodeId: node.id, request: hostIdentity.request,
+            parent: identityBody, editorId, nodeId: node.id, request: hostIdentity.request, translate,
             read: () => ({ ...routes.endpoint({ host: host.value, port: port.value, username: username.value }),
                 host_key_alias: alias.value.trim(), terminal_id: hostIdentity.terminalId })
         });
@@ -50,7 +56,13 @@
     };
 
     routes.edit = function({ state, entryId, target, onDone, keys = [], temporaryKeys = [], saveRoute = false, keyAllowed = false,
-        createKey, copyPublicKey, hostIdentity, mode = 'prepare', entryName = '', baseState = state }) {
+        createKey, copyPublicKey, hostIdentity, mode = 'prepare', entryName = '', baseState = state, translate }) {
+        const t = (key, fallback, params = {}) => {
+            const translated = typeof translate === 'function' ? translate(key, params) : key;
+            if (translated !== key) return translated;
+            return fallback.replace(/\{([A-Za-z_][A-Za-z0-9_]*)\}/g,
+                (placeholder, name) => Object.hasOwn(params, name) ? String(params[name]) : placeholder);
+        };
         const original = routes.clone(baseState);
         const savedKeys = [...keys];
         const newKeys = new Map(temporaryKeys.map(record => [record.keyId, record]));
@@ -58,6 +70,7 @@
         let pendingGenerations = 0;
         let saving = false;
         const managed = mode === 'manage';
+        const completionLabel = managed ? t('ssh.editor.save_route', 'Save route') : t('ssh.editor.done', 'Done');
         let draft = routes.clone(state);
         let entry = [...draft.profiles, ...draft.history].find(item => item.id === entryId);
         if (!entry) {
@@ -71,15 +84,16 @@
         const dialog = document.createElement('dialog');
         dialog.id = 'ssh-route-editor';
         const title = document.createElement('h3');
-        title.textContent = 'SSH route';
+        title.textContent = t('ssh.editor.title', 'SSH route');
         const name = document.createElement('input');
         name.value = entry.name || '';
-        name.placeholder = 'Entry name';
+        name.placeholder = t('ssh.editor.entry_name', 'Entry name');
         name.maxLength = 64;
-        name.setAttribute('aria-label', 'Entry name');
+        name.setAttribute('aria-label', t('ssh.editor.entry_name', 'Entry name'));
         const scope = document.createElement('select');
-        scope.setAttribute('aria-label', 'Edit scope');
-        for (const [value, label] of [['entry', 'Only this Entry'], ['all', 'Apply node edits to all references']]) {
+        scope.setAttribute('aria-label', t('ssh.editor.scope', 'Edit scope'));
+        for (const [value, label] of [['entry', t('ssh.editor.scope_entry', 'Only this Entry')],
+            ['all', t('ssh.editor.scope_all', 'Apply node edits to all references')]]) {
             scope.add(new Option(label, value));
         }
         const rows = document.createElement('div');
@@ -101,11 +115,11 @@
             parent.append(element);
             return element;
         };
-        const fail = err => { status.textContent = err.message || 'SSH route could not be saved.'; };
+        const fail = err => { status.textContent = err.message || t('ssh.editor.save_failed', 'SSH route could not be saved.'); };
         let controls = [];
         let draggingIndex = null;
         let expandedIndex = path().length === 1 ? 0 : -1;
-        const labelPath = path => `Core host → ${path.map(node => `${node.endpoint.username}@${node.endpoint.host}:${node.endpoint.port}`).join(' → ')}`;
+        const labelPath = path => `${t('ssh.editor.core_host', 'Core host')} → ${path.map(node => `${node.endpoint.username}@${node.endpoint.host}:${node.endpoint.port}`).join(' → ')}`;
 
         function path() { return routes.resolve(draft, entry.startNodeId).path; }
 
@@ -148,7 +162,7 @@
         function canChangeOrder() {
             const result = routes.resolve(draft, entry.startNodeId);
             if (result.error && result.error !== 'depth') {
-                throw new Error('Select Done to review the invalid link before changing card order.');
+                throw new Error(t('ssh.editor.review_before_reorder', 'Select {action} to review the invalid link before changing card order.', { action: completionLabel }));
             }
         }
 
@@ -197,10 +211,14 @@
             const result = routes.resolve(draft, entry.startNodeId);
             if (result.error !== 'cycle') return false;
             status.replaceChildren(document.createTextNode(
-                `${labelPath(result.path)} → ${result.path[result.cycleIndex].endpoint.host}: cycle rejected. Choose an explicit target or cancel.`));
+                t('ssh.editor.cycle_rejected', '{path} → {host}: cycle rejected. Choose an explicit target or cancel.',
+                    { path: labelPath(result.path), host: result.path[result.cycleIndex].endpoint.host })));
             for (const candidate of routes.repairCandidates(draft, entry)) {
                 const target = candidate.path.at(-1).endpoint;
-                button(`${candidate.rule === 'erase-loop' ? 'Remove loop' : 'Stop before back edge'}: ${labelPath(candidate.path)}; target ${target.username}@${target.host}:${target.port}`, () => {
+                const ruleLabel = candidate.rule === 'erase-loop'
+                    ? t('ssh.editor.remove_loop', 'Remove loop') : t('ssh.editor.stop_before_back_edge', 'Stop before back edge');
+                button(t('ssh.editor.repair_candidate', '{rule}: {path}; target {target}',
+                    { rule: ruleLabel, path: labelPath(candidate.path), target: `${target.username}@${target.host}:${target.port}` }), () => {
                     // Keep other Entries and shared nodes exactly as they were before this edit.
                     const repaired = routes.clone(original);
                     let selected = [...repaired.profiles, ...repaired.history].find(item => item.id === entry.id);
@@ -209,7 +227,7 @@
                     selected.startNodeId = routes.copyPath(repaired, candidate.path);
                     draft = routes.project(repaired);
                     entry = selected;
-                    status.textContent = 'Repair selected. Review the target, then select Done.';
+                    status.textContent = t('ssh.editor.repair_selected', 'Repair selected. Review the target, then select {action}.', { action: completionLabel });
                     render();
                 }, status);
             }
@@ -238,13 +256,15 @@
             preview.textContent = labelPath(result.path);
             result.path.forEach((node, index) => {
                 if (index === result.path.length - 1) {
-                    const add = button('Add jump node', addJumpNode, rows);
+                    const add = button(t('ssh.editor.add_jump', 'Add jump node'), addJumpNode, rows);
                     add.className = 'ssh-route-add';
                 }
                 const fieldset = document.createElement('fieldset');
                 const legend = document.createElement('legend');
                 const role = index === result.path.length - 1 ? 'Target' : `Jump ${index + 1}`;
-                legend.textContent = role;
+                const displayRole = index === result.path.length - 1 ? t('ssh.login.target', 'Target')
+                    : t('ssh.editor.jump', 'Jump {number}', { number: index + 1 });
+                legend.textContent = displayRole;
                 legend.className = 'ssh-route-accessible-label';
                 fieldset.dataset.role = role;
                 fieldset.append(legend);
@@ -252,13 +272,13 @@
                 nodeButtons.className = 'ssh-route-card-header';
                 const handle = button('≡', () => {}, nodeButtons);
                 handle.className = 'ssh-route-drag';
-                handle.setAttribute('aria-label', `Reorder ${role}`);
-                handle.title = 'Drag to reorder, or use the arrow keys';
+                handle.setAttribute('aria-label', t('ssh.editor.reorder_node', 'Reorder {role}', { role: displayRole }));
+                handle.title = t('ssh.editor.reorder_hint', 'Drag to reorder, or use the arrow keys');
                 const toggle = button('', () => expandCard(expandedIndex === index ? -1 : index), nodeButtons);
                 toggle.className = 'ssh-route-card-toggle';
-                toggle.setAttribute('aria-label', `Edit ${role}`);
+                toggle.setAttribute('aria-label', t('ssh.editor.edit_node', 'Edit {role}', { role: displayRole }));
                 const roleLabel = document.createElement('strong');
-                roleLabel.textContent = role;
+                roleLabel.textContent = displayRole;
                 const summary = document.createElement('span');
                 summary.className = 'ssh-route-card-summary';
                 const authSummary = document.createElement('small');
@@ -301,12 +321,12 @@
                     try { moveCard(from, index); } catch (err) { fail(err); }
                 };
                 const earlier = button('↑', () => moveCard(index, index - 1), nodeButtons);
-                earlier.setAttribute('aria-label', 'Move up');
-                earlier.title = 'Move up';
+                earlier.setAttribute('aria-label', t('ssh.editor.move_up', 'Move up'));
+                earlier.title = t('ssh.editor.move_up', 'Move up');
                 earlier.disabled = index === 0;
                 const later = button('↓', () => moveCard(index, index + 1), nodeButtons);
-                later.setAttribute('aria-label', 'Move down');
-                later.title = 'Move down';
+                later.setAttribute('aria-label', t('ssh.editor.move_down', 'Move down'));
+                later.title = t('ssh.editor.move_down', 'Move down');
                 later.disabled = index === result.path.length - 1;
                 if (result.path.length > 1) {
                     const remove = button('×', () => {
@@ -317,8 +337,8 @@
                             : expandedIndex > index ? expandedIndex - 1 : expandedIndex;
                         replacePath(remaining, nextExpandedIndex);
                     }, nodeButtons);
-                    remove.setAttribute('aria-label', 'Remove');
-                    remove.title = `Remove ${role}`;
+                    remove.setAttribute('aria-label', t('ssh.editor.remove', 'Remove'));
+                    remove.title = t('ssh.editor.remove_node', 'Remove {role}', { role: displayRole });
                 }
                 fieldset.append(nodeButtons);
                 const body = document.createElement('div');
@@ -326,43 +346,47 @@
                 body.id = `ssh-route-card-body-${index}`;
                 toggle.setAttribute('aria-controls', body.id);
                 fieldset.append(body);
-                const nodeFields = routes.nodeFields({ parent: body, role, node, profiles: draft.profiles,
-                    savedKeys, newKeys, keyAllowed, createKey, copyPublicKey, hostIdentity, editorId,
+                const nodeFields = routes.nodeFields({ parent: body, role: displayRole, node, profiles: draft.profiles,
+                    savedKeys, newKeys, keyAllowed, createKey, copyPublicKey, hostIdentity, editorId, translate,
                     onBusy: delta => { pendingGenerations += delta; updateSaveState(); },
                     onChange: () => { updateSummary(); updateSaveState(); }
                 });
                 const { host, port, username, alias, auth } = nodeFields;
                 const advanced = document.createElement('details');
                 const advancedTitle = document.createElement('summary');
-                advancedTitle.textContent = 'Advanced node settings';
+                advancedTitle.textContent = t('ssh.editor.advanced_node', 'Advanced node settings');
                 advanced.append(advancedTitle);
                 body.append(advanced);
                 const affected = document.createElement('p');
-                affected.textContent = `Referenced by: ${routes.references(draft, node.id).map(item => item.name || 'This Entry').join(', ')}`;
+                affected.textContent = t('ssh.editor.references', 'Referenced by: {entries}',
+                    { entries: routes.references(draft, node.id).map(item => item.name || t('ssh.editor.this_entry', 'This Entry')).join(', ') });
                 advanced.append(affected);
                 controls.push({ card: fieldset, handle, host, advanced, body, toggle, read: nodeFields.read });
                 const otherEntries = document.createElement('select');
-                otherEntries.setAttribute('aria-label', `${role} Next route`);
-                otherEntries.add(new Option('Choose the next route...', ''));
+                otherEntries.setAttribute('aria-label', t('ssh.editor.next_route_for_node', '{role} Next route', { role: displayRole }));
+                otherEntries.add(new Option(t('ssh.editor.choose_next_route', 'Choose the next route...'), ''));
                 draft.profiles.forEach(item => otherEntries.add(new Option(item.name, item.id)));
                 advanced.append(otherEntries);
                 const referenceButtons = document.createElement('div');
                 referenceButtons.className = 'ssh-route-buttons';
                 advanced.append(referenceButtons);
+                const referenceHint = document.createElement('p');
+                referenceHint.textContent = t('ssh.editor.append_hint', 'Replaces this node\'s following route. Copied nodes keep their key references.');
+                advanced.append(referenceHint);
                 for (const copy of [false, true]) {
-                    button(copy ? 'Copy route after this node' : 'Reference route after this node', () => {
+                    button(copy ? t('ssh.editor.copy_route', 'Copy route after this node') : t('ssh.editor.reference_route', 'Reference route after this node'), () => {
                         const selected = draft.profiles.find(item => item.id === otherEntries.value);
-                        if (!selected) throw new Error('Choose a route to append.');
+                        if (!selected) throw new Error(t('ssh.editor.choose_route_to_append', 'Choose a route to append.'));
                         canChangeOrder();
                         flush();
                         const previous = routes.clone(draft);
                         try {
                             const selectedPath = routes.resolve(draft, selected.startNodeId);
-                            if (copy && selectedPath.error && selectedPath.error !== 'depth') throw new Error('Repair the selected route before copying it.');
+                            if (copy && selectedPath.error && selectedPath.error !== 'depth') throw new Error(t('ssh.editor.repair_before_copy', 'Repair the selected route before copying it.'));
                             const nextId = copy ? routes.copyPath(draft, selectedPath.path) : selected.startNodeId;
                             replaceDraftNode(index, { ...path()[index], nextNodeId: nextId });
                             routes.project(draft);
-                            status.textContent = 'Route appended. Review the final target, then select Done to check the links.';
+                            status.textContent = t('ssh.editor.route_appended', 'Route appended. Review the final target, then select {action} to check the links.', { action: completionLabel });
                             render();
                         } catch (err) {
                             draft = previous;
@@ -373,11 +397,12 @@
                     }, referenceButtons);
                 }
                 function updateSummary() {
-                    const endpoint = `${username.value.trim() ? `${username.value.trim()}@` : ''}${host.value.trim() || 'Enter host'}:${port.value || '22'}`;
+                    const endpoint = `${username.value.trim() ? `${username.value.trim()}@` : ''}${host.value.trim() || t('ssh.editor.enter_host', 'Enter host')}:${port.value || '22'}`;
                     summary.textContent = `${endpoint}${alias.value.trim() ? ` · ${alias.value.trim()}` : ''}`;
-                    authSummary.textContent = auth.read().method === 'password' ? 'Password' : auth.read().keyRef ? 'Key' : 'Key unavailable';
-                    const aliasText = alias.value.trim() ? ` · Alias: ${alias.value.trim()}` : '';
-                    toggle.title = `${role}: ${endpoint} · ${authSummary.textContent}${aliasText}`;
+                    authSummary.textContent = auth.read().method === 'password' ? t('ssh.editor.password', 'Password')
+                        : auth.read().keyRef ? t('ssh.editor.key', 'Key') : t('ssh.editor.key_unavailable', 'Key unavailable');
+                    const aliasText = alias.value.trim() ? ` · ${t('ssh.editor.alias', 'Alias: {alias}', { alias: alias.value.trim() })}` : '';
+                    toggle.title = `${displayRole}: ${endpoint} · ${authSummary.textContent}${aliasText}`;
                 }
                 updateSummary();
                 fieldset.addEventListener('input', () => {
@@ -398,11 +423,11 @@
         saveRouteInput.type = 'checkbox';
         saveRouteInput.checked = saveRoute;
         saveRouteLabel.className = 'ssh-key-toggle';
-        saveRouteLabel.append(saveRouteInput, document.createTextNode('Save route on Connect'));
-        saveRouteInput.setAttribute('aria-label', 'Save route');
+        saveRouteLabel.append(saveRouteInput, document.createTextNode(t('ssh.editor.save_on_connect', 'Save route on Connect')));
+        saveRouteInput.setAttribute('aria-label', t('ssh.editor.save_route', 'Save route'));
         if (!managed) actions.append(saveRouteLabel);
-        button('Cancel', () => dialog.close());
-        const doneButton = button(managed ? 'Save route' : 'Done', async () => {
+        button(t('common.cancel', 'Cancel'), () => dialog.close());
+        const doneButton = button(completionLabel, async () => {
             if (pendingGenerations) return;
             flush();
             if (offerRepair()) return;
@@ -414,7 +439,7 @@
                     validEndpoint = true;
                     routes.publicNode(node);
                     if (node.authentication.method === 'browser-key' && !node.authentication.keyRef) {
-                        throw new Error('Choose or create a browser key for this node.');
+                        throw new Error(t('ssh.editor.key_required', 'Choose or create a browser key for this node.'));
                     }
                 } catch (err) {
                     const control = controls[index];
@@ -422,7 +447,9 @@
                     expandCard(index);
                     if (validEndpoint) control.advanced.open = true;
                     control.host.focus();
-                    throw new Error(`${index === current.length - 1 ? 'Target' : `Jump ${index + 1}`}: ${err.message}`);
+                    const displayRole = index === current.length - 1 ? t('ssh.login.target', 'Target')
+                        : t('ssh.editor.jump', 'Jump {number}', { number: index + 1 });
+                    throw new Error(`${displayRole}: ${err.message}`);
                 }
             });
             if (!entry.name) {
@@ -435,7 +462,7 @@
             saving = true;
             updateSaveState();
             rows.inert = heading.inert = advanced.inert = true;
-            status.textContent = managed ? 'Saving route…' : '';
+            status.textContent = managed ? t('ssh.editor.saving', 'Saving route…') : '';
             try {
                 await onDone(draft, entry.id, [...newKeys.values()].filter(record => used.has(record.keyId)), saveRouteInput.checked);
                 dialog.close();
@@ -448,7 +475,7 @@
         doneButton.className = 'primary';
         const heading = document.createElement('div');
         heading.className = 'ssh-route-heading';
-        for (const [text, field] of [['Entry name (optional)', name]]) {
+        for (const [text, field] of [[t('ssh.editor.entry_name_optional', 'Entry name (optional)'), name]]) {
             const label = document.createElement('label');
             label.textContent = text;
             label.append(field);
@@ -456,19 +483,21 @@
         }
         const advanced = document.createElement('details');
         const advancedTitle = document.createElement('summary');
-        advancedTitle.textContent = 'Advanced sharing';
+        advancedTitle.textContent = t('ssh.editor.advanced_sharing', 'Advanced sharing');
         advanced.append(advancedTitle, scope);
         const scopeNotice = document.createElement('p');
         scopeNotice.hidden = true;
         function updateScopeNotice() {
             scopeNotice.hidden = scope.value !== 'all';
-            scopeNotice.textContent = `Node edits also affect: ${[...new Set(path().flatMap(node => routes.references(draft, node.id).map(item => item.name || 'This Entry')))].join(', ')}. Reordering and removing cards only change this Entry.`;
+            scopeNotice.textContent = t('ssh.editor.scope_notice', 'Node edits also affect: {entries}. Reordering and removing cards only change this Entry.',
+                { entries: [...new Set(path().flatMap(node => routes.references(draft, node.id).map(item => item.name || t('ssh.editor.this_entry', 'This Entry'))))].join(', ') });
         }
         scope.onchange = updateScopeNotice;
         const help = document.createElement('p');
-        help.textContent = `Connect from Core through the cards, top to bottom. The last card is the Target. Drag the handle or use ↑ / ↓. Up to ${routes.MAX_JUMPS} jumps. ${managed
-            ? 'Save route stores all nodes and selected keys. Changes apply to the next connection.'
-            : 'Done returns to connection settings. Connect saves only when Save route is selected.'}`;
+        help.textContent = t('ssh.editor.order_help', 'Connect from Core through the cards, top to bottom. The last card is the Target. Drag the handle or use ↑ / ↓. Up to {max} jumps.', { max: routes.MAX_JUMPS })
+            + ' ' + (managed
+                ? t('ssh.editor.manage_help', 'Save route stores all nodes and selected keys. Changes apply to the next connection.')
+                : t('ssh.editor.prepare_help', 'Done updates the connection draft without saving. Connect saves only when Save route is selected.'));
         dialog.append(title, help, heading, advanced, scopeNotice, rows, preview, status, actions);
         dialog.addEventListener('cancel', event => { if (saving) event.preventDefault(); });
         dialog.addEventListener('close', () => dialog.remove());
diff --git a/templates/index.html b/templates/index.html
index e826983..6856a71 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -1125,7 +1125,7 @@ <h3>Settings</h3>
                 <div class="settings-nav">
                     <div class="settings-nav-item active" data-tab="general">General</div>
                     <div class="settings-nav-item" data-tab="appearance">Appearance</div>
-                    <div class="settings-nav-item" data-tab="ssh-sessions">SSH Sessions</div>
+                    <div class="settings-nav-item" data-tab="ssh-sessions" data-i18n="ssh.profiles.title">SSH profiles</div>
                     <div class="settings-nav-item" data-tab="server">Server</div>
                     <div class="settings-nav-item" data-tab="diagnostics">Diagnostics</div>
                 </div>
@@ -1136,7 +1136,7 @@ <h3>Settings</h3>
                             <div class="settings-row"><label for="pref-uiLanguage" data-i18n="settings.language.label">Language (preview)</label>
                                 <select id="pref-uiLanguage"><option value="en">English</option><option value="zh-TW" lang="zh-TW">繁體中文（台灣）</option></select>
                             </div>
-                            <div class="settings-status" data-i18n="settings.language.hint">Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms and SSH login. Other areas remain in English.</div>
+                            <div class="settings-status" data-i18n="settings.language.hint">Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms, SSH login and profile/route editors. Other areas remain in English.</div>
                             <div class="settings-row"><label for="pref-useCustomMenu">Enable custom context menu</label><input type="checkbox" id="pref-useCustomMenu"></div>
                             <div class="settings-row"><label for="pref-copyOnSelect">Copy on select</label><input type="checkbox" id="pref-copyOnSelect"></div>
                             <div class="settings-row"><label for="pref-enablePicPreview">Enable pic preview</label><input type="checkbox" id="pref-enablePicPreview"></div>
@@ -1210,38 +1210,38 @@ <h3>Settings</h3>
                         </fieldset>
                     </div>
                     <div class="settings-tab" id="tab-ssh-sessions">
-                        <div class="settings-status" id="ssh-profile-status">Profiles are stored only in this browser.</div>
+                        <div class="settings-status" id="ssh-profile-status" data-i18n="ssh.profiles.stored">Profiles are stored only in this browser.</div>
                         <fieldset class="settings-fieldset">
-                            <legend>SSH Sessions</legend>
+                            <legend data-i18n="ssh.profiles.title">SSH profiles</legend>
                             <div class="ssh-profile-manager">
                                 <div>
                                     <div class="ssh-profile-list" id="ssh-profile-list"></div>
                                     <div class="ssh-profile-actions" style="margin-top:9px;">
-                                        <button type="button" id="ssh-profile-up" aria-label="Move profile up">Move Up</button>
-                                        <button type="button" id="ssh-profile-down" aria-label="Move profile down">Move Down</button>
+                                        <button type="button" id="ssh-profile-up" aria-label="Move profile up" data-i18n-aria-label="ssh.profiles.move_up_label" data-i18n="ssh.profiles.move_up">Move Up</button>
+                                        <button type="button" id="ssh-profile-down" aria-label="Move profile down" data-i18n-aria-label="ssh.profiles.move_down_label" data-i18n="ssh.profiles.move_down">Move Down</button>
                                     </div>
                                 </div>
                                 <div class="ssh-profile-editor">
-                                    <label>Profile name<input type="text" id="ssh-profile-name" maxlength="64" autocomplete="off"></label>
+                                    <label><span data-i18n="ssh.profiles.name">Profile name</span><input type="text" id="ssh-profile-name" maxlength="64" autocomplete="off"></label>
                                     <div class="ssh-profile-route-summary" id="ssh-profile-route-summary"></div>
                                     <div id="ssh-profile-node" hidden></div>
                                     <div class="ssh-profile-actions">
-                                        <button type="button" id="ssh-profile-edit-route">Edit connection…</button>
+                                        <button type="button" id="ssh-profile-edit-route" data-i18n="ssh.profiles.edit">Edit connection…</button>
                                     </div>
                                     <div class="settings-status" id="ssh-profile-help"></div>
                                     <div class="ssh-profile-actions">
-                                        <button type="button" id="ssh-profile-create">New session</button>
-                                        <button type="button" class="primary" id="ssh-profile-save">Save name</button>
-                                        <button type="button" class="danger" id="ssh-profile-delete">Delete</button>
+                                        <button type="button" id="ssh-profile-create" data-i18n="ssh.profiles.create">New profile</button>
+                                        <button type="button" class="primary" id="ssh-profile-save" data-i18n="ssh.profiles.save_name">Save name</button>
+                                        <button type="button" class="danger" id="ssh-profile-delete" data-i18n="ssh.profiles.delete">Delete</button>
                                     </div>
                                 </div>
                             </div>
                         </fieldset>
                         <fieldset class="settings-fieldset">
-                            <legend>History</legend>
+                            <legend data-i18n="ssh.profiles.history">History</legend>
                             <div class="settings-row">
                                 <label id="ssh-history-count">0 / 6 recent successful connections</label>
-                                <button type="button" class="settings-inline-action" id="ssh-history-clear">Clear History</button>
+                                <button type="button" class="settings-inline-action" id="ssh-history-clear" data-i18n="ssh.profiles.clear_history">Clear History</button>
                             </div>
                         </fieldset>
                     </div>
@@ -4812,7 +4812,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             }
 
             function setSshProfileStatus(message, isError = false) {
-                sshProfileStatus.innerText = message || 'Profiles are stored only in this browser.';
+                sshProfileStatus.innerText = message || t('ssh.profiles.stored');
                 sshProfileStatus.style.color = isError ? '#ff9f0a' : '#aaa';
             }
 
@@ -5240,8 +5240,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 sshProfileEditorContext = context.key;
                 clearSshProfileEditor(true);
                 setSshProfileStatus(context.fromConnection
-                    ? 'New direct session from the current SSH tab. Select a profile to edit an existing entry.'
-                    : 'New session from Quick Connect. Select a profile to edit an existing entry.');
+                    ? t('ssh.profiles.from_tab')
+                    : t('ssh.profiles.from_form'));
                 return true;
             }
 
@@ -5265,7 +5265,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 editingSshProfileId = profile.id;
                 sshProfileNameInput.value = profile.name;
                 await loadSshProfileNode();
-                if (isCurrentSshProfileEditor(version)) setSshProfileStatus(`Selected ${profile.name}.`);
+                if (isCurrentSshProfileEditor(version)) setSshProfileStatus(t('ssh.profiles.selected', { name: profile.name }));
             }
 
             async function loadSshProfileNode(target = null) {
@@ -5281,12 +5281,12 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     const snapshot = await SshRoutes.load(openSshSessionsDb, normalizeLegacySshSessionState, true);
                     if (!isCurrentSshProfileEditor(version)) return;
                     if (snapshot.state.revision !== sshSessionState.revision) {
-                        throw new Error('SSH settings changed in another window. Reload before editing.');
+                        throw new Error(t('ssh.profiles.changed_elsewhere'));
                     }
                     const baseState = SshRoutes.clone(snapshot.state);
                     let entry = snapshot.state.profiles.find(item => item.id === profileId);
                     if (!entry) {
-                        if (profileId) throw new Error('This SSH entry was removed. Reload before editing.');
+                        if (profileId) throw new Error(t('ssh.profiles.removed_edit'));
                         const node = { id: SshRoutes.id(), nextNodeId: null, hostKeyAlias: '',
                             endpoint: target || { host: '', port: '22', username: '' }, authentication: { method: 'password' } };
                         entry = { id: SshRoutes.id(), name: '', startNodeId: node.id,
@@ -5299,7 +5299,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     const draft = { state: snapshot.state, baseState, isNew: !profileId, entryId: entry.id, node: route.path[0],
                         savedKeys: snapshot.keys, newKeys: new Map(), pending: 0, saving: false, fields: null };
                     sshProfileNodeDraft = draft;
-                    draft.fields = SshRoutes.nodeFields({ parent: sshProfileNode, role: 'Target', node: draft.node,
+                    draft.fields = SshRoutes.nodeFields({ parent: sshProfileNode, role: t('ssh.login.target'), translate: t, node: draft.node,
                         profiles: draft.state.profiles, savedKeys: draft.savedKeys, newKeys: draft.newKeys,
                         keyAllowed: isBrowserSshKeyAllowedByPolicy(), createKey: createTemporarySshKey,
                         copyPublicKey: value => copyToClipboard(value), editorId: SshRoutes.id(),
@@ -5319,7 +5319,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
 
             function readSshProfileNodeDraft() {
                 const current = sshProfileNodeDraft;
-                if (!current || current.pending || current.saving) throw new Error('Wait for the SSH settings to finish loading or saving.');
+                if (!current || current.pending || current.saving) throw new Error(t('ssh.profiles.wait'));
                 const state = SshRoutes.clone(current.state);
                 const entry = state.profiles.find(item => item.id === current.entryId);
                 const node = { ...current.node, ...current.fields.read() };
@@ -5344,14 +5344,14 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const loadedVersion = sshProfileEditorVersion;
                 await loading;
                 if (isCurrentSshProfileEditor(loadedVersion)) {
-                    setSshProfileStatus(`Saved ${findSshProfile(entryId).name}. Changes apply to the next connection.`);
+                    setSshProfileStatus(t('ssh.profiles.saved_next', { name: findSshProfile(entryId).name }));
                 }
             }
 
             function describeSshProfile(profile) {
                 const route = SshRoutes.resolve(sshSessionState, profile.startNodeId);
                 const endpoints = route.path.map(node => `${node.endpoint.username}@${node.endpoint.host}:${node.endpoint.port}`);
-                return `Core host → ${endpoints.join(' → ')}${route.error ? ' · Route needs repair' : ''}`;
+                return `Core host → ${endpoints.join(' → ')}${route.error ? ` · ${t('ssh.profiles.route_repair')}` : ''}`;
             }
 
             async function editSshProfileRoute() {
@@ -5372,13 +5372,13 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     snapshot = await SshRoutes.load(openSshSessionsDb, normalizeLegacySshSessionState, true);
                     if (!isCurrentSshProfileEditor(version)) return;
                     if (snapshot.state.revision !== sshSessionState.revision) {
-                        throw new Error('SSH settings changed in another window. Reload before editing.');
+                        throw new Error(t('ssh.profiles.changed_elsewhere'));
                     }
                     const profile = snapshot.state.profiles.find(item => item.id === profileId);
-                    if (!profile) throw new Error('This SSH entry was removed. Reload before editing.');
+                    if (!profile) throw new Error(t('ssh.profiles.removed_edit'));
                     profile.name = sshProfileNameInput.value.trim();
                 }
-                const editor = SshRoutes.edit({ state: snapshot.state, entryId: prepared?.entryId || profileId, target,
+                const editor = SshRoutes.edit({ translate: t, state: snapshot.state, entryId: prepared?.entryId || profileId, target,
                     baseState: inline?.baseState || snapshot.state,
                     temporaryKeys: prepared?.temporaryKeys || [],
                     mode: 'manage', keys: snapshot.keys, keyAllowed: isBrowserSshKeyAllowedByPolicy(),
@@ -5394,7 +5394,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 if (!sshSessionState.profiles.length) {
                     const empty = document.createElement('div');
                     empty.className = 'ssh-profile-list-empty';
-                    empty.innerText = 'No saved SSH profiles.';
+                    empty.innerText = t('ssh.profiles.empty');
                     sshProfileList.appendChild(empty);
                 } else {
                     sshSessionState.profiles.forEach(profile => {
@@ -5418,24 +5418,24 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const profile = findSshProfile(editingSshProfileId);
                 const target = getSshProfileEditorContext().target;
                 sshProfileRouteSummary.textContent = profile ? describeSshProfile(profile)
-                    : target.host ? `New direct session: ${target.username}@${target.host}:${target.port}`
-                    : 'Select a saved entry, or create a new session.';
+                    : target.host ? t('ssh.profiles.new_direct', { username: target.username, host: target.host, port: target.port })
+                    : t('ssh.profiles.select_or_create');
                 const direct = !profile || SshRoutes.resolve(sshSessionState, profile.startNodeId).path.length === 1;
                 const busy = sshProfileNodeLoading || !!(sshProfileNodeDraft?.pending || sshProfileNodeDraft?.saving);
                 sshProfileNode.hidden = !direct;
                 sshProfileNode.inert = !!sshProfileNodeDraft?.saving;
                 sshProfileNameInput.disabled = !!sshProfileNodeDraft?.saving;
-                sshProfileEditRouteBtn.textContent = direct ? 'Add jump node…' : 'Edit connection…';
+                sshProfileEditRouteBtn.textContent = direct ? t('ssh.profiles.add_jump') : t('ssh.profiles.edit');
                 sshProfileEditRouteBtn.disabled = busy || (direct && !sshProfileNodeDraft);
-                sshProfileSaveBtn.textContent = direct ? 'Save' : 'Save name';
+                sshProfileSaveBtn.textContent = direct ? t('ssh.profiles.save') : t('ssh.profiles.save_name');
                 sshProfileSaveBtn.disabled = busy || (direct ? !sshProfileNodeDraft : selectedIndex < 0);
                 sshProfileHelp.textContent = direct
-                    ? 'Save stores the name, connection settings and selected key. Changes apply to the next connection.'
-                    : 'Save name only renames this entry. Edit connection opens all route nodes and their key settings.';
+                    ? t('ssh.profiles.save_help')
+                    : t('ssh.profiles.rename_help');
                 sshProfileDeleteBtn.disabled = selectedIndex < 0;
                 sshProfileUpBtn.disabled = selectedIndex <= 0;
                 sshProfileDownBtn.disabled = selectedIndex < 0 || selectedIndex >= sshSessionState.profiles.length - 1;
-                sshHistoryCount.innerText = `${sshSessionState.history.length} / ${SSH_HISTORY_LIMIT} recent successful connections`;
+                sshHistoryCount.innerText = t('ssh.profiles.history_count', { count: sshSessionState.history.length, limit: SSH_HISTORY_LIMIT });
                 sshHistoryClearBtn.disabled = sshSessionState.history.length === 0;
             }
 
@@ -5486,8 +5486,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     .catch(err => {
                         sshSessionState = normalizeSshSessionState(null);
                         renderSshSessionState();
-                        setSshSessionMessage(err.message || 'SSH Sessions storage is unavailable.', true);
-                        setSshProfileStatus(err.message || 'SSH Sessions storage is unavailable.', true);
+                        setSshSessionMessage(err.message || t('ssh.profiles.storage_unavailable'), true);
+                        setSshProfileStatus(err.message || t('ssh.profiles.storage_unavailable'), true);
                         return sshSessionState;
                     });
                 return sshSessionReady;
@@ -5551,10 +5551,10 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     const node = SshRoutes.checkedPath(prepared.state, entry)[0];
                     SshRoutes.publicNode(node);
                     if (node.authentication.method === 'browser-key' && !node.authentication.keyRef) {
-                        throw new Error('Choose or create a browser key for this node.');
+                        throw new Error(t('ssh.profiles.choose_key'));
                     }
                     if (!entry.name) entry.name = normalizeSshProfileName(`${node.endpoint.username}@${node.endpoint.host}`);
-                    if (entry.name.length > SSH_PROFILE_NAME_MAX_LENGTH) throw new Error(`Profile name must be ${SSH_PROFILE_NAME_MAX_LENGTH} characters or fewer.`);
+                    if (entry.name.length > SSH_PROFILE_NAME_MAX_LENGTH) throw new Error(t('ssh.profiles.name_max', { limit: SSH_PROFILE_NAME_MAX_LENGTH }));
                     inline.saving = true;
                     renderSshProfileManager();
                     try { await persistSshProfileRoute(prepared.state, entry.id, prepared.temporaryKeys, version); }
@@ -5564,15 +5564,15 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 if (!findSshProfile(profileId)) return;
                 const name = sshProfileNameInput.value.trim();
                 if (!name || name.length > SSH_PROFILE_NAME_MAX_LENGTH) {
-                    setSshProfileStatus(`Profile name must be 1–${SSH_PROFILE_NAME_MAX_LENGTH} characters.`, true);
+                    setSshProfileStatus(t('ssh.profiles.name_length', { limit: SSH_PROFILE_NAME_MAX_LENGTH }), true);
                     return;
                 }
                 await updateSshSessionState(nextState => {
                     const profile = nextState.profiles.find(item => item.id === profileId);
-                    if (!profile) throw new Error('This SSH entry was removed. Reload before saving.');
+                    if (!profile) throw new Error(t('ssh.profiles.removed_save'));
                     profile.name = name;
                 });
-                if (isCurrentSshProfileEditor(version)) setSshProfileStatus(`Saved ${name}.`);
+                if (isCurrentSshProfileEditor(version)) setSshProfileStatus(t('ssh.profiles.saved', { name }));
             }
 
             async function deleteEditingSshProfile() {
@@ -5581,8 +5581,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 if (!profile) return;
                 if (profile.keyId) requireUnreferencedSshKey(profile);
                 const prompt = profile.keyId
-                    ? `Delete SSH profile ${profile.name} and its non-recoverable browser private key?`
-                    : `Delete SSH profile ${profile.name}?`;
+                    ? t('ssh.profiles.confirm_delete_key', { name: profile.name })
+                    : t('ssh.profiles.confirm_delete', { name: profile.name });
                 if (!window.confirm(prompt)) return;
                 const keyRecord = profile.keyId ? await loadSshKeyRecord(profile.keyId) : null;
                 const keyChanges = keyRecord && keyRecord.ownerProfileId === profile.id
@@ -5596,7 +5596,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 }
                 if (isCurrentSshProfileEditor(version)) {
                     clearSshProfileEditor(false);
-                    setSshProfileStatus(`Deleted ${profile.name}.`);
+                    setSshProfileStatus(t('ssh.profiles.deleted', { name: profile.name }));
                 }
             }
 
@@ -5605,15 +5605,15 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     const path = SshRoutes.resolve(sshSessionState, entry.startNodeId).path;
                     return path.some(node => node.authentication.keyRef?.ownerProfileId === owner.id && entry.id !== owner.id);
                 });
-                if (dependents.length) throw new Error(`Browser key is used by: ${dependents.map(entry => entry.name || entry.host).join(', ')}. Change those routes before removing or rebinding the key.`);
+                if (dependents.length) throw new Error(t('ssh.profiles.key_dependents', { entries: dependents.map(entry => entry.name || entry.host).join(', ') }));
             }
 
             async function clearSshHistory() {
-                if (!sshSessionState.history.length || !window.confirm('Clear all SSH connection history?')) return;
+                if (!sshSessionState.history.length || !window.confirm(t('ssh.profiles.confirm_clear'))) return;
                 await updateSshSessionState(nextState => {
                     nextState.history = [];
                 });
-                setSshProfileStatus('SSH history cleared.');
+                setSshProfileStatus(t('ssh.profiles.history_cleared'));
             }
 
             async function moveEditingSshProfile(offset) {
@@ -5636,7 +5636,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     inline.state = SshRoutes.clone(sshSessionState);
                     inline.baseState = SshRoutes.clone(sshSessionState);
                 }
-                setSshProfileStatus('Profile order updated.');
+                setSshProfileStatus(t('ssh.profiles.order_updated'));
             }
 
             function populateUartFields() {
@@ -8419,9 +8419,9 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     const terminalId = activeTerminalId;
                     await sshSessionWriteQueue.catch(() => {});
                     const snapshot = await SshRoutes.load(openSshSessionsDb, normalizeLegacySshSessionState, true);
-                    if (snapshot.state.revision !== sshSessionState.revision) throw new Error('SSH settings changed in another window. Reload before editing.');
+                    if (snapshot.state.revision !== sshSessionState.revision) throw new Error(t('ssh.profiles.changed_elsewhere'));
                     if (revision !== sshConnectionFormRevision || terminalId !== activeTerminalId) return;
-                    SshRoutes.edit({ state: sshRouteDraft?.state || snapshot.state, entryId: currentSshRouteEntry()?.id,
+                    SshRoutes.edit({ translate: t, state: sshRouteDraft?.state || snapshot.state, entryId: currentSshRouteEntry()?.id,
                         temporaryKeys: sshRouteDraft?.temporaryKeys || [], saveRoute: sshRouteDraft?.saveRoute || false,
                         target: getCurrentSshTarget(),
                         keys: snapshot.keys, keyAllowed: isBrowserSshKeyAllowedByPolicy(),
@@ -8430,7 +8430,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                         hostIdentity: { request: requestSshHostIdentity, terminalId },
                         onDone: (state, entryId, temporaryKeys, saveRoute) => {
                             if (revision !== sshConnectionFormRevision || terminalId !== activeTerminalId) {
-                                throw new Error('The connection changed. Cancel and reopen the route editor.');
+                                throw new Error(t('ssh.profiles.connection_changed'));
                             }
                             sshRouteDraft = { state, entryId, temporaryKeys, saveRoute };
                             selectedSshRouteEntry = entryId;
@@ -8463,25 +8463,25 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             };
             sshProfileCreateBtn.onclick = () => {
                 clearSshProfileEditor(true);
-                setSshProfileStatus('New direct session. Save creates a new entry.');
+                setSshProfileStatus(t('ssh.profiles.new_hint'));
             };
             sshProfileEditRouteBtn.onclick = () => {
-                editSshProfileRoute().catch(err => setSshProfileStatus(err.message || 'Profile could not be edited.', true));
+                editSshProfileRoute().catch(err => setSshProfileStatus(err.message || t('ssh.profiles.edit_failed'), true));
             };
             sshProfileSaveBtn.onclick = () => {
-                saveSshProfileEditor().catch(err => setSshProfileStatus(err.message || 'Profile could not be saved.', true));
+                saveSshProfileEditor().catch(err => setSshProfileStatus(err.message || t('ssh.profiles.save_failed'), true));
             };
             sshProfileDeleteBtn.onclick = () => {
-                deleteEditingSshProfile().catch(err => setSshProfileStatus(err.message || 'Profile could not be deleted.', true));
+                deleteEditingSshProfile().catch(err => setSshProfileStatus(err.message || t('ssh.profiles.delete_failed'), true));
             };
             sshProfileUpBtn.onclick = () => {
-                moveEditingSshProfile(-1).catch(err => setSshProfileStatus(err.message || 'Profile could not be moved.', true));
+                moveEditingSshProfile(-1).catch(err => setSshProfileStatus(err.message || t('ssh.profiles.move_failed'), true));
             };
             sshProfileDownBtn.onclick = () => {
-                moveEditingSshProfile(1).catch(err => setSshProfileStatus(err.message || 'Profile could not be moved.', true));
+                moveEditingSshProfile(1).catch(err => setSshProfileStatus(err.message || t('ssh.profiles.move_failed'), true));
             };
             sshHistoryClearBtn.onclick = () => {
-                clearSshHistory().catch(err => setSshProfileStatus(err.message || 'SSH history could not be cleared.', true));
+                clearSshHistory().catch(err => setSshProfileStatus(err.message || t('ssh.profiles.clear_failed'), true));
             };
             if (settingsExportBtn) {
                 settingsExportBtn.onclick = () => {
diff --git a/tests/agent_browser_smoke.py b/tests/agent_browser_smoke.py
index a9cc07d..ffd6b49 100644
--- a/tests/agent_browser_smoke.py
+++ b/tests/agent_browser_smoke.py
@@ -4948,7 +4948,7 @@ def test_ssh_profile_picker_and_settings_save_semantics(browser, access_url):
             })"""
         )
         check(
-            preloaded_editor == {'name': 'builder@build.example', 'summary': 'New direct session: builder@build.example:22', 'saveDisabled': False},
+            preloaded_editor == {'name': 'builder@build.example', 'summary': 'New direct profile: builder@build.example:22', 'saveDisabled': False},
             'SSH Settings did not preload the active SSH tab as a create-only draft',
         )
         page.click('#ssh-profile-list button[data-profile-id="profile-a"]')
diff --git a/tests/ssh_editor_i18n_browser_smoke.py b/tests/ssh_editor_i18n_browser_smoke.py
new file mode 100644
index 0000000..b6f0279
--- /dev/null
+++ b/tests/ssh_editor_i18n_browser_smoke.py
@@ -0,0 +1,313 @@
+"""Check localized SSH editing, persistence boundaries, and deletion scope."""
+from pathlib import Path
+import sys
+from unittest.mock import patch
+
+sys.path.insert(0, str(Path(__file__).resolve().parent))
+import agent_browser_smoke as fixture
+import ssh_profile_context_browser_smoke as profiles_fixture
+import ssh_routes_browser_smoke as routes_fixture
+from connection_i18n_browser_smoke import new_module_page
+
+
+ENTRY_NAME = 'Entry <b>& {name}'
+
+
+def seed_state():
+    def node(node_id, host, next_id=None):
+        return {'id':node_id, 'endpoint':{'host':host, 'port':'22', 'username':'fixture-user'},
+                'authentication':{'method':'password'}, 'hostKeyAlias':'', 'nextNodeId':next_id}
+    return {'version':2, 'revision':0,
+            'profiles':[{'id':'entry-a','name':ENTRY_NAME,'startNodeId':'jump-a'},
+                        {'id':'entry-b','name':'Other entry','startNodeId':'jump-b'}],
+            'history':[{'id':'history-a','name':'Recent entry','startNodeId':'history-node','lastUsedAt':'2026-09-20T00:00:00Z'}],
+            'nodes':[node('jump-a','a.test','shared-target'), node('jump-b','b.test','shared-target'),
+                     node('shared-target','target.test'), node('history-node','history.test'), node('orphan','orphan.test')]}
+
+
+def new_editor_page(browser, url, locale, prepare=False):
+    context, page = fixture.new_page(browser, url, ui_language=locale)
+    if prepare:
+        page.click('#new-tab-btn')
+    page.evaluate('() => window.terminalTest.captureSshStartsForTest()')
+    page.evaluate('state => window.terminalTest.setSshSessionState(state)', seed_state())
+    if prepare:
+        routes_fixture.show_ssh(page)
+    page.evaluate('() => window.terminalTest.clearEmitted()')
+    return context, page
+
+
+def state(page):
+    return page.evaluate('() => window.terminalTest.getSshSessionState()')
+
+
+def message(page, key, params=None):
+    value = page.evaluate("""({key,params}) => {
+        const locale = document.documentElement.lang;
+        return StandTermI18n.create(StandTermMessages, locale).t(key, params);
+    }""", {'key':key,'params':params or {}})
+    assert value != key, f'Missing reviewed translation: {key}'
+    return value
+
+
+def edit_host(page, index, host):
+    card = page.locator('#ssh-route-editor fieldset').nth(index)
+    toggle = card.locator('.ssh-route-card-toggle')
+    if toggle.get_attribute('aria-expanded') != 'true':
+        toggle.click()
+    card.locator('.ssh-route-fields > label > input').first.fill(host)
+
+
+def finish(page, cancel=False):
+    actions = page.locator('#ssh-route-editor .ssh-route-actions')
+    actions.locator('button').first.click() if cancel else actions.locator('button.primary').click()
+    page.wait_for_selector('#ssh-route-editor', state='detached')
+
+
+def paths(value):
+    nodes = {node['id']:node for node in value['nodes']}
+    result = {}
+    for entry in value['profiles']:
+        path, current = [], entry['startNodeId']
+        while current:
+            assert current not in [node['id'] for node in path], 'Fixture path contains a cycle'
+            path.append(nodes[current])
+            current = nodes[current]['nextNodeId']
+        result[entry['id']] = path
+    return result
+
+
+def active_connection(page):
+    return page.evaluate("""() => ({socket:window.terminalTest.getSocketState(),
+        terminal:window.terminalTest.getActiveAgentState()})""")
+
+
+def test_preparation_done_and_cancel_do_not_persist(browser, url):
+    for locale in ['en','zh-TW']:
+        context, page = new_editor_page(browser, url, locale, prepare=True)
+        try:
+            routes_fixture.select(page, 'entry-a')
+            before = state(page)
+            page.click('#ssh-edit-route')
+            editor = page.locator('#ssh-route-editor')
+            assert editor.locator('button.primary').inner_text() == message(page, 'ssh.editor.done')
+            assert editor.locator('.ssh-route-actions button').first.inner_text() == message(page, 'common.cancel')
+            assert editor.locator('legend').all_text_contents() == (
+                ['中繼站 1','目標主機'] if locale == 'zh-TW' else ['Jump 1','Target'])
+            assert editor.locator('fieldset').evaluate_all('cards => cards.map(card => card.dataset.role)') == ['Jump 1','Target']
+            assert editor.locator('.ssh-route-heading input').input_value() == ENTRY_NAME
+            assert editor.locator('b').count() == 0
+            edit_host(page, 1, 'temporary.test')
+            editor.locator('.ssh-route-actions input[type=checkbox]').check()
+            finish(page)
+            assert state(page) == before, 'Done persisted a preparation draft before Connect'
+            prepared = page.evaluate('() => window.terminalTest.prepareSshConnectionForTest()')
+            assert [node['host'] for node in prepared['route']] == ['a.test','temporary.test']
+            assert state(page) == before
+            page.click('#ssh-edit-route')
+            edit_host(page, 1, 'cancelled.test')
+            finish(page, cancel=True)
+            assert state(page) == before, 'Cancel persisted a preparation edit'
+            prepared = page.evaluate('() => window.terminalTest.prepareSshConnectionForTest()')
+            assert [node['host'] for node in prepared['route']] == ['a.test','temporary.test']
+            assert not fixture.get_emitted(page, 'start_ssh'), 'Editing a route started a connection'
+        finally:
+            fixture.close_context(context)
+
+
+def test_managed_save_and_stale_draft_preserve_active_connection(browser, url):
+    for locale in ['en','zh-TW']:
+        context, page = new_editor_page(browser, url, locale)
+        try:
+            before_connection = active_connection(page)
+            profiles_fixture.open_profiles(page)
+            page.click('#ssh-profile-list [data-profile-id="entry-a"]')
+            original = state(page)
+            page.click('#ssh-profile-edit-route')
+            assert page.locator('#ssh-route-editor button.primary').inner_text() == message(page, 'ssh.editor.save_route')
+            assert page.locator('#ssh-route-editor .ssh-route-actions input[type=checkbox]').count() == 0
+            edit_host(page, 1, 'managed.test')
+            finish(page)
+            saved = state(page)
+            assert [entry['id'] for entry in saved['profiles']] == ['entry-a','entry-b']
+            assert [node['endpoint']['host'] for node in paths(saved)['entry-a']] == ['a.test','managed.test']
+            assert paths(saved)['entry-b'] == paths(original)['entry-b']
+            assert all(node in saved['nodes'] for node in original['nodes']), 'Entry-only edit changed existing shared nodes'
+            assert active_connection(page) == before_connection, 'Managing a saved route changed the active connection'
+
+            page.click('#ssh-profile-edit-route')
+            edit_host(page, 1, 'unsaved.test')
+            page.evaluate("""async () => {
+                const current = await window.terminalTest.getSshSessionState();
+                current.profiles[1].name = 'Concurrent change';
+                await window.terminalTest.setSshSessionState(current);
+            }""")
+            concurrent = state(page)
+            page.locator('#ssh-route-editor button.primary').click()
+            stale_message = 'SSH settings changed in another window. Reload before saving.'
+            page.wait_for_function('expected => document.querySelector("#ssh-route-editor > [role=status]").textContent === expected', arg=stale_message)
+            assert state(page) == concurrent, 'Stale editor overwrote a newer stored revision'
+            assert page.locator('#ssh-route-editor fieldset').last.locator('.ssh-route-fields > label > input').first.input_value() == 'unsaved.test'
+            assert page.locator('#ssh-route-editor button.primary').is_enabled()
+            finish(page, cancel=True)
+            assert state(page) == concurrent
+            assert active_connection(page) == before_connection
+        finally:
+            fixture.close_context(context)
+
+
+def test_editor_scope_copy_and_reference_preserve_topology(browser, url):
+    for locale in ['en','zh-TW']:
+        context, page = new_module_page(browser, locale)
+        try:
+            page.add_script_tag(path=str(fixture.ROOT / 'static/js/standterm-ssh-route-editor.js'))
+            page.evaluate('locale => {document.documentElement.lang = locale;}', locale)
+            for scope in ['entry','all']:
+                for copied in [False,True]:
+                    original = seed_state()
+                    original['profiles'][0]['startNodeId'] = 'jump-a'
+                    original['profiles'][1]['startNodeId'] = 'jump-b'
+                    target_key = page.evaluate('endpoint => StandTermSshRoutes.endpointKey(endpoint)', original['nodes'][1]['endpoint'])
+                    original['nodes'][1]['authentication'] = {'method':'browser-key','keyRef':{
+                        'kind':'credential','keyId':'fixture-key','targetKey':target_key}}
+                    page.evaluate("""original => {
+                        window.editorOriginal = original; window.editorResult = null;
+                        StandTermSshRoutes.edit({state:original,entryId:'entry-a',target:{},translate:fixtureTranslate,
+                            onDone:draft => {editorResult = structuredClone(draft);}});
+                    }""", original)
+                    editor = page.locator('#ssh-route-editor')
+                    editor.locator(':scope > details > summary').click()
+                    selector = editor.locator(':scope > details > select')
+                    assert selector.locator('option').evaluate_all('items => items.map(item => item.value)') == ['entry','all']
+                    assert selector.locator('option').all_text_contents() == [
+                        message(page, 'ssh.editor.scope_entry'), message(page, 'ssh.editor.scope_all')]
+                    selector.select_option(scope)
+                    if scope == 'all':
+                        assert ENTRY_NAME in editor.inner_text()
+                        assert '{name}' in editor.inner_text() and editor.locator('b').count() == 0
+                    edit_host(page, 0, 'changed-a.test')
+                    advanced = editor.locator('fieldset').first.locator('details').last
+                    advanced.locator('summary').click()
+                    advanced.locator('select').last.select_option('entry-b')
+                    assert advanced.locator('option[value="entry-a"]').inner_text() == ENTRY_NAME
+                    assert editor.locator('b').count() == 0
+                    assert advanced.locator('.ssh-route-buttons > button').all_text_contents() == [
+                        message(page, 'ssh.editor.reference_route'), message(page, 'ssh.editor.copy_route')]
+                    advanced.locator('.ssh-route-buttons > button').nth(1 if copied else 0).click()
+                    finish(page)
+                    result = page.evaluate('() => editorResult')
+                    assert page.evaluate('() => editorOriginal') == original, 'Editor mutated its input snapshot'
+                    resolved = paths(result)
+                    assert [node['endpoint']['host'] for node in resolved['entry-a']] == ['changed-a.test','b.test','target.test']
+                    assert resolved['entry-b'] == paths(original)['entry-b']
+                    assert (resolved['entry-a'][0]['id'] == 'jump-a') == (scope == 'all')
+                    assert (resolved['entry-a'][1]['id'] == 'jump-b') == (not copied)
+                    assert (resolved['entry-a'][2]['id'] == 'shared-target') == (not copied)
+                    assert resolved['entry-a'][1]['authentication'] == original['nodes'][1]['authentication']
+                    assert next(node for node in result['nodes'] if node['id'] == 'orphan') == original['nodes'][-1]
+            for mode in ['prepare','manage']:
+                cyclic = seed_state()
+                cyclic['nodes'][2]['nextNodeId'] = 'jump-a'
+                page.evaluate("""({cyclic,mode}) => {
+                    window.editorDoneCalls = 0;
+                    StandTermSshRoutes.edit({state:cyclic,entryId:'entry-a',target:{},mode,
+                        translate:fixtureTranslate,onDone:() => {editorDoneCalls += 1;}});
+                }""", {'cyclic':cyclic,'mode':mode})
+                editor = page.locator('#ssh-route-editor')
+                completion = message(page, 'ssh.editor.save_route' if mode == 'manage' else 'ssh.editor.done')
+                assert editor.locator('button.primary').inner_text() == completion
+                editor.locator('fieldset').first.get_by_role('button', name=message(page, 'ssh.editor.move_down'), exact=True).click()
+                status = editor.locator(':scope > [role=status]')
+                assert status.inner_text() == message(page, 'ssh.editor.review_before_reorder', {'action':completion})
+                assert page.evaluate('() => editorDoneCalls') == 0
+                editor.locator('button.primary').click()
+                assert status.locator('button').count() > 0
+                assert page.evaluate('() => editorDoneCalls') == 0, 'Offering cycle repairs called onDone'
+                status.locator('button').first.click()
+                assert status.inner_text() == message(page, 'ssh.editor.repair_selected', {'action':completion})
+                if mode == 'manage':
+                    assert message(page, 'ssh.editor.done') not in status.inner_text()
+                assert page.evaluate('() => editorDoneCalls') == 0, 'Selecting a repair called onDone before confirmation'
+                finish(page, cancel=True)
+        finally:
+            fixture.close_context(context)
+
+
+def test_profile_delete_and_history_clear_have_exact_scope(browser, url):
+    for locale in ['en','zh-TW']:
+        context, page = new_editor_page(browser, url, locale)
+        try:
+            before_connection = active_connection(page)
+            routes_fixture.show_ssh(page)
+            profiles_fixture.open_profiles(page)
+            page.click('#ssh-profile-list [data-profile-id="entry-a"]')
+            page.click('#ssh-profile-edit-route')
+            target = page.locator('#ssh-route-editor fieldset').last
+            target.locator('.ssh-route-card-toggle').click()
+            target.locator('.ssh-key-toggle input').check()
+            page.wait_for_function('() => document.querySelector("#ssh-route-editor fieldset:last-of-type .ssh-node-public-key").value.startsWith("ssh-ed25519 ")')
+            finish(page)
+            original = state(page)
+            key_ref = paths(original)['entry-a'][-1]['authentication']['keyRef']
+            assert key_ref['kind'] == 'credential'
+            assert page.evaluate('keyId => window.terminalTest.browserSshKeyRecordExistsForTest(keyId)', key_ref['keyId'])
+            prompts = []
+            def dismiss(dialog):
+                prompts.append(dialog.message)
+                dialog.dismiss()
+            def accept(dialog):
+                prompts.append(dialog.message)
+                dialog.accept()
+            page.once('dialog', dismiss)
+            page.click('#ssh-profile-delete')
+            assert prompts[-1] == message(page, 'ssh.profiles.confirm_delete', {'name':ENTRY_NAME})
+            assert state(page) == original, 'Cancelled profile deletion changed storage'
+            page.once('dialog', accept)
+            page.click('#ssh-profile-delete')
+            page.wait_for_function('async () => (await window.terminalTest.getSshSessionState()).profiles.length === 1')
+            deleted = state(page)
+            assert deleted['profiles'] == [original['profiles'][1]]
+            assert deleted['history'] == original['history'] and deleted['nodes'] == original['nodes']
+            page.once('dialog', dismiss)
+            page.click('#ssh-history-clear')
+            assert prompts[-1] == message(page, 'ssh.profiles.confirm_clear')
+            assert state(page) == deleted, 'Cancelled history clearing changed storage'
+            page.once('dialog', accept)
+            page.click('#ssh-history-clear')
+            page.wait_for_function('async () => (await window.terminalTest.getSshSessionState()).history.length === 0')
+            cleared = state(page)
+            assert cleared['history'] == []
+            assert cleared['profiles'] == deleted['profiles'] and cleared['nodes'] == deleted['nodes']
+            assert page.evaluate('keyId => window.terminalTest.browserSshKeyRecordExistsForTest(keyId)', key_ref['keyId']), 'Deleting a profile or history deleted an independent credential'
+            assert active_connection(page) == before_connection
+            assert not any(event['event'] in {'start_ssh','cancel_ssh_start','stop_ssh','ssh_input'} for event in fixture.get_emitted(page))
+        finally:
+            fixture.close_context(context)
+
+
+def main():
+    original_popen = fixture.subprocess.Popen
+    def launch(args, **kwargs):
+        if len(args) > 1 and args[1] == 'app.py':
+            args = ['--default-connection' if value == '--force-connection' else value for value in args]
+        return original_popen(args, **kwargs)
+    with patch.object(fixture.subprocess, 'Popen', side_effect=launch):
+        proc, url = fixture.start_server()
+    try:
+        with fixture.load_playwright()[0]() as playwright:
+            browser = playwright.chromium.launch(headless=True)
+            try:
+                for test in [test_preparation_done_and_cancel_do_not_persist,
+                             test_managed_save_and_stale_draft_preserve_active_connection,
+                             test_editor_scope_copy_and_reference_preserve_topology,
+                             test_profile_delete_and_history_clear_have_exact_scope]:
+                    test(browser, url)
+                    print(test.__name__ + ': ok', flush=True)
+            finally:
+                browser.close()
+    finally:
+        fixture.stop_server(proc)
+
+
+if __name__ == '__main__':
+    main()
diff --git a/tests/ssh_profile_context_browser_smoke.py b/tests/ssh_profile_context_browser_smoke.py
index c4c26cf..29eb0af 100644
--- a/tests/ssh_profile_context_browser_smoke.py
+++ b/tests/ssh_profile_context_browser_smoke.py
@@ -44,7 +44,7 @@ def test_new_connection_replaces_previous_editor_context(browser, url):
         set_target(page, 'second.example', 'second')
         open_profiles(page)
         assert editor(page) == {'name': 'second@second.example',
-                                'summary': 'New direct session: second@second.example:2222',
+                                'summary': 'New direct profile: second@second.example:2222',
                                 'saveDisabled': False}, editor(page)
         # Reopening the same context preserves an unfinished draft.
         page.fill('#ssh-profile-name', 'Second draft')

From ceb6258a8b6d5c4380661ffd5dd5ab6f981c3743 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sun, 20 Sep 2026 01:22:10 +0800
Subject: [PATCH 20/43] Localize settings transfer and report partial imports

---
 README.md                                     |  30 +-
 docs/agent_ui_review_plan.md                  |  51 ++-
 docs/ui_copy_review.tsv                       |  24 +-
 static/js/standterm-messages.js               |  48 ++-
 templates/index.html                          |  67 ++--
 tests/settings_transfer_i18n_browser_smoke.py | 322 ++++++++++++++++++
 6 files changed, 499 insertions(+), 43 deletions(-)
 create mode 100644 tests/settings_transfer_i18n_browser_smoke.py

diff --git a/README.md b/README.md
index 1cbd9d9..9c6bc6a 100644
--- a/README.md
+++ b/README.md
@@ -326,8 +326,8 @@ terminal; compact windows keep those actions in the Agent panel.
 **Settings > General > Language (preview)** selects English or Traditional
 Chinese (Taiwan) for browser access and recovery, Agent permissions, input and
 file-copy approvals, transfer results, local connection information, connection
-forms, SSH login, and SSH profile/route editors (including browser-key and
-host-fingerprint controls). The choice
+forms, SSH login, SSH profile/route editors (including browser-key and
+host-fingerprint controls), and settings import/export. The choice
 applies the next time the page opens; saving it does not reload the current
 page or change its connections and grants. Other areas remain in English.
 The [copy and translation table](docs/ui_copy_review.tsv) and
@@ -571,13 +571,25 @@ that the backend canonicalizes, validates, and rechecks before publish.
 Downloads, copies, and file actions accept regular files only; symbolic links
 and other non-regular entries are rejected.
 
-**Settings > General > Import & Export** transfers browser preferences, SSH
-profiles and order, SSH history, and persistent UI layout in a versioned JSON
-envelope containing a Base64 ZIP archive. Import merges profiles by stable ID,
-appends new IDs, and deduplicates history. A local keyed profile keeps its local
-host, port, and username so import cannot silently rebind its key. SSH keys, key
-IDs, passwords, browser authorization identity, access tokens, and runtime
-diagnostics are never included or changed by import.
+**Settings > General > Import & Export** transfers browser preferences, Agent
+panel position, SSH profiles/routes and history in a versioned JSON envelope
+containing a Base64 ZIP archive. Import applies the valid preferences and panel
+position supplied by the file, retaining values that were not supplied. Imported
+SSH profiles and nodes receive new IDs; existing profiles and their key bindings
+remain unchanged. Importing the same file again creates additional profiles.
+History appends imported entries after existing entries and retains the first
+six, without deduplication.
+
+SSH keys, key bindings, passwords, browser authorization identity, access tokens
+and runtime diagnostics are excluded from exports. Imported browser-key routes
+need a key selected again; existing browser key records remain intact. Successful
+import reloads the page to apply preferences and stops this page's temporary SSH
+tunnels. The confirmation describes these effects before any import writes.
+
+SSH settings are committed before browser preferences. If a later preference
+write fails, the error reports that SSH settings were already saved. Check the
+stored settings before importing again to avoid duplicate profiles; the import
+does not roll back or retry automatically.
 
 ## Browser Authorization And HTTPS
 
diff --git a/docs/agent_ui_review_plan.md b/docs/agent_ui_review_plan.md
index 29ccab9..e3570b1 100644
--- a/docs/agent_ui_review_plan.md
+++ b/docs/agent_ui_review_plan.md
@@ -43,7 +43,7 @@ do not consolidate them merely to shorten labels.
 | 3 | Review English UI copy and terminology | Core terms agreed; initial English sources reviewed | Review each proposed change for target, permissions, consequences, and next action; check related tooltips, Desktop help, and tests before applying it. |
 | 4 | Finalize the translation exchange table | Initial exchange validated with an independent translator | Stable keys, approved English source, context, and placeholder constraints are sufficient for an independent translator. |
 | 5 | Pilot Agent access and local connection information | Implemented; validation below | Cover static and dynamic text, titles, and accessible names; preserve connected sessions and authorization; support English fallback. |
-| 6 | Translate and integrate approved rows | Agent pilot, browser access/recovery, Agent approvals/transfers, connection/login controls and SSH route/profile editors integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
+| 6 | Translate and integrate approved rows | Agent pilot, browser access/recovery, Agent approvals/transfers, connection/login controls, SSH route/profile editors and settings transfer integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
 | 7 | Expand Core and Desktop coverage | Deferred | Verify secondary windows, native menus, setup, diagnostics, packaging, and representative layouts. |
 
 ## Validation of the reliability changes
@@ -321,3 +321,52 @@ secondary windows remain outside the completed localization scope.
 Validation uses WSL Chromium. Native Desktop and physical UART were not part of
 this phase. The next candidate is a separate copy review of settings import/export
 and its replacement/key-retention consequences before expanding that workflow.
+
+## Settings import and export
+
+Settings import/export now uses reviewed English and Traditional Chinese copy.
+The table contains 395 rows: 394 referenced bilingual messages and the existing
+removal. The confirmation identifies the normalized input counts, supplied
+preference/layout replacement, added SSH profiles, existing-first history limit,
+key reselection and page reload. Reload stops this page's temporary SSH tunnels;
+the copy does not promise uninterrupted terminal access or say all terminals end.
+
+The review also corrected README's obsolete stable-ID merge and history-deduplication
+claims. Imported profiles/nodes receive new IDs, while existing profiles and key
+bindings remain intact. History appends after existing entries and keeps the first
+six. Export excludes key material and references; imported browser-key routes
+require key selection again. The export status reports that download started,
+without claiming that the browser saved the file to disk.
+
+A preference write can fail after SSH data is committed. A small error wrapper
+now identifies this partial completion and preserves the original diagnostic as
+plain text. It does not roll back, retry, reload, or change storage order. The
+existing best-effort Agent panel position writer still suppresses its own storage
+errors; this phase does not make the entire import atomic across storage systems.
+Unknown JSON, Base64 and route-model errors remain original diagnostics.
+
+| Finding | Severity | Evidence | Critic remedy | Main response | Resolution | Validation |
+| --- | --- | --- | --- | --- | --- | --- |
+| Preference failure can follow a successful SSH commit | Medium, existing limitation | importBrowserSettingsText and savePrefs | Explain partial completion and avoid automatic retry advice | Accept with a stage-specific wrapper | Wrap only post-SSH browser writes; retain raw detail and original error timing | Injected preference quota failure preserves committed SSH data, keys and prior preference storage, with no reload or second import |
+| Confirmation omits preference/layout replacement and reload | Medium | Import pipeline and normalized UI fields | Describe the effects before writes | Accept | Add replacement, reload and temporary-tunnel consequences | Exact bilingual confirmation, cancellation and real navigation checks |
+| File counts do not guarantee retained history; profiles are added with new IDs | Medium | importState and history slice | Describe counts as input and state existing-first limit | Accept | Correct confirmation and README; retain algorithm | Import seven history entries into two existing entries and verify first-six order, plus new profile/node IDs |
+| Excluding keys also removes imported key bindings | Low | exportState and importState | Explain key reselection without changing local keys | Accept | State excluded bindings and required selection | Real downloaded ZIP contains no key material; existing key records/links survive import |
+
+Two bounded independent passes found no remaining material issue. The critic
+verified placeholder consistency, literal diagnostic interpolation and the
+successful/failed write order using the actual functions and catalog in memory.
+Cross-storage rollback remains deferred unless atomic import is explicitly
+required or observed failures justify a separate recovery design.
+
+| Check | Result |
+| --- | --- |
+| New settings-transfer browser suite | Four cases passed in English and Traditional Chinese: actual download, cancel, successful merge/reload and validation/partial-failure boundaries. |
+| Existing focused browser regressions | Two cases passed: settings/key lifecycle and language preference behavior. |
+| Invalid input and fallbacks | JSON/model diagnostics stay raw; unsupported envelopes/payloads, archive size/checksum and oversized files reject before confirmation. Empty-message file-read/export failures use localized fallback. |
+| Layout | On-page help, actions and partial-failure text fit at 1280 and 480 pixel widths in both languages, including long literal diagnostic text. Native browser confirmation chrome was not visually qualified. |
+| Catalog and static checks | Six exporter and six lookup tests passed; catalog freshness, all 394 referenced bilingual keys, Python syntax and diff checks passed. |
+
+The next small candidate is reviewing reset-to-defaults and general settings
+navigation, especially what reset changes and what its reload stops. Desktop,
+remaining settings panels and full runtime diagnostic localization remain outside
+this completed workflow.
diff --git a/docs/ui_copy_review.tsv b/docs/ui_copy_review.tsv
index a6e6a92..8c063d5 100644
--- a/docs/ui_copy_review.tsv
+++ b/docs/ui_copy_review.tsv
@@ -19,7 +19,7 @@ agent.copy.keep_both	The displayed destination is the exact keep-both name selec
 agent.transfer.stop	Stop	Stop	停止	Request cancellation before commit.		Keep existing cancellation barrier and disabled state; clicking alone is not confirmation of cancellation.	translation-reviewed	templates/index.html:9270
 agent.transfer.committing	The destination is being published and cannot be stopped	Finishing the copy; it can no longer be stopped.	正在完成複製，已無法停止。	Disabled Stop tooltip during committing.		Not a success or failure result. Do not enable Stop after the commit barrier.	translation-reviewed	templates/index.html:9272
 settings.language.label	Language (Agent preview)	Language (preview)	語言（預覽）	Local display preference for the implemented browser, Agent and connection workflows.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
-settings.language.hint	Applies to Agent access and connection info next time you open this page. Other areas remain in English.	Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms, SSH login and profile/route editors. Other areas remain in English.	下次開啟此頁面時套用於瀏覽器與 Agent 存取、核准、傳輸、連線表單、SSH 登入及連線設定／路徑編輯器，其他區域仍顯示英文。	Language change never reloads an active terminal.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+settings.language.hint	Applies to Agent access and connection info next time you open this page. Other areas remain in English.	Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms, SSH login/editors and settings import/export. Other areas remain in English.	下次開啟此頁面時套用於瀏覽器與 Agent 存取、核准、傳輸、連線表單、SSH 登入／編輯器及設定匯入／匯出，其他區域仍顯示英文。	Language change never reloads an active terminal.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 settings.agent.legend	Agent access	Agent access	Agent 存取	Settings fieldset title.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 settings.agent.permission	Default Agent permission	Default Agent permission	Agent 預設權限	Saved permission used by the Authorize agent button; saving alone does not grant access.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 settings.agent.hint	Authorize agent applies this permission to the current tab and creates a standard token.	Authorize agent applies this permission to the current tab and creates a standard token.	「授權 Agent」會將此權限套用至目前分頁，並建立標準權杖。	Explain the primary button without implying that saving a setting authorizes a tab.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
@@ -372,3 +372,25 @@ ssh.editor.scope_notice	Node edits also affect: {entries}. Reordering and removi
 ssh.editor.order_help	Connect from Core through the cards, top to bottom. The last card is the Target. Drag the handle or use ↑ / ↓. Up to {max} jumps.	Connect from Core through the cards, top to bottom. The last card is the Target. Drag the handle or use ↑ / ↓. Up to {max} jumps.	從 Core 依卡片由上到下連線。最後一張卡片是目標主機。可拖曳把手或使用 ↑／↓。最多 {max} 個中繼站。	Card order, target position, controls and existing maximum jump count.	{max}	Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw. Preserve placeholder names and multiplicity; interpolate once as plain text.	translation-reviewed	static/js/standterm-ssh-route-editor.js:497
 ssh.editor.manage_help	Save route stores all nodes and selected keys. Changes apply to the next connection.	Save route stores all nodes and selected keys. Changes apply to the next connection.	「儲存路徑」會儲存所有節點及所選金鑰。變更將套用至下次連線。	Managed mode stores the route via onDone; does not change an existing live connection.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:499
 ssh.editor.prepare_help	Done returns to connection settings. Connect saves only when Save route is selected.	Done updates the connection draft without saving. Connect saves only when Save route is selected.	「完成」只更新連線草稿，不會儲存。僅在勾選「儲存路徑」時，才會於連線時儲存。	Prepare mode returns a draft; persistent saving happens later on Connect only when selected.		Display only. Preserve typed scope/mode, node IDs, dataset.role, endpoint values, key references, callbacks and persistence timing. Keep model error messages raw.	translation-reviewed	static/js/standterm-ssh-route-editor.js:500
+settings.transfer.section	Import & Export	Import & Export	匯入與匯出	General settings fieldset legend.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:1162
+settings.transfer.hint	Exports include browser preferences, SSH profiles, and SSH history. SSH keys are never included.	Export browser preferences, Agent panel position, SSH profiles and routes, and history. SSH keys and key bindings are excluded.	匯出瀏覽器偏好設定、Agent 面板位置、SSH 連線設定與路徑，以及連線紀錄。不包含 SSH 金鑰或金鑰綁定。	Initial transfer help. buildBrowserSettingsPayload includes preferences, ui.agentPanelPosition and SshRoutes.exportState; exportState strips key references.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text. Do not imply an export includes private keys, browser key references, live terminals or server configuration.	translation-reviewed	templates/index.html:1163
+settings.transfer.export	Export Settings	Export settings	匯出設定	Create and download the settings envelope JSON file.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:1165
+settings.transfer.import	Import Settings	Import settings	匯入設定	Open the local JSON file picker; importing still requires the existing confirmation.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:1166
+settings.transfer.exported	Settings exported. SSH keys were not included.	Settings download started. SSH keys are not included.	已開始下載設定檔，不包含 SSH 金鑰。	Status after creating the envelope and invoking the browser download; does not verify a filesystem save.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:6184
+settings.transfer.confirm	Import {preferences} preferences, {profiles} SSH profiles, and {history} history entries? Existing browser SSH keys will not change.	File contains {preferences} preferences, {profiles} SSH profiles and {history} history entries.\n\nProvided preferences and layout settings replace matching browser values; others stay unchanged. SSH profiles are added, not overwritten. History keeps existing entries first, up to {limit} total.\n\nExisting SSH keys stay unchanged. Imported browser-key routes need their keys selected again.\n\nReloads this page and stops its temporary SSH tunnels. Import these settings?	檔案包含 {preferences} 項偏好設定、{profiles} 筆 SSH 連線設定與 {history} 筆連線紀錄。\n\n檔案提供的偏好設定與版面設定會覆蓋瀏覽器中的對應值，其他設定不變。SSH 連線設定會新增，不會覆寫。連線紀錄優先保留既有項目，總共最多 {limit} 筆。\n\n既有 SSH 金鑰不變。匯入的瀏覽器金鑰驗證路徑需重新選擇金鑰。\n\n此頁面將重新載入，並停止其暫時 SSH 通道。要匯入這些設定嗎？	Confirmation before any import writes. preferences/profiles/history count normalized input, not guaranteed retained history. limit is SSH_HISTORY_LIMIT (currently 6). Route IDs are remapped; history is existing-first append then slice. Panel position is applied or reset only when provided. Parent review verified reload disconnect stops this page's temporary SSH tunnels (app.py:on_disconnect); do not generalize this to every terminal session.	{preferences} {profiles} {history} {limit}	Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text. Preserve all four count placeholders once. Do not call this replacement of all settings, newest-history retention, deduplicating merge, key rebinding, or uninterrupted reload. Explicitly state page reload and stopping its temporary SSH tunnels before confirmation.	translation-reviewed	templates/index.html:6267
+settings.transfer.imported	Settings imported. Reloading to apply browser preferences...	Settings imported. Reloading this page…	已匯入設定，正在重新載入頁面…	Success status after SSH state and browser/UI preferences are saved; existing timer reloads the page.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:6284
+settings.transfer.export_failed	Settings could not be exported.	Could not export settings.	無法匯出設定。	Fallback only when export fails without an exception message.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:8490
+settings.transfer.import_failed	Settings could not be imported.	Could not import settings.	無法匯入設定。	Fallback only when import fails without an exception message. Do not claim rollback or that no settings changed.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:8506
+settings.transfer.file_size_invalid	Settings file is too large.	Settings file is invalid or too large.	設定檔無效或過大。	Shared message for file picker size > 1048576 bytes and parser non-string/text length > 1048576 guard.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text. Broader wording covers the existing non-string branch; do not change thresholds or add a new guard.	translation-reviewed	templates/index.html:6245
+settings.transfer.envelope_unsupported	Settings envelope is not supported.	Unsupported settings envelope.	不支援此設定封裝。	Envelope metadata/version/contentType/encoding/content-type guard.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:6251
+settings.transfer.payload_unsupported	Settings payload is not supported.	Unsupported settings payload.	不支援此設定資料。	Inner payload format/version and top-level keys guard.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:6254
+settings.transfer.archive_size_invalid	Settings archive is too large.	Settings archive size is invalid.	設定封存檔大小無效。	Archive is not Uint8Array, shorter than 22 bytes, or larger than 524288 bytes.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text. Broader wording covers undersized/invalid data as well as oversized data; do not change validation.	translation-reviewed	templates/index.html:6107
+settings.transfer.archive_one_file	Settings archive must contain exactly one file.	Settings archive must contain exactly one file.	設定封存檔必須只包含一個檔案。	ZIP end-of-directory is missing or entry count is not one.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:6115
+settings.transfer.archive_directory_invalid	Settings archive directory is invalid.	Settings archive directory is invalid.	設定封存檔目錄無效。	ZIP central directory bounds/signature check.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:6119
+settings.transfer.archive_directory_truncated	Settings archive directory is truncated.	Settings archive directory is truncated.	設定封存檔目錄不完整。	ZIP central-directory filename extends beyond end-of-directory.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:6126
+settings.transfer.archive_format_unsupported	Settings archive uses an unsupported format.	Unsupported settings archive format.	不支援此設定封存檔格式。	Unsupported compression method, size relationship, payload size, or entry name.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:6129
+settings.transfer.archive_entry_invalid	Settings archive entry is invalid.	Settings archive entry is invalid.	設定封存檔項目無效。	ZIP local-header signature, method, checksum or size does not match expectations.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:6137
+settings.transfer.archive_truncated	Settings archive is truncated.	Settings archive is truncated.	設定封存檔不完整。	Content extends beyond available ZIP bytes.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:6141
+settings.transfer.archive_entry_name_invalid	Settings archive entry name is invalid.	Settings archive entry name is invalid.	設定封存檔項目名稱無效。	ZIP local and central entry names differ.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:6143
+settings.transfer.archive_checksum_failed	Settings archive checksum failed.	Settings archive checksum failed.	設定封存檔校驗失敗。	CRC32 validation of extracted content failed.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:6145
+settings.transfer.partial_failure		SSH settings were saved, but browser settings could not be fully applied. Check settings before importing again to avoid duplicate profiles. Details: {detail}	SSH 設定已儲存，但瀏覽器設定未能完整套用。若需再次匯入，請先檢查設定，以免產生重複的連線設定。詳細資訊：{detail}	New display wrapper only for preference/layout failures after SSH persistence has completed successfully. Detail remains the original exception message.	{detail}	Do not alter write order, add rollback or retry, or claim that SSH writes were reverted. Do not use this for parser errors or failed SSH persistence. Render detail as plain text with one-pass interpolation.	translation-reviewed	templates/index.html:importBrowserSettingsText (new post-SSH-save error wrapper)
diff --git a/static/js/standterm-messages.js b/static/js/standterm-messages.js
index 48a5980..bf28987 100644
--- a/static/js/standterm-messages.js
+++ b/static/js/standterm-messages.js
@@ -226,8 +226,30 @@
         "settings.agent.legend": "Agent access",
         "settings.agent.observe": "Read only + token",
         "settings.agent.permission": "Default Agent permission",
-        "settings.language.hint": "Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms, SSH login and profile/route editors. Other areas remain in English.",
+        "settings.language.hint": "Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms, SSH login/editors and settings import/export. Other areas remain in English.",
         "settings.language.label": "Language (preview)",
+        "settings.transfer.archive_checksum_failed": "Settings archive checksum failed.",
+        "settings.transfer.archive_directory_invalid": "Settings archive directory is invalid.",
+        "settings.transfer.archive_directory_truncated": "Settings archive directory is truncated.",
+        "settings.transfer.archive_entry_invalid": "Settings archive entry is invalid.",
+        "settings.transfer.archive_entry_name_invalid": "Settings archive entry name is invalid.",
+        "settings.transfer.archive_format_unsupported": "Unsupported settings archive format.",
+        "settings.transfer.archive_one_file": "Settings archive must contain exactly one file.",
+        "settings.transfer.archive_size_invalid": "Settings archive size is invalid.",
+        "settings.transfer.archive_truncated": "Settings archive is truncated.",
+        "settings.transfer.confirm": "File contains {preferences} preferences, {profiles} SSH profiles and {history} history entries.\n\nProvided preferences and layout settings replace matching browser values; others stay unchanged. SSH profiles are added, not overwritten. History keeps existing entries first, up to {limit} total.\n\nExisting SSH keys stay unchanged. Imported browser-key routes need their keys selected again.\n\nReloads this page and stops its temporary SSH tunnels. Import these settings?",
+        "settings.transfer.envelope_unsupported": "Unsupported settings envelope.",
+        "settings.transfer.export": "Export settings",
+        "settings.transfer.export_failed": "Could not export settings.",
+        "settings.transfer.exported": "Settings download started. SSH keys are not included.",
+        "settings.transfer.file_size_invalid": "Settings file is invalid or too large.",
+        "settings.transfer.hint": "Export browser preferences, Agent panel position, SSH profiles and routes, and history. SSH keys and key bindings are excluded.",
+        "settings.transfer.import": "Import settings",
+        "settings.transfer.import_failed": "Could not import settings.",
+        "settings.transfer.imported": "Settings imported. Reloading this page\u2026",
+        "settings.transfer.partial_failure": "SSH settings were saved, but browser settings could not be fully applied. Check settings before importing again to avoid duplicate profiles. Details: {detail}",
+        "settings.transfer.payload_unsupported": "Unsupported settings payload.",
+        "settings.transfer.section": "Import & Export",
         "ssh.editor.add_jump": "Add jump node",
         "ssh.editor.advanced_node": "Advanced node settings",
         "ssh.editor.advanced_sharing": "Advanced sharing",
@@ -600,8 +622,30 @@
         "settings.agent.legend": "Agent \u5b58\u53d6",
         "settings.agent.observe": "\u552f\u8b80 + \u6b0a\u6756",
         "settings.agent.permission": "Agent \u9810\u8a2d\u6b0a\u9650",
-        "settings.language.hint": "\u4e0b\u6b21\u958b\u555f\u6b64\u9801\u9762\u6642\u5957\u7528\u65bc\u700f\u89bd\u5668\u8207 Agent \u5b58\u53d6\u3001\u6838\u51c6\u3001\u50b3\u8f38\u3001\u9023\u7dda\u8868\u55ae\u3001SSH \u767b\u5165\u53ca\u9023\u7dda\u8a2d\u5b9a\uff0f\u8def\u5f91\u7de8\u8f2f\u5668\uff0c\u5176\u4ed6\u5340\u57df\u4ecd\u986f\u793a\u82f1\u6587\u3002",
+        "settings.language.hint": "\u4e0b\u6b21\u958b\u555f\u6b64\u9801\u9762\u6642\u5957\u7528\u65bc\u700f\u89bd\u5668\u8207 Agent \u5b58\u53d6\u3001\u6838\u51c6\u3001\u50b3\u8f38\u3001\u9023\u7dda\u8868\u55ae\u3001SSH \u767b\u5165\uff0f\u7de8\u8f2f\u5668\u53ca\u8a2d\u5b9a\u532f\u5165\uff0f\u532f\u51fa\uff0c\u5176\u4ed6\u5340\u57df\u4ecd\u986f\u793a\u82f1\u6587\u3002",
         "settings.language.label": "\u8a9e\u8a00\uff08\u9810\u89bd\uff09",
+        "settings.transfer.archive_checksum_failed": "\u8a2d\u5b9a\u5c01\u5b58\u6a94\u6821\u9a57\u5931\u6557\u3002",
+        "settings.transfer.archive_directory_invalid": "\u8a2d\u5b9a\u5c01\u5b58\u6a94\u76ee\u9304\u7121\u6548\u3002",
+        "settings.transfer.archive_directory_truncated": "\u8a2d\u5b9a\u5c01\u5b58\u6a94\u76ee\u9304\u4e0d\u5b8c\u6574\u3002",
+        "settings.transfer.archive_entry_invalid": "\u8a2d\u5b9a\u5c01\u5b58\u6a94\u9805\u76ee\u7121\u6548\u3002",
+        "settings.transfer.archive_entry_name_invalid": "\u8a2d\u5b9a\u5c01\u5b58\u6a94\u9805\u76ee\u540d\u7a31\u7121\u6548\u3002",
+        "settings.transfer.archive_format_unsupported": "\u4e0d\u652f\u63f4\u6b64\u8a2d\u5b9a\u5c01\u5b58\u6a94\u683c\u5f0f\u3002",
+        "settings.transfer.archive_one_file": "\u8a2d\u5b9a\u5c01\u5b58\u6a94\u5fc5\u9808\u53ea\u5305\u542b\u4e00\u500b\u6a94\u6848\u3002",
+        "settings.transfer.archive_size_invalid": "\u8a2d\u5b9a\u5c01\u5b58\u6a94\u5927\u5c0f\u7121\u6548\u3002",
+        "settings.transfer.archive_truncated": "\u8a2d\u5b9a\u5c01\u5b58\u6a94\u4e0d\u5b8c\u6574\u3002",
+        "settings.transfer.confirm": "\u6a94\u6848\u5305\u542b {preferences} \u9805\u504f\u597d\u8a2d\u5b9a\u3001{profiles} \u7b46 SSH \u9023\u7dda\u8a2d\u5b9a\u8207 {history} \u7b46\u9023\u7dda\u7d00\u9304\u3002\n\n\u6a94\u6848\u63d0\u4f9b\u7684\u504f\u597d\u8a2d\u5b9a\u8207\u7248\u9762\u8a2d\u5b9a\u6703\u8986\u84cb\u700f\u89bd\u5668\u4e2d\u7684\u5c0d\u61c9\u503c\uff0c\u5176\u4ed6\u8a2d\u5b9a\u4e0d\u8b8a\u3002SSH \u9023\u7dda\u8a2d\u5b9a\u6703\u65b0\u589e\uff0c\u4e0d\u6703\u8986\u5beb\u3002\u9023\u7dda\u7d00\u9304\u512a\u5148\u4fdd\u7559\u65e2\u6709\u9805\u76ee\uff0c\u7e3d\u5171\u6700\u591a {limit} \u7b46\u3002\n\n\u65e2\u6709 SSH \u91d1\u9470\u4e0d\u8b8a\u3002\u532f\u5165\u7684\u700f\u89bd\u5668\u91d1\u9470\u9a57\u8b49\u8def\u5f91\u9700\u91cd\u65b0\u9078\u64c7\u91d1\u9470\u3002\n\n\u6b64\u9801\u9762\u5c07\u91cd\u65b0\u8f09\u5165\uff0c\u4e26\u505c\u6b62\u5176\u66ab\u6642 SSH \u901a\u9053\u3002\u8981\u532f\u5165\u9019\u4e9b\u8a2d\u5b9a\u55ce\uff1f",
+        "settings.transfer.envelope_unsupported": "\u4e0d\u652f\u63f4\u6b64\u8a2d\u5b9a\u5c01\u88dd\u3002",
+        "settings.transfer.export": "\u532f\u51fa\u8a2d\u5b9a",
+        "settings.transfer.export_failed": "\u7121\u6cd5\u532f\u51fa\u8a2d\u5b9a\u3002",
+        "settings.transfer.exported": "\u5df2\u958b\u59cb\u4e0b\u8f09\u8a2d\u5b9a\u6a94\uff0c\u4e0d\u5305\u542b SSH \u91d1\u9470\u3002",
+        "settings.transfer.file_size_invalid": "\u8a2d\u5b9a\u6a94\u7121\u6548\u6216\u904e\u5927\u3002",
+        "settings.transfer.hint": "\u532f\u51fa\u700f\u89bd\u5668\u504f\u597d\u8a2d\u5b9a\u3001Agent \u9762\u677f\u4f4d\u7f6e\u3001SSH \u9023\u7dda\u8a2d\u5b9a\u8207\u8def\u5f91\uff0c\u4ee5\u53ca\u9023\u7dda\u7d00\u9304\u3002\u4e0d\u5305\u542b SSH \u91d1\u9470\u6216\u91d1\u9470\u7d81\u5b9a\u3002",
+        "settings.transfer.import": "\u532f\u5165\u8a2d\u5b9a",
+        "settings.transfer.import_failed": "\u7121\u6cd5\u532f\u5165\u8a2d\u5b9a\u3002",
+        "settings.transfer.imported": "\u5df2\u532f\u5165\u8a2d\u5b9a\uff0c\u6b63\u5728\u91cd\u65b0\u8f09\u5165\u9801\u9762\u2026",
+        "settings.transfer.partial_failure": "SSH \u8a2d\u5b9a\u5df2\u5132\u5b58\uff0c\u4f46\u700f\u89bd\u5668\u8a2d\u5b9a\u672a\u80fd\u5b8c\u6574\u5957\u7528\u3002\u82e5\u9700\u518d\u6b21\u532f\u5165\uff0c\u8acb\u5148\u6aa2\u67e5\u8a2d\u5b9a\uff0c\u4ee5\u514d\u7522\u751f\u91cd\u8907\u7684\u9023\u7dda\u8a2d\u5b9a\u3002\u8a73\u7d30\u8cc7\u8a0a\uff1a{detail}",
+        "settings.transfer.payload_unsupported": "\u4e0d\u652f\u63f4\u6b64\u8a2d\u5b9a\u8cc7\u6599\u3002",
+        "settings.transfer.section": "\u532f\u5165\u8207\u532f\u51fa",
         "ssh.editor.add_jump": "\u65b0\u589e\u4e2d\u7e7c\u7ad9",
         "ssh.editor.advanced_node": "\u9032\u968e\u7bc0\u9ede\u8a2d\u5b9a",
         "ssh.editor.advanced_sharing": "\u9032\u968e\u5171\u7528\u8a2d\u5b9a",
diff --git a/templates/index.html b/templates/index.html
index 6856a71..a0431dd 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -1136,7 +1136,7 @@ <h3>Settings</h3>
                             <div class="settings-row"><label for="pref-uiLanguage" data-i18n="settings.language.label">Language (preview)</label>
                                 <select id="pref-uiLanguage"><option value="en">English</option><option value="zh-TW" lang="zh-TW">繁體中文（台灣）</option></select>
                             </div>
-                            <div class="settings-status" data-i18n="settings.language.hint">Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms, SSH login and profile/route editors. Other areas remain in English.</div>
+                            <div class="settings-status" data-i18n="settings.language.hint">Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms, SSH login/editors and settings import/export. Other areas remain in English.</div>
                             <div class="settings-row"><label for="pref-useCustomMenu">Enable custom context menu</label><input type="checkbox" id="pref-useCustomMenu"></div>
                             <div class="settings-row"><label for="pref-copyOnSelect">Copy on select</label><input type="checkbox" id="pref-copyOnSelect"></div>
                             <div class="settings-row"><label for="pref-enablePicPreview">Enable pic preview</label><input type="checkbox" id="pref-enablePicPreview"></div>
@@ -1159,11 +1159,11 @@ <h3>Settings</h3>
                             <div class="settings-status" data-i18n="settings.agent.hint">Authorize agent applies this permission to the current tab and creates a standard token.</div>
                         </fieldset>
                         <fieldset class="settings-fieldset">
-                            <legend>Import &amp; Export</legend>
-                            <div class="settings-status" id="settings-transfer-status">Exports include browser preferences, SSH profiles, and SSH history. SSH keys are never included.</div>
+                            <legend data-i18n="settings.transfer.section">Import &amp; Export</legend>
+                            <div class="settings-status" id="settings-transfer-status" data-i18n="settings.transfer.hint">Export browser preferences, Agent panel position, SSH profiles and routes, and history. SSH keys and key bindings are excluded.</div>
                             <div class="settings-transfer-actions">
-                                <button type="button" id="settings-export">Export Settings</button>
-                                <button type="button" id="settings-import">Import Settings</button>
+                                <button type="button" id="settings-export" data-i18n="settings.transfer.export">Export settings</button>
+                                <button type="button" id="settings-import" data-i18n="settings.transfer.import">Import settings</button>
                                 <input type="file" id="settings-import-file" accept="application/json,.json" hidden>
                             </div>
                         </fieldset>
@@ -6104,7 +6104,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
 
             function readStoredSettingsZip(bytes) {
                 if (!(bytes instanceof Uint8Array) || bytes.byteLength < 22 || bytes.byteLength > 524288) {
-                    throw new Error('Settings archive is too large.');
+                    throw new Error(t('settings.transfer.archive_size_invalid'));
                 }
                 const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
                 let eocdOffset = -1;
@@ -6112,21 +6112,21 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     if (view.getUint32(offset, true) === 0x06054b50) { eocdOffset = offset; break; }
                 }
                 if (eocdOffset < 0 || view.getUint16(eocdOffset + 10, true) !== 1) {
-                    throw new Error('Settings archive must contain exactly one file.');
+                    throw new Error(t('settings.transfer.archive_one_file'));
                 }
                 const centralOffset = view.getUint32(eocdOffset + 16, true);
                 if (centralOffset + 46 > bytes.length || view.getUint32(centralOffset, true) !== 0x02014b50) {
-                    throw new Error('Settings archive directory is invalid.');
+                    throw new Error(t('settings.transfer.archive_directory_invalid'));
                 }
                 const method = view.getUint16(centralOffset + 10, true);
                 const checksum = view.getUint32(centralOffset + 16, true);
                 const compressedSize = view.getUint32(centralOffset + 20, true);
                 const contentSize = view.getUint32(centralOffset + 24, true);
                 const nameLength = view.getUint16(centralOffset + 28, true);
-                if (centralOffset + 46 + nameLength > eocdOffset) throw new Error('Settings archive directory is truncated.');
+                if (centralOffset + 46 + nameLength > eocdOffset) throw new Error(t('settings.transfer.archive_directory_truncated'));
                 const name = new TextDecoder().decode(bytes.slice(centralOffset + 46, centralOffset + 46 + nameLength));
                 if (method !== 0 || compressedSize !== contentSize || contentSize > 262144 || name !== 'standterm-settings.json') {
-                    throw new Error('Settings archive uses an unsupported format.');
+                    throw new Error(t('settings.transfer.archive_format_unsupported'));
                 }
                 if (
                     view.getUint32(0, true) !== 0x04034b50
@@ -6134,15 +6134,15 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     || view.getUint32(14, true) !== checksum
                     || view.getUint32(18, true) !== contentSize
                     || view.getUint32(22, true) !== contentSize
-                ) throw new Error('Settings archive entry is invalid.');
+                ) throw new Error(t('settings.transfer.archive_entry_invalid'));
                 const localNameLength = view.getUint16(26, true);
                 const localExtraLength = view.getUint16(28, true);
                 const contentOffset = 30 + localNameLength + localExtraLength;
-                if (contentOffset + contentSize > bytes.length) throw new Error('Settings archive is truncated.');
+                if (contentOffset + contentSize > bytes.length) throw new Error(t('settings.transfer.archive_truncated'));
                 const localName = new TextDecoder().decode(bytes.slice(30, 30 + localNameLength));
-                if (localName !== name) throw new Error('Settings archive entry name is invalid.');
+                if (localName !== name) throw new Error(t('settings.transfer.archive_entry_name_invalid'));
                 const content = bytes.slice(contentOffset, contentOffset + contentSize);
-                if (crc32(content) !== checksum) throw new Error('Settings archive checksum failed.');
+                if (crc32(content) !== checksum) throw new Error(t('settings.transfer.archive_checksum_failed'));
                 return content;
             }
 
@@ -6181,7 +6181,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const envelope = await createBrowserSettingsEnvelope();
                 const date = new Date().toISOString().slice(0, 10).replaceAll('-', '');
                 downloadTextFile(`standterm-settings-${date}.json`, JSON.stringify(envelope, null, 2));
-                settingsTransferStatus.textContent = 'Settings exported. SSH keys were not included.';
+                settingsTransferStatus.textContent = t('settings.transfer.exported');
                 return envelope;
             }
 
@@ -6242,16 +6242,16 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             }
 
             function parseBrowserSettingsEnvelope(text) {
-                if (typeof text !== 'string' || text.length > 1048576) throw new Error('Settings file is too large.');
+                if (typeof text !== 'string' || text.length > 1048576) throw new Error(t('settings.transfer.file_size_invalid'));
                 const envelope = JSON.parse(text);
                 if (
                     !envelope || envelope.format !== 'standterm-settings-envelope' || envelope.version !== 1
                     || envelope.contentType !== 'application/zip' || envelope.encoding !== 'base64'
                     || typeof envelope.content !== 'string'
-                ) throw new Error('Settings envelope is not supported.');
+                ) throw new Error(t('settings.transfer.envelope_unsupported'));
                 const inner = JSON.parse(new TextDecoder().decode(readStoredSettingsZip(base64ToUint8Array(envelope.content))));
                 if (!inner || inner.format !== 'standterm-browser-settings' || inner.version !== 1 || inner.keys) {
-                    throw new Error('Settings payload is not supported.');
+                    throw new Error(t('settings.transfer.payload_unsupported'));
                 }
                 return {
                     preferences: normalizeImportedPreferences(inner.preferences),
@@ -6264,7 +6264,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const imported = parseBrowserSettingsEnvelope(text);
                 const preferenceCount = Object.keys(imported.preferences).length;
                 if (!window.confirm(
-                    `Import ${preferenceCount} preferences, ${imported.ssh.profiles.length} SSH profiles, and ${imported.ssh.history.length} history entries? Existing browser SSH keys will not change.`
+                    t('settings.transfer.confirm', { preferences: preferenceCount, profiles: imported.ssh.profiles.length,
+                        history: imported.ssh.history.length, limit: SSH_HISTORY_LIMIT })
                 )) return false;
                 await sshSessionReady;
                 await updateSshSessionState(nextState => {
@@ -6272,16 +6273,22 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     Object.assign(nextState, SshRoutes.importState(nextState, source));
                     nextState.history = nextState.history.slice(0, SSH_HISTORY_LIMIT);
                 });
-                prefs = { ...prefs, ...imported.preferences };
-                savePrefs(prefs);
-                if (Object.prototype.hasOwnProperty.call(imported.ui, 'agentPanelPosition')) {
-                    if (imported.ui.agentPanelPosition) {
-                        saveAgentPanelPosition(imported.ui.agentPanelPosition);
-                    } else {
-                        localStorage.removeItem('agentPanelPosition.v1');
+                try {
+                    prefs = { ...prefs, ...imported.preferences };
+                    savePrefs(prefs);
+                    if (Object.prototype.hasOwnProperty.call(imported.ui, 'agentPanelPosition')) {
+                        if (imported.ui.agentPanelPosition) {
+                            saveAgentPanelPosition(imported.ui.agentPanelPosition);
+                        } else {
+                            localStorage.removeItem('agentPanelPosition.v1');
+                        }
                     }
+                } catch (err) {
+                    throw new Error(t('settings.transfer.partial_failure', {
+                        detail: err.message || t('settings.transfer.import_failed')
+                    }));
                 }
-                settingsTransferStatus.textContent = 'Settings imported. Reloading to apply browser preferences...';
+                settingsTransferStatus.textContent = t('settings.transfer.imported');
                 setTimeout(() => location.reload(), 50);
                 return true;
             }
@@ -8487,7 +8494,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 settingsExportBtn.onclick = () => {
                     settingsExportBtn.disabled = true;
                     exportBrowserSettings()
-                        .catch(err => { settingsTransferStatus.textContent = err.message || 'Settings could not be exported.'; })
+                        .catch(err => { settingsTransferStatus.textContent = err.message || t('settings.transfer.export_failed'); })
                         .finally(() => { settingsExportBtn.disabled = false; });
                 };
             }
@@ -8498,12 +8505,12 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     settingsImportFile.value = '';
                     if (!file) return;
                     if (file.size > 1048576) {
-                        settingsTransferStatus.textContent = 'Settings file is too large.';
+                        settingsTransferStatus.textContent = t('settings.transfer.file_size_invalid');
                         return;
                     }
                     file.text()
                         .then(importBrowserSettingsText)
-                        .catch(err => { settingsTransferStatus.textContent = err.message || 'Settings could not be imported.'; });
+                        .catch(err => { settingsTransferStatus.textContent = err.message || t('settings.transfer.import_failed'); });
                 };
             }
             browserAuthUrlForm.onsubmit = event => {
diff --git a/tests/settings_transfer_i18n_browser_smoke.py b/tests/settings_transfer_i18n_browser_smoke.py
new file mode 100644
index 0000000..4b0f74e
--- /dev/null
+++ b/tests/settings_transfer_i18n_browser_smoke.py
@@ -0,0 +1,322 @@
+"""Check localized settings transfer without translating stored data or key material."""
+import base64
+import io
+import json
+from pathlib import Path
+import re
+import sys
+import zipfile
+
+sys.path.insert(0, str(Path(__file__).resolve().parent))
+import agent_browser_smoke as fixture
+
+
+PROFILE_NAME = 'Local <b>& {profiles}'
+INITIAL_POSITION = {'left':55, 'top':66}
+QUOTA_DETAIL = 'Fixture quota <b>& {detail}'
+
+
+def message(page, key, params=None):
+    value = page.evaluate("""({key,params}) =>
+        StandTermI18n.create(StandTermMessages, document.documentElement.lang).t(key, params)
+    """, {'key':key, 'params':params or {}})
+    assert value != key, f'Missing reviewed translation: {key}'
+    return value
+
+
+def new_page(browser, url, locale):
+    context = browser.new_context(viewport={'width':1280, 'height':800}, locale='en-US')
+    page = context.new_page()
+    initial = {'uiLanguage':locale, 'fontSize':18, 'copyOnSelect':False,
+               'saveSshHistory':False, 'agentAccessMintMode':'approval_pending'}
+    page.add_init_script("""if (!localStorage.getItem('terminal.pref.v1')) {
+        localStorage.setItem('terminal.pref.v1', JSON.stringify(%s));
+        localStorage.setItem('agentPanelPosition.v1', JSON.stringify(%s));
+    }""" % (json.dumps(initial), json.dumps(INITIAL_POSITION)))
+    page.goto(fixture.debug_url(url), wait_until='domcontentloaded')
+    page.wait_for_function('() => window.terminalTest?.getSocketState().connected === true')
+    page.add_style_tag(content='#debug-hud, #payload-log { display:none !important; }')
+    page.evaluate('() => window.terminalTest.captureTerminalIoForTest()')
+    page.evaluate("""name => window.terminalTest.setSshSessionState({profiles:[
+        {id:'profile-primary',name,host:'local.test',port:'2222',username:'local-user'},
+        {id:'profile-other',name:'Unchanged',host:'other.test',port:'22',username:'other-user'}],
+        history:[0,1].map(index => ({id:`local-history-${index}`,host:`local-${index}.test`,
+            port:'22',username:'recent',lastUsedAt:`2026-09-20T00:00:0${index}Z`}))})""", PROFILE_NAME)
+    key = page.evaluate("() => window.terminalTest.createBrowserSshKeyForProfileForTest('profile-primary')")
+    page.evaluate("() => {window.transferDocumentMarker = 'original'; window.terminalTest.clearEmitted();}")
+    page.click('#quick-settings')
+    assert page.locator('#settings-export').inner_text() == message(page, 'settings.transfer.export')
+    assert page.locator('#settings-import').inner_text() == message(page, 'settings.transfer.import')
+    wait_status(page, message(page, 'settings.transfer.hint'))
+    return context, page, key
+
+
+def snapshot(page):
+    return page.evaluate("""async () => ({
+        storage:Object.fromEntries(Object.keys(localStorage).sort().map(key => [key,localStorage.getItem(key)])),
+        ssh:await window.terminalTest.getSshSessionState(),
+        key:await window.terminalTest.getBrowserSshKeyMetadataForTest('profile-primary')
+    })""")
+
+
+def payload(locale):
+    def node(node_id, host, next_id=None):
+        return {'id':node_id,'endpoint':{'host':host,'port':'2200','username':'import-user'},
+                'authentication':{'method':'password'},'hostKeyAlias':'','nextNodeId':next_id}
+    return {'format':'standterm-browser-settings','version':1,'exportedAt':'2026-09-20T00:00:00Z',
+            'preferences':{'copyOnSelect':True,'saveSshHistory':True,'uiLanguage':locale},
+            'ui':{'agentPanelPosition':{'left':123,'top':130}},
+            'ssh':{'version':2,'revision':0,
+                   'profiles':[{'id':'profile-primary','name':'Imported <b>& {profiles}','startNodeId':'import-jump'},
+                               {'id':'profile-other','name':'Shared target','startNodeId':'import-target'}],
+                   'history':[{'id':f'import-history-{index}','name':f'Recent {index}',
+                               'startNodeId':f'import-history-node-{index}',
+                               'lastUsedAt':f'2026-09-20T01:00:0{index}Z'} for index in range(7)],
+                   'nodes':[node('import-jump','jump.test','import-target'),node('import-target','target.test')]
+                           + [node(f'import-history-node-{index}',f'import-{index}.test') for index in range(7)]}}
+
+
+def envelope(inner):
+    archive = io.BytesIO()
+    with zipfile.ZipFile(archive, 'w', compression=zipfile.ZIP_STORED) as zipped:
+        zipped.writestr('standterm-settings.json', json.dumps(inner, ensure_ascii=False))
+    return {'format':'standterm-settings-envelope','version':1,'contentType':'application/zip',
+            'encoding':'base64','content':base64.b64encode(archive.getvalue()).decode('ascii')}
+
+
+def upload(page, value):
+    content = value if isinstance(value, str) else json.dumps(value)
+    page.locator('#settings-import-file').set_input_files({
+        'name':'settings.json','mimeType':'application/json','buffer':content.encode('utf-8')})
+
+
+def wait_status(page, expected):
+    page.wait_for_function('expected => document.getElementById("settings-transfer-status").textContent === expected', arg=expected)
+
+
+def test_export_download_keeps_data_and_excludes_keys(browser, url):
+    for locale in ['en','zh-TW']:
+        context, page, key = new_page(browser, url, locale)
+        try:
+            before = snapshot(page)
+            with page.expect_download() as download_info:
+                page.click('#settings-export')
+            download = download_info.value
+            wait_status(page, message(page, 'settings.transfer.exported'))
+            assert re.fullmatch(r'standterm-settings-\d{8}\.json', download.suggested_filename)
+            exported_envelope = json.loads(Path(download.path()).read_text(encoding='utf-8'))
+            assert set(exported_envelope) == {'format','version','contentType','encoding','content'}
+            assert {key:value for key,value in exported_envelope.items() if key != 'content'} == {
+                'format':'standterm-settings-envelope','version':1,'contentType':'application/zip','encoding':'base64'}
+            with zipfile.ZipFile(io.BytesIO(base64.b64decode(exported_envelope['content']))) as zipped:
+                assert zipped.namelist() == ['standterm-settings.json']
+                inner = json.loads(zipped.read('standterm-settings.json'))
+            assert inner == page.evaluate('value => window.terminalTest.decodeBrowserSettingsEnvelopeForTest(value)', exported_envelope)
+            assert inner['format'] == 'standterm-browser-settings' and inner['version'] == 1
+            assert inner['preferences']['uiLanguage'] == locale
+            assert inner['preferences']['agentAccessMintMode'] == 'approval_pending'
+            assert inner['preferences']['fontSize'] == 18
+            assert inner['ui']['agentPanelPosition'] == INITIAL_POSITION
+            assert inner['ssh']['profiles'][0]['id'] == 'profile-primary'
+            assert inner['ssh']['profiles'][0]['name'] == PROFILE_NAME
+            assert any(node['endpoint'] == {'host':'local.test','port':'2222','username':'local-user'} for node in inner['ssh']['nodes'])
+            assert 'keys' not in inner and all('keyId' not in profile for profile in inner['ssh']['profiles'])
+            keyed = [node for node in inner['ssh']['nodes'] if node['authentication']['method'] == 'browser-key']
+            assert keyed and all(node['authentication']['keyRef'] is None for node in keyed)
+            encoded = json.dumps(inner)
+            assert all(value not in encoded for value in [key['keyId'],key['publicKeyOpenSsh'],'privateKey','ssh-ed25519 '])
+            assert snapshot(page) == before
+        finally:
+            fixture.close_context(context)
+
+
+def test_import_confirmation_cancel_preserves_all_state(browser, url):
+    for locale in ['en','zh-TW']:
+        context, page, key = new_page(browser, url, locale)
+        try:
+            before = snapshot(page)
+            connection = page.evaluate('() => ({socket:window.terminalTest.getSocketState(),active:window.terminalTest.getActiveAgentState()})')
+            prompts = []
+            page.once('dialog', lambda dialog: (prompts.append(dialog.message), dialog.dismiss()))
+            with page.expect_event('dialog'):
+                upload(page, envelope(payload(locale)))
+            page.wait_for_function('() => document.getElementById("settings-import-file").value === ""')
+            assert len(prompts) == 1
+            assert prompts[0] == message(page, 'settings.transfer.confirm', {
+                'preferences':3,'profiles':2,'history':7,'limit':6})
+            assert snapshot(page) == before
+            page.wait_for_timeout(100)
+            assert page.evaluate('() => window.transferDocumentMarker') == 'original'
+            assert page.evaluate('() => ({socket:window.terminalTest.getSocketState(),active:window.terminalTest.getActiveAgentState()})') == connection
+            assert not fixture.get_emitted(page, 'start_ssh')
+        finally:
+            fixture.close_context(context)
+
+
+def test_import_merges_data_and_reloads_provided_preferences(browser, url):
+    for locale in ['en','zh-TW']:
+        context, page, key = new_page(browser, url, locale)
+        try:
+            before = snapshot(page)
+            next_locale = 'zh-TW' if locale == 'en' else 'en'
+            imported = payload(next_locale)
+            if locale == 'zh-TW':
+                imported['ui']['agentPanelPosition'] = None
+            expected_prompt = message(page, 'settings.transfer.confirm', {
+                'preferences':3,'profiles':2,'history':7,'limit':6})
+            expected_status = message(page, 'settings.transfer.imported')
+            statuses = []
+            page.expose_function('recordTransferStatus', lambda value: statuses.append(value))
+            page.evaluate("""() => {
+                const status = document.getElementById('settings-transfer-status');
+                new MutationObserver(() => window.recordTransferStatus(status.textContent))
+                    .observe(status, {childList:true,subtree:true,characterData:true});
+            }""")
+            prompts = []
+            page.once('dialog', lambda dialog: (prompts.append(dialog.message), dialog.accept()))
+            with page.expect_navigation(wait_until='domcontentloaded'):
+                upload(page, envelope(imported))
+            page.wait_for_function('() => !!window.terminalTest')
+            after = snapshot(page)
+            assert prompts == [expected_prompt]
+            assert expected_status in statuses
+            assert page.evaluate('() => performance.getEntriesByType("navigation")[0].type') == 'reload'
+            assert page.evaluate('() => window.transferDocumentMarker === undefined')
+            assert page.locator('html').get_attribute('lang') == next_locale
+            preferences = json.loads(after['storage']['terminal.pref.v1'])
+            previous = json.loads(before['storage']['terminal.pref.v1'])
+            for name, value in previous.items():
+                assert preferences[name] == imported['preferences'].get(name, value), name
+            page.click('#quick-settings')
+            assert page.locator('#pref-copyOnSelect').is_checked()
+            assert page.locator('#ssh-save-history').is_checked()
+            position = imported['ui']['agentPanelPosition']
+            assert json.loads(after['storage'].get('agentPanelPosition.v1','null')) == position
+            merged = after['ssh']
+            assert merged['profiles'][:2] == before['ssh']['profiles']
+            assert len(merged['profiles']) == 4
+            source_ids = {item['id'] for item in imported['ssh']['profiles']}
+            assert all(item['id'] not in source_ids for item in merged['profiles'][2:])
+            assert [item['name'] for item in merged['profiles'][2:]] == [item['name'] for item in imported['ssh']['profiles']]
+            assert merged['history'][:2] == before['ssh']['history'] and len(merged['history']) == 6
+            assert [item['host'] for item in merged['history'][2:]] == [f'import-{index}.test' for index in range(4)]
+            assert all(node in merged['nodes'] for node in before['ssh']['nodes'])
+            nodes = {node['id']:node for node in merged['nodes']}
+            route = nodes[merged['profiles'][2]['startNodeId']]
+            target = nodes[route['nextNodeId']]
+            assert route['endpoint']['host'] == 'jump.test' and target['endpoint']['host'] == 'target.test'
+            assert target['nextNodeId'] is None and merged['profiles'][3]['startNodeId'] == target['id']
+            original_node_ids = {node['id'] for node in before['ssh']['nodes'] + imported['ssh']['nodes']}
+            assert route['id'] not in original_node_ids and target['id'] not in original_node_ids
+            assert after['key'] == key
+            assert page.evaluate('keyId => window.terminalTest.browserSshKeyRecordExistsForTest(keyId)', key['keyId'])
+        finally:
+            fixture.close_context(context)
+
+
+def test_import_validation_and_partial_failure_boundaries(browser, url):
+    for locale in ['en','zh-TW']:
+        context, page, key = new_page(browser, url, locale)
+        try:
+            before = snapshot(page)
+            prompts = []
+            def dismiss(dialog):
+                prompts.append(dialog.message)
+                dialog.dismiss()
+            page.on('dialog', dismiss)
+            valid = envelope(payload(locale))
+            corrupted = dict(valid)
+            archive = bytearray(base64.b64decode(valid['content']))
+            content_offset = 30 + int.from_bytes(archive[26:28], 'little') + int.from_bytes(archive[28:30], 'little')
+            archive[content_offset] ^= 1
+            corrupted['content'] = base64.b64encode(archive).decode('ascii')
+            invalid_payload = payload(locale)
+            invalid_payload['keys'] = [{'keyId':'forbidden'}]
+            raw_json_error = page.evaluate("""() => {try {JSON.parse('not-json');} catch (error) {return error.message;}}""")
+            invalid_node = payload(locale)
+            invalid_node['ssh']['nodes'][0]['endpoint']['host'] = ''
+            variants = [('not-json',raw_json_error),
+                        (dict(valid,version=99),message(page, 'settings.transfer.envelope_unsupported')),
+                        (envelope(invalid_payload),message(page, 'settings.transfer.payload_unsupported')),
+                        (dict(valid,content=base64.b64encode(b'short').decode('ascii')),message(page, 'settings.transfer.archive_size_invalid')),
+                        (corrupted,message(page, 'settings.transfer.archive_checksum_failed')),
+                        (envelope(invalid_node),'Each SSH node needs a valid host, port and username.')]
+            for value, expected in variants:
+                upload(page, value)
+                wait_status(page, expected)
+                assert not prompts and snapshot(page) == before
+            upload(page, 'x' * 1048577)
+            wait_status(page, message(page, 'settings.transfer.file_size_invalid'))
+            assert not prompts and snapshot(page) == before
+            page.evaluate("""() => {
+                window.originalFileText = File.prototype.text;
+                File.prototype.text = () => Promise.reject(new Error(''));
+            }""")
+            try:
+                upload(page, valid)
+                wait_status(page, message(page, 'settings.transfer.import_failed'))
+            finally:
+                page.evaluate('() => {File.prototype.text = window.originalFileText;}')
+            page.evaluate("""() => {
+                window.originalBlob = window.Blob;
+                window.Blob = function() {throw new Error('');};
+            }""")
+            try:
+                page.click('#settings-export')
+                wait_status(page, message(page, 'settings.transfer.export_failed'))
+                page.wait_for_function('() => !document.getElementById("settings-export").disabled')
+            finally:
+                page.evaluate('() => {window.Blob = window.originalBlob;}')
+            assert not prompts and snapshot(page) == before
+            assert page.evaluate('() => window.transferDocumentMarker') == 'original'
+            page.remove_listener('dialog', dismiss)
+            page.once('dialog', lambda dialog: (prompts.append(dialog.message), dialog.accept()))
+            page.evaluate("""detail => {
+                window.originalSetItem = Storage.prototype.setItem;
+                Storage.prototype.setItem = function(key, value) {
+                    if (key === 'terminal.pref.v1') throw new DOMException(detail, 'QuotaExceededError');
+                    return originalSetItem.call(this, key, value);
+                };
+            }""", QUOTA_DETAIL)
+            try:
+                upload(page, valid)
+                wait_status(page, message(page, 'settings.transfer.partial_failure', {'detail':QUOTA_DETAIL}))
+                assert page.locator('#settings-transfer-status b').count() == 0
+            finally:
+                page.evaluate('() => {Storage.prototype.setItem = window.originalSetItem;}')
+            partially_imported = snapshot(page)
+            assert partially_imported['storage'] == before['storage']
+            assert partially_imported['key'] == before['key']
+            assert partially_imported['ssh']['profiles'][:2] == before['ssh']['profiles']
+            assert len(partially_imported['ssh']['profiles']) == 4
+            assert len(partially_imported['ssh']['history']) == 6
+            assert page.evaluate('keyId => window.terminalTest.browserSshKeyRecordExistsForTest(keyId)', key['keyId'])
+            # The successful path schedules reload after 50 ms; this failed path must not schedule it.
+            page.wait_for_timeout(150)
+            assert page.evaluate('() => window.transferDocumentMarker') == 'original'
+            assert snapshot(page) == partially_imported, 'A partial failure automatically retried the import'
+            assert len(prompts) == 1
+        finally:
+            fixture.close_context(context)
+
+
+def main():
+    proc, url = fixture.start_server()
+    try:
+        with fixture.load_playwright()[0]() as playwright:
+            browser = playwright.chromium.launch(headless=True)
+            try:
+                for test in [test_export_download_keeps_data_and_excludes_keys,
+                             test_import_confirmation_cancel_preserves_all_state,
+                             test_import_merges_data_and_reloads_provided_preferences,
+                             test_import_validation_and_partial_failure_boundaries]:
+                    test(browser, url)
+                    print(test.__name__ + ': ok', flush=True)
+            finally:
+                browser.close()
+    finally:
+        fixture.stop_server(proc)
+
+
+if __name__ == '__main__':
+    main()

From 69e80a36640320273fce379dbf30240354e47f5b Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sun, 20 Sep 2026 01:38:35 +0800
Subject: [PATCH 21/43] Clarify and localize settings preference actions

---
 README.md                                     |   8 +-
 docs/agent_ui_review_plan.md                  |  48 +++-
 docs/ui_copy_review.tsv                       |  13 +-
 static/js/standterm-messages.js               |  26 ++-
 templates/index.html                          |  32 +--
 ...settings_preferences_i18n_browser_smoke.py | 219 ++++++++++++++++++
 6 files changed, 328 insertions(+), 18 deletions(-)
 create mode 100644 tests/settings_preferences_i18n_browser_smoke.py

diff --git a/README.md b/README.md
index 9c6bc6a..7da1735 100644
--- a/README.md
+++ b/README.md
@@ -327,9 +327,15 @@ terminal; compact windows keep those actions in the Agent panel.
 Chinese (Taiwan) for browser access and recovery, Agent permissions, input and
 file-copy approvals, transfer results, local connection information, connection
 forms, SSH login, SSH profile/route editors (including browser-key and
-host-fingerprint controls), and settings import/export. The choice
+host-fingerprint controls), settings import/export, and settings navigation and
+preference actions. The choice
 applies the next time the page opens; saving it does not reload the current
 page or change its connections and grants. Other areas remain in English.
+**Save preferences** stores the General and Appearance preference fields.
+Other settings have separate actions. **Reset preferences** immediately restores
+all browser preference defaults and reloads the page, losing unsaved edits and
+stopping this page's temporary SSH tunnels. Saved SSH profiles, history and keys,
+and the Agent panel position remain stored.
 The [copy and translation table](docs/ui_copy_review.tsv) and
 [localization plan](docs/agent_ui_review_plan.md) describe the review workflow.
 
diff --git a/docs/agent_ui_review_plan.md b/docs/agent_ui_review_plan.md
index e3570b1..cc5f75d 100644
--- a/docs/agent_ui_review_plan.md
+++ b/docs/agent_ui_review_plan.md
@@ -43,7 +43,7 @@ do not consolidate them merely to shorten labels.
 | 3 | Review English UI copy and terminology | Core terms agreed; initial English sources reviewed | Review each proposed change for target, permissions, consequences, and next action; check related tooltips, Desktop help, and tests before applying it. |
 | 4 | Finalize the translation exchange table | Initial exchange validated with an independent translator | Stable keys, approved English source, context, and placeholder constraints are sufficient for an independent translator. |
 | 5 | Pilot Agent access and local connection information | Implemented; validation below | Cover static and dynamic text, titles, and accessible names; preserve connected sessions and authorization; support English fallback. |
-| 6 | Translate and integrate approved rows | Agent pilot, browser access/recovery, Agent approvals/transfers, connection/login controls, SSH route/profile editors and settings transfer integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
+| 6 | Translate and integrate approved rows | Agent pilot, browser access/recovery, Agent approvals/transfers, connection/login controls, SSH route/profile editors, settings transfer and preference actions integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
 | 7 | Expand Core and Desktop coverage | Deferred | Verify secondary windows, native menus, setup, diagnostics, packaging, and representative layouts. |
 
 ## Validation of the reliability changes
@@ -370,3 +370,49 @@ The next small candidate is reviewing reset-to-defaults and general settings
 navigation, especially what reset changes and what its reload stops. Desktop,
 remaining settings panels and full runtime diagnostic localization remain outside
 this completed workflow.
+
+## Settings navigation and preference actions
+
+Settings navigation, heading, close accessible name, preference actions and their
+scope hints now use reviewed English and Traditional Chinese. The table contains
+406 rows: 405 bilingual messages and the existing removal. The language-preview
+hint is shorter; README retains the detailed coverage list. The appearance
+preview note matches the renamed Save preferences button.
+
+Save preferences reads the General and Appearance fields and applies terminal
+appearance without reloading. Close only hides the modal; reopening repopulates
+these fields from saved preferences. SSH profile actions, immediate history
+preferences, imports and Server actions keep their own persistence rules.
+Reset preferences immediately restores every PREF_DEFAULTS entry and reloads,
+including language, history-saving preference and default Agent permission.
+Changing the default permission does not itself grant Agent access. Reload
+loses unsaved drafts and stops this page's temporary SSH tunnels. Saved SSH
+profiles, history, keys and Agent panel position stay stored.
+
+The footer explains both actions on every tab, with separate accessible
+descriptions. Its hints stay outside the scrolling tab content. No handlers,
+typed tab IDs, storage order, authorization rules or confirmation flows changed.
+
+| Finding | Severity | Evidence | Critic remedy | Main response | Resolution | Validation |
+| --- | --- | --- | --- | --- | --- | --- |
+| Save and Close do not commit or undo every settings operation | Medium | Preference handlers, independent SSH/Server actions and immediate history toggle | Name preference scope; avoid global save/cancel claims | Accept | Use Save preferences and Close settings; describe separate actions | Bilingual draft/close/save checks plus existing SSH profile save-semantics regression |
+| Reset is broader than Save and discards unsaved drafts | Medium | PREF_DEFAULTS, reset handler and independent SSH key/profile storage | Distinguish all browser preferences, saved data and drafts | Accept | State immediate defaults/reload, draft loss and saved SSH retention | Real reload restores complete platform defaults; exact SSH/history/key and unrelated storage retention |
+| Consequences must remain visible beside Reset | Low | Existing modal scrolling boundary and disconnect tunnel cleanup | Persistent hints, accessible descriptions and narrow/short-window checks | Accept | Nonshrinking footer with wrapping action row; explicitly scope tunnels to this page | Both locales, all five tabs, content scroll endpoints at 1280x800, 480x800 and 480x600 |
+| Additional Reset confirmation | Optional UX policy | Reset already executes immediately | Alternative confirmation can reduce accidental activation | Defer | Preserve workflow and provide visible consequences | Reconsider if accidental resets are reported or confirmation is requested |
+
+Two bounded independent review passes found no remaining material issue. The
+second pass suggested naming this page's tunnels explicitly; that clarification
+was adopted. The tests exercise actual preference storage and reload, not only
+matching translated labels. Existing non-atomic storage behavior is unchanged.
+
+| Check | Result |
+| --- | --- |
+| New preference browser suite | Three cases passed in both languages: draft/close/save and next-page locale, complete reset/reload boundaries, and navigation/footer layout. |
+| Existing focused regressions | Three cases passed: SSH profile save semantics, key/settings transfer lifecycle, and language behavior with existing access. |
+| Catalog | Six exporter and six lookup tests passed; all 405 bilingual keys are referenced and the generated catalog is current. |
+| Static checks | Python syntax and diff whitespace checks passed. |
+
+Validation uses WSL Chromium; native Desktop and operating-system dialogs were
+not part of this phase. Remaining General/Appearance fields, Server controls and
+Diagnostics content still have English copy. The next candidate is a separate
+review of SSH tunnel setup/stop wording and target scope before localization.
diff --git a/docs/ui_copy_review.tsv b/docs/ui_copy_review.tsv
index 8c063d5..097781f 100644
--- a/docs/ui_copy_review.tsv
+++ b/docs/ui_copy_review.tsv
@@ -19,7 +19,7 @@ agent.copy.keep_both	The displayed destination is the exact keep-both name selec
 agent.transfer.stop	Stop	Stop	停止	Request cancellation before commit.		Keep existing cancellation barrier and disabled state; clicking alone is not confirmation of cancellation.	translation-reviewed	templates/index.html:9270
 agent.transfer.committing	The destination is being published and cannot be stopped	Finishing the copy; it can no longer be stopped.	正在完成複製，已無法停止。	Disabled Stop tooltip during committing.		Not a success or failure result. Do not enable Stop after the commit barrier.	translation-reviewed	templates/index.html:9272
 settings.language.label	Language (Agent preview)	Language (preview)	語言（預覽）	Local display preference for the implemented browser, Agent and connection workflows.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
-settings.language.hint	Applies to Agent access and connection info next time you open this page. Other areas remain in English.	Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms, SSH login/editors and settings import/export. Other areas remain in English.	下次開啟此頁面時套用於瀏覽器與 Agent 存取、核准、傳輸、連線表單、SSH 登入／編輯器及設定匯入／匯出，其他區域仍顯示英文。	Language change never reloads an active terminal.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+settings.language.hint	Applies to Agent access and connection info next time you open this page. Other areas remain in English.	Applies next time you open this page. Some areas remain in English.	下次開啟此頁面時套用，部分區域仍顯示英文。	Language changes do not reload the page. README lists the current preview coverage.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 settings.agent.legend	Agent access	Agent access	Agent 存取	Settings fieldset title.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 settings.agent.permission	Default Agent permission	Default Agent permission	Agent 預設權限	Saved permission used by the Authorize agent button; saving alone does not grant access.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 settings.agent.hint	Authorize agent applies this permission to the current tab and creates a standard token.	Authorize agent applies this permission to the current tab and creates a standard token.	「授權 Agent」會將此權限套用至目前分頁，並建立標準權杖。	Explain the primary button without implying that saving a setting authorizes a tab.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
@@ -394,3 +394,14 @@ settings.transfer.archive_truncated	Settings archive is truncated.	Settings arch
 settings.transfer.archive_entry_name_invalid	Settings archive entry name is invalid.	Settings archive entry name is invalid.	設定封存檔項目名稱無效。	ZIP local and central entry names differ.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:6143
 settings.transfer.archive_checksum_failed	Settings archive checksum failed.	Settings archive checksum failed.	設定封存檔校驗失敗。	CRC32 validation of extracted content failed.		Display only. Keep envelope format/version, size limits, ZIP validation, merge order, key exclusion and reload behavior unchanged. Do not map raw JSON/base64/model error text.	translation-reviewed	templates/index.html:6145
 settings.transfer.partial_failure		SSH settings were saved, but browser settings could not be fully applied. Check settings before importing again to avoid duplicate profiles. Details: {detail}	SSH 設定已儲存，但瀏覽器設定未能完整套用。若需再次匯入，請先檢查設定，以免產生重複的連線設定。詳細資訊：{detail}	New display wrapper only for preference/layout failures after SSH persistence has completed successfully. Detail remains the original exception message.	{detail}	Do not alter write order, add rollback or retry, or claim that SSH writes were reverted. Do not use this for parser errors or failed SSH persistence. Render detail as plain text with one-pass interpolation.	translation-reviewed	templates/index.html:importBrowserSettingsText (new post-SSH-save error wrapper)
+settings.title	Settings	Settings	設定	Settings modal heading.		Display only. Preserve typed tab IDs, existing handlers, preference storage, immediate actions and reload timing.	translation-reviewed	templates/index.html
+settings.close		Close settings	關閉設定	Accessible name and optional tooltip for the existing cross button. Visible glyph stays unchanged; close only hides the modal.		Display only. Preserve typed tab IDs, existing handlers, preference storage, immediate actions and reload timing. Do not say Discard, Cancel all, or promise to undo saved SSH/server/import actions. Reopening restores preference controls from saved prefs, while other editor state has its own rules.	translation-reviewed	templates/index.html
+settings.nav.general	General	General	一般	General navigation label and General preference fieldset legend; reuse the same key in both places.		Display only. Preserve typed tab IDs, existing handlers, preference storage, immediate actions and reload timing. Keep data-tab=general unchanged.	translation-reviewed	templates/index.html
+settings.nav.appearance	Appearance	Appearance	外觀	Appearance navigation label and Appearance fieldset legend; reuse the same key in both places.		Display only. Preserve typed tab IDs, existing handlers, preference storage, immediate actions and reload timing. Keep data-tab=appearance unchanged.	translation-reviewed	templates/index.html
+settings.nav.server	Server	Server	伺服器	Server navigation label only; its contents are outside this translation batch.		Display only. Preserve typed tab IDs, existing handlers, preference storage, immediate actions and reload timing. Keep data-tab=server unchanged; do not imply footer Save applies server settings.	translation-reviewed	templates/index.html
+settings.nav.diagnostics	Diagnostics	Diagnostics	診斷	Diagnostics navigation label only; its log and action contents remain outside this batch.		Display only. Preserve typed tab IDs, existing handlers, preference storage, immediate actions and reload timing. Keep data-tab=diagnostics unchanged.	translation-reviewed	templates/index.html
+settings.save	Save Changes	Save preferences	儲存偏好設定	Footer button persists preference fields from General and Appearance, applies terminal appearance, then closes the modal. Language remains immutable for the current page.		Display only. Preserve typed tab IDs, existing handlers, preference storage, immediate actions and reload timing. Does not save pending SSH profile names/routes or submit server operations. Does not reload the page for language changes.	translation-reviewed	templates/index.html
+settings.reset	Reset	Reset preferences	重設偏好設定	Footer button immediately replaces prefs with PREF_DEFAULTS, saves them and reloads the page; no confirmation is introduced.		Display only. This is not a factory reset. Restore all PREF_DEFAULTS, including history-saving preference and default Agent permission. Saved SSH profiles, history, key stores, panel position and server settings are not reset. Unsaved edits are lost on reload, and this page's temporary SSH tunnels stop.	translation-reviewed	templates/index.html
+settings.save_scope_hint		Saves General and Appearance preferences. Other settings have separate actions.	儲存「一般」與「外觀」的偏好設定。其他設定請個別操作。	First always-visible footer hint, outside tab content. Clarifies save scope even while viewing SSH profiles, Server or Diagnostics.		Display only. Preserve typed tab IDs, existing handlers, preference storage, immediate actions and reload timing. Keep visible on every tab, not only in a title tooltip. General import/export and other immediate actions retain their own handlers; do not imply they depend on Save.	translation-reviewed	templates/index.html
+settings.reset_hint		Immediately restores default browser preferences and reloads this page. Unsaved edits are lost and this page's temporary SSH tunnels stop. Saved SSH profiles and keys remain.	立即還原瀏覽器預設偏好並重新載入頁面。未儲存的編輯將遺失，此頁面的暫時 SSH 通道會停止；已儲存的 SSH 連線設定與金鑰會保留。	Second always-visible footer hint beside Reset preferences. Reset covers all PREF_DEFAULTS, including history-saving preference and default Agent permission; saved SSH records are distinct from in-memory drafts.		Display only. Preserve immediate reset and reload timing; introduce no confirmation. Explicitly distinguish saved SSH profiles/keys from unsaved edits. Do not imply reset is restricted to currently visible preference fields, that drafts survive, or that all terminal processes end.	translation-reviewed	templates/index.html
+settings.theme_preview_hint	Preview only. Save Changes applies this theme.	Preview only. Save preferences applies this theme.	僅供預覽。按下「儲存偏好設定」後套用此配色。	Existing appearance preview note must match the renamed footer button; this is the only extra appearance text in this batch.		Display only. Preserve typed tab IDs, existing handlers, preference storage, immediate actions and reload timing. Does not promise immediate terminal-theme application while merely changing the preview selector.	translation-reviewed	templates/index.html
diff --git a/static/js/standterm-messages.js b/static/js/standterm-messages.js
index bf28987..7fc0634 100644
--- a/static/js/standterm-messages.js
+++ b/static/js/standterm-messages.js
@@ -226,8 +226,19 @@
         "settings.agent.legend": "Agent access",
         "settings.agent.observe": "Read only + token",
         "settings.agent.permission": "Default Agent permission",
-        "settings.language.hint": "Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms, SSH login/editors and settings import/export. Other areas remain in English.",
+        "settings.close": "Close settings",
+        "settings.language.hint": "Applies next time you open this page. Some areas remain in English.",
         "settings.language.label": "Language (preview)",
+        "settings.nav.appearance": "Appearance",
+        "settings.nav.diagnostics": "Diagnostics",
+        "settings.nav.general": "General",
+        "settings.nav.server": "Server",
+        "settings.reset": "Reset preferences",
+        "settings.reset_hint": "Immediately restores default browser preferences and reloads this page. Unsaved edits are lost and this page's temporary SSH tunnels stop. Saved SSH profiles and keys remain.",
+        "settings.save": "Save preferences",
+        "settings.save_scope_hint": "Saves General and Appearance preferences. Other settings have separate actions.",
+        "settings.theme_preview_hint": "Preview only. Save preferences applies this theme.",
+        "settings.title": "Settings",
         "settings.transfer.archive_checksum_failed": "Settings archive checksum failed.",
         "settings.transfer.archive_directory_invalid": "Settings archive directory is invalid.",
         "settings.transfer.archive_directory_truncated": "Settings archive directory is truncated.",
@@ -622,8 +633,19 @@
         "settings.agent.legend": "Agent \u5b58\u53d6",
         "settings.agent.observe": "\u552f\u8b80 + \u6b0a\u6756",
         "settings.agent.permission": "Agent \u9810\u8a2d\u6b0a\u9650",
-        "settings.language.hint": "\u4e0b\u6b21\u958b\u555f\u6b64\u9801\u9762\u6642\u5957\u7528\u65bc\u700f\u89bd\u5668\u8207 Agent \u5b58\u53d6\u3001\u6838\u51c6\u3001\u50b3\u8f38\u3001\u9023\u7dda\u8868\u55ae\u3001SSH \u767b\u5165\uff0f\u7de8\u8f2f\u5668\u53ca\u8a2d\u5b9a\u532f\u5165\uff0f\u532f\u51fa\uff0c\u5176\u4ed6\u5340\u57df\u4ecd\u986f\u793a\u82f1\u6587\u3002",
+        "settings.close": "\u95dc\u9589\u8a2d\u5b9a",
+        "settings.language.hint": "\u4e0b\u6b21\u958b\u555f\u6b64\u9801\u9762\u6642\u5957\u7528\uff0c\u90e8\u5206\u5340\u57df\u4ecd\u986f\u793a\u82f1\u6587\u3002",
         "settings.language.label": "\u8a9e\u8a00\uff08\u9810\u89bd\uff09",
+        "settings.nav.appearance": "\u5916\u89c0",
+        "settings.nav.diagnostics": "\u8a3a\u65b7",
+        "settings.nav.general": "\u4e00\u822c",
+        "settings.nav.server": "\u4f3a\u670d\u5668",
+        "settings.reset": "\u91cd\u8a2d\u504f\u597d\u8a2d\u5b9a",
+        "settings.reset_hint": "\u7acb\u5373\u9084\u539f\u700f\u89bd\u5668\u9810\u8a2d\u504f\u597d\u4e26\u91cd\u65b0\u8f09\u5165\u9801\u9762\u3002\u672a\u5132\u5b58\u7684\u7de8\u8f2f\u5c07\u907a\u5931\uff0c\u6b64\u9801\u9762\u7684\u66ab\u6642 SSH \u901a\u9053\u6703\u505c\u6b62\uff1b\u5df2\u5132\u5b58\u7684 SSH \u9023\u7dda\u8a2d\u5b9a\u8207\u91d1\u9470\u6703\u4fdd\u7559\u3002",
+        "settings.save": "\u5132\u5b58\u504f\u597d\u8a2d\u5b9a",
+        "settings.save_scope_hint": "\u5132\u5b58\u300c\u4e00\u822c\u300d\u8207\u300c\u5916\u89c0\u300d\u7684\u504f\u597d\u8a2d\u5b9a\u3002\u5176\u4ed6\u8a2d\u5b9a\u8acb\u500b\u5225\u64cd\u4f5c\u3002",
+        "settings.theme_preview_hint": "\u50c5\u4f9b\u9810\u89bd\u3002\u6309\u4e0b\u300c\u5132\u5b58\u504f\u597d\u8a2d\u5b9a\u300d\u5f8c\u5957\u7528\u6b64\u914d\u8272\u3002",
+        "settings.title": "\u8a2d\u5b9a",
         "settings.transfer.archive_checksum_failed": "\u8a2d\u5b9a\u5c01\u5b58\u6a94\u6821\u9a57\u5931\u6557\u3002",
         "settings.transfer.archive_directory_invalid": "\u8a2d\u5b9a\u5c01\u5b58\u6a94\u76ee\u9304\u7121\u6548\u3002",
         "settings.transfer.archive_directory_truncated": "\u8a2d\u5b9a\u5c01\u5b58\u6a94\u76ee\u9304\u4e0d\u5b8c\u6574\u3002",
diff --git a/templates/index.html b/templates/index.html
index a0431dd..c40d85e 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -482,7 +482,9 @@
             background: #0d0d0d; border: 1px solid #444; border-radius: 5px; color: #ddd;
             padding: 10px; font: 11px/1.45 Consolas, "Courier New", monospace; white-space: pre; outline: none;
         }
-        .settings-footer { display: flex; justify-content: space-between; padding: 12px 20px; border-top: 1px solid #3a3a3c; }
+        .settings-footer { display: flex; flex-direction: column; flex-shrink: 0; gap: 8px; padding: 12px 20px; border-top: 1px solid #3a3a3c; }
+        .settings-footer .settings-status { margin: 0; }
+        .settings-footer-actions { display: flex; justify-content: space-between; flex-wrap: wrap; gap: 8px; }
         .settings-btn { padding: 7px 18px; border: none; border-radius: 5px; cursor: pointer; font-size: 13px; }
 
         /* Controls */
@@ -1118,25 +1120,25 @@
     <div id="settings-modal">
         <div class="settings-box">
             <div class="settings-header">
-                <h3>Settings</h3>
-                <button class="header-btn" id="settings-close" style="background:#ff453a;">&times;</button>
+                <h3 data-i18n="settings.title">Settings</h3>
+                <button class="header-btn" id="settings-close" style="background:#ff453a;" aria-label="Close settings" title="Close settings" data-i18n-aria-label="settings.close" data-i18n-title="settings.close">&times;</button>
             </div>
             <div class="settings-body">
                 <div class="settings-nav">
-                    <div class="settings-nav-item active" data-tab="general">General</div>
-                    <div class="settings-nav-item" data-tab="appearance">Appearance</div>
+                    <div class="settings-nav-item active" data-tab="general" data-i18n="settings.nav.general">General</div>
+                    <div class="settings-nav-item" data-tab="appearance" data-i18n="settings.nav.appearance">Appearance</div>
                     <div class="settings-nav-item" data-tab="ssh-sessions" data-i18n="ssh.profiles.title">SSH profiles</div>
-                    <div class="settings-nav-item" data-tab="server">Server</div>
-                    <div class="settings-nav-item" data-tab="diagnostics">Diagnostics</div>
+                    <div class="settings-nav-item" data-tab="server" data-i18n="settings.nav.server">Server</div>
+                    <div class="settings-nav-item" data-tab="diagnostics" data-i18n="settings.nav.diagnostics">Diagnostics</div>
                 </div>
                 <div class="settings-content">
                     <div class="settings-tab active" id="tab-general">
                         <fieldset class="settings-fieldset">
-                            <legend>General</legend>
+                            <legend data-i18n="settings.nav.general">General</legend>
                             <div class="settings-row"><label for="pref-uiLanguage" data-i18n="settings.language.label">Language (preview)</label>
                                 <select id="pref-uiLanguage"><option value="en">English</option><option value="zh-TW" lang="zh-TW">繁體中文（台灣）</option></select>
                             </div>
-                            <div class="settings-status" data-i18n="settings.language.hint">Applies next time you open this page to browser and Agent access, approvals, transfers, connection forms, SSH login/editors and settings import/export. Other areas remain in English.</div>
+                            <div class="settings-status" data-i18n="settings.language.hint">Applies next time you open this page. Some areas remain in English.</div>
                             <div class="settings-row"><label for="pref-useCustomMenu">Enable custom context menu</label><input type="checkbox" id="pref-useCustomMenu"></div>
                             <div class="settings-row"><label for="pref-copyOnSelect">Copy on select</label><input type="checkbox" id="pref-copyOnSelect"></div>
                             <div class="settings-row"><label for="pref-enablePicPreview">Enable pic preview</label><input type="checkbox" id="pref-enablePicPreview"></div>
@@ -1170,7 +1172,7 @@ <h3>Settings</h3>
                     </div>
                     <div class="settings-tab" id="tab-appearance">
                         <fieldset class="settings-fieldset">
-                            <legend>Appearance</legend>
+                            <legend data-i18n="settings.nav.appearance">Appearance</legend>
                             <div class="settings-row"><label for="pref-colorScheme">Color scheme</label>
                                 <select id="pref-colorScheme">
                                     <optgroup label="Custom">
@@ -1196,7 +1198,7 @@ <h3>Settings</h3>
                                 <div>$ <span class="settings-theme-cursor" aria-label="Cursor"></span></div>
                                 <div class="settings-theme-palette"></div>
                             </div>
-                            <div class="settings-status">Preview only. Save Changes applies this theme.</div>
+                            <div class="settings-status" data-i18n="settings.theme_preview_hint">Preview only. Save preferences applies this theme.</div>
                             <div class="settings-row"><label for="pref-fontFace">Font face</label><input type="text" id="pref-fontFace"></div>
                             <div class="settings-row"><label for="pref-powerlineSymbols" title="Use the bundled Powerline symbols font as a fallback for prompt glyphs such as the branch symbol.">Enable Powerline symbol fallback</label><input type="checkbox" id="pref-powerlineSymbols"></div>
                             <div class="settings-row"><label for="pref-fontSize">Font size</label><input type="number" id="pref-fontSize" min="8" max="32"></div>
@@ -1308,8 +1310,12 @@ <h3>Settings</h3>
                 </div>
             </div>
             <div class="settings-footer">
-                <button class="settings-btn" id="settings-reset" style="background:#3a3a3c; color:#aaa;">Reset</button>
-                <button class="settings-btn" id="settings-save" style="background:#0a84ff; color:white;">Save Changes</button>
+                <div class="settings-status" id="settings-save-hint" data-i18n="settings.save_scope_hint">Saves General and Appearance preferences. Other settings have separate actions.</div>
+                <div class="settings-status" id="settings-reset-hint" data-i18n="settings.reset_hint">Immediately restores default browser preferences and reloads this page. Unsaved edits are lost and this page's temporary SSH tunnels stop. Saved SSH profiles and keys remain.</div>
+                <div class="settings-footer-actions">
+                    <button class="settings-btn" id="settings-reset" style="background:#3a3a3c; color:#aaa;" aria-describedby="settings-reset-hint" data-i18n="settings.reset">Reset preferences</button>
+                    <button class="settings-btn" id="settings-save" style="background:#0a84ff; color:white;" aria-describedby="settings-save-hint" data-i18n="settings.save">Save preferences</button>
+                </div>
             </div>
         </div>
     </div>
diff --git a/tests/settings_preferences_i18n_browser_smoke.py b/tests/settings_preferences_i18n_browser_smoke.py
new file mode 100644
index 0000000..1cd4aab
--- /dev/null
+++ b/tests/settings_preferences_i18n_browser_smoke.py
@@ -0,0 +1,219 @@
+"""Check localized preference drafts, reset scope, and persistent footer guidance."""
+import json
+from pathlib import Path
+import sys
+
+sys.path.insert(0, str(Path(__file__).resolve().parent))
+import agent_browser_smoke as fixture
+from settings_transfer_i18n_browser_smoke import message, new_page, snapshot
+
+
+TABS = ['general','appearance','ssh-sessions','server','diagnostics']
+ACCESS_MUTATIONS = {'agent_mode_set','agent_attach','agent_detach','agent_pause',
+                    'agent_external_token_create','start_ssh','stop_ssh'}
+
+
+def preferences(page):
+    return page.evaluate("""async () => {
+        const envelope = await window.terminalTest.createBrowserSettingsEnvelopeForTest();
+        return window.terminalTest.decodeBrowserSettingsEnvelopeForTest(envelope).preferences;
+    }""")
+
+
+def access_state(page):
+    return page.evaluate("""() => {
+        const active = window.terminalTest.getActiveAgentState();
+        return {socket:window.terminalTest.getSocketState(),policy:window.terminalTest.getTerminalPolicy(),
+            agent:Object.fromEntries(['terminal_id','connected','session_id','viewer_id','agent_binding_id',
+                'mode','mode_version','external_token'].map(key => [key,active[key]]))};
+    }""")
+
+
+def edit_preferences(page, next_locale):
+    page.click('.settings-nav-item[data-tab="general"]')
+    page.locator('#pref-copyOnSelect').check()
+    page.locator('#pref-useCustomMenu').uncheck()
+    page.select_option('#pref-urlClickAction', 'newtab')
+    page.select_option('#pref-uiLanguage', next_locale)
+    page.select_option('#pref-agentAccessMintMode', 'observe')
+    page.click('.settings-nav-item[data-tab="appearance"]')
+    page.fill('#pref-fontSize', '22')
+    page.select_option('#pref-fontWeight', '600')
+    page.select_option('#pref-cursorStyle', 'bar')
+    page.select_option('#pref-colorScheme', 'campbell')
+
+
+def assert_no_access_mutations(page):
+    assert not any(event['event'] in ACCESS_MUTATIONS for event in fixture.get_emitted(page)), \
+        'A preference action changed access or started/stopped a connection'
+
+
+def test_close_discards_draft_and_save_applies_without_reload(browser, url):
+    for locale in ['en','zh-TW']:
+        context, page, key = new_page(browser, url, locale)
+        try:
+            before = snapshot(page)
+            before_preferences = preferences(page)
+            before_options = page.evaluate('() => window.terminalTest.getActiveTerminalOptions()')
+            before_access = access_state(page)
+            next_locale = 'zh-TW' if locale == 'en' else 'en'
+            edit_preferences(page, next_locale)
+            assert page.evaluate('() => window.terminalTest.getActiveTerminalOptions()') == before_options
+            page.click('#settings-close')
+            page.wait_for_selector('#settings-modal.open', state='hidden')
+            page.click('#quick-settings')
+            assert snapshot(page) == before
+            assert preferences(page) == before_preferences
+            assert page.evaluate('() => window.transferDocumentMarker') == 'original'
+            assert page.input_value('#pref-uiLanguage') == locale
+            assert page.locator('#pref-copyOnSelect').is_checked() is False
+            assert page.locator('#pref-useCustomMenu').is_checked()
+            assert page.input_value('#pref-urlClickAction') == 'overlay'
+            assert page.input_value('#pref-agentAccessMintMode') == 'approval_pending'
+            assert page.input_value('#pref-fontSize') == '18'
+            assert page.input_value('#pref-fontWeight') == before_preferences['fontWeight']
+            assert page.input_value('#pref-cursorStyle') == before_preferences['cursorStyle']
+            assert page.input_value('#pref-colorScheme') == before_preferences['colorScheme']
+            assert access_state(page) == before_access
+
+            edit_preferences(page, next_locale)
+            page.evaluate('() => window.terminalTest.clearEmitted()')
+            page.click('#settings-save')
+            page.wait_for_selector('#settings-modal.open', state='hidden')
+            saved = snapshot(page)
+            expected = dict(before_preferences, uiLanguage=next_locale, copyOnSelect=True,
+                            useCustomMenu=False, urlClickAction='newtab',agentAccessMintMode='observe',
+                            fontSize=22,fontWeight='600',cursorStyle='bar',colorScheme='campbell')
+            assert json.loads(saved['storage']['terminal.pref.v1']) == expected
+            assert preferences(page) == expected
+            options = page.evaluate('() => window.terminalTest.getActiveTerminalOptions()')
+            for field in ['fontSize','fontWeight','cursorStyle','colorScheme']:
+                assert options[field] == expected[field]
+            if options['mirrorCursorStyle'] is not None:
+                assert options['mirrorCursorStyle'] == 'bar'
+            assert saved['ssh'] == before['ssh'] and saved['key'] == key
+            assert {name:value for name,value in saved['storage'].items() if name != 'terminal.pref.v1'} == {
+                name:value for name,value in before['storage'].items() if name != 'terminal.pref.v1'}
+            assert page.evaluate('() => window.transferDocumentMarker') == 'original'
+            assert page.locator('html').get_attribute('lang') == locale
+            assert access_state(page) == before_access
+            assert_no_access_mutations(page)
+
+            next_page = context.new_page()
+            next_page.goto(fixture.debug_url(url), wait_until='domcontentloaded')
+            next_page.wait_for_function('() => !!window.terminalTest')
+            assert next_page.locator('html').get_attribute('lang') == next_locale
+            assert preferences(next_page) == expected
+            assert next_page.evaluate('() => window.terminalTest.getActiveTerminalOptions().fontSize') == 22
+        finally:
+            fixture.close_context(context)
+
+
+def test_reset_reloads_only_preference_defaults(browser, url):
+    baseline_context = browser.new_context(locale='en-US')
+    try:
+        baseline = baseline_context.new_page()
+        baseline.goto(fixture.debug_url(url), wait_until='domcontentloaded')
+        baseline.wait_for_function('() => !!window.terminalTest')
+        defaults = preferences(baseline)
+        assert defaults['uiLanguage'] == 'en'
+    finally:
+        fixture.close_context(baseline_context)
+    for locale in ['en','zh-TW']:
+        context, page, key = new_page(browser, url, locale)
+        try:
+            page.evaluate("() => localStorage.setItem('fixture.unrelated', 'Keep <b>& {value}')")
+            before = snapshot(page)
+            assert preferences(page) != defaults
+            with page.expect_navigation(wait_until='domcontentloaded'):
+                page.click('#settings-reset')
+            page.wait_for_function('() => !!window.terminalTest')
+            after = snapshot(page)
+            assert page.evaluate('() => performance.getEntriesByType("navigation")[0].type') == 'reload'
+            assert page.evaluate('() => window.transferDocumentMarker === undefined')
+            assert json.loads(after['storage']['terminal.pref.v1']) == defaults
+            assert preferences(page) == defaults
+            assert page.locator('html').get_attribute('lang') == 'en'
+            assert after['ssh'] == before['ssh'] and after['key'] == key
+            assert {name:value for name,value in after['storage'].items() if name != 'terminal.pref.v1'} == {
+                name:value for name,value in before['storage'].items() if name != 'terminal.pref.v1'}
+            assert page.evaluate('keyId => window.terminalTest.browserSshKeyRecordExistsForTest(keyId)', key['keyId'])
+            assert_no_access_mutations(page)
+        finally:
+            fixture.close_context(context)
+
+
+def assert_catalog_text(page, element):
+    key = element.get_attribute('data-i18n')
+    assert key, 'A localized settings element lacks its catalog key'
+    assert element.inner_text() == message(page, key)
+
+
+def assert_footer_fits(page):
+    metrics = page.locator('.settings-footer').evaluate("""footer => {
+        const box = document.querySelector('.settings-box').getBoundingClientRect();
+        return [...footer.querySelectorAll('[data-i18n]')].map(element => {
+            const rect = element.getBoundingClientRect();
+            return {key:element.dataset.i18n,width:rect.width,height:rect.height,
+                inside:rect.left >= Math.max(0,box.left)-1 && rect.right <= Math.min(innerWidth,box.right)+1
+                    && rect.top >= Math.max(0,box.top)-1 && rect.bottom <= Math.min(innerHeight,box.bottom)+1,
+                unclipped:element.scrollWidth <= element.clientWidth+1 && element.scrollHeight <= element.clientHeight+1};
+        });
+    }""")
+    assert metrics and all(item['width'] > 0 and item['height'] > 0 and item['inside'] and item['unclipped']
+                           for item in metrics), metrics
+
+
+def test_navigation_labels_and_footer_guidance_fit_both_widths(browser, url):
+    for locale in ['en','zh-TW']:
+        context, page, key = new_page(browser, url, locale)
+        try:
+            nav = page.locator('.settings-nav-item')
+            assert nav.evaluate_all('items => items.map(item => item.dataset.tab)') == TABS
+            for index in range(nav.count()):
+                assert_catalog_text(page, nav.nth(index))
+            assert_catalog_text(page, page.locator('#settings-modal .settings-header h3'))
+            for button_id in ['settings-save','settings-reset']:
+                assert_catalog_text(page, page.locator('#' + button_id))
+            close = page.locator('#settings-close')
+            close_key = close.get_attribute('data-i18n-aria-label')
+            assert close_key and close.get_attribute('aria-label') == message(page, close_key)
+            hints = page.locator('.settings-footer #settings-save-hint, .settings-footer #settings-reset-hint')
+            assert hints.count() == 2, 'Preference consequences are missing from the persistent footer'
+            for index in range(hints.count()):
+                assert_catalog_text(page, hints.nth(index))
+            assert page.locator('#settings-save').get_attribute('aria-describedby') == 'settings-save-hint'
+            assert page.locator('#settings-reset').get_attribute('aria-describedby') == 'settings-reset-hint'
+            for width, height in [(1280,800),(480,800),(480,600)]:
+                page.set_viewport_size({'width':width,'height':height})
+                for tab in TABS:
+                    page.click(f'.settings-nav-item[data-tab="{tab}"]')
+                    assert page.locator('.settings-tab.active').get_attribute('id') == 'tab-' + tab
+                    assert page.locator('.settings-nav-item.active').get_attribute('data-tab') == tab
+                    for end in [False,True]:
+                        page.locator('.settings-content').evaluate('(element,end) => {element.scrollTop = end ? element.scrollHeight : 0;}', end)
+                        assert_footer_fits(page)
+            assert_no_access_mutations(page)
+        finally:
+            fixture.close_context(context)
+
+
+def main():
+    proc, url = fixture.start_server()
+    try:
+        with fixture.load_playwright()[0]() as playwright:
+            browser = playwright.chromium.launch(headless=True)
+            try:
+                for test in [test_close_discards_draft_and_save_applies_without_reload,
+                             test_reset_reloads_only_preference_defaults,
+                             test_navigation_labels_and_footer_guidance_fit_both_widths]:
+                    test(browser, url)
+                    print(test.__name__ + ': ok', flush=True)
+            finally:
+                browser.close()
+    finally:
+        fixture.stop_server(proc)
+
+
+if __name__ == '__main__':
+    main()

From f8695caa13c41eaf85436a75eb27e38222f00d3e Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sun, 20 Sep 2026 02:29:37 +0800
Subject: [PATCH 22/43] Clarify and localize SSH tunnel controls

---
 README.md                          |  13 +-
 docs/agent_ui_review_plan.md       |  60 +++++++-
 docs/ui_copy_review.tsv            |  39 ++++++
 static/js/standterm-messages.js    |  82 ++++++++++-
 templates/index.html               |  75 +++++-----
 tests/ssh_tunnels_browser_smoke.py | 212 +++++++++++++++++++++++++++--
 6 files changed, 422 insertions(+), 59 deletions(-)

diff --git a/README.md b/README.md
index 7da1735..1352cfd 100644
--- a/README.md
+++ b/README.md
@@ -327,8 +327,8 @@ terminal; compact windows keep those actions in the Agent panel.
 Chinese (Taiwan) for browser access and recovery, Agent permissions, input and
 file-copy approvals, transfer results, local connection information, connection
 forms, SSH login, SSH profile/route editors (including browser-key and
-host-fingerprint controls), settings import/export, and settings navigation and
-preference actions. The choice
+host-fingerprint controls), settings import/export, settings navigation and
+preference actions, and user SSH tunnel controls. The choice
 applies the next time the page opens; saving it does not reload the current
 page or change its connections and grants. Other areas remain in English.
 **Save preferences** stores the General and Appearance preference fields.
@@ -699,10 +699,15 @@ Shell unless `STANDTERM_ALLOW_REMOTE_UART=1` is set.
 After connecting an SSH tab, open **Tunnels** to create temporary TCP forwards
 without reconnecting. Choose a direction, listening port, target host and target
 port; listening port `0` lets the operating system choose an available port.
-Each tunnel shows its assigned port, state, active connections and byte counts.
-**Stop** closes that tunnel's listener and connections while keeping SSH, Files
+Each tunnel shows its assigned port, state, active connections and byte counts
+to and from the target. Remote rows identify the requested listener address;
+they do not verify the SSH server's actual listening interfaces.
+**Stop** stops forwarding and closes its connections while keeping SSH, Files
 and other tunnels available. **Listening** confirms the forward is ready to
 accept connections; target-service failures appear when a client connects.
+If a request times out, its result is unconfirmed. Refresh status before deciding
+whether to retry; the UI does not automatically resend start or stop requests.
+Stopping does not wait for the SSH server to confirm remote listener removal.
 
 | Direction | Listener | Target is reached from |
 | --- | --- | --- |
diff --git a/docs/agent_ui_review_plan.md b/docs/agent_ui_review_plan.md
index cc5f75d..db719a7 100644
--- a/docs/agent_ui_review_plan.md
+++ b/docs/agent_ui_review_plan.md
@@ -43,7 +43,7 @@ do not consolidate them merely to shorten labels.
 | 3 | Review English UI copy and terminology | Core terms agreed; initial English sources reviewed | Review each proposed change for target, permissions, consequences, and next action; check related tooltips, Desktop help, and tests before applying it. |
 | 4 | Finalize the translation exchange table | Initial exchange validated with an independent translator | Stable keys, approved English source, context, and placeholder constraints are sufficient for an independent translator. |
 | 5 | Pilot Agent access and local connection information | Implemented; validation below | Cover static and dynamic text, titles, and accessible names; preserve connected sessions and authorization; support English fallback. |
-| 6 | Translate and integrate approved rows | Agent pilot, browser access/recovery, Agent approvals/transfers, connection/login controls, SSH route/profile editors, settings transfer and preference actions integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
+| 6 | Translate and integrate approved rows | Agent pilot, browser access/recovery, Agent approvals/transfers, connection/login controls, SSH route/profile editors, settings transfer/preference actions and user SSH tunnels integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
 | 7 | Expand Core and Desktop coverage | Deferred | Verify secondary windows, native menus, setup, diagnostics, packaging, and representative layouts. |
 
 ## Validation of the reliability changes
@@ -66,7 +66,7 @@ validated separately below.
 
 ## Deferred UI work
 
-Agent diagnostics, SSH tunnel setup, secondary windows,
+Agent diagnostics, Agent Tunnel setup, secondary windows,
 and Desktop localization remain outside the completed workflows. Translation
 starts only after the English source for the selected workflow is reviewed.
 Extra screen diffing, render hints, key aliases, and byte-limit options remain optional optimizations.
@@ -416,3 +416,59 @@ Validation uses WSL Chromium; native Desktop and operating-system dialogs were
 not part of this phase. Remaining General/Appearance fields, Server controls and
 Diagnostics content still have English copy. The next candidate is a separate
 review of SSH tunnel setup/stop wording and target scope before localization.
+
+## User SSH tunnel controls
+
+This phase covers the browser's ordinary TCP tunnel dialog, separate from the
+Agent Tunnel authorization workflow. Its copy names the listener side and the
+side that reaches the target. Core host means where Core runs, including WSL;
+SSH remote means the final SSH connection in the selected route. Remote rows
+identify the requested listener, without claiming verification of the server's
+actual interfaces. Traffic counters use the target as their reference point.
+
+Request timeouts leave the outcome unconfirmed. Status polling may resume, but
+start and stop operations are not automatically resent. A stop acknowledgment
+does not prove that the SSH server has removed its listener: cancellation is
+asynchronous, and cleanup_pending only tracks unfinished setup. Closing the
+dialog keeps tunnels running; closing SSH or disconnecting the creating page,
+including a reload, stops them.
+
+| Finding | Severity | Evidence | Critic remedy | Main response | Resolution | Validation |
+| --- | --- | --- | --- | --- | --- | --- |
+| Remote row can imply a verified loopback interface | Medium | renderSshTunnel; request_remote; remote peer rejection | Label the remote listener as requested | Accept | Preserve the actual-interface qualification beside the form and in the row | Real SSH non-loopback peer rejection; bilingual row/bind checks |
+| Timeout and stop text can overstate the result | Medium | Shared request timer; asynchronous cancel_remote; snapshot cleanup_pending | Explain an unconfirmed timeout and requested stop | Accept | Preserve typed state, cleanup flag, request correlation and no mutation replay | Timeout/late acknowledgment and status rendering checks |
+| Close can be mistaken for stopping a tunnel | Medium | Dialog close handler versus close_bridge/on_disconnect | State that closing the dialog keeps tunnels running | Accept | Keep separate Close and Stop actions without a new confirmation | Close/reopen retention and existing viewer-disconnect tests |
+| Sent/received lacks a stable reference point | Low | relay_tcp(channel, target) and _progress | Use To target and From target | Accept | Keep byte units and raw counts; translate only their description | Both forwarding directions and real SSH byte-count tests |
+
+The backend, viewer ownership, transport binding, request/revision checks and
+loopback policy remain unchanged. Localized text never selects an operation,
+terminal or tunnel. Server diagnostics and user-supplied names/addresses stay
+literal. Additional interface inspection and Agent Tunnel localization remain
+outside this phase.
+
+The table contains 445 rows: 444 referenced bilingual messages and the existing
+removal. Thirty-nine reviewed rows cover static labels, direction-dependent
+help, status names and request feedback. Input labels use text spans so applying
+translations preserves controls and their values. Unknown status values render
+as Unknown; only typed starting/listening values enable Stop. Empty-list copy
+avoids claiming that Agent Tunnel or another viewer has no tunnels.
+
+Two bounded independent review passes found no remaining material issue. The
+second pass verified literal interpolation and unknown-status fallbacks in
+memory. Its optional README clarification was adopted: Stop ends forwarding
+and connections without claiming confirmed remote listener removal. Additional
+listener inspection stays deferred unless verified interface reporting becomes
+a requirement; no policy choice blocks this copy change.
+
+| Check | Result |
+| --- | --- |
+| Existing real SSH suite | All 12 tests passed, including both directions/byte counters, three-hop final transport, independent Agent/user tunnels, ownership, disconnect cleanup and non-loopback rejection. |
+| Bilingual browser suite | Three cases in each language passed: existing stale-view/request/revision guards, exact direction payloads and typed states, and timeout with continued status polling but no automatic start replay. |
+| Display boundaries | Raw names, errors and IPv6 endpoint values remain literal; direction changes retain form controls/values, and Close sends no Stop. |
+| Layout | Both languages fit the 480x600 dialog with input/select bounds retained and no horizontal overflow. |
+| Catalog and static checks | Six exporter and six lookup tests passed; all 444 bilingual keys are referenced, the generated catalog is current, Python syntax and diff checks passed. |
+
+Validation uses WSL Chromium and local SSH servers. Native Desktop and a physical
+remote host were not part of this phase. Agent Tunnel authorization/renewal and
+remote verification copy are the next separate review candidate; general TCP
+forwarding does not replace that workflow or grant API access.
diff --git a/docs/ui_copy_review.tsv b/docs/ui_copy_review.tsv
index 097781f..e3fa4c7 100644
--- a/docs/ui_copy_review.tsv
+++ b/docs/ui_copy_review.tsv
@@ -405,3 +405,42 @@ settings.reset	Reset	Reset preferences	重設偏好設定	Footer button immediat
 settings.save_scope_hint		Saves General and Appearance preferences. Other settings have separate actions.	儲存「一般」與「外觀」的偏好設定。其他設定請個別操作。	First always-visible footer hint, outside tab content. Clarifies save scope even while viewing SSH profiles, Server or Diagnostics.		Display only. Preserve typed tab IDs, existing handlers, preference storage, immediate actions and reload timing. Keep visible on every tab, not only in a title tooltip. General import/export and other immediate actions retain their own handlers; do not imply they depend on Save.	translation-reviewed	templates/index.html
 settings.reset_hint		Immediately restores default browser preferences and reloads this page. Unsaved edits are lost and this page's temporary SSH tunnels stop. Saved SSH profiles and keys remain.	立即還原瀏覽器預設偏好並重新載入頁面。未儲存的編輯將遺失，此頁面的暫時 SSH 通道會停止；已儲存的 SSH 連線設定與金鑰會保留。	Second always-visible footer hint beside Reset preferences. Reset covers all PREF_DEFAULTS, including history-saving preference and default Agent permission; saved SSH records are distinct from in-memory drafts.		Display only. Preserve immediate reset and reload timing; introduce no confirmation. Explicitly distinguish saved SSH profiles/keys from unsaved edits. Do not imply reset is restricted to currently visible preference fields, that drafts survive, or that all terminal processes end.	translation-reviewed	templates/index.html
 settings.theme_preview_hint	Preview only. Save Changes applies this theme.	Preview only. Save preferences applies this theme.	僅供預覽。按下「儲存偏好設定」後套用此配色。	Existing appearance preview note must match the renamed footer button; this is the only extra appearance text in this batch.		Display only. Preserve typed tab IDs, existing handlers, preference storage, immediate actions and reload timing. Does not promise immediate terminal-theme application while merely changing the preview selector.	translation-reviewed	templates/index.html
+ssh.tunnels.action	Tunnels	Tunnels	通道	Status-toolbar entry for the active SSH tab.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation.	translation-reviewed	templates/index.html
+ssh.tunnels.tooltip	Manage TCP port forwarding through this SSH connection	Manage TCP forwarding for this SSH tab	管理此 SSH 分頁的 TCP 轉送	Status-toolbar button title.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation.	translation-reviewed	templates/index.html
+ssh.tunnels.title	Tunnels for Current SSH Tab	SSH tunnels for this tab	此分頁的 SSH 通道	Dialog title; does not describe Agent access.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation.	translation-reviewed	templates/index.html
+ssh.tunnels.policy	TCP only. Core host means the computer running Core, including WSL when Core runs there. These temporary tunnels stop when this SSH connection closes or this page disconnects, including a reload.	TCP only. Core host is where Core runs, including WSL. SSH remote is the final SSH host in this tab’s route. Closing this dialog keeps tunnels running. They stop when this SSH connection closes or this page disconnects, including a reload.	僅支援 TCP。Core 主機是執行 Core 的環境，包含 WSL；SSH 遠端是此分頁路徑中的最後一台 SSH 主機。關閉此視窗不會停止通道。當此 SSH 連線關閉或此頁面中斷連線（包含重新載入）時，通道會停止。	Always-visible direction and lifetime help. Dialog close only stops polling; SSH/page disconnect invokes tunnel stop.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Core host is not necessarily the browser device or Windows host outside WSL. Do not promise that closing the dialog stops forwarding or that reload preserves tunnels.	translation-reviewed	templates/index.html
+ssh.tunnels.empty	No user tunnels on this tab.	No tunnels to show.	沒有可顯示的通道。	Empty list filtered by the creating viewer and SSH transport; does not describe Agent Tunnel or another viewer.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation.	translation-reviewed	templates/index.html
+ssh.tunnels.add	Add tunnel	Add tunnel	新增通道	Creation form heading.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation.	translation-reviewed	templates/index.html
+ssh.tunnels.name	Name (optional)	Name (optional)	名稱（選填）	Visible label around the name input.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Wrap translated label text in a span; do not set data-i18n on the input-containing label.	translation-reviewed	templates/index.html
+ssh.tunnels.direction	Direction	Direction	方向	Visible label around the direction selector.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Wrap translated text in a span to retain select/options and event bindings.	translation-reviewed	templates/index.html
+ssh.tunnels.local_direction	Core host → SSH remote (-L)	Listen on Core host (-L)	在 Core 主機監聽（-L）	Option label for typed local direction; target is reached from the final SSH host.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Preserve option value local and literal -L; do not imply browser-local binding.	translation-reviewed	templates/index.html
+ssh.tunnels.remote_direction	SSH remote → Core host (-R)	Listen on SSH remote (-R)	在 SSH 遠端監聽（-R）	Option label for typed remote direction; target is reached from Core.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Preserve option value remote and literal -R; actual remote interfaces remain controlled by the SSH server.	translation-reviewed	templates/index.html
+ssh.tunnels.local_listen	Core listening port (0 = automatic)	Core listening port (0 = automatic)	Core 監聽連接埠（0 表示自動）	Initial/local listening-port label.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Use a label text span so translation does not remove the numeric input; select this key by typed direction.	translation-reviewed	templates/index.html
+ssh.tunnels.remote_listen	Remote listening port (0 = automatic)	Remote listening port (0 = automatic)	遠端監聽連接埠（0 表示自動）	Listening-port label when typed direction is remote.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Use the same label text span and preserve listening-port value and validation.	translation-reviewed	templates/index.html
+ssh.tunnels.local_target_host	Target host, reached from SSH remote	Target host, reached from SSH remote	目標主機，由 SSH 遠端連往	Destination hostname/IP is resolved and reached via the final SSH host for local forwarding.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Translate only a dedicated label span; keep the input and its exact value.	translation-reviewed	templates/index.html
+ssh.tunnels.remote_target_host	Target host, reached from Core host	Target host, reached from Core host	目標主機，由 Core 主機連往	Destination hostname/IP is resolved and reached by the Core environment for remote forwarding.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Select by typed direction remote, not option text; keep input values unchanged.	translation-reviewed	templates/index.html
+ssh.tunnels.target_port	Target port	Target port	目標連接埠	Destination service port input label.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Wrap translated text in a span; preserve input min/max/required and value.	translation-reviewed	templates/index.html
+ssh.tunnels.start	Start tunnel	Start tunnel	啟動通道	Submit the existing start request.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Starting does not prove target service reachability.	translation-reviewed	templates/index.html
+ssh.tunnels.local_bind	Listens on Core's 127.0.0.1.	Listens on Core host’s 127.0.0.1.	在 Core 主機的 127.0.0.1 監聽。	Local listener is explicitly bound to FORWARD_BIND_HOST in the Core runtime.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Keep 127.0.0.1 literal; if Core runs in WSL this is WSL loopback.	translation-reviewed	templates/index.html
+ssh.tunnels.remote_bind	Requests remote 127.0.0.1; non-loopback clients are rejected. The SSH server controls its actual listening interfaces.	Requests 127.0.0.1 on the SSH remote; non-loopback clients are rejected. The SSH server controls the actual listening interfaces.	要求在 SSH 遠端的 127.0.0.1 監聽，並拒絕非回送位址的用戶端。實際監聽介面由 SSH 伺服器控制。	Remote request asks for loopback; callback rejects non-loopback origins, but server policy determines actual interfaces.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Do not claim verified remote loopback-only binding or an authenticated remote firewall guarantee.	translation-reviewed	templates/index.html
+ssh.tunnels.refresh	Refresh status	Refresh status	重新整理狀態	Request current snapshots without reloading the page.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation.	translation-reviewed	templates/index.html
+ssh.tunnels.view_changed	The SSH connection or viewer changed. Reopen Tunnels after reconnecting.	The SSH connection or viewer changed. Reopen Tunnels after reconnecting.	SSH 連線或檢視端已變更。重新連線後，請重新開啟「通道」。	Existing binding invalidation message; the stale view is disabled.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation.	translation-reviewed	templates/index.html
+ssh.tunnels.viewer_unavailable	Status unavailable for this viewer.	Status unavailable for this viewer.	此檢視端無法取得狀態。	Existing row message when this view is invalidated.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation.	translation-reviewed	templates/index.html
+ssh.tunnels.stop	Stop	Stop	停止	Per-tunnel stop button; close-dialog action remains separate.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Set button textContent after creating the element; do not interpolate translated text into innerHTML.	translation-reviewed	templates/index.html
+ssh.tunnels.automatic	automatic	automatic	自動	Port display fallback before a bound or explicit listening port exists.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation.	translation-reviewed	templates/index.html
+ssh.tunnels.local_name	Local tunnel (-L)	Core-side tunnel (-L)	Core 端通道（-L）	Fallback title only when user supplied no tunnel name.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Do not translate snapshot.name; -L describes listener location on Core, not necessarily the browser computer.	translation-reviewed	templates/index.html
+ssh.tunnels.remote_name	Remote tunnel (-R)	Remote tunnel (-R)	遠端通道（-R）	Fallback title only when the remote-direction tunnel has no user-supplied name.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Remote is this route's final SSH host; do not translate custom names.	translation-reviewed	templates/index.html
+ssh.tunnels.local_route	Core host 127.0.0.1:{port} → SSH remote → {host}:{target_port}	Core host 127.0.0.1:{port} → SSH remote → {host}:{target_port}	Core 主機 127.0.0.1:{port} → SSH 遠端 → {host}:{target_port}	Local-direction row route. host is already formatted with IPv6 brackets when needed.	{port} {host} {target_port}	Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Preserve exact host, port, IPv6 brackets and arrow order. Do not convert the path into editable input.	translation-reviewed	templates/index.html
+ssh.tunnels.remote_route	SSH remote 127.0.0.1:{port} → Core host → {host}:{target_port}	Requested SSH remote listener 127.0.0.1:{port} → Core host → {host}:{target_port}	要求的 SSH 遠端監聽位址 127.0.0.1:{port} → Core 主機 → {host}:{target_port}	Remote-direction row route must identify requested listener address, not verified actual server interfaces.	{port} {host} {target_port}	Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Port is bound_port/listen_port/automatic display; preserve exact values. Qualify the remote listener as requested in both languages.	translation-reviewed	templates/index.html
+ssh.tunnels.status_starting	Starting	Starting	啟動中	Display label for typed snapshot.status=starting.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Status is the local tunnel lifecycle; stopped alone does not prove asynchronous remote-listener cancellation is finished.	translation-reviewed	templates/index.html
+ssh.tunnels.status_listening	Listening	Listening	監聽中	Display label for typed snapshot.status=listening.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Status is the local tunnel lifecycle; stopped alone does not prove asynchronous remote-listener cancellation is finished.	translation-reviewed	templates/index.html
+ssh.tunnels.status_stopped	Stopped	Stopped	已停止	Display label for typed snapshot.status=stopped.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Status is the local tunnel lifecycle; stopped alone does not prove asynchronous remote-listener cancellation is finished.	translation-reviewed	templates/index.html
+ssh.tunnels.status_failed	Failed	Failed	失敗	Display label for typed snapshot.status=failed.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Status is the local tunnel lifecycle; stopped alone does not prove asynchronous remote-listener cancellation is finished.	translation-reviewed	templates/index.html
+ssh.tunnels.status_unknown	Unknown	Unknown	未知	Existing fallback for a status not present in the known typed status map.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Do not derive status from snapshot.error or translated labels; diagnostic error text stays raw.	translation-reviewed	templates/index.html
+ssh.tunnels.details	{status} · {connections} connection(s) · Sent {sent} · Received {received}	{status} · Active connections: {connections} · To target {sent} · From target {received}	{status} · 目前連線：{connections} · 傳至目標 {sent} · 來自目標 {received}	connections=len(channels), including accepted connections while target setup is pending. sent accumulates accepted source→target bytes; received is target→source in both -L/-R.	{status} {connections} {sent} {received}	Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Do not call count cumulative or necessarily fully established. Do not describe Sent as always sent by Core. Retain formatted byte values and all placeholders once.	translation-reviewed	templates/index.html
+ssh.tunnels.cleanup_pending	Cleanup pending	Cleanup pending	等待清理	Append only when snapshot.cleanup_pending is true: closed is set while setup_done is not set.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. This flag is not a proof of remote cancellation acknowledgment; keep independent of status display.	translation-reviewed	templates/index.html
+ssh.tunnels.timeout	Tunnel status request timed out. Refresh status before retrying.	Tunnel request timed out; the result is unconfirmed. Refresh status before retrying.	通道請求逾時，結果尚未確認。請先重新整理狀態，再決定是否重試。	The shared request timer covers start, stop and status, not only status polling.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Do not imply a timed-out start failed or a timed-out stop finished; no automatic retry is introduced.	translation-reviewed	templates/index.html
+ssh.tunnels.request_failed	Tunnel request failed.	Tunnel request failed.	通道請求失敗。	Fallback only when failed acknowledgment provides no result.message.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation.	translation-reviewed	templates/index.html
+ssh.tunnels.start_requested	Tunnel requested. Watch the tunnel status.	Start requested. Check the tunnel status.	已請求啟動。請查看通道狀態。	Successful start acknowledgment can precede asynchronous setup completion.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Do not claim listening, target connectivity or successful forwarding from the acknowledgment alone.	translation-reviewed	templates/index.html
+ssh.tunnels.stop_requested	Tunnel stopped.	Stop requested. Check the tunnel status.	已請求停止。請查看通道狀態。	Successful stop acknowledgment follows local stop flag but cleanup/remote cancellation can remain pending.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Do not state that remote cleanup has completed; request completion is separate from remote listener shutdown.	translation-reviewed	templates/index.html
+ssh.tunnels.carrier	SSH tab: {title} ({id}). Tunnels use this route’s final SSH connection.	SSH tab: {title} ({id}). Uses this route’s final SSH connection.	SSH 分頁：{title}（{id}）。使用此路徑的最後一段 SSH 連線。	Dialog carrier text uses captured terminal title and ID; routing uses the typed connection, never this text.	{title} {id}	Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Keep title and ID verbatim as text; do not infer final host from a user-controlled terminal title.	translation-reviewed	templates/index.html
diff --git a/static/js/standterm-messages.js b/static/js/standterm-messages.js
index 7fc0634..586149c 100644
--- a/static/js/standterm-messages.js
+++ b/static/js/standterm-messages.js
@@ -407,7 +407,46 @@
         "ssh.profiles.storage_unavailable": "SSH profile storage is unavailable.",
         "ssh.profiles.stored": "Profiles are stored only in this browser.",
         "ssh.profiles.title": "SSH profiles",
-        "ssh.profiles.wait": "Wait for the SSH settings to finish loading or saving."
+        "ssh.profiles.wait": "Wait for the SSH settings to finish loading or saving.",
+        "ssh.tunnels.action": "Tunnels",
+        "ssh.tunnels.add": "Add tunnel",
+        "ssh.tunnels.automatic": "automatic",
+        "ssh.tunnels.carrier": "SSH tab: {title} ({id}). Uses this route\u2019s final SSH connection.",
+        "ssh.tunnels.cleanup_pending": "Cleanup pending",
+        "ssh.tunnels.details": "{status} \u00b7 Active connections: {connections} \u00b7 To target {sent} \u00b7 From target {received}",
+        "ssh.tunnels.direction": "Direction",
+        "ssh.tunnels.empty": "No tunnels to show.",
+        "ssh.tunnels.local_bind": "Listens on Core host\u2019s 127.0.0.1.",
+        "ssh.tunnels.local_direction": "Listen on Core host (-L)",
+        "ssh.tunnels.local_listen": "Core listening port (0 = automatic)",
+        "ssh.tunnels.local_name": "Core-side tunnel (-L)",
+        "ssh.tunnels.local_route": "Core host 127.0.0.1:{port} \u2192 SSH remote \u2192 {host}:{target_port}",
+        "ssh.tunnels.local_target_host": "Target host, reached from SSH remote",
+        "ssh.tunnels.name": "Name (optional)",
+        "ssh.tunnels.policy": "TCP only. Core host is where Core runs, including WSL. SSH remote is the final SSH host in this tab\u2019s route. Closing this dialog keeps tunnels running. They stop when this SSH connection closes or this page disconnects, including a reload.",
+        "ssh.tunnels.refresh": "Refresh status",
+        "ssh.tunnels.remote_bind": "Requests 127.0.0.1 on the SSH remote; non-loopback clients are rejected. The SSH server controls the actual listening interfaces.",
+        "ssh.tunnels.remote_direction": "Listen on SSH remote (-R)",
+        "ssh.tunnels.remote_listen": "Remote listening port (0 = automatic)",
+        "ssh.tunnels.remote_name": "Remote tunnel (-R)",
+        "ssh.tunnels.remote_route": "Requested SSH remote listener 127.0.0.1:{port} \u2192 Core host \u2192 {host}:{target_port}",
+        "ssh.tunnels.remote_target_host": "Target host, reached from Core host",
+        "ssh.tunnels.request_failed": "Tunnel request failed.",
+        "ssh.tunnels.start": "Start tunnel",
+        "ssh.tunnels.start_requested": "Start requested. Check the tunnel status.",
+        "ssh.tunnels.status_failed": "Failed",
+        "ssh.tunnels.status_listening": "Listening",
+        "ssh.tunnels.status_starting": "Starting",
+        "ssh.tunnels.status_stopped": "Stopped",
+        "ssh.tunnels.status_unknown": "Unknown",
+        "ssh.tunnels.stop": "Stop",
+        "ssh.tunnels.stop_requested": "Stop requested. Check the tunnel status.",
+        "ssh.tunnels.target_port": "Target port",
+        "ssh.tunnels.timeout": "Tunnel request timed out; the result is unconfirmed. Refresh status before retrying.",
+        "ssh.tunnels.title": "SSH tunnels for this tab",
+        "ssh.tunnels.tooltip": "Manage TCP forwarding for this SSH tab",
+        "ssh.tunnels.view_changed": "The SSH connection or viewer changed. Reopen Tunnels after reconnecting.",
+        "ssh.tunnels.viewer_unavailable": "Status unavailable for this viewer."
     },
     "zh-TW": {
         "agent.access.current_tab": "\u76ee\u524d\u5206\u9801",
@@ -814,7 +853,46 @@
         "ssh.profiles.storage_unavailable": "\u7121\u6cd5\u4f7f\u7528 SSH \u9023\u7dda\u8a2d\u5b9a\u5132\u5b58\u7a7a\u9593\u3002",
         "ssh.profiles.stored": "\u9023\u7dda\u8a2d\u5b9a\u53ea\u5132\u5b58\u5728\u6b64\u700f\u89bd\u5668\u3002",
         "ssh.profiles.title": "SSH \u9023\u7dda\u8a2d\u5b9a",
-        "ssh.profiles.wait": "\u8acb\u7b49\u5019 SSH \u8a2d\u5b9a\u8f09\u5165\u6216\u5132\u5b58\u5b8c\u6210\u3002"
+        "ssh.profiles.wait": "\u8acb\u7b49\u5019 SSH \u8a2d\u5b9a\u8f09\u5165\u6216\u5132\u5b58\u5b8c\u6210\u3002",
+        "ssh.tunnels.action": "\u901a\u9053",
+        "ssh.tunnels.add": "\u65b0\u589e\u901a\u9053",
+        "ssh.tunnels.automatic": "\u81ea\u52d5",
+        "ssh.tunnels.carrier": "SSH \u5206\u9801\uff1a{title}\uff08{id}\uff09\u3002\u4f7f\u7528\u6b64\u8def\u5f91\u7684\u6700\u5f8c\u4e00\u6bb5 SSH \u9023\u7dda\u3002",
+        "ssh.tunnels.cleanup_pending": "\u7b49\u5f85\u6e05\u7406",
+        "ssh.tunnels.details": "{status} \u00b7 \u76ee\u524d\u9023\u7dda\uff1a{connections} \u00b7 \u50b3\u81f3\u76ee\u6a19 {sent} \u00b7 \u4f86\u81ea\u76ee\u6a19 {received}",
+        "ssh.tunnels.direction": "\u65b9\u5411",
+        "ssh.tunnels.empty": "\u6c92\u6709\u53ef\u986f\u793a\u7684\u901a\u9053\u3002",
+        "ssh.tunnels.local_bind": "\u5728 Core \u4e3b\u6a5f\u7684 127.0.0.1 \u76e3\u807d\u3002",
+        "ssh.tunnels.local_direction": "\u5728 Core \u4e3b\u6a5f\u76e3\u807d\uff08-L\uff09",
+        "ssh.tunnels.local_listen": "Core \u76e3\u807d\u9023\u63a5\u57e0\uff080 \u8868\u793a\u81ea\u52d5\uff09",
+        "ssh.tunnels.local_name": "Core \u7aef\u901a\u9053\uff08-L\uff09",
+        "ssh.tunnels.local_route": "Core \u4e3b\u6a5f 127.0.0.1:{port} \u2192 SSH \u9060\u7aef \u2192 {host}:{target_port}",
+        "ssh.tunnels.local_target_host": "\u76ee\u6a19\u4e3b\u6a5f\uff0c\u7531 SSH \u9060\u7aef\u9023\u5f80",
+        "ssh.tunnels.name": "\u540d\u7a31\uff08\u9078\u586b\uff09",
+        "ssh.tunnels.policy": "\u50c5\u652f\u63f4 TCP\u3002Core \u4e3b\u6a5f\u662f\u57f7\u884c Core \u7684\u74b0\u5883\uff0c\u5305\u542b WSL\uff1bSSH \u9060\u7aef\u662f\u6b64\u5206\u9801\u8def\u5f91\u4e2d\u7684\u6700\u5f8c\u4e00\u53f0 SSH \u4e3b\u6a5f\u3002\u95dc\u9589\u6b64\u8996\u7a97\u4e0d\u6703\u505c\u6b62\u901a\u9053\u3002\u7576\u6b64 SSH \u9023\u7dda\u95dc\u9589\u6216\u6b64\u9801\u9762\u4e2d\u65b7\u9023\u7dda\uff08\u5305\u542b\u91cd\u65b0\u8f09\u5165\uff09\u6642\uff0c\u901a\u9053\u6703\u505c\u6b62\u3002",
+        "ssh.tunnels.refresh": "\u91cd\u65b0\u6574\u7406\u72c0\u614b",
+        "ssh.tunnels.remote_bind": "\u8981\u6c42\u5728 SSH \u9060\u7aef\u7684 127.0.0.1 \u76e3\u807d\uff0c\u4e26\u62d2\u7d55\u975e\u56de\u9001\u4f4d\u5740\u7684\u7528\u6236\u7aef\u3002\u5be6\u969b\u76e3\u807d\u4ecb\u9762\u7531 SSH \u4f3a\u670d\u5668\u63a7\u5236\u3002",
+        "ssh.tunnels.remote_direction": "\u5728 SSH \u9060\u7aef\u76e3\u807d\uff08-R\uff09",
+        "ssh.tunnels.remote_listen": "\u9060\u7aef\u76e3\u807d\u9023\u63a5\u57e0\uff080 \u8868\u793a\u81ea\u52d5\uff09",
+        "ssh.tunnels.remote_name": "\u9060\u7aef\u901a\u9053\uff08-R\uff09",
+        "ssh.tunnels.remote_route": "\u8981\u6c42\u7684 SSH \u9060\u7aef\u76e3\u807d\u4f4d\u5740 127.0.0.1:{port} \u2192 Core \u4e3b\u6a5f \u2192 {host}:{target_port}",
+        "ssh.tunnels.remote_target_host": "\u76ee\u6a19\u4e3b\u6a5f\uff0c\u7531 Core \u4e3b\u6a5f\u9023\u5f80",
+        "ssh.tunnels.request_failed": "\u901a\u9053\u8acb\u6c42\u5931\u6557\u3002",
+        "ssh.tunnels.start": "\u555f\u52d5\u901a\u9053",
+        "ssh.tunnels.start_requested": "\u5df2\u8acb\u6c42\u555f\u52d5\u3002\u8acb\u67e5\u770b\u901a\u9053\u72c0\u614b\u3002",
+        "ssh.tunnels.status_failed": "\u5931\u6557",
+        "ssh.tunnels.status_listening": "\u76e3\u807d\u4e2d",
+        "ssh.tunnels.status_starting": "\u555f\u52d5\u4e2d",
+        "ssh.tunnels.status_stopped": "\u5df2\u505c\u6b62",
+        "ssh.tunnels.status_unknown": "\u672a\u77e5",
+        "ssh.tunnels.stop": "\u505c\u6b62",
+        "ssh.tunnels.stop_requested": "\u5df2\u8acb\u6c42\u505c\u6b62\u3002\u8acb\u67e5\u770b\u901a\u9053\u72c0\u614b\u3002",
+        "ssh.tunnels.target_port": "\u76ee\u6a19\u9023\u63a5\u57e0",
+        "ssh.tunnels.timeout": "\u901a\u9053\u8acb\u6c42\u903e\u6642\uff0c\u7d50\u679c\u5c1a\u672a\u78ba\u8a8d\u3002\u8acb\u5148\u91cd\u65b0\u6574\u7406\u72c0\u614b\uff0c\u518d\u6c7a\u5b9a\u662f\u5426\u91cd\u8a66\u3002",
+        "ssh.tunnels.title": "\u6b64\u5206\u9801\u7684 SSH \u901a\u9053",
+        "ssh.tunnels.tooltip": "\u7ba1\u7406\u6b64 SSH \u5206\u9801\u7684 TCP \u8f49\u9001",
+        "ssh.tunnels.view_changed": "SSH \u9023\u7dda\u6216\u6aa2\u8996\u7aef\u5df2\u8b8a\u66f4\u3002\u91cd\u65b0\u9023\u7dda\u5f8c\uff0c\u8acb\u91cd\u65b0\u958b\u555f\u300c\u901a\u9053\u300d\u3002",
+        "ssh.tunnels.viewer_unavailable": "\u6b64\u6aa2\u8996\u7aef\u7121\u6cd5\u53d6\u5f97\u72c0\u614b\u3002"
     }
 };
     if (typeof module === 'object' && module.exports) module.exports = messages;
diff --git a/templates/index.html b/templates/index.html
index c40d85e..fad2902 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -1459,7 +1459,7 @@ <h3 id="browser-auth-help-title" data-i18n="browser.auth.help_title">Manual brow
             <button id="agent-connect-btn" class="status-action" type="button" title="Copy the agent prompt for the current tab's environment" data-i18n="agent.connection.title" data-i18n-title="agent.connection.tooltip">Agent connection</button>
             <button id="agent-toggle-btn" class="status-action" type="button" title="Show Agent panel">Show Agent Panel</button>
             <button id="agent-tunnel-btn" class="status-action" type="button" title="Set up remote Agent access through this SSH connection" hidden>Agent Tunnel</button>
-            <button id="ssh-tunnels-btn" class="status-action" type="button" title="Manage TCP port forwarding through this SSH connection" hidden>Tunnels</button>
+            <button id="ssh-tunnels-btn" class="status-action" type="button" title="Manage TCP forwarding for this SSH tab" data-i18n-title="ssh.tunnels.tooltip" data-i18n="ssh.tunnels.action" hidden>Tunnels</button>
             <button id="sftp-status-btn" class="status-action status-sftp" type="button" title="Open Files" aria-label="Open Files" hidden>&#x1F4C1;</button>
             <button id="transfer-queue-btn" class="status-action" type="button" title="Transfer Queue" aria-label="Transfer Queue" data-i18n-title="agent.transfer.queue" data-i18n-aria-label="agent.transfer.queue" hidden><span aria-hidden="true">&#x21C4;</span> <span id="transfer-queue-count">0</span></button>
             <button id="quick-settings" class="status-action" type="button" title="Settings" aria-label="Settings">&#x2699;&#xFE0F;</button>
@@ -1535,29 +1535,28 @@ <h4>Agent Info</h4>
         </div>
     </dialog>
     <dialog id="ssh-tunnels-dialog" aria-labelledby="ssh-tunnels-title">
-        <h3 id="ssh-tunnels-title">Tunnels for Current SSH Tab</h3>
+        <h3 id="ssh-tunnels-title" data-i18n="ssh.tunnels.title">SSH tunnels for this tab</h3>
         <p id="ssh-tunnels-carrier"></p>
-        <p id="ssh-tunnel-policy">TCP only. Core host means the computer running Core, including WSL when Core runs there.
-            These temporary tunnels stop when this SSH connection closes or this page disconnects, including a reload.</p>
+        <p id="ssh-tunnel-policy" data-i18n="ssh.tunnels.policy">TCP only. Core host is where Core runs, including WSL. SSH remote is the final SSH host in this tab’s route. Closing this dialog keeps tunnels running. They stop when this SSH connection closes or this page disconnects, including a reload.</p>
         <div id="ssh-tunnels-list"></div>
-        <p id="ssh-tunnels-empty">No user tunnels on this tab.</p>
-        <h4>Add tunnel</h4>
+        <p id="ssh-tunnels-empty" data-i18n="ssh.tunnels.empty">No tunnels to show.</p>
+        <h4 data-i18n="ssh.tunnels.add">Add tunnel</h4>
         <form id="ssh-tunnel-form">
-            <label>Name (optional)<input id="ssh-tunnel-name" maxlength="80" autocomplete="off"></label>
-            <label>Direction<select id="ssh-tunnel-direction">
-                <option value="local">Core host → SSH remote (-L)</option>
-                <option value="remote">SSH remote → Core host (-R)</option>
+            <label><span data-i18n="ssh.tunnels.name">Name (optional)</span><input id="ssh-tunnel-name" maxlength="80" autocomplete="off"></label>
+            <label><span data-i18n="ssh.tunnels.direction">Direction</span><select id="ssh-tunnel-direction">
+                <option value="local" data-i18n="ssh.tunnels.local_direction">Listen on Core host (-L)</option>
+                <option value="remote" data-i18n="ssh.tunnels.remote_direction">Listen on SSH remote (-R)</option>
             </select></label>
-            <label id="ssh-tunnel-listen-label">Core listening port (0 = automatic)<input id="ssh-tunnel-listen" type="number" min="0" max="65535" value="0" required></label>
-            <label id="ssh-tunnel-target-host-label">Target host, reached from SSH remote<input id="ssh-tunnel-target-host" value="127.0.0.1" maxlength="253" spellcheck="false" required></label>
-            <label>Target port<input id="ssh-tunnel-target-port" type="number" min="1" max="65535" value="80" required></label>
-            <button id="ssh-tunnel-start" type="submit">Start tunnel</button>
+            <label id="ssh-tunnel-listen-label"><span data-i18n="ssh.tunnels.local_listen">Core listening port (0 = automatic)</span><input id="ssh-tunnel-listen" type="number" min="0" max="65535" value="0" required></label>
+            <label id="ssh-tunnel-target-host-label"><span data-i18n="ssh.tunnels.local_target_host">Target host, reached from SSH remote</span><input id="ssh-tunnel-target-host" value="127.0.0.1" maxlength="253" spellcheck="false" required></label>
+            <label><span data-i18n="ssh.tunnels.target_port">Target port</span><input id="ssh-tunnel-target-port" type="number" min="1" max="65535" value="80" required></label>
+            <button id="ssh-tunnel-start" type="submit" data-i18n="ssh.tunnels.start">Start tunnel</button>
         </form>
-        <p id="ssh-tunnel-bind-hint">Listens on Core's 127.0.0.1.</p>
+        <p id="ssh-tunnel-bind-hint" data-i18n="ssh.tunnels.local_bind">Listens on Core host’s 127.0.0.1.</p>
         <p id="ssh-tunnels-message" role="status" aria-live="polite"></p>
         <div class="agent-tunnel-actions">
-            <button id="ssh-tunnels-refresh" type="button">Refresh status</button>
-            <button id="ssh-tunnels-close" type="button">Close</button>
+            <button id="ssh-tunnels-refresh" type="button" data-i18n="ssh.tunnels.refresh">Refresh status</button>
+            <button id="ssh-tunnels-close" type="button" data-i18n="common.close">Close</button>
         </div>
     </dialog>
     <div id="terminal"></div>
@@ -3023,10 +3022,10 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 if (!sshTunnelView) return;
                 sshTunnelView.invalid = true;
                 clearInterval(sshTunnelTimer);
-                setSshTunnelMessage('The SSH connection or viewer changed. Reopen Tunnels after reconnecting.', true);
+                setSshTunnelMessage(t('ssh.tunnels.view_changed'), true);
                 document.getElementById('ssh-tunnel-start').disabled = true;
                 for (const entry of sshTunnelView.entries.values()) {
-                    entry.element.querySelector('.ssh-tunnel-details').textContent = 'Status unavailable for this viewer.';
+                    entry.element.querySelector('.ssh-tunnel-details').textContent = t('ssh.tunnels.viewer_unavailable');
                     entry.element.querySelector('button').disabled = true;
                 }
             }
@@ -3041,7 +3040,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     element.className = 'ssh-tunnel-item';
                     element.dataset.tunnelId = snapshot.tunnel_id;
                     element.innerHTML = '<strong class="ssh-tunnel-name"></strong><div class="ssh-tunnel-route"></div>'
-                        + '<div class="ssh-tunnel-details"></div><div class="ssh-tunnel-error"></div><button type="button">Stop</button>';
+                        + '<div class="ssh-tunnel-details"></div><div class="ssh-tunnel-error"></div><button type="button"></button>';
+                    element.querySelector('button').textContent = t('ssh.tunnels.stop');
                     entry = { element, snapshot };
                     view.entries.set(snapshot.tunnel_id, entry);
                     element.querySelector('button').addEventListener('click', () => requestSshTunnel('stop', { tunnel_id: snapshot.tunnel_id }));
@@ -3049,15 +3049,18 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 }
                 entry.snapshot = snapshot;
                 const remote = snapshot.direction === 'remote';
-                const port = snapshot.bound_port || snapshot.listen_port || 'automatic';
+                const port = snapshot.bound_port || snapshot.listen_port || t('ssh.tunnels.automatic');
                 const target = snapshot.target_host.includes(':') ? `[${snapshot.target_host}]` : snapshot.target_host;
-                entry.element.querySelector('.ssh-tunnel-name').textContent = snapshot.name || (remote ? 'Remote tunnel (-R)' : 'Local tunnel (-L)');
-                entry.element.querySelector('.ssh-tunnel-route').textContent = `${remote ? 'SSH remote' : 'Core host'} 127.0.0.1:${port}`
-                    + ` → ${remote ? 'Core host' : 'SSH remote'} → ${target}:${snapshot.target_port}`;
-                const statuses = { starting: 'Starting', listening: 'Listening', stopped: 'Stopped', failed: 'Failed' };
-                entry.element.querySelector('.ssh-tunnel-details').textContent = `${statuses[snapshot.status] || 'Unknown'} · ${snapshot.connections} connection(s)`
-                    + ` · Sent ${formatSftpBytes(snapshot.bytes_sent)} · Received ${formatSftpBytes(snapshot.bytes_received)}`
-                    + (snapshot.cleanup_pending ? ' · Cleanup pending' : '');
+                entry.element.querySelector('.ssh-tunnel-name').textContent = snapshot.name || t(remote ? 'ssh.tunnels.remote_name' : 'ssh.tunnels.local_name');
+                entry.element.querySelector('.ssh-tunnel-route').textContent = t(remote ? 'ssh.tunnels.remote_route' : 'ssh.tunnels.local_route', {
+                    port, host: target, target_port: snapshot.target_port
+                });
+                const statuses = { starting: 'ssh.tunnels.status_starting', listening: 'ssh.tunnels.status_listening',
+                    stopped: 'ssh.tunnels.status_stopped', failed: 'ssh.tunnels.status_failed' };
+                entry.element.querySelector('.ssh-tunnel-details').textContent = t('ssh.tunnels.details', {
+                    status: t(Object.hasOwn(statuses, snapshot.status) ? statuses[snapshot.status] : 'ssh.tunnels.status_unknown'),
+                    connections: snapshot.connections, sent: formatSftpBytes(snapshot.bytes_sent), received: formatSftpBytes(snapshot.bytes_received)
+                }) + (snapshot.cleanup_pending ? ` · ${t('ssh.tunnels.cleanup_pending')}` : '');
                 entry.element.querySelector('.ssh-tunnel-error').textContent = snapshot.error || '';
                 entry.element.querySelector('button').disabled = !['starting', 'listening'].includes(snapshot.status);
                 document.getElementById('ssh-tunnels-empty').hidden = true;
@@ -3077,7 +3080,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     if (requestId !== sshTunnelRequest) return;
                     sshTunnelPending = false;
                     ++sshTunnelRequest;
-                    setSshTunnelMessage('Tunnel status request timed out. Refresh status before retrying.', true);
+                    setSshTunnelMessage(t('ssh.tunnels.timeout'), true);
                     document.getElementById('ssh-tunnel-start').disabled = false;
                 }, 15000);
                 socket.emit('ssh_tunnel', { terminal_id: view.connection.state.id, operation, ...fields }, result => {
@@ -3090,7 +3093,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     }
                     document.getElementById('ssh-tunnel-start').disabled = false;
                     if (!result || result.status !== 'ok') {
-                        setSshTunnelMessage(result?.message || 'Tunnel request failed.', true);
+                        setSshTunnelMessage(result?.message || t('ssh.tunnels.request_failed'), true);
                         return;
                     }
                     if (operation === 'status') {
@@ -3111,7 +3114,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                         document.getElementById('ssh-tunnels-empty').hidden = view.entries.size > 0;
                     } else {
                         renderSshTunnel(result.tunnel);
-                        setSshTunnelMessage(operation === 'start' ? 'Tunnel requested. Watch the tunnel status.' : 'Tunnel stopped.');
+                        setSshTunnelMessage(t(operation === 'start' ? 'ssh.tunnels.start_requested' : 'ssh.tunnels.stop_requested'));
                     }
                 });
             }
@@ -3128,7 +3131,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 sshTunnelView = { connection: { state, connectedAt: state.connectedAt }, connectionId: null, entries: new Map() };
                 ++sshTunnelRequest;
                 sshTunnelPending = false;
-                document.getElementById('ssh-tunnels-carrier').textContent = `SSH tab: ${state.title} (${state.id}). Tunnels use this route's final SSH connection.`;
+                document.getElementById('ssh-tunnels-carrier').textContent = t('ssh.tunnels.carrier', { title: state.title, id: state.id });
                 document.getElementById('ssh-tunnels-list').replaceChildren();
                 document.getElementById('ssh-tunnels-empty').hidden = false;
                 setSshTunnelMessage('');
@@ -3148,11 +3151,9 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             document.getElementById('ssh-tunnels-refresh').addEventListener('click', () => requestSshTunnel('status'));
             document.getElementById('ssh-tunnel-direction').addEventListener('change', event => {
                 const remote = event.target.value === 'remote';
-                document.getElementById('ssh-tunnel-listen-label').firstChild.textContent = `${remote ? 'Remote' : 'Core'} listening port (0 = automatic)`;
-                document.getElementById('ssh-tunnel-target-host-label').firstChild.textContent = `Target host, reached from ${remote ? 'Core host' : 'SSH remote'}`;
-                document.getElementById('ssh-tunnel-bind-hint').textContent = remote
-                    ? 'Requests remote 127.0.0.1; non-loopback clients are rejected. The SSH server controls its actual listening interfaces.'
-                    : "Listens on Core's 127.0.0.1.";
+                document.getElementById('ssh-tunnel-listen-label').querySelector('span').textContent = t(remote ? 'ssh.tunnels.remote_listen' : 'ssh.tunnels.local_listen');
+                document.getElementById('ssh-tunnel-target-host-label').querySelector('span').textContent = t(remote ? 'ssh.tunnels.remote_target_host' : 'ssh.tunnels.local_target_host');
+                document.getElementById('ssh-tunnel-bind-hint').textContent = t(remote ? 'ssh.tunnels.remote_bind' : 'ssh.tunnels.local_bind');
             });
             document.getElementById('ssh-tunnel-form').addEventListener('submit', event => {
                 event.preventDefault();
diff --git a/tests/ssh_tunnels_browser_smoke.py b/tests/ssh_tunnels_browser_smoke.py
index af2ac45..950bba2 100644
--- a/tests/ssh_tunnels_browser_smoke.py
+++ b/tests/ssh_tunnels_browser_smoke.py
@@ -2,8 +2,22 @@
 import agent_browser_smoke as fixture
 
 
-def test_tunnel_controls(browser, url):
-    context, page = fixture.new_page(browser, url)
+def translated(page, key, params=None):
+    text = page.evaluate("""({key,params}) =>
+        StandTermI18n.create(StandTermMessages, document.documentElement.lang).t(key, params)
+    """, {'key':key,'params':params or {}})
+    assert text != key, f'Missing reviewed translation: {key}'
+    return text
+
+
+def new_tunnel_page(browser, url, locale):
+    context, page = fixture.new_page(browser, url, ui_language=locale)
+    page.evaluate('() => window.terminalTest.captureTerminalIoForTest()')
+    return context, page
+
+
+def test_tunnel_controls(browser, url, locale='en'):
+    context, page = new_tunnel_page(browser, url, locale)
     try:
         result = page.evaluate("""() => {
             const test = window.terminalTest;
@@ -36,6 +50,7 @@ def test_tunnel_controls(browser, url):
                 listen_port: 0, target_port: 8080, bound_port: null, status: 'starting', revision: 1,
                 connections: 0, bytes_sent: 0, bytes_received: 0 };
             test.completeSshTunnelRequestForTest(1, { status: 'ok', tunnel: snapshot });
+            const startMessage = document.getElementById('ssh-tunnels-message').textContent;
             const update = tunnel => test.applySshTunnelStateForTest({
                 terminal_id: 'main', connection_id: 'connection-1', tunnel });
             update({ ...snapshot, bound_port: 50001, status: 'listening', revision: 2, bytes_sent: 4096 });
@@ -48,8 +63,10 @@ def test_tunnel_controls(browser, url):
             row.querySelector('button').click();
             const stop = requests().at(-1).args[0];
             test.completeSshTunnelRequestForTest(2, { status: 'ok', tunnel: { ...snapshot, status: 'stopped', revision: 3 } });
+            const stopMessage = document.getElementById('ssh-tunnels-message').textContent;
             update({ ...snapshot, status: 'listening', revision: 2 });
-            const stopped = row.querySelector('button').disabled && row.innerText.includes('Stopped');
+            const stopped = row.querySelector('button').disabled;
+            const stoppedDetails = row.querySelector('.ssh-tunnel-details').textContent;
             document.getElementById('ssh-tunnel-form').requestSubmit();
             dialog.close();
             test.completeSshTunnelRequestForTest(3, { status: 'ok', tunnel: { ...snapshot, tunnel_id: 'ssht_late' } });
@@ -60,22 +77,186 @@ def test_tunnel_controls(browser, url):
             test.completeSshTunnelRequestForTest(5, { status: 'ok', tunnels: [], connection_id: 'connection-3' });
             const changedConnection = document.getElementById('ssh-tunnel-start').disabled
                 && document.querySelector('.ssh-tunnel-item button').disabled
-                && document.querySelector('.ssh-tunnel-details').textContent.includes('unavailable');
-            return { hiddenForLocal, visibleForSsh, labels, start, stop, running, safeName, foreignIgnored, stopped, lateIgnored, changedConnection };
+                && !!document.querySelector('.ssh-tunnel-details').textContent;
+            const unavailable = document.querySelector('.ssh-tunnel-details').textContent;
+            const staleMessage = document.getElementById('ssh-tunnels-message').textContent;
+            const beforeStaleActions = requests().length;
+            document.getElementById('ssh-tunnel-form').requestSubmit();
+            document.querySelector('.ssh-tunnel-item button').dispatchEvent(new Event('click'));
+            const staleActionsIgnored = requests().length === beforeStaleActions;
+            return { hiddenForLocal, visibleForSsh, labels, start, stop, running, safeName, foreignIgnored,
+                stopped, stoppedDetails, startMessage, stopMessage, lateIgnored, changedConnection, unavailable, staleMessage, staleActionsIgnored };
         }""")
         assert result['hiddenForLocal'] and result['visibleForSsh']
-        assert result['labels']['listen'].startswith('Remote listening port')
-        assert 'Core host' in result['labels']['target']
-        assert 'actual listening interfaces' in result['labels']['bind']
-        assert 'reload' in result['labels']['lifetime'] and 'WSL' in result['labels']['lifetime']
+        for field, key in {'listen':'remote_listen','target':'remote_target_host','bind':'remote_bind','lifetime':'policy'}.items():
+            assert result['labels'][field] == translated(page, 'ssh.tunnels.' + key)
+        assert result['unavailable'] == translated(page, 'ssh.tunnels.viewer_unavailable')
+        assert result['staleMessage'] == translated(page, 'ssh.tunnels.view_changed')
+        assert result['startMessage'] == translated(page, 'ssh.tunnels.start_requested')
+        assert result['stopMessage'] == translated(page, 'ssh.tunnels.stop_requested')
+        assert result['stoppedDetails'].startswith(translated(page, 'ssh.tunnels.status_stopped') + ' · ')
         assert result['start']['spec'] == {
             'direction': 'remote', 'listen_port': 0, 'target_host': '127.0.0.1', 'target_port': 8080,
             'name': '<img src=x onerror=alert(1)>',
         }
         assert result['start']['operation'] == 'start' and result['start']['terminal_id'] == 'main'
-        assert result['stop']['operation'] == 'stop' and result['stop']['tunnel_id'] == 'ssht_one'
-        assert 'SSH remote 127.0.0.1:50001' in result['running'] and 'Sent 4.00 KiB' in result['running'], result['running']
-        assert all(result[key] for key in ('safeName', 'foreignIgnored', 'stopped', 'lateIgnored', 'changedConnection'))
+        assert result['stop'] == {'terminal_id':'main','operation':'stop','tunnel_id':'ssht_one'}
+        assert '127.0.0.1:50001' in result['running'] and '4.00 KiB' in result['running'], result['running']
+        assert all(result[key] for key in ('safeName', 'foreignIgnored', 'stopped', 'lateIgnored', 'changedConnection', 'staleActionsIgnored'))
+    finally:
+        fixture.close_context(context)
+
+
+def test_directions_statuses_and_close_preserve_protocol(browser, url, locale='en'):
+    context, page = new_tunnel_page(browser, url, locale)
+    try:
+        result = page.evaluate("""() => {
+            const test = window.terminalTest;
+            test.applyTerminalListForTest({terminals:[{terminal_id:'main',connection_type:'ssh',
+                terminal_label:'SSH <i>& {title}',connected:true,files_available:true}]});
+            test.holdSshTunnelRequestsForTest(); test.clearEmitted();
+            document.getElementById('ssh-tunnels-btn').click();
+            test.completeSshTunnelRequestForTest(0,{status:'ok',tunnels:[],connection_id:'direction-connection'});
+            const requests = () => test.getEmitted().filter(item => item.event === 'ssh_tunnel');
+            const results = [];
+            for (const [index,direction] of ['local','remote'].entries()) {
+                const selector = document.getElementById('ssh-tunnel-direction');
+                const fields = ['ssh-tunnel-listen','ssh-tunnel-target-host','ssh-tunnel-target-port']
+                    .map(id => document.getElementById(id));
+                const oldValues = fields.map(field => field.value);
+                selector.value = direction; selector.dispatchEvent(new Event('change'));
+                const inputsPreserved = fields.every((field,index) => document.getElementById(field.id) === field && field.value === oldValues[index]);
+                document.getElementById('ssh-tunnel-name').value = `Name ${direction} <b>& {name}`;
+                document.getElementById('ssh-tunnel-listen').value = index ? '55001' : '0';
+                document.getElementById('ssh-tunnel-target-host').value = ' 2001:db8::1 ';
+                document.getElementById('ssh-tunnel-target-port').value = '8443';
+                document.getElementById('ssh-tunnel-form').requestSubmit();
+                const request = requests().at(-1).args[0];
+                const tunnel = {tunnel_id:`ssht_${direction}`,name:request.spec.name,direction,
+                    listen_port:request.spec.listen_port,bound_port:null,target_host:request.spec.target_host,
+                    target_port:8443,status:'starting',revision:1,connections:2,bytes_sent:4096,bytes_received:1024};
+                test.completeSshTunnelRequestForTest(index+1,{status:'ok',tunnel});
+                const row = document.querySelector(`[data-tunnel-id="${tunnel.tunnel_id}"]`);
+                const statuses = [];
+                for (const [offset,status] of ['starting','listening','failed','stopped','Listening'].entries()) {
+                    test.applySshTunnelStateForTest({terminal_id:'main',connection_id:'direction-connection',
+                        tunnel:{...tunnel,status,revision:offset+2,cleanup_pending:true,error:'Raw <em>& {error}'}});
+                    statuses.push({status,details:row.querySelector('.ssh-tunnel-details').textContent,
+                        stopDisabled:row.querySelector('button').disabled});
+                }
+                results.push({direction,request,statuses,inputsPreserved,
+                    listen:document.getElementById('ssh-tunnel-listen-label').innerText,
+                    target:document.getElementById('ssh-tunnel-target-host-label').innerText,
+                    bind:document.getElementById('ssh-tunnel-bind-hint').innerText,
+                    name:row.querySelector('.ssh-tunnel-name').textContent,
+                    error:row.querySelector('.ssh-tunnel-error').textContent,
+                    route:row.querySelector('.ssh-tunnel-route').textContent,
+                    html:row.querySelectorAll('b,em').length});
+                test.applySshTunnelStateForTest({terminal_id:'main',connection_id:'direction-connection',
+                    tunnel:{...tunnel,name:'',status:'listening',revision:8,bound_port:55002}});
+                results.at(-1).defaultName = row.querySelector('.ssh-tunnel-name').textContent;
+            }
+            return {directions:[...document.getElementById('ssh-tunnel-direction').options].map(option => ({value:option.value,label:option.text})),
+                results,carrier:document.getElementById('ssh-tunnels-carrier').textContent,
+                carrierHtml:document.getElementById('ssh-tunnels-carrier').querySelectorAll('i').length};
+        }""")
+        assert [item['value'] for item in result['directions']] == ['local','remote']
+        assert [item['label'] for item in result['directions']] == [
+            translated(page, 'ssh.tunnels.local_direction'),translated(page, 'ssh.tunnels.remote_direction')]
+        assert '<i>& {title}' in result['carrier'] and result['carrierHtml'] == 0
+        assert result['carrier'] == translated(page, 'ssh.tunnels.carrier', {'title':'SSH <i>& {title}','id':'main'})
+        for element_id, key in {'ssh-tunnels-title':'ssh.tunnels.title','ssh-tunnel-start':'ssh.tunnels.start',
+                                'ssh-tunnels-refresh':'ssh.tunnels.refresh','ssh-tunnels-close':'common.close'}.items():
+            assert page.locator('#' + element_id).inner_text() == translated(page, key)
+        for entry in result['results']:
+            direction = entry['direction']
+            assert entry['inputsPreserved'], 'Changing direction replaced controls or reset entered values'
+            for field, suffix in {'listen':'listen','target':'target_host','bind':'bind','defaultName':'name'}.items():
+                assert entry[field] == translated(page, f'ssh.tunnels.{direction}_{suffix}')
+            assert entry['request'] == {'terminal_id':'main','operation':'start','spec':{
+                'name':f'Name {direction} <b>& {{name}}','direction':direction,
+                'listen_port':0 if direction == 'local' else 55001,'target_host':'2001:db8::1','target_port':8443}}
+            assert entry['name'] == entry['request']['spec']['name'] and entry['html'] == 0
+            assert entry['error'] == 'Raw <em>& {error}'
+            assert entry['route'] == translated(page, f'ssh.tunnels.{direction}_route', {
+                'port':translated(page, 'ssh.tunnels.automatic') if direction == 'local' else 55001,
+                'host':'[2001:db8::1]','target_port':8443})
+            for status in entry['statuses']:
+                assert status['stopDisabled'] == (status['status'] not in ['starting','listening'])
+                status_key = 'unknown' if status['status'] == 'Listening' else status['status']
+                expected_details = translated(page, 'ssh.tunnels.details', {
+                    'status':translated(page, 'ssh.tunnels.status_' + status_key),
+                    'connections':2,'sent':'4.00 KiB','received':'1.00 KiB'})
+                assert status['details'] == expected_details + ' · ' + translated(page, 'ssh.tunnels.cleanup_pending')
+        page.set_viewport_size({'width':480,'height':600})
+        layout = page.locator('#ssh-tunnels-dialog').evaluate("""dialog => {
+            const bounds = dialog.getBoundingClientRect();
+            return {inside:bounds.left >= 0 && bounds.right <= innerWidth && bounds.top >= 0 && bounds.bottom <= innerHeight,
+                fits:dialog.scrollWidth <= dialog.clientWidth+1,
+                fields:[...dialog.querySelectorAll('input,select')].every(element => {
+                    const rect = element.getBoundingClientRect(); return rect.left >= bounds.left && rect.right <= bounds.right;
+                })};
+        }""")
+        assert all(layout.values()), layout
+        before = fixture.get_emitted(page, 'ssh_tunnel')
+        page.click('#ssh-tunnels-close')
+        page.wait_for_selector('#ssh-tunnels-dialog', state='hidden')
+        assert not any(event['args'][0]['operation'] == 'stop' for event in fixture.get_emitted(page, 'ssh_tunnel'))
+        assert len([event for event in fixture.get_emitted(page, 'ssh_tunnel') if event['args'][0]['operation'] == 'start']) == 2
+        assert len(before) >= 3
+    finally:
+        fixture.close_context(context)
+
+
+def test_timeout_keeps_status_polling_without_repeating_start(browser, url, locale='en'):
+    context, page = new_tunnel_page(browser, url, locale)
+    try:
+        result = page.evaluate("""() => {
+            const test = window.terminalTest;
+            test.applyTerminalListForTest({terminals:[{terminal_id:'main',connection_type:'ssh',
+                terminal_label:'Timeout fixture',connected:true,files_available:true}]});
+            test.holdSshTunnelRequestsForTest(); test.clearEmitted();
+            const timeouts = [], polls = [];
+            const originalTimeout = window.setTimeout, originalInterval = window.setInterval;
+            let timerId = 1000000;
+            window.setTimeout = (callback,delay,...args) => delay === 15000
+                ? (timeouts.push(callback), ++timerId) : originalTimeout(callback,delay,...args);
+            window.setInterval = (callback,delay,...args) => delay === 2000
+                ? (polls.push(callback), ++timerId) : originalInterval(callback,delay,...args);
+            try {
+                document.getElementById('ssh-tunnels-btn').click();
+                test.completeSshTunnelRequestForTest(0,{status:'ok',tunnels:[],connection_id:'timeout-connection'});
+                document.getElementById('ssh-tunnel-form').requestSubmit();
+                const requests = () => test.getEmitted().filter(item => item.event === 'ssh_tunnel').map(item => item.args[0]);
+                const beforeTimeout = requests();
+                timeouts[1]();
+                const timeoutMessage = document.getElementById('ssh-tunnels-message').textContent;
+                const afterTimeout = requests();
+                polls[0]();
+                const afterPoll = requests();
+                test.completeSshTunnelRequestForTest(1,{status:'ok',tunnel:{tunnel_id:'ssht_late',revision:1}});
+                const lateIgnored = !document.querySelector('[data-tunnel-id="ssht_late"]');
+                test.completeSshTunnelRequestForTest(2,{status:'error',message:'Raw <b>& {message}'});
+                const rawError = document.getElementById('ssh-tunnels-message').textContent;
+                const rawHtml = document.querySelectorAll('#ssh-tunnels-message b').length;
+                polls[0]();
+                test.completeSshTunnelRequestForTest(3,{status:'error'});
+                const fallback = document.getElementById('ssh-tunnels-message').textContent;
+                document.getElementById('ssh-tunnels-close').click();
+                return {beforeTimeout,afterTimeout,afterPoll,timeoutMessage,lateIgnored,rawError,rawHtml,fallback,
+                    operations:requests().map(request => request.operation)};
+            } finally {
+                window.setTimeout = originalTimeout; window.setInterval = originalInterval;
+            }
+        }""")
+        assert [item['operation'] for item in result['beforeTimeout']] == ['status','start']
+        assert result['afterTimeout'] == result['beforeTimeout'], 'Timeout automatically resent a tunnel mutation'
+        assert [item['operation'] for item in result['afterPoll']] == ['status','start','status']
+        assert result['operations'] == ['status','start','status','status']
+        assert result['lateIgnored'] and result['rawHtml'] == 0
+        assert result['rawError'] == 'Raw <b>& {message}'
+        assert result['timeoutMessage'] == translated(page, 'ssh.tunnels.timeout')
+        assert result['fallback'] == translated(page, 'ssh.tunnels.request_failed')
     finally:
         fixture.close_context(context)
 
@@ -87,8 +268,11 @@ def test_tunnel_controls(browser, url):
         with fixture.load_playwright()[0]() as playwright:
             browser = playwright.chromium.launch(headless=True)
             try:
-                test_tunnel_controls(browser, access_url)
-                print('SSH tunnel browser controls: PASS')
+                for locale in ['en','zh-TW']:
+                    for test in [test_tunnel_controls,test_directions_statuses_and_close_preserve_protocol,
+                                 test_timeout_keeps_status_polling_without_repeating_start]:
+                        test(browser, access_url, locale)
+                        print(f'{test.__name__} ({locale}): PASS', flush=True)
             finally:
                 browser.close()
     finally:

From 1fd4d5233ae2aca76f67d9444f8fdfbf3c538e42 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sun, 20 Sep 2026 02:41:17 +0800
Subject: [PATCH 23/43] Clarify Agent Tunnel renewal and verification copy

---
 README.md                                |   9 +-
 docs/agent_ui_review_plan.md             |  60 ++++++++-
 docs/ui_copy_review.tsv                  |  29 ++++
 static/js/standterm-messages.js          |  58 ++++++++
 templates/index.html                     |  70 +++++-----
 tests/agent_browser_smoke.py             |  47 +++++--
 tests/agent_tunnel_i18n_browser_smoke.py | 162 +++++++++++++++++++++++
 tests/agent_tunnel_smoke.py              |  26 ++++
 8 files changed, 413 insertions(+), 48 deletions(-)
 create mode 100644 tests/agent_tunnel_i18n_browser_smoke.py

diff --git a/README.md b/README.md
index 1352cfd..6902d28 100644
--- a/README.md
+++ b/README.md
@@ -328,7 +328,7 @@ Chinese (Taiwan) for browser access and recovery, Agent permissions, input and
 file-copy approvals, transfer results, local connection information, connection
 forms, SSH login, SSH profile/route editors (including browser-key and
 host-fingerprint controls), settings import/export, settings navigation and
-preference actions, and user SSH tunnel controls. The choice
+preference actions, user SSH tunnel controls, and Agent Tunnel setup/status. The choice
 applies the next time the page opens; saving it does not reload the current
 page or change its connections and grants. Other areas remain in English.
 **Save preferences** stores the General and Appearance preference fields.
@@ -764,11 +764,16 @@ command and asks the agent to run `hello` for each intended tab. Local token
 minting is not required: Start creates separate grants for Agent-enabled tabs.
 
 **Check Tunnel** checks the remote listener, helper bundle, and connection to
-this Core instance again. The verification timestamp confirms that path works;
+this Core instance again. A failed check stops the tunnel and revokes its grants.
+The verification timestamp records the last successful check;
 each tab separately shows **waiting for agent** until Core receives an
 authenticated request through this tunnel. **Last authenticated request** is a
 historical timestamp, not a continuous connection indicator. **Refresh Status**
 reloads the current grants and activity without renewing their tokens.
+On an active tunnel, **Start / Renew Access** updates grants without repeating
+those checks or reinstalling helpers. It replaces invalid grants; valid tokens
+keep their existing expiry. Use **Check Tunnel** to verify the path
+again. Closing the dialog keeps the tunnel running.
 
 The SSH host needs Python 3.9+, SFTP, remote forwarding, and a way to inspect
 its listener bindings. Core supports Linux `/proc/net`, FreeBSD `netstat` JSON,
diff --git a/docs/agent_ui_review_plan.md b/docs/agent_ui_review_plan.md
index db719a7..ffd2a6c 100644
--- a/docs/agent_ui_review_plan.md
+++ b/docs/agent_ui_review_plan.md
@@ -43,7 +43,7 @@ do not consolidate them merely to shorten labels.
 | 3 | Review English UI copy and terminology | Core terms agreed; initial English sources reviewed | Review each proposed change for target, permissions, consequences, and next action; check related tooltips, Desktop help, and tests before applying it. |
 | 4 | Finalize the translation exchange table | Initial exchange validated with an independent translator | Stable keys, approved English source, context, and placeholder constraints are sufficient for an independent translator. |
 | 5 | Pilot Agent access and local connection information | Implemented; validation below | Cover static and dynamic text, titles, and accessible names; preserve connected sessions and authorization; support English fallback. |
-| 6 | Translate and integrate approved rows | Agent pilot, browser access/recovery, Agent approvals/transfers, connection/login controls, SSH route/profile editors, settings transfer/preference actions and user SSH tunnels integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
+| 6 | Translate and integrate approved rows | Agent pilot, browser access/recovery, Agent approvals/transfers, connection/login controls, SSH route/profile editors, settings transfer/preference actions, user SSH tunnels and Agent Tunnel integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
 | 7 | Expand Core and Desktop coverage | Deferred | Verify secondary windows, native menus, setup, diagnostics, packaging, and representative layouts. |
 
 ## Validation of the reliability changes
@@ -66,7 +66,7 @@ validated separately below.
 
 ## Deferred UI work
 
-Agent diagnostics, Agent Tunnel setup, secondary windows,
+Agent diagnostics, remaining settings panels, secondary windows,
 and Desktop localization remain outside the completed workflows. Translation
 starts only after the English source for the selected workflow is reviewed.
 Extra screen diffing, render hints, key aliases, and byte-limit options remain optional optimizations.
@@ -472,3 +472,59 @@ Validation uses WSL Chromium and local SSH servers. Native Desktop and a physica
 remote host were not part of this phase. Agent Tunnel authorization/renewal and
 remote verification copy are the next separate review candidate; general TCP
 forwarding does not replace that workflow or grant API access.
+
+## Agent Tunnel access and verification
+
+Twenty-nine reviewed messages now cover Agent Tunnel setup, target permissions,
+verification and lifecycle feedback. The table contains 474 rows: 473 referenced
+bilingual messages and the existing removal. Existing connection/copy labels
+are reused. The remote prompt, URL, SSH context fields and backend diagnostics
+remain unchanged data; only their surrounding display text is localized.
+
+On a new tunnel, Start installs helpers and skills in a private temporary SSH
+directory and verifies the remote path. On an existing active tunnel, apply
+updates grants without repeating those checks. Valid tokens keep their expiry;
+invalid grants can be replaced. The UI therefore says Preparing Agent access
+and labels verified_at as the last verification, using the selected UI locale.
+
+Check verifies the loopback-only remote listener, helper bundle and expected
+Core instance. Failure stops this tunnel and revokes its grants. This consequence
+is visible beside the controls and attached to Check as an accessible
+description. Readiness does not prove an authenticated Agent request: activity
+and zero-grant states remain separate. Stop revokes this tunnel's access before
+asynchronous cleanup; it does not revoke local agents or guarantee deletion of
+all remote files. Close leaves the tunnel running.
+
+| Finding | Severity | Evidence | Critic remedy | Main response | Resolution | Validation |
+| --- | --- | --- | --- | --- | --- | --- |
+| Apply does not always verify or extend token expiry | Medium | on_agent_tunnel and update_agent_tunnel_targets | Remove verification promise; explain renewal scope | Accept | Preparing message and valid-token expiry hint; retain Start / Renew Access label | Actual apply preserves valid tokens, expiry and verified_at; replaces only expired grant without executing verification commands |
+| Check failure has a revocation consequence | Medium | Runtime verify and handler exception cleanup | State failure stops/revokes and timestamp is historical | Accept | Visible Check hint and localized last-verification label | Existing missing-listener and activity tests; bilingual failed-check controls and timestamps |
+| Stop and remote cleanup have different guarantees | Medium | AgentTunnel.close and best-effort cleanup | Scope revocation to this tunnel; avoid complete-deletion claims | Accept | Scoped cleanup message and lifecycle hint; retain Close behavior | Slow cleanup revokes immediately; browser stopped/pending states and Close without Stop |
+| Target list is a status snapshot and ready can have no grants | Low | renderAgentTunnelTargets and backend panel-target synchronization | Explain refresh and separate readiness from Agent activity | Accept | Localized known permissions, raw unknown mode fallback, remote-access inclusion label | Bilingual mode display preserves actual permissions, zero-grant readiness and raw data; existing enrollment/ownership tests |
+| Copy prompt terminology | Editorial | Previously agreed glossary and shared connection labels | Alternative translation for prompt | Modify | Reuse the established connection-instructions wording | Existing raw prompt and clipboard checks in both locales |
+
+Protocol values, request/connection/carrier guards, public discovery scope,
+authorization defaults and backend behavior remain unchanged. Separate local
+token creation is not required. Later enabled tabs still follow the same
+viewer's Agent Panel permissions, and Refresh does not silently renew access.
+
+Two bounded independent review passes found no remaining material issue. The
+review changed the apply/verification wording and added explicit Check-failure
+and Stop consequences. It also verified literal interpolation, English fallback
+and all 29 new key references in memory. Keeping backend diagnostics raw and
+the target list as a refreshed snapshot is a deliberate scope decision; no
+automatic retry, broader discovery or continuous synchronization was added.
+
+| Check | Result |
+| --- | --- |
+| Existing Agent Tunnel backend suite | All 26 tests passed, including real SSH, grant ownership/enrollment, target publication, loopback verification, failed checks, revocation and slow cleanup. |
+| Renewal boundary regression | One additional real-SSH case passed: valid tokens/expiry and verification time persist across apply; only the expired grant is replaced. |
+| Bilingual browser suite | Three cases in each language passed, retaining focus/clipboard checks and late-carrier/disconnect protection, and adding permission display, zero grants, raw data, stopped/cleanup and Close boundaries. |
+| Layout | Both languages fit the 480x600 dialog without horizontal overflow; displayed controls remain inside it. |
+| Catalog and static checks | Six exporter and six lookup tests passed; all 473 keys are referenced, the generated catalog is current, Python syntax and diff checks passed. |
+
+Validation uses WSL Chromium and local SSH fixtures; native Desktop and a
+physical remote host were not exercised. Typed backend error localization and
+continuous remote health monitoring remain outside scope. The next candidate
+is a compact review of remaining General/Appearance settings labels before
+considering broader Server, Diagnostics or Desktop coverage.
diff --git a/docs/ui_copy_review.tsv b/docs/ui_copy_review.tsv
index e3fa4c7..3d1c5d2 100644
--- a/docs/ui_copy_review.tsv
+++ b/docs/ui_copy_review.tsv
@@ -444,3 +444,32 @@ ssh.tunnels.request_failed	Tunnel request failed.	Tunnel request failed.	通道
 ssh.tunnels.start_requested	Tunnel requested. Watch the tunnel status.	Start requested. Check the tunnel status.	已請求啟動。請查看通道狀態。	Successful start acknowledgment can precede asynchronous setup completion.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Do not claim listening, target connectivity or successful forwarding from the acknowledgment alone.	translation-reviewed	templates/index.html
 ssh.tunnels.stop_requested	Tunnel stopped.	Stop requested. Check the tunnel status.	已請求停止。請查看通道狀態。	Successful stop acknowledgment follows local stop flag but cleanup/remote cancellation can remain pending.		Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Do not state that remote cleanup has completed; request completion is separate from remote listener shutdown.	translation-reviewed	templates/index.html
 ssh.tunnels.carrier	SSH tab: {title} ({id}). Tunnels use this route’s final SSH connection.	SSH tab: {title} ({id}). Uses this route’s final SSH connection.	SSH 分頁：{title}（{id}）。使用此路徑的最後一段 SSH 連線。	Dialog carrier text uses captured terminal title and ID; routing uses the typed connection, never this text.	{title} {id}	Ordinary human SSH tunnels only, not Agent Tunnel. Display only; preserve typed local/remote direction, request/view/connection/revision guards, IDs, names, endpoint values, counters, timers and control behavior. Keep backend messages and errors raw; never match their text to choose a translation. Keep title and ID verbatim as text; do not infer final host from a user-controlled terminal title.	translation-reviewed	templates/index.html
+agent.tunnel.title	Agent Tunnel	Agent Tunnel	Agent 通道	Toolbar label and tunnel setup dialog title.		Display data only; preserve typed state, operations, IDs, and raw diagnostics.	translation-reviewed	templates/index.html
+agent.tunnel.tooltip	Set up remote Agent access through this SSH connection	Set up Agent access from this SSH host	設定從此 SSH 主機使用的 Agent 存取	Toolbar tooltip. The SSH host is the final host in this tab’s route.		Display data only; preserve typed state, operations, IDs, and raw diagnostics.	translation-reviewed	templates/index.html
+agent.tunnel.step_permissions	Use each tab's Agent Panel to enable access and choose its permission. This tunnel follows those permissions, including tabs enabled later.	In each intended tab’s Agent panel, enable access and choose its permission.	在各個要開放存取的分頁中，於 Agent 面板啟用存取並選擇權限。	The panel can enable access without minting a standard token first.		Do not imply Authorize agent or a separate standard token is a prerequisite; preserve per-tab permissions.	translation-reviewed	templates/index.html
+agent.tunnel.step_start	Click Start / Renew Access. Local Mint is not required. You can enable tabs after starting the tunnel.	Click Start / Renew Access to start or update this tunnel’s access. Valid tokens keep their expiry; separate local tokens are not required.	按「啟動／更新存取」建立或更新此通道的存取權。有效權杖的期限維持原樣，不必另建本機權杖。	Starting can succeed with zero enabled tabs. Existing valid grants are retained.		Keep the English action name consistent with the backend diagnostic; do not promise every apply re-verifies or rotates tokens.	translation-reviewed	templates/index.html
+agent.tunnel.step_copy	After setup succeeds, click Copy Prompt and paste it to the agent on this SSH host.	Once ready, click Copy Prompt and paste it to the agent on this SSH host.	備妥後，按「複製連線指引」，再貼給此 SSH 主機上的 Agent。	Ready means setup is ready, not that an Agent has connected.		Display data only; preserve typed state, operations, IDs, and raw diagnostics.	translation-reviewed	templates/index.html
+agent.tunnel.requirements	Start provisions the current helpers and skills in a private directory on this SSH host. Python 3.9+, SFTP, remote forwarding, and listener inspection are required (Linux, FreeBSD, and macOS checks are available).	A new tunnel copies the current helpers and skills to a private temporary directory on this SSH host. Requires Python 3.9+, SFTP, remote forwarding and listener inspection; checks support Linux, FreeBSD and macOS.	建立新通道時，會將目前的輔助工具與技能複製到此 SSH 主機的私有暫存目錄。需要 Python 3.9 以上、SFTP、遠端轉送與監聽檢查功能；目前支援 Linux、FreeBSD 與 macOS 的檢查。	Provisioning is only for a new tunnel; existing active tunnel apply updates grants.		Do not imply a system-wide install or that renewing re-installs files.	translation-reviewed	templates/index.html
+agent.tunnel.lifecycle_hint		This tunnel follows this page’s tab permissions, including tabs enabled later. Close keeps it running. Stop revokes this tunnel’s access. It stops when its SSH connection closes or this page disconnects, including a reload.	此通道依本頁各分頁的權限提供存取，也包含稍後啟用的分頁。關閉視窗後仍會運作；停止通道會撤銷此通道的存取權。SSH 連線關閉或本頁中斷連線時（包含重新載入），通道會停止。	Always-visible lifecycle and grant scope hint.		Scope to this browser viewer and this tunnel; stop does not revoke unrelated standard tokens or grants.	translation-reviewed	templates/index.html
+agent.tunnel.check_hint		Check Tunnel verifies the remote loopback listener, helpers, and connection to this Core instance. Failure stops this tunnel and revokes its access.	「檢查通道」會驗證遠端 loopback 監聽、輔助工具及與此 Core 執行個體的連線。檢查失敗會停止此通道並撤銷其存取權。	Always-visible check scope and failure consequence, separate from grant and Agent activity.		Do not imply continuous health, Agent connection, permission validation, or successful terminal input.	translation-reviewed	templates/index.html
+agent.tunnel.targets_hint		Refresh Status updates this list; it does not check the tunnel.	「更新狀態」會更新此清單，不會檢查通道。	The target list is a snapshot, not a live synchronization monitor.		Display data only; preserve typed state, operations, IDs, and raw diagnostics.	translation-reviewed	templates/index.html
+agent.tunnel.manage	Manage Tunnel	Manage Tunnel	管理通道	Switches from connection info to setup view; no immediate backend mutation.		Display data only; preserve typed state, operations, IDs, and raw diagnostics.	translation-reviewed	templates/index.html
+agent.tunnel.check	Check Tunnel	Check Tunnel	檢查通道	Runs explicit verification; failure closes tunnel.		Display data only; preserve typed state, operations, IDs, and raw diagnostics.	translation-reviewed	templates/index.html
+agent.tunnel.stop	Stop Tunnel	Stop Tunnel	停止通道	Revokes this tunnel’s grants and starts cleanup.		Display data only; preserve typed state, operations, IDs, and raw diagnostics.	translation-reviewed	templates/index.html
+agent.tunnel.apply	Start / Renew Access	Start / Renew Access	啟動／更新存取	Start a new tunnel or update access on the active tunnel.		Keep English label because raw sync failure diagnostics refer to it. Does not enable disabled tabs or rotate every valid token.	translation-reviewed	templates/index.html
+agent.tunnel.stopped_restart	Tunnel stopped. Start it again before copying a remote prompt.	Tunnel stopped. Start it again before copying the connection prompt.	通道已停止。請重新啟動後再複製連線指引。	Invalidation after structured stopped event.		Display data only; preserve typed state, operations, IDs, and raw diagnostics.	translation-reviewed	templates/index.html
+agent.tunnel.targets_empty	No tabs enabled. Enable access in a tab's Agent Panel when needed.	No tabs enabled. Enable access in each intended tab’s Agent panel.	尚未啟用任何分頁。請在要開放存取的分頁中，於 Agent 面板啟用存取。	Empty local enabled-tab list; tunnel can still be ready.		Display data only; preserve typed state, operations, IDs, and raw diagnostics.	translation-reviewed	templates/index.html
+agent.tunnel.target_row	{title} ({id}) · {permission}	{title} ({id}) · {permission}	{title}（{id}）· {permission}	Enabled target list row before optional remote grant suffix.	{title}, {id}, {permission}	Keep title and ID raw; permission uses formatAgentModeLabel(typed mode), never raw enum matching against translated labels.	translation-reviewed	templates/index.html
+agent.tunnel.remote_access_ready	remote access ready	remote access included	已納入遠端存取	Suffix when structured terminal_ids includes this target.		Suffix only; does not prove the Agent connected or that paused grants allow input.	translation-reviewed	templates/index.html
+agent.tunnel.carrier_context	Agent runs on SSH host: {context}	Agent environment — SSH host: {context}	Agent 執行環境 — SSH 主機：{context}	Remote runtime location from SSH context, without claiming an Agent is running.	{context}	Keep JSON.stringify(ssh_context) result unchanged; only surrounding label is translated.	translation-reviewed	templates/index.html
+agent.tunnel.carrier_tab	Agent runs on SSH host: {title} (tab {id})	Agent environment — SSH host: {title} (tab {id})	Agent 執行環境 — SSH 主機：{title}（分頁 {id}）	Remote runtime location before SSH context status arrives.	{title}, {id}	Keep terminal title and ID raw; no claim that an Agent is already running.	translation-reviewed	templates/index.html
+agent.tunnel.ready	Copy Prompt to the agent running on this SSH host. The URL below belongs to that remote host. Agent activity is shown separately.	Copy Prompt to the agent on this SSH host. The URL works on that host. Agent activity is shown separately.	按「複製連線指引」，再貼給此 SSH 主機上的 Agent。此網址供該主機使用；Agent 活動會另外顯示。	Setup ready message; may have zero enabled tabs.		No claim that the Agent connected; preserve loopback URL and prompt values unchanged.	translation-reviewed	templates/index.html
+agent.tunnel.cleanup_pending	Access revoked. Remote cleanup is pending.	This tunnel’s access is revoked. Remote cleanup is pending.	此通道的存取權已撤銷，遠端清理尚未完成。	Structured cleanup_pending stopped status.		Scope revocation to this tunnel; do not imply unrelated grants are revoked or remote files already removed.	translation-reviewed	templates/index.html
+agent.tunnel.stopped	Tunnel stopped.	Tunnel stopped.	通道已停止。	Stopped state without cleanup_pending.		Do not promise that all remote files were removed; cleanup is best effort.	translation-reviewed	templates/index.html
+agent.tunnel.setup_failed	Tunnel setup failed.	Tunnel setup failed.	通道設定失敗。	Fallback only if server supplies no diagnostic.		Preserve backend result.message verbatim; do not map errors by English text.	translation-reviewed	templates/index.html
+agent.tunnel.verified_at	Remote loopback and helpers verified: {time}	Last tunnel verification: {time}	最近一次通道驗證：{time}	Successful initial or explicit verification timestamp.	{time}	Keep existing date formatting; not current health or Agent activity.	translation-reviewed	templates/index.html
+agent.tunnel.preparing	Preparing and verifying Agent access…	Preparing Agent access…	正在準備 Agent 存取…	Pending apply; existing active tunnel does not re-run verification.		Display data only; preserve typed state, operations, IDs, and raw diagnostics.	translation-reviewed	templates/index.html
+agent.tunnel.checking	Checking the remote listener, helpers, and connection to Core…	Checking the remote listener, helpers, and connection to Core…	正在檢查遠端監聽、輔助工具及與 Core 的連線…	Pending check operation; do not alter typed operation.		Display data only; preserve typed state, operations, IDs, and raw diagnostics.	translation-reviewed	templates/index.html
+agent.tunnel.updating	Updating tunnel status…	Updating tunnel status…	正在更新通道狀態…	Pending status or stop operation; not proof of successful stop.		Display data only; preserve typed state, operations, IDs, and raw diagnostics.	translation-reviewed	templates/index.html
+agent.tunnel.loading	Loading tunnel status…	Loading tunnel status…	正在載入通道狀態…	Opening tunnel dialog before status response.		Display data only; preserve typed state, operations, IDs, and raw diagnostics.	translation-reviewed	templates/index.html
+agent.tunnel.connection_unavailable	SSH connection unavailable. Start a new tunnel after reconnecting.	SSH connection unavailable. Start a new tunnel after reconnecting.	SSH 連線無法使用。重新連線後，請啟動新通道。	Invalidation when the carrier SSH connection becomes unavailable.		Display data only; preserve typed state, operations, IDs, and raw diagnostics.	translation-reviewed	templates/index.html
diff --git a/static/js/standterm-messages.js b/static/js/standterm-messages.js
index 586149c..21b7566 100644
--- a/static/js/standterm-messages.js
+++ b/static/js/standterm-messages.js
@@ -102,6 +102,35 @@
         "agent.transfer.stop_hint": "Stop transfer",
         "agent.transfer.stopped": "Stopped",
         "agent.transfer.stopping": "Stopping\u2026",
+        "agent.tunnel.apply": "Start / Renew Access",
+        "agent.tunnel.carrier_context": "Agent environment \u2014 SSH host: {context}",
+        "agent.tunnel.carrier_tab": "Agent environment \u2014 SSH host: {title} (tab {id})",
+        "agent.tunnel.check": "Check Tunnel",
+        "agent.tunnel.check_hint": "Check Tunnel verifies the remote loopback listener, helpers, and connection to this Core instance. Failure stops this tunnel and revokes its access.",
+        "agent.tunnel.checking": "Checking the remote listener, helpers, and connection to Core\u2026",
+        "agent.tunnel.cleanup_pending": "This tunnel\u2019s access is revoked. Remote cleanup is pending.",
+        "agent.tunnel.connection_unavailable": "SSH connection unavailable. Start a new tunnel after reconnecting.",
+        "agent.tunnel.lifecycle_hint": "This tunnel follows this page\u2019s tab permissions, including tabs enabled later. Close keeps it running. Stop revokes this tunnel\u2019s access. It stops when its SSH connection closes or this page disconnects, including a reload.",
+        "agent.tunnel.loading": "Loading tunnel status\u2026",
+        "agent.tunnel.manage": "Manage Tunnel",
+        "agent.tunnel.preparing": "Preparing Agent access\u2026",
+        "agent.tunnel.ready": "Copy Prompt to the agent on this SSH host. The URL works on that host. Agent activity is shown separately.",
+        "agent.tunnel.remote_access_ready": "remote access included",
+        "agent.tunnel.requirements": "A new tunnel copies the current helpers and skills to a private temporary directory on this SSH host. Requires Python 3.9+, SFTP, remote forwarding and listener inspection; checks support Linux, FreeBSD and macOS.",
+        "agent.tunnel.setup_failed": "Tunnel setup failed.",
+        "agent.tunnel.step_copy": "Once ready, click Copy Prompt and paste it to the agent on this SSH host.",
+        "agent.tunnel.step_permissions": "In each intended tab\u2019s Agent panel, enable access and choose its permission.",
+        "agent.tunnel.step_start": "Click Start / Renew Access to start or update this tunnel\u2019s access. Valid tokens keep their expiry; separate local tokens are not required.",
+        "agent.tunnel.stop": "Stop Tunnel",
+        "agent.tunnel.stopped": "Tunnel stopped.",
+        "agent.tunnel.stopped_restart": "Tunnel stopped. Start it again before copying the connection prompt.",
+        "agent.tunnel.target_row": "{title} ({id}) \u00b7 {permission}",
+        "agent.tunnel.targets_empty": "No tabs enabled. Enable access in each intended tab\u2019s Agent panel.",
+        "agent.tunnel.targets_hint": "Refresh Status updates this list; it does not check the tunnel.",
+        "agent.tunnel.title": "Agent Tunnel",
+        "agent.tunnel.tooltip": "Set up Agent access from this SSH host",
+        "agent.tunnel.updating": "Updating tunnel status\u2026",
+        "agent.tunnel.verified_at": "Last tunnel verification: {time}",
         "browser.access.ca_hint": "For Windows browsers connecting to a WSL IP over HTTPS, the browser may also require trusting the StandTerm local CA.",
         "browser.access.instructions": "Enter the launcher\u2019s access token, or open its full Access URL.",
         "browser.access.load_failed": "Unable to load StandTerm.",
@@ -548,6 +577,35 @@
         "agent.transfer.stop_hint": "\u505c\u6b62\u50b3\u8f38",
         "agent.transfer.stopped": "\u5df2\u505c\u6b62",
         "agent.transfer.stopping": "\u6b63\u5728\u505c\u6b62\u2026",
+        "agent.tunnel.apply": "\u555f\u52d5\uff0f\u66f4\u65b0\u5b58\u53d6",
+        "agent.tunnel.carrier_context": "Agent \u57f7\u884c\u74b0\u5883 \u2014 SSH \u4e3b\u6a5f\uff1a{context}",
+        "agent.tunnel.carrier_tab": "Agent \u57f7\u884c\u74b0\u5883 \u2014 SSH \u4e3b\u6a5f\uff1a{title}\uff08\u5206\u9801 {id}\uff09",
+        "agent.tunnel.check": "\u6aa2\u67e5\u901a\u9053",
+        "agent.tunnel.check_hint": "\u300c\u6aa2\u67e5\u901a\u9053\u300d\u6703\u9a57\u8b49\u9060\u7aef loopback \u76e3\u807d\u3001\u8f14\u52a9\u5de5\u5177\u53ca\u8207\u6b64 Core \u57f7\u884c\u500b\u9ad4\u7684\u9023\u7dda\u3002\u6aa2\u67e5\u5931\u6557\u6703\u505c\u6b62\u6b64\u901a\u9053\u4e26\u64a4\u92b7\u5176\u5b58\u53d6\u6b0a\u3002",
+        "agent.tunnel.checking": "\u6b63\u5728\u6aa2\u67e5\u9060\u7aef\u76e3\u807d\u3001\u8f14\u52a9\u5de5\u5177\u53ca\u8207 Core \u7684\u9023\u7dda\u2026",
+        "agent.tunnel.cleanup_pending": "\u6b64\u901a\u9053\u7684\u5b58\u53d6\u6b0a\u5df2\u64a4\u92b7\uff0c\u9060\u7aef\u6e05\u7406\u5c1a\u672a\u5b8c\u6210\u3002",
+        "agent.tunnel.connection_unavailable": "SSH \u9023\u7dda\u7121\u6cd5\u4f7f\u7528\u3002\u91cd\u65b0\u9023\u7dda\u5f8c\uff0c\u8acb\u555f\u52d5\u65b0\u901a\u9053\u3002",
+        "agent.tunnel.lifecycle_hint": "\u6b64\u901a\u9053\u4f9d\u672c\u9801\u5404\u5206\u9801\u7684\u6b0a\u9650\u63d0\u4f9b\u5b58\u53d6\uff0c\u4e5f\u5305\u542b\u7a0d\u5f8c\u555f\u7528\u7684\u5206\u9801\u3002\u95dc\u9589\u8996\u7a97\u5f8c\u4ecd\u6703\u904b\u4f5c\uff1b\u505c\u6b62\u901a\u9053\u6703\u64a4\u92b7\u6b64\u901a\u9053\u7684\u5b58\u53d6\u6b0a\u3002SSH \u9023\u7dda\u95dc\u9589\u6216\u672c\u9801\u4e2d\u65b7\u9023\u7dda\u6642\uff08\u5305\u542b\u91cd\u65b0\u8f09\u5165\uff09\uff0c\u901a\u9053\u6703\u505c\u6b62\u3002",
+        "agent.tunnel.loading": "\u6b63\u5728\u8f09\u5165\u901a\u9053\u72c0\u614b\u2026",
+        "agent.tunnel.manage": "\u7ba1\u7406\u901a\u9053",
+        "agent.tunnel.preparing": "\u6b63\u5728\u6e96\u5099 Agent \u5b58\u53d6\u2026",
+        "agent.tunnel.ready": "\u6309\u300c\u8907\u88fd\u9023\u7dda\u6307\u5f15\u300d\uff0c\u518d\u8cbc\u7d66\u6b64 SSH \u4e3b\u6a5f\u4e0a\u7684 Agent\u3002\u6b64\u7db2\u5740\u4f9b\u8a72\u4e3b\u6a5f\u4f7f\u7528\uff1bAgent \u6d3b\u52d5\u6703\u53e6\u5916\u986f\u793a\u3002",
+        "agent.tunnel.remote_access_ready": "\u5df2\u7d0d\u5165\u9060\u7aef\u5b58\u53d6",
+        "agent.tunnel.requirements": "\u5efa\u7acb\u65b0\u901a\u9053\u6642\uff0c\u6703\u5c07\u76ee\u524d\u7684\u8f14\u52a9\u5de5\u5177\u8207\u6280\u80fd\u8907\u88fd\u5230\u6b64 SSH \u4e3b\u6a5f\u7684\u79c1\u6709\u66ab\u5b58\u76ee\u9304\u3002\u9700\u8981 Python 3.9 \u4ee5\u4e0a\u3001SFTP\u3001\u9060\u7aef\u8f49\u9001\u8207\u76e3\u807d\u6aa2\u67e5\u529f\u80fd\uff1b\u76ee\u524d\u652f\u63f4 Linux\u3001FreeBSD \u8207 macOS \u7684\u6aa2\u67e5\u3002",
+        "agent.tunnel.setup_failed": "\u901a\u9053\u8a2d\u5b9a\u5931\u6557\u3002",
+        "agent.tunnel.step_copy": "\u5099\u59a5\u5f8c\uff0c\u6309\u300c\u8907\u88fd\u9023\u7dda\u6307\u5f15\u300d\uff0c\u518d\u8cbc\u7d66\u6b64 SSH \u4e3b\u6a5f\u4e0a\u7684 Agent\u3002",
+        "agent.tunnel.step_permissions": "\u5728\u5404\u500b\u8981\u958b\u653e\u5b58\u53d6\u7684\u5206\u9801\u4e2d\uff0c\u65bc Agent \u9762\u677f\u555f\u7528\u5b58\u53d6\u4e26\u9078\u64c7\u6b0a\u9650\u3002",
+        "agent.tunnel.step_start": "\u6309\u300c\u555f\u52d5\uff0f\u66f4\u65b0\u5b58\u53d6\u300d\u5efa\u7acb\u6216\u66f4\u65b0\u6b64\u901a\u9053\u7684\u5b58\u53d6\u6b0a\u3002\u6709\u6548\u6b0a\u6756\u7684\u671f\u9650\u7dad\u6301\u539f\u6a23\uff0c\u4e0d\u5fc5\u53e6\u5efa\u672c\u6a5f\u6b0a\u6756\u3002",
+        "agent.tunnel.stop": "\u505c\u6b62\u901a\u9053",
+        "agent.tunnel.stopped": "\u901a\u9053\u5df2\u505c\u6b62\u3002",
+        "agent.tunnel.stopped_restart": "\u901a\u9053\u5df2\u505c\u6b62\u3002\u8acb\u91cd\u65b0\u555f\u52d5\u5f8c\u518d\u8907\u88fd\u9023\u7dda\u6307\u5f15\u3002",
+        "agent.tunnel.target_row": "{title}\uff08{id}\uff09\u00b7 {permission}",
+        "agent.tunnel.targets_empty": "\u5c1a\u672a\u555f\u7528\u4efb\u4f55\u5206\u9801\u3002\u8acb\u5728\u8981\u958b\u653e\u5b58\u53d6\u7684\u5206\u9801\u4e2d\uff0c\u65bc Agent \u9762\u677f\u555f\u7528\u5b58\u53d6\u3002",
+        "agent.tunnel.targets_hint": "\u300c\u66f4\u65b0\u72c0\u614b\u300d\u6703\u66f4\u65b0\u6b64\u6e05\u55ae\uff0c\u4e0d\u6703\u6aa2\u67e5\u901a\u9053\u3002",
+        "agent.tunnel.title": "Agent \u901a\u9053",
+        "agent.tunnel.tooltip": "\u8a2d\u5b9a\u5f9e\u6b64 SSH \u4e3b\u6a5f\u4f7f\u7528\u7684 Agent \u5b58\u53d6",
+        "agent.tunnel.updating": "\u6b63\u5728\u66f4\u65b0\u901a\u9053\u72c0\u614b\u2026",
+        "agent.tunnel.verified_at": "\u6700\u8fd1\u4e00\u6b21\u901a\u9053\u9a57\u8b49\uff1a{time}",
         "browser.access.ca_hint": "Windows \u700f\u89bd\u5668\u900f\u904e HTTPS \u9023\u81f3 WSL IP \u6642\uff0c\u53ef\u80fd\u4e5f\u9700\u8981\u4fe1\u4efb StandTerm \u672c\u6a5f CA\u3002",
         "browser.access.instructions": "\u8f38\u5165\u555f\u52d5\u5668\u63d0\u4f9b\u7684\u5b58\u53d6\u6b0a\u6756\uff0c\u6216\u958b\u555f\u5176\u5b8c\u6574 Access URL\u3002",
         "browser.access.load_failed": "\u7121\u6cd5\u8f09\u5165 StandTerm\u3002",
diff --git a/templates/index.html b/templates/index.html
index fad2902..3089ef5 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -1458,7 +1458,7 @@ <h3 id="browser-auth-help-title" data-i18n="browser.auth.help_title">Manual brow
             <button id="agent-access-mint-btn" class="status-action" type="button" title="Authorize Direct input access and create a standard token for the current tab" data-i18n="agent.access.grant">Authorize agent</button>
             <button id="agent-connect-btn" class="status-action" type="button" title="Copy the agent prompt for the current tab's environment" data-i18n="agent.connection.title" data-i18n-title="agent.connection.tooltip">Agent connection</button>
             <button id="agent-toggle-btn" class="status-action" type="button" title="Show Agent panel">Show Agent Panel</button>
-            <button id="agent-tunnel-btn" class="status-action" type="button" title="Set up remote Agent access through this SSH connection" hidden>Agent Tunnel</button>
+            <button id="agent-tunnel-btn" class="status-action" type="button" title="Set up Agent access from this SSH host" data-i18n-title="agent.tunnel.tooltip" data-i18n="agent.tunnel.title" hidden>Agent Tunnel</button>
             <button id="ssh-tunnels-btn" class="status-action" type="button" title="Manage TCP forwarding for this SSH tab" data-i18n-title="ssh.tunnels.tooltip" data-i18n="ssh.tunnels.action" hidden>Tunnels</button>
             <button id="sftp-status-btn" class="status-action status-sftp" type="button" title="Open Files" aria-label="Open Files" hidden>&#x1F4C1;</button>
             <button id="transfer-queue-btn" class="status-action" type="button" title="Transfer Queue" aria-label="Transfer Queue" data-i18n-title="agent.transfer.queue" data-i18n-aria-label="agent.transfer.queue" hidden><span aria-hidden="true">&#x21C4;</span> <span id="transfer-queue-count">0</span></button>
@@ -1501,37 +1501,40 @@ <h3 id="agent-connect-title" data-i18n="agent.connection.title">Agent connection
         </div>
     </dialog>
     <dialog id="agent-tunnel-dialog" aria-labelledby="agent-tunnel-title">
-        <h3 id="agent-tunnel-title">Agent Tunnel</h3>
+        <h3 id="agent-tunnel-title" data-i18n="agent.tunnel.title">Agent Tunnel</h3>
         <p id="agent-tunnel-carrier"></p>
         <div id="agent-tunnel-setup">
         <ol class="agent-connect-steps">
-            <li>Use each tab's <strong>Agent Panel</strong> to enable access and choose its permission. This tunnel follows those permissions, including tabs enabled later.</li>
-            <li>Click <strong>Start / Renew Access</strong>. Local Mint is not required. You can enable tabs after starting the tunnel.</li>
-            <li>After setup succeeds, click <strong>Copy Prompt</strong> and paste it to the agent on this SSH host.</li>
+            <li data-i18n="agent.tunnel.step_permissions">In each intended tab’s Agent panel, enable access and choose its permission.</li>
+            <li data-i18n="agent.tunnel.step_start">Click Start / Renew Access to start or update this tunnel’s access. Valid tokens keep their expiry; separate local tokens are not required.</li>
+            <li data-i18n="agent.tunnel.step_copy">Once ready, click Copy Prompt and paste it to the agent on this SSH host.</li>
         </ol>
-        <p>Start provisions the current helpers and skills in a private directory on this SSH host. Python 3.9+, SFTP, remote forwarding, and listener inspection are required (Linux, FreeBSD, and macOS checks are available).</p>
+        <p data-i18n="agent.tunnel.requirements">A new tunnel copies the current helpers and skills to a private temporary directory on this SSH host. Requires Python 3.9+, SFTP, remote forwarding and listener inspection; checks support Linux, FreeBSD and macOS.</p>
+        <p id="agent-tunnel-targets-hint" data-i18n="agent.tunnel.targets_hint">Refresh Status updates this list; it does not check the tunnel.</p>
         <div id="agent-tunnel-targets"></div>
         </div>
+        <p id="agent-tunnel-lifecycle-hint" data-i18n="agent.tunnel.lifecycle_hint">This tunnel follows this page’s tab permissions, including tabs enabled later. Close keeps it running. Stop revokes this tunnel’s access. It stops when its SSH connection closes or this page disconnects, including a reload.</p>
+        <p id="agent-tunnel-check-hint" data-i18n="agent.tunnel.check_hint">Check Tunnel verifies the remote loopback listener, helpers, and connection to this Core instance. Failure stops this tunnel and revokes its access.</p>
         <p id="agent-tunnel-message" role="status"></p>
         <div id="agent-tunnel-connection" hidden>
-            <h4>Agent Info</h4>
+            <h4 data-i18n="agent.connection.title">Agent connection</h4>
             <div class="agent-connect-url">
-                <label for="agent-tunnel-url">Agent Info URL</label>
-                <input id="agent-tunnel-url" readonly aria-label="Agent Info URL">
-                <button id="agent-tunnel-copy-url" type="button">Copy URL</button>
+                <label for="agent-tunnel-url" data-i18n="agent.connection.url">Agent Info URL</label>
+                <input id="agent-tunnel-url" readonly aria-label="Agent Info URL" data-i18n-aria-label="agent.connection.url">
+                <button id="agent-tunnel-copy-url" type="button" data-i18n="common.copy_url">Copy URL</button>
             </div>
             <p id="agent-tunnel-verification"></p>
             <p id="agent-tunnel-activity" class="agent-connect-activity" aria-live="polite"></p>
         </div>
-        <textarea id="agent-tunnel-info" readonly aria-label="Remote agent prompt" hidden></textarea>
+        <textarea id="agent-tunnel-info" readonly aria-label="Agent connection prompt" data-i18n-aria-label="agent.connection.prompt" hidden></textarea>
         <div class="agent-tunnel-actions">
-            <button id="agent-tunnel-copy" type="button" hidden>Copy Prompt</button>
-            <button id="agent-tunnel-manage" type="button" hidden>Manage Tunnel</button>
-            <button id="agent-tunnel-refresh" type="button">Refresh Status</button>
-            <button id="agent-tunnel-check" type="button" disabled>Check Tunnel</button>
-            <button id="agent-tunnel-stop" type="button">Stop Tunnel</button>
-            <button id="agent-tunnel-apply" type="button">Start / Renew Access</button>
-            <button id="agent-tunnel-close" type="button">Close</button>
+            <button id="agent-tunnel-copy" type="button" data-i18n="agent.connection.copy" hidden>Copy Prompt</button>
+            <button id="agent-tunnel-manage" type="button" data-i18n="agent.tunnel.manage" hidden>Manage Tunnel</button>
+            <button id="agent-tunnel-refresh" type="button" data-i18n="common.refresh">Refresh Status</button>
+            <button id="agent-tunnel-check" type="button" data-i18n="agent.tunnel.check" aria-describedby="agent-tunnel-check-hint" disabled>Check Tunnel</button>
+            <button id="agent-tunnel-stop" type="button" data-i18n="agent.tunnel.stop" aria-describedby="agent-tunnel-lifecycle-hint">Stop Tunnel</button>
+            <button id="agent-tunnel-apply" type="button" data-i18n="agent.tunnel.apply">Start / Renew Access</button>
+            <button id="agent-tunnel-close" type="button" data-i18n="common.close">Close</button>
         </div>
     </dialog>
     <dialog id="ssh-tunnels-dialog" aria-labelledby="ssh-tunnels-title">
@@ -3167,7 +3170,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             });
 
             function setAgentTunnelInfoView(infoView) {
-                document.getElementById('agent-tunnel-title').textContent = infoView ? t('agent.connection.title') : 'Agent Tunnel';
+                document.getElementById('agent-tunnel-title').textContent = t(infoView ? 'agent.connection.title' : 'agent.tunnel.title');
                 document.getElementById('agent-tunnel-setup').hidden = infoView;
                 document.getElementById('agent-tunnel-apply').hidden = infoView;
                 document.getElementById('agent-tunnel-stop').hidden = infoView;
@@ -3189,7 +3192,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const entry = readyAgentTunnels.get(data.terminal_id);
                 if (entry && data.carrier_id !== entry.carrierId) return;
                 if (data.status === 'stopped') {
-                    invalidateAgentTunnel(data.terminal_id, 'Tunnel stopped. Start it again before copying a remote prompt.');
+                    invalidateAgentTunnel(data.terminal_id, t('agent.tunnel.stopped_restart'));
                 } else if (data.status === 'sync_failed' && data.carrier_id === agentTunnelId) {
                     setAgentConnectionMessage(agentTunnelMessage, data.message);
                 }
@@ -3214,10 +3217,13 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 terminals.forEach(state => {
                     if (!state.connected || !state.agent.attached || state.agent.mode === AGENT_MODE_DISABLED) return;
                     const label = document.createElement('div');
-                    label.textContent = `${state.title} (${state.id}) · ${state.agent.mode}${selected.includes(state.id) ? ' · remote access ready' : ''}`;
+                    const permission = [AGENT_MODE_OBSERVE, AGENT_MODE_APPROVAL_PENDING, AGENT_MODE_DIRECT_ACTIVE, AGENT_MODE_PAUSED, AGENT_MODE_DISABLED].includes(state.agent.mode)
+                        ? formatAgentModeLabel(state.agent.mode) : state.agent.mode;
+                    label.textContent = t('agent.tunnel.target_row', { title: state.title, id: state.id, permission })
+                        + (selected.includes(state.id) ? ` · ${t('agent.tunnel.remote_access_ready')}` : '');
                     list.append(label);
                 });
-                if (!list.childElementCount) list.textContent = 'No tabs enabled. Enable access in a tab\'s Agent Panel when needed.';
+                if (!list.childElementCount) list.textContent = t('agent.tunnel.targets_empty');
             }
 
             function applyAgentTunnelStatus(result) {
@@ -3225,16 +3231,16 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 if (ready) {
                     readyAgentTunnels.set(agentTunnelCarrier, {connection: agentTunnelConnection, carrierId: result.carrier_id});
                     if (result.ssh_context) {
-                        document.getElementById('agent-tunnel-carrier').textContent = 'Agent runs on SSH host: ' + JSON.stringify(result.ssh_context);
+                        document.getElementById('agent-tunnel-carrier').textContent = t('agent.tunnel.carrier_context', { context: JSON.stringify(result.ssh_context) });
                     }
                 } else {
                     readyAgentTunnels.delete(agentTunnelCarrier);
                 }
                 updateAgentTunnelButtons();
-                setAgentConnectionMessage(agentTunnelMessage, ready ? 'Copy Prompt to the agent running on this SSH host. The URL below belongs to that remote host. Agent activity is shown separately.'
+                setAgentConnectionMessage(agentTunnelMessage, ready ? t('agent.tunnel.ready')
                     : result && result.status === 'stopped'
-                        ? (result.cleanup_pending ? 'Access revoked. Remote cleanup is pending.' : 'Tunnel stopped.')
-                    : (result && result.message) || 'Tunnel setup failed.');
+                        ? t(result.cleanup_pending ? 'agent.tunnel.cleanup_pending' : 'agent.tunnel.stopped')
+                    : (result && result.message) || t('agent.tunnel.setup_failed'));
                 agentTunnelInfo.value = ready ? result.connect_info : '';
                 agentTunnelInfo.hidden = !ready;
                 agentTunnelId = ready ? result.carrier_id : null;
@@ -3243,7 +3249,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 document.getElementById('agent-tunnel-url').value = ready ? result.agentinfo_url : '';
                 document.getElementById('agent-tunnel-check').disabled = !ready;
                 document.getElementById('agent-tunnel-verification').textContent = ready
-                    ? `Remote loopback and helpers verified: ${new Date(result.verified_at * 1000).toLocaleString()}` : '';
+                    ? t('agent.tunnel.verified_at', { time: new Date(result.verified_at * 1000).toLocaleString(uiText.locale) }) : '';
                 renderAgentConnectionActivity('agent-tunnel-activity', agentTunnelActivity);
                 document.getElementById('agent-tunnel-copy').hidden = !ready;
                 document.getElementById('agent-tunnel-stop').disabled = !ready;
@@ -3270,8 +3276,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const requestId = ++agentTunnelRequest;
                 const terminalId = agentTunnelCarrier;
                 const connection = agentTunnelConnection;
-                setAgentConnectionMessage(agentTunnelMessage, operation === 'apply' ? 'Preparing and verifying Agent access…'
-                    : operation === 'check' ? 'Checking the remote listener, helpers, and connection to Core…' : 'Updating tunnel status…');
+                setAgentConnectionMessage(agentTunnelMessage, t(operation === 'apply' ? 'agent.tunnel.preparing'
+                    : operation === 'check' ? 'agent.tunnel.checking' : 'agent.tunnel.updating'));
                 document.getElementById('agent-tunnel-apply').disabled = true;
                 document.getElementById('agent-tunnel-check').disabled = true;
                 if (operation === 'apply') document.getElementById('agent-tunnel-stop').disabled = false;
@@ -3290,8 +3296,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 agentTunnelCarrier = state.id;
                 agentTunnelConnection = {state, connectedAt: state.connectedAt};
                 setAgentTunnelInfoView(infoView);
-                document.getElementById('agent-tunnel-carrier').textContent = `Agent runs on SSH host: ${state.title} (tab ${state.id})`;
-                clearAgentTunnelInfo('Loading tunnel status…');
+                document.getElementById('agent-tunnel-carrier').textContent = t('agent.tunnel.carrier_tab', { title: state.title, id: state.id });
+                clearAgentTunnelInfo(t('agent.tunnel.loading'));
                 renderAgentTunnelTargets([]);
                 agentTunnelDialog.showModal();
                 requestAgentTunnel('status');
@@ -6586,7 +6592,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 if (agentConnectDialog.open && (!state || state.connectionType === 'ssh')) agentConnectDialog.close();
                 if (agentTunnelDialog.open && agentTunnelCarrier !== activeTerminalId) agentTunnelDialog.close();
                 if (agentTunnelConnection && !isCurrentAgentTunnelConnection(agentTunnelConnection)) {
-                    invalidateAgentTunnel(agentTunnelCarrier, 'SSH connection unavailable. Start a new tunnel after reconnecting.');
+                    invalidateAgentTunnel(agentTunnelCarrier, t('agent.tunnel.connection_unavailable'));
                     agentTunnelConnection = null;
                 }
                 if (agentConnectDialog.open && !socket.connected) requestAgentConnectInfo();
diff --git a/tests/agent_browser_smoke.py b/tests/agent_browser_smoke.py
index ffd6b49..3439944 100644
--- a/tests/agent_browser_smoke.py
+++ b/tests/agent_browser_smoke.py
@@ -4474,8 +4474,15 @@ def test_core_agent_connect_info_can_be_copied_and_confirmed(browser, access_url
         close_context(context)
 
 
-def test_agent_tunnel_uses_panel_permissions_and_keeps_focus(browser, access_url):
-    context, page = new_page(browser, access_url)
+def test_agent_tunnel_uses_panel_permissions_and_keeps_focus(browser, access_url, ui_language='en'):
+    context, page = new_page(browser, access_url, ui_language=ui_language)
+    def ui_text(key, params=None):
+        return page.evaluate("""({key,params}) =>
+            StandTermI18n.create(StandTermMessages, document.documentElement.lang).t(key, params)
+        """, {'key':key,'params':params or {}})
+    token_requests = []
+    page.on('request', lambda request: token_requests.append(request.url)
+            if '/agent/external/token' in request.url else None)
     try:
         attach_agent(page)
         page.evaluate('() => window.terminalTest.captureTerminalIoForTest()')
@@ -4497,8 +4504,10 @@ def test_agent_tunnel_uses_panel_permissions_and_keeps_focus(browser, access_url
         requests = page.evaluate("() => window.terminalTest.getEmitted().filter(e => e.event === 'agent_tunnel')")
         check(len(requests) == 1, 'Apply sent duplicate tunnel operations')
         request = requests[0]['args'][0]
-        check(request['terminal_id'] == 'main' and request['operation'] == 'apply', 'carrier scope is wrong')
+        check(request == {'terminal_id':'main','operation':'apply'}, 'carrier scope is wrong')
         check('targets' not in request, 'Browser supplied a second authorization list')
+        check(not any(event['event'] in {'agent_attach','agent_detach','agent_mode_set','agent_pause'}
+                      for event in get_emitted(page)), 'Tunnel setup changed Agent Panel permissions')
         page.focus('#agent-tunnel-close')
         page.evaluate("() => { window.dispatchEvent(new Event('blur')); window.dispatchEvent(new Event('focus')); }")
         page.wait_for_timeout(150)
@@ -4507,31 +4516,42 @@ def test_agent_tunnel_uses_panel_permissions_and_keeps_focus(browser, access_url
         check(page.locator('#agent-tunnel-info').is_hidden(), 'failed setup advertised usable Connect Info')
         # Backend integration tests cover real SSH; this fixture exercises the ready-state controls.
         remote_url = 'http://127.0.0.1:43210/agentinfo'
+        remote_prompt = 'Run the agent on this SSH host. AgentInfoURL: ' + remote_url
+        verified_at = 1700000000
         page.evaluate('payload => window.terminalTest.applyAgentTunnelStatusForTest(payload)', {
             'status': 'ready', 'carrier_id': 'test-tunnel', 'agentinfo_url': remote_url,
-            'verified_at': time.time(), 'connect_info': 'Run the agent on this SSH host. AgentInfoURL: ' + remote_url,
+            'verified_at': verified_at, 'connect_info': remote_prompt,
             'ssh_context': {'host': '<img src=x>', 'ssh_tab': 'main'},
             'terminal_ids': ['main'], 'terminals': [{'terminal_id': 'main', 'last_request_at': None}],
         })
         check(page.input_value('#agent-tunnel-url') == remote_url, 'Tunnel showed the local Core URL')
         check(page.locator('#agent-connect-btn').is_visible(), 'Ready tunnel did not reveal remote info')
         check(page.locator('#agent-tunnel-carrier img').count() == 0, 'SSH host context was rendered as HTML')
-        check('verified:' in page.inner_text('#agent-tunnel-verification'), 'Tunnel verification time is missing')
-        check('waiting for agent' in page.inner_text('#agent-tunnel-activity'), 'Ready falsely confirmed agent access')
+        verified_time = page.evaluate('({stamp,locale}) => new Date(stamp * 1000).toLocaleString(locale)',
+                                      {'stamp':verified_at,'locale':ui_language})
+        check(page.inner_text('#agent-tunnel-verification') == ui_text('agent.tunnel.verified_at', {'time':verified_time}),
+              'Tunnel verification time was not localized')
+        check(page.inner_text('#agent-tunnel-activity') == 'main: ' + ui_text('agent.connection.waiting'),
+              'Ready falsely confirmed agent access')
         page.evaluate('''() => Object.defineProperty(navigator, 'clipboard', {
             configurable: true, value: {writeText: async text => {window.copiedAgentText = text;}}
         })''')
         page.click('#agent-tunnel-copy-url')
         page.wait_for_function('url => window.copiedAgentText === url', arg=remote_url)
         prompt = page.input_value('#agent-tunnel-info')
+        check(prompt == remote_prompt, 'Display localization changed the remote prompt')
         page.click('#agent-tunnel-copy')
         page.wait_for_function('text => window.copiedAgentText === text', arg=prompt)
         for carrier in ('unrelated-tunnel', 'test-tunnel'):
+            activity_at = 1700000300
             page.evaluate('payload => window.terminalTest.applyAgentConnectionActivityForTest(payload)', {
-                'terminal_id': 'main', 'carrier_id': carrier, 'last_request_at': time.time(),
+                'terminal_id': 'main', 'carrier_id': carrier, 'last_request_at': activity_at,
             })
-            expected = 'waiting for agent' if carrier == 'unrelated-tunnel' else 'last authenticated request'
-            check(expected in page.inner_text('#agent-tunnel-activity'), 'Activity did not match the current SSH tunnel')
+            activity_time = page.evaluate('({stamp,locale}) => new Date(stamp * 1000).toLocaleString(locale)',
+                                          {'stamp':activity_at,'locale':ui_language})
+            expected = ui_text('agent.connection.waiting') if carrier == 'unrelated-tunnel' else ui_text(
+                'agent.connection.request_at', {'time':activity_time})
+            check(page.inner_text('#agent-tunnel-activity') == 'main: ' + expected, 'Activity did not match the current SSH tunnel')
         page.evaluate('() => window.terminalTest.clearEmitted()')
         page.click('#agent-tunnel-check')
         page.wait_for_selector('#agent-tunnel-apply:not([disabled])')
@@ -4541,12 +4561,13 @@ def test_agent_tunnel_uses_panel_permissions_and_keeps_focus(browser, access_url
         check(page.locator('#agent-connect-btn').is_hidden(), 'Failed check retained remote info shortcut')
         page.click('#agent-tunnel-close')
         check(not page.locator('#agent-tunnel-dialog').is_visible(), 'Close did not dismiss tunnel dialog')
+        check(not token_requests, 'Agent Tunnel minted a local Agent token')
     finally:
         close_context(context)
 
 
-def test_remote_agent_info_tracks_ssh_carrier_and_rejects_late_replies(browser, access_url):
-    context, page = new_page(browser, access_url)
+def test_remote_agent_info_tracks_ssh_carrier_and_rejects_late_replies(browser, access_url, ui_language='en'):
+    context, page = new_page(browser, access_url, ui_language=ui_language)
     try:
         page.evaluate('''() => {
             window.terminalTest.holdAgentTunnelRequestsForTest();
@@ -4569,11 +4590,13 @@ def ready(carrier, port):
         page.click('#agent-tunnel-btn')
         page.evaluate('payload => window.terminalTest.completeAgentTunnelRequestForTest(0, payload)', first)
         prompt = page.input_value('#agent-tunnel-info')
+        check(prompt == first['connect_info'], 'Display localization changed the remote prompt')
         page.click('#agent-tunnel-copy')
         page.wait_for_function('text => window.copiedAgentText === text', arg=prompt)
         page.click('#agent-tunnel-close')
         page.click('#agent-connect-btn')
-        check(page.inner_text('#agent-tunnel-title') == 'Agent connection', 'Remote shortcut opened the wrong view')
+        title = page.evaluate("() => StandTermI18n.create(StandTermMessages, document.documentElement.lang).t('agent.connection.title')")
+        check(page.inner_text('#agent-tunnel-title') == title, 'Remote shortcut opened the wrong view')
         check(page.locator('#agent-tunnel-setup').is_hidden(), 'Remote info repeated setup controls')
         check(page.locator('#agent-tunnel-copy').is_hidden(), 'Remote shortcut offered a stale cached prompt')
         page.evaluate('payload => window.terminalTest.completeAgentTunnelRequestForTest(1, payload)', first)
diff --git a/tests/agent_tunnel_i18n_browser_smoke.py b/tests/agent_tunnel_i18n_browser_smoke.py
new file mode 100644
index 0000000..213778f
--- /dev/null
+++ b/tests/agent_tunnel_i18n_browser_smoke.py
@@ -0,0 +1,162 @@
+"""Check localized remote Agent access without changing grants or machine-facing data."""
+import json
+
+import agent_browser_smoke as fixture
+
+
+REMOTE_URL = 'http://127.0.0.1:43210/agentinfo?fixture=raw&value=%7Burl%7D'
+REMOTE_PROMPT = 'Run discover, then hello.\nAgentInfoURL: ' + REMOTE_URL + '\nLiteral <b>& {prompt}'
+SSH_CONTEXT = {'host':'SSH <img>& {context}','ssh_tab':'main','command':'discover hello'}
+
+
+def message(page, key, params=None):
+    value = page.evaluate("""({key,params}) =>
+        StandTermI18n.create(StandTermMessages, document.documentElement.lang).t(key, params)
+    """, {'key':key,'params':params or {}})
+    assert value != key, f'Missing reviewed translation: {key}'
+    return value
+
+
+def ready_payload():
+    return {'status':'ready','carrier_id':'fixture-carrier','agentinfo_url':REMOTE_URL,
+            'verified_at':1700000000,'connect_info':REMOTE_PROMPT,'ssh_context':SSH_CONTEXT,
+            'terminal_ids':['main'],'terminals':[{'terminal_id':'main','last_request_at':None}]}
+
+
+def assert_no_permission_mutations(page):
+    assert not any(event['event'] in {'agent_attach','agent_detach','agent_mode_set','agent_pause'}
+                   for event in fixture.get_emitted(page)), 'Tunnel controls changed Agent Panel permissions'
+
+
+def test_remote_status_boundaries_preserve_permissions_and_literals(browser, url, ui_language='en'):
+    context, page = fixture.new_page(browser, url, ui_language=ui_language)
+    token_requests = []
+    page.on('request', lambda request: token_requests.append(request.url)
+            if '/agent/external/token' in request.url else None)
+    try:
+        fixture.attach_agent(page)
+        page.evaluate("""() => {
+            window.terminalTest.captureTerminalIoForTest();
+            window.terminalTest.holdAgentTunnelRequestsForTest();
+            window.terminalTest.applyTerminalListForTest({terminals:[
+                {terminal_id:'main',connected:true,connection_type:'ssh',terminal_label:'Host <b>& {title}'},
+                {terminal_id:'disabled-tab',connected:true,connection_type:'ssh',terminal_label:'No permission'}]});
+            window.terminalTest.clearEmitted();
+        }""")
+        page.click('#agent-tunnel-btn')
+        assert page.inner_text('#agent-tunnel-message') == message(page, 'agent.tunnel.updating')
+        assert page.inner_text('#agent-tunnel-carrier') == message(page, 'agent.tunnel.carrier_tab', {
+            'title':'Host <b>& {title}','id':'main'})
+        ready = ready_payload()
+        page.evaluate('payload => window.terminalTest.completeAgentTunnelRequestForTest(0,payload)', ready)
+        for requested, mode, permission_key in [
+                (None,'observe','observe'),('approval','approval_pending','approval'),
+                ('direct','direct_active','direct'),('pause','paused','paused')]:
+            if requested == 'pause':
+                fixture.emit_socket(page, 'agent_pause', {'terminal_id':'main'})
+                fixture.wait_for_agent(page, "state.mode === 'paused'")
+            elif requested:
+                fixture.set_agent_mode(page, requested, mode)
+            before = fixture.active_agent_state(page)
+            page.evaluate('() => window.terminalTest.clearEmitted()')
+            page.evaluate('payload => window.terminalTest.applyAgentTunnelStatusForTest(payload)', ready)
+            permission = message(page, 'agent.permission.' + permission_key)
+            target = message(page, 'agent.tunnel.target_row', {'title':'Host <b>& {title}','id':'main','permission':permission})
+            assert page.inner_text('#agent-tunnel-targets') == target + ' · ' + message(page, 'agent.tunnel.remote_access_ready')
+            assert mode not in page.inner_text('#agent-tunnel-targets')
+            assert page.locator('#agent-tunnel-targets b, #agent-tunnel-targets input').count() == 0
+            assert 'No permission' not in page.inner_text('#agent-tunnel-targets')
+            assert page.inner_text('#agent-tunnel-message') == message(page, 'agent.tunnel.ready')
+            assert page.inner_text('#agent-tunnel-activity') == 'main: ' + message(page, 'agent.connection.waiting')
+            after = fixture.active_agent_state(page)
+            assert after['mode'] == mode and after['external_token'] == before['external_token']
+            assert_no_permission_mutations(page)
+        assert page.input_value('#agent-tunnel-url') == REMOTE_URL
+        assert page.input_value('#agent-tunnel-info') == REMOTE_PROMPT
+        assert page.inner_text('#agent-tunnel-carrier') == message(page, 'agent.tunnel.carrier_context', {
+            'context':json.dumps(SSH_CONTEXT, separators=(',',':'))})
+        assert page.locator('#agent-tunnel-carrier img').count() == 0
+        for element_id in ['agent-tunnel-title','agent-tunnel-copy','agent-tunnel-apply','agent-tunnel-stop',
+                           'agent-tunnel-check','agent-tunnel-refresh','agent-tunnel-close']:
+            element = page.locator('#' + element_id)
+            key = element.get_attribute('data-i18n')
+            assert key and element.inner_text() == message(page, key)
+        for element_id in ['agent-tunnel-url','agent-tunnel-info']:
+            element = page.locator('#' + element_id)
+            key = element.get_attribute('data-i18n-aria-label')
+            assert key and element.get_attribute('aria-label') == message(page, key)
+        for key in ['agent.tunnel.lifecycle_hint','agent.tunnel.check_hint']:
+            hint = page.locator(f'#agent-tunnel-dialog [data-i18n="{key}"]')
+            assert hint.is_visible() and hint.inner_text() == message(page, key)
+
+        page.set_viewport_size({'width':480,'height':600})
+        layout = page.locator('#agent-tunnel-dialog').evaluate("""dialog => {
+            const box = dialog.getBoundingClientRect();
+            return {inside:box.left >= 0 && box.right <= innerWidth && box.top >= 0 && box.bottom <= innerHeight,
+                fits:dialog.scrollWidth <= dialog.clientWidth+1,
+                controls:[...dialog.querySelectorAll('input,textarea,button')].filter(element => element.getClientRects().length)
+                    .every(element => {const rect = element.getBoundingClientRect(); return rect.left >= box.left && rect.right <= box.right;})};
+        }""")
+        assert all(layout.values()), layout
+        page.set_viewport_size({'width':1280,'height':800})
+
+        no_grants = dict(ready, terminal_ids=[], terminals=[])
+        page.evaluate('payload => window.terminalTest.applyAgentTunnelStatusForTest(payload)', no_grants)
+        assert page.input_value('#agent-tunnel-info') == REMOTE_PROMPT
+        assert page.inner_text('#agent-tunnel-activity') == message(page, 'agent.connection.no_grants')
+        assert message(page, 'agent.tunnel.remote_access_ready') not in page.inner_text('#agent-tunnel-targets')
+        page.evaluate('() => window.terminalTest.clearEmitted()')
+        page.click('#agent-tunnel-close')
+        page.wait_for_selector('#agent-tunnel-dialog', state='hidden')
+        assert not fixture.get_emitted(page, 'agent_tunnel'), 'Closing the ready tunnel sent an operation'
+        assert page.locator('#agent-connect-btn').is_visible()
+
+        page.click('#agent-tunnel-btn')
+        page.evaluate('payload => window.terminalTest.completeAgentTunnelRequestForTest(1,payload)', ready)
+        page.click('#agent-tunnel-stop')
+        requests = fixture.get_emitted(page, 'agent_tunnel')
+        assert [event['args'][0] for event in requests] == [
+            {'terminal_id':'main','operation':'status'},{'terminal_id':'main','operation':'stop'}]
+        page.evaluate("""() => window.terminalTest.completeAgentTunnelRequestForTest(2,
+            {status:'stopped',cleanup_pending:true})""")
+        assert page.inner_text('#agent-tunnel-message') == message(page, 'agent.tunnel.cleanup_pending')
+        assert page.input_value('#agent-tunnel-info') == '' and page.input_value('#agent-tunnel-url') == ''
+        assert page.locator('#agent-tunnel-copy').is_hidden() and page.locator('#agent-tunnel-stop').is_disabled()
+        assert page.locator('#agent-connect-btn').is_hidden()
+        for payload, key in [({'status':'stopped','cleanup_pending':False},'agent.tunnel.stopped'),
+                             (None,'agent.tunnel.setup_failed'),
+                             ({'status':message(page, 'agent.tunnel.stopped')},'agent.tunnel.setup_failed')]:
+            page.evaluate('payload => window.terminalTest.applyAgentTunnelStatusForTest(payload)', payload)
+            assert page.inner_text('#agent-tunnel-message') == message(page, key)
+        diagnostic = 'Remote diagnostic <img>& {message}\nRAW_CODE'
+        page.evaluate('payload => window.terminalTest.applyAgentTunnelStatusForTest(payload)', {
+            'status':'error','message':diagnostic})
+        assert page.inner_text('#agent-tunnel-message') == diagnostic
+        assert page.locator('#agent-tunnel-message img').count() == 0
+        assert_no_permission_mutations(page)
+        assert not token_requests, 'Tunnel setup or status display minted a local Agent token'
+        assert fixture.active_agent_state(page)['mode'] == 'paused'
+    finally:
+        fixture.close_context(context)
+
+
+def main():
+    proc, url = fixture.start_server()
+    try:
+        with fixture.load_playwright()[0]() as playwright:
+            browser = playwright.chromium.launch(headless=True)
+            try:
+                for locale in ['en','zh-TW']:
+                    for test in [fixture.test_agent_tunnel_uses_panel_permissions_and_keeps_focus,
+                                 fixture.test_remote_agent_info_tracks_ssh_carrier_and_rejects_late_replies,
+                                 test_remote_status_boundaries_preserve_permissions_and_literals]:
+                        test(browser, url, ui_language=locale)
+                        print(f'{test.__name__} ({locale}): PASS', flush=True)
+            finally:
+                browser.close()
+    finally:
+        fixture.stop_server(proc)
+
+
+if __name__ == '__main__':
+    main()
diff --git a/tests/agent_tunnel_smoke.py b/tests/agent_tunnel_smoke.py
index bf90ccd..a907179 100644
--- a/tests/agent_tunnel_smoke.py
+++ b/tests/agent_tunnel_smoke.py
@@ -259,6 +259,32 @@ def test_tunnel_check_is_separate_from_authenticated_agent_activity(self):
             self.assertIsNone(by_terminal['second']['last_request_at'])
             self.assertNotIn('agt_', json.dumps(status))
 
+    def test_apply_retains_valid_grants_and_renews_only_invalid_grants(self):
+        with ssh_server() as ssh:
+            tunnel = self.open_tunnel(ssh)
+            verified_at = tunnel.verified_at
+            original = {key: grant['token'] for key, grant in tunnel.grants.items()}
+            with standterm.external_agent_lock:
+                expiries = {key: standterm.external_agent_attach_store._tokens[
+                    grant['record']['token_hash']]['expires_at'] for key, grant in tunnel.grants.items()}
+            with patch.object(tunnel, '_exec', wraps=tunnel._exec) as remote_exec:
+                result = self.client.emit('agent_tunnel', {'terminal_id': 'carrier', 'operation': 'apply'}, callback=True)
+                self.assertEqual(result['status'], 'ready', result)
+                self.assertEqual(result['verified_at'], verified_at)
+                self.assertEqual({key: grant['token'] for key, grant in tunnel.grants.items()}, original)
+                with standterm.external_agent_lock:
+                    for key, grant in tunnel.grants.items():
+                        self.assertEqual(standterm.external_agent_attach_store._tokens[
+                            grant['record']['token_hash']]['expires_at'], expiries[key])
+                    standterm.external_agent_attach_store._tokens[
+                        tunnel.grants['main']['record']['token_hash']]['expires_at'] = time.time() - 1
+                renewed = self.client.emit('agent_tunnel', {'terminal_id': 'carrier', 'operation': 'apply'}, callback=True)
+                self.assertEqual(renewed['status'], 'ready', renewed)
+                self.assertEqual(renewed['verified_at'], verified_at)
+                self.assertNotEqual(tunnel.grants['main']['token'], original['main'])
+                self.assertEqual(tunnel.grants['second']['token'], original['second'])
+                remote_exec.assert_not_called()
+
     def test_tunnel_check_rejects_a_missing_remote_listener(self):
         with ssh_server() as ssh:
             tunnel = self.open_tunnel(ssh)

From 7a3c92cf980c685c7c5fdac972bcbed84d8da583 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sun, 20 Sep 2026 02:50:45 +0800
Subject: [PATCH 24/43] Localize General and Appearance preferences

---
 README.md                                     |   4 +-
 docs/agent_ui_review_plan.md                  |  53 +++++++-
 docs/ui_copy_review.tsv                       |  47 +++++++
 static/js/standterm-messages.js               |  94 +++++++++++++
 templates/index.html                          |  60 +++++----
 .../settings_appearance_i18n_browser_smoke.py | 123 ++++++++++++++++++
 ...settings_preferences_i18n_browser_smoke.py |  26 +++-
 7 files changed, 377 insertions(+), 30 deletions(-)
 create mode 100644 tests/settings_appearance_i18n_browser_smoke.py

diff --git a/README.md b/README.md
index 6902d28..c725801 100644
--- a/README.md
+++ b/README.md
@@ -327,8 +327,8 @@ terminal; compact windows keep those actions in the Agent panel.
 Chinese (Taiwan) for browser access and recovery, Agent permissions, input and
 file-copy approvals, transfer results, local connection information, connection
 forms, SSH login, SSH profile/route editors (including browser-key and
-host-fingerprint controls), settings import/export, settings navigation and
-preference actions, user SSH tunnel controls, and Agent Tunnel setup/status. The choice
+host-fingerprint controls), settings navigation, General/Appearance preferences,
+settings import/export, user SSH tunnel controls, and Agent Tunnel setup/status. The choice
 applies the next time the page opens; saving it does not reload the current
 page or change its connections and grants. Other areas remain in English.
 **Save preferences** stores the General and Appearance preference fields.
diff --git a/docs/agent_ui_review_plan.md b/docs/agent_ui_review_plan.md
index ffd2a6c..fb5eabc 100644
--- a/docs/agent_ui_review_plan.md
+++ b/docs/agent_ui_review_plan.md
@@ -43,7 +43,7 @@ do not consolidate them merely to shorten labels.
 | 3 | Review English UI copy and terminology | Core terms agreed; initial English sources reviewed | Review each proposed change for target, permissions, consequences, and next action; check related tooltips, Desktop help, and tests before applying it. |
 | 4 | Finalize the translation exchange table | Initial exchange validated with an independent translator | Stable keys, approved English source, context, and placeholder constraints are sufficient for an independent translator. |
 | 5 | Pilot Agent access and local connection information | Implemented; validation below | Cover static and dynamic text, titles, and accessible names; preserve connected sessions and authorization; support English fallback. |
-| 6 | Translate and integrate approved rows | Agent pilot, browser access/recovery, Agent approvals/transfers, connection/login controls, SSH route/profile editors, settings transfer/preference actions, user SSH tunnels and Agent Tunnel integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
+| 6 | Translate and integrate approved rows | Agent pilot, browser access/recovery, Agent approvals/transfers, connection/login controls, SSH route/profile editors, General/Appearance settings, settings transfer, user SSH tunnels and Agent Tunnel integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
 | 7 | Expand Core and Desktop coverage | Deferred | Verify secondary windows, native menus, setup, diagnostics, packaging, and representative layouts. |
 
 ## Validation of the reliability changes
@@ -66,7 +66,7 @@ validated separately below.
 
 ## Deferred UI work
 
-Agent diagnostics, remaining settings panels, secondary windows,
+Agent diagnostics, Server/Diagnostics settings, secondary windows,
 and Desktop localization remain outside the completed workflows. Translation
 starts only after the English source for the selected workflow is reviewed.
 Extra screen diffing, render hints, key aliases, and byte-limit options remain optional optimizations.
@@ -528,3 +528,52 @@ physical remote host were not exercised. Typed backend error localization and
 continuous remote health monitoring remain outside scope. The next candidate
 is a compact review of remaining General/Appearance settings labels before
 considering broader Server, Diagnostics or Desktop coverage.
+
+## General and Appearance preferences
+
+Forty-seven reviewed messages cover the remaining General/Appearance labels,
+tooltips, option labels and color-preview descriptions. The table contains 521
+rows: 520 referenced bilingual messages and the existing removal. Preferences,
+option values, defaults and Save/Close/Reset behavior remain unchanged.
+
+The wording identifies automatic terminal selection copying, its removal of
+surrounding whitespace and selection clearing, and the image option's page-overlay
+scope. Application title identifies terminal-program output rather than the SSH
+connection label. CJK ambiguous width describes two terminal cells, without
+claiming a general fix for Chinese text. Powerline wording describes use of the
+bundled symbols without implying a change in font priority or installation of
+the full Powerline application.
+
+The two palette groups use the product names StandTerm and Windows Terminal;
+Custom and Official are unnecessary descriptions. Their label attributes are
+set locally, keeping the shared translator's allowlist unchanged and preserving
+every option. Named themes, raw font-family strings and configuration values are
+not translated. Palette colors still come from the original theme keys. Only
+display labels and the three static sample status words are translated; sample
+commands, paths and color bindings remain intact.
+
+| Finding | Severity | Evidence | Critic remedy | Main response | Resolution | Validation |
+| --- | --- | --- | --- | --- | --- | --- |
+| Picture preview is limited to overlay image links | Medium | openUrlInOverlay and configureWebLinks | Name the overlay/terminal-link scope | Accept | Narrow both labels; retain Desktop restrictions and URL actions | Typed URL options remain intact; source review confirms unchanged opening handlers |
+| Selection copying trims text and clears selection | Low | Left-mouse-release handler | Add a concise consequence tooltip | Accept | State automatic copy and whitespace/selection effects | Tooltip translation plus unchanged-handler review; preference persistence checks |
+| Translating an optgroup/container can delete its children | Medium, integration guard | Shared translator textContent behavior | Set the two optgroup labels directly | Accept | Preserve option nodes/values and translator allowlist | Exact option counts, values and theme names in both locales |
+| Palette display names must not control color selection | Medium, integration guard | renderColorSchemePreview and SCHEMES | Keep typed keys and raw hex values | Accept | Separate display-name lookup from theme lookup | Sixteen swatches for each of two themes; changed display name still renders the typed selection |
+| Preserve sample text and describe Powerline as fallback | Editorial | Static sample markup and getTerminalFontFace | Leave all sample words and fallback wording unchanged | Modify | Translate only sample status words; describe bundled symbols rather than font priority | Sample commands/color bindings preserved; actual font and mirror behavior remain unchanged |
+
+Two bounded independent review passes found no remaining material issue. The
+second pass verified all 47 new key references, placeholders, literal
+interpolation and English fallback in memory. No CSS change was needed for the
+translated labels. Full image-opening and clipboard-trimming behavior tests
+remain existing coverage gaps, not reasons to change those handlers here.
+
+| Check | Result |
+| --- | --- |
+| Bilingual preference suite | Three cases passed in both locales, extended with exact custom font strings, Powerline opt-out and actual ambiguous-character width changing from one to two cells in terminal and mirror after Save. |
+| Bilingual appearance suite | One case passed in both locales: all six select value lists, ten theme names, palette color/title/aria values, display-name independence and preview without persistence. |
+| Existing appearance regressions | Four cases passed: platform font defaults/migration, Powerline existing/new/reloaded terminals, cursor existing/new terminals, and OSC application-title behavior. |
+| Layout | General/Appearance labels and controls fit at 480x600 without overlap or input-value changes. |
+| Catalog and static checks | Six exporter and six lookup tests passed; all 520 bilingual keys are referenced, catalog freshness, Python syntax and diff checks passed. |
+
+Validation uses WSL Chromium. Native Desktop was not qualified; external image
+preview restrictions there remain unchanged. The next candidate is a separate
+review of Server settings actions and their scope before translating them.
diff --git a/docs/ui_copy_review.tsv b/docs/ui_copy_review.tsv
index 3d1c5d2..2e93e7b 100644
--- a/docs/ui_copy_review.tsv
+++ b/docs/ui_copy_review.tsv
@@ -473,3 +473,50 @@ agent.tunnel.checking	Checking the remote listener, helpers, and connection to C
 agent.tunnel.updating	Updating tunnel status…	Updating tunnel status…	正在更新通道狀態…	Pending status or stop operation; not proof of successful stop.		Display data only; preserve typed state, operations, IDs, and raw diagnostics.	translation-reviewed	templates/index.html
 agent.tunnel.loading	Loading tunnel status…	Loading tunnel status…	正在載入通道狀態…	Opening tunnel dialog before status response.		Display data only; preserve typed state, operations, IDs, and raw diagnostics.	translation-reviewed	templates/index.html
 agent.tunnel.connection_unavailable	SSH connection unavailable. Start a new tunnel after reconnecting.	SSH connection unavailable. Start a new tunnel after reconnecting.	SSH 連線無法使用。重新連線後，請啟動新通道。	Invalidation when the carrier SSH connection becomes unavailable.		Display data only; preserve typed state, operations, IDs, and raw diagnostics.	translation-reviewed	templates/index.html
+settings.general.custom_menu	Enable custom context menu	Use StandTerm context menu	使用 StandTerm 快顯選單	Enables the existing custom right-click menu. Shift bypasses it; this is not a menu editor.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.general.copy_on_select	Copy on select	Copy terminal selection automatically	自動複製選取的終端文字	Automatic copy after left mouse release. Current code trims selection and clears it after requesting copy; do not imply all page selection or guaranteed clipboard success.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.general.copy_on_select_hint		On mouse release, copies terminal selection without surrounding whitespace, then clears it.	放開滑鼠後複製選取的終端文字，移除前後空白並清除選取範圍。	Tooltip describing existing mouse-release copy behavior, including trimmed whitespace and cleared selection.		No promise that clipboard permission succeeds. Preserve current trim and selection-clearing behavior.	translation-reviewed	templates/index.html
+settings.general.picture_preview	Enable pic preview	Preview image links in page overlay	在頁內預覽圖片連結	Controls image handling when opening the overlay. Disabled images open externally; Desktop external previews remain disabled.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.general.detect_urls	Detect & linkify URLs	Make terminal URLs clickable	將終端網址設為可點選連結	Enables the web-links addon when available; does not rewrite terminal output or auto-open URLs.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.general.detailed_ssh_labels	Show detailed SSH labels	Show detailed SSH labels	顯示詳細 SSH 標籤	Shows the existing detailed SSH display label rather than the short SSH label; does not alter saved names.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.general.cjk_width	CJK wide ambiguous width (BBS compatibility)	Use wide ambiguous characters (BBS)	不定寬度字元使用兩格（BBS）	Renders East Asian Ambiguous-width code points as two terminal cells for compatible BBS layouts.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.general.cjk_width_hint	Render ambiguous-width characters (box drawing, symbols) as wide cells. Enable only for legacy BBS/screen setups that require wide ambiguous width.	Render ambiguous-width characters, such as box drawing and symbols, as two cells. Enable only when the BBS or terminal layout requires it.	將框線、符號等不定寬度字元顯示為兩格。僅在 BBS 或終端畫面配置需要時啟用。	Tooltip for opt-in terminal width provider; does not affect every CJK character or font size.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.general.url_action	URL click opens in	Open clicked terminal links in	點選終端連結時開啟於	Default action for detected terminal link clicks. Ctrl/Cmd overrides existing behavior; no guarantee every site embeds.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.general.url_overlay	Overlay	Page overlay	頁內預覽	Select display label for overlay.		Keep option value overlay unchanged. Desktop may show external-open fallback.	translation-reviewed	templates/index.html
+settings.general.url_popup	Popup Window	Popup window	彈出視窗	Select display label for popup.		Keep option value popup unchanged; popup and Desktop policy may use fallback.	translation-reviewed	templates/index.html
+settings.general.url_newtab	New Tab	New tab	新分頁	Select display label for new browser tab.		Keep option value newtab unchanged.	translation-reviewed	templates/index.html
+settings.appearance.color_scheme	Color scheme	Color scheme	配色方案	Select label; changing selection previews the theme before Save preferences.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.appearance.group_custom	Custom	StandTerm	StandTerm	Optgroup containing the bundled IBM 5153 theme; there is no custom theme editor.		Apply locally via setAttribute(label, translated text); do not expand generic i18n allowed attributes or change theme option names/values.	translation-reviewed	templates/index.html
+settings.appearance.group_windows_terminal	Windows Terminal Official	Windows Terminal	Windows Terminal	Optgroup for bundled Windows Terminal theme names; omit unnecessary Official claim.		Apply locally via setAttribute(label, translated text); preserve Windows Terminal as product name and every named theme option.	translation-reviewed	templates/index.html
+settings.appearance.preview	Color scheme preview	Color scheme preview	配色方案預覽	Accessible group name for static terminal sample and swatches.		Only preview accessible name changes. Keep sample user@host, commands, file names, data-theme-color, and CSS classes unchanged.	translation-reviewed	templates/index.html
+settings.appearance.cursor_preview	Cursor	Cursor	游標	Accessible name of the illustrative preview cursor; not the active terminal cursor.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.appearance.sample_ready	Ready	Ready	就緒	Green sample word in the color preview; not system, connection, or Agent state.		Static demonstration text only. Keep data-theme-color green unchanged; never use translated sample text for control flow.	translation-reviewed	templates/index.html
+settings.appearance.sample_warning	Warning	Warning	警告	Yellow sample word in the color preview; not an actual warning.		Static demonstration text only. Keep data-theme-color yellow unchanged.	translation-reviewed	templates/index.html
+settings.appearance.sample_error	Error	Error	錯誤	Red sample word in the color preview; not an actual error.		Static demonstration text only. Keep data-theme-color red unchanged.	translation-reviewed	templates/index.html
+settings.appearance.font_face	Font face	Font family	字型	Text input accepts a CSS font family stack; keep user-entered family names and punctuation unchanged.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.appearance.powerline_symbols	Enable Powerline symbol fallback	Use bundled Powerline symbols	使用內附 Powerline 符號	Prepends the bundled symbol font to the terminal font stack when enabled; does not add an external download.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.appearance.powerline_hint	Use the bundled Powerline symbols font as a fallback for prompt glyphs such as the branch symbol.	Use the bundled font for prompt symbols such as the branch icon.	使用內附字型顯示命令提示字元中的符號，例如分支圖示。	Tooltip. Implementation prepends the font; avoid claiming lower-priority CSS fallback order.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.appearance.font_size	Font size	Font size	字型大小	Numeric terminal font size; existing normalization accepts integers from 8 through 32.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.appearance.font_weight	Font weight	Font weight	字重	Selects the terminal font weight, separate from ANSI bold text.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.appearance.font_weight_hint	Heavier weights can improve perceived brightness of thin glyphs, especially with macOS grayscale antialiasing.	Heavier weights can make thin text appear brighter, especially with macOS grayscale antialiasing.	較粗的字重可讓細字看起來更明亮，尤其在 macOS 灰階反鋸齒顯示下。	A possible visual effect, not a change to palette RGB values or guaranteed font support.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.appearance.weight_normal	Normal (400)	Normal (400)	標準（400）	Font weight option display label.		Preserve option value normal and numeric weight; display text does not determine the selected value.	translation-reviewed	templates/index.html
+settings.appearance.weight_medium	Medium (500)	Medium (500)	中等（500）	Font weight option display label.		Preserve option value 500 and numeric weight; display text does not determine the selected value.	translation-reviewed	templates/index.html
+settings.appearance.weight_semibold	Semibold (600)	Semibold (600)	半粗體（600）	Font weight option display label.		Preserve option value 600 and numeric weight; display text does not determine the selected value.	translation-reviewed	templates/index.html
+settings.appearance.weight_bold	Bold (700)	Bold (700)	粗體（700）	Font weight option display label.		Preserve option value bold and numeric weight; display text does not determine the selected value.	translation-reviewed	templates/index.html
+settings.appearance.cursor_style	Cursor type	Cursor style	游標樣式	Selects the terminal cursor shape, not its current position.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.appearance.cursor_block	Block	Block	方塊	Cursor style option display label.		Keep option value block unchanged.	translation-reviewed	templates/index.html
+settings.appearance.cursor_underline	Underline	Underline	底線	Cursor style option display label.		Keep option value underline unchanged.	translation-reviewed	templates/index.html
+settings.appearance.cursor_bar	Bar	Bar	直線	Cursor style option display label.		Keep option value bar unchanged.	translation-reviewed	templates/index.html
+settings.appearance.terminal_title	Show terminal title in status bar	Show application title in status bar	在狀態列顯示程式標題	Shows the terminal application-provided title when nonempty; separate from the tab name and detailed SSH labels.		Translate this setting label only; keep the sanitized remote application title literal.	translation-reviewed	templates/index.html
+settings.appearance.palette_normal	Normal	Normal	標準	Label for the eight normal ANSI palette slots.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.appearance.palette_bright	Bright	Bright	亮色	Label for the eight bright ANSI palette slots; actual theme colors may repeat normal colors.		Display data only. Preserve preference keys, typed values, and save timing.	translation-reviewed	templates/index.html
+settings.appearance.color_black	black	black	黑色	ANSI palette slot name for swatch tooltip and accessible name; does not rename the theme key.		Keep SCHEMES key black and brightBlack unchanged. Color name is display data only.	translation-reviewed	templates/index.html
+settings.appearance.color_red	red	red	紅色	ANSI palette slot name for swatch tooltip and accessible name; does not rename the theme key.		Keep SCHEMES key red and brightRed unchanged. Color name is display data only.	translation-reviewed	templates/index.html
+settings.appearance.color_green	green	green	綠色	ANSI palette slot name for swatch tooltip and accessible name; does not rename the theme key.		Keep SCHEMES key green and brightGreen unchanged. Color name is display data only.	translation-reviewed	templates/index.html
+settings.appearance.color_yellow	yellow	yellow	黃色	ANSI palette slot name for swatch tooltip and accessible name; does not rename the theme key.		Keep SCHEMES key yellow and brightYellow unchanged. Color name is display data only.	translation-reviewed	templates/index.html
+settings.appearance.color_blue	blue	blue	藍色	ANSI palette slot name for swatch tooltip and accessible name; does not rename the theme key.		Keep SCHEMES key blue and brightBlue unchanged. Color name is display data only.	translation-reviewed	templates/index.html
+settings.appearance.color_magenta	magenta	magenta	洋紅色	ANSI palette slot name for swatch tooltip and accessible name; does not rename the theme key.		Keep SCHEMES key magenta and brightMagenta unchanged. Color name is display data only.	translation-reviewed	templates/index.html
+settings.appearance.color_cyan	cyan	cyan	青色	ANSI palette slot name for swatch tooltip and accessible name; does not rename the theme key.		Keep SCHEMES key cyan and brightCyan unchanged. Color name is display data only.	translation-reviewed	templates/index.html
+settings.appearance.color_white	white	white	白色	ANSI palette slot name for swatch tooltip and accessible name; does not rename the theme key.		Keep SCHEMES key white and brightWhite unchanged. Color name is display data only.	translation-reviewed	templates/index.html
+settings.appearance.swatch	{color}: {hex}	{color}: {hex}	{color}：{hex}	Normal palette swatch title and identical aria-label.	{color}, {hex}	Interpolate translated palette slot name and original theme hex value once. Preserve hex spelling/case. Keep role img; use safe DOM text/attributes.	translation-reviewed	templates/index.html
+settings.appearance.swatch_bright	Bright {color}: {hex}	Bright {color}: {hex}	亮{color}：{hex}	Bright palette swatch title and identical aria-label.	{color}, {hex}	Interpolate translated palette slot name and original theme hex value once. Preserve hex spelling/case. Keep role img; use safe DOM text/attributes.	translation-reviewed	templates/index.html
diff --git a/static/js/standterm-messages.js b/static/js/standterm-messages.js
index 21b7566..912699f 100644
--- a/static/js/standterm-messages.js
+++ b/static/js/standterm-messages.js
@@ -255,7 +255,54 @@
         "settings.agent.legend": "Agent access",
         "settings.agent.observe": "Read only + token",
         "settings.agent.permission": "Default Agent permission",
+        "settings.appearance.color_black": "black",
+        "settings.appearance.color_blue": "blue",
+        "settings.appearance.color_cyan": "cyan",
+        "settings.appearance.color_green": "green",
+        "settings.appearance.color_magenta": "magenta",
+        "settings.appearance.color_red": "red",
+        "settings.appearance.color_scheme": "Color scheme",
+        "settings.appearance.color_white": "white",
+        "settings.appearance.color_yellow": "yellow",
+        "settings.appearance.cursor_bar": "Bar",
+        "settings.appearance.cursor_block": "Block",
+        "settings.appearance.cursor_preview": "Cursor",
+        "settings.appearance.cursor_style": "Cursor style",
+        "settings.appearance.cursor_underline": "Underline",
+        "settings.appearance.font_face": "Font family",
+        "settings.appearance.font_size": "Font size",
+        "settings.appearance.font_weight": "Font weight",
+        "settings.appearance.font_weight_hint": "Heavier weights can make thin text appear brighter, especially with macOS grayscale antialiasing.",
+        "settings.appearance.group_custom": "StandTerm",
+        "settings.appearance.group_windows_terminal": "Windows Terminal",
+        "settings.appearance.palette_bright": "Bright",
+        "settings.appearance.palette_normal": "Normal",
+        "settings.appearance.powerline_hint": "Use the bundled font for prompt symbols such as the branch icon.",
+        "settings.appearance.powerline_symbols": "Use bundled Powerline symbols",
+        "settings.appearance.preview": "Color scheme preview",
+        "settings.appearance.sample_error": "Error",
+        "settings.appearance.sample_ready": "Ready",
+        "settings.appearance.sample_warning": "Warning",
+        "settings.appearance.swatch": "{color}: {hex}",
+        "settings.appearance.swatch_bright": "Bright {color}: {hex}",
+        "settings.appearance.terminal_title": "Show application title in status bar",
+        "settings.appearance.weight_bold": "Bold (700)",
+        "settings.appearance.weight_medium": "Medium (500)",
+        "settings.appearance.weight_normal": "Normal (400)",
+        "settings.appearance.weight_semibold": "Semibold (600)",
         "settings.close": "Close settings",
+        "settings.general.cjk_width": "Use wide ambiguous characters (BBS)",
+        "settings.general.cjk_width_hint": "Render ambiguous-width characters, such as box drawing and symbols, as two cells. Enable only when the BBS or terminal layout requires it.",
+        "settings.general.copy_on_select": "Copy terminal selection automatically",
+        "settings.general.copy_on_select_hint": "On mouse release, copies terminal selection without surrounding whitespace, then clears it.",
+        "settings.general.custom_menu": "Use StandTerm context menu",
+        "settings.general.detailed_ssh_labels": "Show detailed SSH labels",
+        "settings.general.detect_urls": "Make terminal URLs clickable",
+        "settings.general.picture_preview": "Preview image links in page overlay",
+        "settings.general.url_action": "Open clicked terminal links in",
+        "settings.general.url_newtab": "New tab",
+        "settings.general.url_overlay": "Page overlay",
+        "settings.general.url_popup": "Popup window",
         "settings.language.hint": "Applies next time you open this page. Some areas remain in English.",
         "settings.language.label": "Language (preview)",
         "settings.nav.appearance": "Appearance",
@@ -730,7 +777,54 @@
         "settings.agent.legend": "Agent \u5b58\u53d6",
         "settings.agent.observe": "\u552f\u8b80 + \u6b0a\u6756",
         "settings.agent.permission": "Agent \u9810\u8a2d\u6b0a\u9650",
+        "settings.appearance.color_black": "\u9ed1\u8272",
+        "settings.appearance.color_blue": "\u85cd\u8272",
+        "settings.appearance.color_cyan": "\u9752\u8272",
+        "settings.appearance.color_green": "\u7da0\u8272",
+        "settings.appearance.color_magenta": "\u6d0b\u7d05\u8272",
+        "settings.appearance.color_red": "\u7d05\u8272",
+        "settings.appearance.color_scheme": "\u914d\u8272\u65b9\u6848",
+        "settings.appearance.color_white": "\u767d\u8272",
+        "settings.appearance.color_yellow": "\u9ec3\u8272",
+        "settings.appearance.cursor_bar": "\u76f4\u7dda",
+        "settings.appearance.cursor_block": "\u65b9\u584a",
+        "settings.appearance.cursor_preview": "\u6e38\u6a19",
+        "settings.appearance.cursor_style": "\u6e38\u6a19\u6a23\u5f0f",
+        "settings.appearance.cursor_underline": "\u5e95\u7dda",
+        "settings.appearance.font_face": "\u5b57\u578b",
+        "settings.appearance.font_size": "\u5b57\u578b\u5927\u5c0f",
+        "settings.appearance.font_weight": "\u5b57\u91cd",
+        "settings.appearance.font_weight_hint": "\u8f03\u7c97\u7684\u5b57\u91cd\u53ef\u8b93\u7d30\u5b57\u770b\u8d77\u4f86\u66f4\u660e\u4eae\uff0c\u5c24\u5176\u5728 macOS \u7070\u968e\u53cd\u92f8\u9f52\u986f\u793a\u4e0b\u3002",
+        "settings.appearance.group_custom": "StandTerm",
+        "settings.appearance.group_windows_terminal": "Windows Terminal",
+        "settings.appearance.palette_bright": "\u4eae\u8272",
+        "settings.appearance.palette_normal": "\u6a19\u6e96",
+        "settings.appearance.powerline_hint": "\u4f7f\u7528\u5167\u9644\u5b57\u578b\u986f\u793a\u547d\u4ee4\u63d0\u793a\u5b57\u5143\u4e2d\u7684\u7b26\u865f\uff0c\u4f8b\u5982\u5206\u652f\u5716\u793a\u3002",
+        "settings.appearance.powerline_symbols": "\u4f7f\u7528\u5167\u9644 Powerline \u7b26\u865f",
+        "settings.appearance.preview": "\u914d\u8272\u65b9\u6848\u9810\u89bd",
+        "settings.appearance.sample_error": "\u932f\u8aa4",
+        "settings.appearance.sample_ready": "\u5c31\u7dd2",
+        "settings.appearance.sample_warning": "\u8b66\u544a",
+        "settings.appearance.swatch": "{color}\uff1a{hex}",
+        "settings.appearance.swatch_bright": "\u4eae{color}\uff1a{hex}",
+        "settings.appearance.terminal_title": "\u5728\u72c0\u614b\u5217\u986f\u793a\u7a0b\u5f0f\u6a19\u984c",
+        "settings.appearance.weight_bold": "\u7c97\u9ad4\uff08700\uff09",
+        "settings.appearance.weight_medium": "\u4e2d\u7b49\uff08500\uff09",
+        "settings.appearance.weight_normal": "\u6a19\u6e96\uff08400\uff09",
+        "settings.appearance.weight_semibold": "\u534a\u7c97\u9ad4\uff08600\uff09",
         "settings.close": "\u95dc\u9589\u8a2d\u5b9a",
+        "settings.general.cjk_width": "\u4e0d\u5b9a\u5bec\u5ea6\u5b57\u5143\u4f7f\u7528\u5169\u683c\uff08BBS\uff09",
+        "settings.general.cjk_width_hint": "\u5c07\u6846\u7dda\u3001\u7b26\u865f\u7b49\u4e0d\u5b9a\u5bec\u5ea6\u5b57\u5143\u986f\u793a\u70ba\u5169\u683c\u3002\u50c5\u5728 BBS \u6216\u7d42\u7aef\u756b\u9762\u914d\u7f6e\u9700\u8981\u6642\u555f\u7528\u3002",
+        "settings.general.copy_on_select": "\u81ea\u52d5\u8907\u88fd\u9078\u53d6\u7684\u7d42\u7aef\u6587\u5b57",
+        "settings.general.copy_on_select_hint": "\u653e\u958b\u6ed1\u9f20\u5f8c\u8907\u88fd\u9078\u53d6\u7684\u7d42\u7aef\u6587\u5b57\uff0c\u79fb\u9664\u524d\u5f8c\u7a7a\u767d\u4e26\u6e05\u9664\u9078\u53d6\u7bc4\u570d\u3002",
+        "settings.general.custom_menu": "\u4f7f\u7528 StandTerm \u5feb\u986f\u9078\u55ae",
+        "settings.general.detailed_ssh_labels": "\u986f\u793a\u8a73\u7d30 SSH \u6a19\u7c64",
+        "settings.general.detect_urls": "\u5c07\u7d42\u7aef\u7db2\u5740\u8a2d\u70ba\u53ef\u9ede\u9078\u9023\u7d50",
+        "settings.general.picture_preview": "\u5728\u9801\u5167\u9810\u89bd\u5716\u7247\u9023\u7d50",
+        "settings.general.url_action": "\u9ede\u9078\u7d42\u7aef\u9023\u7d50\u6642\u958b\u555f\u65bc",
+        "settings.general.url_newtab": "\u65b0\u5206\u9801",
+        "settings.general.url_overlay": "\u9801\u5167\u9810\u89bd",
+        "settings.general.url_popup": "\u5f48\u51fa\u8996\u7a97",
         "settings.language.hint": "\u4e0b\u6b21\u958b\u555f\u6b64\u9801\u9762\u6642\u5957\u7528\uff0c\u90e8\u5206\u5340\u57df\u4ecd\u986f\u793a\u82f1\u6587\u3002",
         "settings.language.label": "\u8a9e\u8a00\uff08\u9810\u89bd\uff09",
         "settings.nav.appearance": "\u5916\u89c0",
diff --git a/templates/index.html b/templates/index.html
index 3089ef5..0c3b144 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -1139,14 +1139,14 @@ <h3 data-i18n="settings.title">Settings</h3>
                                 <select id="pref-uiLanguage"><option value="en">English</option><option value="zh-TW" lang="zh-TW">繁體中文（台灣）</option></select>
                             </div>
                             <div class="settings-status" data-i18n="settings.language.hint">Applies next time you open this page. Some areas remain in English.</div>
-                            <div class="settings-row"><label for="pref-useCustomMenu">Enable custom context menu</label><input type="checkbox" id="pref-useCustomMenu"></div>
-                            <div class="settings-row"><label for="pref-copyOnSelect">Copy on select</label><input type="checkbox" id="pref-copyOnSelect"></div>
-                            <div class="settings-row"><label for="pref-enablePicPreview">Enable pic preview</label><input type="checkbox" id="pref-enablePicPreview"></div>
-                            <div class="settings-row"><label for="pref-detectUrls">Detect & linkify URLs</label><input type="checkbox" id="pref-detectUrls"></div>
-                            <div class="settings-row"><label for="pref-showDetailedSshLabels">Show detailed SSH labels</label><input type="checkbox" id="pref-showDetailedSshLabels"></div>
-                            <div class="settings-row"><label for="pref-cjkWideAmbiguous" title="Render ambiguous-width characters (box drawing, symbols) as wide cells. Enable only for legacy BBS/screen setups that require wide ambiguous width.">CJK wide ambiguous width (BBS compatibility)</label><input type="checkbox" id="pref-cjkWideAmbiguous"></div>
-                            <div class="settings-row"><label for="pref-urlClickAction">URL click opens in</label>
-                                <select id="pref-urlClickAction"><option value="overlay">Overlay</option><option value="popup">Popup Window</option><option value="newtab">New Tab</option></select>
+                            <div class="settings-row"><label for="pref-useCustomMenu" data-i18n="settings.general.custom_menu">Use StandTerm context menu</label><input type="checkbox" id="pref-useCustomMenu"></div>
+                            <div class="settings-row"><label for="pref-copyOnSelect" title="On mouse release, copies terminal selection without surrounding whitespace, then clears it." data-i18n-title="settings.general.copy_on_select_hint" data-i18n="settings.general.copy_on_select">Copy terminal selection automatically</label><input type="checkbox" id="pref-copyOnSelect"></div>
+                            <div class="settings-row"><label for="pref-enablePicPreview" data-i18n="settings.general.picture_preview">Preview image links in page overlay</label><input type="checkbox" id="pref-enablePicPreview"></div>
+                            <div class="settings-row"><label for="pref-detectUrls" data-i18n="settings.general.detect_urls">Make terminal URLs clickable</label><input type="checkbox" id="pref-detectUrls"></div>
+                            <div class="settings-row"><label for="pref-showDetailedSshLabels" data-i18n="settings.general.detailed_ssh_labels">Show detailed SSH labels</label><input type="checkbox" id="pref-showDetailedSshLabels"></div>
+                            <div class="settings-row"><label for="pref-cjkWideAmbiguous" data-i18n-title="settings.general.cjk_width_hint" title="Render ambiguous-width characters, such as box drawing and symbols, as two cells. Enable only when the BBS or terminal layout requires it." data-i18n="settings.general.cjk_width">Use wide ambiguous characters (BBS)</label><input type="checkbox" id="pref-cjkWideAmbiguous"></div>
+                            <div class="settings-row"><label for="pref-urlClickAction" data-i18n="settings.general.url_action">Open clicked terminal links in</label>
+                                <select id="pref-urlClickAction"><option value="overlay" data-i18n="settings.general.url_overlay">Page overlay</option><option value="popup" data-i18n="settings.general.url_popup">Popup window</option><option value="newtab" data-i18n="settings.general.url_newtab">New tab</option></select>
                             </div>
                         </fieldset>
                         <fieldset class="settings-fieldset">
@@ -1173,12 +1173,12 @@ <h3 data-i18n="settings.title">Settings</h3>
                     <div class="settings-tab" id="tab-appearance">
                         <fieldset class="settings-fieldset">
                             <legend data-i18n="settings.nav.appearance">Appearance</legend>
-                            <div class="settings-row"><label for="pref-colorScheme">Color scheme</label>
+                            <div class="settings-row"><label for="pref-colorScheme" data-i18n="settings.appearance.color_scheme">Color scheme</label>
                                 <select id="pref-colorScheme">
-                                    <optgroup label="Custom">
+                                    <optgroup id="settings-theme-group-custom" label="StandTerm">
                                         <option value="ibm5153">IBM 5153 (CGA Classic)</option>
                                     </optgroup>
-                                    <optgroup label="Windows Terminal Official">
+                                    <optgroup id="settings-theme-group-windows-terminal" label="Windows Terminal">
                                         <option value="campbell">Campbell</option>
                                         <option value="campbellPowershell">Campbell PowerShell</option>
                                         <option value="vintage">Vintage</option>
@@ -1191,24 +1191,24 @@ <h3 data-i18n="settings.title">Settings</h3>
                                     </optgroup>
                                 </select>
                             </div>
-                            <div class="settings-theme-preview" id="settings-theme-preview" role="group" aria-label="Color scheme preview">
+                            <div class="settings-theme-preview" id="settings-theme-preview" role="group" aria-label="Color scheme preview" data-i18n-aria-label="settings.appearance.preview">
                                 <div><span data-theme-color="green">user@host</span>:<span data-theme-color="blue">~</span>$ ls</div>
                                 <div>README.md&nbsp; <span data-theme-color="cyan">logs/</span>&nbsp; <span data-theme-color="magenta">config.json</span></div>
-                                <div><span data-theme-color="green">Ready</span>&nbsp; <span data-theme-color="yellow">Warning</span>&nbsp; <span data-theme-color="red">Error</span></div>
-                                <div>$ <span class="settings-theme-cursor" aria-label="Cursor"></span></div>
+                                <div><span data-theme-color="green" data-i18n="settings.appearance.sample_ready">Ready</span>&nbsp; <span data-theme-color="yellow" data-i18n="settings.appearance.sample_warning">Warning</span>&nbsp; <span data-theme-color="red" data-i18n="settings.appearance.sample_error">Error</span></div>
+                                <div>$ <span class="settings-theme-cursor" aria-label="Cursor" data-i18n-aria-label="settings.appearance.cursor_preview"></span></div>
                                 <div class="settings-theme-palette"></div>
                             </div>
                             <div class="settings-status" data-i18n="settings.theme_preview_hint">Preview only. Save preferences applies this theme.</div>
-                            <div class="settings-row"><label for="pref-fontFace">Font face</label><input type="text" id="pref-fontFace"></div>
-                            <div class="settings-row"><label for="pref-powerlineSymbols" title="Use the bundled Powerline symbols font as a fallback for prompt glyphs such as the branch symbol.">Enable Powerline symbol fallback</label><input type="checkbox" id="pref-powerlineSymbols"></div>
-                            <div class="settings-row"><label for="pref-fontSize">Font size</label><input type="number" id="pref-fontSize" min="8" max="32"></div>
-                            <div class="settings-row"><label for="pref-fontWeight" title="Heavier weights can improve perceived brightness of thin glyphs, especially with macOS grayscale antialiasing.">Font weight</label>
-                                <select id="pref-fontWeight"><option value="normal">Normal (400)</option><option value="500">Medium (500)</option><option value="600">Semibold (600)</option><option value="bold">Bold (700)</option></select>
+                            <div class="settings-row"><label for="pref-fontFace" data-i18n="settings.appearance.font_face">Font family</label><input type="text" id="pref-fontFace"></div>
+                            <div class="settings-row"><label for="pref-powerlineSymbols" data-i18n-title="settings.appearance.powerline_hint" title="Use the bundled font for prompt symbols such as the branch icon." data-i18n="settings.appearance.powerline_symbols">Use bundled Powerline symbols</label><input type="checkbox" id="pref-powerlineSymbols"></div>
+                            <div class="settings-row"><label for="pref-fontSize" data-i18n="settings.appearance.font_size">Font size</label><input type="number" id="pref-fontSize" min="8" max="32"></div>
+                            <div class="settings-row"><label for="pref-fontWeight" data-i18n-title="settings.appearance.font_weight_hint" title="Heavier weights can make thin text appear brighter, especially with macOS grayscale antialiasing." data-i18n="settings.appearance.font_weight">Font weight</label>
+                                <select id="pref-fontWeight"><option value="normal" data-i18n="settings.appearance.weight_normal">Normal (400)</option><option value="500" data-i18n="settings.appearance.weight_medium">Medium (500)</option><option value="600" data-i18n="settings.appearance.weight_semibold">Semibold (600)</option><option value="bold" data-i18n="settings.appearance.weight_bold">Bold (700)</option></select>
                             </div>
-                            <div class="settings-row"><label for="pref-cursorStyle">Cursor type</label>
-                                <select id="pref-cursorStyle"><option value="block">Block</option><option value="underline">Underline</option><option value="bar">Bar</option></select>
+                            <div class="settings-row"><label for="pref-cursorStyle" data-i18n="settings.appearance.cursor_style">Cursor style</label>
+                                <select id="pref-cursorStyle"><option value="block" data-i18n="settings.appearance.cursor_block">Block</option><option value="underline" data-i18n="settings.appearance.cursor_underline">Underline</option><option value="bar" data-i18n="settings.appearance.cursor_bar">Bar</option></select>
                             </div>
-                            <div class="settings-row"><label for="pref-showTerminalTitleInStatusBar">Show terminal title in status bar</label><input type="checkbox" id="pref-showTerminalTitleInStatusBar"></div>
+                            <div class="settings-row"><label for="pref-showTerminalTitleInStatusBar" data-i18n="settings.appearance.terminal_title">Show application title in status bar</label><input type="checkbox" id="pref-showTerminalTitleInStatusBar"></div>
                         </fieldset>
                     </div>
                     <div class="settings-tab" id="tab-ssh-sessions">
@@ -1831,6 +1831,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
         const uiText = window.StandTermI18n.create(window.StandTermMessages, prefs.uiLanguage);
         const t = uiText.t;
         uiText.apply(document);
+        document.getElementById('settings-theme-group-custom').label = t('settings.appearance.group_custom');
+        document.getElementById('settings-theme-group-windows-terminal').label = t('settings.appearance.group_windows_terminal');
         document.documentElement.lang = uiText.locale;
         prefs.fontSize = normalizeFontSize(prefs.fontSize);
         prefs.fontWeight = normalizeFontWeight(prefs.fontWeight);
@@ -11770,16 +11772,24 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 preview.querySelector('.settings-theme-cursor').style.backgroundColor = theme.cursor;
                 const palette = preview.querySelector('.settings-theme-palette');
                 palette.replaceChildren();
+                const colorLabels = {
+                    black: 'settings.appearance.color_black', red: 'settings.appearance.color_red',
+                    green: 'settings.appearance.color_green', yellow: 'settings.appearance.color_yellow',
+                    blue: 'settings.appearance.color_blue', magenta: 'settings.appearance.color_magenta',
+                    cyan: 'settings.appearance.color_cyan', white: 'settings.appearance.color_white'
+                };
                 for (const bright of [false, true]) {
                     const label = document.createElement('span');
-                    label.textContent = bright ? 'Bright' : 'Normal';
+                    label.textContent = t(bright ? 'settings.appearance.palette_bright' : 'settings.appearance.palette_normal');
                     palette.appendChild(label);
-                    for (const color of ['black', 'red', 'green', 'yellow', 'blue', 'magenta', 'cyan', 'white']) {
+                    for (const [color, labelKey] of Object.entries(colorLabels)) {
                         const key = bright ? `bright${color[0].toUpperCase()}${color.slice(1)}` : color;
                         const swatch = document.createElement('span');
                         swatch.className = 'settings-theme-swatch';
                         swatch.style.backgroundColor = theme[key];
-                        swatch.title = `${bright ? 'Bright ' : ''}${color}: ${theme[key]}`;
+                        swatch.title = t(bright ? 'settings.appearance.swatch_bright' : 'settings.appearance.swatch', {
+                            color: t(labelKey), hex: theme[key]
+                        });
                         swatch.setAttribute('role', 'img');
                         swatch.setAttribute('aria-label', swatch.title);
                         palette.appendChild(swatch);
diff --git a/tests/settings_appearance_i18n_browser_smoke.py b/tests/settings_appearance_i18n_browser_smoke.py
new file mode 100644
index 0000000..9c182e2
--- /dev/null
+++ b/tests/settings_appearance_i18n_browser_smoke.py
@@ -0,0 +1,123 @@
+"""Check localized preference labels and palette previews against typed values."""
+import agent_browser_smoke as fixture
+from settings_preferences_i18n_browser_smoke import preferences
+from settings_transfer_i18n_browser_smoke import message, new_page, snapshot
+
+
+SELECT_VALUES = {
+    'pref-uiLanguage':['en','zh-TW'],
+    'pref-urlClickAction':['overlay','popup','newtab'],
+    'pref-agentAccessMintMode':['observe','approval_pending','direct_active'],
+    'pref-colorScheme':['ibm5153','campbell','campbellPowershell','vintage','oneHalfDark',
+                       'oneHalfLight','solarizedDark','solarizedLight','tangoDark','tangoLight'],
+    'pref-fontWeight':['normal','500','600','bold'],
+    'pref-cursorStyle':['block','underline','bar'],
+}
+THEME_NAMES = ['IBM 5153 (CGA Classic)','Campbell','Campbell PowerShell','Vintage','One Half Dark',
+               'One Half Light','Solarized Dark','Solarized Light','Tango Dark','Tango Light']
+COLORS = ['black','red','green','yellow','blue','magenta','cyan','white']
+PALETTES = {
+    'ibm5153':['#000000','#aa0000','#00aa00','#aa5500','#0000aa','#aa00aa','#00aaaa','#aaaaaa',
+               '#555555','#ff5555','#55ff55','#ffff55','#5555ff','#ff55ff','#55ffff','#ffffff'],
+    'campbell':['#0C0C0C','#C50F1F','#13A10E','#C19C00','#0037DA','#881798','#3A96DD','#CCCCCC',
+                '#767676','#E74856','#16C60C','#F9F1A5','#3B78FF','#B4009E','#61D6D6','#F2F2F2'],
+}
+
+
+def assert_palette(page, scheme):
+    palette = page.locator('.settings-theme-palette')
+    assert palette.locator(':scope > span:not(.settings-theme-swatch)').all_text_contents() == [
+        message(page, 'settings.appearance.palette_normal'), message(page, 'settings.appearance.palette_bright')]
+    swatches = palette.locator('.settings-theme-swatch')
+    assert swatches.count() == 16
+    for index, hex_value in enumerate(PALETTES[scheme]):
+        swatch = swatches.nth(index)
+        color = message(page, 'settings.appearance.color_' + COLORS[index % 8])
+        label = message(page, 'settings.appearance.swatch_bright' if index >= 8 else 'settings.appearance.swatch',
+                        {'color':color,'hex':hex_value})
+        assert swatch.get_attribute('role') == 'img'
+        assert swatch.get_attribute('title') == label and swatch.get_attribute('aria-label') == label
+        rgb = ', '.join(str(int(hex_value[offset:offset + 2], 16)) for offset in [1,3,5])
+        assert swatch.evaluate('element => element.style.backgroundColor') == 'rgb(' + rgb + ')'
+
+
+def assert_translated_attributes(page, tab):
+    elements = page.locator(f'#tab-{tab} [data-i18n], #tab-{tab} [data-i18n-title], #tab-{tab} [data-i18n-aria-label], #tab-{tab} [data-i18n-label]')
+    for index in range(elements.count()):
+        element = elements.nth(index)
+        for catalog_attribute, attribute in [('data-i18n','textContent'),('data-i18n-title','title'),
+                                             ('data-i18n-aria-label','aria-label'),('data-i18n-label','label')]:
+            key = element.get_attribute(catalog_attribute)
+            if key:
+                actual = element.text_content() if attribute == 'textContent' else element.get_attribute(attribute)
+                assert actual == message(page, key), (key, actual)
+
+
+def test_translated_controls_and_palette_keep_typed_values(browser, url):
+    for locale in ['en','zh-TW']:
+        context, page, key = new_page(browser, url, locale)
+        try:
+            before = snapshot(page)
+            runtime = page.evaluate('() => window.terminalTest.getActiveTerminalOptions()')
+            stored_preferences = preferences(page)
+            for selector, expected in SELECT_VALUES.items():
+                assert page.locator('#' + selector + ' option').evaluate_all('items => items.map(item => item.value)') == expected
+            assert page.locator('#pref-colorScheme option').all_text_contents() == THEME_NAMES
+            for tab in ['general','appearance']:
+                page.click(f'.settings-nav-item[data-tab="{tab}"]')
+                labels = page.locator(f'#tab-{tab} .settings-row label[for]')
+                for index in range(labels.count()):
+                    assert labels.nth(index).get_attribute('data-i18n'), 'A preference label lost localization or its control binding'
+                assert_translated_attributes(page, tab)
+            for scheme in PALETTES:
+                if scheme == 'campbell':
+                    page.locator('#pref-colorScheme option[value="campbell"]').evaluate(
+                        'element => {element.textContent = "Display <b>& {scheme}";}')
+                page.select_option('#pref-colorScheme', scheme)
+                assert_palette(page, scheme)
+                assert page.input_value('#pref-colorScheme') == scheme
+                assert page.evaluate('() => window.terminalTest.getActiveTerminalOptions()') == runtime
+                assert preferences(page) == stored_preferences
+                assert snapshot(page) == before
+            assert page.locator('#pref-colorScheme b').count() == 0
+            page.locator('#pref-colorScheme option[value="campbell"]').evaluate('element => {element.textContent = "Campbell";}')
+            entered_values = page.locator('#tab-general input[id^="pref-"], #tab-general select, #tab-appearance input, #tab-appearance select').evaluate_all(
+                'items => items.map(item => ({id:item.id,value:item.value,checked:item.checked}))')
+            page.set_viewport_size({'width':480,'height':600})
+            for tab in ['general','appearance']:
+                page.click(f'.settings-nav-item[data-tab="{tab}"]')
+                labels = page.locator(f'#tab-{tab} .settings-row label[for]')
+                for index in range(labels.count()):
+                    label = labels.nth(index)
+                    label.scroll_into_view_if_needed()
+                    metrics = label.evaluate("""label => {
+                        const field = document.getElementById(label.htmlFor);
+                        const a = label.getBoundingClientRect(), b = field.getBoundingClientRect();
+                        const row = label.closest('.settings-row').getBoundingClientRect();
+                        return {id:label.htmlFor,labelFits:label.scrollWidth <= label.clientWidth+1,
+                            inRow:a.left >= row.left-1 && a.right <= row.right+1 && b.left >= row.left-1 && b.right <= row.right+1,
+                            separate:a.right <= b.left+1 || a.bottom <= b.top+1 || b.bottom <= a.top+1};
+                    }""")
+                    assert metrics['labelFits'] and metrics['inRow'] and metrics['separate'], metrics
+            assert page.locator('#tab-general input[id^="pref-"], #tab-general select, #tab-appearance input, #tab-appearance select').evaluate_all(
+                'items => items.map(item => ({id:item.id,value:item.value,checked:item.checked}))') == entered_values
+        finally:
+            fixture.close_context(context)
+
+
+def main():
+    proc, url = fixture.start_server()
+    try:
+        with fixture.load_playwright()[0]() as playwright:
+            browser = playwright.chromium.launch(headless=True)
+            try:
+                test_translated_controls_and_palette_keep_typed_values(browser, url)
+                print('test_translated_controls_and_palette_keep_typed_values (en/zh-TW): PASS', flush=True)
+            finally:
+                browser.close()
+    finally:
+        fixture.stop_server(proc)
+
+
+if __name__ == '__main__':
+    main()
diff --git a/tests/settings_preferences_i18n_browser_smoke.py b/tests/settings_preferences_i18n_browser_smoke.py
index 1cd4aab..9d5625e 100644
--- a/tests/settings_preferences_i18n_browser_smoke.py
+++ b/tests/settings_preferences_i18n_browser_smoke.py
@@ -9,6 +9,7 @@
 
 
 TABS = ['general','appearance','ssh-sessions','server','diagnostics']
+CUSTOM_FONT = '"Fixture <b>& {font}", monospace'
 ACCESS_MUTATIONS = {'agent_mode_set','agent_attach','agent_detach','agent_pause',
                     'agent_external_token_create','start_ssh','stop_ssh'}
 
@@ -36,7 +37,10 @@ def edit_preferences(page, next_locale):
     page.select_option('#pref-urlClickAction', 'newtab')
     page.select_option('#pref-uiLanguage', next_locale)
     page.select_option('#pref-agentAccessMintMode', 'observe')
+    page.locator('#pref-cjkWideAmbiguous').check()
     page.click('.settings-nav-item[data-tab="appearance"]')
+    page.fill('#pref-fontFace', CUSTOM_FONT)
+    page.locator('#pref-powerlineSymbols').uncheck()
     page.fill('#pref-fontSize', '22')
     page.select_option('#pref-fontWeight', '600')
     page.select_option('#pref-cursorStyle', 'bar')
@@ -48,6 +52,19 @@ def assert_no_access_mutations(page):
         'A preference action changed access or started/stopped a connection'
 
 
+def assert_ambiguous_character_width(page, width):
+    page.evaluate('text => window.terminalTest.writeTerminalOutput(text)', '\x1b[2J\x1b[HA─B')
+    expected = [{'chars':'A','width':1},{'chars':'─','width':width}]
+    if width == 2:
+        expected.append({'chars':'','width':0})
+    expected.append({'chars':'B','width':1})
+    for mirror in [False,True]:
+        page.wait_for_function("""({mirror,expected}) => {
+            const cells = window.terminalTest.getActiveTerminalBufferCellsForTest(0, mirror);
+            return cells && JSON.stringify(cells.slice(0,expected.length)) === JSON.stringify(expected);
+        }""", arg={'mirror':mirror,'expected':expected})
+
+
 def test_close_discards_draft_and_save_applies_without_reload(browser, url):
     for locale in ['en','zh-TW']:
         context, page, key = new_page(browser, url, locale)
@@ -74,6 +91,10 @@ def test_close_discards_draft_and_save_applies_without_reload(browser, url):
             assert page.input_value('#pref-fontWeight') == before_preferences['fontWeight']
             assert page.input_value('#pref-cursorStyle') == before_preferences['cursorStyle']
             assert page.input_value('#pref-colorScheme') == before_preferences['colorScheme']
+            assert page.input_value('#pref-fontFace') == before_preferences['fontFace']
+            assert page.locator('#pref-powerlineSymbols').is_checked()
+            assert not page.locator('#pref-cjkWideAmbiguous').is_checked()
+            assert_ambiguous_character_width(page, 1)
             assert access_state(page) == before_access
 
             edit_preferences(page, next_locale)
@@ -83,7 +104,8 @@ def test_close_discards_draft_and_save_applies_without_reload(browser, url):
             saved = snapshot(page)
             expected = dict(before_preferences, uiLanguage=next_locale, copyOnSelect=True,
                             useCustomMenu=False, urlClickAction='newtab',agentAccessMintMode='observe',
-                            fontSize=22,fontWeight='600',cursorStyle='bar',colorScheme='campbell')
+                            fontSize=22,fontWeight='600',cursorStyle='bar',colorScheme='campbell',
+                            fontFace=CUSTOM_FONT,powerlineSymbols=False,cjkWideAmbiguous=True)
             assert json.loads(saved['storage']['terminal.pref.v1']) == expected
             assert preferences(page) == expected
             options = page.evaluate('() => window.terminalTest.getActiveTerminalOptions()')
@@ -91,6 +113,8 @@ def test_close_discards_draft_and_save_applies_without_reload(browser, url):
                 assert options[field] == expected[field]
             if options['mirrorCursorStyle'] is not None:
                 assert options['mirrorCursorStyle'] == 'bar'
+            assert options['fontFamily'] == CUSTOM_FONT and options['mirrorFontFamily'] == CUSTOM_FONT
+            assert_ambiguous_character_width(page, 2)
             assert saved['ssh'] == before['ssh'] and saved['key'] == key
             assert {name:value for name,value in saved['storage'].items() if name != 'terminal.pref.v1'} == {
                 name:value for name,value in before['storage'].items() if name != 'terminal.pref.v1'}

From 77514dd12786056e4e48250a938826901bf5578d Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sun, 20 Sep 2026 03:08:30 +0800
Subject: [PATCH 25/43] Clarify and localize Server runtime settings

---
 README.md                                   |   7 +-
 docs/agent_ui_review_plan.md                |  42 +++-
 docs/ui_copy_review.tsv                     |  40 ++++
 static/js/standterm-messages.js             |  80 +++++++
 templates/index.html                        |  74 +++---
 tests/agent_browser_smoke.py                |  28 ++-
 tests/server_settings_i18n_browser_smoke.py | 244 ++++++++++++++++++++
 7 files changed, 467 insertions(+), 48 deletions(-)
 create mode 100644 tests/server_settings_i18n_browser_smoke.py

diff --git a/README.md b/README.md
index c725801..470999a 100644
--- a/README.md
+++ b/README.md
@@ -328,7 +328,9 @@ Chinese (Taiwan) for browser access and recovery, Agent permissions, input and
 file-copy approvals, transfer results, local connection information, connection
 forms, SSH login, SSH profile/route editors (including browser-key and
 host-fingerprint controls), settings navigation, General/Appearance preferences,
-settings import/export, user SSH tunnel controls, and Agent Tunnel setup/status. The choice
+settings import/export, user SSH tunnel controls, Agent Tunnel setup/status, and
+Server runtime settings. Server access-URL and passkey-management controls,
+plugin labels and backend diagnostics remain in their original language. The choice
 applies the next time the page opens; saving it does not reload the current
 page or change its connections and grants. Other areas remain in English.
 **Save preferences** stores the General and Appearance preference fields.
@@ -336,6 +338,9 @@ Other settings have separate actions. **Reset preferences** immediately restores
 all browser preference defaults and reloads the page, losing unsaved edits and
 stopping this page's temporary SSH tunnels. Saved SSH profiles, history and keys,
 and the Agent panel position remain stored.
+Server runtime settings use individual **Apply** buttons. Their changes are shared
+across the Core instance and last until Core restarts. Connection defaults do not
+alter existing connections.
 The [copy and translation table](docs/ui_copy_review.tsv) and
 [localization plan](docs/agent_ui_review_plan.md) describe the review workflow.
 
diff --git a/docs/agent_ui_review_plan.md b/docs/agent_ui_review_plan.md
index fb5eabc..7a55dbd 100644
--- a/docs/agent_ui_review_plan.md
+++ b/docs/agent_ui_review_plan.md
@@ -43,7 +43,7 @@ do not consolidate them merely to shorten labels.
 | 3 | Review English UI copy and terminology | Core terms agreed; initial English sources reviewed | Review each proposed change for target, permissions, consequences, and next action; check related tooltips, Desktop help, and tests before applying it. |
 | 4 | Finalize the translation exchange table | Initial exchange validated with an independent translator | Stable keys, approved English source, context, and placeholder constraints are sufficient for an independent translator. |
 | 5 | Pilot Agent access and local connection information | Implemented; validation below | Cover static and dynamic text, titles, and accessible names; preserve connected sessions and authorization; support English fallback. |
-| 6 | Translate and integrate approved rows | Agent pilot, browser access/recovery, Agent approvals/transfers, connection/login controls, SSH route/profile editors, General/Appearance settings, settings transfer, user SSH tunnels and Agent Tunnel integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
+| 6 | Translate and integrate approved rows | Agent pilot, browser access/recovery, Agent approvals/transfers, connection/login controls, SSH route/profile editors, General/Appearance settings, settings transfer, user SSH tunnels, Agent Tunnel and Server runtime settings integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
 | 7 | Expand Core and Desktop coverage | Deferred | Verify secondary windows, native menus, setup, diagnostics, packaging, and representative layouts. |
 
 ## Validation of the reliability changes
@@ -66,7 +66,7 @@ validated separately below.
 
 ## Deferred UI work
 
-Agent diagnostics, Server/Diagnostics settings, secondary windows,
+Agent diagnostics, Server access recovery, Diagnostics settings, secondary windows,
 and Desktop localization remain outside the completed workflows. Translation
 starts only after the English source for the selected workflow is reviewed.
 Extra screen diffing, render hints, key aliases, and byte-limit options remain optional optimizations.
@@ -577,3 +577,41 @@ remain existing coverage gaps, not reasons to change those handlers here.
 Validation uses WSL Chromium. Native Desktop was not qualified; external image
 preview restrictions there remain unchanged. The next candidate is a separate
 review of Server settings actions and their scope before translating them.
+
+## Server runtime settings
+
+Forty reviewed messages cover the runtime snapshot, individual Apply controls,
+schema traits, permissions and connection-type availability. The table contains
+561 rows: 560 referenced bilingual messages and the existing removal. Server
+access-URL and platform-passkey recovery controls remain a separate workflow.
+
+Runtime updates change shared Core process memory, without disk persistence.
+The visible Apply hint states their scope and lifetime, and that connection
+defaults do not alter existing connections. It does not promise that other open
+pages refresh automatically or that explicit connection inputs use the defaults.
+Each Apply button references this hint as its accessible description. The common
+Save preferences button keeps its existing General/Appearance scope.
+
+| Finding | Severity | Evidence | Critic remedy | Main response | Resolution | Validation |
+| --- | --- | --- | --- | --- | --- | --- |
+| Saved implies durable storage | Medium | apply_runtime_setting_update writes runtime_settings in memory | State Core lifetime and shared scope | Accept | Applying / Applied and fixed scope hint | Existing versioned update tests; bilingual individual Apply and footer Save checks |
+| Writable and mutable can imply broader authority | Medium | Snapshot read_only derives from low-risk capability; schema mutable and lock checks remain separate | Distinguish low-risk permission from schema traits | Accept | Low-risk updates allowed and Runtime-mutable labels | Read-only, locked and denied-handler cases emit no updates |
+| Translation can change schema interpretation or raw plugin data | Medium, integration guard | Typed schema rendering and applyServerSettingUpdate | Translate only known traits; retain raw labels and values | Modify | Local own-property maps for known risk/scope; backend labels and diagnostics remain literal | Exact enum/boolean/integer values, grant, version and digest; unknown labels/traits and error fallback |
+| Version can mean application release | Low | Snapshot settings_version is the mutation revision | Name the settings revision and Core environment | Accept | Two precise labels | Actual backend updates bind the displayed revision and wait for its increment |
+
+Two bounded independent review passes found no remaining material issue. The
+review changed persistence and permission wording without changing backend
+policy, storage, grants or update flow. Translating backend/plugin labels would
+require a separate typed metadata contract; retaining them is intentional.
+
+| Check | Result |
+| --- | --- |
+| Existing backend checks | Eight passed: separate capabilities, typed snapshot, unsafe schema rejection, versioned/audited updates, SSH plugin validation, restart/high-risk exclusion, remote-browser authorization boundary and scoped/revocable grants. |
+| Bilingual browser suite | Three cases in each language passed: actual backend Local Shell/UART updates plus schema/permission fixtures and precise individual update payloads. |
+| Layout and raw data | Both languages fit mutable rows at 480x600 without overlap or horizontal overflow; raw plugin labels, enum values and backend diagnostics remain text. No access URL was requested by these settings actions. |
+| Catalog and static checks | Six exporter and six lookup tests passed; all 560 keys are referenced, both locales have matching keys, the catalog is current, and Python syntax and diff checks passed. |
+
+Validation uses WSL Chromium and local backend fixtures; native Desktop was not
+qualified. The next executable step is a separate review of Server access-URL
+and passkey-recovery actions, including clipboard success and removal wording,
+before translating that workflow. No policy choice remains unresolved here.
diff --git a/docs/ui_copy_review.tsv b/docs/ui_copy_review.tsv
index 2e93e7b..3451155 100644
--- a/docs/ui_copy_review.tsv
+++ b/docs/ui_copy_review.tsv
@@ -520,3 +520,43 @@ settings.appearance.color_cyan	cyan	cyan	青色	ANSI palette slot name for swatc
 settings.appearance.color_white	white	white	白色	ANSI palette slot name for swatch tooltip and accessible name; does not rename the theme key.		Keep SCHEMES key white and brightWhite unchanged. Color name is display data only.	translation-reviewed	templates/index.html
 settings.appearance.swatch	{color}: {hex}	{color}: {hex}	{color}：{hex}	Normal palette swatch title and identical aria-label.	{color}, {hex}	Interpolate translated palette slot name and original theme hex value once. Preserve hex spelling/case. Keep role img; use safe DOM text/attributes.	translation-reviewed	templates/index.html
 settings.appearance.swatch_bright	Bright {color}: {hex}	Bright {color}: {hex}	亮{color}：{hex}	Bright palette swatch title and identical aria-label.	{color}, {hex}	Interpolate translated palette slot name and original theme hex value once. Preserve hex spelling/case. Keep role img; use safe DOM text/attributes.	translation-reviewed	templates/index.html
+settings.server.loading	Loading...	Loading server settings…	正在載入伺服器設定…	Initial status and pending snapshot request; does not refer to access URL or passkey recovery.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.runtime	Runtime	Core environment	Core 執行環境	Runtime fieldset legend and label; the runtime_name value stays literal.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.version	Version	Settings revision	設定修訂號	Displays data.settings_version, a mutable settings revision rather than the StandTerm application version.		Keep numeric or raw version value unchanged; do not present as app release version.	translation-reviewed	templates/index.html
+settings.server.default_connection	Default connection	Default connection	預設連線	Effective default connection label; preserve raw connection_type displayed as its value.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.forced_connection	Forced connection	Forced connection	強制使用的連線	Launch-time forced connection setting takes precedence over the runtime default.		Preserve the connection type and existing locked controls; translate only absent-value None.	translation-reviewed	templates/index.html
+settings.server.https	HTTPS	HTTPS	HTTPS	Label for the effective HTTPS flag; not a certificate trust or verification claim.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.mutable_settings	Low-risk runtime settings	Low-risk runtime settings	低風險執行階段設定	Controls filtered by schema risk_level low and the corresponding required capability.		Low risk is a backend classification, not a guarantee of safety or authorization.	translation-reviewed	templates/index.html
+settings.server.apply_hint		Use each Apply button. Changes are shared across this Core instance and last until Core restarts. Connection defaults do not alter existing connections.	請使用各項設定的「套用」按鈕。變更由此 Core 執行個體的所有使用者共用，並保留到 Core 重新啟動為止。連線預設值不會變更既有連線。	Visible scope and lifetime hint for runtime updates. Storage is process memory. Connection defaults do not modify existing connections; other schema scopes remain descriptive in their badges.		Do not promise disk persistence, browser-only scope, or that every future plugin field applies only to new connections. Preserve startup and forced-setting precedence.	translation-reviewed	templates/index.html
+settings.server.schema	Settings schema	Settings schema	設定結構	Schema section title. Plugin labels and setting keys below remain raw for this phase.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.capabilities	Capabilities	Permissions	權限	Shows server settings capability authorization, not feature availability or connection permissions.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.cap_view	View settings	View settings	檢視設定	Label for settings_view capability.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.cap_update_low	Update low risk	Update low-risk settings	更新低風險設定	Label for settings_update_low_risk capability; classification does not guarantee harmlessness.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.cap_update_high	Update high risk	Update high-risk settings	更新高風險設定	Label for settings_update_high_risk capability; does not add high-risk editing UI.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.cap_manage_grants	Manage settings grants	Manage settings grants	管理設定授權	Label for settings_auth_manage capability, separate from Agent access grants.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.connections	Connections	Connections	連線類型	Lists available connection types and policy authorization status, not active terminal sessions.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.allowed	Allowed	Allowed	允許	Capability or connection permission flag is true; does not prove a connection was made.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.denied	Denied	Denied	不允許	Capability or connection permission flag is false.		Map typed boolean only; do not parse backend diagnostic messages.	translation-reviewed	templates/index.html
+settings.server.apply	Apply	Apply	套用	Per-setting button sends one runtime update, separate from Save preferences.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.no_mutable_settings	No low-risk mutable settings are available.	No low-risk runtime settings are available.	目前沒有可用的低風險執行階段設定。	No schema/mutable rows matched the renderer. This does not mean the entire schema is empty.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.none	None	None	無	Absent forced connection, empty schema, or empty connection-type list; not a backend diagnostic.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.unknown	unknown	Unknown	未知	Fallback for missing schema traits or missing connection labels/types.		Only absent-value fallback is translated. Unknown nonempty schema traits and plugin values remain raw.	translation-reviewed	templates/index.html
+settings.server.unavailable	Settings unavailable.	Server settings unavailable.	無法取得伺服器設定。	Fallback snapshot failure only when data.message is absent.		Keep any supplied backend diagnostic message unchanged.	translation-reviewed	templates/index.html
+settings.server.read_only	Read-only	Runtime settings are read-only	執行階段設定為唯讀	Snapshot read_only is derived solely from settings_update_low_risk.allowed; do not imply all capabilities are denied.		Use data.read_only as before; no extra authorization or controls.	translation-reviewed	templates/index.html
+settings.server.writable	Writable	Low-risk updates allowed	允許更新低風險設定	Snapshot write status refers only to low-risk update capability; individual settings can still be locked.		Do not imply all fields or high-risk settings are editable.	translation-reviewed	templates/index.html
+settings.server.enabled	Enabled	Enabled	已啟用	True effective HTTPS flag. It does not establish client trust or successful TLS verification.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.disabled	Disabled	Disabled	已停用	False effective HTTPS flag.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.authorization_available	Authorization available	Authorization available	可申請授權	Connection type is not currently allowed but policy offers browser authorization.		Do not imply authorization already exists, is guaranteed, or is granted by viewing this list.	translation-reviewed	templates/index.html
+settings.server.applied	Saved	Applied	已套用	Server acknowledged one runtime setting update. It is not a permanent save.		Preserve result.status check; success does not establish durable storage.	translation-reviewed	templates/index.html
+settings.server.update_failed	Settings update failed.	Server settings update failed.	伺服器設定更新失敗。	Fallback only when backend message and error_code are absent.		Preserve backend messages and raw error codes; do not translate by string matching.	translation-reviewed	templates/index.html
+settings.server.update_denied	Low-risk settings update is denied.	Low-risk settings updates are not allowed.	不允許更新低風險設定。	Local capability guard before requesting a scoped grant or update.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.applying	Saving...	Applying…	正在套用…	Runtime update request is pending; no durable persistence claim.		Display data only. Preserve typed fields, raw runtime values, capabilities, and control flow.	translation-reviewed	templates/index.html
+settings.server.disconnected	Socket is disconnected.	Disconnected from Core.	與 Core 的連線已中斷。	Local synthetic diagnostic when snapshot is requested while the socket is disconnected.		Translate only this frontend-authored fallback; keep backend messages raw.	translation-reviewed	templates/index.html
+settings.server.risk_low	low	Low risk	低風險	Known typed schema risk classification used in the display badge.		Map only the exact known risk_level enum. Keep unknown nonempty values raw; no safety guarantee or authorization implication.	translation-reviewed	templates/index.html
+settings.server.risk_medium	medium	Medium risk	中風險	Known typed schema risk classification used in the display badge.		Map only the exact known risk_level enum. Keep unknown nonempty values raw; no safety guarantee or authorization implication.	translation-reviewed	templates/index.html
+settings.server.risk_high	high	High risk	高風險	Known typed schema risk classification used in the display badge.		Map only the exact known risk_level enum. Keep unknown nonempty values raw; no safety guarantee or authorization implication.	translation-reviewed	templates/index.html
+settings.server.scope_live	live	Live	即時生效	Known typed apply_scope classification in schema badge; descriptive metadata, not an available action.		Map only the exact known apply_scope enum; keep unknown nonempty values raw. Do not infer a Save or restart feature.	translation-reviewed	templates/index.html
+settings.server.scope_next_connection	next_connection	Next connection	後續連線	Known typed apply_scope classification in schema badge; descriptive metadata, not an available action.		Map only the exact known apply_scope enum; keep unknown nonempty values raw. Do not infer a Save or restart feature. Explicit connection inputs can override defaults; this label does not guarantee the next connection uses every default.	translation-reviewed	templates/index.html
+settings.server.scope_restart	restart	After restart	重新啟動後生效	Known typed apply_scope classification in schema badge; descriptive metadata, not an available action.		Map only the exact known apply_scope enum; keep unknown nonempty values raw. Do not infer a Save or restart feature.	translation-reviewed	templates/index.html
+settings.server.mutable	mutable	Runtime-mutable	可於執行期間變更	Schema mutable true means the field supports runtime changes, not that this viewer has permission.		Keep schemaItem.mutable behavior; actual controls remain subject to capability and lock checks.	translation-reviewed	templates/index.html
+settings.server.schema_read_only	read-only	Read-only	唯讀	Schema mutable false. Different from the snapshot low-risk permission summary.		Do not change mutation checks or imply that granting a capability makes this field runtime-editable.	translation-reviewed	templates/index.html
diff --git a/static/js/standterm-messages.js b/static/js/standterm-messages.js
index 912699f..16f500b 100644
--- a/static/js/standterm-messages.js
+++ b/static/js/standterm-messages.js
@@ -313,6 +313,46 @@
         "settings.reset_hint": "Immediately restores default browser preferences and reloads this page. Unsaved edits are lost and this page's temporary SSH tunnels stop. Saved SSH profiles and keys remain.",
         "settings.save": "Save preferences",
         "settings.save_scope_hint": "Saves General and Appearance preferences. Other settings have separate actions.",
+        "settings.server.allowed": "Allowed",
+        "settings.server.applied": "Applied",
+        "settings.server.apply": "Apply",
+        "settings.server.apply_hint": "Use each Apply button. Changes are shared across this Core instance and last until Core restarts. Connection defaults do not alter existing connections.",
+        "settings.server.applying": "Applying\u2026",
+        "settings.server.authorization_available": "Authorization available",
+        "settings.server.cap_manage_grants": "Manage settings grants",
+        "settings.server.cap_update_high": "Update high-risk settings",
+        "settings.server.cap_update_low": "Update low-risk settings",
+        "settings.server.cap_view": "View settings",
+        "settings.server.capabilities": "Permissions",
+        "settings.server.connections": "Connections",
+        "settings.server.default_connection": "Default connection",
+        "settings.server.denied": "Denied",
+        "settings.server.disabled": "Disabled",
+        "settings.server.disconnected": "Disconnected from Core.",
+        "settings.server.enabled": "Enabled",
+        "settings.server.forced_connection": "Forced connection",
+        "settings.server.https": "HTTPS",
+        "settings.server.loading": "Loading server settings\u2026",
+        "settings.server.mutable": "Runtime-mutable",
+        "settings.server.mutable_settings": "Low-risk runtime settings",
+        "settings.server.no_mutable_settings": "No low-risk runtime settings are available.",
+        "settings.server.none": "None",
+        "settings.server.read_only": "Runtime settings are read-only",
+        "settings.server.risk_high": "High risk",
+        "settings.server.risk_low": "Low risk",
+        "settings.server.risk_medium": "Medium risk",
+        "settings.server.runtime": "Core environment",
+        "settings.server.schema": "Settings schema",
+        "settings.server.schema_read_only": "Read-only",
+        "settings.server.scope_live": "Live",
+        "settings.server.scope_next_connection": "Next connection",
+        "settings.server.scope_restart": "After restart",
+        "settings.server.unavailable": "Server settings unavailable.",
+        "settings.server.unknown": "Unknown",
+        "settings.server.update_denied": "Low-risk settings updates are not allowed.",
+        "settings.server.update_failed": "Server settings update failed.",
+        "settings.server.version": "Settings revision",
+        "settings.server.writable": "Low-risk updates allowed",
         "settings.theme_preview_hint": "Preview only. Save preferences applies this theme.",
         "settings.title": "Settings",
         "settings.transfer.archive_checksum_failed": "Settings archive checksum failed.",
@@ -835,6 +875,46 @@
         "settings.reset_hint": "\u7acb\u5373\u9084\u539f\u700f\u89bd\u5668\u9810\u8a2d\u504f\u597d\u4e26\u91cd\u65b0\u8f09\u5165\u9801\u9762\u3002\u672a\u5132\u5b58\u7684\u7de8\u8f2f\u5c07\u907a\u5931\uff0c\u6b64\u9801\u9762\u7684\u66ab\u6642 SSH \u901a\u9053\u6703\u505c\u6b62\uff1b\u5df2\u5132\u5b58\u7684 SSH \u9023\u7dda\u8a2d\u5b9a\u8207\u91d1\u9470\u6703\u4fdd\u7559\u3002",
         "settings.save": "\u5132\u5b58\u504f\u597d\u8a2d\u5b9a",
         "settings.save_scope_hint": "\u5132\u5b58\u300c\u4e00\u822c\u300d\u8207\u300c\u5916\u89c0\u300d\u7684\u504f\u597d\u8a2d\u5b9a\u3002\u5176\u4ed6\u8a2d\u5b9a\u8acb\u500b\u5225\u64cd\u4f5c\u3002",
+        "settings.server.allowed": "\u5141\u8a31",
+        "settings.server.applied": "\u5df2\u5957\u7528",
+        "settings.server.apply": "\u5957\u7528",
+        "settings.server.apply_hint": "\u8acb\u4f7f\u7528\u5404\u9805\u8a2d\u5b9a\u7684\u300c\u5957\u7528\u300d\u6309\u9215\u3002\u8b8a\u66f4\u7531\u6b64 Core \u57f7\u884c\u500b\u9ad4\u7684\u6240\u6709\u4f7f\u7528\u8005\u5171\u7528\uff0c\u4e26\u4fdd\u7559\u5230 Core \u91cd\u65b0\u555f\u52d5\u70ba\u6b62\u3002\u9023\u7dda\u9810\u8a2d\u503c\u4e0d\u6703\u8b8a\u66f4\u65e2\u6709\u9023\u7dda\u3002",
+        "settings.server.applying": "\u6b63\u5728\u5957\u7528\u2026",
+        "settings.server.authorization_available": "\u53ef\u7533\u8acb\u6388\u6b0a",
+        "settings.server.cap_manage_grants": "\u7ba1\u7406\u8a2d\u5b9a\u6388\u6b0a",
+        "settings.server.cap_update_high": "\u66f4\u65b0\u9ad8\u98a8\u96aa\u8a2d\u5b9a",
+        "settings.server.cap_update_low": "\u66f4\u65b0\u4f4e\u98a8\u96aa\u8a2d\u5b9a",
+        "settings.server.cap_view": "\u6aa2\u8996\u8a2d\u5b9a",
+        "settings.server.capabilities": "\u6b0a\u9650",
+        "settings.server.connections": "\u9023\u7dda\u985e\u578b",
+        "settings.server.default_connection": "\u9810\u8a2d\u9023\u7dda",
+        "settings.server.denied": "\u4e0d\u5141\u8a31",
+        "settings.server.disabled": "\u5df2\u505c\u7528",
+        "settings.server.disconnected": "\u8207 Core \u7684\u9023\u7dda\u5df2\u4e2d\u65b7\u3002",
+        "settings.server.enabled": "\u5df2\u555f\u7528",
+        "settings.server.forced_connection": "\u5f37\u5236\u4f7f\u7528\u7684\u9023\u7dda",
+        "settings.server.https": "HTTPS",
+        "settings.server.loading": "\u6b63\u5728\u8f09\u5165\u4f3a\u670d\u5668\u8a2d\u5b9a\u2026",
+        "settings.server.mutable": "\u53ef\u65bc\u57f7\u884c\u671f\u9593\u8b8a\u66f4",
+        "settings.server.mutable_settings": "\u4f4e\u98a8\u96aa\u57f7\u884c\u968e\u6bb5\u8a2d\u5b9a",
+        "settings.server.no_mutable_settings": "\u76ee\u524d\u6c92\u6709\u53ef\u7528\u7684\u4f4e\u98a8\u96aa\u57f7\u884c\u968e\u6bb5\u8a2d\u5b9a\u3002",
+        "settings.server.none": "\u7121",
+        "settings.server.read_only": "\u57f7\u884c\u968e\u6bb5\u8a2d\u5b9a\u70ba\u552f\u8b80",
+        "settings.server.risk_high": "\u9ad8\u98a8\u96aa",
+        "settings.server.risk_low": "\u4f4e\u98a8\u96aa",
+        "settings.server.risk_medium": "\u4e2d\u98a8\u96aa",
+        "settings.server.runtime": "Core \u57f7\u884c\u74b0\u5883",
+        "settings.server.schema": "\u8a2d\u5b9a\u7d50\u69cb",
+        "settings.server.schema_read_only": "\u552f\u8b80",
+        "settings.server.scope_live": "\u5373\u6642\u751f\u6548",
+        "settings.server.scope_next_connection": "\u5f8c\u7e8c\u9023\u7dda",
+        "settings.server.scope_restart": "\u91cd\u65b0\u555f\u52d5\u5f8c\u751f\u6548",
+        "settings.server.unavailable": "\u7121\u6cd5\u53d6\u5f97\u4f3a\u670d\u5668\u8a2d\u5b9a\u3002",
+        "settings.server.unknown": "\u672a\u77e5",
+        "settings.server.update_denied": "\u4e0d\u5141\u8a31\u66f4\u65b0\u4f4e\u98a8\u96aa\u8a2d\u5b9a\u3002",
+        "settings.server.update_failed": "\u4f3a\u670d\u5668\u8a2d\u5b9a\u66f4\u65b0\u5931\u6557\u3002",
+        "settings.server.version": "\u8a2d\u5b9a\u4fee\u8a02\u865f",
+        "settings.server.writable": "\u5141\u8a31\u66f4\u65b0\u4f4e\u98a8\u96aa\u8a2d\u5b9a",
         "settings.theme_preview_hint": "\u50c5\u4f9b\u9810\u89bd\u3002\u6309\u4e0b\u300c\u5132\u5b58\u504f\u597d\u8a2d\u5b9a\u300d\u5f8c\u5957\u7528\u6b64\u914d\u8272\u3002",
         "settings.title": "\u8a2d\u5b9a",
         "settings.transfer.archive_checksum_failed": "\u8a2d\u5b9a\u5c01\u5b58\u6a94\u6821\u9a57\u5931\u6557\u3002",
diff --git a/templates/index.html b/templates/index.html
index 0c3b144..41686e7 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -1248,14 +1248,14 @@ <h3 data-i18n="settings.title">Settings</h3>
                         </fieldset>
                     </div>
                     <div class="settings-tab" id="tab-server">
-                        <div class="settings-status" id="server-settings-status">Loading...</div>
+                        <div class="settings-status" id="server-settings-status" data-i18n="settings.server.loading">Loading server settings…</div>
                         <fieldset class="settings-fieldset">
-                            <legend>Runtime</legend>
-                            <div class="settings-row"><label>Version</label><span class="settings-value" id="server-settings-version">--</span></div>
-                            <div class="settings-row"><label>Runtime</label><span class="settings-value" id="server-settings-runtime">--</span></div>
-                            <div class="settings-row"><label>Default connection</label><span class="settings-value" id="server-settings-default-connection">--</span></div>
-                            <div class="settings-row"><label>Forced connection</label><span class="settings-value" id="server-settings-forced-connection">--</span></div>
-                            <div class="settings-row"><label>HTTPS</label><span class="settings-value" id="server-settings-https">--</span></div>
+                            <legend data-i18n="settings.server.runtime">Core environment</legend>
+                            <div class="settings-row"><label data-i18n="settings.server.version">Settings revision</label><span class="settings-value" id="server-settings-version">--</span></div>
+                            <div class="settings-row"><label data-i18n="settings.server.runtime">Core environment</label><span class="settings-value" id="server-settings-runtime">--</span></div>
+                            <div class="settings-row"><label data-i18n="settings.server.default_connection">Default connection</label><span class="settings-value" id="server-settings-default-connection">--</span></div>
+                            <div class="settings-row"><label data-i18n="settings.server.forced_connection">Forced connection</label><span class="settings-value" id="server-settings-forced-connection">--</span></div>
+                            <div class="settings-row"><label data-i18n="settings.server.https">HTTPS</label><span class="settings-value" id="server-settings-https">--</span></div>
                         </fieldset>
                         <fieldset class="settings-fieldset">
                             <legend>Access recovery</legend>
@@ -1280,22 +1280,23 @@ <h3 data-i18n="settings.title">Settings</h3>
                             <div class="settings-status">Windows Hello, Touch ID, or another platform passkey can restore only a session that remains live in this StandTerm process. No access or session token is stored.</div>
                         </fieldset>
                         <fieldset class="settings-fieldset">
-                            <legend>Low-risk runtime settings</legend>
+                            <legend data-i18n="settings.server.mutable_settings">Low-risk runtime settings</legend>
+                            <div class="settings-status" id="server-settings-apply-hint" data-i18n="settings.server.apply_hint">Use each Apply button. Changes are shared across this Core instance and last until Core restarts. Connection defaults do not alter existing connections.</div>
                             <div id="server-settings-mutable-controls"></div>
                         </fieldset>
                         <fieldset class="settings-fieldset">
-                            <legend>Settings schema</legend>
+                            <legend data-i18n="settings.server.schema">Settings schema</legend>
                             <ul class="settings-list" id="server-settings-schema"></ul>
                         </fieldset>
                         <fieldset class="settings-fieldset">
-                            <legend>Capabilities</legend>
-                            <div class="settings-row"><label>View settings</label><span class="settings-value" id="server-cap-settings-view">--</span></div>
-                            <div class="settings-row"><label>Update low risk</label><span class="settings-value" id="server-cap-settings-update-low">--</span></div>
-                            <div class="settings-row"><label>Update high risk</label><span class="settings-value" id="server-cap-settings-update-high">--</span></div>
-                            <div class="settings-row"><label>Manage settings grants</label><span class="settings-value" id="server-cap-settings-auth-manage">--</span></div>
+                            <legend data-i18n="settings.server.capabilities">Permissions</legend>
+                            <div class="settings-row"><label data-i18n="settings.server.cap_view">View settings</label><span class="settings-value" id="server-cap-settings-view">--</span></div>
+                            <div class="settings-row"><label data-i18n="settings.server.cap_update_low">Update low-risk settings</label><span class="settings-value" id="server-cap-settings-update-low">--</span></div>
+                            <div class="settings-row"><label data-i18n="settings.server.cap_update_high">Update high-risk settings</label><span class="settings-value" id="server-cap-settings-update-high">--</span></div>
+                            <div class="settings-row"><label data-i18n="settings.server.cap_manage_grants">Manage settings grants</label><span class="settings-value" id="server-cap-settings-auth-manage">--</span></div>
                         </fieldset>
                         <fieldset class="settings-fieldset">
-                            <legend>Connections</legend>
+                            <legend data-i18n="settings.server.connections">Connections</legend>
                             <ul class="settings-list" id="server-settings-connections"></ul>
                         </fieldset>
                     </div>
@@ -11438,7 +11439,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             pipOption.addEventListener('click', moveActiveTerminalToPip);
 
             function formatSettingsFlag(value) {
-                return value ? 'Allowed' : 'Denied';
+                return t(value ? 'settings.server.allowed' : 'settings.server.denied');
             }
 
             function setSettingsText(id, value) {
@@ -11565,7 +11566,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     control.className = 'settings-control';
                     applyBtn.className = 'settings-inline-action';
                     applyBtn.type = 'button';
-                    applyBtn.textContent = 'Apply';
+                    applyBtn.textContent = t('settings.server.apply');
+                    applyBtn.setAttribute('aria-describedby', 'server-settings-apply-hint');
                     applyBtn.dataset.settingKey = settingKey;
                     input.disabled = !canUpdate || locked;
                     applyBtn.disabled = input.disabled;
@@ -11578,7 +11580,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 if (!rendered) {
                     const row = document.createElement('div');
                     row.className = 'settings-row';
-                    row.textContent = 'No low-risk mutable settings are available.';
+                    row.textContent = t('settings.server.no_mutable_settings');
                     container.appendChild(row);
                 }
             }
@@ -11588,14 +11590,16 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 if (!schemaEl) return;
                 schemaEl.replaceChildren();
                 if (!data || data.status !== 'ok') return;
+                const risks = { low: 'settings.server.risk_low', medium: 'settings.server.risk_medium', high: 'settings.server.risk_high' };
+                const scopes = { live: 'settings.server.scope_live', next_connection: 'settings.server.scope_next_connection', restart: 'settings.server.scope_restart' };
                 buildServerSettingSchemaItems(data).forEach(schemaItem => {
                     const item = document.createElement('li');
                     const label = document.createElement('span');
                     const badge = document.createElement('span');
                     const traits = [
-                        schemaItem.risk_level || 'unknown',
-                        schemaItem.apply_scope || 'unknown',
-                        schemaItem.mutable ? 'mutable' : 'read-only'
+                        Object.hasOwn(risks, schemaItem.risk_level) ? t(risks[schemaItem.risk_level]) : schemaItem.risk_level || t('settings.server.unknown'),
+                        Object.hasOwn(scopes, schemaItem.apply_scope) ? t(scopes[schemaItem.apply_scope]) : schemaItem.apply_scope || t('settings.server.unknown'),
+                        t(schemaItem.mutable ? 'settings.server.mutable' : 'settings.server.schema_read_only')
                     ];
                     label.textContent = `${getServerSettingLabel(schemaItem)} (${schemaItem.setting_key})`;
                     badge.className = 'settings-badge';
@@ -11606,7 +11610,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 });
                 if (!schemaEl.children.length) {
                     const item = document.createElement('li');
-                    item.textContent = 'None';
+                    item.textContent = t('settings.server.none');
                     schemaEl.appendChild(item);
                 }
             }
@@ -11633,7 +11637,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 connectionsEl.replaceChildren();
                 serverSettingsSnapshot = data && data.status === 'ok' ? data : null;
                 if (!data || data.status !== 'ok') {
-                    statusEl.textContent = data && data.message ? data.message : 'Settings unavailable.';
+                    statusEl.textContent = data && data.message ? data.message : t('settings.server.unavailable');
                     setSettingsText('server-settings-version', '--');
                     setSettingsText('server-settings-runtime', '--');
                     setSettingsText('server-settings-default-connection', '--');
@@ -11648,12 +11652,12 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 }
                 const settings = data.effective_settings || {};
                 const capabilities = data.capabilities || {};
-                statusEl.textContent = data.read_only ? 'Read-only' : 'Writable';
+                statusEl.textContent = t(data.read_only ? 'settings.server.read_only' : 'settings.server.writable');
                 setSettingsText('server-settings-version', data.settings_version);
                 setSettingsText('server-settings-runtime', settings.runtime_name);
                 setSettingsText('server-settings-default-connection', settings.default_connection_type);
-                setSettingsText('server-settings-forced-connection', settings.force_connection_type || 'None');
-                setSettingsText('server-settings-https', settings.https_enabled ? 'Enabled' : 'Disabled');
+                setSettingsText('server-settings-forced-connection', settings.force_connection_type || t('settings.server.none'));
+                setSettingsText('server-settings-https', t(settings.https_enabled ? 'settings.server.enabled' : 'settings.server.disabled'));
                 setSettingsText('server-cap-settings-view', formatSettingsFlag(capabilities.settings_view && capabilities.settings_view.allowed));
                 setSettingsText('server-cap-settings-update-low', formatSettingsFlag(capabilities.settings_update_low_risk && capabilities.settings_update_low_risk.allowed));
                 setSettingsText('server-cap-settings-update-high', formatSettingsFlag(capabilities.settings_update_high_risk && capabilities.settings_update_high_risk.allowed));
@@ -11664,15 +11668,15 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     const item = document.createElement('li');
                     const label = document.createElement('span');
                     const badge = document.createElement('span');
-                    label.textContent = connection.label || connection.connection_type || 'unknown';
+                    label.textContent = connection.label || connection.connection_type || t('settings.server.unknown');
                     badge.className = 'settings-badge';
-                    badge.textContent = connection.allowed ? 'Allowed' : connection.authorization_available ? 'Authorization available' : 'Denied';
+                    badge.textContent = t(connection.allowed ? 'settings.server.allowed' : connection.authorization_available ? 'settings.server.authorization_available' : 'settings.server.denied');
                     item.append(label, badge);
                     connectionsEl.appendChild(item);
                 });
                 if (!connectionTypes.length) {
                     const item = document.createElement('li');
-                    item.textContent = 'None';
+                    item.textContent = t('settings.server.none');
                     connectionsEl.appendChild(item);
                 }
             }
@@ -11681,10 +11685,10 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const statusEl = document.getElementById('server-settings-status');
                 if (!statusEl || !data) return;
                 if (data.status === 'ok') {
-                    statusEl.textContent = 'Saved';
+                    statusEl.textContent = t('settings.server.applied');
                     return;
                 }
-                statusEl.textContent = data.message || data.error_code || 'Settings update failed.';
+                statusEl.textContent = data.message || data.error_code || t('settings.server.update_failed');
             }
 
             function handleServerSettingsAdminGrant(data) {
@@ -11731,11 +11735,11 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 if (!schemaItem || !input) return;
                 const canUpdate = canUpdateServerSetting(schemaItem, serverSettingsSnapshot);
                 if (!canUpdate) {
-                    if (statusEl) statusEl.textContent = 'Low-risk settings update is denied.';
+                    if (statusEl) statusEl.textContent = t('settings.server.update_denied');
                     return;
                 }
                 const grant = await requestSettingsAdminGrant();
-                if (statusEl) statusEl.textContent = 'Saving...';
+                if (statusEl) statusEl.textContent = t('settings.server.applying');
                 socket.emit('settings_update_request', {
                     request_id: `settings-${Date.now()}`,
                     setting_key: settingKey,
@@ -11748,11 +11752,11 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
 
             function requestServerSettingsSnapshot() {
                 const statusEl = document.getElementById('server-settings-status');
-                if (statusEl) statusEl.textContent = 'Loading...';
+                if (statusEl) statusEl.textContent = t('settings.server.loading');
                 if (!socket || !socket.connected) {
                     renderServerSettingsSnapshot({
                         status: 'failed',
-                        message: 'Socket is disconnected.'
+                        message: t('settings.server.disconnected')
                     });
                     return;
                 }
diff --git a/tests/agent_browser_smoke.py b/tests/agent_browser_smoke.py
index 3439944..45c9e1b 100644
--- a/tests/agent_browser_smoke.py
+++ b/tests/agent_browser_smoke.py
@@ -4006,14 +4006,17 @@ def test_osc_title_updates_fixed_status_column(browser, access_url):
         close_context(context)
 
 
-def test_settings_server_tab_loads_readonly_snapshot(browser, access_url):
-    context, page = new_page(browser, access_url)
+def test_settings_server_tab_loads_readonly_snapshot(browser, access_url, ui_language='en'):
+    context, page = new_page(browser, access_url, ui_language)
     try:
+        def text(key):
+            return page.evaluate("key => StandTermI18n.create(StandTermMessages, document.documentElement.lang).t(key)", key)
+
         page.click('#quick-settings')
         page.wait_for_selector('#settings-modal.open', timeout=5000)
         page.click('.settings-nav-item[data-tab="server"]')
         page.wait_for_function(
-            "() => ['Read-only', 'Writable'].includes(document.getElementById('server-settings-status')?.textContent)",
+            "() => document.querySelector('#server-settings-mutable-controls .server-setting-input') !== null",
             timeout=5000,
         )
         state = page.evaluate(
@@ -4039,10 +4042,11 @@ def test_settings_server_tab_loads_readonly_snapshot(browser, access_url):
                 connectionCount: document.querySelectorAll('#server-settings-connections li').length
             })"""
         )
-        check(state['version'] == '1', 'settings server tab did not show settings version')
-        check(state['view'] == 'Allowed', 'settings server tab did not show view capability')
-        check(state['low'] == 'Allowed', 'settings server tab did not expose local low-risk writes')
-        check(state['high'] == 'Denied', 'settings server tab exposed high-risk writes')
+        check(state['version'].isdigit() and int(state['version']) >= 1, 'settings server tab did not show settings version')
+        check(page.inner_text('#server-settings-status') == text('settings.server.writable'), 'settings server tab did not localize write capability')
+        check(state['view'] == text('settings.server.allowed'), 'settings server tab did not show view capability')
+        check(state['low'] == text('settings.server.allowed'), 'settings server tab did not expose local low-risk writes')
+        check(state['high'] == text('settings.server.denied'), 'settings server tab exposed high-risk writes')
         check(state['selectedDefault'], 'settings server tab did not populate default connection control')
         check('default_connection_type' in state['mutableKeys'], 'settings server tab did not render core mutable control')
         check('uart.default_baud_rate' in state['mutableKeys'], 'settings server tab did not render UART mutable control')
@@ -4078,16 +4082,19 @@ def test_settings_server_tab_loads_readonly_snapshot(browser, access_url):
         local_shell_payload = get_emitted(page, 'settings_update_request')[-1]['args'][0]
         check(local_shell_payload['setting_key'] == 'local_shell.default_kind', 'Local Shell update did not use typed setting_key')
         check(local_shell_payload['value'] == selected_shell_kind, 'Local Shell update did not send selected shell kind')
+        check(local_shell_payload['expected_version'] == int(state['version']), 'Local Shell update did not bind displayed settings version')
         check(local_shell_payload.get('expected_schema_digest'), 'Local Shell update did not include expected schema digest')
         page.wait_for_function(
-            """target => document.querySelector(
+            """({target, version}) => document.querySelector(
                     '#server-settings-mutable-controls .server-setting-input[data-setting-key="local_shell.default_kind"]'
                 )?.value === target
-                && document.getElementById('local-shell-kind')?.value === target""",
-            arg=selected_shell_kind,
+                && document.getElementById('local-shell-kind')?.value === target
+                && Number(document.getElementById('server-settings-version').textContent) > version""",
+            arg={'target': selected_shell_kind, 'version': int(state['version'])},
             timeout=10000,
         )
         clear_emitted(page)
+        uart_version = int(page.inner_text('#server-settings-version'))
         selected_baud = page.evaluate(
             """() => {
                 const input = document.querySelector(
@@ -4113,6 +4120,7 @@ def test_settings_server_tab_loads_readonly_snapshot(browser, access_url):
         update_payload = get_emitted(page, 'settings_update_request')[-1]['args'][0]
         check(update_payload['setting_key'] == 'uart.default_baud_rate', 'UART update did not use typed setting_key')
         check(int(update_payload['value']) == int(selected_baud), 'UART update did not send selected baud value')
+        check(update_payload['expected_version'] == uart_version, 'UART update did not bind displayed settings version')
         check(update_payload.get('expected_schema_digest'), 'UART update did not include expected schema digest')
     finally:
         close_context(context)
diff --git a/tests/server_settings_i18n_browser_smoke.py b/tests/server_settings_i18n_browser_smoke.py
new file mode 100644
index 0000000..bb1cd65
--- /dev/null
+++ b/tests/server_settings_i18n_browser_smoke.py
@@ -0,0 +1,244 @@
+"""Check localized runtime settings against typed schemas and single-setting writes."""
+import json
+from urllib.parse import urlparse
+
+import agent_browser_smoke as fixture
+from settings_transfer_i18n_browser_smoke import message
+
+
+RAW_LABEL = 'Plugin <b>& {setting}'
+RAW_OPTION = 'future_<b>& {value}'
+RAW_ERROR = 'Backend <b>& {detail}'
+DIGEST = 'ab' * 32
+
+
+def snapshot(allowed=True):
+    def item(key, kind, **extra):
+        return dict(setting_key=key, label=RAW_LABEL + ' ' + key, value_type=kind,
+                    risk_level='low', apply_scope='live', mutable=True,
+                    required_capability='settings_update_low_risk', **extra)
+
+    schema = [item('plugin.enabled', 'boolean'),
+              item('plugin.count', 'integer', min_value=1, max_value=50),
+              item('plugin.mode', 'enum', allowed_values=['plain', RAW_OPTION]),
+              item('plugin.locked', 'boolean')]
+    schema[1]['apply_scope'] = 'next_connection'
+    schema[2]['apply_scope'] = 'restart'
+    schema.extend([
+        dict(setting_key='plugin.medium', label=RAW_LABEL, risk_level='medium',
+             apply_scope='live', mutable=False),
+        dict(setting_key='plugin.high', label=RAW_LABEL, risk_level='high',
+             apply_scope='restart', mutable=False),
+        dict(setting_key='plugin.future', label=RAW_LABEL,
+             risk_level='future_<b>& {risk}', apply_scope='future_<b>& {scope}', mutable=False),
+    ])
+    return dict(status='ok', read_only=not allowed, settings_version=37,
+                settings_schema_digest=DIGEST, settings_schema=dict(core=[], plugins=schema),
+                effective_settings=dict(runtime_name='Fixture <b>& {runtime}',
+                    default_connection_type='plugin_raw', force_connection_type=None, https_enabled=True,
+                    connection_types=[dict(connection_type='plugin_raw', label=RAW_LABEL, allowed=True),
+                                      dict(connection_type='needs_grant', authorization_available=True),
+                                      dict(connection_type='denied_raw', allowed=False)]),
+                mutable_settings={'plugin.enabled':dict(value=False), 'plugin.count':dict(value=7),
+                                  'plugin.mode':dict(value='plain'), 'plugin.locked':dict(value=True, locked=True)},
+                capabilities={name:dict(allowed=value) for name, value in {
+                    'settings_view':True, 'settings_update_low_risk':allowed,
+                    'settings_update_high_risk':False, 'settings_auth_manage':False}.items()})
+
+
+def new_page(browser, url, locale, allowed=True):
+    context = browser.new_context(viewport={'width':1280, 'height':800}, locale='en-US')
+    page = context.new_page()
+    requests = []
+    page.on('request', lambda request: requests.append(urlparse(request.url).path))
+    # Intercept only settings requests; the app still uses its real Socket.IO connection.
+    page.add_init_script("""(() => {
+        localStorage.setItem('terminal.pref.v1', JSON.stringify({uiLanguage:%s}));
+        const fixture = window.serverSettingsFixture = {snapshot:%s, requests:[]};
+        let factory;
+        Object.defineProperty(window, 'io', {
+            configurable:true, get:() => factory,
+            set:value => {factory = new Proxy(value, {apply(target, receiver, args) {
+                const socket = Reflect.apply(target, receiver, args);
+                const emit = socket.emit;
+                fixture.receive = (event, data) => socket.onevent({data:[event, data]});
+                socket.emit = function(event, ...args) {
+                    if (['settings_snapshot_request','settings_admin_grant_request','settings_update_request'].includes(event)) {
+                        fixture.requests.push({event,args:structuredClone(args)});
+                        if (event === 'settings_snapshot_request') {
+                            queueMicrotask(() => fixture.receive('settings_snapshot', structuredClone(fixture.snapshot)));
+                        } else if (event === 'settings_admin_grant_request') {
+                            queueMicrotask(() => fixture.receive('settings_admin_grant', {
+                                status:'ok', grant_id:'fixture-grant', expires_at:Date.now()/1000+120
+                            }));
+                        }
+                        return this;
+                    }
+                    return emit.call(this, event, ...args);
+                };
+                return socket;
+            }});}
+        });
+    })();""" % (json.dumps(locale), json.dumps(snapshot(allowed))))
+    page.goto(fixture.debug_url(url), wait_until='domcontentloaded')
+    page.wait_for_function('() => window.terminalTest?.getSocketState().connected === true')
+    page.add_style_tag(content='#debug-hud, #payload-log {display:none !important;}')
+    page.evaluate('() => window.terminalTest.captureTerminalIoForTest()')
+    open_server(page)
+    return context, page, requests
+
+
+def open_server(page):
+    if not page.locator('#settings-modal').evaluate("element => element.classList.contains('open')"):
+        page.click('#quick-settings')
+    page.click('.settings-nav-item[data-tab="server"]')
+    page.wait_for_function("() => document.getElementById('server-settings-version').textContent === '37'")
+
+
+def receive(page, event, data):
+    page.evaluate('({event,data}) => window.serverSettingsFixture.receive(event,data)', dict(event=event, data=data))
+
+
+def writes(page):
+    return page.evaluate("() => window.serverSettingsFixture.requests.filter(item => item.event !== 'settings_snapshot_request')")
+
+
+def control(page, key, tag='.server-setting-input'):
+    return page.locator(f'#server-settings-mutable-controls {tag}[data-setting-key="{key}"]')
+
+
+def status(page, key):
+    assert page.inner_text('#server-settings-status') == message(page, 'settings.server.' + key)
+
+
+def test_schema_permissions_and_raw_values(browser, url, locale):
+    context, page, requests = new_page(browser, url, locale)
+    try:
+        status(page, 'writable')
+        for element in page.locator('#tab-server [data-i18n^="settings.server."]').all():
+            if element.get_attribute('id') == 'server-settings-status':
+                continue
+            assert element.text_content() == message(page, element.get_attribute('data-i18n'))
+        assert page.inner_text('#server-settings-runtime') == 'Fixture <b>& {runtime}'
+        assert page.inner_text('#server-settings-default-connection') == 'plugin_raw'
+        assert page.inner_text('#server-settings-forced-connection') == message(page, 'settings.server.none')
+        assert page.inner_text('#server-settings-https') == message(page, 'settings.server.enabled')
+        assert control(page, 'plugin.enabled').get_attribute('type') == 'checkbox'
+        assert control(page, 'plugin.count').get_attribute('type') == 'number'
+        assert control(page, 'plugin.count').get_attribute('min') == '1'
+        assert control(page, 'plugin.count').get_attribute('max') == '50'
+        assert control(page, 'plugin.mode').locator('option').all_text_contents() == ['plain', RAW_OPTION]
+        assert control(page, 'plugin.mode').locator('option').evaluate_all('items => items.map(item => item.value)') == ['plain', RAW_OPTION]
+        for index, item in enumerate(snapshot()['settings_schema']['plugins']):
+            row = page.locator(f'#server-settings-schema li[data-setting-key="{item["setting_key"]}"]')
+            assert row.locator('span').first.text_content() == item['label'] + ' (' + item['setting_key'] + ')'
+            expected = [message(page, 'settings.server.risk_' + item['risk_level']) if index < 6 else item['risk_level'],
+                        message(page, 'settings.server.scope_' + item['apply_scope']) if index < 6 else item['apply_scope'],
+                        message(page, 'settings.server.mutable' if item['mutable'] else 'settings.server.schema_read_only')]
+            assert row.locator('.settings-badge').inner_text() == ' / '.join(expected)
+        assert page.locator('#server-settings-connections li > span:first-child').all_text_contents() == [RAW_LABEL,'needs_grant','denied_raw']
+        assert page.locator('#server-settings-connections .settings-badge').all_text_contents() == [
+            message(page, 'settings.server.' + key) for key in ['allowed','authorization_available','denied']]
+        assert page.locator('#tab-server b').count() == 0
+        assert control(page, 'plugin.locked').is_disabled()
+        assert control(page, 'plugin.locked', 'button').is_disabled()
+        control(page, 'plugin.locked', 'button').evaluate('element => element.click()')
+        assert writes(page) == []
+
+        receive(page, 'settings_snapshot', snapshot(False))
+        status(page, 'read_only')
+        assert page.inner_text('#server-cap-settings-update-low') == message(page, 'settings.server.denied')
+        for key in ['plugin.enabled','plugin.count','plugin.mode','plugin.locked']:
+            assert control(page, key).is_disabled() and control(page, key, 'button').is_disabled()
+        # Exercise the capability guard independently of native disabled-button suppression.
+        control(page, 'plugin.enabled', 'button').evaluate("element => element.dispatchEvent(new Event('click'))")
+        status(page, 'update_denied')
+        assert writes(page) == []
+        assert '/access-url' not in requests
+        assert page.locator('#server-access-url').text_content() == ''
+
+        page.set_viewport_size({'width':480,'height':600})
+        for row in page.locator('#server-settings-mutable-controls .settings-row').all():
+            row.scroll_into_view_if_needed()
+            metrics = row.evaluate("""row => {
+                const label = row.querySelector('label'), control = row.querySelector('.settings-control');
+                const a = label.getBoundingClientRect(), b = control.getBoundingClientRect(), r = row.getBoundingClientRect();
+                return {key:row.dataset.settingKey, noOverflow:row.scrollWidth <= row.clientWidth+1,
+                    labelFits:label.scrollWidth <= label.clientWidth+1,
+                    contained:a.left >= r.left-1 && a.right <= r.right+1 && b.left >= r.left-1 && b.right <= r.right+1,
+                    separate:a.right <= b.left+1 || a.bottom <= b.top+1};
+            }""")
+            assert metrics['noOverflow'] and metrics['labelFits'] and metrics['contained'] and metrics['separate'], metrics
+        assert writes(page) == []
+        receive(page, 'settings_snapshot', dict(status='failed', message=RAW_ERROR))
+        assert page.inner_text('#server-settings-status') == RAW_ERROR
+        assert page.locator('#server-settings-mutable-controls').text_content() == ''
+        assert page.inner_text('#server-settings-version') == '--'
+        receive(page, 'settings_snapshot', dict(status='failed'))
+        status(page, 'unavailable')
+    finally:
+        fixture.close_context(context)
+
+
+def test_apply_keeps_typed_values_and_grant_binding(browser, url, locale):
+    context, page, requests = new_page(browser, url, locale)
+    try:
+        control(page, 'plugin.count').fill('11')
+        page.click('#settings-save')
+        assert writes(page) == [], 'Footer Save submitted a runtime setting'
+        open_server(page)
+        control(page, 'plugin.enabled').check()
+        control(page, 'plugin.count').fill('23')
+        control(page, 'plugin.mode').select_option(RAW_OPTION)
+        control(page, 'plugin.mode').locator('option').last.evaluate("element => {element.textContent = 'Display-only <b>& {value}';}")
+        for index, (key, value) in enumerate([('plugin.enabled',True),('plugin.count',23),('plugin.mode',RAW_OPTION)]):
+            assert control(page, key, 'button').inner_text() == message(page, 'settings.server.apply')
+            control(page, key, 'button').click()
+            page.wait_for_function("count => window.serverSettingsFixture.requests.filter(item => item.event === 'settings_update_request').length === count", arg=index+1)
+            status(page, 'applying')
+            emitted = writes(page)
+            grants = [item for item in emitted if item['event'] == 'settings_admin_grant_request']
+            assert grants == [dict(event='settings_admin_grant_request', args=[dict(capability='settings_update_low_risk')])]
+            updates = [item for item in emitted if item['event'] == 'settings_update_request']
+            assert len(updates) == index+1
+            payload = updates[-1]['args'][0]
+            request_id = payload.pop('request_id')
+            assert request_id.startswith('settings-') and request_id[9:].isdigit()
+            assert payload == dict(setting_key=key, value=value, expected_version=37,
+                                   expected_schema_digest=DIGEST, grant_id='fixture-grant')
+            assert type(payload['value']) is type(value)
+            receive(page, 'settings_update_result', dict(status='ok', request_id=request_id))
+            status(page, 'applied')
+        before = writes(page)
+        for result, expected in [(dict(status='failed',message=RAW_ERROR,error_code='ignored'),RAW_ERROR),
+                                 (dict(status='failed',error_code='raw_<b>& {code}'),'raw_<b>& {code}'),
+                                 (dict(status='failed'),message(page, 'settings.server.update_failed'))]:
+            receive(page, 'settings_update_result', result)
+            assert page.inner_text('#server-settings-status') == expected
+            assert page.locator('#server-settings-status b').count() == 0
+            assert writes(page) == before
+        assert '/access-url' not in requests
+    finally:
+        fixture.close_context(context)
+
+
+def main():
+    proc, url = fixture.start_server()
+    try:
+        with fixture.load_playwright()[0]() as playwright:
+            browser = playwright.chromium.launch(headless=True)
+            try:
+                for locale in ['en','zh-TW']:
+                    for test in [fixture.test_settings_server_tab_loads_readonly_snapshot,
+                                 test_schema_permissions_and_raw_values,
+                                 test_apply_keeps_typed_values_and_grant_binding]:
+                        test(browser, url, locale)
+                        print(f'{test.__name__} ({locale}): PASS', flush=True)
+            finally:
+                browser.close()
+    finally:
+        fixture.stop_server(proc)
+
+
+if __name__ == '__main__':
+    main()

From 6d42af841fef2f62aa60725651be0c1265d852ec Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sun, 20 Sep 2026 03:45:25 +0800
Subject: [PATCH 26/43] Complete browser localization and action feedback

---
 README.md                              |  17 +-
 docs/agent_ui_review_plan.md           |  63 ++-
 docs/browser_ui_acceptance.md          |  65 +++
 docs/ui_copy_review.tsv                | 236 ++++++++++
 static/js/standterm-messages.js        | 472 +++++++++++++++++++
 templates/index.html                   | 624 +++++++++++++------------
 tests/agent_browser_smoke.py           | 223 +++++----
 tests/browser_completion_i18n_smoke.py | 322 +++++++++++++
 8 files changed, 1625 insertions(+), 397 deletions(-)
 create mode 100644 docs/browser_ui_acceptance.md
 create mode 100644 tests/browser_completion_i18n_smoke.py

diff --git a/README.md b/README.md
index 470999a..745a241 100644
--- a/README.md
+++ b/README.md
@@ -324,13 +324,12 @@ token 3× buttons remain beside Pause Agent when the Agent panel is hidden, and
 terminal; compact windows keep those actions in the Agent panel.
 
 **Settings > General > Language (preview)** selects English or Traditional
-Chinese (Taiwan) for browser access and recovery, Agent permissions, input and
-file-copy approvals, transfer results, local connection information, connection
-forms, SSH login, SSH profile/route editors (including browser-key and
-host-fingerprint controls), settings navigation, General/Appearance preferences,
-settings import/export, user SSH tunnel controls, Agent Tunnel setup/status, and
-Server runtime settings. Server access-URL and passkey-management controls,
-plugin labels and backend diagnostics remain in their original language. The choice
+Chinese (Taiwan) for the browser interface, including access and device recovery,
+Agent permissions and approvals, connection/profile/route editors, settings,
+tunnels, Files, and terminal popup/PiP controls. Terminal content, copyable
+commands, plugin labels, technical validation errors and raw diagnostics retain
+their original text. Native Desktop menus and windows are outside this coverage.
+The choice
 applies the next time the page opens; saving it does not reload the current
 page or change its connections and grants. Other areas remain in English.
 **Save preferences** stores the General and Appearance preference fields.
@@ -342,7 +341,9 @@ Server runtime settings use individual **Apply** buttons. Their changes are shar
 across the Core instance and last until Core restarts. Connection defaults do not
 alter existing connections.
 The [copy and translation table](docs/ui_copy_review.tsv) and
-[localization plan](docs/agent_ui_review_plan.md) describe the review workflow.
+[localization plan](docs/agent_ui_review_plan.md) describe the review workflow;
+the [browser acceptance record](docs/browser_ui_acceptance.md) defines the
+tested scope and retained raw data.
 
 This development build also enables an **experimental IME positioning PoC**:
 the composition overlay follows its starting input line during terminal redraws.
diff --git a/docs/agent_ui_review_plan.md b/docs/agent_ui_review_plan.md
index 7a55dbd..b4ddaa8 100644
--- a/docs/agent_ui_review_plan.md
+++ b/docs/agent_ui_review_plan.md
@@ -5,6 +5,14 @@
 Complete reliability fixes before changing UI copy or introducing localization.
 The traverse brief is review input, not a requirement to expand public discovery.
 
+The current completion target is the browser interface, including Files and
+terminal popup/PiP windows, followed by bilingual acceptance. Native Desktop
+menus, setup and windows are a separate phase. Backend/plugin diagnostics,
+terminal content, exported diagnostic records and protocol identifiers remain
+literal data; their English text does not prevent browser-interface acceptance.
+Remaining work proceeds through Server recovery, diagnostic and paste controls,
+Files and secondary-window copy, then an inventory and regression pass.
+
 | Decision | Resolution |
 | --- | --- |
 | Tokenless agentinfo | Keep the limited bootstrap and handoff index. Do not expose all ungranted terminals or add localization metadata. |
@@ -43,8 +51,8 @@ do not consolidate them merely to shorten labels.
 | 3 | Review English UI copy and terminology | Core terms agreed; initial English sources reviewed | Review each proposed change for target, permissions, consequences, and next action; check related tooltips, Desktop help, and tests before applying it. |
 | 4 | Finalize the translation exchange table | Initial exchange validated with an independent translator | Stable keys, approved English source, context, and placeholder constraints are sufficient for an independent translator. |
 | 5 | Pilot Agent access and local connection information | Implemented; validation below | Cover static and dynamic text, titles, and accessible names; preserve connected sessions and authorization; support English fallback. |
-| 6 | Translate and integrate approved rows | Agent pilot, browser access/recovery, Agent approvals/transfers, connection/login controls, SSH route/profile editors, General/Appearance settings, settings transfer, user SSH tunnels, Agent Tunnel and Server runtime settings integrated | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
-| 7 | Expand Core and Desktop coverage | Deferred | Verify secondary windows, native menus, setup, diagnostics, packaging, and representative layouts. |
+| 6 | Translate and integrate approved rows | Browser workflows integrated; acceptance record below | AI edits only target-language cells; validate keys and placeholders; review authorization and destructive-action wording. |
+| 7 | Expand native Desktop coverage | Separate phase | Verify native menus, setup, diagnostics, packaging, and representative layouts. |
 
 ## Validation of the reliability changes
 
@@ -66,9 +74,9 @@ validated separately below.
 
 ## Deferred UI work
 
-Agent diagnostics, Server access recovery, Diagnostics settings, secondary windows,
-and Desktop localization remain outside the completed workflows. Translation
-starts only after the English source for the selected workflow is reviewed.
+Native Desktop localization and translation of raw technical diagnostics remain
+outside the completed browser workflows. Translation starts only after the
+English source for the selected workflow is reviewed.
 Extra screen diffing, render hints, key aliases, and byte-limit options remain optional optimizations.
 Unverified UART end-to-end coverage is a qualification gap, not evidence that
 UART is broken.
@@ -615,3 +623,48 @@ Validation uses WSL Chromium and local backend fixtures; native Desktop was not
 qualified. The next executable step is a separate review of Server access-URL
 and passkey-recovery actions, including clipboard success and removal wording,
 before translating that workflow. No policy choice remains unresolved here.
+
+## Browser completion and acceptance
+
+The operator selected browser completion as this phase's endpoint. Another 236
+reviewed messages cover Server access/device recovery, diagnostics controls,
+paste, remaining chrome and Agent diagnostic headings, Files and terminal
+popup/PiP windows. The catalog has 796 bilingual messages and one removal row.
+The [acceptance record](browser_ui_acceptance.md) defines coverage, raw-data
+exclusions and reproducible entry points. Desktop remains a separate phase.
+
+| Finding | Severity | Evidence | Critic remedy | Main response | Resolution | Validation |
+| --- | --- | --- | --- | --- | --- | --- |
+| Clipboard failure still reports success | Medium | copyToClipboard and Access URL/diagnostic callers | Say requested, or await a result | Modify | Helper returns a success boolean; callers await the existing native/fallback paths | Pending, success, rejected native API, fallback success/failure and no automatic reveal in both languages |
+| Paste string length is mislabeled bytes | Medium | startPasteReview uses text.length | Name the actual units or omit the size | Modify | Show target and line count; preserve review and encoding rules | Literal multilingual payload, cancel/approve and original focus/target anti-mismatch cases |
+| Passkey removal wording overstates OS deletion | Medium | session_recovery RP-scoped registration removal | Distinguish registration, live-session enablement and revocation | Accept | Scoped confirmation and revoking registrations; clarify no token persistence | Exact ceremony/binary fields, typed status, cancel/no request and hostname scope in the browser fixture |
+| Passkey status refresh overwrites an operation error | Medium | Register/arm/remove finally refresh | Preserve feedback while refreshing controls | Accept | Status refresh accepts display feedback only; capability checks remain typed | Registration/removal errors remain visible after refresh; unavailable status still disables controls |
+| Files unknown outcome conflicts with generic retry advice | Medium | handleFilesCopyResult and file_copy_publish_outcome_unknown | Use the existing error enum in lifecycle guidance | Accept | Both messages require destination inspection; no replay | Existing copy-result cases in both languages; commit barrier and cancellation guards remain intact |
+| Translation can affect rename validity or replace child markup | Medium, integration guard | getSftpRenameValidation and child HTML creation | Keep validation typed and apply text safely | Accept | Stable key/null validation; declarative attributes plus uiText.apply on child subtrees | Rename/copy/delete and changed-label tests preserve exact IDs, values and actions |
+| Download dispatch does not prove completion | Low | startPreparedSftpDownload | Describe download start | Accept | Download started label | Existing download ticket and one-use browser dispatch checks |
+| Duplicate translation attributes and token-storage overstatement | Low | Final independent pass | Remove duplicate attributes; say persist | Accept | Four duplicates removed; live memory binding distinguished from persistence | Static attribute inspection, catalog checks and retained WebAuthn flow |
+
+Two bounded independent decision-review passes found no remaining blocking
+correctness issue. A separate eight-check inventory covered fixed labels,
+titles, accessibility names and child documents; three small fallbacks were
+added. English model/key/signing diagnostics remain explicit raw-data exclusions,
+along with backend/plugin messages, logs, commands, paths and identifiers.
+Public discovery, grants, defaults, schema, backend behavior and typed payloads
+were not changed. No new policy choice or approval step was introduced.
+
+| Check | Result |
+| --- | --- |
+| New completion suite | Four focused cases plus three existing guard cases in each language: 14 passed. |
+| Files and terminal PiP | Three existing operation cases in each language: six passed, including narrow child-window controls, rename, two-step deletion, conflict/copy state and target binding. |
+| Existing bilingual workflows | All eight suites passed: connections, SSH editors, settings transfer, preferences, appearance, Server runtime, SSH tunnels and Agent Tunnel. |
+| Browser popup integration | Chromium input, Files transition, close/reload/navigation restoration and blocked-popup retry passed; zero navigation-close gaps. |
+| Backend regression | All 169 passed on the full rerun. The first run had a headless-screen quiet-wait timing failure; that case passed in isolation before the full rerun. |
+| Complete browser regression | All 56 cases passed across runs: 43 in the full invocation, then the remaining 13 after fixing the Server test's snapshot-ready wait. Localized Session ID and observation assertions now compare complete labels plus raw IDs/counts. This is complete case coverage, not a claim that the first full invocation exited successfully. |
+| Catalog and source checks | Six exporter and six lookup tests passed. All 796 message keys are referenced and both locales have matching keys; generated-catalog freshness, inline JavaScript/Python syntax and diff checks passed. |
+
+Validation uses WSL Chromium and local fixtures, including a virtual WebAuthn
+authenticator. Physical Windows Hello/Touch ID devices, other browser engines,
+native Desktop and packaged releases are not qualified by these results. The
+endpoint is browser-interface acceptance within the documented data boundary;
+further Desktop or typed diagnostic localization requires a separately selected
+scope.
diff --git a/docs/browser_ui_acceptance.md b/docs/browser_ui_acceptance.md
new file mode 100644
index 0000000..f8ef4a9
--- /dev/null
+++ b/docs/browser_ui_acceptance.md
@@ -0,0 +1,65 @@
+# Browser localization acceptance
+
+## Scope
+
+The completion target is the English and Traditional Chinese (Taiwan) browser
+interface. It includes the initial access page, session recovery, connection and
+SSH editors, Agent access and approvals, settings, tunnels, diagnostics controls,
+paste review, Files, and terminal popup/PiP windows. Native Desktop menus, setup
+and native windows are a separate phase. Language changes still take effect on
+the next page open; saving preferences does not disconnect the current page.
+
+The editable translation source is [ui_copy_review.tsv](ui_copy_review.tsv).
+It contains 796 bilingual messages and one removal row. Stable keys, English
+source, context and placeholder constraints accompany each target-language cell
+so translation can be delegated without changing protocol or UI behavior.
+
+## Display and data boundary
+
+| Surface | Translated | Retained verbatim |
+| --- | --- | --- |
+| Connections, SSH routes and settings | Product labels, actions, authored instructions and known state labels | Hosts, usernames, paths, key references, fingerprints, plugin labels/options, setting keys and values |
+| Agent and transfer panels | Permission labels, action controls, result guidance and diagnostic headings | Tokens, copyable prompts/commands, URLs, binding IDs, action/privacy enums and error codes |
+| Diagnostics | Navigation, counts, Clear, Copy and clipboard result | Export headers, timestamps, event names, IDs and sanitized JSON details |
+| Files | Navigation, actions, confirmation, progress and result guidance | Filenames, endpoint paths, byte values, conventional units and backend messages |
+| Errors | Authored workflow guidance and structured known-state fallbacks | Unrecognized backend/plugin errors, SSH model/key/signing validation diagnostics and browser-provided errors |
+| Appearance | Preference labels and palette descriptions | Named themes, font-family strings, sample commands and color values |
+| Access fallback | Normal browser login and recovery controls | Usable English fallback when JavaScript or localization assets are unavailable |
+
+Raw technical errors can therefore still appear in English. This acceptance
+does not claim that arbitrary plugin output, operating-system passkey dialogs or
+terminal applications are translated. Future diagnostic localization should use
+typed reasons, without matching English error text.
+
+## Behavior checked
+
+| Workflow | Acceptance contract |
+| --- | --- |
+| Access URL | Fetch only after Copy or confirmed Show; preserve the exact URL. Reveal hides after 30 seconds without expiring the token. Clipboard success follows completion; rejection/fallback failure does not report success or reveal automatically. |
+| Device recovery | Keep credential bytes, RP and ceremony binding. Registration, enabling a live session and revoking all registrations for the hostname remain distinct. Revocation does not claim to delete OS passkeys. Action errors survive status refresh; live session bindings remain in memory and are not persisted as tokens. |
+| Paste and Agent targeting | Preserve ESC handling, bracketed paste, line endings, review thresholds, focus and terminal guards. Review displays the target and line count without a false byte-count claim. Translated labels never select an action or terminal. |
+| Files | Preserve direct endpoint scope, filenames, sort keys, conflict choices, request IDs and two-step permanent deletion. Rename validity uses a stable key/null result. Download dispatch is labeled started. Finalizing cannot be cancelled; unknown publication outcomes instruct inspection before retry. |
+| Secondary windows | Apply the selected language safely to newly created DOM and preserve terminal input, Files transitions and return-to-main behavior. Translation uses text/allowlisted attributes, not inserted HTML. |
+| Layout | Exercise both languages at 480x600 for remaining dialogs and child-window controls, alongside existing preference/editor layout coverage. |
+
+## Reproduction
+
+Use the repository's configured WSL Python environment and installed Playwright
+Chromium. These suites use local fixtures rather than production credentials:
+
+```bash
+python tests/browser_completion_i18n_smoke.py
+python tests/browser_completion_i18n_smoke.py --files
+python tests/agent_browser_smoke.py
+python tests/browser_popout_smoke.py
+python tests/agent_backend_smoke.py
+python scripts/build_ui_messages.py --check
+python tests/ui_messages_smoke.py
+node tests/ui_i18n_smoke.cjs
+```
+
+The existing connection, SSH editor, settings transfer/preferences/appearance,
+Server settings, SSH tunnel and Agent Tunnel bilingual suites provide the other
+workflow regressions. See the completion ledger in
+[the review plan](agent_ui_review_plan.md#browser-completion-and-acceptance) for
+results and limitations.
diff --git a/docs/ui_copy_review.tsv b/docs/ui_copy_review.tsv
index 3451155..454789f 100644
--- a/docs/ui_copy_review.tsv
+++ b/docs/ui_copy_review.tsv
@@ -560,3 +560,239 @@ settings.server.scope_next_connection	next_connection	Next connection	後續連
 settings.server.scope_restart	restart	After restart	重新啟動後生效	Known typed apply_scope classification in schema badge; descriptive metadata, not an available action.		Map only the exact known apply_scope enum; keep unknown nonempty values raw. Do not infer a Save or restart feature.	translation-reviewed	templates/index.html
 settings.server.mutable	mutable	Runtime-mutable	可於執行期間變更	Schema mutable true means the field supports runtime changes, not that this viewer has permission.		Keep schemaItem.mutable behavior; actual controls remain subject to capability and lock checks.	translation-reviewed	templates/index.html
 settings.server.schema_read_only	read-only	Read-only	唯讀	Schema mutable false. Different from the snapshot low-risk permission summary.		Do not change mutation checks or imply that granting a capability makes this field runtime-editable.	translation-reviewed	templates/index.html
+browser.server_access.title	Access recovery	Access recovery	存取復原	Section for retrieving the current launcher access URL.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.server_access.url	Access URL	Access URL	存取網址	Label; keep actual token-bearing URL literal and hidden until requested.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.server_access.show	Show URL	Show URL	顯示網址	Reveals the current access URL for the existing 30-second interval.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.server_access.hint	Access URL is fetched only when requested.	Access URL is fetched only when requested.	僅在要求時取得存取網址。	No automatic token fetch or wider disclosure.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.server_access.expired	Session expired.	Session expired.	工作階段已過期。	Local fetch failure fallback; existing recovery flow remains.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.server_access.unavailable	Access URL is unavailable.	Access URL unavailable.	無法取得存取網址。	Local response validation and error fallback, not backend diagnostic remapping.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.server_access.fetching	Fetching access URL...	Fetching access URL…	正在取得存取網址…	On-demand request pending.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.server_access.shown	Access URL shown for 30 seconds.	Access URL is visible for 30 seconds.	存取網址會顯示 30 秒。	Keep existing reveal timer; no token expiry claim.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.server_access.copied	Access URL copied.	Access URL copied.	已複製存取網址。	Use only after clipboard helper confirms success.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.server_access.copy_failed		Access URL was not copied. Try Show URL and copy it manually.	未能複製存取網址。請按「顯示網址」後手動複製。	Clipboard failure fallback; Show still requires its existing confirmation.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.server_access.confirm_show	Show the full Access URL for 30 seconds?	Show the full Access URL for 30 seconds?	要顯示完整存取網址 30 秒嗎？	Retain explicit reveal confirmation; actual URL stays raw.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.platform.title	Platform session recovery	Device session recovery	裝置工作階段復原	Recovery through platform passkeys, not full process restoration.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.platform.loading	Loading platform recovery status...	Loading device recovery status…	正在載入裝置復原狀態…	Status fetch pending.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.platform.register	Register platform passkey	Register device passkey	註冊裝置通行金鑰	Creates a platform credential through existing device ceremony.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.platform.arm	Arm existing passkey	Enable recovery with existing passkey	使用現有通行金鑰啟用復原	Authenticates an existing credential and arms this live session.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.platform.revoke	Revoke recovery	Revoke recovery	撤銷復原授權	Removes server registrations for the hostname, not OS passkeys.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.platform.hint	Windows Hello, Touch ID, or another platform passkey can restore only a session that remains live in this StandTerm process. No access or session token is stored.	Windows Hello, Touch ID, or another device passkey can restore a session only while it remains live in this StandTerm process. Recovery does not persist access or session tokens.	Windows Hello、Touch ID 或其他裝置通行金鑰，僅能復原此 StandTerm 程序中仍有效的工作階段。復原功能不會持久保存存取權杖或工作階段權杖。	Do not promise recovery after Core restart or unrelated browser token-storage behavior. Live session bindings remain in Core memory.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.platform.unsupported	Platform passkeys are unavailable in this browser context.	Device passkeys are unavailable in this browser context.	目前的瀏覽器環境無法使用裝置通行金鑰。	Browser capability guard only; preserve secure context and WebAuthn checks.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.platform.status	{configured} registered, {armed} armed for this live session. RP ID: {rp_id}	Registered: {configured}. Enabled for this live session: {armed}. RP ID: {rp_id}	已註冊：{configured}。已為此有效工作階段啟用：{armed}。RP ID：{rp_id}	Configured and armed counts; keep RP identifier literal.	{configured}, {armed}, {rp_id}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.platform.origin_unavailable	Platform recovery is unavailable for this origin.	Device recovery is unavailable for this origin.	此來源無法使用裝置復原。	Fallback only when backend availability message is absent.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.platform.registering	Waiting for device registration...	Waiting for device registration…	正在等待裝置註冊…	Device ceremony pending; no successful registration implied.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.platform.armed	Platform recovery is armed for this live session.	Device recovery is enabled for this live session.	已為此有效工作階段啟用裝置復原。	Successful registration or authentication; no promise after process restart.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.platform.confirm_revoke	Revoke all platform recovery registrations for this hostname? Passkeys may remain in the operating system.	Revoke all device recovery registrations for this hostname? Passkeys may remain in the operating system.	要撤銷此主機名稱的所有裝置復原註冊嗎？通行金鑰可能仍保留在作業系統中。	Preserve all-for-hostname scope and device-store limitation.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.platform.revoking	Removing platform recovery passkeys...	Revoking device recovery registrations…	正在撤銷裝置復原註冊…	Does not claim to remove passkeys from the OS credential store.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.diagnostics.empty	No connection events.	No connection events.	沒有連線事件。	Empty initial status.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.diagnostics.clear	Clear	Clear	清除	Clears locally retained connection diagnostics, not connections or server logs.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.diagnostics.copy	Copy Log	Copy log	複製紀錄	Copies raw technical diagnostic text.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.diagnostics.log	Connection diagnostics log	Connection diagnostics log	連線診斷紀錄	Textarea accessible name; contents remain raw diagnostic data.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.diagnostics.count	{count} connection events.	Connection events: {count}	連線事件：{count}	Count label avoiding English singular/plural branching.	{count}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.diagnostics.copied	Copied {count} connection events.	Copied {count} connection events.	已複製 {count} 筆連線事件。	Only after clipboard helper confirms success.	{count}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.diagnostics.copy_failed		Log was not copied. Select it and copy manually.	未能複製紀錄。請選取內容後手動複製。	Clipboard failure; do not alter log payload.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.diagnostics.copying		Copying…	正在複製…	Awaited clipboard request pending; may be reused by access URL copy.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.paste.title	Review Paste	Review paste	檢查貼上內容	Review before sending long or multiline input; not a security guarantee.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.paste.preview		Paste preview	貼上內容預覽	Accessible name for literal text preview. Clipboard ESC replacement occurs before preview by existing logic.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.paste.metadata	{target} · {length} bytes · {lines} lines	{target} · Lines: {lines}	{target} · 行數：{lines}	Keep target label raw. Remove misleading bytes count; existing text.length counts UTF-16 code units.	{target}, {lines}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.paste.clipboard_prompt	Paste text here:	Paste text here:	請在此貼上文字：	Fallback when Clipboard read API is unavailable.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.chrome.paste	Paste	Paste	貼上	Context-menu action and paste-review submit; Cancel reuses common.cancel.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.chrome.loading	Initializing StandTerm...	Initializing StandTerm…	正在初始化 StandTerm…	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.overlay_title	Side Browser	Link preview	連結預覽	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.new_tab	Open in New Tab	Open in new tab	在新分頁開啟	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.close_overlay	Close Overlay	Close preview	關閉預覽	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.overlay_unavailable	Site blocked embedding or refused to connect.	Preview unavailable. Open the link in a new tab or window.	無法顯示預覽。請在新分頁或視窗開啟連結。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.popup_link	Open as Popup ⧉	Open in window ⧉	在視窗開啟 ⧉	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.new_tab_link	Open in New Tab ↗	Open in new tab ↗	在新分頁開啟 ↗	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.paste_menu	📋 Paste	📋 Paste	📋 貼上	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.overlay_menu	🔗 Open in Overlay	🔗 Preview link	🔗 預覽連結	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.search_google	🔍 Search Google	🔍 Search Google	🔍 使用 Google 搜尋	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.pip_menu	⧉ Terminal to PiP	⧉ Terminal to PiP	⧉ 將終端移至子母畫面	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.files_menu	📁 Files…	📁 Files…	📁 檔案…	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.settings_menu	⚙️ Settings	⚙️ Settings	⚙️ 設定	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.native_menu	🚪 Use browser context menu	🚪 Use browser context menu	🚪 使用瀏覽器右鍵選單	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.close_tabs	Close all terminal tabs…	Close all terminal tabs…	關閉所有終端分頁…	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.new_terminal	New terminal tab	New terminal tab	新增終端分頁	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.more_actions	More terminal actions	More terminal actions	更多終端操作	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.socket	Socket	Core connection	Core 連線	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.session	Session	Session	終端連線	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.size	size	Size	尺寸	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.uptime	connected	Connected	連線時間	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.session_id	Session ID: {id}	Session ID: {id}	工作階段 ID：{id}	Browser-owned display text; preserve typed state and literal runtime values.	{id}	Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.close_terminal	Close terminal tab	Close terminal tab	關閉終端分頁	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.confirm_close_tabs	Close all terminal tabs?	Close all terminal tabs?	要關閉所有終端分頁嗎？	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.files_open	Open Files	Open Files	開啟檔案視窗	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.files_unavailable	Files not available	Files not available	無法使用檔案功能	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.pip_hint	Open a separate browser window; it may not stay on top.	Open a separate browser window; it may not stay on top.	開啟獨立的瀏覽器視窗；不一定會保持在最上層。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.clipboard_denied	Clipboard access was denied. Use your terminal paste shortcut (Ctrl+Shift+V or Cmd+V).	Clipboard access was denied. Use your terminal paste shortcut (Ctrl+Shift+V or Cmd+V).	無法存取剪貼簿。請使用終端的貼上快捷鍵（Ctrl+Shift+V 或 Cmd+V）。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.agent_connect	Connect this terminal before using Agent panel	Connect this terminal before using the Agent panel.	請先連接此終端，再使用 Agent 面板。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.pause_input	Pause Agent terminal input	Pause Agent terminal input	暫停 Agent 終端輸入	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.pause_unavailable	Agent pause is not available	Agent pause is not available	無法暫停 Agent	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.restore_before_files	Restore the terminal from its floating window before opening Files.	Restore the terminal from its floating window before opening Files.	請先將終端從獨立視窗移回，再開啟檔案視窗。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.close_files_before_popout	Close Files before moving a terminal to its own window.	Close Files before moving a terminal to its own window.	請先關閉檔案視窗，再將終端移至獨立視窗。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.popup_blocked	Floating window was blocked.	Floating window was blocked.	獨立視窗遭封鎖。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.popup_failed	Could not open the floating window. Allow pop-up windows for this site, then click the control again.	Could not open the floating window. Allow pop-up windows for this site, then click the control again.	無法開啟獨立視窗。請允許此網站的彈出式視窗，再按一次。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.host_key_done	SSH host key action completed.	SSH host key action completed.	SSH 主機金鑰操作已完成。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.local_key_reconnect	Localhost key setup completed. Reconnecting...	Localhost key setup completed. Reconnecting…	本機金鑰設定已完成，正在重新連線…	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.local_key_done	Localhost key setup completed.	Localhost key setup completed.	本機金鑰設定已完成。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.terminal_closed	Terminal session closed.	Terminal session closed.	終端工作階段已關閉。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.ssh_changed_confirm	SSH settings changed while confirming the host. Reload before connecting.	SSH settings changed while confirming the host. Reload before connecting.	確認主機時 SSH 設定已變更。請重新載入後再連線。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.ssh_changed	SSH connection settings changed. Review them and connect again.	SSH connection settings changed. Review them and connect again.	SSH 連線設定已變更。請檢查後重新連線。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.choose_route	Choose a saved route before connecting.	Choose a saved route before connecting.	請先選擇已儲存的路徑，再連線。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.entry_removed	The SSH entry was removed. Reload the settings.	The SSH entry was removed. Reload the settings.	SSH 項目已移除。請重新載入設定。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.ssh_other_window	SSH settings changed in another window. Reload before connecting.	SSH settings changed in another window. Reload before connecting.	SSH 設定已在其他視窗變更。請重新載入後再連線。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.key_policy	Browser SSH keys require localhost or authorized HTTPS.	Browser SSH keys require localhost or authorized HTTPS.	瀏覽器 SSH 金鑰需要 localhost 或已授權的 HTTPS 連線。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.key_policy_connection	Browser keys require localhost or an authorized HTTPS connection.	Browser keys require localhost or an authorized HTTPS connection.	瀏覽器金鑰需要 localhost 或已授權的 HTTPS 連線。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.key_not_ready	Choose a key or wait for key creation before connecting.	Choose a key or wait for key creation before connecting.	請先選擇金鑰或等待金鑰建立完成，再連線。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.core_disconnected	StandTerm is disconnected.	StandTerm is disconnected.	與 StandTerm 的連線已中斷。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.identity_timeout	SSH host identity request timed out.	SSH host identity request timed out.	SSH 主機身分請求逾時。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.agent_unavailable	Agent access is unavailable for this terminal.	Agent access is unavailable for this terminal.	此終端無法使用 Agent 存取。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.agent_timeout	Timed out while applying Agent access permission.	Timed out while applying Agent access permission.	套用 Agent 存取權限時逾時。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.native_disabled	Custom menu disabled. To restore, use the ⚙️ icon or Press Shift + Right-Click.	Custom menu disabled. Restore it in Settings > General.	已停用自訂選單。可在「設定 > 一般」重新啟用。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.popout_menu	⧉ Pop out terminal	⧉ Pop out terminal	⧉ 將終端移至獨立視窗	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.script_failed	Failed to load {url}	Failed to load {url}	無法載入 {url}	Browser-owned display text; preserve typed state and literal runtime values.	{url}	Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.key_endpoint	SSH node {index}: choose a browser key bound to this endpoint, or turn Use key off.	SSH node {index}: choose a browser key bound to this endpoint, or turn Use key off.	SSH 節點 {index}：請選擇綁定此端點的瀏覽器金鑰，或關閉「使用金鑰」。	Browser-owned display text; preserve typed state and literal runtime values.	{index}	Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.secure_required	Browser authorization requires WebCrypto and IndexedDB. Current origin {origin} is not a secure browser context.{hint}	Browser authorization requires WebCrypto and IndexedDB in a secure browser context. Current origin: {origin}.{hint}	瀏覽器授權需要在安全的瀏覽器環境中使用 WebCrypto 與 IndexedDB。目前來源：{origin}。{hint}	Browser-owned display text; preserve typed state and literal runtime values.	{origin}, {hint}	Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.secure_url	 Open {url} or the HTTPS Access URL printed by the launcher.	 Open {url} or the HTTPS Access URL printed by the launcher.	 請開啟 {url}，或啟動器顯示的 HTTPS 存取網址。	Browser-owned display text; preserve typed state and literal runtime values.	{url}	Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.secure_https	 Open the HTTPS Access URL printed by the launcher.	 Open the HTTPS Access URL printed by the launcher.	 請開啟啟動器顯示的 HTTPS 存取網址。	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.advanced	Advanced tools	Advanced tools	進階工具	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.observe	Observe User	Observe user	觀察使用者操作	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.stop_observing	Stop	Stop	停止	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.mark_observation	Mark	Mark	標記	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.mock_send	Send	Send	送出	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.provider_run	Run	Run	執行	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.unavailable	Unavailable	Unavailable	無法使用	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.off	Off	Off	關閉	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.observing	OBSERVING · {count}	Observing · {count}	觀察中 · {count}	Browser-owned display text; preserve typed state and literal runtime values.	{count}	Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.privacy	privacy: {value}	Privacy: {value}	隱私狀態：{value}	Browser-owned display text; preserve typed state and literal runtime values.	{value}	Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.human_seconds	human input: locked {seconds}s	Human input: locked {seconds}s	人工輸入：鎖定 {seconds} 秒	Browser-owned display text; preserve typed state and literal runtime values.	{seconds}	Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.last_action	last: {status} · {type} · {id}	Last: {status} · {type} · {id}	最近操作：{status} · {type} · {id}	Browser-owned display text; preserve typed state and literal runtime values.	{status}, {type}, {id}	Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.error	error: {code}	Error: {code}	錯誤：{code}	Browser-owned display text; preserve typed state and literal runtime values.	{code}	Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.written	written: {bytes}	Written: {bytes}	已寫入：{bytes}	Browser-owned display text; preserve typed state and literal runtime values.	{bytes}	Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.copied	copied: {bytes}{total}	Copied: {bytes}{total}	已複製：{bytes}{total}	Browser-owned display text; preserve typed state and literal runtime values.	{bytes}, {total}	Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.bytes	bytes: {bytes}	Bytes: {bytes}	位元組數：{bytes}	Browser-owned display text; preserve typed state and literal runtime values.	{bytes}	Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.human_locked	human input: locked	human input: locked	人工輸入：鎖定	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.human_idle	human input: idle	human input: idle	人工輸入：閒置	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.pause_on	pause: on	pause: on	暫停：開啟	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.pause_off	pause: off	pause: off	暫停：關閉	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.last_none	last: none	last: none	最近操作：無	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.chrome.error_none	error: none	error: none	錯誤：無	Browser-owned display text; preserve typed state and literal runtime values.		Display only; never use translated text for control decisions.	translation-reviewed	templates/index.html
+browser.files.title	StandTerm - Files	StandTerm - Files	StandTerm - 檔案	Secondary Files document and header title.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.preparing	Preparing…	Preparing…	正在準備…	Download preparation pending.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.download_started	Downloaded	Download started	已啟動下載	The browser link was dispatched; download completion is not observed.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.download	Download	Download	下載	Download the selected endpoint file through the browser.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.cancel_upload	Cancel upload	Cancel upload	取消上傳	Aborts the browser upload request; check destination afterward.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.cancelling	Cancelling…	Cancelling…	正在取消…	Cancellation requested, not yet confirmed.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.publishing	Publishing…	Finalizing…	正在完成…	Typed committing phase; cancellation remains disabled.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.cancel_copy	Cancel copy	Cancel copy	取消複製	Requests cancellation only during the existing cancellable phase.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.one_file	Select one file at a time.	Select one file at a time.	一次只能選取一個檔案。	Browser file selection guard.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.ready_upload	Ready to upload.	Ready to upload.	已備妥，可開始上傳。	Selected file ready, not already sent.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.select_file	Select a file.	Select a file.	請選取檔案。	Rename validation typed reason; do not use translated text as validity.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.filename_required	Enter a file name.	Enter a file name.	請輸入檔名。	Rename input validation.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.filename_no_path	Enter a file name without a path.	Enter a file name without a path.	請輸入不含路徑的檔名。	Retain rejection of separators, dot/dotdot and control characters.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.filename_too_long	The file name is too long.	The file name is too long.	檔名過長。	Existing UTF-8 byte limit remains unchanged.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.filename_exists	A file or directory with this name already exists.	A file or folder with this name already exists.	已有同名檔案或資料夾。	Local loaded directory collision guard.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.name	Name	Name	名稱	Sort header; typed sort key name unchanged.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.size	Size	Size	大小	Sort header; typed sort key size unchanged.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.date	Date	Date modified	修改時間	Sort header based on mtime; typed sort key date unchanged.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.empty	No subdirectories or files.	No subfolders or files.	沒有子資料夾或檔案。	Empty loaded directory listing.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.truncated	Directory list was truncated.	Directory list is incomplete.	資料夾清單未完整顯示。	Backend truncated flag; do not imply displayed names cover all entries.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.opening_directory	Opening directory…	Opening folder…	正在開啟資料夾…	Pending browse request.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.open_failed	Remote directory could not be opened.	Could not open the folder.	無法開啟資料夾。	Fallback only; covers SSH and Core Local Shell endpoints.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.choose_folder	Choose this folder or browse to another destination.	Choose this folder or browse to another destination.	選擇此資料夾，或瀏覽其他目的地。	Destination browse guidance.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.choose_action	Choose a file action or drop a file to upload.	Choose a file action or drop a file to upload.	選擇檔案操作，或拖放檔案以上傳。	Source pane guidance.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.destination_filename_invalid	Enter a valid destination file name.	Enter a valid destination file name.	請輸入有效的目的地檔名。	Existing upload/copy filename validation; no new rules.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.checking_upload	Checking upload destination…	Checking upload destination…	正在檢查上傳目的地…	Pending upload ticket.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.upload_lifecycle	Uploading through the browser. Use Cancel upload to stop the request.	Uploading through the browser. Use Cancel upload to stop the request.	正在透過瀏覽器上傳。按「取消上傳」可停止請求。	Does not promise abort removes a published file.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.upload_finished	Upload finished. Close returns to the previous pane.	Upload finished. Close returns to the previous pane.	上傳已完成。按「關閉」可返回上一個窗格。	Successful backend completion; destination-pane lifecycle.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.upload_stopped	Upload stopped. Check the destination before retrying.	Upload stopped. Check the destination before retrying.	上傳已停止。重試前請先檢查目的地。	Failure with uncertain destination state.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.upload_failed	File upload failed.	File upload failed.	檔案上傳失敗。	Fallback only; raw backend error retains precedence.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.upload_interrupted	File upload failed because the connection was interrupted.	Upload connection interrupted. Check the destination before retrying.	上傳連線已中斷。重試前請先檢查目的地。	XHR network error; request failure does not prove destination unchanged.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.upload_request_stopped	Upload request stopped. Check the destination before retrying.	Upload request stopped. Check the destination before retrying.	上傳請求已停止。重試前請先檢查目的地。	XHR abort lifecycle, not confirmed rollback.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.upload_request_cancelled	Upload request cancelled. Check the destination before retrying.	Upload request cancelled. Check the destination before retrying.	上傳請求已取消。重試前請先檢查目的地。	XHR abort status; no destination absence guarantee.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.choose_conflict	Choose how to handle the existing file.	Choose how to handle the existing file.	請選擇如何處理既有檔案。	Typed conflict result; keep ask/keep_both/replace values.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.upload_prepare_failed	Upload could not be prepared.	Could not prepare the upload.	無法準備上傳。	Fallback only for upload ticket failure.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.download_url_invalid	Download URL was invalid.	Invalid download URL.	下載網址無效。	Local origin/path validation failure; do not loosen validation.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.download_prepare_failed	Download could not be prepared.	Could not prepare the download.	無法準備下載。	Fallback only for ticket failure.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.renaming	Renaming remote file…	Renaming file…	正在重新命名檔案…	SSH or Core Local Shell file operation pending.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.deleting	Permanently deleting remote file…	Permanently deleting file…	正在永久刪除檔案…	Existing second-confirmation path; preserve deletion semantics.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.rename_failed	Remote file rename failed.	File rename failed.	檔案重新命名失敗。	Fallback chosen from typed action rename, never displayed action text.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.delete_failed	Remote file delete failed.	File deletion failed.	檔案刪除失敗。	Fallback chosen from typed action delete.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.cancel_wait	Cancellation requested. Wait for backend confirmation before closing Files.	Cancellation requested. Wait for confirmation before closing Files.	已要求取消。請等候確認後再關閉「檔案」。	Pending backend cancel acknowledgment.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.cancel_upload_first	Cancel the upload before returning to the previous pane.	Cancel the upload before returning to the previous pane.	請先取消上傳，再返回上一個窗格。	Destination pane cannot be dismissed while upload runs.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.publishing_wait	Publishing cannot be cancelled. Wait for the result before closing Files.	Finalizing cannot be cancelled. Wait for the result before closing Files.	完成中的作業無法取消。請等候結果後再關閉「檔案」。	Typed committing phase; do not change disabled cancel.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.cancel_copy_first	Cancel the copy first. Closing Files does not cancel it.	Cancel the copy first. Closing Files does not cancel it.	請先取消複製。關閉「檔案」不會取消複製。	Close is not backend cancellation.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.choose_session	Choose another connected Files session.	Choose another connected Files tab.	請選擇另一個已連線且可使用「檔案」的分頁。	Existing endpoint eligibility guard.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.preparing_copy	Preparing the copy. Keep Files open.	Preparing the copy. Keep Files open.	正在準備複製。請保持「檔案」開啟。	Preparation pending.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.checking_copy	Checking copy destination…	Checking copy destination…	正在檢查複製目的地…	Pending typed files_copy request.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.cancelling_copy	Cancelling before the destination is published…	Requesting cancellation before the file is finalized…	正在要求於檔案完成前取消…	Request pending; do not guarantee cancellation wins race with committing.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.conflict_lifecycle	Choose a conflict action, or cancel this destination pane.	Choose how to handle the conflict, or cancel this destination pane.	請選擇衝突處理方式，或取消此目的地窗格。	Conflict awaiting user decision.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.publishing_file	Publishing copied file…	Finalizing copied file…	正在完成複製檔案…	Typed committing progress status.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.publishing_started	Publishing has started. It cannot be cancelled; wait for the result before closing Files.	Finalizing has started and cannot be cancelled. Wait for the result before closing Files.	已開始完成檔案，無法取消。請等候結果後再關閉「檔案」。	Committing phase warning without claiming completion.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.copy_running	Keep Files open until finished, or use Cancel copy.	Keep Files open until finished, or use Cancel copy.	請保持「檔案」開啟直到完成，或按「取消複製」。	Running phase guidance.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.copy_finished	Copy finished. You can close Files or start another copy.	Copy finished. You can close Files or start another copy.	複製已完成。可關閉「檔案」或開始另一筆複製。	Typed completed only.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.copy_cancelled_lifecycle	Cancelled before publishing. You can close Files.	Cancelled before the file was finalized. You can close Files.	已在檔案完成前取消。可關閉「檔案」。	Only confirmed typed cancelled, not failed or unknown.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.copy_cancelled	File copy cancelled before publishing.	File copy cancelled before finalizing.	檔案複製已在完成前取消。	Typed cancelled fallback; preserve backend message when present.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.copy_stopped	Copy stopped. You can close Files or retry.	Copy stopped. Check the destination before retrying.	複製已停止。重試前請先檢查目的地。	Generic failure lifecycle; unknown result must use dedicated unknown lifecycle.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.copy_unknown	The SSH server did not confirm the publish result. Inspect the destination before retrying.	Copy result unknown. Check the destination before retrying.	複製結果不明。重試前請先檢查目的地。	Use existing typed file_copy_publish_outcome_unknown for lifecycle and warning; retain raw diagnostic/code separately.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.copy_failed	File copy failed.	File copy failed.	檔案複製失敗。	Fallback only, never overwrite raw backend error.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.no_destination	No connected Files destination is available.	No connected Files destination is available.	沒有已連線且可使用「檔案」的目的地。	No eligible tab for selected browser file.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.another_tab	Open another SSH or Local Shell tab to copy this file.	Open another SSH or Local Shell tab to copy this file.	請開啟另一個 SSH 或 Local Shell 分頁，以複製此檔案。	Remote source cannot target itself by this existing flow.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.destination_title	Choose destination	Choose destination	選擇目的地	Destination pane title.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.source_file	Source file	Source file	來源檔案	Source card label; filename/path remains raw.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.destination_session	Destination session	Destination tab	目的地分頁	Accessible name of eligible terminal selector; option IDs raw.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.direct_endpoint	Direct endpoint	Connected endpoint	連線端點	Placeholder overwritten by endpoint literal; includes route-final SSH and Core Local Shell.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.endpoint_hint	Direct SSH or Local Shell endpoint. Nested SSH sessions inside the terminal are not used.	Uses this tab’s SSH or Local Shell endpoint. SSH sessions started inside the terminal are not used.	使用此分頁的 SSH 或 Local Shell 端點，不使用在終端內另行啟動的 SSH 連線。	Do not imply nested terminal-session endpoint detection.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.home	Home directory	Home folder	家目錄	Home directory button title and accessible name.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.parent	Parent directory	Parent folder	上一層資料夾	Parent navigation title and accessible name.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.refresh	Refresh files list	Refresh file list	更新檔案清單	Refresh endpoint listing, not browser page.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.folder	Remote destination folder	Folder path	資料夾路徑	Source pane path input; not all endpoints are remote.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.destination_folder	Destination folder	Destination folder	目的地資料夾	Destination path input accessible name.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.go	Go	Go	前往	Browse entered path without rewriting path value.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.listing	Remote directories and files	Folders and files	資料夾與檔案	Source listing accessible name.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.destination_listing	Destination directories and files	Destination folders and files	目的地資料夾與檔案	Destination listing accessible name.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.filename	File name	File name	檔名	Destination filename label.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.destination_filename	Destination file name	Destination file name	目的地檔名	Destination filename accessible name.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.keep_both	Keep Both	Keep both	保留兩者	Existing keep_both conflict operation; no promise which suffix is chosen.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.replace	Replace	Replace	取代	Existing replace conflict operation, overwrites destination on success.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.choose_destination	Choose a destination.	Choose a destination.	請選擇目的地。	Initial destination pane status.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.cancel_before_copy	Cancel returns to the previous pane before copying.	Before copying starts, Cancel returns to the previous pane.	複製開始前，按「取消」可返回上一個窗格。	Only idle destination pane; running uses explicit cancellation.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.copy	Copy	Copy	複製	Start endpoint copy or browser-file upload to selected destination.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.actions	Remote file actions	File actions	檔案操作	File operation dialog accessible name.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.copy_to	Copy to…	Copy to…	複製到…	Opens destination selection.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.rename_action	Rename…	Rename…	重新命名…	Opens rename editor.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.delete_action	Delete…	Delete…	刪除…	Opens existing two-step permanent deletion confirmation.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.new_filename	New remote file name	New file name	新檔名	Rename input accessible name; value remains raw.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.rename	Rename	Rename	重新命名	Submit rename; original file remains if destination name conflicts.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.delete_title	Permanent file deletion	Permanent file deletion	永久刪除檔案	Deletion dialog accessible name.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.delete_question	Do you want to delete this file?	Delete this file?	要刪除此檔案嗎？	First confirmation; does not itself send delete request.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.delete_final	File will be permanently deleted and cannot be recovered. Are you sure?	This permanently deletes the file. StandTerm cannot undo it. Continue?	這會永久刪除檔案，StandTerm 無法復原。要繼續嗎？	Second confirmation; do not claim backups or external recovery cannot exist.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.delete_confirm	I am sure	Permanently delete	永久刪除	Second-step destructive button; safe button keeps initial focus.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.dont_delete	Don't delete	Don't delete	不要刪除	Safe cancel action in second step.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.drop	Drop one file here or click to choose	Drop one file here or click to choose	將一個檔案拖放至此，或點選以選取	Browser local file picker; does not automatically upload.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.send	Send	Upload	上傳	Uploads chosen browser file to current endpoint folder.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.opening	Opening Files…	Opening Files…	正在開啟「檔案」…	Initial child window status.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.copy_cancelled_idle	Copy cancelled.	Copy cancelled.	已取消複製。	Conflict decision cancelled before transfer starts.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.upload_cancelled_idle	Upload cancelled.	Upload cancelled.	已取消上傳。	Conflict decision cancelled before request starts.		Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.detailed_bytes	{size} ({bytes} bytes)	{size} ({bytes} bytes)	{size}（{bytes} 位元組）	Exact byte count alongside formatted size.	{size}, {bytes}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.upload_limit	The file exceeds the {limit} upload limit.	File exceeds the upload limit of {limit}.	檔案超過 {limit} 的上傳限制。	Keep numeric/unit formatting unchanged.	{limit}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.sort	Sort by {column}	Sort by {column}	依{column}排序	Translate column label only; typed sort key stays unchanged.	{column}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.folder_label	Folder {name}.	Folder {name}.	資料夾：{name}。	Directory accessible name when mtime is absent.	{name}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.folder_modified	Folder {name}, modified {time}.	Folder {name}, modified {time}.	資料夾：{name}，修改時間：{time}。	Directory accessible name with existing formatted time.	{name}, {time}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.file_label	File {name}, {size}, modified {time}. Open file actions.	File {name}, {size}, modified {time}. Open file actions.	檔案：{name}，{size}，修改時間：{time}。開啟檔案操作。	Literal filename/size/time in accessible name.	{name}, {size}, {time}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.existing_file	Existing file {name}, {size}, modified {time}.	Existing file {name}, {size}, modified {time}.	既有檔案：{name}，{size}，修改時間：{time}。	Disabled destination file row accessible name.	{name}, {size}, {time}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.sending_to	Sending to {path}…	Uploading to {path}…	正在上傳至 {path}…	Destination path remains raw.	{path}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.sending_progress	Sending {sent} / {total}…	Uploading {sent} / {total}…	正在上傳 {sent}／{total}…	HTTP upload progress is not final destination completion.	{sent}, {total}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.uploaded	Uploaded to {path}.	Uploaded to {path}.	已上傳至 {path}。	Only backend completed result; reuse for alert when closed.	{path}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.conflict	{path} already exists ({size}).	{path} already exists ({size}).	{path} 已存在（{size}）。	Literal path and formatted existing size.	{path}, {size}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.preparing_download	Preparing download for {name}…	Preparing download for {name}…	正在準備下載 {name}…	File name remains raw.	{name}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.download_requested	Download started: {name}.	Download started: {name}.	已啟動下載：{name}。	Link dispatched only; no completion proof.	{name}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.download_ready	Selected {name}. Click Download to save it.	Selected {name}. Click Download to save it.	已選取 {name}。按「下載」即可儲存。	Prepared ticket still subject to existing expiry rules.	{name}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.renamed	Renamed to {name}.	Renamed to {name}.	已重新命名為 {name}。	Completed rename result.	{name}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.deleted	Permanently deleted {name}.	Permanently deleted {name}.	已永久刪除 {name}。	Completed delete result only.	{name}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.copy_progress	Copying {percent}% · {copied} / {total}…	Copying {percent}% · {copied} / {total}…	正在複製 {percent}% · {copied}／{total}…	Copy progress from typed byte fields; committing separate.	{percent}, {copied}, {total}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.copied	Copied to {path}.	Copied to {path}.	已複製至 {path}。	Completed copy result only.	{path}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.files.copy_unknown_detail	{detail} Inspect the destination before retrying.	{detail} Check the destination before retrying.	{detail} 重試前請先檢查目的地。	Append translated guidance to raw backend message for typed unknown result; keep existing code visible where applicable.	{detail}	Display data only. Preserve typed state, protocol fields, raw values, and control flow.	translation-reviewed	templates/index.html
+browser.chrome.key_unavailable	The browser SSH key is unavailable.	The browser SSH key is unavailable.	無法使用瀏覽器 SSH 金鑰。	Browser-owned display fallback only.		Preserve raw labels and identifiers.	translation-reviewed	templates/index.html
+browser.chrome.terminal	Terminal	Terminal	終端	Browser-owned display fallback only.		Preserve raw labels and identifiers.	translation-reviewed	templates/index.html
+browser.chrome.file_transfer	File transfer	File transfer	檔案傳輸	Browser-owned display fallback only.		Preserve raw labels and identifiers.	translation-reviewed	templates/index.html
diff --git a/static/js/standterm-messages.js b/static/js/standterm-messages.js
index 16f500b..dd2603d 100644
--- a/static/js/standterm-messages.js
+++ b/static/js/standterm-messages.js
@@ -162,6 +162,90 @@
         "browser.auth.submit": "Authorize browser",
         "browser.auth.url_label": "Browser authorization URL",
         "browser.auth.url_placeholder": "Paste browser authorization URL",
+        "browser.chrome.advanced": "Advanced tools",
+        "browser.chrome.agent_connect": "Connect this terminal before using the Agent panel.",
+        "browser.chrome.agent_timeout": "Timed out while applying Agent access permission.",
+        "browser.chrome.agent_unavailable": "Agent access is unavailable for this terminal.",
+        "browser.chrome.bytes": "Bytes: {bytes}",
+        "browser.chrome.choose_route": "Choose a saved route before connecting.",
+        "browser.chrome.clipboard_denied": "Clipboard access was denied. Use your terminal paste shortcut (Ctrl+Shift+V or Cmd+V).",
+        "browser.chrome.close_files_before_popout": "Close Files before moving a terminal to its own window.",
+        "browser.chrome.close_overlay": "Close preview",
+        "browser.chrome.close_tabs": "Close all terminal tabs\u2026",
+        "browser.chrome.close_terminal": "Close terminal tab",
+        "browser.chrome.confirm_close_tabs": "Close all terminal tabs?",
+        "browser.chrome.copied": "Copied: {bytes}{total}",
+        "browser.chrome.core_disconnected": "StandTerm is disconnected.",
+        "browser.chrome.entry_removed": "The SSH entry was removed. Reload the settings.",
+        "browser.chrome.error": "Error: {code}",
+        "browser.chrome.error_none": "error: none",
+        "browser.chrome.file_transfer": "File transfer",
+        "browser.chrome.files_menu": "\ud83d\udcc1 Files\u2026",
+        "browser.chrome.files_open": "Open Files",
+        "browser.chrome.files_unavailable": "Files not available",
+        "browser.chrome.host_key_done": "SSH host key action completed.",
+        "browser.chrome.human_idle": "human input: idle",
+        "browser.chrome.human_locked": "human input: locked",
+        "browser.chrome.human_seconds": "Human input: locked {seconds}s",
+        "browser.chrome.identity_timeout": "SSH host identity request timed out.",
+        "browser.chrome.key_endpoint": "SSH node {index}: choose a browser key bound to this endpoint, or turn Use key off.",
+        "browser.chrome.key_not_ready": "Choose a key or wait for key creation before connecting.",
+        "browser.chrome.key_policy": "Browser SSH keys require localhost or authorized HTTPS.",
+        "browser.chrome.key_policy_connection": "Browser keys require localhost or an authorized HTTPS connection.",
+        "browser.chrome.key_unavailable": "The browser SSH key is unavailable.",
+        "browser.chrome.last_action": "Last: {status} \u00b7 {type} \u00b7 {id}",
+        "browser.chrome.last_none": "last: none",
+        "browser.chrome.loading": "Initializing StandTerm\u2026",
+        "browser.chrome.local_key_done": "Localhost key setup completed.",
+        "browser.chrome.local_key_reconnect": "Localhost key setup completed. Reconnecting\u2026",
+        "browser.chrome.mark_observation": "Mark",
+        "browser.chrome.mock_send": "Send",
+        "browser.chrome.more_actions": "More terminal actions",
+        "browser.chrome.native_disabled": "Custom menu disabled. Restore it in Settings > General.",
+        "browser.chrome.native_menu": "\ud83d\udeaa Use browser context menu",
+        "browser.chrome.new_tab": "Open in new tab",
+        "browser.chrome.new_tab_link": "Open in new tab \u2197",
+        "browser.chrome.new_terminal": "New terminal tab",
+        "browser.chrome.observe": "Observe user",
+        "browser.chrome.observing": "Observing \u00b7 {count}",
+        "browser.chrome.off": "Off",
+        "browser.chrome.overlay_menu": "\ud83d\udd17 Preview link",
+        "browser.chrome.overlay_title": "Link preview",
+        "browser.chrome.overlay_unavailable": "Preview unavailable. Open the link in a new tab or window.",
+        "browser.chrome.paste": "Paste",
+        "browser.chrome.paste_menu": "\ud83d\udccb Paste",
+        "browser.chrome.pause_input": "Pause Agent terminal input",
+        "browser.chrome.pause_off": "pause: off",
+        "browser.chrome.pause_on": "pause: on",
+        "browser.chrome.pause_unavailable": "Agent pause is not available",
+        "browser.chrome.pip_hint": "Open a separate browser window; it may not stay on top.",
+        "browser.chrome.pip_menu": "\u29c9 Terminal to PiP",
+        "browser.chrome.popout_menu": "\u29c9 Pop out terminal",
+        "browser.chrome.popup_blocked": "Floating window was blocked.",
+        "browser.chrome.popup_failed": "Could not open the floating window. Allow pop-up windows for this site, then click the control again.",
+        "browser.chrome.popup_link": "Open in window \u29c9",
+        "browser.chrome.privacy": "Privacy: {value}",
+        "browser.chrome.provider_run": "Run",
+        "browser.chrome.restore_before_files": "Restore the terminal from its floating window before opening Files.",
+        "browser.chrome.script_failed": "Failed to load {url}",
+        "browser.chrome.search_google": "\ud83d\udd0d Search Google",
+        "browser.chrome.secure_https": " Open the HTTPS Access URL printed by the launcher.",
+        "browser.chrome.secure_required": "Browser authorization requires WebCrypto and IndexedDB in a secure browser context. Current origin: {origin}.{hint}",
+        "browser.chrome.secure_url": " Open {url} or the HTTPS Access URL printed by the launcher.",
+        "browser.chrome.session": "Session",
+        "browser.chrome.session_id": "Session ID: {id}",
+        "browser.chrome.settings_menu": "\u2699\ufe0f Settings",
+        "browser.chrome.size": "Size",
+        "browser.chrome.socket": "Core connection",
+        "browser.chrome.ssh_changed": "SSH connection settings changed. Review them and connect again.",
+        "browser.chrome.ssh_changed_confirm": "SSH settings changed while confirming the host. Reload before connecting.",
+        "browser.chrome.ssh_other_window": "SSH settings changed in another window. Reload before connecting.",
+        "browser.chrome.stop_observing": "Stop",
+        "browser.chrome.terminal": "Terminal",
+        "browser.chrome.terminal_closed": "Terminal session closed.",
+        "browser.chrome.unavailable": "Unavailable",
+        "browser.chrome.uptime": "Connected",
+        "browser.chrome.written": "Written: {bytes}",
         "browser.connection.connected": "Connected",
         "browser.connection.connecting": "Connecting\u2026",
         "browser.connection.reconnecting": "Reconnecting\u2026",
@@ -170,6 +254,147 @@
         "browser.connection.retrying": "Cannot reach StandTerm (reconnecting)",
         "browser.connection.unavailable": "Cannot reach StandTerm",
         "browser.connection.unavailable_hint": "This page will keep trying to reconnect. If StandTerm restarted, use the access token from its current launcher.",
+        "browser.diagnostics.clear": "Clear",
+        "browser.diagnostics.copied": "Copied {count} connection events.",
+        "browser.diagnostics.copy": "Copy log",
+        "browser.diagnostics.copy_failed": "Log was not copied. Select it and copy manually.",
+        "browser.diagnostics.copying": "Copying\u2026",
+        "browser.diagnostics.count": "Connection events: {count}",
+        "browser.diagnostics.empty": "No connection events.",
+        "browser.diagnostics.log": "Connection diagnostics log",
+        "browser.files.actions": "File actions",
+        "browser.files.another_tab": "Open another SSH or Local Shell tab to copy this file.",
+        "browser.files.cancel_before_copy": "Before copying starts, Cancel returns to the previous pane.",
+        "browser.files.cancel_copy": "Cancel copy",
+        "browser.files.cancel_copy_first": "Cancel the copy first. Closing Files does not cancel it.",
+        "browser.files.cancel_upload": "Cancel upload",
+        "browser.files.cancel_upload_first": "Cancel the upload before returning to the previous pane.",
+        "browser.files.cancel_wait": "Cancellation requested. Wait for confirmation before closing Files.",
+        "browser.files.cancelling": "Cancelling\u2026",
+        "browser.files.cancelling_copy": "Requesting cancellation before the file is finalized\u2026",
+        "browser.files.checking_copy": "Checking copy destination\u2026",
+        "browser.files.checking_upload": "Checking upload destination\u2026",
+        "browser.files.choose_action": "Choose a file action or drop a file to upload.",
+        "browser.files.choose_conflict": "Choose how to handle the existing file.",
+        "browser.files.choose_destination": "Choose a destination.",
+        "browser.files.choose_folder": "Choose this folder or browse to another destination.",
+        "browser.files.choose_session": "Choose another connected Files tab.",
+        "browser.files.conflict": "{path} already exists ({size}).",
+        "browser.files.conflict_lifecycle": "Choose how to handle the conflict, or cancel this destination pane.",
+        "browser.files.copied": "Copied to {path}.",
+        "browser.files.copy": "Copy",
+        "browser.files.copy_cancelled": "File copy cancelled before finalizing.",
+        "browser.files.copy_cancelled_idle": "Copy cancelled.",
+        "browser.files.copy_cancelled_lifecycle": "Cancelled before the file was finalized. You can close Files.",
+        "browser.files.copy_failed": "File copy failed.",
+        "browser.files.copy_finished": "Copy finished. You can close Files or start another copy.",
+        "browser.files.copy_progress": "Copying {percent}% \u00b7 {copied} / {total}\u2026",
+        "browser.files.copy_running": "Keep Files open until finished, or use Cancel copy.",
+        "browser.files.copy_stopped": "Copy stopped. Check the destination before retrying.",
+        "browser.files.copy_to": "Copy to\u2026",
+        "browser.files.copy_unknown": "Copy result unknown. Check the destination before retrying.",
+        "browser.files.copy_unknown_detail": "{detail} Check the destination before retrying.",
+        "browser.files.date": "Date modified",
+        "browser.files.delete_action": "Delete\u2026",
+        "browser.files.delete_confirm": "Permanently delete",
+        "browser.files.delete_failed": "File deletion failed.",
+        "browser.files.delete_final": "This permanently deletes the file. StandTerm cannot undo it. Continue?",
+        "browser.files.delete_question": "Delete this file?",
+        "browser.files.delete_title": "Permanent file deletion",
+        "browser.files.deleted": "Permanently deleted {name}.",
+        "browser.files.deleting": "Permanently deleting file\u2026",
+        "browser.files.destination_filename": "Destination file name",
+        "browser.files.destination_filename_invalid": "Enter a valid destination file name.",
+        "browser.files.destination_folder": "Destination folder",
+        "browser.files.destination_listing": "Destination folders and files",
+        "browser.files.destination_session": "Destination tab",
+        "browser.files.destination_title": "Choose destination",
+        "browser.files.detailed_bytes": "{size} ({bytes} bytes)",
+        "browser.files.direct_endpoint": "Connected endpoint",
+        "browser.files.dont_delete": "Don't delete",
+        "browser.files.download": "Download",
+        "browser.files.download_prepare_failed": "Could not prepare the download.",
+        "browser.files.download_ready": "Selected {name}. Click Download to save it.",
+        "browser.files.download_requested": "Download started: {name}.",
+        "browser.files.download_started": "Download started",
+        "browser.files.download_url_invalid": "Invalid download URL.",
+        "browser.files.drop": "Drop one file here or click to choose",
+        "browser.files.empty": "No subfolders or files.",
+        "browser.files.endpoint_hint": "Uses this tab\u2019s SSH or Local Shell endpoint. SSH sessions started inside the terminal are not used.",
+        "browser.files.existing_file": "Existing file {name}, {size}, modified {time}.",
+        "browser.files.file_label": "File {name}, {size}, modified {time}. Open file actions.",
+        "browser.files.filename": "File name",
+        "browser.files.filename_exists": "A file or folder with this name already exists.",
+        "browser.files.filename_no_path": "Enter a file name without a path.",
+        "browser.files.filename_required": "Enter a file name.",
+        "browser.files.filename_too_long": "The file name is too long.",
+        "browser.files.folder": "Folder path",
+        "browser.files.folder_label": "Folder {name}.",
+        "browser.files.folder_modified": "Folder {name}, modified {time}.",
+        "browser.files.go": "Go",
+        "browser.files.home": "Home folder",
+        "browser.files.keep_both": "Keep both",
+        "browser.files.listing": "Folders and files",
+        "browser.files.name": "Name",
+        "browser.files.new_filename": "New file name",
+        "browser.files.no_destination": "No connected Files destination is available.",
+        "browser.files.one_file": "Select one file at a time.",
+        "browser.files.open_failed": "Could not open the folder.",
+        "browser.files.opening": "Opening Files\u2026",
+        "browser.files.opening_directory": "Opening folder\u2026",
+        "browser.files.parent": "Parent folder",
+        "browser.files.preparing": "Preparing\u2026",
+        "browser.files.preparing_copy": "Preparing the copy. Keep Files open.",
+        "browser.files.preparing_download": "Preparing download for {name}\u2026",
+        "browser.files.publishing": "Finalizing\u2026",
+        "browser.files.publishing_file": "Finalizing copied file\u2026",
+        "browser.files.publishing_started": "Finalizing has started and cannot be cancelled. Wait for the result before closing Files.",
+        "browser.files.publishing_wait": "Finalizing cannot be cancelled. Wait for the result before closing Files.",
+        "browser.files.ready_upload": "Ready to upload.",
+        "browser.files.refresh": "Refresh file list",
+        "browser.files.rename": "Rename",
+        "browser.files.rename_action": "Rename\u2026",
+        "browser.files.rename_failed": "File rename failed.",
+        "browser.files.renamed": "Renamed to {name}.",
+        "browser.files.renaming": "Renaming file\u2026",
+        "browser.files.replace": "Replace",
+        "browser.files.select_file": "Select a file.",
+        "browser.files.send": "Upload",
+        "browser.files.sending_progress": "Uploading {sent} / {total}\u2026",
+        "browser.files.sending_to": "Uploading to {path}\u2026",
+        "browser.files.size": "Size",
+        "browser.files.sort": "Sort by {column}",
+        "browser.files.source_file": "Source file",
+        "browser.files.title": "StandTerm - Files",
+        "browser.files.truncated": "Directory list is incomplete.",
+        "browser.files.upload_cancelled_idle": "Upload cancelled.",
+        "browser.files.upload_failed": "File upload failed.",
+        "browser.files.upload_finished": "Upload finished. Close returns to the previous pane.",
+        "browser.files.upload_interrupted": "Upload connection interrupted. Check the destination before retrying.",
+        "browser.files.upload_lifecycle": "Uploading through the browser. Use Cancel upload to stop the request.",
+        "browser.files.upload_limit": "File exceeds the upload limit of {limit}.",
+        "browser.files.upload_prepare_failed": "Could not prepare the upload.",
+        "browser.files.upload_request_cancelled": "Upload request cancelled. Check the destination before retrying.",
+        "browser.files.upload_request_stopped": "Upload request stopped. Check the destination before retrying.",
+        "browser.files.upload_stopped": "Upload stopped. Check the destination before retrying.",
+        "browser.files.uploaded": "Uploaded to {path}.",
+        "browser.paste.clipboard_prompt": "Paste text here:",
+        "browser.paste.metadata": "{target} \u00b7 Lines: {lines}",
+        "browser.paste.preview": "Paste preview",
+        "browser.paste.title": "Review paste",
+        "browser.platform.arm": "Enable recovery with existing passkey",
+        "browser.platform.armed": "Device recovery is enabled for this live session.",
+        "browser.platform.confirm_revoke": "Revoke all device recovery registrations for this hostname? Passkeys may remain in the operating system.",
+        "browser.platform.hint": "Windows Hello, Touch ID, or another device passkey can restore a session only while it remains live in this StandTerm process. Recovery does not persist access or session tokens.",
+        "browser.platform.loading": "Loading device recovery status\u2026",
+        "browser.platform.origin_unavailable": "Device recovery is unavailable for this origin.",
+        "browser.platform.register": "Register device passkey",
+        "browser.platform.registering": "Waiting for device registration\u2026",
+        "browser.platform.revoke": "Revoke recovery",
+        "browser.platform.revoking": "Revoking device recovery registrations\u2026",
+        "browser.platform.status": "Registered: {configured}. Enabled for this live session: {armed}. RP ID: {rp_id}",
+        "browser.platform.title": "Device session recovery",
+        "browser.platform.unsupported": "Device passkeys are unavailable in this browser context.",
         "browser.recovery.cancelled_or_failed": "Device verification was cancelled or failed.",
         "browser.recovery.checking": "Checking access token\u2026",
         "browser.recovery.checking_saved": "Checking saved access token\u2026",
@@ -187,6 +412,17 @@
         "browser.recovery.token_label": "Access token",
         "browser.recovery.token_rejected": "Access token was not accepted.",
         "browser.recovery.verifying_device": "Waiting for device verification\u2026",
+        "browser.server_access.confirm_show": "Show the full Access URL for 30 seconds?",
+        "browser.server_access.copied": "Access URL copied.",
+        "browser.server_access.copy_failed": "Access URL was not copied. Try Show URL and copy it manually.",
+        "browser.server_access.expired": "Session expired.",
+        "browser.server_access.fetching": "Fetching access URL\u2026",
+        "browser.server_access.hint": "Access URL is fetched only when requested.",
+        "browser.server_access.show": "Show URL",
+        "browser.server_access.shown": "Access URL is visible for 30 seconds.",
+        "browser.server_access.title": "Access recovery",
+        "browser.server_access.unavailable": "Access URL unavailable.",
+        "browser.server_access.url": "Access URL",
         "common.cancel": "Cancel",
         "common.close": "Close",
         "common.copy_url": "Copy URL",
@@ -724,6 +960,90 @@
         "browser.auth.submit": "\u6388\u6b0a\u700f\u89bd\u5668",
         "browser.auth.url_label": "\u700f\u89bd\u5668\u6388\u6b0a\u7db2\u5740",
         "browser.auth.url_placeholder": "\u8cbc\u4e0a\u700f\u89bd\u5668\u6388\u6b0a\u7db2\u5740",
+        "browser.chrome.advanced": "\u9032\u968e\u5de5\u5177",
+        "browser.chrome.agent_connect": "\u8acb\u5148\u9023\u63a5\u6b64\u7d42\u7aef\uff0c\u518d\u4f7f\u7528 Agent \u9762\u677f\u3002",
+        "browser.chrome.agent_timeout": "\u5957\u7528 Agent \u5b58\u53d6\u6b0a\u9650\u6642\u903e\u6642\u3002",
+        "browser.chrome.agent_unavailable": "\u6b64\u7d42\u7aef\u7121\u6cd5\u4f7f\u7528 Agent \u5b58\u53d6\u3002",
+        "browser.chrome.bytes": "\u4f4d\u5143\u7d44\u6578\uff1a{bytes}",
+        "browser.chrome.choose_route": "\u8acb\u5148\u9078\u64c7\u5df2\u5132\u5b58\u7684\u8def\u5f91\uff0c\u518d\u9023\u7dda\u3002",
+        "browser.chrome.clipboard_denied": "\u7121\u6cd5\u5b58\u53d6\u526a\u8cbc\u7c3f\u3002\u8acb\u4f7f\u7528\u7d42\u7aef\u7684\u8cbc\u4e0a\u5feb\u6377\u9375\uff08Ctrl+Shift+V \u6216 Cmd+V\uff09\u3002",
+        "browser.chrome.close_files_before_popout": "\u8acb\u5148\u95dc\u9589\u6a94\u6848\u8996\u7a97\uff0c\u518d\u5c07\u7d42\u7aef\u79fb\u81f3\u7368\u7acb\u8996\u7a97\u3002",
+        "browser.chrome.close_overlay": "\u95dc\u9589\u9810\u89bd",
+        "browser.chrome.close_tabs": "\u95dc\u9589\u6240\u6709\u7d42\u7aef\u5206\u9801\u2026",
+        "browser.chrome.close_terminal": "\u95dc\u9589\u7d42\u7aef\u5206\u9801",
+        "browser.chrome.confirm_close_tabs": "\u8981\u95dc\u9589\u6240\u6709\u7d42\u7aef\u5206\u9801\u55ce\uff1f",
+        "browser.chrome.copied": "\u5df2\u8907\u88fd\uff1a{bytes}{total}",
+        "browser.chrome.core_disconnected": "\u8207 StandTerm \u7684\u9023\u7dda\u5df2\u4e2d\u65b7\u3002",
+        "browser.chrome.entry_removed": "SSH \u9805\u76ee\u5df2\u79fb\u9664\u3002\u8acb\u91cd\u65b0\u8f09\u5165\u8a2d\u5b9a\u3002",
+        "browser.chrome.error": "\u932f\u8aa4\uff1a{code}",
+        "browser.chrome.error_none": "\u932f\u8aa4\uff1a\u7121",
+        "browser.chrome.file_transfer": "\u6a94\u6848\u50b3\u8f38",
+        "browser.chrome.files_menu": "\ud83d\udcc1 \u6a94\u6848\u2026",
+        "browser.chrome.files_open": "\u958b\u555f\u6a94\u6848\u8996\u7a97",
+        "browser.chrome.files_unavailable": "\u7121\u6cd5\u4f7f\u7528\u6a94\u6848\u529f\u80fd",
+        "browser.chrome.host_key_done": "SSH \u4e3b\u6a5f\u91d1\u9470\u64cd\u4f5c\u5df2\u5b8c\u6210\u3002",
+        "browser.chrome.human_idle": "\u4eba\u5de5\u8f38\u5165\uff1a\u9592\u7f6e",
+        "browser.chrome.human_locked": "\u4eba\u5de5\u8f38\u5165\uff1a\u9396\u5b9a",
+        "browser.chrome.human_seconds": "\u4eba\u5de5\u8f38\u5165\uff1a\u9396\u5b9a {seconds} \u79d2",
+        "browser.chrome.identity_timeout": "SSH \u4e3b\u6a5f\u8eab\u5206\u8acb\u6c42\u903e\u6642\u3002",
+        "browser.chrome.key_endpoint": "SSH \u7bc0\u9ede {index}\uff1a\u8acb\u9078\u64c7\u7d81\u5b9a\u6b64\u7aef\u9ede\u7684\u700f\u89bd\u5668\u91d1\u9470\uff0c\u6216\u95dc\u9589\u300c\u4f7f\u7528\u91d1\u9470\u300d\u3002",
+        "browser.chrome.key_not_ready": "\u8acb\u5148\u9078\u64c7\u91d1\u9470\u6216\u7b49\u5f85\u91d1\u9470\u5efa\u7acb\u5b8c\u6210\uff0c\u518d\u9023\u7dda\u3002",
+        "browser.chrome.key_policy": "\u700f\u89bd\u5668 SSH \u91d1\u9470\u9700\u8981 localhost \u6216\u5df2\u6388\u6b0a\u7684 HTTPS \u9023\u7dda\u3002",
+        "browser.chrome.key_policy_connection": "\u700f\u89bd\u5668\u91d1\u9470\u9700\u8981 localhost \u6216\u5df2\u6388\u6b0a\u7684 HTTPS \u9023\u7dda\u3002",
+        "browser.chrome.key_unavailable": "\u7121\u6cd5\u4f7f\u7528\u700f\u89bd\u5668 SSH \u91d1\u9470\u3002",
+        "browser.chrome.last_action": "\u6700\u8fd1\u64cd\u4f5c\uff1a{status} \u00b7 {type} \u00b7 {id}",
+        "browser.chrome.last_none": "\u6700\u8fd1\u64cd\u4f5c\uff1a\u7121",
+        "browser.chrome.loading": "\u6b63\u5728\u521d\u59cb\u5316 StandTerm\u2026",
+        "browser.chrome.local_key_done": "\u672c\u6a5f\u91d1\u9470\u8a2d\u5b9a\u5df2\u5b8c\u6210\u3002",
+        "browser.chrome.local_key_reconnect": "\u672c\u6a5f\u91d1\u9470\u8a2d\u5b9a\u5df2\u5b8c\u6210\uff0c\u6b63\u5728\u91cd\u65b0\u9023\u7dda\u2026",
+        "browser.chrome.mark_observation": "\u6a19\u8a18",
+        "browser.chrome.mock_send": "\u9001\u51fa",
+        "browser.chrome.more_actions": "\u66f4\u591a\u7d42\u7aef\u64cd\u4f5c",
+        "browser.chrome.native_disabled": "\u5df2\u505c\u7528\u81ea\u8a02\u9078\u55ae\u3002\u53ef\u5728\u300c\u8a2d\u5b9a > \u4e00\u822c\u300d\u91cd\u65b0\u555f\u7528\u3002",
+        "browser.chrome.native_menu": "\ud83d\udeaa \u4f7f\u7528\u700f\u89bd\u5668\u53f3\u9375\u9078\u55ae",
+        "browser.chrome.new_tab": "\u5728\u65b0\u5206\u9801\u958b\u555f",
+        "browser.chrome.new_tab_link": "\u5728\u65b0\u5206\u9801\u958b\u555f \u2197",
+        "browser.chrome.new_terminal": "\u65b0\u589e\u7d42\u7aef\u5206\u9801",
+        "browser.chrome.observe": "\u89c0\u5bdf\u4f7f\u7528\u8005\u64cd\u4f5c",
+        "browser.chrome.observing": "\u89c0\u5bdf\u4e2d \u00b7 {count}",
+        "browser.chrome.off": "\u95dc\u9589",
+        "browser.chrome.overlay_menu": "\ud83d\udd17 \u9810\u89bd\u9023\u7d50",
+        "browser.chrome.overlay_title": "\u9023\u7d50\u9810\u89bd",
+        "browser.chrome.overlay_unavailable": "\u7121\u6cd5\u986f\u793a\u9810\u89bd\u3002\u8acb\u5728\u65b0\u5206\u9801\u6216\u8996\u7a97\u958b\u555f\u9023\u7d50\u3002",
+        "browser.chrome.paste": "\u8cbc\u4e0a",
+        "browser.chrome.paste_menu": "\ud83d\udccb \u8cbc\u4e0a",
+        "browser.chrome.pause_input": "\u66ab\u505c Agent \u7d42\u7aef\u8f38\u5165",
+        "browser.chrome.pause_off": "\u66ab\u505c\uff1a\u95dc\u9589",
+        "browser.chrome.pause_on": "\u66ab\u505c\uff1a\u958b\u555f",
+        "browser.chrome.pause_unavailable": "\u7121\u6cd5\u66ab\u505c Agent",
+        "browser.chrome.pip_hint": "\u958b\u555f\u7368\u7acb\u7684\u700f\u89bd\u5668\u8996\u7a97\uff1b\u4e0d\u4e00\u5b9a\u6703\u4fdd\u6301\u5728\u6700\u4e0a\u5c64\u3002",
+        "browser.chrome.pip_menu": "\u29c9 \u5c07\u7d42\u7aef\u79fb\u81f3\u5b50\u6bcd\u756b\u9762",
+        "browser.chrome.popout_menu": "\u29c9 \u5c07\u7d42\u7aef\u79fb\u81f3\u7368\u7acb\u8996\u7a97",
+        "browser.chrome.popup_blocked": "\u7368\u7acb\u8996\u7a97\u906d\u5c01\u9396\u3002",
+        "browser.chrome.popup_failed": "\u7121\u6cd5\u958b\u555f\u7368\u7acb\u8996\u7a97\u3002\u8acb\u5141\u8a31\u6b64\u7db2\u7ad9\u7684\u5f48\u51fa\u5f0f\u8996\u7a97\uff0c\u518d\u6309\u4e00\u6b21\u3002",
+        "browser.chrome.popup_link": "\u5728\u8996\u7a97\u958b\u555f \u29c9",
+        "browser.chrome.privacy": "\u96b1\u79c1\u72c0\u614b\uff1a{value}",
+        "browser.chrome.provider_run": "\u57f7\u884c",
+        "browser.chrome.restore_before_files": "\u8acb\u5148\u5c07\u7d42\u7aef\u5f9e\u7368\u7acb\u8996\u7a97\u79fb\u56de\uff0c\u518d\u958b\u555f\u6a94\u6848\u8996\u7a97\u3002",
+        "browser.chrome.script_failed": "\u7121\u6cd5\u8f09\u5165 {url}",
+        "browser.chrome.search_google": "\ud83d\udd0d \u4f7f\u7528 Google \u641c\u5c0b",
+        "browser.chrome.secure_https": " \u8acb\u958b\u555f\u555f\u52d5\u5668\u986f\u793a\u7684 HTTPS \u5b58\u53d6\u7db2\u5740\u3002",
+        "browser.chrome.secure_required": "\u700f\u89bd\u5668\u6388\u6b0a\u9700\u8981\u5728\u5b89\u5168\u7684\u700f\u89bd\u5668\u74b0\u5883\u4e2d\u4f7f\u7528 WebCrypto \u8207 IndexedDB\u3002\u76ee\u524d\u4f86\u6e90\uff1a{origin}\u3002{hint}",
+        "browser.chrome.secure_url": " \u8acb\u958b\u555f {url}\uff0c\u6216\u555f\u52d5\u5668\u986f\u793a\u7684 HTTPS \u5b58\u53d6\u7db2\u5740\u3002",
+        "browser.chrome.session": "\u7d42\u7aef\u9023\u7dda",
+        "browser.chrome.session_id": "\u5de5\u4f5c\u968e\u6bb5 ID\uff1a{id}",
+        "browser.chrome.settings_menu": "\u2699\ufe0f \u8a2d\u5b9a",
+        "browser.chrome.size": "\u5c3a\u5bf8",
+        "browser.chrome.socket": "Core \u9023\u7dda",
+        "browser.chrome.ssh_changed": "SSH \u9023\u7dda\u8a2d\u5b9a\u5df2\u8b8a\u66f4\u3002\u8acb\u6aa2\u67e5\u5f8c\u91cd\u65b0\u9023\u7dda\u3002",
+        "browser.chrome.ssh_changed_confirm": "\u78ba\u8a8d\u4e3b\u6a5f\u6642 SSH \u8a2d\u5b9a\u5df2\u8b8a\u66f4\u3002\u8acb\u91cd\u65b0\u8f09\u5165\u5f8c\u518d\u9023\u7dda\u3002",
+        "browser.chrome.ssh_other_window": "SSH \u8a2d\u5b9a\u5df2\u5728\u5176\u4ed6\u8996\u7a97\u8b8a\u66f4\u3002\u8acb\u91cd\u65b0\u8f09\u5165\u5f8c\u518d\u9023\u7dda\u3002",
+        "browser.chrome.stop_observing": "\u505c\u6b62",
+        "browser.chrome.terminal": "\u7d42\u7aef",
+        "browser.chrome.terminal_closed": "\u7d42\u7aef\u5de5\u4f5c\u968e\u6bb5\u5df2\u95dc\u9589\u3002",
+        "browser.chrome.unavailable": "\u7121\u6cd5\u4f7f\u7528",
+        "browser.chrome.uptime": "\u9023\u7dda\u6642\u9593",
+        "browser.chrome.written": "\u5df2\u5beb\u5165\uff1a{bytes}",
         "browser.connection.connected": "\u5df2\u9023\u7dda",
         "browser.connection.connecting": "\u6b63\u5728\u9023\u7dda\u2026",
         "browser.connection.reconnecting": "\u6b63\u5728\u91cd\u65b0\u9023\u7dda\u2026",
@@ -732,6 +1052,147 @@
         "browser.connection.retrying": "\u7121\u6cd5\u9023\u7dda\u81f3 StandTerm\uff08\u6b63\u5728\u91cd\u9023\uff09",
         "browser.connection.unavailable": "\u7121\u6cd5\u9023\u7dda\u81f3 StandTerm",
         "browser.connection.unavailable_hint": "\u6b64\u9801\u9762\u6703\u6301\u7e8c\u5617\u8a66\u91cd\u65b0\u9023\u7dda\u3002\u82e5 StandTerm \u5df2\u91cd\u65b0\u555f\u52d5\uff0c\u8acb\u4f7f\u7528\u76ee\u524d\u555f\u52d5\u5668\u63d0\u4f9b\u7684\u5b58\u53d6\u6b0a\u6756\u3002",
+        "browser.diagnostics.clear": "\u6e05\u9664",
+        "browser.diagnostics.copied": "\u5df2\u8907\u88fd {count} \u7b46\u9023\u7dda\u4e8b\u4ef6\u3002",
+        "browser.diagnostics.copy": "\u8907\u88fd\u7d00\u9304",
+        "browser.diagnostics.copy_failed": "\u672a\u80fd\u8907\u88fd\u7d00\u9304\u3002\u8acb\u9078\u53d6\u5167\u5bb9\u5f8c\u624b\u52d5\u8907\u88fd\u3002",
+        "browser.diagnostics.copying": "\u6b63\u5728\u8907\u88fd\u2026",
+        "browser.diagnostics.count": "\u9023\u7dda\u4e8b\u4ef6\uff1a{count}",
+        "browser.diagnostics.empty": "\u6c92\u6709\u9023\u7dda\u4e8b\u4ef6\u3002",
+        "browser.diagnostics.log": "\u9023\u7dda\u8a3a\u65b7\u7d00\u9304",
+        "browser.files.actions": "\u6a94\u6848\u64cd\u4f5c",
+        "browser.files.another_tab": "\u8acb\u958b\u555f\u53e6\u4e00\u500b SSH \u6216 Local Shell \u5206\u9801\uff0c\u4ee5\u8907\u88fd\u6b64\u6a94\u6848\u3002",
+        "browser.files.cancel_before_copy": "\u8907\u88fd\u958b\u59cb\u524d\uff0c\u6309\u300c\u53d6\u6d88\u300d\u53ef\u8fd4\u56de\u4e0a\u4e00\u500b\u7a97\u683c\u3002",
+        "browser.files.cancel_copy": "\u53d6\u6d88\u8907\u88fd",
+        "browser.files.cancel_copy_first": "\u8acb\u5148\u53d6\u6d88\u8907\u88fd\u3002\u95dc\u9589\u300c\u6a94\u6848\u300d\u4e0d\u6703\u53d6\u6d88\u8907\u88fd\u3002",
+        "browser.files.cancel_upload": "\u53d6\u6d88\u4e0a\u50b3",
+        "browser.files.cancel_upload_first": "\u8acb\u5148\u53d6\u6d88\u4e0a\u50b3\uff0c\u518d\u8fd4\u56de\u4e0a\u4e00\u500b\u7a97\u683c\u3002",
+        "browser.files.cancel_wait": "\u5df2\u8981\u6c42\u53d6\u6d88\u3002\u8acb\u7b49\u5019\u78ba\u8a8d\u5f8c\u518d\u95dc\u9589\u300c\u6a94\u6848\u300d\u3002",
+        "browser.files.cancelling": "\u6b63\u5728\u53d6\u6d88\u2026",
+        "browser.files.cancelling_copy": "\u6b63\u5728\u8981\u6c42\u65bc\u6a94\u6848\u5b8c\u6210\u524d\u53d6\u6d88\u2026",
+        "browser.files.checking_copy": "\u6b63\u5728\u6aa2\u67e5\u8907\u88fd\u76ee\u7684\u5730\u2026",
+        "browser.files.checking_upload": "\u6b63\u5728\u6aa2\u67e5\u4e0a\u50b3\u76ee\u7684\u5730\u2026",
+        "browser.files.choose_action": "\u9078\u64c7\u6a94\u6848\u64cd\u4f5c\uff0c\u6216\u62d6\u653e\u6a94\u6848\u4ee5\u4e0a\u50b3\u3002",
+        "browser.files.choose_conflict": "\u8acb\u9078\u64c7\u5982\u4f55\u8655\u7406\u65e2\u6709\u6a94\u6848\u3002",
+        "browser.files.choose_destination": "\u8acb\u9078\u64c7\u76ee\u7684\u5730\u3002",
+        "browser.files.choose_folder": "\u9078\u64c7\u6b64\u8cc7\u6599\u593e\uff0c\u6216\u700f\u89bd\u5176\u4ed6\u76ee\u7684\u5730\u3002",
+        "browser.files.choose_session": "\u8acb\u9078\u64c7\u53e6\u4e00\u500b\u5df2\u9023\u7dda\u4e14\u53ef\u4f7f\u7528\u300c\u6a94\u6848\u300d\u7684\u5206\u9801\u3002",
+        "browser.files.conflict": "{path} \u5df2\u5b58\u5728\uff08{size}\uff09\u3002",
+        "browser.files.conflict_lifecycle": "\u8acb\u9078\u64c7\u885d\u7a81\u8655\u7406\u65b9\u5f0f\uff0c\u6216\u53d6\u6d88\u6b64\u76ee\u7684\u5730\u7a97\u683c\u3002",
+        "browser.files.copied": "\u5df2\u8907\u88fd\u81f3 {path}\u3002",
+        "browser.files.copy": "\u8907\u88fd",
+        "browser.files.copy_cancelled": "\u6a94\u6848\u8907\u88fd\u5df2\u5728\u5b8c\u6210\u524d\u53d6\u6d88\u3002",
+        "browser.files.copy_cancelled_idle": "\u5df2\u53d6\u6d88\u8907\u88fd\u3002",
+        "browser.files.copy_cancelled_lifecycle": "\u5df2\u5728\u6a94\u6848\u5b8c\u6210\u524d\u53d6\u6d88\u3002\u53ef\u95dc\u9589\u300c\u6a94\u6848\u300d\u3002",
+        "browser.files.copy_failed": "\u6a94\u6848\u8907\u88fd\u5931\u6557\u3002",
+        "browser.files.copy_finished": "\u8907\u88fd\u5df2\u5b8c\u6210\u3002\u53ef\u95dc\u9589\u300c\u6a94\u6848\u300d\u6216\u958b\u59cb\u53e6\u4e00\u7b46\u8907\u88fd\u3002",
+        "browser.files.copy_progress": "\u6b63\u5728\u8907\u88fd {percent}% \u00b7 {copied}\uff0f{total}\u2026",
+        "browser.files.copy_running": "\u8acb\u4fdd\u6301\u300c\u6a94\u6848\u300d\u958b\u555f\u76f4\u5230\u5b8c\u6210\uff0c\u6216\u6309\u300c\u53d6\u6d88\u8907\u88fd\u300d\u3002",
+        "browser.files.copy_stopped": "\u8907\u88fd\u5df2\u505c\u6b62\u3002\u91cd\u8a66\u524d\u8acb\u5148\u6aa2\u67e5\u76ee\u7684\u5730\u3002",
+        "browser.files.copy_to": "\u8907\u88fd\u5230\u2026",
+        "browser.files.copy_unknown": "\u8907\u88fd\u7d50\u679c\u4e0d\u660e\u3002\u91cd\u8a66\u524d\u8acb\u5148\u6aa2\u67e5\u76ee\u7684\u5730\u3002",
+        "browser.files.copy_unknown_detail": "{detail} \u91cd\u8a66\u524d\u8acb\u5148\u6aa2\u67e5\u76ee\u7684\u5730\u3002",
+        "browser.files.date": "\u4fee\u6539\u6642\u9593",
+        "browser.files.delete_action": "\u522a\u9664\u2026",
+        "browser.files.delete_confirm": "\u6c38\u4e45\u522a\u9664",
+        "browser.files.delete_failed": "\u6a94\u6848\u522a\u9664\u5931\u6557\u3002",
+        "browser.files.delete_final": "\u9019\u6703\u6c38\u4e45\u522a\u9664\u6a94\u6848\uff0cStandTerm \u7121\u6cd5\u5fa9\u539f\u3002\u8981\u7e7c\u7e8c\u55ce\uff1f",
+        "browser.files.delete_question": "\u8981\u522a\u9664\u6b64\u6a94\u6848\u55ce\uff1f",
+        "browser.files.delete_title": "\u6c38\u4e45\u522a\u9664\u6a94\u6848",
+        "browser.files.deleted": "\u5df2\u6c38\u4e45\u522a\u9664 {name}\u3002",
+        "browser.files.deleting": "\u6b63\u5728\u6c38\u4e45\u522a\u9664\u6a94\u6848\u2026",
+        "browser.files.destination_filename": "\u76ee\u7684\u5730\u6a94\u540d",
+        "browser.files.destination_filename_invalid": "\u8acb\u8f38\u5165\u6709\u6548\u7684\u76ee\u7684\u5730\u6a94\u540d\u3002",
+        "browser.files.destination_folder": "\u76ee\u7684\u5730\u8cc7\u6599\u593e",
+        "browser.files.destination_listing": "\u76ee\u7684\u5730\u8cc7\u6599\u593e\u8207\u6a94\u6848",
+        "browser.files.destination_session": "\u76ee\u7684\u5730\u5206\u9801",
+        "browser.files.destination_title": "\u9078\u64c7\u76ee\u7684\u5730",
+        "browser.files.detailed_bytes": "{size}\uff08{bytes} \u4f4d\u5143\u7d44\uff09",
+        "browser.files.direct_endpoint": "\u9023\u7dda\u7aef\u9ede",
+        "browser.files.dont_delete": "\u4e0d\u8981\u522a\u9664",
+        "browser.files.download": "\u4e0b\u8f09",
+        "browser.files.download_prepare_failed": "\u7121\u6cd5\u6e96\u5099\u4e0b\u8f09\u3002",
+        "browser.files.download_ready": "\u5df2\u9078\u53d6 {name}\u3002\u6309\u300c\u4e0b\u8f09\u300d\u5373\u53ef\u5132\u5b58\u3002",
+        "browser.files.download_requested": "\u5df2\u555f\u52d5\u4e0b\u8f09\uff1a{name}\u3002",
+        "browser.files.download_started": "\u5df2\u555f\u52d5\u4e0b\u8f09",
+        "browser.files.download_url_invalid": "\u4e0b\u8f09\u7db2\u5740\u7121\u6548\u3002",
+        "browser.files.drop": "\u5c07\u4e00\u500b\u6a94\u6848\u62d6\u653e\u81f3\u6b64\uff0c\u6216\u9ede\u9078\u4ee5\u9078\u53d6",
+        "browser.files.empty": "\u6c92\u6709\u5b50\u8cc7\u6599\u593e\u6216\u6a94\u6848\u3002",
+        "browser.files.endpoint_hint": "\u4f7f\u7528\u6b64\u5206\u9801\u7684 SSH \u6216 Local Shell \u7aef\u9ede\uff0c\u4e0d\u4f7f\u7528\u5728\u7d42\u7aef\u5167\u53e6\u884c\u555f\u52d5\u7684 SSH \u9023\u7dda\u3002",
+        "browser.files.existing_file": "\u65e2\u6709\u6a94\u6848\uff1a{name}\uff0c{size}\uff0c\u4fee\u6539\u6642\u9593\uff1a{time}\u3002",
+        "browser.files.file_label": "\u6a94\u6848\uff1a{name}\uff0c{size}\uff0c\u4fee\u6539\u6642\u9593\uff1a{time}\u3002\u958b\u555f\u6a94\u6848\u64cd\u4f5c\u3002",
+        "browser.files.filename": "\u6a94\u540d",
+        "browser.files.filename_exists": "\u5df2\u6709\u540c\u540d\u6a94\u6848\u6216\u8cc7\u6599\u593e\u3002",
+        "browser.files.filename_no_path": "\u8acb\u8f38\u5165\u4e0d\u542b\u8def\u5f91\u7684\u6a94\u540d\u3002",
+        "browser.files.filename_required": "\u8acb\u8f38\u5165\u6a94\u540d\u3002",
+        "browser.files.filename_too_long": "\u6a94\u540d\u904e\u9577\u3002",
+        "browser.files.folder": "\u8cc7\u6599\u593e\u8def\u5f91",
+        "browser.files.folder_label": "\u8cc7\u6599\u593e\uff1a{name}\u3002",
+        "browser.files.folder_modified": "\u8cc7\u6599\u593e\uff1a{name}\uff0c\u4fee\u6539\u6642\u9593\uff1a{time}\u3002",
+        "browser.files.go": "\u524d\u5f80",
+        "browser.files.home": "\u5bb6\u76ee\u9304",
+        "browser.files.keep_both": "\u4fdd\u7559\u5169\u8005",
+        "browser.files.listing": "\u8cc7\u6599\u593e\u8207\u6a94\u6848",
+        "browser.files.name": "\u540d\u7a31",
+        "browser.files.new_filename": "\u65b0\u6a94\u540d",
+        "browser.files.no_destination": "\u6c92\u6709\u5df2\u9023\u7dda\u4e14\u53ef\u4f7f\u7528\u300c\u6a94\u6848\u300d\u7684\u76ee\u7684\u5730\u3002",
+        "browser.files.one_file": "\u4e00\u6b21\u53ea\u80fd\u9078\u53d6\u4e00\u500b\u6a94\u6848\u3002",
+        "browser.files.open_failed": "\u7121\u6cd5\u958b\u555f\u8cc7\u6599\u593e\u3002",
+        "browser.files.opening": "\u6b63\u5728\u958b\u555f\u300c\u6a94\u6848\u300d\u2026",
+        "browser.files.opening_directory": "\u6b63\u5728\u958b\u555f\u8cc7\u6599\u593e\u2026",
+        "browser.files.parent": "\u4e0a\u4e00\u5c64\u8cc7\u6599\u593e",
+        "browser.files.preparing": "\u6b63\u5728\u6e96\u5099\u2026",
+        "browser.files.preparing_copy": "\u6b63\u5728\u6e96\u5099\u8907\u88fd\u3002\u8acb\u4fdd\u6301\u300c\u6a94\u6848\u300d\u958b\u555f\u3002",
+        "browser.files.preparing_download": "\u6b63\u5728\u6e96\u5099\u4e0b\u8f09 {name}\u2026",
+        "browser.files.publishing": "\u6b63\u5728\u5b8c\u6210\u2026",
+        "browser.files.publishing_file": "\u6b63\u5728\u5b8c\u6210\u8907\u88fd\u6a94\u6848\u2026",
+        "browser.files.publishing_started": "\u5df2\u958b\u59cb\u5b8c\u6210\u6a94\u6848\uff0c\u7121\u6cd5\u53d6\u6d88\u3002\u8acb\u7b49\u5019\u7d50\u679c\u5f8c\u518d\u95dc\u9589\u300c\u6a94\u6848\u300d\u3002",
+        "browser.files.publishing_wait": "\u5b8c\u6210\u4e2d\u7684\u4f5c\u696d\u7121\u6cd5\u53d6\u6d88\u3002\u8acb\u7b49\u5019\u7d50\u679c\u5f8c\u518d\u95dc\u9589\u300c\u6a94\u6848\u300d\u3002",
+        "browser.files.ready_upload": "\u5df2\u5099\u59a5\uff0c\u53ef\u958b\u59cb\u4e0a\u50b3\u3002",
+        "browser.files.refresh": "\u66f4\u65b0\u6a94\u6848\u6e05\u55ae",
+        "browser.files.rename": "\u91cd\u65b0\u547d\u540d",
+        "browser.files.rename_action": "\u91cd\u65b0\u547d\u540d\u2026",
+        "browser.files.rename_failed": "\u6a94\u6848\u91cd\u65b0\u547d\u540d\u5931\u6557\u3002",
+        "browser.files.renamed": "\u5df2\u91cd\u65b0\u547d\u540d\u70ba {name}\u3002",
+        "browser.files.renaming": "\u6b63\u5728\u91cd\u65b0\u547d\u540d\u6a94\u6848\u2026",
+        "browser.files.replace": "\u53d6\u4ee3",
+        "browser.files.select_file": "\u8acb\u9078\u53d6\u6a94\u6848\u3002",
+        "browser.files.send": "\u4e0a\u50b3",
+        "browser.files.sending_progress": "\u6b63\u5728\u4e0a\u50b3 {sent}\uff0f{total}\u2026",
+        "browser.files.sending_to": "\u6b63\u5728\u4e0a\u50b3\u81f3 {path}\u2026",
+        "browser.files.size": "\u5927\u5c0f",
+        "browser.files.sort": "\u4f9d{column}\u6392\u5e8f",
+        "browser.files.source_file": "\u4f86\u6e90\u6a94\u6848",
+        "browser.files.title": "StandTerm - \u6a94\u6848",
+        "browser.files.truncated": "\u8cc7\u6599\u593e\u6e05\u55ae\u672a\u5b8c\u6574\u986f\u793a\u3002",
+        "browser.files.upload_cancelled_idle": "\u5df2\u53d6\u6d88\u4e0a\u50b3\u3002",
+        "browser.files.upload_failed": "\u6a94\u6848\u4e0a\u50b3\u5931\u6557\u3002",
+        "browser.files.upload_finished": "\u4e0a\u50b3\u5df2\u5b8c\u6210\u3002\u6309\u300c\u95dc\u9589\u300d\u53ef\u8fd4\u56de\u4e0a\u4e00\u500b\u7a97\u683c\u3002",
+        "browser.files.upload_interrupted": "\u4e0a\u50b3\u9023\u7dda\u5df2\u4e2d\u65b7\u3002\u91cd\u8a66\u524d\u8acb\u5148\u6aa2\u67e5\u76ee\u7684\u5730\u3002",
+        "browser.files.upload_lifecycle": "\u6b63\u5728\u900f\u904e\u700f\u89bd\u5668\u4e0a\u50b3\u3002\u6309\u300c\u53d6\u6d88\u4e0a\u50b3\u300d\u53ef\u505c\u6b62\u8acb\u6c42\u3002",
+        "browser.files.upload_limit": "\u6a94\u6848\u8d85\u904e {limit} \u7684\u4e0a\u50b3\u9650\u5236\u3002",
+        "browser.files.upload_prepare_failed": "\u7121\u6cd5\u6e96\u5099\u4e0a\u50b3\u3002",
+        "browser.files.upload_request_cancelled": "\u4e0a\u50b3\u8acb\u6c42\u5df2\u53d6\u6d88\u3002\u91cd\u8a66\u524d\u8acb\u5148\u6aa2\u67e5\u76ee\u7684\u5730\u3002",
+        "browser.files.upload_request_stopped": "\u4e0a\u50b3\u8acb\u6c42\u5df2\u505c\u6b62\u3002\u91cd\u8a66\u524d\u8acb\u5148\u6aa2\u67e5\u76ee\u7684\u5730\u3002",
+        "browser.files.upload_stopped": "\u4e0a\u50b3\u5df2\u505c\u6b62\u3002\u91cd\u8a66\u524d\u8acb\u5148\u6aa2\u67e5\u76ee\u7684\u5730\u3002",
+        "browser.files.uploaded": "\u5df2\u4e0a\u50b3\u81f3 {path}\u3002",
+        "browser.paste.clipboard_prompt": "\u8acb\u5728\u6b64\u8cbc\u4e0a\u6587\u5b57\uff1a",
+        "browser.paste.metadata": "{target} \u00b7 \u884c\u6578\uff1a{lines}",
+        "browser.paste.preview": "\u8cbc\u4e0a\u5167\u5bb9\u9810\u89bd",
+        "browser.paste.title": "\u6aa2\u67e5\u8cbc\u4e0a\u5167\u5bb9",
+        "browser.platform.arm": "\u4f7f\u7528\u73fe\u6709\u901a\u884c\u91d1\u9470\u555f\u7528\u5fa9\u539f",
+        "browser.platform.armed": "\u5df2\u70ba\u6b64\u6709\u6548\u5de5\u4f5c\u968e\u6bb5\u555f\u7528\u88dd\u7f6e\u5fa9\u539f\u3002",
+        "browser.platform.confirm_revoke": "\u8981\u64a4\u92b7\u6b64\u4e3b\u6a5f\u540d\u7a31\u7684\u6240\u6709\u88dd\u7f6e\u5fa9\u539f\u8a3b\u518a\u55ce\uff1f\u901a\u884c\u91d1\u9470\u53ef\u80fd\u4ecd\u4fdd\u7559\u5728\u4f5c\u696d\u7cfb\u7d71\u4e2d\u3002",
+        "browser.platform.hint": "Windows Hello\u3001Touch ID \u6216\u5176\u4ed6\u88dd\u7f6e\u901a\u884c\u91d1\u9470\uff0c\u50c5\u80fd\u5fa9\u539f\u6b64 StandTerm \u7a0b\u5e8f\u4e2d\u4ecd\u6709\u6548\u7684\u5de5\u4f5c\u968e\u6bb5\u3002\u5fa9\u539f\u529f\u80fd\u4e0d\u6703\u6301\u4e45\u4fdd\u5b58\u5b58\u53d6\u6b0a\u6756\u6216\u5de5\u4f5c\u968e\u6bb5\u6b0a\u6756\u3002",
+        "browser.platform.loading": "\u6b63\u5728\u8f09\u5165\u88dd\u7f6e\u5fa9\u539f\u72c0\u614b\u2026",
+        "browser.platform.origin_unavailable": "\u6b64\u4f86\u6e90\u7121\u6cd5\u4f7f\u7528\u88dd\u7f6e\u5fa9\u539f\u3002",
+        "browser.platform.register": "\u8a3b\u518a\u88dd\u7f6e\u901a\u884c\u91d1\u9470",
+        "browser.platform.registering": "\u6b63\u5728\u7b49\u5f85\u88dd\u7f6e\u8a3b\u518a\u2026",
+        "browser.platform.revoke": "\u64a4\u92b7\u5fa9\u539f\u6388\u6b0a",
+        "browser.platform.revoking": "\u6b63\u5728\u64a4\u92b7\u88dd\u7f6e\u5fa9\u539f\u8a3b\u518a\u2026",
+        "browser.platform.status": "\u5df2\u8a3b\u518a\uff1a{configured}\u3002\u5df2\u70ba\u6b64\u6709\u6548\u5de5\u4f5c\u968e\u6bb5\u555f\u7528\uff1a{armed}\u3002RP ID\uff1a{rp_id}",
+        "browser.platform.title": "\u88dd\u7f6e\u5de5\u4f5c\u968e\u6bb5\u5fa9\u539f",
+        "browser.platform.unsupported": "\u76ee\u524d\u7684\u700f\u89bd\u5668\u74b0\u5883\u7121\u6cd5\u4f7f\u7528\u88dd\u7f6e\u901a\u884c\u91d1\u9470\u3002",
         "browser.recovery.cancelled_or_failed": "\u88dd\u7f6e\u9a57\u8b49\u5df2\u53d6\u6d88\u6216\u5931\u6557\u3002",
         "browser.recovery.checking": "\u6b63\u5728\u9a57\u8b49\u5b58\u53d6\u6b0a\u6756\u2026",
         "browser.recovery.checking_saved": "\u6b63\u5728\u9a57\u8b49\u5df2\u5132\u5b58\u7684\u5b58\u53d6\u6b0a\u6756\u2026",
@@ -749,6 +1210,17 @@
         "browser.recovery.token_label": "\u5b58\u53d6\u6b0a\u6756",
         "browser.recovery.token_rejected": "\u5b58\u53d6\u6b0a\u6756\u672a\u901a\u904e\u9a57\u8b49\u3002",
         "browser.recovery.verifying_device": "\u7b49\u5f85\u88dd\u7f6e\u9a57\u8b49\u2026",
+        "browser.server_access.confirm_show": "\u8981\u986f\u793a\u5b8c\u6574\u5b58\u53d6\u7db2\u5740 30 \u79d2\u55ce\uff1f",
+        "browser.server_access.copied": "\u5df2\u8907\u88fd\u5b58\u53d6\u7db2\u5740\u3002",
+        "browser.server_access.copy_failed": "\u672a\u80fd\u8907\u88fd\u5b58\u53d6\u7db2\u5740\u3002\u8acb\u6309\u300c\u986f\u793a\u7db2\u5740\u300d\u5f8c\u624b\u52d5\u8907\u88fd\u3002",
+        "browser.server_access.expired": "\u5de5\u4f5c\u968e\u6bb5\u5df2\u904e\u671f\u3002",
+        "browser.server_access.fetching": "\u6b63\u5728\u53d6\u5f97\u5b58\u53d6\u7db2\u5740\u2026",
+        "browser.server_access.hint": "\u50c5\u5728\u8981\u6c42\u6642\u53d6\u5f97\u5b58\u53d6\u7db2\u5740\u3002",
+        "browser.server_access.show": "\u986f\u793a\u7db2\u5740",
+        "browser.server_access.shown": "\u5b58\u53d6\u7db2\u5740\u6703\u986f\u793a 30 \u79d2\u3002",
+        "browser.server_access.title": "\u5b58\u53d6\u5fa9\u539f",
+        "browser.server_access.unavailable": "\u7121\u6cd5\u53d6\u5f97\u5b58\u53d6\u7db2\u5740\u3002",
+        "browser.server_access.url": "\u5b58\u53d6\u7db2\u5740",
         "common.cancel": "\u53d6\u6d88",
         "common.close": "\u95dc\u9589",
         "common.copy_url": "\u8907\u88fd\u7db2\u5740",
diff --git a/templates/index.html b/templates/index.html
index 41686e7..3b8d9e0 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -1074,30 +1074,30 @@
     <div id="loader-screen">
         <div class="spinner"></div>
         <div class="progress-container"><div id="progress-bar"></div></div>
-        <div id="loader-text" style="margin-bottom: 5px;">Initializing StandTerm...</div>
+        <div id="loader-text" style="margin-bottom: 5px;" data-i18n="browser.chrome.loading">Initializing StandTerm...</div>
         <div id="loader-timer">0.0s</div>
     </div>
 
     <div id="context-menu">
-        <div class="menu-item" id="paste-option">&#x1F4CB; Paste</div>
+        <div class="menu-item" id="paste-option" data-i18n="browser.chrome.paste_menu">&#x1F4CB; Paste</div>
         <div class="menu-separator"></div>
-        <div class="menu-item hidden" id="open-overlay-option">&#x1F517; Open in Overlay</div>
-        <div class="menu-item hidden" id="search-google-option">&#x1F50D; Search Google</div>
+        <div class="menu-item hidden" id="open-overlay-option" data-i18n="browser.chrome.overlay_menu">&#x1F517; Open in Overlay</div>
+        <div class="menu-item hidden" id="search-google-option" data-i18n="browser.chrome.search_google">&#x1F50D; Search Google</div>
         <div class="menu-separator" id="menu-sep-sel" style="display:none"></div>
-        <div class="menu-item" id="pip-option">&#x29C9; Terminal to PiP</div>
-        <div class="menu-item hidden" id="sftp-send-option">&#x1F4C1; Files&hellip;</div>
-        <div class="menu-item" id="settings-option">&#x2699;&#xFE0F; Settings</div>
+        <div class="menu-item" id="pip-option" data-i18n="browser.chrome.pip_menu">&#x29C9; Terminal to PiP</div>
+        <div class="menu-item hidden" id="sftp-send-option" data-i18n="browser.chrome.files_menu">&#x1F4C1; Files&hellip;</div>
+        <div class="menu-item" id="settings-option" data-i18n="browser.chrome.settings_menu">&#x2699;&#xFE0F; Settings</div>
         <div class="menu-separator"></div>
-        <div class="menu-item" id="native-menu-option">&#x1F6AA; Use browser context menu</div>
+        <div class="menu-item" id="native-menu-option" data-i18n="browser.chrome.native_menu">&#x1F6AA; Use browser context menu</div>
     </div>
 
     <div id="url-overlay">
         <div id="overlay-shield"></div>
         <div id="overlay-header">
-            <span id="overlay-title">Side Browser</span>
+            <span id="overlay-title" data-i18n="browser.chrome.overlay_title">Side Browser</span>
             <div id="header-right">
-                <button id="external-link" class="header-btn" title="Open in New Tab">&#x2197;</button>
-                <button id="close-overlay" class="header-btn" title="Close Overlay">&times;</button>
+                <button id="external-link" class="header-btn" title="Open in New Tab" data-i18n-title="browser.chrome.new_tab">&#x2197;</button>
+                <button id="close-overlay" class="header-btn" title="Close Overlay" data-i18n-title="browser.chrome.close_overlay">&times;</button>
             </div>
         </div>
         <div style="flex-grow: 1; display: flex; align-items: center; justify-content: center; background: #333; overflow: hidden; position: relative;">
@@ -1105,11 +1105,11 @@
             <img id="overlay-img" style="max-width: 100%; max-height: 100%; object-fit: contain; display: none;" referrerpolicy="no-referrer" />
             <div id="overlay-fallback" style="display:none; position:absolute; top:0; left:0; right:0; bottom:0; background:#1a1a1a; flex-direction:column; align-items:center; justify-content:center; gap:16px; padding:20px; text-align:center; color:#ddd;">
                 <div style="font-size:36px;">&#x26A0;</div>
-                <div id="overlay-fallback-message" style="font-size:14px; color:#aaa;">Site blocked embedding or refused to connect.</div>
+                <div id="overlay-fallback-message" style="font-size:14px; color:#aaa;" data-i18n="browser.chrome.overlay_unavailable">Site blocked embedding or refused to connect.</div>
                 <div id="overlay-fallback-url" style="font-size:11px; color:#555; word-break:break-all; max-width:90%;"></div>
                 <div style="display:flex; gap:10px; flex-wrap:wrap; justify-content:center;">
-                    <button id="overlay-fallback-popup" style="background:#0a84ff; color:white; border:none; border-radius:6px; padding:10px 24px; cursor:pointer; font-size:13px; font-weight:bold;">Open as Popup &#x29C9;</button>
-                    <button id="overlay-fallback-open" style="background:#444; color:white; border:none; border-radius:6px; padding:10px 24px; cursor:pointer; font-size:13px; font-weight:bold;">Open in New Tab &#x2197;</button>
+                    <button id="overlay-fallback-popup" style="background:#0a84ff; color:white; border:none; border-radius:6px; padding:10px 24px; cursor:pointer; font-size:13px; font-weight:bold;" data-i18n="browser.chrome.popup_link">Open as Popup &#x29C9;</button>
+                    <button id="overlay-fallback-open" style="background:#444; color:white; border:none; border-radius:6px; padding:10px 24px; cursor:pointer; font-size:13px; font-weight:bold;" data-i18n="browser.chrome.new_tab_link">Open in New Tab &#x2197;</button>
                 </div>
             </div>
         </div>
@@ -1258,26 +1258,26 @@ <h3 data-i18n="settings.title">Settings</h3>
                             <div class="settings-row"><label data-i18n="settings.server.https">HTTPS</label><span class="settings-value" id="server-settings-https">--</span></div>
                         </fieldset>
                         <fieldset class="settings-fieldset">
-                            <legend>Access recovery</legend>
+                            <legend data-i18n="browser.server_access.title">Access recovery</legend>
                             <div class="settings-row">
-                                <label>Access URL</label>
+                                <label data-i18n="browser.server_access.url">Access URL</label>
                                 <span class="settings-secret-actions">
-                                    <button type="button" id="server-access-copy-btn">Copy URL</button>
-                                    <button type="button" id="server-access-show-btn">Show URL</button>
+                                    <button type="button" id="server-access-copy-btn" data-i18n="common.copy_url">Copy URL</button>
+                                    <button type="button" id="server-access-show-btn" data-i18n="browser.server_access.show">Show URL</button>
                                 </span>
                             </div>
-                            <div class="settings-status" id="server-access-status">Access URL is fetched only when requested.</div>
+                            <div class="settings-status" id="server-access-status" data-i18n="browser.server_access.hint">Access URL is fetched only when requested.</div>
                             <div class="settings-secret-value" id="server-access-url"></div>
                         </fieldset>
                         <fieldset class="settings-fieldset">
-                            <legend>Platform session recovery</legend>
-                            <div class="settings-status" id="platform-recovery-status">Loading platform recovery status...</div>
+                            <legend data-i18n="browser.platform.title">Device session recovery</legend>
+                            <div class="settings-status" id="platform-recovery-status" data-i18n="browser.platform.loading">Loading device recovery status…</div>
                             <div class="settings-transfer-actions">
-                                <button type="button" id="platform-recovery-register">Register platform passkey</button>
-                                <button type="button" id="platform-recovery-arm">Arm existing passkey</button>
-                                <button type="button" class="danger" id="platform-recovery-remove">Revoke recovery</button>
+                                <button type="button" id="platform-recovery-register" data-i18n="browser.platform.register">Register device passkey</button>
+                                <button type="button" id="platform-recovery-arm" data-i18n="browser.platform.arm">Enable recovery with existing passkey</button>
+                                <button type="button" class="danger" id="platform-recovery-remove" data-i18n="browser.platform.revoke">Revoke recovery</button>
                             </div>
-                            <div class="settings-status">Windows Hello, Touch ID, or another platform passkey can restore only a session that remains live in this StandTerm process. No access or session token is stored.</div>
+                            <div class="settings-status" data-i18n="browser.platform.hint">Windows Hello, Touch ID, or another device passkey can restore a session only while it remains live in this StandTerm process. Recovery does not persist access or session tokens.</div>
                         </fieldset>
                         <fieldset class="settings-fieldset">
                             <legend data-i18n="settings.server.mutable_settings">Low-risk runtime settings</legend>
@@ -1301,12 +1301,12 @@ <h3 data-i18n="settings.title">Settings</h3>
                         </fieldset>
                     </div>
                     <div class="settings-tab" id="tab-diagnostics">
-                        <div class="settings-status" id="connection-diagnostics-status">No connection events.</div>
+                        <div class="settings-status" id="connection-diagnostics-status" data-i18n="browser.diagnostics.empty">No connection events.</div>
                         <div class="diagnostics-actions">
-                            <button type="button" id="connection-diagnostics-clear">Clear</button>
-                            <button type="button" id="connection-diagnostics-copy">Copy Log</button>
+                            <button type="button" id="connection-diagnostics-clear" data-i18n="browser.diagnostics.clear">Clear</button>
+                            <button type="button" id="connection-diagnostics-copy" data-i18n="browser.diagnostics.copy">Copy log</button>
                         </div>
-                        <textarea id="connection-diagnostics-log" readonly spellcheck="false" aria-label="Connection diagnostics log"></textarea>
+                        <textarea id="connection-diagnostics-log" readonly spellcheck="false" aria-label="Connection diagnostics log" data-i18n-aria-label="browser.diagnostics.log"></textarea>
                     </div>
                 </div>
             </div>
@@ -1324,15 +1324,15 @@ <h3 data-i18n="settings.title">Settings</h3>
     <div id="paste-review-modal">
         <div class="paste-review-box">
             <div class="settings-header">
-                <h3>Review Paste</h3>
+                <h3 data-i18n="browser.paste.title">Review paste</h3>
             </div>
             <div class="paste-review-body">
                 <div id="paste-review-meta"></div>
-                <textarea id="paste-review-preview" readonly spellcheck="false"></textarea>
+                <textarea id="paste-review-preview" aria-label="Paste preview" data-i18n-aria-label="browser.paste.preview" readonly spellcheck="false"></textarea>
             </div>
             <div class="paste-review-actions">
-                <button type="button" id="paste-review-cancel">Cancel</button>
-                <button type="button" id="paste-review-approve">Paste</button>
+                <button type="button" id="paste-review-cancel" data-i18n="common.cancel">Cancel</button>
+                <button type="button" id="paste-review-approve" data-i18n="browser.chrome.paste">Paste</button>
             </div>
         </div>
     </div>
@@ -1352,8 +1352,8 @@ <h2>StandTerm</h2>
             <div id="actionMessage"></div>
             <div id="actionQuestion" class="action-question"></div>
             <div class="action-buttons">
-                <button id="actionYesBtn" class="action-secondary">Yes</button>
-                <button id="actionNoBtn" class="action-primary">No</button>
+                <button id="actionYesBtn" data-i18n="common.yes" class="action-secondary">Yes</button>
+                <button id="actionNoBtn" data-i18n="common.no" class="action-primary">No</button>
             </div>
         </div>
         <div id="browser-auth-box">
@@ -1450,7 +1450,7 @@ <h3 id="browser-auth-help-title" data-i18n="browser.auth.help_title">Manual brow
     <div id="terminal-tabs">
         <div id="tab-strip">
             <div id="tabs-list"></div>
-            <button id="new-tab-btn" class="status-action" type="button" title="New terminal tab" aria-label="New terminal tab">+</button>
+            <button id="new-tab-btn" class="status-action" type="button" title="New terminal tab" aria-label="New terminal tab" data-i18n-aria-label="browser.chrome.new_terminal" data-i18n-title="browser.chrome.new_terminal">+</button>
         </div>
         <button id="agent-pause-btn" class="status-action" type="button" title="Pause Agent access" data-i18n="agent.pause.action">Pause Agent</button>
         <button id="agent-status-mint-btn" class="status-action agent-status-mint" title="Create a standard token for the active terminal">Create token</button>
@@ -1463,10 +1463,10 @@ <h3 id="browser-auth-help-title" data-i18n="browser.auth.help_title">Manual brow
             <button id="ssh-tunnels-btn" class="status-action" type="button" title="Manage TCP forwarding for this SSH tab" data-i18n-title="ssh.tunnels.tooltip" data-i18n="ssh.tunnels.action" hidden>Tunnels</button>
             <button id="sftp-status-btn" class="status-action status-sftp" type="button" title="Open Files" aria-label="Open Files" hidden>&#x1F4C1;</button>
             <button id="transfer-queue-btn" class="status-action" type="button" title="Transfer Queue" aria-label="Transfer Queue" data-i18n-title="agent.transfer.queue" data-i18n-aria-label="agent.transfer.queue" hidden><span aria-hidden="true">&#x21C4;</span> <span id="transfer-queue-count">0</span></button>
-            <button id="quick-settings" class="status-action" type="button" title="Settings" aria-label="Settings">&#x2699;&#xFE0F;</button>
+            <button id="quick-settings" data-i18n-title="settings.title" data-i18n-aria-label="settings.title" class="status-action" type="button" title="Settings" aria-label="Settings">&#x2699;&#xFE0F;</button>
             <details id="tab-more">
-                <summary class="status-action" title="More terminal actions" aria-label="More terminal actions">&#x22EF;</summary>
-                <div id="tab-more-actions"><button id="close-tabs-btn" class="status-action" type="button">Close all terminal tabs&hellip;</button></div>
+                <summary class="status-action" title="More terminal actions" aria-label="More terminal actions" data-i18n-title="browser.chrome.more_actions" data-i18n-aria-label="browser.chrome.more_actions">&#x22EF;</summary>
+                <div id="tab-more-actions"><button id="close-tabs-btn" class="status-action" type="button" data-i18n="browser.chrome.close_tabs">Close all terminal tabs&hellip;</button></div>
             </details>
         </div>
     </div>
@@ -1565,16 +1565,16 @@ <h4 data-i18n="ssh.tunnels.add">Add tunnel</h4>
     </dialog>
     <div id="terminal"></div>
     <div id="status-bar">
-        <span class="sb-item">Socket:&nbsp;<span id="socketStatus">Disconnected</span></span>
+        <span class="sb-item"><span data-i18n="browser.chrome.socket">Socket</span>:&nbsp;<span id="socketStatus">Disconnected</span></span>
         <span class="sb-sep">|</span>
-        <span class="sb-item">Session:&nbsp;<span id="sshStatus">Disconnected</span></span>
+        <span class="sb-item"><span data-i18n="browser.chrome.session">Session</span>:&nbsp;<span id="sshStatus">Disconnected</span></span>
         <span class="sb-sep" id="terminal-title-separator" hidden>|</span>
         <span class="sb-item" id="terminal-title-item" hidden><span id="terminal-title"></span></span>
         <span class="sb-sep">|</span>
-        <span class="sb-item">size:&nbsp;<span id="terminal-size">--x--</span></span>
+        <span class="sb-item"><span data-i18n="browser.chrome.size">size</span>:&nbsp;<span id="terminal-size">--x--</span></span>
         <span class="sb-sep">|</span>
         <span class="sb-item" id="clock-display"></span>
-        <span id="uptime-section" class="sb-item" style="display:none"><span class="sb-sep">|</span>connected:&nbsp;<span id="uptime-display"></span></span>
+        <span id="uptime-section" class="sb-item" style="display:none"><span class="sb-sep">|</span><span data-i18n="browser.chrome.uptime">connected</span>:&nbsp;<span id="uptime-display"></span></span>
     </div>
     <div id="policy-debug-panel"></div>
     <div id="debug-hud"></div>
@@ -1617,17 +1617,17 @@ <h4 data-i18n="ssh.tunnels.add">Add tunnel</h4>
                 </details>
             </div>
             <details id="agent-advanced-tools">
-                <summary>Advanced tools</summary>
+                <summary data-i18n="browser.chrome.advanced">Advanced tools</summary>
                 <div id="operator-observation-row">
-                    <button type="button" id="operator-observation-start-btn">Observe User</button>
-                    <button type="button" id="operator-observation-stop-btn">Stop</button>
-                    <button type="button" id="operator-observation-mark-btn">Mark</button>
+                    <button type="button" id="operator-observation-start-btn" data-i18n="browser.chrome.observe">Observe User</button>
+                    <button type="button" id="operator-observation-stop-btn" data-i18n="browser.chrome.stop_observing">Stop</button>
+                    <button type="button" id="operator-observation-mark-btn" data-i18n="browser.chrome.mark_observation">Mark</button>
                     <span id="operator-observation-state">Off</span>
                 </div>
                 <div id="agent-mock-row">
                     <input type="text" id="agent-mock-input" autocomplete="off" spellcheck="false" value="whoami\n">
-                    <button type="button" id="agent-mock-send-btn">Send</button>
-                    <button type="button" id="agent-provider-run-btn">Run</button>
+                    <button type="button" id="agent-mock-send-btn" data-i18n="browser.chrome.mock_send">Send</button>
+                    <button type="button" id="agent-provider-run-btn" data-i18n="browser.chrome.provider_run">Run</button>
                 </div>
             </details>
         </div>
@@ -1832,6 +1832,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
         const uiText = window.StandTermI18n.create(window.StandTermMessages, prefs.uiLanguage);
         const t = uiText.t;
         uiText.apply(document);
+        document.getElementById('launcher-session-id').textContent = t('browser.chrome.session_id', { id: LAUNCHER_INSTANCE_ID });
         document.getElementById('settings-theme-group-custom').label = t('settings.appearance.group_custom');
         document.getElementById('settings-theme-group-windows-terminal').label = t('settings.appearance.group_windows_terminal');
         document.documentElement.lang = uiText.locale;
@@ -1945,18 +1946,23 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
         }
 
         // --- Clipboard Helper ---
-        function copyToClipboard(text) {
-            if (!text) return;
+        async function copyToClipboard(text) {
+            if (!text) return false;
             if (navigator.clipboard && navigator.clipboard.writeText) {
-                navigator.clipboard.writeText(text).catch(() => fallbackCopy(text));
-            } else { fallbackCopy(text); }
+                try {
+                    await navigator.clipboard.writeText(text);
+                    return true;
+                } catch (e) {}
+            }
+            return fallbackCopy(text);
         }
         function fallbackCopy(text) {
             const ta = document.createElement("textarea");
             ta.value = text; ta.style.position = "fixed"; ta.style.opacity = "0";
             document.body.appendChild(ta); ta.select();
-            try { document.execCommand('copy'); } catch (e) {}
-            document.body.removeChild(ta);
+            try { return document.execCommand('copy'); }
+            catch (e) { return false; }
+            finally { document.body.removeChild(ta); }
         }
 
         const BROWSER_AUTH_DB = 'browser-auth-v1';
@@ -2271,8 +2277,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             if (!window.crypto || !crypto.subtle || !window.indexedDB) {
                 const origin = window.location.origin;
                 const localhostUrl = INITIAL_TERMINAL_POLICY.localhost_access_url || '';
-                const urlHint = localhostUrl ? ` Open ${localhostUrl} or the HTTPS Access URL printed by the launcher.` : ' Open the HTTPS Access URL printed by the launcher.';
-                throw new Error(`Browser authorization requires WebCrypto and IndexedDB. Current origin ${origin} is not a secure browser context.${urlHint}`);
+                const urlHint = localhostUrl ? t('browser.chrome.secure_url', { url: localhostUrl }) : t('browser.chrome.secure_https');
+                throw new Error(t('browser.chrome.secure_required', { origin, hint: urlHint }));
             }
 
             const record = await browserAuthDbGet(BROWSER_AUTH_KEY);
@@ -2304,7 +2310,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const script = document.createElement('script');
                 script.src = localUrl;
                 script.onload = () => resolve(true);
-                script.onerror = () => reject(new Error(`Failed to load ${localUrl}`));
+                script.onerror = () => reject(new Error(t('browser.chrome.script_failed', { url: localUrl })));
                 document.head.appendChild(script);
             });
         }
@@ -3430,11 +3436,11 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 operatorObservationStopBtn.disabled = !active;
                 operatorObservationMarkBtn.disabled = !active;
                 if (!enabled) {
-                    operatorObservationState.innerText = 'Unavailable';
+                    operatorObservationState.innerText = t('browser.chrome.unavailable');
                 } else if (active) {
-                    operatorObservationState.innerText = `OBSERVING · ${observation.eventCount || 0}`;
+                    operatorObservationState.innerText = t('browser.chrome.observing', { count: observation.eventCount || 0 });
                 } else {
-                    operatorObservationState.innerText = 'Off';
+                    operatorObservationState.innerText = t('browser.chrome.off');
                 }
             }
 
@@ -3635,17 +3641,17 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const agent = state ? state.agent : null;
                 const privacy = agent ? formatAgentPanelValue(agent.privacyState) : '--';
                 const privacyBlocking = !!(agent && AGENT_SNAPSHOT_BLOCKED_PRIVACY_STATES.has(agent.privacyState));
-                setAgentChip(agentGatePrivacy, `privacy: ${privacy}`, privacy !== 'normal' && privacy !== '--', privacyBlocking);
+                setAgentChip(agentGatePrivacy, t('browser.chrome.privacy', { value: privacy }), privacy !== 'normal' && privacy !== '--', privacyBlocking);
 
                 const leaseActive = !!(agent && agent.humanInputLeaseActive);
                 const secondsRemaining = leaseActive ? getAgentLeaseSecondsRemaining(agent) : null;
                 const humanText = leaseActive && secondsRemaining !== null
-                    ? `human input: locked ${secondsRemaining}s`
-                    : leaseActive ? 'human input: locked' : 'human input: idle';
+                    ? t('browser.chrome.human_seconds', { seconds: secondsRemaining })
+                    : leaseActive ? t('browser.chrome.human_locked') : t('browser.chrome.human_idle');
                 setAgentChip(agentGateHuman, humanText, leaseActive, leaseActive);
 
                 const paused = !!(agent && (agent.paused || agent.mode === AGENT_MODE_PAUSED));
-                setAgentChip(agentGatePause, paused ? 'pause: on' : 'pause: off', paused, paused);
+                setAgentChip(agentGatePause, paused ? t('browser.chrome.pause_on') : t('browser.chrome.pause_off'), paused, paused);
             }
 
             function isAgentActionError(action) {
@@ -3663,29 +3669,29 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 agentStatusBox.classList.toggle('error', hasError);
                 agentStatusDetail.classList.toggle('outcome-unknown', !!(action && action.errorCode === 'file_copy_publish_outcome_unknown'));
                 if (!action) {
-                    agentStatusMain.innerText = 'last: none';
-                    agentStatusDetail.innerText = 'error: none';
+                    agentStatusMain.innerText = t('browser.chrome.last_none');
+                    agentStatusDetail.innerText = t('browser.chrome.error_none');
                     return;
                 }
                 const actionId = action.actionId ? action.actionId.slice(0, 8) : '--';
                 const status = formatAgentPanelValue(action.status);
                 const type = formatAgentPanelValue(action.actionType);
-                agentStatusMain.innerText = `last: ${status} · ${type} · ${actionId}`;
+                agentStatusMain.innerText = t('browser.chrome.last_action', { status, type, id: actionId });
                 const parts = [];
-                if (action.errorCode) parts.push(`error: ${action.errorCode}`);
-                else parts.push('error: none');
+                if (action.errorCode) parts.push(t('browser.chrome.error', { code: action.errorCode }));
+                else parts.push(t('browser.chrome.error_none'));
                 if (action.errorCode === 'file_copy_publish_outcome_unknown') {
                     parts.push(t('agent.copy.result_unknown'));
                 }
                 if (action.bytesWritten !== null && Number.isFinite(Number(action.bytesWritten))) {
-                    parts.push(`written: ${action.bytesWritten}`);
+                    parts.push(t('browser.chrome.written', { bytes: action.bytesWritten }));
                 } else if (action.bytesCopied !== null && Number.isFinite(Number(action.bytesCopied))) {
                     const total = action.totalBytes !== null && Number.isFinite(Number(action.totalBytes))
                         ? `/${action.totalBytes}`
                         : '';
-                    parts.push(`copied: ${action.bytesCopied}${total}`);
+                    parts.push(t('browser.chrome.copied', { bytes: action.bytesCopied, total }));
                 } else if (action.byteLength !== null && Number.isFinite(Number(action.byteLength))) {
-                    parts.push(`bytes: ${action.byteLength}`);
+                    parts.push(t('browser.chrome.bytes', { bytes: action.byteLength }));
                 }
                 agentStatusDetail.innerText = parts.join(' · ');
             }
@@ -4661,7 +4667,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     text, clipboardPaste
                 };
                 emitAgentPrivacyState(state, 'paste_review');
-                pasteReviewMeta.innerText = `${state.label || state.id} · ${text.length} bytes · ${countPasteLines(text)} lines`;
+                pasteReviewMeta.innerText = t('browser.paste.metadata', { target: state.label || state.id, lines: countPasteLines(text) });
                 pasteReviewPreview.value = text;
                 pasteReviewModal.classList.add('open');
                 pasteReviewApproveBtn.focus();
@@ -4970,7 +4976,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     const current = await loadSshSessionState();
                     if (current.revision !== draft.revision) {
                         if (pendingSshConnectionDrafts.get(terminalId) === draft) pendingSshConnectionDrafts.delete(terminalId);
-                        throw new Error('SSH settings changed while confirming the host. Reload before connecting.');
+                        throw new Error(t('browser.chrome.ssh_changed_confirm'));
                     }
                 }
                 if (pendingSshConnectionDrafts.get(terminalId) === draft) submitConnection(draft.payload);
@@ -4987,7 +4993,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const assertCurrent = () => {
                     if (formRevision !== sshConnectionFormRevision || terminal !== getActiveTerminalState()
                             || (!fromRoute && saveSession !== sshSaveSessionInput.checked)) {
-                        throw new Error('SSH connection settings changed. Review them and connect again.');
+                        throw new Error(t('browser.chrome.ssh_changed'));
                     }
                 };
                 await sshSessionReady;
@@ -4996,10 +5002,10 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 assertCurrent();
                 const source = routeDraft?.state || snapshot.state;
                 const selected = [...source.profiles, ...source.history].find(entry => entry.id === selectedId);
-                if (fromRoute && !selected) throw new Error('Choose a saved route before connecting.');
-                if (!fromRoute && selectedId && !selected) throw new Error('The SSH entry was removed. Reload the settings.');
+                if (fromRoute && !selected) throw new Error(t('browser.chrome.choose_route'));
+                if (!fromRoute && selectedId && !selected) throw new Error(t('browser.chrome.entry_removed'));
                 if (snapshot.state.revision !== sshSessionState.revision || source.revision !== snapshot.state.revision) {
-                    throw new Error('SSH settings changed in another window. Reload before connecting.');
+                    throw new Error(t('browser.chrome.ssh_other_window'));
                 }
                 const records = [...snapshot.keys, ...temporaryKeys];
                 const path = fromRoute ? SshRoutes.clone(SshRoutes.checkedPath(source, selected)) : [{
@@ -5022,9 +5028,9 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                         const owner = source.profiles.find(profile => profile.id === ref?.ownerProfileId);
                         if (!ref || (ref.kind !== 'credential' && (!owner || owner.keyId !== ref.keyId))
                                 || ref.targetKey !== getSshTargetKey(node.endpoint)) {
-                            throw new Error(`SSH node ${index + 1}: choose a browser key bound to this endpoint, or turn Use key off.`);
+                            throw new Error(t('browser.chrome.key_endpoint', { index: index + 1 }));
                         }
-                        if (!isBrowserSshKeyAllowedByPolicy()) throw new Error('Browser SSH keys require localhost or authorized HTTPS.');
+                        if (!isBrowserSshKeyAllowedByPolicy()) throw new Error(t('browser.chrome.key_policy'));
                         const record = await validateBrowserSshKeyRecord(records.find(key => key.keyId === ref.keyId), owner,
                             ref.kind === 'credential' ? ref : null);
                         assertCurrent();
@@ -5161,12 +5167,12 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     applyQuickConnectKeySelection();
                 } catch (err) {
                     if (version !== quickConnectKeyLoadVersion) return;
-                    setSshSessionMessage(err.message || 'The browser SSH key is unavailable.', true);
+                    setSshSessionMessage(err.message || t('browser.chrome.key_unavailable'), true);
                 }
             }
 
             async function createTemporarySshKey(endpoint) {
-                if (!isBrowserSshKeyAllowedByPolicy()) throw new Error('Browser keys require localhost or an authorized HTTPS connection.');
+                if (!isBrowserSshKeyAllowedByPolicy()) throw new Error(t('browser.chrome.key_policy_connection'));
                 const record = await createBrowserSshKeyRecord(null);
                 return { ...record, kind: 'credential', targetKey: SshRoutes.endpointKey(endpoint) };
             }
@@ -5923,7 +5929,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 if (!connectionDiagnosticsLog || !connectionDiagnosticsStatus) return;
                 connectionDiagnosticsLog.value = buildConnectionDiagnosticsText();
                 const count = connectionDiagnostics.length;
-                connectionDiagnosticsStatus.textContent = count === 1 ? '1 connection event.' : `${count} connection events.`;
+                connectionDiagnosticsStatus.textContent = t('browser.diagnostics.count', { count });
             }
 
             function recordConnectionDiagnostic(event, details = {}) {
@@ -6430,7 +6436,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const label = state && (state.title || state.label);
                 const isSshLabel = typeof label === 'string' && (label === 'SSH' || label.startsWith('SSH - '));
                 if (state && !prefs.showDetailedSshLabels && (state.connectionType === 'ssh' || isSshLabel)) return 'SSH';
-                return label || (state && state.id) || 'Terminal';
+                return label || (state && state.id) || t('browser.chrome.terminal');
             }
 
             function normalizeTerminalApplicationTitle(value) {
@@ -6576,7 +6582,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     unavailableMark.innerText = '\u00D7';
                     button.appendChild(unavailableMark);
                 }
-                button.title = available ? 'Open Files' : 'Files not available';
+                button.title = available ? t('browser.chrome.files_open') : t('browser.chrome.files_unavailable');
                 button.setAttribute('aria-label', button.title);
             }
 
@@ -6691,7 +6697,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const closeBtn = document.createElement('button');
                 closeBtn.type = 'button';
                 closeBtn.className = 'tab-close';
-                closeBtn.title = 'Close terminal tab';
+                closeBtn.title = t('browser.chrome.close_terminal');
                 closeBtn.innerText = '×';
                 tabEl.append(stateEl, titleEl, agentCountdownEl, closeBtn);
                 tabsList.appendChild(tabEl);
@@ -6909,7 +6915,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     state.sftpAvailable = typeof item.files_available === 'boolean'
                         ? item.files_available
                         : (state.connectionType === 'ssh' ? null : false);
-                    state.label = item.terminal_label || CONNECTION_LABELS[state.connectionType] || 'Terminal';
+                    state.label = item.terminal_label || CONNECTION_LABELS[state.connectionType] || t('browser.chrome.terminal');
                     state.title = state.label;
                     state.termName = item.term || state.termName;
                     if (state.connected && !state.connectedAt) state.connectedAt = new Date();
@@ -7983,7 +7989,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
 
             async function registerPlatformRecoveryCredential() {
                 if (!platformRecoverySupported()) {
-                    throw new Error('Platform passkeys are unavailable in this browser context.');
+                    throw new Error(t('browser.platform.unsupported'));
                 }
                 const optionsResponse = await fetch('/session-recovery/register/options', {
                     method: 'POST',
@@ -8010,7 +8016,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
 
             async function authenticatePlatformRecoveryCredential() {
                 if (!platformRecoverySupported()) {
-                    throw new Error('Platform passkeys are unavailable in this browser context.');
+                    throw new Error(t('browser.platform.unsupported'));
                 }
                 const optionsResponse = await fetch('/session-recovery/authenticate/options', {
                     method: 'POST',
@@ -8040,16 +8046,16 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 reconnectAfterSessionRecovery();
             }
 
-            async function requestPlatformRecoveryStatus() {
+            async function requestPlatformRecoveryStatus(feedback = '') {
                 if (!platformRecoveryStatus) return;
                 if (!platformRecoverySupported()) {
-                    platformRecoveryStatus.textContent = 'Platform passkeys are unavailable in this browser context.';
+                    platformRecoveryStatus.textContent = t('browser.platform.unsupported');
                     if (platformRecoveryRegisterBtn) platformRecoveryRegisterBtn.disabled = true;
                     if (platformRecoveryArmBtn) platformRecoveryArmBtn.disabled = true;
                     if (platformRecoveryRemoveBtn) platformRecoveryRemoveBtn.disabled = true;
                     return;
                 }
-                platformRecoveryStatus.textContent = 'Loading platform recovery status...';
+                if (!feedback) platformRecoveryStatus.textContent = t('browser.platform.loading');
                 try {
                     const response = await fetch('/session-recovery/status', {
                         headers: { 'Accept': 'application/json' },
@@ -8058,14 +8064,14 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     const available = payload.available === true;
                     const configured = Number(payload.configured_credentials) || 0;
                     const armed = Number(payload.armed_credentials) || 0;
-                    platformRecoveryStatus.textContent = available
-                        ? `${configured} registered, ${armed} armed for this live session. RP ID: ${payload.rp_id}`
-                        : (payload.message || 'Platform recovery is unavailable for this origin.');
+                    platformRecoveryStatus.textContent = feedback || (available
+                        ? t('browser.platform.status', { configured, armed, rp_id: payload.rp_id })
+                        : (payload.message || t('browser.platform.origin_unavailable')));
                     if (platformRecoveryRegisterBtn) platformRecoveryRegisterBtn.disabled = !available;
                     if (platformRecoveryArmBtn) platformRecoveryArmBtn.disabled = !available || configured === 0;
                     if (platformRecoveryRemoveBtn) platformRecoveryRemoveBtn.disabled = !available || configured === 0;
                 } catch (error) {
-                    platformRecoveryStatus.textContent = formatPlatformRecoveryError(error);
+                    platformRecoveryStatus.textContent = feedback || formatPlatformRecoveryError(error);
                     if (platformRecoveryRegisterBtn) platformRecoveryRegisterBtn.disabled = true;
                     if (platformRecoveryArmBtn) platformRecoveryArmBtn.disabled = true;
                     if (platformRecoveryRemoveBtn) platformRecoveryRemoveBtn.disabled = true;
@@ -8181,11 +8187,11 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 });
                 if (!response.ok) {
                     showSessionRecovery(t('browser.recovery.expired'));
-                    throw new Error('Session expired.');
+                    throw new Error(t('browser.server_access.expired'));
                 }
                 const result = await response.json();
                 if (!result || result.status !== 'ok' || typeof result.access_url !== 'string') {
-                    throw new Error('Access URL is unavailable.');
+                    throw new Error(t('browser.server_access.unavailable'));
                 }
                 return result;
             }
@@ -8202,7 +8208,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             }
 
             async function showAccessUrl() {
-                if (serverAccessStatus) serverAccessStatus.textContent = 'Fetching access URL...';
+                if (serverAccessStatus) serverAccessStatus.textContent = t('browser.server_access.fetching');
                 const result = await fetchAccessUrl();
                 if (serverAccessUrl) {
                     const lines = [result.access_url];
@@ -8210,16 +8216,17 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     serverAccessUrl.textContent = lines.join('\n');
                     serverAccessUrl.style.display = 'block';
                 }
-                if (serverAccessStatus) serverAccessStatus.textContent = 'Access URL shown for 30 seconds.';
+                if (serverAccessStatus) serverAccessStatus.textContent = t('browser.server_access.shown');
                 hideAccessUrlValueLater();
                 return result;
             }
 
             async function copyAccessUrl() {
-                if (serverAccessStatus) serverAccessStatus.textContent = 'Fetching access URL...';
+                if (serverAccessStatus) serverAccessStatus.textContent = t('browser.server_access.fetching');
                 const result = await fetchAccessUrl();
-                copyToClipboard(result.access_url);
-                if (serverAccessStatus) serverAccessStatus.textContent = 'Access URL copied.';
+                if (serverAccessStatus) serverAccessStatus.textContent = t('browser.diagnostics.copying');
+                const copied = await copyToClipboard(result.access_url);
+                if (serverAccessStatus) serverAccessStatus.textContent = t(copied ? 'browser.server_access.copied' : 'browser.server_access.copy_failed');
                 return result;
             }
 
@@ -8264,7 +8271,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 if (connectionType === 'ssh') {
                     if (sshPreparationMode === 'route') {
                         const entry = currentSshRouteEntry();
-                        if (!entry) throw new Error('Choose a saved route before connecting.');
+                        if (!entry) throw new Error(t('browser.chrome.choose_route'));
                         const target = SshRoutes.checkedPath(sshRouteDraft?.state || sshSessionState, entry).at(-1).endpoint;
                         return { ...formData, ...target, password: '', profile_name: entry.name || '' };
                     }
@@ -8273,7 +8280,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     formData.username = sshUsernameInput.value;
                     formData.password = sshPasswordInput.value;
                     formData.host_key_alias = document.getElementById('ssh-direct-alias').value.trim();
-                    if (sshUseBrowserKeyInput.checked && (!quickConnectSshKeyRecord || !isBrowserSshKeyAllowedByPolicy())) throw new Error('Choose a key or wait for key creation before connecting.');
+                    if (sshUseBrowserKeyInput.checked && (!quickConnectSshKeyRecord || !isBrowserSshKeyAllowedByPolicy())) throw new Error(t('browser.chrome.key_not_ready'));
                     const matchingProfile = findSshProfileForTarget(formData);
                     if (matchingProfile) formData.profile_name = matchingProfile.name;
                     if (
@@ -8333,7 +8340,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 state.sshTarget = state.connectionType === 'ssh' ? normalizeSshTarget(formData) : null;
                 state.label = formData.connection_type === 'ssh' && formData.profile_name
                     ? getSshProfileTabLabel(formData.profile_name)
-                    : (CONNECTION_LABELS[state.connectionType] || 'Terminal');
+                    : (CONNECTION_LABELS[state.connectionType] || t('browser.chrome.terminal'));
                 state.title = state.label;
                 state.applicationTitle = '';
                 state.connectedAt = null;
@@ -8402,9 +8409,9 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             document.getElementById('ssh-cancel-start').onclick = () => cancelSshConnection();
             function requestSshHostIdentity(payload) {
                 return new Promise((resolve, reject) => {
-                    if (!socket?.connected) { reject(new Error('StandTerm is disconnected.')); return; }
+                    if (!socket?.connected) { reject(new Error(t('browser.chrome.core_disconnected'))); return; }
                     socket.timeout(SSH_HOST_IDENTITY_TIMEOUT_MS).emit('ssh_host_identity', payload, (error, result) => {
-                        if (error) reject(new Error('SSH host identity request timed out.'));
+                        if (error) reject(new Error(t('browser.chrome.identity_timeout')));
                         else resolve(result);
                     });
                 });
@@ -8589,7 +8596,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     const deadline = Date.now() + timeoutMs;
                     const check = () => {
                         if (!canUseAgentPanel(state)) {
-                            reject(new Error('Agent access is unavailable for this terminal.'));
+                            reject(new Error(t('browser.chrome.agent_unavailable')));
                             return;
                         }
                         if (
@@ -8601,7 +8608,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                             return;
                         }
                         if (Date.now() >= deadline) {
-                            reject(new Error('Timed out while applying Agent access permission.'));
+                            reject(new Error(t('browser.chrome.agent_timeout')));
                             return;
                         }
                         setTimeout(check, 25);
@@ -8898,7 +8905,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 document.getElementById('tab-more').open = false;
                 const hasCloseableTerminal = [...terminals.values()].some(state => state.connected || state.connecting) || terminals.size > 1;
                 if (!socket || !socket.connected || !hasCloseableTerminal) return;
-                if (!window.confirm('Close all terminal tabs?')) return;
+                if (!window.confirm(t('browser.chrome.confirm_close_tabs'))) return;
                 if (socket && socket.connected) socket.emit('close_all_terminals');
                 resetTerminalWorkspace();
             }
@@ -9053,7 +9060,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                         }
                         if (state.id === activeTerminalId) {
                             hideActionPrompt();
-                            showError(data.message || 'SSH host key action completed.');
+                            showError(data.message || t('browser.chrome.host_key_done'));
                             resetConnectButton();
                         }
                         break;
@@ -9066,11 +9073,11 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                         if (state.id === activeTerminalId) {
                             hideActionPrompt();
                             if (data.setup_status === 'success') {
-                                showError(data.message || 'Localhost key setup completed. Reconnecting...');
+                                showError(data.message || t('browser.chrome.local_key_reconnect'));
                                 submitConnection({ ...setupRetry.payload,
                                     ...(setupRetry.payload.interactive_login ? { attempt_id: createSshSessionId('attempt') } : {}) }, sshPreparedKeys.get(setupRetry.payload));
                             } else {
-                                showError(data.message || 'Localhost key setup completed.');
+                                showError(data.message || t('browser.chrome.local_key_done'));
                                 resetConnectButton();
                                 updateActiveTerminalUi();
                             }
@@ -9093,7 +9100,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                         state.sftpEndpoint = null;
                         state.label = successfulSshDraft && successfulSshDraft.profileName
                             ? getSshProfileTabLabel(successfulSshDraft.profileName)
-                            : (data.terminal_label || CONNECTION_LABELS[state.connectionType] || 'Terminal');
+                            : (data.terminal_label || CONNECTION_LABELS[state.connectionType] || t('browser.chrome.terminal'));
                         state.title = state.label;
                         state.lastNotifiedSize = { cols: null, rows: null };
                         state.termName = data.term || state.termName;
@@ -9126,7 +9133,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                         resetAgentClientState(state);
                         if (state.id === activeTerminalId) {
                             updateActiveTerminalUi();
-                            showError(data.message || 'Terminal session closed.');
+                            showError(data.message || t('browser.chrome.terminal_closed'));
                         } else {
                             updateTabState(state);
                         }
@@ -9150,7 +9157,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             socket.on('ssh_output', handleSshOutputPayload);
 
             function formatSftpEndpoint(endpoint) {
-                if (!endpoint || typeof endpoint !== 'object') return 'Direct endpoint';
+                if (!endpoint || typeof endpoint !== 'object') return t('browser.files.direct_endpoint');
                 if (endpoint.route === 'local') {
                     const command = typeof endpoint.command === 'string' && endpoint.command
                         ? endpoint.command
@@ -9184,7 +9191,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             function agentTransferFilename(action) {
                 const path = typeof action.destination_path === 'string' ? action.destination_path : '';
                 const parts = path.split(/[\\/]/).filter(Boolean);
-                return parts.at(-1) || 'File transfer';
+                return parts.at(-1) || t('browser.chrome.file_transfer');
             }
 
             function agentTransferStatusText(action) {
@@ -9328,7 +9335,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
 
             function formatSftpDetailedBytes(value) {
                 const bytes = Math.max(0, Math.trunc(Number(value) || 0));
-                return `${formatSftpBytes(bytes)} (${bytes} bytes)`;
+                return t('browser.files.detailed_bytes', { size: formatSftpBytes(bytes), bytes });
             }
 
             function formatSftpModified(value) {
@@ -9336,18 +9343,14 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 if (!Number.isFinite(seconds) || seconds < 0) return '';
                 const date = new Date(seconds * 1000);
                 if (Number.isNaN(date.getTime())) return '';
-                const parts = new Intl.DateTimeFormat('en-US', {
+                return new Intl.DateTimeFormat(uiText.locale, {
                     year: 'numeric',
                     month: 'short',
                     day: '2-digit',
                     hour: '2-digit',
                     minute: '2-digit',
                     hour12: false,
-                }).formatToParts(date).reduce((result, part) => {
-                    result[part.type] = part.value;
-                    return result;
-                }, {});
-                return `${parts.hour}:${parts.minute} ${parts.month} ${parts.day} ${parts.year}`;
+                }).format(date);
             }
 
             function nextSftpRequestId(prefix) {
@@ -9383,8 +9386,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     || !ready
                 );
                 state.elements.fileDownload.textContent = state.downloadPreparing
-                    ? 'Preparing…'
-                    : (state.downloadConsumed ? 'Downloaded' : 'Download');
+                    ? t('browser.files.preparing')
+                    : (state.downloadConsumed ? t('browser.files.download_started') : t('browser.files.download'));
             }
 
             function setSftpPipBusy(state, busy) {
@@ -9404,12 +9407,12 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     state.elements.filename.disabled = busy || transferring;
                     state.elements.copy.disabled = busy || transferring || !state.currentPath || !state.elements.filename.value;
                     state.elements.cancel.textContent = uploading
-                        ? 'Cancel upload'
+                        ? t('browser.files.cancel_upload')
                         : (state.cancelPending
-                        ? 'Cancelling…'
+                        ? t('browser.files.cancelling')
                         : (copyPhase === 'committing'
-                            ? 'Publishing…'
-                            : (copying ? 'Cancel copy' : (state.finished ? 'Close' : 'Cancel'))));
+                            ? t('browser.files.publishing')
+                            : (copying ? t('browser.files.cancel_copy') : (state.finished ? t('common.close') : t('common.cancel')))));
                     state.elements.cancel.disabled = uploading
                         ? false
                         : (copying
@@ -9466,20 +9469,20 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const selected = files && files.length ? files[0] : null;
                 if (!selected) return;
                 if (files.length > 1) {
-                    setSftpPipStatus(state, 'Select one file at a time.', 'error');
+                    setSftpPipStatus(state, t('browser.files.one_file'), 'error');
                     return;
                 }
                 if (state.maxUploadBytes && selected.size > state.maxUploadBytes) {
                     setSftpPipStatus(
                         state,
-                        `The file exceeds the ${formatSftpBytes(state.maxUploadBytes)} upload limit.`,
+                        t('browser.files.upload_limit', { limit: formatSftpBytes(state.maxUploadBytes) }),
                         'error',
                     );
                     return;
                 }
                 state.file = selected;
                 state.elements.conflict.classList.remove('visible');
-                setSftpPipStatus(state, 'Ready to upload.');
+                setSftpPipStatus(state, t('browser.files.ready_upload'));
                 updateSftpSelectedFile(state);
                 state.elements.selectedFile.scrollIntoView({ block: 'nearest' });
             }
@@ -9558,22 +9561,22 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             }
 
             function getSftpRenameValidation(state) {
-                if (!state || !state.selectedRemoteFile || !state.elements) return 'Select a file.';
+                if (!state || !state.selectedRemoteFile || !state.elements) return 'browser.files.select_file';
                 const value = state.elements.renameInput.value;
-                if (!value) return 'Enter a file name.';
+                if (!value) return 'browser.files.filename_required';
                 if (value === '.' || value === '..' || value.includes('/') || value.includes('\\') || /[\u0000-\u001f\u007f]/.test(value)) {
-                    return 'Enter a file name without a path.';
+                    return 'browser.files.filename_no_path';
                 }
-                if (new TextEncoder().encode(value).length > 255) return 'The file name is too long.';
-                if (state.currentEntryNames.has(value)) return 'A file or directory with this name already exists.';
-                return '';
+                if (new TextEncoder().encode(value).length > 255) return 'browser.files.filename_too_long';
+                if (state.currentEntryNames.has(value)) return 'browser.files.filename_exists';
+                return null;
             }
 
             function updateSftpRenameAvailability(state) {
                 if (!state || !state.elements || !state.elements.renameConfirm) return;
-                const message = getSftpRenameValidation(state);
-                state.elements.renameHint.textContent = message;
-                state.elements.renameConfirm.disabled = !!message || state.busy || state.uploading;
+                const validationKey = getSftpRenameValidation(state);
+                state.elements.renameHint.textContent = validationKey ? t(validationKey) : '';
+                state.elements.renameConfirm.disabled = !!validationKey || state.busy || state.uploading;
             }
 
             function showSftpRename(state) {
@@ -9708,13 +9711,13 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
 
                 const header = state.window.document.createElement('div');
                 header.className = 'sftp-list-header';
-                [['name', 'Name'], ['size', 'Size'], ['date', 'Date']].forEach(([column, label]) => {
+                [['name', t('browser.files.name')], ['size', t('browser.files.size')], ['date', t('browser.files.date')]].forEach(([column, label]) => {
                     const button = state.window.document.createElement('button');
                     button.type = 'button';
                     button.className = `sftp-sort-button${state.sortColumn === column ? ' active' : ''}`;
                     button.dataset.sortColumn = column;
                     button.textContent = `${label}${state.sortColumn === column ? (state.sortDirection === 'asc' ? ' ▲' : ' ▼') : ''}`;
-                    button.setAttribute('aria-label', `Sort by ${label}`);
+                    button.setAttribute('aria-label', t('browser.files.sort', { column: label }));
                     button.setAttribute('aria-pressed', state.sortColumn === column ? 'true' : 'false');
                     button.addEventListener('click', () => sortSftpEntries(state, column));
                     header.appendChild(button);
@@ -9730,7 +9733,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 if (directoriesToRender.length === 0 && filesToRender.length === 0) {
                     const empty = state.window.document.createElement('div');
                     empty.className = 'sftp-directory-empty';
-                    empty.textContent = 'No subdirectories or files.';
+                    empty.textContent = t('browser.files.empty');
                     list.appendChild(empty);
                 } else {
                     directoriesToRender.forEach(entry => {
@@ -9739,7 +9742,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                         button.className = 'sftp-directory-entry';
                         button.dataset.entryName = entry.name;
                         button.title = entry.name;
-                        button.setAttribute('aria-label', `Folder ${entry.name}${entry.mtime === null ? '' : `, modified ${formatSftpModified(entry.mtime)}`}.`);
+                        button.setAttribute('aria-label', t(entry.mtime === null ? 'browser.files.folder_label' : 'browser.files.folder_modified', { name: entry.name, time: formatSftpModified(entry.mtime) }));
                         button.append(
                             createSftpEntryCell(state, 'sftp-file-entry-name', `📁 ${entry.name}`),
                             createSftpEntryCell(state, 'sftp-file-entry-size', ''),
@@ -9758,7 +9761,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                         button.dataset.fileEntry = 'true';
                         button.dataset.entryName = file.name;
                         button.title = getSftpRemoteFilePath(state, file);
-                        button.setAttribute('aria-label', `File ${file.name}, ${formatSftpBytes(file.size)}, modified ${formatSftpModified(file.mtime)}. Open file actions.`);
+                        button.setAttribute('aria-label', t('browser.files.file_label', { name: file.name, size: formatSftpBytes(file.size), time: formatSftpModified(file.mtime) }));
                         button.setAttribute('aria-pressed', 'false');
                         button.append(
                             createSftpEntryCell(state, 'sftp-file-entry-name', `📄 ${file.name}`),
@@ -9767,7 +9770,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                         );
                         if (state.mode === 'destination') {
                             button.disabled = true;
-                            button.setAttribute('aria-label', `Existing file ${file.name}, ${formatSftpBytes(file.size)}, modified ${formatSftpModified(file.mtime)}.`);
+                            button.setAttribute('aria-label', t('browser.files.existing_file', { name: file.name, size: formatSftpBytes(file.size), time: formatSftpModified(file.mtime) }));
                         } else {
                             button.addEventListener('click', () => showSftpFileOperation(state, file, button));
                             if (file.fileId === selectedFileId) {
@@ -9780,7 +9783,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                         list.appendChild(button);
                     });
                 }
-                if (truncated) setSftpPipStatus(state, 'Directory list was truncated.', 'error');
+                if (truncated) setSftpPipStatus(state, t('browser.files.truncated'), 'error');
             }
 
             function requestSftpBrowse(state, options = {}) {
@@ -9789,7 +9792,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 state.pendingBrowseRequestId = requestId;
                 state.pendingBrowseStatus = options.successMessage || null;
                 setSftpPipBusy(state, true);
-                setSftpPipStatus(state, 'Opening directory…');
+                setSftpPipStatus(state, t('browser.files.opening_directory'));
                 socket.emit('sftp_browse_request', {
                     request_id: requestId,
                     terminal_id: state.terminalId,
@@ -9822,7 +9825,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     }
                     updateActiveTerminalUi();
                     setSftpPipBusy(state, false);
-                    setSftpPipStatus(state, data.message || 'Remote directory could not be opened.', 'error');
+                    setSftpPipStatus(state, data.message || t('browser.files.open_failed'), 'error');
                     return;
                 }
                 if (terminalState) {
@@ -9844,8 +9847,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     setSftpPipStatus(
                         state,
                         state.mode === 'destination'
-                            ? 'Choose this folder or browse to another destination.'
-                            : 'Choose a file action or drop a file to upload.',
+                            ? t('browser.files.choose_folder')
+                            : t('browser.files.choose_action'),
                     );
                 }
             }
@@ -9870,14 +9873,14 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     || /[\u0000-\u001f\u007f]/.test(filename)
                     || new TextEncoder().encode(filename).length > 255
                 ) {
-                    setSftpPipStatus(state, 'Enter a valid destination file name.', 'error');
+                    setSftpPipStatus(state, t('browser.files.destination_filename_invalid'), 'error');
                     return;
                 }
                 const requestId = nextSftpRequestId('sftp-upload');
                 state.pendingTicketRequestId = requestId;
                 setSftpPipBusy(state, true);
                 state.elements.conflict.classList.remove('visible');
-                setSftpPipStatus(state, 'Checking upload destination…');
+                setSftpPipStatus(state, t('browser.files.checking_upload'));
                 socket.emit('sftp_upload_ticket_request', {
                     request_id: requestId,
                     terminal_id: state.terminalId,
@@ -9898,9 +9901,9 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 state.elements.progress.classList.add('visible');
                 state.elements.progressBar.style.width = file.size === 0 ? '100%' : '0%';
                 setSftpPipBusy(state, false);
-                setSftpPipStatus(state, `Sending to ${data.destination_path}…`);
+                setSftpPipStatus(state, t('browser.files.sending_to', { path: data.destination_path }));
                 if (state.mode === 'destination') {
-                    state.elements.lifecycle.textContent = 'Uploading through the browser. Use Cancel upload to stop the request.';
+                    state.elements.lifecycle.textContent = t('browser.files.upload_lifecycle');
                 }
 
                 const xhr = new XMLHttpRequest();
@@ -9913,7 +9916,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     state.elements.progressBar.style.width = `${percent}%`;
                     setSftpPipStatus(
                         state,
-                        `Sending ${formatSftpBytes(event.loaded)} / ${formatSftpBytes(event.total)}…`,
+                        t('browser.files.sending_progress', { sent: formatSftpBytes(event.loaded), total: formatSftpBytes(event.total) }),
                     );
                 };
                 xhr.onload = () => {
@@ -9928,22 +9931,22 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     if (xhr.status >= 200 && xhr.status < 300 && result && result.status === 'completed') {
                         if (state.mode === 'destination') {
                             state.finished = true;
-                            state.elements.lifecycle.textContent = 'Upload finished. Close returns to the previous pane.';
+                            state.elements.lifecycle.textContent = t('browser.files.upload_finished');
                         } else {
                             state.file = null;
                             updateSftpSelectedFile(state);
                         }
-                        setSftpPipStatus(state, `Uploaded to ${result.destination_path}.`, 'success');
+                        setSftpPipStatus(state, t('browser.files.uploaded', { path: result.destination_path }), 'success');
                     } else {
                         if (state.mode === 'destination') {
                             state.finished = true;
-                            state.elements.lifecycle.textContent = 'Upload stopped. Check the destination before retrying.';
+                            state.elements.lifecycle.textContent = t('browser.files.upload_stopped');
                         }
-                        setSftpPipStatus(state, (result && result.message) || 'File upload failed.', 'error');
+                        setSftpPipStatus(state, (result && result.message) || t('browser.files.upload_failed'), 'error');
                     }
                     setSftpPipBusy(state, false);
                     if (!state.window || state.window.closed) {
-                        if (xhr.status >= 200 && xhr.status < 300) alert(`SFTP upload completed: ${result.destination_path}`);
+                        if (xhr.status >= 200 && xhr.status < 300) alert(t('browser.files.uploaded', { path: result.destination_path }));
                         if (sftpPipState === state) sftpPipState = null;
                     }
                 };
@@ -9952,12 +9955,12 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     state.xhr = null;
                     if (state.mode === 'destination') {
                         state.finished = true;
-                        state.elements.lifecycle.textContent = 'Upload stopped. Check the destination before retrying.';
+                        state.elements.lifecycle.textContent = t('browser.files.upload_stopped');
                     }
-                    setSftpPipStatus(state, 'File upload failed because the connection was interrupted.', 'error');
+                    setSftpPipStatus(state, t('browser.files.upload_interrupted'), 'error');
                     setSftpPipBusy(state, false);
                     if (!state.window || state.window.closed) {
-                        alert('SFTP upload failed because the connection was interrupted.');
+                        alert(t('browser.files.upload_interrupted'));
                         if (sftpPipState === state) sftpPipState = null;
                     }
                 };
@@ -9969,10 +9972,10 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                         state.elements.progress.classList.remove('visible');
                         state.elements.progressBar.style.width = '0%';
                         if (state.mode === 'destination') {
-                            state.elements.lifecycle.textContent = 'Upload request stopped. Check the destination before retrying.';
+                            state.elements.lifecycle.textContent = t('browser.files.upload_request_stopped');
                         }
                     }
-                    setSftpPipStatus(state, 'Upload request cancelled. Check the destination before retrying.');
+                    setSftpPipStatus(state, t('browser.files.upload_request_cancelled'));
                     setSftpPipBusy(state, false);
                 };
                 xhr.send(file);
@@ -9995,13 +9998,13 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 state.pendingTicketRequestId = null;
                 setSftpPipBusy(state, false);
                 if (data.status === 'conflict') {
-                    state.elements.conflictText.textContent = `${data.destination_path} already exists (${formatSftpBytes(data.existing_size)}).`;
+                    state.elements.conflictText.textContent = t('browser.files.conflict', { path: data.destination_path, size: formatSftpBytes(data.existing_size) });
                     state.elements.conflict.classList.add('visible');
-                    setSftpPipStatus(state, 'Choose how to handle the existing file.');
+                    setSftpPipStatus(state, t('browser.files.choose_conflict'));
                     return;
                 }
                 if (data.status !== 'ready') {
-                    setSftpPipStatus(state, data.message || 'Upload could not be prepared.', 'error');
+                    setSftpPipStatus(state, data.message || t('browser.files.upload_prepare_failed'), 'error');
                     return;
                 }
                 startSftpUpload(state, data);
@@ -10021,7 +10024,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 state.downloadPreparing = true;
                 state.preparedDownload = null;
                 updateSftpDownloadAvailability(state);
-                setSftpPipStatus(state, `Preparing download for ${file.name}…`);
+                setSftpPipStatus(state, t('browser.files.preparing_download', { name: file.name }));
                 logSftpBrowserDownload('ticket requested', {
                     request_id: requestId,
                     terminal: state.terminalId,
@@ -10107,13 +10110,13 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     ticket_remaining_ms: Math.max(0, prepared.expiresAt - Date.now()),
                 });
                 if (!startSftpBrowserDownload(prepared, state.window.document)) {
-                    setSftpPipStatus(state, 'Download URL was invalid.', 'error');
+                    setSftpPipStatus(state, t('browser.files.download_url_invalid'), 'error');
                     return;
                 }
                 state.preparedDownload = null;
                 state.downloadConsumed = true;
                 updateSftpDownloadAvailability(state);
-                setSftpPipStatus(state, `Download started: ${prepared.filename}.`, 'success');
+                setSftpPipStatus(state, t('browser.files.download_requested', { name: prepared.filename }), 'success');
             }
 
             function handleSftpDownloadTicketResult(data) {
@@ -10145,7 +10148,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                         status: data.status || null,
                     }, 'warn');
                     updateSftpDownloadAvailability(state);
-                    setSftpPipStatus(state, data.message || 'Download could not be prepared.', 'error');
+                    setSftpPipStatus(state, data.message || t('browser.files.download_prepare_failed'), 'error');
                     return;
                 }
                 const lifetimeSeconds = Number(data.expires_in_seconds);
@@ -10162,7 +10165,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     expires_in_seconds: lifetimeSeconds,
                 });
                 updateSftpDownloadAvailability(state);
-                setSftpPipStatus(state, `Selected ${data.filename}. Click Download to save it.`);
+                setSftpPipStatus(state, t('browser.files.download_ready', { name: data.filename }));
             }
 
             function requestSftpFileAction(state, action) {
@@ -10188,7 +10191,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     return;
                 }
                 setSftpPipBusy(state, true);
-                setSftpPipStatus(state, action === 'rename' ? 'Renaming remote file…' : 'Permanently deleting remote file…');
+                setSftpPipStatus(state, action === 'rename' ? t('browser.files.renaming') : t('browser.files.deleting'));
                 socket.emit('sftp_file_action_request', payload);
             }
 
@@ -10206,12 +10209,12 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 setSftpPipBusy(state, false);
                 if (data.status !== 'completed') {
                     if (state.elements.deleteConfirmation.classList.contains('visible')) cancelSftpDelete(state);
-                    setSftpPipStatus(state, data.message || `Remote file ${action} failed.`, 'error');
+                    setSftpPipStatus(state, data.message || t(action === 'rename' ? 'browser.files.rename_failed' : 'browser.files.delete_failed'), 'error');
                     return;
                 }
                 const completedMessage = action === 'rename'
-                    ? `Renamed to ${data.filename}.`
-                    : `Permanently deleted ${data.filename}.`;
+                    ? t('browser.files.renamed', { name: data.filename })
+                    : t('browser.files.deleted', { name: data.filename });
                 closeSftpFileOperation(state, false);
                 requestSftpBrowse(state, { path: state.currentPath, successMessage: completedMessage });
             }
@@ -10228,12 +10231,12 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const destinationState = sourceState.copyDestinationState;
                 if (destinationState.copying || destinationState.uploading) {
                     destinationState.elements.lifecycle.textContent = destinationState.cancelPending
-                        ? 'Cancellation requested. Wait for backend confirmation before closing Files.'
+                        ? t('browser.files.cancel_wait')
                         : (destinationState.uploading
-                            ? 'Cancel the upload before returning to the previous pane.'
+                            ? t('browser.files.cancel_upload_first')
                         : (destinationState.copyPhase === 'committing'
-                            ? 'Publishing cannot be cancelled. Wait for the result before closing Files.'
-                            : 'Cancel the copy first. Closing Files does not cancel it.'));
+                            ? t('browser.files.publishing_wait')
+                            : t('browser.files.cancel_copy_first')));
                     return;
                 }
                 if (destinationState.elements && destinationState.elements.pane.isConnected) {
@@ -10258,7 +10261,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     !canUseSftpFileManager(terminalState)
                     || (state.sourceKind !== 'browser' && terminalId === state.sourceState.terminalId)
                 ) {
-                    setSftpPipStatus(state, 'Choose another connected Files session.', 'error');
+                    setSftpPipStatus(state, t('browser.files.choose_session'), 'error');
                     return;
                 }
                 state.terminalId = terminalId;
@@ -10291,7 +10294,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     || /[\u0000-\u001f\u007f]/.test(filename)
                     || new TextEncoder().encode(filename).length > 255
                 ) {
-                    setSftpPipStatus(state, 'Enter a valid destination file name.', 'error');
+                    setSftpPipStatus(state, t('browser.files.destination_filename_invalid'), 'error');
                     return;
                 }
                 const requestId = nextSftpRequestId('files-copy');
@@ -10302,9 +10305,9 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 state.cancelPending = false;
                 state.finished = false;
                 state.elements.conflict.classList.remove('visible');
-                state.elements.lifecycle.textContent = 'Preparing the copy. Keep Files open.';
+                state.elements.lifecycle.textContent = t('browser.files.preparing_copy');
                 setSftpPipBusy(state, true);
-                setSftpPipStatus(state, 'Checking copy destination…');
+                setSftpPipStatus(state, t('browser.files.checking_copy'));
                 socket.emit('files_copy_request', {
                     request_id: requestId,
                     source_terminal_id: sourceState.terminalId,
@@ -10327,7 +10330,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     || !socket.connected
                 ) return;
                 state.cancelPending = true;
-                state.elements.lifecycle.textContent = 'Cancelling before the destination is published…';
+                state.elements.lifecycle.textContent = t('browser.files.cancelling_copy');
                 setSftpPipBusy(state, false);
                 socket.emit('files_copy_cancel_request', {
                     request_id: nextSftpRequestId('files-copy-cancel'),
@@ -10350,19 +10353,19 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     state.copyPhase = 'preparing';
                     state.cancelPending = false;
                     state.finished = false;
-                    state.elements.lifecycle.textContent = 'Preparing the copy. Keep Files open.';
+                    state.elements.lifecycle.textContent = t('browser.files.preparing_copy');
                     setSftpPipBusy(state, true);
-                    setSftpPipStatus(state, 'Checking copy destination…');
+                    setSftpPipStatus(state, t('browser.files.checking_copy'));
                     return;
                 }
                 if (data.status === 'conflict') {
                     state.copyPhase = 'conflict';
                     state.cancelPending = false;
                     state.finished = false;
-                    state.elements.lifecycle.textContent = 'Choose a conflict action, or cancel this destination pane.';
-                    state.elements.conflictText.textContent = `${data.destination_path} already exists (${formatSftpBytes(data.existing_size)}).`;
+                    state.elements.lifecycle.textContent = t('browser.files.conflict_lifecycle');
+                    state.elements.conflictText.textContent = t('browser.files.conflict', { path: data.destination_path, size: formatSftpBytes(data.existing_size) });
                     state.elements.conflict.classList.add('visible');
-                    setSftpPipStatus(state, 'Choose how to handle the existing file.');
+                    setSftpPipStatus(state, t('browser.files.choose_conflict'));
                     return;
                 }
                 if (data.status === 'running' || data.status === 'committing') {
@@ -10380,14 +10383,14 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     setSftpPipStatus(
                         state,
                         data.status === 'committing'
-                            ? 'Publishing copied file…'
-                            : `Copying ${Math.floor(percent)}% · ${formatSftpBytes(copied)} / ${formatSftpBytes(total)}…`,
+                            ? t('browser.files.publishing_file')
+                            : t('browser.files.copy_progress', { percent: Math.floor(percent), copied: formatSftpBytes(copied), total: formatSftpBytes(total) }),
                     );
                     state.elements.lifecycle.textContent = data.status === 'committing'
-                        ? 'Publishing has started. It cannot be cancelled; wait for the result before closing Files.'
+                        ? t('browser.files.publishing_started')
                         : (state.cancelPending
-                            ? 'Cancelling before the destination is published…'
-                            : 'Keep Files open until finished, or use Cancel copy.');
+                            ? t('browser.files.cancelling_copy')
+                            : t('browser.files.copy_running'));
                     setSftpPipBusy(state, false);
                     return;
                 }
@@ -10400,23 +10403,24 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 setSftpPipBusy(state, false);
                 if (data.status === 'completed') {
                     state.elements.conflict.classList.remove('visible');
-                    state.elements.lifecycle.textContent = 'Copy finished. You can close Files or start another copy.';
-                    setSftpPipStatus(state, `Copied to ${data.destination_path}.`, 'success');
+                    state.elements.lifecycle.textContent = t('browser.files.copy_finished');
+                    setSftpPipStatus(state, t('browser.files.copied', { path: data.destination_path }), 'success');
                     requestSftpBrowse(state, {
                         path: state.currentPath,
-                        successMessage: `Copied to ${data.destination_path}.`,
+                        successMessage: t('browser.files.copied', { path: data.destination_path }),
                     });
                     return;
                 }
                 if (data.status === 'cancelled') {
-                    state.elements.lifecycle.textContent = 'Cancelled before publishing. You can close Files.';
-                    setSftpPipStatus(state, data.message || 'File copy cancelled before publishing.');
+                    state.elements.lifecycle.textContent = t('browser.files.copy_cancelled_lifecycle');
+                    setSftpPipStatus(state, data.message || t('browser.files.copy_cancelled'));
                     return;
                 }
-                state.elements.lifecycle.textContent = 'Copy stopped. You can close Files or retry.';
+                state.elements.lifecycle.textContent = t(data.error_code === 'file_copy_publish_outcome_unknown'
+                    ? 'browser.files.copy_unknown' : 'browser.files.copy_stopped');
                 const failureMessage = data.error_code === 'file_copy_publish_outcome_unknown'
-                    ? `${data.message || 'The SSH server did not confirm the publish result.'} Inspect the destination before retrying.`
-                    : (data.message || 'File copy failed.');
+                    ? (data.message ? t('browser.files.copy_unknown_detail', { detail: data.message }) : t('browser.files.copy_unknown'))
+                    : (data.message || t('browser.files.copy_failed'));
                 setSftpPipStatus(state, failureMessage, 'error');
             }
 
@@ -10433,8 +10437,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     setSftpPipStatus(
                         sourceState,
                         sourceKind === 'browser'
-                            ? 'No connected Files destination is available.'
-                            : 'Open another SSH or Local Shell tab to copy this file.',
+                            ? t('browser.files.no_destination')
+                            : t('browser.files.another_tab'),
                         'error',
                     );
                     return;
@@ -10444,49 +10448,50 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 pane.innerHTML = `
                     <div class="sftp-copy-details">
                     <div class="sftp-destination-header">
-                        <div class="sftp-destination-title">Choose destination</div>
+                        <div class="sftp-destination-title" data-i18n="browser.files.destination_title">Choose destination</div>
                     </div>
                     <div class="sftp-source-file-card">
-                        <div class="sftp-source-file-label">Source file</div>
+                        <div class="sftp-source-file-label" data-i18n="browser.files.source_file">Source file</div>
                         <div class="sftp-file-detail-path sftp-copy-source-path"></div>
                         <div class="sftp-file-detail-meta sftp-copy-source-meta"></div>
                     </div>
-                    <select class="sftp-session-select" aria-label="Destination session"></select>
+                    <select class="sftp-session-select" aria-label="Destination tab" data-i18n-aria-label="browser.files.destination_session"></select>
                     <div class="sftp-endpoint-card">
-                        <div class="sftp-endpoint-value">Direct endpoint</div>
-                        <div class="sftp-direct-hint">Direct SSH or Local Shell endpoint. Nested SSH sessions inside the terminal are not used.</div>
+                        <div class="sftp-endpoint-value" data-i18n="browser.files.direct_endpoint">Connected endpoint</div>
+                        <div class="sftp-direct-hint" data-i18n="browser.files.endpoint_hint">Uses this tab’s SSH or Local Shell endpoint. SSH sessions started inside the terminal are not used.</div>
                     </div>
                     <div class="sftp-path-controls">
-                        <button type="button" class="sftp-home sftp-icon-button" title="Home directory" aria-label="Home directory">⌂</button>
-                        <button type="button" class="sftp-up sftp-icon-button" title="Parent directory" aria-label="Parent directory">↑</button>
-                        <button type="button" class="sftp-refresh sftp-icon-button" title="Refresh files list" aria-label="Refresh files list">↻</button>
-                        <input class="sftp-path-input" type="text" spellcheck="false" aria-label="Destination folder">
-                        <button type="button" class="sftp-go">Go</button>
+                        <button type="button" class="sftp-home sftp-icon-button" title="Home folder" data-i18n-title="browser.files.home" aria-label="Home folder" data-i18n-aria-label="browser.files.home">⌂</button>
+                        <button type="button" class="sftp-up sftp-icon-button" title="Parent folder" data-i18n-title="browser.files.parent" aria-label="Parent folder" data-i18n-aria-label="browser.files.parent">↑</button>
+                        <button type="button" class="sftp-refresh sftp-icon-button" title="Refresh file list" data-i18n-title="browser.files.refresh" aria-label="Refresh file list" data-i18n-aria-label="browser.files.refresh">↻</button>
+                        <input class="sftp-path-input" type="text" spellcheck="false" aria-label="Destination folder" data-i18n-aria-label="browser.files.destination_folder">
+                        <button type="button" class="sftp-go" data-i18n="browser.files.go">Go</button>
                     </div>
-                    <div class="sftp-directory-list" tabindex="0" aria-label="Destination directories and files"></div>
+                    <div class="sftp-directory-list" tabindex="0" aria-label="Destination folders and files" data-i18n-aria-label="browser.files.destination_listing"></div>
                     <div class="sftp-copy-name-row">
-                        <label>File name</label>
-                        <input class="sftp-copy-name-input" type="text" spellcheck="false" aria-label="Destination file name">
+                        <label data-i18n="browser.files.filename">File name</label>
+                        <input class="sftp-copy-name-input" type="text" spellcheck="false" aria-label="Destination file name" data-i18n-aria-label="browser.files.destination_filename">
                     </div>
                     </div>
                     <div class="sftp-copy-feedback">
                     <div class="sftp-conflict-box">
                         <div class="sftp-conflict-text"></div>
                         <div class="sftp-conflict-actions">
-                            <button type="button" class="sftp-conflict-cancel">Cancel</button>
-                            <button type="button" class="sftp-conflict-keep">Keep Both</button>
-                            <button type="button" class="sftp-conflict-replace replace">Replace</button>
+                            <button type="button" class="sftp-conflict-cancel" data-i18n="common.cancel">Cancel</button>
+                            <button type="button" class="sftp-conflict-keep" data-i18n="browser.files.keep_both">Keep both</button>
+                            <button type="button" class="sftp-conflict-replace replace" data-i18n="browser.files.replace">Replace</button>
                         </div>
                     </div>
                     <div class="sftp-progress"><div class="sftp-progress-bar"></div></div>
-                    <div class="sftp-transfer-status" role="status" aria-live="polite">Choose a destination.</div>
-                    <div class="sftp-copy-lifecycle-hint">Cancel returns to the previous pane before copying.</div>
+                    <div class="sftp-transfer-status" role="status" aria-live="polite" data-i18n="browser.files.choose_destination">Choose a destination.</div>
+                    <div class="sftp-copy-lifecycle-hint" data-i18n="browser.files.cancel_before_copy">Before copying starts, Cancel returns to the previous pane.</div>
                     <div class="sftp-pip-actions">
-                        <button type="button" class="sftp-copy-cancel">Cancel</button>
-                        <button type="button" class="sftp-copy-confirm primary">Copy</button>
+                        <button type="button" class="sftp-copy-cancel" data-i18n="common.cancel">Cancel</button>
+                        <button type="button" class="sftp-copy-confirm primary" data-i18n="browser.files.copy">Copy</button>
                     </div>
                     </div>
                 `;
+                uiText.apply(pane);
                 const destinationState = {
                     mode: 'destination',
                     window: sourceState.window,
@@ -10593,7 +10598,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 });
                 destinationState.elements.conflictCancel.addEventListener('click', () => {
                     destinationState.elements.conflict.classList.remove('visible');
-                    setSftpPipStatus(destinationState, 'Copy cancelled.');
+                    setSftpPipStatus(destinationState, t('browser.files.copy_cancelled_idle'));
                 });
                 destinationState.elements.conflictKeep.addEventListener('click', () => {
                     if (destinationState.sourceKind === 'browser') requestSftpUploadTicket(destinationState, 'keep_both');
@@ -10609,84 +10614,86 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
 
             function createSftpPipShell(state) {
                 const pipDocument = state.window.document;
-                pipDocument.title = 'StandTerm - Files';
+                pipDocument.documentElement.lang = uiText.locale;
+                pipDocument.title = t('browser.files.title');
                 const shell = pipDocument.createElement('div');
                 shell.className = 'sftp-pip-shell';
                 shell.innerHTML = `
                     <div class="sftp-pip-header">
-                        <div class="sftp-pip-title">StandTerm - Files</div>
+                        <div class="sftp-pip-title" data-i18n="browser.files.title">StandTerm - Files</div>
                     </div>
                     <div class="sftp-files-workspace">
                     <div class="sftp-source-pane">
                     <div class="sftp-endpoint-card">
-                        <div class="sftp-endpoint-value">Direct endpoint</div>
-                        <div class="sftp-direct-hint">Direct SSH or Local Shell endpoint. Nested SSH sessions inside the terminal are not used.</div>
+                        <div class="sftp-endpoint-value" data-i18n="browser.files.direct_endpoint">Connected endpoint</div>
+                        <div class="sftp-direct-hint" data-i18n="browser.files.endpoint_hint">Uses this tab’s SSH or Local Shell endpoint. SSH sessions started inside the terminal are not used.</div>
                     </div>
                     <div class="sftp-path-controls">
-                        <button type="button" class="sftp-home sftp-icon-button" title="Home directory" aria-label="Home directory">⌂</button>
-                        <button type="button" class="sftp-up sftp-icon-button" title="Parent directory" aria-label="Parent directory">↑</button>
-                        <button type="button" class="sftp-refresh sftp-icon-button" title="Refresh files list" aria-label="Refresh files list">↻</button>
-                        <input class="sftp-path-input" type="text" spellcheck="false" aria-label="Remote destination folder">
-                        <button type="button" class="sftp-go">Go</button>
+                        <button type="button" class="sftp-home sftp-icon-button" title="Home folder" data-i18n-title="browser.files.home" aria-label="Home folder" data-i18n-aria-label="browser.files.home">⌂</button>
+                        <button type="button" class="sftp-up sftp-icon-button" title="Parent folder" data-i18n-title="browser.files.parent" aria-label="Parent folder" data-i18n-aria-label="browser.files.parent">↑</button>
+                        <button type="button" class="sftp-refresh sftp-icon-button" title="Refresh file list" data-i18n-title="browser.files.refresh" aria-label="Refresh file list" data-i18n-aria-label="browser.files.refresh">↻</button>
+                        <input class="sftp-path-input" type="text" spellcheck="false" aria-label="Folder path" data-i18n-aria-label="browser.files.folder">
+                        <button type="button" class="sftp-go" data-i18n="browser.files.go">Go</button>
                     </div>
-                    <div class="sftp-directory-list" tabindex="0" aria-label="Remote directories and files"></div>
-                    <div class="sftp-file-operation-box" role="dialog" aria-label="Remote file actions">
+                    <div class="sftp-directory-list" tabindex="0" aria-label="Folders and files" data-i18n-aria-label="browser.files.listing"></div>
+                    <div class="sftp-file-operation-box" role="dialog" aria-label="File actions" data-i18n-aria-label="browser.files.actions">
                         <div class="sftp-file-operation-path sftp-file-detail-path"></div>
                         <div class="sftp-file-operation-meta sftp-file-detail-meta"></div>
                         <div class="sftp-file-operation-actions">
-                            <button type="button" class="sftp-file-download">Download</button>
-                            <button type="button" class="sftp-file-copy">Copy to&hellip;</button>
-                            <button type="button" class="sftp-file-rename">Rename&hellip;</button>
-                            <button type="button" class="sftp-file-delete danger">Delete&hellip;</button>
+                            <button type="button" class="sftp-file-download" data-i18n="browser.files.download">Download</button>
+                            <button type="button" class="sftp-file-copy" data-i18n="browser.files.copy_to">Copy to…</button>
+                            <button type="button" class="sftp-file-rename" data-i18n="browser.files.rename_action">Rename…</button>
+                            <button type="button" class="sftp-file-delete danger" data-i18n="browser.files.delete_action">Delete…</button>
                         </div>
                         <div class="sftp-rename-controls">
-                            <input class="sftp-rename-input" type="text" spellcheck="false" aria-label="New remote file name" aria-describedby="sftp-rename-hint">
-                            <button type="button" class="sftp-rename-confirm">Rename</button>
-                            <button type="button" class="sftp-rename-cancel">Cancel</button>
+                            <input class="sftp-rename-input" type="text" spellcheck="false" aria-label="New file name" data-i18n-aria-label="browser.files.new_filename" aria-describedby="sftp-rename-hint">
+                            <button type="button" class="sftp-rename-confirm" data-i18n="browser.files.rename">Rename</button>
+                            <button type="button" class="sftp-rename-cancel" data-i18n="common.cancel">Cancel</button>
                         </div>
                         <div class="sftp-rename-hint" id="sftp-rename-hint" aria-live="polite"></div>
                     </div>
-                    <div class="sftp-delete-confirmation" role="dialog" aria-modal="false" aria-label="Permanent file deletion">
+                    <div class="sftp-delete-confirmation" role="dialog" aria-modal="false" aria-label="Permanent file deletion" data-i18n-aria-label="browser.files.delete_title">
                         <div class="sftp-delete-phase-one">
-                            <div class="sftp-delete-question">Do you want to delete this file?</div>
+                            <div class="sftp-delete-question" data-i18n="browser.files.delete_question">Delete this file?</div>
                         </div>
                         <div class="sftp-delete-phase-two" hidden>
-                            <div class="sftp-delete-question">File will be permanently deleted and cannot be recovered. Are you sure?</div>
+                            <div class="sftp-delete-question" data-i18n="browser.files.delete_final">This permanently deletes the file. StandTerm cannot undo it. Continue?</div>
                         </div>
                         <div class="sftp-file-operation-path sftp-delete-path"></div>
                         <div class="sftp-delete-actions phase-one sftp-delete-phase-one">
-                            <button type="button" class="sftp-delete-yes danger">Yes</button>
-                            <button type="button" class="sftp-delete-no">No</button>
+                            <button type="button" class="sftp-delete-yes danger" data-i18n="common.yes">Yes</button>
+                            <button type="button" class="sftp-delete-no" data-i18n="common.no">No</button>
                         </div>
                         <div class="sftp-delete-actions phase-two sftp-delete-phase-two" hidden>
-                            <button type="button" class="sftp-delete-sure danger">I am sure</button>
-                            <button type="button" class="sftp-delete-dont">Don't delete</button>
+                            <button type="button" class="sftp-delete-sure danger" data-i18n="browser.files.delete_confirm">Permanently delete</button>
+                            <button type="button" class="sftp-delete-dont" data-i18n="browser.files.dont_delete">Don't delete</button>
                         </div>
                     </div>
-                    <div class="sftp-drop-zone" tabindex="0">Drop one file here or click to choose</div>
+                    <div class="sftp-drop-zone" tabindex="0" data-i18n="browser.files.drop">Drop one file here or click to choose</div>
                     <input class="sftp-file-input" type="file" hidden>
                     <div class="sftp-selected-file">
                         <div class="sftp-file-detail-path sftp-selected-file-path"></div>
                         <div class="sftp-file-detail-meta sftp-selected-file-meta"></div>
                         <div class="sftp-file-operation-actions">
-                            <button type="button" class="sftp-send primary" disabled>Send</button>
-                            <button type="button" class="sftp-local-copy" disabled>Copy to&hellip;</button>
+                            <button type="button" class="sftp-send primary" disabled data-i18n="browser.files.send">Upload</button>
+                            <button type="button" class="sftp-local-copy" disabled data-i18n="browser.files.copy_to">Copy to…</button>
                         </div>
                     </div>
                     <div class="sftp-conflict-box">
                         <div class="sftp-conflict-text"></div>
                         <div class="sftp-conflict-actions">
-                            <button type="button" class="sftp-conflict-cancel">Cancel</button>
-                            <button type="button" class="sftp-conflict-keep">Keep Both</button>
-                            <button type="button" class="sftp-conflict-replace replace">Replace</button>
+                            <button type="button" class="sftp-conflict-cancel" data-i18n="common.cancel">Cancel</button>
+                            <button type="button" class="sftp-conflict-keep" data-i18n="browser.files.keep_both">Keep both</button>
+                            <button type="button" class="sftp-conflict-replace replace" data-i18n="browser.files.replace">Replace</button>
                         </div>
                     </div>
                     <div class="sftp-progress"><div class="sftp-progress-bar"></div></div>
-                    <div class="sftp-transfer-status" role="status" aria-live="polite">Opening Files…</div>
+                    <div class="sftp-transfer-status" role="status" aria-live="polite" data-i18n="browser.files.opening">Opening Files…</div>
                     </div>
                     </div>
                 `;
                 pipDocument.body.replaceChildren(shell);
+                uiText.apply(shell);
                 state.elements = {
                     shell,
                     workspace: shell.querySelector('.sftp-files-workspace'),
@@ -10784,7 +10791,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 state.elements.localCopy.addEventListener('click', () => openSftpCopyDestination(state, 'browser'));
                 state.elements.conflictCancel.addEventListener('click', () => {
                     state.elements.conflict.classList.remove('visible');
-                    setSftpPipStatus(state, 'Upload cancelled.');
+                    setSftpPipStatus(state, t('browser.files.upload_cancelled_idle'));
                 });
                 state.elements.conflictKeep.addEventListener('click', () => requestSftpUploadTicket(state, 'keep_both'));
                 state.elements.conflictReplace.addEventListener('click', () => requestSftpUploadTicket(state, 'replace'));
@@ -10825,7 +10832,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             function floatingWindowError() {
                 alert(useDesktopFloatingWindows
                     ? 'Could not open the floating window. Please retry or update StandTerm Desktop.'
-                    : 'Could not open the floating window. Allow pop-up windows for this site, then click the control again.');
+                    : t('browser.chrome.popup_failed'));
             }
 
             window.addEventListener('pagehide', () => {
@@ -10839,12 +10846,12 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 try {
                     if (useDesktopFloatingWindows) {
                         const child = window.open('about:blank', 'standterm-floating', `popup,width=${width},height=${height}`);
-                        if (!child) throw new Error('Floating window was blocked.');
+                        if (!child) throw new Error(t('browser.chrome.popup_blocked'));
                         return await Promise.resolve(child);
                     }
                     if (usesBrowserPopup()) {
                         const child = window.open('about:blank', '_blank', `popup,width=${width},height=${height}`);
-                        if (!child) throw new Error('Floating window was blocked.');
+                        if (!child) throw new Error(t('browser.chrome.popup_blocked'));
                         child.opener = null;
                         browserPopupWindows.add(child);
                         child.addEventListener('pagehide', () => {
@@ -10865,7 +10872,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
 
             async function openSftpPip(state, existingWindow = null) {
                 if (!canUseSftpFileManager(state)) return;
-                if (pipTerminalState) return alert('Restore the terminal from its floating window before opening Files.');
+                if (pipTerminalState) return alert(t('browser.chrome.restore_before_files'));
                 if (sftpPipState) {
                     if (sftpPipState.window && !sftpPipState.window.closed) sftpPipState.window.focus();
                     return;
@@ -10965,8 +10972,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             const OVERLAY_MIN_HEIGHT = 150;
             const IMAGE_EXTENSIONS = ['.jpg', '.jpeg', '.png', '.gif', '.webp', '.svg', '.bmp'];
             function showContextMenu(x, y, target = null) {
-                pipOption.textContent = usesBrowserPopup() ? '\u29C9 Pop out terminal' : '\u29C9 Terminal to PiP';
-                pipOption.title = usesBrowserPopup() ? 'Open a separate browser window; it may not stay on top.' : '';
+                pipOption.textContent = usesBrowserPopup() ? t('browser.chrome.popout_menu') : t('browser.chrome.pip_menu');
+                pipOption.title = usesBrowserPopup() ? t('browser.chrome.pip_hint') : '';
                 const activeTerm = getActiveTerm();
                 const targetTab = target && target.closest ? target.closest('.terminal-tab') : null;
                 contextMenuTerminalId = targetTab ? targetTab.dataset.terminalId : activeTerminalId;
@@ -10991,7 +10998,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     sftpSendOption.appendChild(unavailableMark);
                 }
                 sftpSendOption.appendChild(document.createTextNode(
-                    enableSftp ? ' Files\u2026' : ' Files not available'
+                    ' ' + t(enableSftp ? 'browser.chrome.files_open' : 'browser.chrome.files_unavailable')
                 ));
                 if (hasSel) { openOption.dataset.url = sel; searchOption.dataset.query = sel; }
                 contextMenu.style.left = `${x}px`; contextMenu.style.top = `${y}px`; contextMenu.style.display = 'block';
@@ -11019,7 +11026,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 contextMenu.style.display = 'none';
                 prefs.useCustomMenu = false;
                 savePrefs(prefs);
-                alert("Custom menu disabled. To restore, use the ⚙️ icon or Press Shift + Right-Click.");
+                alert(t('browser.chrome.native_disabled'));
             };
             sftpSendOption.onclick = (event) => {
                 event.stopPropagation();
@@ -11104,10 +11111,10 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const request = { id: crypto.getRandomValues(new Uint32Array(4)).join('-'), state, focus: document.activeElement };
                 pendingContextPaste = request;
                 try {
-                    const text = navigator.clipboard?.readText ? await navigator.clipboard.readText() : prompt('Paste text here:');
+                    const text = navigator.clipboard?.readText ? await navigator.clipboard.readText() : prompt(t('browser.paste.clipboard_prompt'));
                     if (pendingContextPaste === request && validContextPasteRequest() && text) startPasteReview(state, text, true);
                 } catch {
-                    if (!useDesktopFloatingWindows) showError('Clipboard access was denied. Use your terminal paste shortcut (Ctrl+Shift+V or Cmd+V).');
+                    if (!useDesktopFloatingWindows) showError(t('browser.chrome.clipboard_denied'));
                 } finally {
                     if (pendingContextPaste === request) pendingContextPaste = null;
                 }
@@ -11225,8 +11232,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 );
                 if (state.pipAgentBtn) {
                     state.pipAgentBtn.disabled = !usable;
-                    state.pipAgentBtn.innerText = showing ? 'Hide Agent Panel' : 'Show Agent Panel';
-                    state.pipAgentBtn.title = usable ? state.pipAgentBtn.innerText : 'Connect this terminal before using Agent panel';
+                    state.pipAgentBtn.innerText = t(showing ? 'agent.panel.hide' : 'agent.panel.show');
+                    state.pipAgentBtn.title = usable ? state.pipAgentBtn.innerText : t('browser.chrome.agent_connect');
                 }
                 const agent = state.agent;
                 const mode = agent ? agent.mode : AGENT_MODE_DISABLED;
@@ -11245,18 +11252,18 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     button.disabled = !mintAvailable || minting;
                 });
                 if (state.pipAgentMintBtn) {
-                    state.pipAgentMintBtn.innerText = minting ? 'Minting…' : 'Mint';
-                    state.pipAgentMintBtn.title = `Mint a standard external-agent token for ${label}`;
+                    state.pipAgentMintBtn.innerText = t(minting ? 'agent.token.creating' : 'agent.token.create');
+                    state.pipAgentMintBtn.title = t('agent.token.target_title', { target: label });
                 }
                 if (state.pipAgentMint3xBtn) {
-                    state.pipAgentMint3xBtn.innerText = minting ? 'Minting…' : 'Mint+';
-                    state.pipAgentMint3xBtn.title = `Mint a 3× idle-time external-agent token for ${label}`;
+                    state.pipAgentMint3xBtn.innerText = t(minting ? 'agent.token.creating' : 'agent.token.create_3x');
+                    state.pipAgentMint3xBtn.title = t('agent.token.target_3x_title', { target: label });
                 }
                 if (state.pipAgentPauseBtn) {
                     const pauseVisible = hasAgentPauseCapability(state);
                     state.pipAgentPauseBtn.classList.toggle('visible', pauseVisible);
                     state.pipAgentPauseBtn.disabled = !(pauseVisible && socket && socket.connected && state.connected);
-                    state.pipAgentPauseBtn.title = pauseVisible ? 'Pause Agent terminal input' : 'Agent pause is not available';
+                    state.pipAgentPauseBtn.title = pauseVisible ? t('browser.chrome.pause_input') : t('browser.chrome.pause_unavailable');
                 }
                 updateSftpActionButton(state.pipSftpBtn, state);
             }
@@ -11289,6 +11296,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             }
 
             function createPipShell(state, pipWindow) {
+                pipWindow.document.documentElement.lang = uiText.locale;
                 const bar = pipWindow.document.createElement('div');
                 bar.className = 'pip-title-bar';
                 const title = pipWindow.document.createElement('span');
@@ -11310,7 +11318,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 const pauseButton = pipWindow.document.createElement('button');
                 pauseButton.type = 'button';
                 pauseButton.className = 'pip-agent-button pip-agent-pause';
-                pauseButton.innerText = 'Pause Agent';
+                pauseButton.innerText = t('agent.pause.action');
                 pauseButton.addEventListener('click', () => pauseAgentForState(state));
                 const mintButton = pipWindow.document.createElement('button');
                 mintButton.type = 'button';
@@ -11330,8 +11338,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 sftpButton.type = 'button';
                 sftpButton.className = 'pip-agent-button pip-sftp-button';
                 sftpButton.innerText = '\u{1F4C1}';
-                sftpButton.title = 'Open Files';
-                sftpButton.setAttribute('aria-label', 'Open Files');
+                sftpButton.title = t('browser.chrome.files_open');
+                sftpButton.setAttribute('aria-label', t('browser.chrome.files_open'));
                 sftpButton.hidden = true;
                 sftpButton.addEventListener('click', () => openSftpFromTerminalPip(state));
                 bar.append(title, applicationTitleItem, meta, spacer, pauseButton, mintButton, mint3xButton, agentButton, sftpButton);
@@ -11400,7 +11408,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             async function moveActiveTerminalToPip() {
                 contextMenu.style.display = 'none';
                 if (!canMoveActiveTerminalToPip()) return;
-                if (sftpPipState) return alert('Close Files before moving a terminal to its own window.');
+                if (sftpPipState) return alert(t('browser.chrome.close_files_before_popout'));
                 const state = getActiveTerminalState();
                 if (!state) return;
                 if (pipTerminalState && pipTerminalState !== state) {
@@ -11934,63 +11942,68 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     serverAccessCopyBtn.disabled = true;
                     copyAccessUrl()
                         .catch(err => {
-                            if (serverAccessStatus) serverAccessStatus.textContent = err.message || 'Access URL is unavailable.';
+                            if (serverAccessStatus) serverAccessStatus.textContent = err.message || t('browser.server_access.unavailable');
                         })
                         .finally(() => { serverAccessCopyBtn.disabled = false; });
                 };
             }
             if (serverAccessShowBtn) {
                 serverAccessShowBtn.onclick = () => {
-                    if (!window.confirm('Show the full Access URL for 30 seconds?')) return;
+                    if (!window.confirm(t('browser.server_access.confirm_show'))) return;
                     serverAccessShowBtn.disabled = true;
                     showAccessUrl()
                         .catch(err => {
-                            if (serverAccessStatus) serverAccessStatus.textContent = err.message || 'Access URL is unavailable.';
+                            if (serverAccessStatus) serverAccessStatus.textContent = err.message || t('browser.server_access.unavailable');
                         })
                         .finally(() => { serverAccessShowBtn.disabled = false; });
                 };
             }
             if (platformRecoveryRegisterBtn) {
                 platformRecoveryRegisterBtn.onclick = () => {
+                    let feedback = '';
                     platformRecoveryRegisterBtn.disabled = true;
-                    if (platformRecoveryStatus) platformRecoveryStatus.textContent = 'Waiting for device registration...';
+                    if (platformRecoveryStatus) platformRecoveryStatus.textContent = t('browser.platform.registering');
                     registerPlatformRecoveryCredential()
                         .then(() => {
                             if (platformRecoveryStatus) {
-                                platformRecoveryStatus.textContent = 'Platform recovery is armed for this live session.';
+                                platformRecoveryStatus.textContent = t('browser.platform.armed');
                             }
                         })
                         .catch(error => {
                             if (platformRecoveryStatus) {
-                                platformRecoveryStatus.textContent = formatPlatformRecoveryError(error);
+                                feedback = formatPlatformRecoveryError(error);
+                                platformRecoveryStatus.textContent = feedback;
                             }
                         })
-                        .finally(() => requestPlatformRecoveryStatus());
+                        .finally(() => requestPlatformRecoveryStatus(feedback));
                 };
             }
             if (platformRecoveryArmBtn) {
                 platformRecoveryArmBtn.onclick = () => {
+                    let feedback = '';
                     platformRecoveryArmBtn.disabled = true;
                     if (platformRecoveryStatus) platformRecoveryStatus.textContent = t('browser.recovery.verifying_device');
                     authenticatePlatformRecoveryCredential()
                         .then(() => {
                             if (platformRecoveryStatus) {
-                                platformRecoveryStatus.textContent = 'Platform recovery is armed for this live session.';
+                                platformRecoveryStatus.textContent = t('browser.platform.armed');
                             }
                         })
                         .catch(error => {
                             if (platformRecoveryStatus) {
-                                platformRecoveryStatus.textContent = formatPlatformRecoveryError(error);
+                                feedback = formatPlatformRecoveryError(error);
+                                platformRecoveryStatus.textContent = feedback;
                             }
                         })
-                        .finally(() => requestPlatformRecoveryStatus());
+                        .finally(() => requestPlatformRecoveryStatus(feedback));
                 };
             }
             if (platformRecoveryRemoveBtn) {
                 platformRecoveryRemoveBtn.onclick = async () => {
-                    if (!window.confirm('Revoke all platform recovery registrations for this hostname? Passkeys may remain in the operating system.')) return;
+                    let feedback = '';
+                    if (!window.confirm(t('browser.platform.confirm_revoke'))) return;
                     platformRecoveryRemoveBtn.disabled = true;
-                    if (platformRecoveryStatus) platformRecoveryStatus.textContent = 'Removing platform recovery passkeys...';
+                    if (platformRecoveryStatus) platformRecoveryStatus.textContent = t('browser.platform.revoking');
                     try {
                         const response = await fetch('/session-recovery/credentials/remove', {
                             method: 'POST',
@@ -11999,18 +12012,23 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                         await readPlatformRecoveryResponse(response);
                     } catch (error) {
                         if (platformRecoveryStatus) {
-                            platformRecoveryStatus.textContent = formatPlatformRecoveryError(error);
+                            feedback = formatPlatformRecoveryError(error);
+                            platformRecoveryStatus.textContent = feedback;
                         }
                     } finally {
-                        requestPlatformRecoveryStatus();
+                        requestPlatformRecoveryStatus(feedback);
                     }
                 };
             }
             if (connectionDiagnosticsCopyBtn) {
-                connectionDiagnosticsCopyBtn.onclick = () => {
-                    copyToClipboard(buildConnectionDiagnosticsText());
+                connectionDiagnosticsCopyBtn.onclick = async () => {
+                    const count = connectionDiagnostics.length;
+                    connectionDiagnosticsCopyBtn.disabled = true;
+                    if (connectionDiagnosticsStatus) connectionDiagnosticsStatus.textContent = t('browser.diagnostics.copying');
+                    const copied = await copyToClipboard(buildConnectionDiagnosticsText());
+                    connectionDiagnosticsCopyBtn.disabled = false;
                     if (connectionDiagnosticsStatus) {
-                        connectionDiagnosticsStatus.textContent = `Copied ${connectionDiagnostics.length} connection events.`;
+                        connectionDiagnosticsStatus.textContent = t(copied ? 'browser.diagnostics.copied' : 'browser.diagnostics.copy_failed', { count });
                     }
                 };
             }
diff --git a/tests/agent_browser_smoke.py b/tests/agent_browser_smoke.py
index 45c9e1b..9d7bf29 100644
--- a/tests/agent_browser_smoke.py
+++ b/tests/agent_browser_smoke.py
@@ -268,6 +268,7 @@ def test_initial_access_login_falls_back_without_localization_or_javascript(brow
 
 
 def test_browser_authorization_gate_hides_connection_controls(browser, access_url, ui_language='en'):
+    from settings_transfer_i18n_browser_smoke import message
     context = browser.new_context(viewport={'width': 390, 'height': 844}, locale='en-US')
     page = context.new_page()
     page.add_init_script("localStorage.setItem('terminal.pref.v1', JSON.stringify(" + json.dumps({'uiLanguage': ui_language}) + "));")
@@ -301,6 +302,7 @@ def test_browser_authorization_gate_hides_connection_controls(browser, access_ur
                 return {
                     title: document.querySelector('#controls h2').innerText,
                     sessionId: document.getElementById('launcher-session-id').innerText,
+                    launcherId: LAUNCHER_INSTANCE_ID,
                     warningPresent: !!document.getElementById('browser-auth-warning'),
                     authorizationTitle: document.getElementById('browser-auth-title').innerText,
                     message: document.getElementById('browser-auth-message').innerText,
@@ -311,8 +313,9 @@ def test_browser_authorization_gate_hides_connection_controls(browser, access_ur
             }"""
         )
         check(state['title'] == 'StandTerm', 'authorization gate does not show the StandTerm product name')
-        check(state['sessionId'].startswith('Session ID: '), 'authorization gate does not show the launcher session ID')
-        check(len(state['sessionId']) > len('Session ID: '), 'authorization gate launcher session ID is empty')
+        check(isinstance(state['launcherId'], str) and bool(state['launcherId']), 'authorization gate launcher session ID is empty')
+        check(state['sessionId'] == message(page, 'browser.chrome.session_id', {'id':state['launcherId']}),
+              'authorization gate does not show the complete localized launcher session ID')
         check(state['warningPresent'] is False, 'authorization gate retained the decorative warning')
         check(state['authorizationTitle'] == ('需要瀏覽器授權' if zh else 'Browser authorization required'),
               'browser authorization title did not match its language')
@@ -590,7 +593,8 @@ def test_browser_access_and_recovery_in_traditional_chinese(browser, access_url)
     test_invalid_session_reconnect_prompts_for_current_token(browser, access_url, ui_language='zh-TW')
 
 
-def test_platform_passkey_recovers_live_session_without_access_token(browser, access_url):
+def test_platform_passkey_recovers_live_session_without_access_token(browser, access_url, ui_language='en'):
+    from settings_transfer_i18n_browser_smoke import message
     parsed = urllib.parse.urlparse(access_url)
     localhost_access_url = urllib.parse.urlunparse(parsed._replace(
         netloc=f'localhost:{parsed.port}',
@@ -600,8 +604,9 @@ def test_platform_passkey_recovers_live_session_without_access_token(browser, ac
         query='',
         fragment='',
     ))
-    context = browser.new_context(viewport={'width': 1280, 'height': 800})
+    context = browser.new_context(viewport={'width': 1280, 'height': 800}, locale='en-US')
     page = context.new_page()
+    page.add_init_script("localStorage.setItem('terminal.pref.v1', JSON.stringify(" + json.dumps({'uiLanguage':ui_language}) + "));")
     cdp = context.new_cdp_session(page)
     try:
         cdp.send('WebAuthn.enable')
@@ -632,12 +637,14 @@ def test_platform_passkey_recovers_live_session_without_access_token(browser, ac
         page.click('#quick-settings')
         page.click('.settings-nav-item[data-tab="server"]')
         page.wait_for_function(
-            "() => document.getElementById('platform-recovery-status').innerText.includes('0 registered')",
+            "expected => document.getElementById('platform-recovery-status').innerText === expected",
+            arg=message(page, 'browser.platform.status', {'configured':0,'armed':0,'rp_id':'localhost'}),
             timeout=5000,
         )
         page.click('#platform-recovery-register')
         page.wait_for_function(
-            "() => document.getElementById('platform-recovery-status').innerText.includes('1 registered, 1 armed')",
+            "expected => document.getElementById('platform-recovery-status').innerText === expected",
+            arg=message(page, 'browser.platform.status', {'configured':1,'armed':1,'rp_id':'localhost'}),
             timeout=10000,
         )
         registered_credentials = cdp.send('WebAuthn.getCredentials', {
@@ -645,7 +652,7 @@ def test_platform_passkey_recovers_live_session_without_access_token(browser, ac
         }).get('credentials', [])
         check(len(registered_credentials) == 1, 'virtual platform authenticator did not retain the recovery credential')
         check(
-            page.locator('#platform-recovery-status').inner_text().endswith('RP ID: localhost'),
+            'localhost' in page.locator('#platform-recovery-status').inner_text(),
             'platform recovery did not bind the passkey to the localhost RP ID',
         )
 
@@ -741,8 +748,8 @@ def attach_agent(page):
     return wait_for_agent(page, "state.mode === 'observe'")
 
 
-def test_toolbar_pause_targets_main_tab_not_panel_override(browser, access_url):
-    context, page = new_page(browser, access_url)
+def test_toolbar_pause_targets_main_tab_not_panel_override(browser, access_url, ui_language='en'):
+    context, page = new_page(browser, access_url, ui_language)
     try:
         attach_agent(page)
         set_agent_mode(page, 'direct', 'direct_active')
@@ -964,8 +971,9 @@ def test_agent_panel_can_be_dragged(browser, access_url):
         close_context(context)
 
 
-def test_terminal_pip_hides_selected_tab_and_keeps_background_tab(browser, access_url):
-    context, page = new_page(browser, access_url)
+def test_terminal_pip_hides_selected_tab_and_keeps_background_tab(browser, access_url, ui_language='en'):
+    from settings_transfer_i18n_browser_smoke import message
+    context, page = new_page(browser, access_url, ui_language)
     try:
         initial = page.evaluate(
             """() => ({
@@ -1024,9 +1032,24 @@ def test_terminal_pip_hides_selected_tab_and_keeps_background_tab(browser, acces
         )
         check(pip_status['applicationTitle'] == 'PiP workspace title', 'Terminal PiP did not show the OSC title')
         check(pip_status['applicationTitleHidden'] is False, 'Terminal PiP hid a non-empty OSC title')
-        check(pip_status['mintText'] == 'Mint' and pip_status['mintHidden'] is False, 'Terminal PiP did not show Mint')
-        check(pip_status['mint3xText'] == 'Mint+' and pip_status['mint3xHidden'] is False, 'Terminal PiP did not show Mint+')
-        check(pip_status['agentPanelText'] == 'Show Agent Panel', 'Terminal PiP Agent panel control was incorrect')
+        check(pip_status['mintText'] == message(page, 'agent.token.create') and pip_status['mintHidden'] is False, 'Terminal PiP did not show Create token')
+        check(pip_status['mint3xText'] == message(page, 'agent.token.create_3x') and pip_status['mint3xHidden'] is False, 'Terminal PiP did not show Create token 3x')
+        check(pip_status['agentPanelText'] == message(page, 'agent.panel.show'), 'Terminal PiP Agent panel control was incorrect')
+        compact_pip = page.evaluate("""() => {
+            const doc = documentPictureInPicture.window.document;
+            doc.documentElement.style.width = '480px';
+            doc.documentElement.style.height = '600px';
+            const buttons = [...doc.querySelectorAll('.pip-agent-button')].filter(button => button.getClientRects().length);
+            const metrics = buttons.map(button => {
+                const rect = button.getBoundingClientRect();
+                return {text:button.innerText,left:rect.left,right:rect.right,top:rect.top,bottom:rect.bottom};
+            });
+            doc.documentElement.style.width = '';
+            doc.documentElement.style.height = '';
+            return metrics;
+        }""")
+        check(all(0 <= item['left'] < item['right'] <= 480 and 0 <= item['top'] < item['bottom'] <= 600 for item in compact_pip),
+              f'Terminal PiP controls overflow at 480x600: {compact_pip}')
 
         page.click('#quick-settings')
         page.wait_for_selector('#settings-modal.open', timeout=5000)
@@ -1100,8 +1123,12 @@ def test_terminal_pip_hides_selected_tab_and_keeps_background_tab(browser, acces
         close_context(context)
 
 
-def test_sftp_status_actions_and_terminal_pip_transition(browser, access_url):
-    context, page = new_page(browser, access_url)
+def test_sftp_status_actions_and_terminal_pip_transition(browser, access_url, ui_language='en'):
+    from settings_transfer_i18n_browser_smoke import message
+    context, page = new_page(browser, access_url, ui_language)
+
+    def text(key, params=None):
+        return message(page, 'browser.files.' + key, params)
     try:
         page.evaluate(
             """() => window.terminalTest.applyTerminalListForTest({
@@ -1141,14 +1168,15 @@ def test_sftp_status_actions_and_terminal_pip_transition(browser, access_url):
             available_status == {
                 'hidden': False,
                 'disabled': False,
-                'title': 'Open Files',
+                'title': message(page, 'browser.chrome.files_open'),
                 'text': '📁',
             },
             'connected SSH status bar did not expose the SFTP action',
         )
         page.click('#sftp-status-btn')
         page.wait_for_function(
-            "() => documentPictureInPicture.window?.document.querySelector('.sftp-pip-title')?.textContent === 'StandTerm - Files'",
+            "expected => documentPictureInPicture.window?.document.querySelector('.sftp-pip-title')?.textContent === expected",
+            arg=text('title'),
             timeout=5000,
         )
         page.evaluate('() => documentPictureInPicture.window.close()')
@@ -1170,13 +1198,13 @@ def test_sftp_status_actions_and_terminal_pip_transition(browser, access_url):
         )
         check(unavailable_status['hidden'] is False, 'unavailable SFTP status action disappeared')
         check(unavailable_status['disabled'] is True, 'unavailable SFTP status action remained enabled')
-        check(unavailable_status['title'] == 'Files not available', 'unavailable Files status hint was unclear')
+        check(unavailable_status['title'] == message(page, 'browser.chrome.files_unavailable'), 'unavailable Files status hint was unclear')
         check('×' in unavailable_status['text'], 'unavailable SFTP status action omitted its cross mark')
         check(unavailable_status['markColor'] == 'rgb(255, 69, 58)', 'unavailable SFTP cross was not red')
         unavailable_menu = page.evaluate("() => window.terminalTest.showContextMenuForTest('main')")
         check(unavailable_menu['sftpVisible'] is True, 'unavailable SSH context action disappeared')
         check(unavailable_menu['sftpDisabled'] is True, 'unavailable SSH context action remained enabled')
-        check('Files not available' in unavailable_menu['sftpText'], 'unavailable SSH context action hint was unclear')
+        check(message(page, 'browser.chrome.files_unavailable') in unavailable_menu['sftpText'], 'unavailable SSH context action hint was unclear')
 
         page.evaluate("() => window.terminalTest.setSftpAvailabilityForTest('main', null)")
         page.evaluate("() => window.terminalTest.showContextMenuForTest('main')")
@@ -1197,7 +1225,7 @@ def test_sftp_status_actions_and_terminal_pip_transition(browser, access_url):
             pip_action == {
                 'hidden': False,
                 'disabled': False,
-                'title': 'Open Files',
+                'title': message(page, 'browser.chrome.files_open'),
                 'text': '📁',
             },
             'Terminal PiP did not expose the SFTP action',
@@ -1205,7 +1233,8 @@ def test_sftp_status_actions_and_terminal_pip_transition(browser, access_url):
 
         page.evaluate("() => documentPictureInPicture.window.document.querySelector('.pip-sftp-button').click()")
         page.wait_for_function(
-            "() => documentPictureInPicture.window?.document.querySelector('.sftp-pip-title')?.textContent === 'StandTerm - Files'",
+            "expected => documentPictureInPicture.window?.document.querySelector('.sftp-pip-title')?.textContent === expected",
+            arg=text('title'),
             timeout=5000,
         )
         restored = page.evaluate("() => window.terminalTest.getTerminalTabsState()")
@@ -1217,8 +1246,12 @@ def test_sftp_status_actions_and_terminal_pip_transition(browser, access_url):
         close_context(context)
 
 
-def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, access_url):
-    context, page = new_page(browser, access_url)
+def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, access_url, ui_language='en'):
+    from settings_transfer_i18n_browser_smoke import message
+    context, page = new_page(browser, access_url, ui_language)
+
+    def text(key, params=None):
+        return message(page, 'browser.files.' + key, params)
     browser_console = []
     page.on('console', lambda message: browser_console.append(message.text))
     try:
@@ -1247,7 +1280,7 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
         ssh_menu = page.evaluate("() => window.terminalTest.showContextMenuForTest('main')")
         check(ssh_menu['terminalId'] == 'main', 'SFTP context action targeted the wrong terminal')
         check(ssh_menu['sftpVisible'] is True, 'connected SSH tab did not show SFTP send action')
-        check('Files' in ssh_menu['sftpText'], 'Files context action label was unclear')
+        check(message(page, 'browser.chrome.files_open') in ssh_menu['sftpText'], 'Files context action label was unclear')
         check(page.evaluate('() => !!window.documentPictureInPicture'), 'Document PiP is unavailable in the test browser')
         page.click('#sftp-send-option')
         page.wait_for_function('() => !!window.documentPictureInPicture.window', timeout=5000)
@@ -1263,19 +1296,20 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
                     .map(button => button.title)
             })"""
         )
-        check(pip_state['title'] == 'StandTerm - Files', 'Files PiP title was missing')
-        check(pip_state['documentTitle'] == 'StandTerm - Files', 'Files document title was missing')
-        check('Nested SSH sessions' in pip_state['hint'], 'SFTP PiP did not explain the direct endpoint boundary')
+        check(pip_state['title'] == text('title'), 'Files PiP title was missing')
+        check(pip_state['documentTitle'] == text('title'), 'Files document title was missing')
+        check(pip_state['hint'] == text('endpoint_hint'), 'SFTP PiP did not explain the direct endpoint boundary')
         check(pip_state['hasDropZone'] is True, 'SFTP PiP did not expose a file drop zone')
         check(pip_state['hasPathInput'] is True, 'SFTP PiP did not expose destination path navigation')
         check(pip_state['innerCloseCount'] == 0, 'Files kept a duplicate close control')
         check(
-            pip_state['navigationTitles'] == ['Home directory', 'Parent directory', 'Refresh files list'],
+            pip_state['navigationTitles'] == [text(key) for key in ['home','parent','refresh']],
             'Files navigation icons did not expose clear descriptions',
         )
 
         page.wait_for_function(
-            "() => documentPictureInPicture.window.document.querySelector('.sftp-transfer-status')?.textContent !== 'Opening Files…'",
+            "expected => documentPictureInPicture.window.document.querySelector('.sftp-transfer-status')?.textContent !== expected",
+            arg=text('opening'),
             timeout=5000,
         )
         rendered = page.evaluate(
@@ -1378,23 +1412,37 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
             }"""
         )
         check(file_ui['fileCount'] == 2, 'SFTP PiP did not list regular files')
-        check(file_ui['columnHeaders'] == ['Name ▲', 'Size', 'Date'], 'Files list did not expose sortable columns')
+        check(file_ui['columnHeaders'] == [text('name') + ' ▲', text('size'), text('date')], 'Files list did not expose sortable columns')
         check(file_ui['initialRows'] == ['docs', 'existing.txt', 'reference.txt'], 'Files Name sort did not keep folders first')
         check(file_ui['sizeDescendingRows'] == ['docs', 'reference.txt', 'existing.txt'], 'Files Size toggle did not sort descending')
         check(file_ui['dateDescendingRows'] == ['docs', 'existing.txt', 'reference.txt'], 'Files Date toggle did not sort descending')
         check(file_ui['typeaheadMatch'] == 'reference.txt', 'Files typeahead did not accumulate a quick prefix')
         check(file_ui['operationVisible'] is True, 'selecting an SFTP file did not open file actions')
-        check(file_ui['actions'] == ['Download', 'Copy to…', 'Rename…', 'Delete…'], 'Files actions were incomplete')
+        check(file_ui['actions'] == [text(key) for key in ['download','copy_to','rename_action','delete_action']], 'Files actions were incomplete')
         check(file_ui['operationPath'] == '/home/tester/reference.txt', 'selected file card omitted the full path')
-        check('9 B (9 bytes)' in file_ui['operationMeta'] and '1970' in file_ui['operationMeta'], 'selected file card omitted exact file metadata')
-        check(file_ui['preparing'] == {'disabled': True, 'text': 'Preparing…'}, 'SFTP Download was enabled before its ticket was ready')
+        check(text('detailed_bytes', {'size':'9 B','bytes':9}) in file_ui['operationMeta'] and '1970' in file_ui['operationMeta'], 'selected file card omitted exact file metadata')
+        check(file_ui['preparing'] == {'disabled': True, 'text': text('preparing')}, 'SFTP Download was enabled before its ticket was ready')
         check(file_ui['downloadReady'] is True, 'SFTP Download was not enabled after its ticket became ready')
         check(file_ui['selected'] is True and file_ui['selectedPressed'] == 'true', 'selected Files row was not highlighted')
         check(file_ui['sourceOverflow'] == 'auto', 'short Files source pane did not provide a scroll fallback')
         check(file_ui['actionBottom'] <= file_ui['viewportHeight'], 'short Files window clipped the selected file actions')
+        compact_files = page.evaluate("""() => {
+            const doc = documentPictureInPicture.window.document;
+            doc.documentElement.style.width = '480px';
+            doc.documentElement.style.height = '600px';
+            const metrics = [...doc.querySelectorAll('.sftp-path-controls button, .sftp-file-operation-actions button')]
+                .filter(button => button.getClientRects().length).map(button => {
+                    const rect = button.getBoundingClientRect();
+                    return {text:button.innerText,title:button.title,left:rect.left,right:rect.right,top:rect.top,bottom:rect.bottom};
+                });
+            doc.documentElement.style.width = '';
+            return metrics;
+        }""")
+        check(all(0 <= item['left'] < item['right'] <= 480 and 0 <= item['top'] < item['bottom'] <= 600 for item in compact_files),
+              f'Files controls overflow at 480x600: {compact_files}')
         page.evaluate("() => { documentPictureInPicture.window.document.documentElement.style.height = ''; }")
         check(
-            file_ui['status'] == 'Selected reference.txt. Click Download to save it.',
+            file_ui['status'] == text('download_ready', {'name':'reference.txt'}),
             'selecting a file implied that it had already downloaded',
         )
 
@@ -1441,7 +1489,7 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
         check(browser_download['clicked']['hiddenByStyle'] is True, 'SFTP browser download trigger could become visible')
         check(browser_download['clicked']['ownerIsPipDocument'] is True, 'SFTP browser download did not preserve the PiP user-activation context')
         check(browser_download['remainingLinks'] == 0, 'SFTP browser download trigger was not removed')
-        check(browser_download['buttonDisabled'] is True and browser_download['buttonText'] == 'Downloaded', 'used SFTP download ticket remained actionable')
+        check(browser_download['buttonDisabled'] is True and browser_download['buttonText'] == text('download_started'), 'used SFTP download ticket remained actionable')
         check(any(message.startswith('[sftp] Download ticket requested') for message in browser_console), 'SFTP browser log omitted the ticket request')
         check(any(message.startswith('[sftp] Download ticket ready') for message in browser_console), 'SFTP browser log omitted the ready ticket')
         check(any(message.startswith('[sftp] Download button clicked') for message in browser_console), 'SFTP browser log omitted the explicit click')
@@ -1504,16 +1552,16 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
             }"""
         )
         check(copy_picker['open'] is True and copy_picker['sourceHidden'] is True, 'Copy to did not switch to the destination Files pane')
-        check(copy_picker['title'] == 'Choose destination', 'destination Files pane title was unclear')
+        check(copy_picker['title'] == text('destination_title'), 'destination Files pane title was unclear')
         check(copy_picker['sourcePath'] == '/home/tester/reference.txt', 'destination Files pane omitted the source file path')
-        check('9 B (9 bytes)' in copy_picker['sourceMeta'], 'destination Files pane omitted exact source file metadata')
+        check(text('detailed_bytes', {'size':'9 B','bytes':9}) in copy_picker['sourceMeta'], 'destination Files pane omitted exact source file metadata')
         check(copy_picker['sessions'] == ['term-2'], 'destination Files pane listed an invalid session')
         check(copy_picker['path'] == '/home/local', 'destination Files pane did not browse the selected session')
         check(copy_picker['filename'] == 'reference.txt', 'destination Files pane did not preserve the source name')
         check(copy_picker['endpoint'].startswith('Local Shell'), 'destination Files pane did not identify Local Shell')
         check(copy_picker['innerCloseCount'] == 0, 'destination Files pane kept a duplicate close icon')
-        check(copy_picker['cancelText'] == 'Cancel', 'destination Files pane did not provide one clear pre-copy exit')
-        check('returns to the previous pane' in copy_picker['lifecycle'], 'destination Files pane did not explain pre-copy cancellation')
+        check(copy_picker['cancelText'] == message(page, 'common.cancel'), 'destination Files pane did not provide one clear pre-copy exit')
+        check(copy_picker['lifecycle'] == text('cancel_before_copy'), 'destination Files pane did not explain pre-copy cancellation')
         check(copy_picker['duplicateSummaryCount'] == 0, 'destination Files pane kept a duplicate instruction card')
 
         clear_emitted(page)
@@ -1626,15 +1674,13 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
             }""",
             copy_payload,
         )
-        check(copy_result_ui['statusAfterForeign'].startswith('Copying '), 'Files copy accepted a foreign copy_id with the same request_id')
-        check('44%' in copy_result_ui['statusAfterForeign'] and '4 B / 9 B' in copy_result_ui['statusAfterForeign'],
-              'Files copy omitted the percentage or transferred bytes')
+        check(copy_result_ui['statusAfterForeign'] == text('copy_progress', {'percent':44,'copied':'4 B','total':'9 B'}), 'Files copy accepted a foreign copy_id with the same request_id')
         check(copy_result_ui['progressVisible'], 'Files copy progress or cancel controls were clipped')
         page.evaluate("() => { const s = documentPictureInPicture.window.document.documentElement.style; s.height = ''; s.width = ''; }")
-        check(copy_result_ui['publishing']['text'] == 'Publishing…', 'commit barrier did not replace the cancel action')
+        check(copy_result_ui['publishing']['text'] == text('publishing'), 'commit barrier did not replace the cancel action')
         check(copy_result_ui['publishing']['disabled'] is True, 'commit barrier still allowed cancellation')
-        check('cannot be cancelled' in copy_result_ui['publishing']['lifecycle'], 'commit barrier did not explain its cancellation boundary')
-        check(copy_result_ui['terminalButtonText'] == 'Close', 'completed Files copy did not provide a clear close action')
+        check(copy_result_ui['publishing']['lifecycle'] == text('publishing_started'), 'commit barrier did not explain its cancellation boundary')
+        check(copy_result_ui['terminalButtonText'] == message(page, 'common.close'), 'completed Files copy did not provide a clear close action')
         check(copy_result_ui['progressHidden'] is True, 'Files copy did not accept its bound terminal result')
         back_navigation = page.evaluate(
             """() => {
@@ -1700,9 +1746,9 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
         cancel_requests = get_emitted(page, 'files_copy_cancel_request')
         check(len(cancel_requests) == 1, 'Cancel copy did not emit one typed cancellation request')
         check(cancel_requests[0]['args'][0]['copy_id'] == 'filesc_cancel_test', 'Cancel copy lost the backend copy id')
-        check(cancel_pending_ui['runningText'] == 'Cancel copy', 'running Files copy did not expose cancellation')
-        check(cancel_pending_ui['pendingText'] == 'Cancelling…' and cancel_pending_ui['pendingDisabled'] is True, 'Files copy cancellation could be submitted twice')
-        check('Cancelling before' in cancel_pending_ui['lifecycle'], 'Files copy did not explain pending cancellation')
+        check(cancel_pending_ui['runningText'] == text('cancel_copy'), 'running Files copy did not expose cancellation')
+        check(cancel_pending_ui['pendingText'] == text('cancelling') and cancel_pending_ui['pendingDisabled'] is True, 'Files copy cancellation could be submitted twice')
+        check(cancel_pending_ui['lifecycle'] == text('cancelling_copy'), 'Files copy did not explain pending cancellation')
         cancelled_ui = page.evaluate(
             """payload => {
                 window.terminalTest.handleFilesCopyResultForTest({
@@ -1728,9 +1774,9 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
             }""",
             cancel_copy_payload,
         )
-        check(cancelled_ui['buttonText'] == 'Close', 'cancelled Files copy did not restore a close action')
+        check(cancelled_ui['buttonText'] == message(page, 'common.close'), 'cancelled Files copy did not restore a close action')
         check('cancelled before publishing' in cancelled_ui['status'], 'Files copy did not show the cancellation boundary')
-        check('You can close Files' in cancelled_ui['lifecycle'], 'Files copy did not explain the terminal cancellation state')
+        check(cancelled_ui['lifecycle'] == text('copy_cancelled_lifecycle'), 'Files copy did not explain the terminal cancellation state')
         check(cancelled_ui['closed'] is True, 'cancelled Files copy destination pane did not close')
 
         clear_emitted(page)
@@ -1778,8 +1824,8 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
         )
         check(local_file_picker['visible'] is True, 'selected local file card was not shown')
         check(local_file_picker['path'] == 'local-upload.txt', 'selected local file card omitted the browser file name')
-        check('6 B (6 bytes)' in local_file_picker['meta'] and '2026' in local_file_picker['meta'], 'selected local file card omitted exact metadata')
-        check(local_file_picker['actions'] == ['Send', 'Copy to…'], 'selected local file card actions were unclear')
+        check(text('detailed_bytes', {'size':'6 B','bytes':6}) in local_file_picker['meta'] and '2026' in local_file_picker['meta'], 'selected local file card omitted exact metadata')
+        check(local_file_picker['actions'] == [text('send'), text('copy_to')], 'selected local file card actions were unclear')
         check(local_file_picker['actionBottom'] <= local_file_picker['viewportHeight'],
               'short Files window clipped the selected local file actions')
         check(local_file_picker['sessions'] == ['main', 'term-2'], 'local file Copy to omitted an eligible Files destination')
@@ -1817,7 +1863,7 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
             }"""
         )
         check(rename_initial['confirmDisabled'] is True, 'Rename allowed the unchanged file name')
-        check('already exists' in rename_initial['hint'], 'Rename did not explain the duplicate name')
+        check(rename_initial['hint'] == text('filename_exists'), 'Rename did not explain the duplicate name')
         check(rename_initial['inputFocused'] is True, 'Rename did not focus the file name input')
         rename_duplicate = page.evaluate(
             """() => {
@@ -1900,7 +1946,7 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
                 };
             }"""
         )
-        check(first_delete['question'] == 'Do you want to delete this file?', 'first delete warning was unclear')
+        check(first_delete['question'] == text('delete_question'), 'first delete warning was unclear')
         check(first_delete['path'] == '/home/tester/reference.txt', 'delete warning did not show the full remote path')
         check(first_delete['noFocused'] is True, 'first delete warning did not focus No')
         check(first_delete['secondPhaseVisible'] is False, 'second delete actions were visible during the first phase')
@@ -1919,7 +1965,7 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
                 };
             }"""
         )
-        check('cannot be recovered' in second_delete['question'], 'second delete warning did not state permanent loss')
+        check(second_delete['question'] == text('delete_final'), 'second delete warning did not state permanent loss')
         check(second_delete['dontFocused'] is True, 'second delete warning did not focus the safe action')
         check(second_delete['firstPhaseVisible'] is False, 'first delete actions were visible during the second phase')
         original_x = first_delete['yesCenterX']
@@ -1955,7 +2001,7 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
         local_menu = page.evaluate("() => window.terminalTest.showContextMenuForTest('main')")
         check(local_menu['sftpVisible'] is True, 'local shell tab did not expose Files')
         check(local_menu['sftpDisabled'] is False, 'Files was disabled for a capable local shell tab')
-        check('Files' in local_menu['sftpText'], 'local shell Files label was unclear')
+        check(message(page, 'browser.chrome.files_open') in local_menu['sftpText'], 'local shell Files label was unclear')
         page.click('#sftp-send-option')
         page.wait_for_function('() => !!window.documentPictureInPicture.window', timeout=5000)
         reopened_files = page.evaluate(
@@ -1970,7 +2016,7 @@ def test_sftp_send_context_action_is_limited_to_connected_ssh_tabs(browser, acce
             }"""
         )
         check(reopened_files == {
-            'title': 'StandTerm - Files',
+            'title': text('title'),
             'destinationOpen': False,
             'selectedLocalVisible': False,
             'selectedRemoteVisible': False,
@@ -2054,6 +2100,7 @@ def test_restored_terminal_list_allocates_next_new_tab_id(browser, access_url):
 
 
 def test_operator_observation_warning_ui(browser, access_url):
+    from settings_transfer_i18n_browser_smoke import message
     context, page = new_page(browser, access_url)
     try:
         page.click('#agent-toggle-btn')
@@ -2070,12 +2117,14 @@ def test_operator_observation_warning_ui(browser, access_url):
             """() => ({
                 body: document.body.classList.contains('operator-observing'),
                 panel: document.getElementById('agent-panel').classList.contains('operator-observing'),
+                count: window.terminalTest.getOperatorObservationState().eventCount,
                 text: document.getElementById('operator-observation-state').innerText
             })"""
         )
         check(ui_state['body'] is True, 'operator observation did not set body warning class')
         check(ui_state['panel'] is True, 'operator observation did not set panel warning class')
-        check('OBSERVING' in ui_state['text'], 'operator observation status text did not warn')
+        check(ui_state['text'] == message(page, 'browser.chrome.observing', {'count':ui_state['count'] or 0}),
+              'operator observation status did not show the localized warning and exact event count')
         page.evaluate("() => document.getElementById('operator-observation-mark-btn').click()")
         page.wait_for_function(
             "() => window.terminalTest.getOperatorObservationState()?.eventCount >= 1",
@@ -2186,8 +2235,9 @@ def test_privacy_states_block_snapshots_and_agent_runs(browser, access_url):
         close_context(context)
 
 
-def test_agent_panel_status_gates_and_external_hint(browser, access_url):
-    context, page = new_page(browser, access_url)
+def test_agent_panel_status_gates_and_external_hint(browser, access_url, ui_language='en'):
+    from settings_transfer_i18n_browser_smoke import message
+    context, page = new_page(browser, access_url, ui_language)
     try:
         page.click('#agent-toggle-btn')
         page.wait_for_selector('#agent-panel.visible', timeout=5000)
@@ -2213,7 +2263,7 @@ def test_agent_panel_status_gates_and_external_hint(browser, access_url):
         )
         check(panel_state['statusBoxError'] is True, 'agent status row did not mark action error')
         check('agent_privacy_blocked' in panel_state['statusDetail'], 'agent status row did not show error_code')
-        check('private_input' in panel_state['privacyText'], 'privacy gate chip did not show privacy state')
+        check(panel_state['privacyText'] == message(page, 'browser.chrome.privacy', {'value':'private_input'}), 'privacy gate chip did not show privacy state')
         check(panel_state['privacyBlocking'] is True, 'privacy gate chip did not mark blocking state')
 
         set_privacy(page, 'normal')
@@ -2226,7 +2276,9 @@ def test_agent_panel_status_gates_and_external_hint(browser, access_url):
                 blocking: document.getElementById('agent-gate-human').classList.contains('blocking')
             })"""
         )
-        check('locked' in human_gate['text'], 'human input gate chip did not show active lease')
+        human_pattern = re.escape(message(page, 'browser.chrome.human_seconds', {'seconds':123456})).replace('123456', r'\d+')
+        check(human_gate['text'] == message(page, 'browser.chrome.human_locked') or re.fullmatch(human_pattern, human_gate['text']),
+              'human input gate chip did not show active lease')
         check(human_gate['blocking'] is True, 'human input gate chip did not mark blocking state')
 
         emit_socket(page, 'agent_mode_set', {'terminal_id': TERMINAL_ID, 'mode': 'disabled'})
@@ -2241,10 +2293,10 @@ def test_agent_panel_status_gates_and_external_hint(browser, access_url):
                 modeButtonsDisabled: Array.from(document.querySelectorAll('[data-agent-mode]')).every(button => button.disabled)
             })"""
         )
-        check(disabled_external['accessText'] == 'Enable external agent', 'agent access toggle did not offer enable in disabled mode')
+        check(disabled_external['accessText'] == message(page, 'agent.access.enable'), 'agent access toggle did not offer enable in disabled mode')
         check(disabled_external['modeButtonsDisabled'] is True, 'agent permission buttons were not disabled while access was off')
         check(disabled_external['buttonDisabled'] is True, 'external token button stayed enabled in disabled mode')
-        check('Enable external agent' in disabled_external['hint'], 'external token hint did not explain disabled prerequisite')
+        check(disabled_external['hint'] == message(page, 'agent.token.enable_required'), 'external token hint did not explain disabled prerequisite')
         check(disabled_external['commandTag'] == 'TEXTAREA', 'external token command output is not a textarea')
         check(disabled_external['commandOutputOpen'] is False, 'external token command output was not collapsed by default')
 
@@ -2258,10 +2310,11 @@ def test_agent_panel_status_gates_and_external_hint(browser, access_url):
                 modeLabels: Array.from(document.querySelectorAll('[data-agent-mode]')).map(button => button.innerText)
             })"""
         )
-        check(enabled_external['accessText'] == 'Disable external agent', 'agent access toggle did not offer disable after enabling')
-        check(enabled_external['modeLabels'] == ['Read only', 'Approval required', 'Direct input'], 'agent permission buttons did not use user-facing labels')
+        check(enabled_external['accessText'] == message(page, 'agent.access.disable'), 'agent access toggle did not offer disable after enabling')
+        expected_labels = [message(page, button.get_attribute('data-i18n')) for button in page.locator('[data-agent-mode]').all()]
+        check(enabled_external['modeLabels'] == expected_labels, 'agent permission buttons did not use user-facing labels')
         check(enabled_external['buttonDisabled'] is False, 'external token button did not enable in observe mode')
-        check('Create a local-only token' in enabled_external['hint'], 'external token hint did not show available state')
+        check(enabled_external['hint'] == message(page, 'agent.token.local_hint'), 'external token hint did not show available state')
 
         panel_mint_state = page.evaluate(
             """() => ({
@@ -2675,8 +2728,8 @@ def test_background_terminal_render_uses_mirror_canvas_png(browser, access_url):
         close_context(context)
 
 
-def test_paste_review_approve_and_cancel(browser, access_url):
-    context, page = new_page(browser, access_url)
+def test_paste_review_approve_and_cancel(browser, access_url, ui_language='en'):
+    context, page = new_page(browser, access_url, ui_language)
     try:
         attach_agent(page)
 
@@ -2713,8 +2766,8 @@ def test_paste_review_approve_and_cancel(browser, access_url):
         close_context(context)
 
 
-def test_clipboard_paste_targets_and_native_review(browser, access_url):
-    context, page = new_page(browser, access_url)
+def test_clipboard_paste_targets_and_native_review(browser, access_url, ui_language='en'):
+    context, page = new_page(browser, access_url, ui_language)
     try:
         attach_agent(page)
         page.evaluate('() => window.terminalTest.captureTerminalIoForTest()')
@@ -4016,7 +4069,9 @@ def text(key):
         page.wait_for_selector('#settings-modal.open', timeout=5000)
         page.click('.settings-nav-item[data-tab="server"]')
         page.wait_for_function(
-            "() => document.querySelector('#server-settings-mutable-controls .server-setting-input') !== null",
+            """expected => document.querySelector('#server-settings-mutable-controls .server-setting-input') !== null
+                && document.getElementById('server-settings-status').textContent === expected""",
+            arg=text('settings.server.writable'),
             timeout=5000,
         )
         state = page.evaluate(
@@ -4126,8 +4181,9 @@ def text(key):
         close_context(context)
 
 
-def test_connection_diagnostics_are_session_scoped_and_redacted(browser, access_url):
-    context, page = new_page(browser, access_url)
+def test_connection_diagnostics_are_session_scoped_and_redacted(browser, access_url, ui_language='en'):
+    from settings_transfer_i18n_browser_smoke import message
+    context, page = new_page(browser, access_url, ui_language)
     try:
         token = urllib.parse.parse_qs(urllib.parse.urlparse(access_url).query)['token'][0]
         page.evaluate("() => window.dispatchEvent(new Event('offline'))")
@@ -4148,7 +4204,7 @@ def test_connection_diagnostics_are_session_scoped_and_redacted(browser, access_
         check('page.offline' in events, 'diagnostics did not record browser offline event')
         check('Launcher Session ID:' in state['text'], 'diagnostics omitted launcher session ID')
         check(token not in state['text'], 'diagnostics exposed the access token')
-        check('connection events.' in state['status'], 'diagnostics did not show event count')
+        check(state['status'] == message(page, 'browser.diagnostics.count', {'count':len(state['entries'])}), 'diagnostics did not show event count')
 
         page.evaluate(
             """() => {
@@ -4186,16 +4242,20 @@ def test_connection_diagnostics_are_session_scoped_and_redacted(browser, access_
             })"""
         )
         check(cleared['entries'] == [], 'diagnostics clear did not remove stored events')
-        check(cleared['status'] == '0 connection events.', 'diagnostics clear did not update status')
+        check(cleared['status'] == message(page, 'browser.diagnostics.count', {'count':0}), 'diagnostics clear did not update status')
     finally:
         close_context(context)
 
 
-def test_settings_access_recovery_fetches_access_url_on_demand(browser, access_url):
+def test_settings_access_recovery_fetches_access_url_on_demand(browser, access_url, ui_language='en'):
+    from settings_transfer_i18n_browser_smoke import message
     parsed = urllib.parse.urlparse(access_url)
     token = urllib.parse.parse_qs(parsed.query)['token'][0]
-    context, page = new_page(browser, access_url)
+    context, page = new_page(browser, access_url, ui_language)
     try:
+        page.evaluate("""() => Object.defineProperty(navigator, 'clipboard', {
+            configurable:true,value:{writeText:async () => {}}
+        })""")
         page.click('#quick-settings')
         page.wait_for_selector('#settings-modal.open', timeout=5000)
         page.click('.settings-nav-item[data-tab="server"]')
@@ -4226,13 +4286,14 @@ def test_settings_access_recovery_fetches_access_url_on_demand(browser, access_u
                 location: window.location.href
             })"""
         )
-        check('shown for 30 seconds' in revealed['status'], 'access URL reveal did not update status')
+        check(revealed['status'] == message(page, 'browser.server_access.shown'), 'access URL reveal did not update status')
         check(access_url in revealed['text'], 'revealed access URL did not match server access URL')
         check('token=' not in revealed['location'], 'access URL reveal modified browser location')
 
         page.click('#server-access-copy-btn')
         page.wait_for_function(
-            "() => document.getElementById('server-access-status')?.textContent === 'Access URL copied.'",
+            "expected => document.getElementById('server-access-status')?.textContent === expected",
+            arg=message(page, 'browser.server_access.copied'),
             timeout=5000,
         )
     finally:
diff --git a/tests/browser_completion_i18n_smoke.py b/tests/browser_completion_i18n_smoke.py
new file mode 100644
index 0000000..fd5fef9
--- /dev/null
+++ b/tests/browser_completion_i18n_smoke.py
@@ -0,0 +1,322 @@
+"""Check browser access, device recovery, clipboard and terminal chrome in both locales."""
+import argparse
+import json
+from urllib.parse import urlparse
+
+import agent_browser_smoke as fixture
+from settings_transfer_i18n_browser_smoke import message
+
+
+RAW = 'Fixture <b>& {detail}'
+ACCESS_URL = 'http://fixture.invalid:2222/?token=raw_%3Cb%3E%26&value={token}'
+LOCAL_URL = 'http://localhost:2222/?token=local_raw'
+
+
+def status(page, selector, key, params=None):
+    expected = message(page, key, params)
+    page.wait_for_function('({selector,expected}) => document.querySelector(selector).textContent === expected',
+                           arg=dict(selector=selector, expected=expected))
+
+
+def translated(page, selector):
+    for element in page.locator(selector).all():
+        for source, target in [('data-i18n',None),('data-i18n-title','title'),('data-i18n-aria-label','aria-label')]:
+            key = element.get_attribute(source)
+            if key:
+                actual = element.text_content() if target is None else element.get_attribute(target)
+                assert actual == message(page, key), (key, actual)
+
+
+def open_tab(page, tab):
+    if not page.locator('#settings-modal').evaluate("el => el.classList.contains('open')"):
+        page.click('#quick-settings')
+    page.click(f'.settings-nav-item[data-tab="{tab}"]')
+
+
+def clipboard(page, fallback=False):
+    page.evaluate("""fallback => {
+        window.fixtureClipboard = {writes:[],fallbacks:[],fallback};
+        Object.defineProperty(navigator, 'clipboard', {configurable:true, value:{
+            writeText:text => new Promise((resolve,reject) => {
+                Object.assign(window.fixtureClipboard, {resolve,reject});
+                window.fixtureClipboard.writes.push(text);
+            })
+        }});
+        document.execCommand = command => {
+            window.fixtureClipboard.fallbacks.push({command,text:document.activeElement.value});
+            return window.fixtureClipboard.fallback;
+        };
+    }""", fallback)
+
+
+def settle_clipboard(page, success):
+    page.evaluate("success => success ? window.fixtureClipboard.resolve() : window.fixtureClipboard.reject(new Error('Fixture clipboard denied'))", success)
+
+
+def assert_narrow(page, selectors):
+    page.set_viewport_size({'width':480,'height':600})
+    for selector in selectors:
+        element = page.locator(selector)
+        element.scroll_into_view_if_needed()
+        metrics = element.evaluate("""element => {
+            const rect = element.getBoundingClientRect();
+            return {id:element.id,left:rect.left,right:rect.right,top:rect.top,bottom:rect.bottom,
+                textFits:element.tagName === 'TEXTAREA' || element.scrollWidth <= element.clientWidth+1};
+        }""")
+        assert metrics['left'] >= 0 and metrics['right'] <= 480 and metrics['top'] >= 0 and metrics['bottom'] <= 600, metrics
+        assert metrics['textFits'], metrics
+
+
+def test_access_url_reveal_and_async_clipboard(browser, url, locale):
+    context, page = fixture.new_page(browser, url, locale)
+    requests = []
+    page.route('**/access-url', lambda route: (
+        requests.append(route.request.method),
+        route.fulfill(json=dict(status='ok', access_url=ACCESS_URL, localhost_access_url=LOCAL_URL))))
+    try:
+        open_tab(page, 'server')
+        assert requests == []
+        assert not page.locator('#server-access-url').is_visible()
+        translated(page, '#server-access-copy-btn, #server-access-show-btn')
+        dialogs = []
+        page.once('dialog', lambda dialog: (dialogs.append(dialog.message), dialog.dismiss()))
+        page.click('#server-access-show-btn')
+        assert requests == [] and not page.locator('#server-access-url').is_visible()
+        assert dialogs == [message(page, 'browser.server_access.confirm_show')]
+        page.clock.install()
+        page.once('dialog', lambda dialog: dialog.accept())
+        page.click('#server-access-show-btn')
+        status(page, '#server-access-status', 'browser.server_access.shown')
+        assert page.locator('#server-access-url').text_content() == ACCESS_URL + '\n' + LOCAL_URL
+        assert requests == ['GET'] and 'token=' not in page.url
+        assert page.locator('#server-access-url b').count() == 0
+        page.clock.fast_forward(30001)
+        assert not page.locator('#server-access-url').is_visible()
+        assert page.locator('#server-access-url').text_content() == ''
+        for success, fallback in [(True,False),(False,True),(False,False)]:
+            clipboard(page, fallback)
+            page.click('#server-access-copy-btn')
+            page.wait_for_function('() => window.fixtureClipboard.writes.length === 1')
+            assert page.locator('#server-access-copy-btn').is_disabled()
+            assert page.inner_text('#server-access-status') != message(page, 'browser.server_access.copied')
+            settle_clipboard(page, success)
+            status(page, '#server-access-status', 'browser.server_access.copied' if success or fallback else 'browser.server_access.copy_failed')
+            assert not page.locator('#server-access-copy-btn').is_disabled()
+            result = page.evaluate('() => ({writes:fixtureClipboard.writes,fallbacks:fixtureClipboard.fallbacks})')
+            assert result['writes'] == [ACCESS_URL]
+            assert result['fallbacks'] == ([] if success else [dict(command='copy',text=ACCESS_URL)])
+            assert not page.locator('#server-access-url').is_visible()
+        assert requests == ['GET'] * 4
+        assert_narrow(page, ['#server-access-copy-btn','#server-access-show-btn'])
+    finally:
+        fixture.close_context(context)
+
+
+def test_platform_requests_preserve_credential_and_hostname_scope(browser, url, locale):
+    context, page = fixture.new_page(browser, url, locale)
+    calls = []
+    failures = {}
+    state = dict(status='ok', available=True, configured_credentials=0, armed_credentials=0, rp_id=RAW)
+    creation = dict(ceremony_id='register_<b>& {id}', challenge='AAE',
+                    user=dict(id='AgM',name='raw-user',displayName=RAW), rp=dict(id='localhost',name=RAW),
+                    pubKeyCredParams=[dict(type='public-key',alg=-7)], excludeCredentials=[dict(type='public-key',id='BAU')])
+    assertion = dict(ceremony_id='arm_<b>& {id}', challenge='Bgc', rpId='localhost',
+                     allowCredentials=[dict(type='public-key',id='AAE')])
+
+    def route_recovery(route):
+        path = urlparse(route.request.url).path
+        body = route.request.post_data_json if route.request.post_data else None
+        calls.append(dict(path=path,method=route.request.method,body=body))
+        if path in failures:
+            route.fulfill(status=400, json=dict(status='failed',message=failures[path],error_code='fixture_raw'))
+            return
+        if path.endswith('/status'):
+            result = state
+        elif path.endswith('/register/options'):
+            result = dict(status='ok',public_key=creation)
+        elif path.endswith('/authenticate/options'):
+            result = dict(status='ok',public_key=assertion)
+        else:
+            if path.endswith('/register/complete'):
+                state.update(configured_credentials=1, armed_credentials=1)
+            if path.endswith('/credentials/remove'):
+                state.update(configured_credentials=0, armed_credentials=0)
+            result = dict(status='ok')
+        route.fulfill(json=result)
+
+    page.route('**/session-recovery/**', route_recovery)
+    page.evaluate("""() => {
+        window.fixtureCredentialCalls = [];
+        const bytes = () => new Uint8Array([0,1]).buffer;
+        const credential = response => ({id:'AAE',rawId:bytes(),type:'public-key',
+            authenticatorAttachment:'platform',getClientExtensionResults:() => ({fixture:true}),response});
+        Object.defineProperty(navigator, 'credentials', {configurable:true,value:{
+            create:async options => {
+                window.fixtureCredentialCalls.push({kind:'create',options});
+                return credential({clientDataJSON:bytes(),attestationObject:bytes(),getTransports:() => ['internal']});
+            },
+            get:async options => {
+                window.fixtureCredentialCalls.push({kind:'get',options});
+                return credential({clientDataJSON:bytes(),authenticatorData:bytes(),signature:bytes(),userHandle:bytes()});
+            }
+        }});
+    }""")
+    try:
+        open_tab(page, 'server')
+        page.wait_for_function("() => !document.getElementById('platform-recovery-register').disabled")
+        assert page.locator('#platform-recovery-arm').is_disabled()
+        assert page.locator('#platform-recovery-remove').is_disabled()
+        translated(page, '#platform-recovery-register, #platform-recovery-arm, #platform-recovery-remove')
+        failures['/session-recovery/register/options'] = RAW + ' register'
+        page.click('#platform-recovery-register')
+        page.wait_for_function("() => !document.getElementById('platform-recovery-register').disabled")
+        assert page.inner_text('#platform-recovery-status') == RAW + ' register'
+        assert page.evaluate('() => fixtureCredentialCalls.length') == 0
+        failures.clear()
+        calls.clear()
+        page.click('#platform-recovery-register')
+        page.wait_for_function("() => !document.getElementById('platform-recovery-arm').disabled")
+        status(page, '#platform-recovery-status', 'browser.platform.status', {'configured':1,'armed':1,'rp_id':RAW})
+        page.click('#platform-recovery-arm')
+        page.wait_for_function("() => fixtureCredentialCalls.length === 2 && !document.getElementById('platform-recovery-arm').disabled")
+        captured = page.evaluate("""() => fixtureCredentialCalls.map(({kind,options}) => ({kind,
+            hasCeremony:Object.hasOwn(options.publicKey,'ceremony_id'),challenge:Array.from(options.publicKey.challenge),
+            id:Array.from(kind === 'create' ? options.publicKey.user.id : options.publicKey.allowCredentials[0].id),
+            rp:kind === 'create' ? options.publicKey.rp : options.publicKey.rpId}))""")
+        assert captured == [dict(kind='create',hasCeremony=False,challenge=[0,1],id=[2,3],rp=creation['rp']),
+                            dict(kind='get',hasCeremony=False,challenge=[6,7],id=[0,1],rp='localhost')], captured
+        posts = [call for call in calls if call['method'] == 'POST']
+        assert [call['path'] for call in posts] == ['/session-recovery/register/options','/session-recovery/register/complete',
+                                                  '/session-recovery/authenticate/options','/session-recovery/authenticate/complete']
+        for index, source, response in [(1,creation,dict(clientDataJSON='AAE',attestationObject='AAE',transports=['internal'])),
+                                       (3,assertion,dict(clientDataJSON='AAE',authenticatorData='AAE',signature='AAE',userHandle='AAE'))]:
+            assert posts[index]['body'] == dict(ceremony_id=source['ceremony_id'],credential=dict(
+                id='AAE',rawId='AAE',type='public-key',authenticatorAttachment='platform',
+                clientExtensionResults=dict(fixture=True),response=response))
+        assert posts[0]['body'] is None and posts[2]['body'] is None
+        dialogs = []
+        page.once('dialog', lambda dialog: (dialogs.append(dialog.message),dialog.dismiss()))
+        page.click('#platform-recovery-remove')
+        assert dialogs == [message(page, 'browser.platform.confirm_revoke')]
+        assert not any(call['path'].endswith('/credentials/remove') for call in calls)
+        failures['/session-recovery/credentials/remove'] = RAW + ' revoke'
+        page.once('dialog', lambda dialog: dialog.accept())
+        page.click('#platform-recovery-remove')
+        page.wait_for_function("() => !document.getElementById('platform-recovery-remove').disabled")
+        assert page.inner_text('#platform-recovery-status') == RAW + ' revoke'
+        assert state['configured_credentials'] == 1
+        failures.clear()
+        calls.clear()
+        page.once('dialog', lambda dialog: dialog.accept())
+        page.click('#platform-recovery-remove')
+        page.wait_for_function("() => document.getElementById('platform-recovery-arm').disabled")
+        removed = [call for call in calls if call['path'].endswith('/credentials/remove')]
+        assert removed == [dict(path='/session-recovery/credentials/remove',method='POST',body=None)]
+        assert page.evaluate('() => fixtureCredentialCalls.length') == 2
+        state.update(available=False,message=RAW)
+        open_tab(page, 'server')
+        page.wait_for_function('raw => document.getElementById("platform-recovery-status").textContent === raw', arg=RAW)
+        assert page.locator('#platform-recovery-status b').count() == 0
+        assert_narrow(page, ['#platform-recovery-register','#platform-recovery-arm','#platform-recovery-remove'])
+    finally:
+        fixture.close_context(context)
+
+
+def test_diagnostics_copy_waits_and_preserves_raw_records(browser, url, locale):
+    context, page = fixture.new_page(browser, url, locale)
+    try:
+        page.add_init_script("""sessionStorage.setItem('standterm-connection-diagnostics-v1', JSON.stringify([
+            {at:'2026-09-20T01:02:03Z',event:'fixture.raw_event',launcher_session_id:'raw-session',
+             details:{message:%s,reason:'https://secret.invalid/?token=never-export'}}]));""" % json.dumps(RAW))
+        page.reload(wait_until='domcontentloaded')
+        page.wait_for_function('() => window.terminalTest?.getSocketState().connected')
+        open_tab(page, 'diagnostics')
+        translated(page, '#connection-diagnostics-copy, #connection-diagnostics-clear, #connection-diagnostics-log')
+        for success in [True,False]:
+            clipboard(page, False)
+            before = page.input_value('#connection-diagnostics-log')
+            entries = page.evaluate('() => window.terminalTest.getConnectionDiagnostics()')
+            assert RAW in before and 'fixture.raw_event' in before
+            assert '[2026-09-20T01:02:03.000Z] [session=raw-session]' in before
+            assert before.startswith('StandTerm connection diagnostics\nLauncher Session ID:')
+            assert '\nBrowser time zone:' in before
+            assert 'never-export' not in before and 'secret.invalid' not in before
+            assert '[url redacted]' in before
+            page.click('#connection-diagnostics-copy')
+            page.wait_for_function('() => fixtureClipboard.writes.length === 1')
+            status(page, '#connection-diagnostics-status', 'browser.diagnostics.copying')
+            settle_clipboard(page, success)
+            status(page, '#connection-diagnostics-status', 'browser.diagnostics.copied' if success else 'browser.diagnostics.copy_failed',
+                   {'count':len(entries)} if success else None)
+            assert page.evaluate('() => fixtureClipboard.writes') == [before]
+            assert page.evaluate('() => window.terminalTest.getConnectionDiagnostics()') == entries
+        assert_narrow(page, ['#connection-diagnostics-clear','#connection-diagnostics-copy','#connection-diagnostics-log'])
+        page.click('#connection-diagnostics-clear')
+        assert page.evaluate('() => window.terminalTest.getConnectionDiagnostics()') == []
+        status(page, '#connection-diagnostics-status', 'browser.diagnostics.count', {'count':0})
+    finally:
+        fixture.close_context(context)
+
+
+def test_paste_chrome_keeps_payload_and_terminal_target(browser, url, locale):
+    context, page = fixture.new_page(browser, url, locale)
+    try:
+        page.evaluate('() => window.terminalTest.captureTerminalIoForTest()')
+        fixture.attach_agent(page)
+        raw = RAW + '\nsecond line'
+        for approve in [False,True]:
+            fixture.clear_emitted(page)
+            page.evaluate('text => window.terminalTest.startPasteReview(text)', raw)
+            page.wait_for_selector('#paste-review-modal.open')
+            assert page.input_value('#paste-review-preview') == raw
+            target = page.evaluate('() => window.terminalTest.getTerminalTabsState().tabs.find(item => item.id === "main")')
+            assert page.inner_text('#paste-review-meta') == message(page, 'browser.paste.metadata', {'target':target['title'],'lines':2})
+            translated(page, '#paste-review-modal [data-i18n], #paste-review-preview, #quick-settings, #new-tab-btn')
+            assert page.locator('#paste-review-modal b').count() == 0
+            assert_narrow(page, ['#paste-review-cancel','#paste-review-approve','#paste-review-preview'])
+            button = page.locator('#paste-review-' + ('approve' if approve else 'cancel'))
+            button.evaluate("element => {element.textContent = 'Display <b>& {action}';}")
+            button.click()
+            events = fixture.get_emitted(page, 'ssh_input')
+            assert [event['args'][0] for event in events] == ([dict(terminal_id='main',data=raw)] if approve else [])
+            page.wait_for_function('() => window.terminalTest.activeTerminalHasFocus()')
+            if not approve:
+                page.locator('#paste-review-cancel').evaluate("element => {element.textContent = StandTermI18n.create(StandTermMessages,document.documentElement.lang).t(element.dataset.i18n);}")
+        fixture.set_agent_mode(page, 'direct', 'direct_active')
+        assert_narrow(page, ['#new-tab-btn','#agent-pause-btn','#agent-toggle-btn','#quick-settings'])
+    finally:
+        fixture.close_context(context)
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument('--files', action='store_true', help='Run the existing Files and terminal PiP cases in both locales.')
+    args = parser.parse_args()
+    tests = ([fixture.test_terminal_pip_hides_selected_tab_and_keeps_background_tab,
+              fixture.test_sftp_status_actions_and_terminal_pip_transition,
+              fixture.test_sftp_send_context_action_is_limited_to_connected_ssh_tabs] if args.files else [
+        test_access_url_reveal_and_async_clipboard,
+        test_platform_requests_preserve_credential_and_hostname_scope,
+        test_diagnostics_copy_waits_and_preserves_raw_records,
+        test_paste_chrome_keeps_payload_and_terminal_target,
+        fixture.test_toolbar_pause_targets_main_tab_not_panel_override,
+        fixture.test_clipboard_paste_targets_and_native_review,
+        fixture.test_agent_panel_status_gates_and_external_hint,
+    ])
+    proc, url = fixture.start_server()
+    try:
+        with fixture.load_playwright()[0]() as playwright:
+            browser = playwright.chromium.launch(headless=True)
+            try:
+                for locale in ['en','zh-TW']:
+                    for test in tests:
+                        test(browser, url, locale)
+                        print(f'{test.__name__} ({locale}): PASS', flush=True)
+            finally:
+                browser.close()
+    finally:
+        fixture.stop_server(proc)
+
+
+if __name__ == '__main__':
+    main()

From 2f806ca3f53aef676060acf4a06137d21132a6be Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sun, 20 Sep 2026 09:03:01 +0800
Subject: [PATCH 27/43] Plan Desktop copy review and localization

---
 desktop/README.md               |   4 +
 docs/desktop_ui_copy_review.tsv |  46 +++++++++++
 docs/desktop_ui_review_plan.md  | 139 ++++++++++++++++++++++++++++++++
 3 files changed, 189 insertions(+)
 create mode 100644 docs/desktop_ui_copy_review.tsv
 create mode 100644 docs/desktop_ui_review_plan.md

diff --git a/desktop/README.md b/desktop/README.md
index dd0a827..7dff79a 100644
--- a/desktop/README.md
+++ b/desktop/README.md
@@ -6,6 +6,10 @@ source-run workflow, an unsigned Windows x64 evaluation installer and a native
 Apple Silicon macOS evaluation app/DMG. It is not
 a production release or a replacement for `run.sh` / `run.bat`.
 
+Desktop copy and localization are planned in the
+[review plan](../docs/desktop_ui_review_plan.md), with a separate
+[translation review table](../docs/desktop_ui_copy_review.tsv).
+
 ## macOS Apple Silicon evaluation
 
 The arm64 DMG contains `StandTermDesktop.app`, Electron and the verified Core
diff --git a/docs/desktop_ui_copy_review.tsv b/docs/desktop_ui_copy_review.tsv
new file mode 100644
index 0000000..688d4a1
--- /dev/null
+++ b/docs/desktop_ui_copy_review.tsv
@@ -0,0 +1,46 @@
+key	current_en	en	zh-TW	context	placeholders	constraints	status	source
+desktop.toolbar.application_menu	Application menu	Application menu		Navigation accessible name; custom menu captions are separate entries.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
+desktop.toolbar.clipboard_actions	Clipboard actions	Clipboard actions		Clipboard toolbar accessible name.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
+desktop.toolbar.copy_hint	Copy selected text (not Ctrl+C)	Copy selected text (not Ctrl+C)		Native clipboard copy, not terminal interrupt input; retain the distinction.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
+desktop.toolbar.copy_label	Copy selected text	Copy selected text		Accessible name of native clipboard copy.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
+desktop.toolbar.paste	Paste clipboard text	Paste clipboard text		Native clipboard paste into the Core editing target.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
+desktop.toolbar.capture_scope	Capture the StandTerm terminal view	Capture the terminal view		Capture toolbar accessible name; scope stays the Core view, not the whole desktop.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
+desktop.toolbar.screenshot_save	Save screenshot (PNG)	Save screenshot (PNG)		Screenshot file action; initial folder selection is separate.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
+desktop.toolbar.screenshot_copy	Copy screenshot to clipboard	Copy screenshot to clipboard		Screenshot clipboard action; distinct from copying selected text.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
+desktop.toolbar.record_start	Start silent recording (WebM)	Start recording (WebM, no audio)		Recording start button; preserve silent capture scope.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
+desktop.toolbar.record_pause	Pause recording	Pause recording		Recording pause state, not Pause Agent.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
+desktop.toolbar.record_stop	Stop and save recording	Stop and save recording		Requests stop/save; this label alone is not a save-success notification.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
+desktop.toolbar.record_resume	Resume recording	Resume recording		Dynamic pause-button label for typed paused state.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks. Select by state.state, never translated label.	proposed	desktop/toolbar.js:onState
+desktop.toolbar.action_unavailable		Action unavailable in the current window state.		New proposed notice for an explicit false result from the toolbar action handler; currently no notice.		Handle exactly false. Invoke once; do not replay. Do not reinterpret true as proof that output was saved.	proposed	desktop/toolbar.js:click handler; desktop/toolbar.cjs:standterm-toolbar-action
+desktop.toolbar.action_unconfirmed	Action unavailable. Please retry.	Could not confirm the action result. Check the current state.		Rejected IPC promise: operation outcome is uncertain.		Keep exception handling distinct from explicit false. Invoke once; never automatically retry or claim the action did not happen.	proposed	desktop/toolbar.js:click handler
+desktop.menu.settings	Settings...	Settings...		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
+desktop.menu.new_tab	New terminal tab	New terminal tab		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
+desktop.menu.close_tab	Close terminal tab	Close terminal tab		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
+desktop.menu.close_all	Close all terminal tabs...	Close all terminal tabs...		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
+desktop.menu.files	Files...	Files...		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
+desktop.menu.pip	Terminal to PiP	Open terminal in PiP		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
+desktop.menu.agent_panel	Show / hide Agent Panel	Show / hide Agent Panel		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
+desktop.menu.pause_agent	Pause Agent for current terminal	Pause Agent for current terminal		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
+desktop.agent.help_title	Give your agent a StandTerm prompt	Connect your agent to StandTerm		Getting-started dialog heading; descriptive text alone grants no access.		Keep permission requirements in the accompanying instructions. Do not expand public Agent Info.	proposed	desktop/main.cjs:agentMenu.showHelp
+desktop.agent.help_permissions	Select the tab where your agent runs. Use Agent Panel to enable access and choose permissions on each tab it may operate.	Select the tab where your agent runs. In Agent Panel, enable access and choose permissions for each tab it may operate.		First paragraph of Agent help; caller tab and permitted target tabs can differ.		Keep per-tab authorization, local/SSH distinction and current permission defaults. No implicit cross-tab grants.	proposed	desktop/main.cjs:agentMenu.showHelp
+desktop.agent.help_connection	Open Agent connection, choose Copy Prompt, and paste it into your agent with the intended task. Follow the environment shown in that dialog.	Open Agent connection, choose Copy Prompt, and paste it into your agent with the task. Follow the environment shown in the dialog.		Connection-instructions paragraph; SSH/local setup remains in the preceding paragraph.		Match the actual Core control names, including Copy Prompt; retain environment/target guidance. Do not translate or modify the copied prompt payload here.	proposed	desktop/main.cjs:agentMenu.showHelp
+desktop.capture.folder_policy	Future captures save here automatically. Change this in StandTerm > Capture Settings.	Future files of this capture type save here automatically. Change the folder in Capture Settings.		Folder chooser message. PNG and WebM have separate saved folder preferences; this is a retained per-type choice, not a one-off Save As path. The first folder selection also seeds the other format if unset; later choices update only the selected format.		Keep extension values png/webm and chosen filesystem path literal. Cancel still returns null; do not change folder persistence or auto-save behavior. Preserve first-choice seeding; do not describe the two preferences as fully independent.	proposed	desktop/capture.cjs:chooseDirectory:94-103
+desktop.capture.settings_detail	Screenshots: {screenshot_folder}\nRecordings: {recording_folder}\n\nPNG screenshots and silent WebM recordings are saved automatically.	Screenshots: {screenshot_folder}\nRecordings: {recording_folder}\n\nPNG screenshots and WebM recordings save to these folders. Recordings have no audio.		Capture Settings detail. Resolve the two current unset-folder labels separately in the later full catalog pass; this row preserves raw folder paths.	{screenshot_folder}, {recording_folder}	Keep response indices 0 Done, 1 screenshot-folder chooser, 2 recording-folder chooser, 3 open screenshot folder, 4 open recording folder. defaultId=0 and cancelId=0. No action inference from labels.	proposed	desktop/capture.cjs:configure:110-121
+desktop.capture.capture_failed	The terminal view could not be captured. Bring StandTerm to the foreground and retry. Window state is available in Diagnostics.	Could not capture the terminal view. Bring StandTerm to the foreground and try again. Check Diagnostics if it still fails.		Screenshot capturePage or empty-image failure before file output begins; retained diagnostic includes window state.		Preserve original Error cause and diagnostic fields. No automatic retry, focus manipulation, or capture-scope expansion.	proposed	desktop/capture.cjs:screenshot:136-146
+desktop.capture.partial_file	Unfinished file retained at:\n{path}	Partial screenshot kept at:\n{path}		Suffix added only if failed screenshot output has a partial path; it is not a successful PNG save notice.	{path}	Keep the raw path and preceding error. Do not delete or overwrite partial files, promise readability, or automatically retry. Preserve conditional display only when output.partial exists.	proposed	desktop/capture.cjs:screenshot catch:163-166
+desktop.capture.partial_recording	Unfinished recording retained at:\n{path}	Partial recording kept at:\n{path}		Recording failure suffix after recorder teardown and output close; partial WebM may be incomplete.	{path}	Keep raw error and path; do not promise playable or recoverable video, delete partial output, publish it as complete, or retry automatically.	proposed	desktop/capture.cjs:finish:311-324
+desktop.capture.stop_confirm	Stop and save the recording before {action}?	Stop recording and attempt to save it before {action}?		Recording guard for another Desktop action. Current confirmStop awaits stop but returns true even if stop returns an error result; wording cannot guarantee a successful save.	{action}	Keep numeric response 1 as stop-and-continue; response 0/defaultId=0/cancelId=0 keeps recording and cancels the pending action. Keep capture-start/capture-stop/capture-status IDs and state unchanged. No new retry or save-success gate in this copy-only stage. Policy checkpoint before integration: decide whether save failure should block close/quit; use separate whole-message keys for close and quit if grammar requires it.	proposed	desktop/capture.cjs:confirmStop:329-339
+desktop.setup.cancel_detail	Keep this window open or minimize it to continue. Canceling stops the owned installation processes; prepared files are retained so you can retry on the next launch.	Keep this window open or minimize it to continue. Canceling stops this setup’s installation processes and keeps prepared files. Relaunch StandTerm to try again.		Close confirmation during preparation. Cancellation targets owned setup processes and waits for cleanup; prepared files remain.		Keep button index 0 Keep preparing and 1 Cancel setup; defaultId=0/cancelId=0. Preserve stale-window check and cooperative cancellation. Do not imply all Python processes are stopped or retry is automatic.	proposed	desktop/setup.cjs:requestSetupCancel:61-76
+desktop.setup.install_effects	and downloads and installs Python dependencies from your configured package index. Dependencies can execute installation code. Internet access and disk space are required.	Python dependencies are downloaded from your configured package index and installed in the private environment. Installation can run code and requires internet access and disk space.		Exact dependency-effects fragment in preparePackagedBackend confirmation detail; preceding Core-copy/path/Python requirements and following retention policy remain separate.		Keep existing environment/backend selection and raw destination path. Confirm response 1 creates the environment; 0/defaultId/cancelId cancel. Do not imply bundled or verified dependencies, system Python installation, or privilege elevation.	proposed	desktop/setup.cjs:preparePackagedBackend:262-268
+desktop.setup.retention	Failed setup is retained for retry. Uninstall keeps environments by default; optional cleanup moves only verified idle venvs to a recovery folder. Core and user data are retained.	Failed setup files are kept for retry. Uninstall keeps environments by default. Optional cleanup moves verified idle venvs to recovery and keeps Core files and user data.		Exact retention fragment of the initial setup confirmation. The cleanup operation is a recoverable move rather than disk-space reclamation.		Keep venv-only cleanup boundary and verified/idle checks. Do not imply uninstall deletes Core or user data, that partial setup is ready, or that retry occurs without a user action.	proposed	desktop/setup.cjs:preparePackagedBackend:267
+desktop.setup.cleanup_detail	{paths}\n\nNo disk space is freed. Core and settings are retained. Any environment that becomes busy or fails verification will be retained. Cancel keeps all listed venvs.	{paths}\n\nThis move does not free disk space. Core and settings stay in place. Busy or unverified environments are kept. Cancel keeps every listed venv.		Cleanup confirmation detail after candidate inventory, before detach-idle-venvs. Candidate paths are shown as a raw list.	{paths}	Keep candidate IDs and source paths literal. Button index 0 keeps environments; index 1 moves listed candidates. defaultId=0/cancelId=0. Recheck eligibility; no deletion or permission expansion.	proposed	desktop/setup.cjs:cleanupManagedVenvs:319-332
+desktop.setup.cleanup_unconfirmed	Cleanup did not report completion. Check venv-recovery before retrying.	Cleanup completion was not confirmed. Check venv-recovery before retrying.		execute help when detach-idle-venvs does not provide confirmed completion; moves may have partially occurred.		Keep recovery-directory name venv-recovery literal. Do not claim no files moved, roll back, delete, or automatically retry.	proposed	desktop/setup.cjs:cleanupManagedVenvs:331-333
+desktop.setup.timeout	Setup timed out. Check internet access and retry.	Setup timed out. Check internet access and the setup log before retrying.		Fixed ERRORS.setup_timeout message. Timeout does not guarantee prepared files were removed or no installation work occurred.		Keep setup_timeout error key, timeout values, cancellation and retained files unchanged. No automatic retry or promise of a clean environment.	proposed	desktop/setup.cjs:ERRORS.setup_timeout:29
+desktop.core_source.restart_notice	This restarts StandTerm and closes terminal sessions. Python dependencies may be downloaded and installed.	StandTerm will restart and close terminal sessions. Python dependencies may be downloaded and installed.		Common consequence fragment for source enable/update/prepare/recover confirmations.		Keep action IDs enable/update/prepare/recover and source values bundled/git. Button index 1 restarts; 0/defaultId/cancelId cancel. Do not treat translated labels as action IDs.	proposed	desktop/core-source.cjs:coreController.confirm:58-66
+desktop.core_source.recovery_retention	Core files and data in the previous environment are retained. Recovery does not roll back user data.	The previous environment’s Core files and data are kept. Restoring bundled Core does not roll back user data.		Conditional recover confirmation detail; restores the installed Core source rather than reverting user data.		Only for typed action recover. Preserve previous environment and pending-action consumption. No destructive cleanup or rollback feature.	proposed	desktop/core-source.cjs:coreController.confirm:61
+desktop.core_source.git_policy	Git uses the official askac/standterm repository, main branch. Its files are not checked against the installed bundle hashes. Local changes are allowed, but updates refuse to overwrite them. The Desktop shell stays installed.	Git Core uses askac/standterm on the main branch. Its files are not verified against the installed bundle hashes. Updates refuse to overwrite local changes. The Desktop shell stays installed.		Git-source confirmation detail; removes marketing qualifier while keeping source provenance and integrity boundary.		Keep askac/standterm and main literal. Preserve refusal on local changes and no reset/stash behavior. No automatic update, retry, or implied equivalence to the verified installed bundle.	proposed	desktop/core-source.cjs:coreController.confirm:62-63
+desktop.core_source.reauthorization	Authorization and recovery data are local to each Core source; switching may require reauthorization.	Each Core source has separate authorization and recovery data. Switching may require reauthorization.		Common source-change confirmation suffix; switching may change which credentials or recovery registrations are available.		Do not promise migration, reuse, deletion, or automatic authorization. Preserve sourceStore identity/source/pending fields and backend credential boundaries.	proposed	desktop/core-source.cjs:coreController.confirm:64
+desktop.core_source.failure_choices	The Desktop shell can retry or restore its installed Core. Existing files are retained.	Choose Retry to restart StandTerm and try again, or restore bundled Core. Existing files are kept.		Core unavailable dialog detail. Retry invokes restart(lastAction); displaying this dialog does not itself retry.		Keep response indices 0 Quit, 1 Retry, 2 Restore bundled Core, 3 Core source, 4 Open logs. defaultId=0/cancelId=0. Preserve fixed action IDs and lastAction replay; no automatic retry.	proposed	desktop/core-source.cjs:coreController.failure:111-124
+desktop.browser_access.opened	Browser authorization opened in the default browser.	Authorization link opened in the default browser.		Success notice after awaiting OS open callback; browser authorization has not been observed as completed.		Keep action open distinct from copy-auth/copy-url/copy-token; retain existing confirmation. Do not claim the browser is authorized or reveal the URL/token in the notice.	proposed	desktop/browser-access.cjs:createBrowserAccess.run:46-62
+desktop.browser_access.copied	Access information copied. Treat it as a password.	Access information copied. Keep it private, like a password.		Shared notice for copied authorization URL, access URL, or access token; the copied payload is sensitive.		Keep exact clipboard payload and fixed action IDs; do not insert secrets into catalog parameters, logs or notifications. No extra mint, reveal, or retry.	proposed	desktop/browser-access.cjs:createBrowserAccess.run:58-62
+desktop.browser_access.failed	Could not prepare browser access. Check that this Desktop backend is still running.	Could not prepare browser access. Check that this Desktop backend is running.		Sanitized generic failure notice; implementation deliberately discards URL-bearing network errors.		Preserve generic failure and error=true notification. Never display raw caught errors, URLs, grants or tokens. Keep pending/available guards and no automatic retry.	proposed	desktop/browser-access.cjs:createBrowserAccess.run catch:64-67
diff --git a/docs/desktop_ui_review_plan.md b/docs/desktop_ui_review_plan.md
new file mode 100644
index 0000000..265cf17
--- /dev/null
+++ b/docs/desktop_ui_review_plan.md
@@ -0,0 +1,139 @@
+# Desktop copy review and localization plan
+
+Review date: 2026-09-20. This phase inventories Desktop copy, reviews behavior
+and orders implementation. It does not change runtime behavior or enable a
+Desktop language setting. Browser acceptance is recorded separately in
+[browser_ui_acceptance.md](browser_ui_acceptance.md).
+
+## Recommended implementation order
+
+| Order | Deliverable | Relative effort | Completion evidence |
+| --- | --- | --- | --- |
+| 0 | Clarify toolbar action feedback before localization. A resolved `false` currently has no notice; a rejected invocation says to retry despite an uncertain result. | Small | Reproduce both paths; show unavailable feedback for explicit rejection and unknown-result feedback for an exception. Invoke once, with no automatic replay. Preserve successful action notices. |
+| 1 | Add a Desktop-owned language preference and catalog; pilot custom menus, toolbar labels and Agent help. | Medium | English default/fallback, `en` and `zh-TW`, malformed preference fallback, next-launch application, translated title/ARIA labels without losing SVGs, fixed command IDs, focus/origin guards and explicit packaged asset inventory. |
+| 2 | Review and localize Capture, Browser Access and Diagnostics. Resolve the recording save-failure exit policy before the Capture portion. | Medium | Typed recording states, partial-file paths, cancel/default buttons, first-folder seeding, sensitive clipboard feedback and escaped diagnostic fields retain their contracts. Add combined save-failure plus close/quit coverage. |
+| 3 | Localize setup, Core source selection, startup failure and recoverable environment cleanup. | Medium to large | Both languages work before Core is available. Cancellation waits for owned installers; stale confirmations do nothing; source switching, restart/session closure, retained files and recovery moves remain explicit. |
+| 4 | Complete Windows and macOS native acceptance and packaged asset checks. | Platform-dependent | Menus, native dialogs, narrow layouts, keyboard/ARIA labels, clipboard, setup and recovery are checked on each OS. Verify staged and packaged Desktop catalogs independently of the selected Core version. |
+
+The smallest next implementation is order 0, as a separate behavioral fix.
+Orders 1–3 should remain separate reviewable changes. First-run setup can move
+ahead of order 2 if onboarding becomes the priority; it is not required to prove
+the small localization pilot.
+
+## Difficulty and design choices
+
+Copy extraction is straightforward. Most work lies in several display contexts:
+native Electron menus/dialogs, a restricted toolbar renderer, setup windows and
+scriptless diagnostics. A complete Desktop rollout has moderate implementation
+cost and broader acceptance cost than the toolbar pilot. The estimates above
+are relative scope assessments, not measured delivery times.
+
+Recommend storing the Desktop language in the existing profile's `userData`,
+with English as default and only `en` / `zh-TW` initially. Apply a change on the
+next launch; changing language should not itself restart StandTerm or stop a
+recording. Keep the existing Core browser preference independent. This covers
+setup and recovery before Core starts, at the cost of two language preferences.
+It is a proposed product choice, not a security requirement. A validated
+two-value advisory preference from Core is also feasible, but needs startup,
+origin and older-Core fallback rules. Automatic OS-language selection is deferred.
+
+Ship the Desktop catalog with the shell. Do not depend on the selected bundled
+or Git Core supplying compatible renderer scripts. Reuse the existing TSV
+schema and validation rules; extend generator support minimally when integration
+starts. Do not add the Desktop rows to the Core runtime catalog.
+
+Keep these implementation boundaries:
+
+- `UI_ACTIONS` keys, `ui-*` menu IDs, toolbar datasets, IPC action IDs and
+  terminal IDs remain structural values. Localize labels only.
+- Preserve sender, frame, focus and origin validation. Add only exact bundled
+  catalog/helper files to the toolbar asset allowlist, if needed; retain CSP.
+- Include new assets in both `stage-windows.cjs` and `electron-builder.cjs`.
+  A working source checkout does not prove the installer includes them.
+- Update toolbar SVG-button attributes without replacing their child content.
+  Native role labels remain platform-owned; review their language alongside
+  custom labels during native acceptance rather than promising uniformity.
+- Keep diagnostics scriptless and HTML-escaped. In setup, interpolate translated
+  text with JSON serialization and `textContent`, following the existing
+  progress updater instead of embedding translation text inside JavaScript literals.
+- Retain raw diagnostic errors where currently shown, paths and identifiers.
+  Browser Access deliberately uses sanitized errors; do not expose its caught
+  errors, authorization URLs or tokens through messages or logs.
+
+## Copy and translation exchange
+
+[desktop_ui_copy_review.tsv](desktop_ui_copy_review.tsv) is a prioritized seed
+inventory, not a claim that every Desktop string has been extracted. It uses
+the same nine columns as the browser table. All initial rows are `proposed`;
+`zh-TW` is empty. Some `current_en` cells are exact fragments or normalize
+dynamic values to named placeholders; `context` identifies these cases.
+
+Approve the English behavior and terminology before requesting translations.
+An external translation AI should return the same keys/order/columns, fill only
+`zh-TW`, preserve placeholders and literal identifiers, and keep `status`
+unchanged. Human/source review promotes rows to `translation-reviewed`; a
+translation response alone is not runtime approval. Use literal `\n` inside
+cells, not physical newlines. Do not translate paths, URLs, error codes, Core,
+Agent, PNG, WebM or stable action names.
+
+Avoid abbreviating consequences merely to shorten dialogs. Keep restart/session
+closure, retained partial files, private clipboard content and the distinction
+between opening a link and completing authorization. Remove repetition where
+nearby controls already establish the subject. Translate whole messages rather
+than concatenating English sentence fragments; close and quit prompts may need
+separate keys instead of a grammatical `{action}` fragment.
+
+Existing agreed terms remain in
+[agent_ui_review_plan.md](agent_ui_review_plan.md#agreed-terminology). The
+following Desktop additions are proposals to settle before translation:
+
+| Concept | English | Proposed Traditional Chinese | Boundary |
+| --- | --- | --- | --- |
+| Image of the terminal view | Screenshot | 螢幕截圖 | A PNG of the Core view; not CLI output capture. |
+| Silent video of the terminal view | Recording | 錄影 | WebM without audio; not a transcript or terminal log. |
+| Suspend video recording | Pause recording | 暫停錄影 | Separate from Pause Agent and terminal input control. |
+| Stop first-run preparation | Cancel setup | 取消準備 | Stops owned setup processes; prepared files remain. |
+| Return to installed Core source | Restore bundled Core | 還原隨附 Core | Not a preferences reset, session recovery or user-data rollback. |
+| Recoverable environment move | Move to recovery | 移至復原位置 | No disk space is freed; this is not deletion. |
+| OS browser launch callback succeeded | Authorization link opened | 已開啟授權連結 | Does not establish that browser authorization completed. |
+
+## Independent adversarial review and adjudication
+
+A read-only critic reviewed the pilot and then the Capture/setup/recovery
+flows. The main reviewer checked the material source claims and returned the
+following adjudication. The critic accepted the corrections in the bounded
+rebuttal; no material factual disagreement remains. Policy choices remain
+proposals, not implementation authorization.
+
+| Finding | Severity | Evidence | Critic remedy | Main response | Resolution | Validation |
+| --- | --- | --- | --- | --- | --- | --- |
+| Rejected toolbar invocation encourages retry despite an uncertain outcome | Low | `toolbar.js` click handler; `toolbar-notice.test.cjs` rejection case | Clarify result and avoid replay | Use “Could not confirm the action result. Check the current state.” | Modify; order 0 | Add assertion that invocation occurs once and the unknown-result notice appears. |
+| Explicit toolbar rejection has no notice | Low; main-review addition | `toolbar.cjs` handler returns `false`; renderer only catches exceptions | Complement exception handling | Handle exactly `false`; do not infer completion from truthiness or message content | Accept; order 0 | Cover explicit rejection, exception and successful operation separately. |
+| Stop/save failure still permits close or quit | Medium | `capture.cjs:confirmStop` awaits `stop()` then returns true; `main.cjs` close and before-quit handlers | Do not promise a successful save before leaving | Current copy proposal says “attempt to save”; retaining the window on failure is a separate behavior decision | Policy before order 2 | Existing capture smoke checks partial output and successful confirmation separately; combined failure plus exit coverage is missing. |
+| Capture folder hint sounds global | Low | `capture.cjs:chooseDirectory`; `capture-settings.cjs:set` | Describe per-format preference | Preserve first-selection seeding of the other unset format; do not claim preferences are completely independent | Modify; order 2 | Cover initial seeding and later independent PNG/WebM changes. |
+| Localization could alter command or renderer boundaries | Integration constraint | `ui-commands.cjs:UI_ACTIONS`; `toolbar.cjs` sender and asset guards | Preserve structural commands and strict assets | Accept as invariants, not findings of a current bypass | Accept; order 1 | Existing guard tests plus explicit asset and localized-label cases. |
+| Independent Desktop locale adds a second preference | Product tradeoff | Pre-Core setup/recovery; independently selectable Core source | Consider shared/advisory locale | Recommend independence for startup coverage; validated advisory locale is a feasible alternative | Policy; recommended for order 1 | Test missing/malformed preference and unavailable/older Core. |
+| Setup/recovery wording can overstate rollback or cleanup | Integration constraint | `setup.cjs:requestSetupCancel/cleanupManagedVenvs`; `core-source.cjs:confirm` | Keep cancellation ownership, retained data and no-space-freed consequence | Preserve existing behavior and explicit warnings | Accept; order 3 | Cancellation, stale confirmation, retained files and recovery tests remain required. |
+| Translate setup ahead of capture for first-run users | Optional ordering | Setup precedes the main window | Prioritize onboarding if needed | Current priority is completing the small Desktop pilot first | Defer until onboarding priority changes | Does not block order 0 or the pilot. |
+
+The review added an explicit recording-exit policy checkpoint and moved toolbar
+feedback ahead of localization. It preserved the current authorization model,
+limited public Agent Info, per-tab permission instructions, exact renderer
+allowlists and recoverable cleanup. No discovery expansion is needed for
+Desktop localization.
+
+## Evidence and acceptance limits
+
+The review baseline passed five Node test-file entries:
+`agent-menu.test.cjs`, `ui-commands.test.cjs`, `toolbar.test.cjs`,
+`toolbar-notice.test.cjs`, and `diagnostics.test.cjs`. It ran with the installed
+Electron binary in Node mode, Node 24.20.0, satisfying Desktop's declared Node
+minimum. These are mocked/unit checks, not five native GUI scenarios. Source
+inspection of Capture/setup/recovery does not imply their smoke suites ran in
+this review.
+
+The review table is checked using `build_ui_messages.build_catalog` for schema,
+keys and placeholders, plus an assertion that all rows are proposed and all
+Traditional Chinese cells remain empty. No runtime catalog is generated.
+Windows/macOS native localization, installer lifecycle and packaged acceptance
+remain future work. This plan does not qualify or publish a release.

From 2c304d73108a2c4472489c5972298ff0d6aa28b2 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sun, 20 Sep 2026 09:11:48 +0800
Subject: [PATCH 28/43] Clarify rejected and uncertain toolbar actions

---
 desktop/test/toolbar-notice.test.cjs | 61 ++++++++++++++++++++++++----
 desktop/toolbar.js                   |  6 ++-
 docs/desktop_ui_copy_review.tsv      |  4 +-
 docs/desktop_ui_review_plan.md       | 19 ++++++---
 4 files changed, 72 insertions(+), 18 deletions(-)

diff --git a/desktop/test/toolbar-notice.test.cjs b/desktop/test/toolbar-notice.test.cjs
index e4ca5ca..b77f7b4 100644
--- a/desktop/test/toolbar-notice.test.cjs
+++ b/desktop/test/toolbar-notice.test.cjs
@@ -6,7 +6,7 @@ const fs = require('node:fs');
 const path = require('node:path');
 const vm = require('node:vm');
 
-function fixture() {
+function fixture(action = 'screenshot-file') {
   const elements = new Map();
   for (const [, id] of fs.readFileSync(path.join(__dirname, '..', 'toolbar.html'), 'utf8').matchAll(/id="([^"]+)"/g)) {
     const classes = new Set();
@@ -15,17 +15,23 @@ function fixture() {
         contains: name => classes.has(name), toggle: (name, on) => on ? classes.add(name) : classes.delete(name) },
       setAttribute: () => {}, addEventListener: (_type, handler) => { elements.get(id).click = handler; } });
   }
+  elements.get('save').dataset = action.startsWith('menu:') ? { menu: action.slice(5) } : { action };
   const timers = new Map();
-  let time = 0, next = 0, receive, fail = false;
+  const calls = [];
+  let time = 0, next = 0, receive, fail = false, result = true;
   const source = fs.readFileSync(path.join(__dirname, '..', 'toolbar.js'), 'utf8');
   vm.runInNewContext(source, {
     document: { getElementById: id => elements.get(id), querySelectorAll: () => [elements.get('save')] },
     window: { desktopToolbar: { onState: callback => { receive = callback; },
-      invoke: () => fail ? Promise.reject(new Error('Fixture failure')) : Promise.resolve(true) } },
+      invoke: action => {
+        calls.push(action);
+        return fail ? Promise.reject(new Error('Fixture failure')) : Promise.resolve(result);
+      } } },
     setTimeout: (callback, delay) => { timers.set(++next, { callback, at: time + delay }); return next; },
     clearTimeout: id => timers.delete(id),
   });
-  return { element: id => elements.get(id), receive, fail: () => { fail = true; },
+  return { element: id => elements.get(id), receive, calls, fail: () => { fail = true; },
+    result: value => { result = value; },
     tick: ms => {
       const end = time + ms;
       for (;;) {
@@ -63,11 +69,48 @@ test('a new error cancels pending fade cleanup and remains visible for ten secon
   f.tick(100); assert.equal(f.element('notice-area').classList.contains('visible'), false);
 });
 
-test('failed toolbar actions use the same timed error presentation', async () => {
-  const f = fixture(); f.fail(); f.element('save').click(); await Promise.resolve();
-  assert.match(f.element('notice').textContent, /Action unavailable/);
-  assert.ok(f.element('notice-area').classList.contains('error'));
-  f.tick(10350); assert.equal(f.element('notice').textContent, '');
+test('explicitly rejected toolbar actions show an error without replaying the action', async () => {
+  for (const action of ['screenshot-file', 'menu:standterm']) {
+    const f = fixture(action); f.result(false); f.element('save').click();
+    await new Promise(setImmediate);
+    assert.equal(f.element('notice').textContent, 'Action unavailable in the current window state.');
+    assert.ok(f.element('notice-area').classList.contains('error'));
+    f.tick(10350); assert.equal(f.element('notice').textContent, '');
+    assert.deepEqual(f.calls, ['ready', action]);
+  }
+});
+
+test('failed toolbar invocations report an unknown result without replaying the action', async () => {
+  for (const action of ['screenshot-file', 'menu:standterm']) {
+    const f = fixture(action); f.fail(); f.element('save').click();
+    await new Promise(setImmediate);
+    assert.equal(f.element('notice').textContent, 'Could not confirm the action result. Check the current state.');
+    assert.ok(f.element('notice-area').classList.contains('error'));
+    f.tick(10350); assert.equal(f.element('notice').textContent, '');
+    assert.deepEqual(f.calls, ['ready', action]);
+  }
+});
+
+test('other toolbar results preserve operation feedback without inventing success', async () => {
+  for (const result of [true, undefined, null, 0, '']) {
+    const f = fixture(); f.result(result); f.element('save').click();
+    f.receive({ notice: 'Could not save.', noticeId: 1, error: true });
+    await new Promise(setImmediate);
+    assert.equal(f.element('notice').textContent, 'Could not save.');
+    assert.ok(f.element('notice-area').classList.contains('error'));
+    assert.deepEqual(f.calls, ['ready', 'screenshot-file']);
+  }
+});
+
+test('accepted requests leave completion notices to the operation', async () => {
+  const f = fixture(); f.element('save').click();
+  await new Promise(setImmediate);
+  assert.equal(f.element('notice').textContent, '');
+  f.receive({ notice: 'Screenshot saved.', noticeId: 1 });
+  f.element('save').click();
+  await new Promise(setImmediate);
+  assert.equal(f.element('notice').textContent, 'Screenshot saved.');
+  assert.deepEqual(f.calls, ['ready', 'screenshot-file', 'screenshot-file']);
 });
 
 test('macOS keeps the system menu layout while notices use the shared renderer', () => {
diff --git a/desktop/toolbar.js b/desktop/toolbar.js
index cb7347c..104bbe1 100644
--- a/desktop/toolbar.js
+++ b/desktop/toolbar.js
@@ -23,8 +23,10 @@ function showNotice(message, error = false) {
 for (const button of document.querySelectorAll('[data-action], [data-menu]')) {
   button.addEventListener('click', () => {
     const action = button.dataset.action || `menu:${button.dataset.menu}`;
-    window.desktopToolbar.invoke(action).catch(() => {
-      showNotice('Action unavailable. Please retry.', true);
+    window.desktopToolbar.invoke(action).then(result => {
+      if (result === false) showNotice('Action unavailable in the current window state.', true);
+    }).catch(() => {
+      showNotice('Could not confirm the action result. Check the current state.', true);
     });
   });
 }
diff --git a/docs/desktop_ui_copy_review.tsv b/docs/desktop_ui_copy_review.tsv
index 688d4a1..54d4c70 100644
--- a/docs/desktop_ui_copy_review.tsv
+++ b/docs/desktop_ui_copy_review.tsv
@@ -11,8 +11,8 @@ desktop.toolbar.record_start	Start silent recording (WebM)	Start recording (WebM
 desktop.toolbar.record_pause	Pause recording	Pause recording		Recording pause state, not Pause Agent.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
 desktop.toolbar.record_stop	Stop and save recording	Stop and save recording		Requests stop/save; this label alone is not a save-success notification.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
 desktop.toolbar.record_resume	Resume recording	Resume recording		Dynamic pause-button label for typed paused state.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks. Select by state.state, never translated label.	proposed	desktop/toolbar.js:onState
-desktop.toolbar.action_unavailable		Action unavailable in the current window state.		New proposed notice for an explicit false result from the toolbar action handler; currently no notice.		Handle exactly false. Invoke once; do not replay. Do not reinterpret true as proof that output was saved.	proposed	desktop/toolbar.js:click handler; desktop/toolbar.cjs:standterm-toolbar-action
-desktop.toolbar.action_unconfirmed	Action unavailable. Please retry.	Could not confirm the action result. Check the current state.		Rejected IPC promise: operation outcome is uncertain.		Keep exception handling distinct from explicit false. Invoke once; never automatically retry or claim the action did not happen.	proposed	desktop/toolbar.js:click handler
+desktop.toolbar.action_unavailable	Action unavailable in the current window state.	Action unavailable in the current window state.		Notice for an explicit false result from the toolbar action handler. English feedback implemented in order 0; localization remains proposed.		Handle exactly false. Invoke once; do not replay. Do not reinterpret true as proof that output was saved.	proposed	desktop/toolbar.js:click handler; desktop/toolbar.cjs:standterm-toolbar-action
+desktop.toolbar.action_unconfirmed	Could not confirm the action result. Check the current state.	Could not confirm the action result. Check the current state.		Rejected IPC promise: operation outcome is uncertain. English feedback implemented in order 0; localization remains proposed.		Keep exception handling distinct from explicit false. Invoke once; never automatically retry or claim the action did not happen.	proposed	desktop/toolbar.js:click handler
 desktop.menu.settings	Settings...	Settings...		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
 desktop.menu.new_tab	New terminal tab	New terminal tab		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
 desktop.menu.close_tab	Close terminal tab	Close terminal tab		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
diff --git a/docs/desktop_ui_review_plan.md b/docs/desktop_ui_review_plan.md
index 265cf17..844b25d 100644
--- a/docs/desktop_ui_review_plan.md
+++ b/docs/desktop_ui_review_plan.md
@@ -1,21 +1,21 @@
 # Desktop copy review and localization plan
 
-Review date: 2026-09-20. This phase inventories Desktop copy, reviews behavior
-and orders implementation. It does not change runtime behavior or enable a
-Desktop language setting. Browser acceptance is recorded separately in
+Review date: 2026-09-20. The initial review inventories Desktop copy, reviews
+behavior and orders implementation. Completed implementation steps are recorded
+below; a Desktop language setting is not yet enabled. Browser acceptance is recorded separately in
 [browser_ui_acceptance.md](browser_ui_acceptance.md).
 
 ## Recommended implementation order
 
 | Order | Deliverable | Relative effort | Completion evidence |
 | --- | --- | --- | --- |
-| 0 | Clarify toolbar action feedback before localization. A resolved `false` currently has no notice; a rejected invocation says to retry despite an uncertain result. | Small | Reproduce both paths; show unavailable feedback for explicit rejection and unknown-result feedback for an exception. Invoke once, with no automatic replay. Preserve successful action notices. |
+| 0 — Complete | Clarify toolbar action feedback before localization. A resolved `false` now shows unavailable feedback; a rejected invocation reports an uncertain result without suggesting retry. | Small | Both original failures reproduced before the fix; renderer and command-guard checks passed. Each click invokes once, with no automatic replay or invented completion notice. |
 | 1 | Add a Desktop-owned language preference and catalog; pilot custom menus, toolbar labels and Agent help. | Medium | English default/fallback, `en` and `zh-TW`, malformed preference fallback, next-launch application, translated title/ARIA labels without losing SVGs, fixed command IDs, focus/origin guards and explicit packaged asset inventory. |
 | 2 | Review and localize Capture, Browser Access and Diagnostics. Resolve the recording save-failure exit policy before the Capture portion. | Medium | Typed recording states, partial-file paths, cancel/default buttons, first-folder seeding, sensitive clipboard feedback and escaped diagnostic fields retain their contracts. Add combined save-failure plus close/quit coverage. |
 | 3 | Localize setup, Core source selection, startup failure and recoverable environment cleanup. | Medium to large | Both languages work before Core is available. Cancellation waits for owned installers; stale confirmations do nothing; source switching, restart/session closure, retained files and recovery moves remain explicit. |
 | 4 | Complete Windows and macOS native acceptance and packaged asset checks. | Platform-dependent | Menus, native dialogs, narrow layouts, keyboard/ARIA labels, clipboard, setup and recovery are checked on each OS. Verify staged and packaged Desktop catalogs independently of the selected Core version. |
 
-The smallest next implementation is order 0, as a separate behavioral fix.
+The next implementation is the language preference and small pilot in order 1.
 Orders 1–3 should remain separate reviewable changes. First-run setup can move
 ahead of order 2 if onboarding becomes the priority; it is not required to prove
 the small localization pilot.
@@ -124,6 +124,15 @@ Desktop localization.
 
 ## Evidence and acceptance limits
 
+Order 0 completed on 2026-09-20. Before the renderer change, regression tests
+reproduced both the missing explicit-rejection notice and the misleading retry
+notice. After the change, all seven renderer notice tests passed, covering
+action and menu dispatch, exactly one invocation per click, strict `false`
+handling, existing operation feedback and notice expiry. The toolbar and UI
+command guard test files also passed under Electron's Node 24.20.0 runtime.
+The independent critic checked the bounded patch and test coverage. No native
+GUI acceptance or language rollout is claimed for this step.
+
 The review baseline passed five Node test-file entries:
 `agent-menu.test.cjs`, `ui-commands.test.cjs`, `toolbar.test.cjs`,
 `toolbar-notice.test.cjs`, and `diagnostics.test.cjs`. It ran with the installed

From e1220f325871bff626b4e39641bf8571a314a87a Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sun, 20 Sep 2026 09:37:47 +0800
Subject: [PATCH 29/43] Add Desktop language settings and bilingual toolbar

## Why
Desktop menus and toolbar text remain English even when Core uses another
language. Setup and Core source selection also require the shell to own its
language independently of the selected Core.

## What changed
- Save the Desktop language per profile and apply it on the next launch.
- Localize custom menus, toolbar labels and Agent help through 50 reviewed
  bilingual messages, preserving command IDs and per-tab authorization guidance.
- Ship the shell catalog independently and check both catalog outputs for staleness.
- Keep remaining workflow text in English and disclose partial coverage.

## Testing
All 110 Desktop unit tests and seven catalog regression tests pass. Both locales
pass the real toolbar DOM checks with mocked native IPC, including narrow
layout, ARIA labels, SVG preservation and failure feedback without replay.
Staged language assets match source and builder inclusion rules. Native OS
menus, dialogs and installers still require platform acceptance.
---
 desktop/README.md                          |  15 +++
 desktop/agent-menu.cjs                     |   8 +-
 desktop/electron-builder.cjs               |   2 +-
 desktop/i18n.js                            |  29 ++++++
 desktop/language.cjs                       |  52 ++++++++++
 desktop/main.cjs                           |  45 ++++-----
 desktop/messages.js                        | 112 +++++++++++++++++++++
 desktop/stage-windows.cjs                  |   1 +
 desktop/test/agent-menu.test.cjs           |  12 +++
 desktop/test/i18n.test.cjs                 |  28 ++++++
 desktop/test/language.test.cjs             | 101 +++++++++++++++++++
 desktop/test/package-inspect.cjs           |   2 +-
 desktop/test/toolbar-i18n-browser-smoke.py |  79 +++++++++++++++
 desktop/test/toolbar-notice.test.cjs       |   5 +-
 desktop/test/toolbar.test.cjs              |  25 +++--
 desktop/test/ui-commands.test.cjs          |  35 ++++++-
 desktop/toolbar.cjs                        |   7 +-
 desktop/toolbar.html                       |  24 +++--
 desktop/toolbar.js                         |  14 ++-
 desktop/ui-commands.cjs                    |  11 +-
 docs/desktop_ui_copy_review.tsv            |  75 +++++++++-----
 docs/desktop_ui_review_plan.md             |  66 +++++++++---
 scripts/build_ui_messages.py               |  20 ++--
 scripts/run_smoke_tests.py                 |   1 +
 tests/ui_messages_smoke.py                 |  27 +++++
 25 files changed, 693 insertions(+), 103 deletions(-)
 create mode 100644 desktop/i18n.js
 create mode 100644 desktop/language.cjs
 create mode 100644 desktop/messages.js
 create mode 100644 desktop/test/i18n.test.cjs
 create mode 100644 desktop/test/language.test.cjs
 create mode 100644 desktop/test/toolbar-i18n-browser-smoke.py

diff --git a/desktop/README.md b/desktop/README.md
index 7dff79a..545a5a7 100644
--- a/desktop/README.md
+++ b/desktop/README.md
@@ -10,6 +10,21 @@ Desktop copy and localization are planned in the
 [review plan](../docs/desktop_ui_review_plan.md), with a separate
 [translation review table](../docs/desktop_ui_copy_review.tsv).
 
+Choose **StandTerm > Desktop language...** to select English or Traditional
+Chinese (Taiwan) for the next launch. The preference belongs to the Desktop
+profile; Core keeps its own language setting. Saving a choice does not restart
+StandTerm or interrupt recording. This initial coverage includes custom menus,
+toolbar labels and Agent help. Capture status, setup, recovery and other Desktop
+text still use English; native role labels follow the platform.
+
+Edit reviewed messages in the table, then generate the independent shell
+catalog with `python scripts/build_ui_messages.py --desktop` from the repository
+root. Add `--check` to detect a stale catalog without writing. The regular
+headless smoke runner checks both Desktop and Core catalogs. The toolbar DOM
+check, `desktop/test/toolbar-i18n-browser-smoke.py`, uses the existing Playwright
+development environment and mocked native IPC; it does not qualify native
+menus, dialogs or installers.
+
 ## macOS Apple Silicon evaluation
 
 The arm64 DMG contains `StandTermDesktop.app`, Electron and the verified Core
diff --git a/desktop/agent-menu.cjs b/desktop/agent-menu.cjs
index 649f4f6..2c2cecb 100644
--- a/desktop/agent-menu.cjs
+++ b/desktop/agent-menu.cjs
@@ -1,9 +1,11 @@
 'use strict';
 
-function agentMenu({ showHelp, uiItems = [] }) {
-  return { id: 'agent-menu', label: 'Agent', submenu: [
+const { create } = require('./i18n.js');
+
+function agentMenu({ showHelp, uiItems = [], t = create('en').t }) {
+  return { id: 'agent-menu', label: t('desktop.agent.menu_title'), submenu: [
     ...uiItems,
-    { id: 'agent-help', label: 'Getting started...', click: showHelp },
+    { id: 'agent-help', label: t('desktop.agent.getting_started'), click: showHelp },
   ] };
 }
 
diff --git a/desktop/electron-builder.cjs b/desktop/electron-builder.cjs
index a3fc6fd..3144456 100644
--- a/desktop/electron-builder.cjs
+++ b/desktop/electron-builder.cjs
@@ -10,7 +10,7 @@ module.exports = {
   // Keep development app copies out of macOS Spotlight application results.
   directories: { output: process.platform === 'darwin' ? 'out.noindex' : 'out', buildResources: '.' },
   asar: true,
-  files: ['*.cjs', '*.html', 'recorder.js', 'toolbar.js', 'toolbar.css', 'package.json', 'release-identity.json', 'README.md', 'LICENSE',
+  files: ['*.cjs', '*.html', 'recorder.js', 'toolbar.js', 'toolbar.css', 'messages.js', 'i18n.js', 'package.json', 'release-identity.json', 'README.md', 'LICENSE',
     'test/capture-smoke.cjs', 'test/floating-smoke.cjs', 'test/external-links-smoke.cjs', 'test/toolbar-smoke.cjs', '!electron-builder.cjs', '!stage-windows.cjs', '!build-icon.cjs', '!release-identity.cjs'],
   extraResources: [{ from: 'bundle', to: 'bundle' }],
   mac: {
diff --git a/desktop/i18n.js b/desktop/i18n.js
new file mode 100644
index 0000000..17b1033
--- /dev/null
+++ b/desktop/i18n.js
@@ -0,0 +1,29 @@
+(function (root, factory) {
+  if (typeof module === 'object' && module.exports) module.exports = factory(require('./messages.js'));
+  else root.StandTermDesktopI18n = factory(root.StandTermDesktopMessages);
+})(globalThis, function (messages) {
+  'use strict';
+
+  const normalizeLocale = value => value === 'zh-TW' ? 'zh-TW' : 'en';
+  const own = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
+  function create(requestedLocale) {
+    const locale = normalizeLocale(requestedLocale);
+    const english = messages.en || {};
+    const translated = messages[locale] || {};
+    function t(key, params = {}) {
+      const template = (own(translated, key) && translated[key]) || (own(english, key) && english[key]) || key;
+      return template.replace(/\{([A-Za-z_][A-Za-z0-9_]*)\}/g,
+        (placeholder, name) => own(params, name) ? String(params[name]) : placeholder);
+    }
+    function apply(root) {
+      for (const element of root.querySelectorAll('[data-i18n]')) element.textContent = t(element.dataset.i18n);
+      for (const attribute of ['title', 'aria-label']) {
+        for (const element of root.querySelectorAll(`[data-i18n-${attribute}]`)) {
+          element.setAttribute(attribute, t(element.getAttribute(`data-i18n-${attribute}`)));
+        }
+      }
+    }
+    return { locale, t, apply };
+  }
+  return { normalizeLocale, create };
+});
diff --git a/desktop/language.cjs b/desktop/language.cjs
new file mode 100644
index 0000000..f86557a
--- /dev/null
+++ b/desktop/language.cjs
@@ -0,0 +1,52 @@
+'use strict';
+
+const fs = require('node:fs');
+const path = require('node:path');
+const { randomUUID } = require('node:crypto');
+const { create, normalizeLocale } = require('./i18n.js');
+
+function createLanguage(file) {
+  let selected = 'en';
+  try {
+    if (fs.statSync(file).size <= 16384) {
+      const data = JSON.parse(fs.readFileSync(file, 'utf8'));
+      if (data?.version === 1) selected = normalizeLocale(data.locale);
+    }
+  } catch { /* Missing or invalid preferences use English. */ }
+  const { locale, t } = create(selected);
+  let pending = false;
+  async function choose(dialog, win) {
+    if (pending || win.isDestroyed()) return false;
+    pending = true;
+    try {
+      const answer = await dialog.showMessageBox(win, {
+        type: 'question', title: t('desktop.language.title'), message: t('desktop.language.choose'),
+        detail: t('desktop.language.detail', { language: t(selected === 'zh-TW' ? 'desktop.language.name_zh_tw' : 'desktop.language.name_en') }),
+        buttons: [t('desktop.common.cancel'), t('desktop.language.name_en'), t('desktop.language.name_zh_tw')],
+        defaultId: 0, cancelId: 0, noLink: true,
+      });
+      if (win.isDestroyed() || ![1, 2].includes(answer.response)) return false;
+      const next = answer.response === 2 ? 'zh-TW' : 'en';
+      if (next === selected) return true;
+      const temporary = `${file}.${randomUUID()}.tmp`;
+      try {
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        fs.writeFileSync(temporary, JSON.stringify({ version: 1, locale: next }, null, 2), { flag: 'wx', mode: 0o600 });
+        fs.renameSync(temporary, file);
+      } finally {
+        try { fs.unlinkSync(temporary); } catch (error) { if (error.code !== 'ENOENT') throw error; }
+      }
+      selected = next;
+      if (!win.isDestroyed()) await dialog.showMessageBox(win, { type: 'info', title: t('desktop.language.title'),
+        message: t('desktop.language.saved'), buttons: [t('desktop.common.ok')], noLink: true });
+      return true;
+    } catch {
+      if (!win.isDestroyed()) await dialog.showMessageBox(win, { type: 'error', title: t('desktop.language.title'),
+        message: t('desktop.language.failed'), buttons: [t('desktop.common.ok')], noLink: true }).catch(() => {});
+      return false;
+    } finally { pending = false; }
+  }
+  return { locale, t, choose };
+}
+
+module.exports = { createLanguage };
diff --git a/desktop/main.cjs b/desktop/main.cjs
index d244f67..6ef424a 100644
--- a/desktop/main.cjs
+++ b/desktop/main.cjs
@@ -25,6 +25,7 @@ const { createUiCommands } = require('./ui-commands.cjs');
 const { installToolbar } = require('./toolbar.cjs');
 const { createBrowserAccess } = require('./browser-access.cjs');
 const { installContextPaste } = require('./context-paste.cjs');
+const { createLanguage } = require('./language.cjs');
 
 let maintenance;
 try { maintenance = installerRequest(process.argv); } catch (error) {
@@ -78,6 +79,8 @@ else if (app.isPackaged) {
   fs.mkdirSync(profile, { recursive: true });
   app.setPath('userData', profile);
 }
+const language = createLanguage(path.join(app.getPath('userData'), 'language.json'));
+const { t } = language;
 let child;
 let desktopSession;
 const expectedBackendExits = new WeakSet();
@@ -229,9 +232,9 @@ function createTray() {
   tray = new Tray(icon);
   tray.setToolTip('StandTerm Desktop');
   tray.setContextMenu(Menu.buildFromTemplate([
-    { label: 'Open StandTerm', click: showWindow },
+    { label: t('desktop.menu.open'), click: showWindow },
     { type: 'separator' },
-    { label: 'Quit StandTerm', click: () => app.quit() },
+    { label: t('desktop.menu.quit'), click: () => app.quit() },
   ]));
   tray.on('click', showWindow);
   return icon;
@@ -326,7 +329,7 @@ async function start() {
     sandbox: true, webSecurity: true, webviewTag: false, allowRunningInsecureContent: false, devTools: true,
   } });
   const contents = coreView.webContents;
-  const commands = createUiCommands(win, contents, handoff.origin);
+  const commands = createUiCommands(win, contents, handoff.origin, t);
   let toolbar;
   const updateTitle = () => {
     if (!win.isDestroyed()) win.setTitle(`${captureTitle ? `[${captureTitle}] ` : ''}${MODES[mode]} - ${pageTitle}`);
@@ -340,7 +343,7 @@ async function start() {
       if (error) console.error(message);
     } } : {}),
   });
-  toolbar = installToolbar(win, coreView, capture, commands);
+  toolbar = installToolbar(win, coreView, capture, commands, language.locale);
   installContextPaste(win, contents, handoff.origin, toolbar.notify);
   const browserAccess = createBrowserAccess({ origin: handoff.origin, session: desktopSession, launcherToken,
     available: () => !win.isDestroyed() && !contents.isDestroyed() && allowedNavigation(contents.getURL(), handoff.origin),
@@ -387,40 +390,36 @@ async function start() {
   Menu.setApplicationMenu(Menu.buildFromTemplate([
     { id: 'standterm', label: 'StandTerm', submenu: [
       commands.item('settings'),
-      ...(coreManager ? [{ label: 'Core source (Advanced)...', click: () => {
+      { id: 'desktop-language', label: t('desktop.language.menu'), click: () => { void language.choose(dialog, win); } },
+      ...(coreManager ? [{ label: t('desktop.menu.core_source'), click: () => {
         void coreManager.showManager().catch(error => dialog.showErrorBox('Core management unavailable', error.message));
       } }] : []),
-      { label: 'Capture Settings...', click: () => capture.configure() },
+      { label: t('desktop.menu.capture_settings'), click: () => capture.configure() },
       browserAccess.menu,
       { type: 'separator' },
       commands.item('newTab'), commands.item('closeTab'), commands.item('closeAll'),
       commands.item('files'), commands.item('pip'),
       { type: 'separator' },
-      { id: 'desktop-about', label: 'About StandTerm Desktop', click: () => dialog.showMessageBox(win, {
-        type: 'info', title: 'About StandTerm Desktop', message: `StandTerm Desktop ${app.getVersion()}`,
-        detail: aboutDetails, buttons: ['OK'], noLink: true,
+      { id: 'desktop-about', label: t('desktop.menu.about'), click: () => dialog.showMessageBox(win, {
+        type: 'info', title: t('desktop.menu.about'), message: `StandTerm Desktop ${app.getVersion()}`,
+        detail: aboutDetails, buttons: [t('desktop.common.ok')], noLink: true,
       }) },
-      { label: 'Show window', click: showWindow },
+      { label: t('desktop.menu.show'), click: showWindow },
       ...(process.platform === 'darwin' ? [{ role: 'services' }, { type: 'separator' }, { role: 'hide' }, { role: 'hideOthers' }, { role: 'unhide' }, { type: 'separator' }] : []),
-      { label: 'Quit StandTerm', accelerator: 'CommandOrControl+Q', click: () => app.quit() },
+      { label: t('desktop.menu.quit'), accelerator: 'CommandOrControl+Q', click: () => app.quit() },
     ] },
-    { id: 'edit', role: 'editMenu' },
+    { id: 'edit', role: 'editMenu', label: t('desktop.toolbar.menu_edit') },
     agentMenu({
+      t,
       uiItems: [commands.item('agentPanel'), commands.item('pauseAgent'), { type: 'separator' }],
       showHelp: () => dialog.showMessageBox(win, {
-        type: 'info', title: 'StandTerm Agent', message: 'Give your agent a StandTerm prompt',
-        detail: 'Select the tab where your agent runs. Use Agent Panel to enable access and choose permissions '
-          + 'on each tab it may operate.\n\n'
-          + 'For an SSH agent, start Agent Tunnel on its SSH tab. Agent connection appears after setup succeeds. '
-          + 'For a local agent, use Authorize agent on each intended tab.\n\n'
-          + 'Open Agent connection, choose Copy Prompt, and paste it into your agent with the intended task. '
-          + 'Follow the environment shown in that dialog.\n\n'
-          + 'Skills do not need to be installed first. The prompt leads to the bundled skills and helpers; '
-          + 'Agent Info also provides installation instructions when persistent skills are wanted.',
-        buttons: ['OK'], noLink: true,
+        type: 'info', title: 'StandTerm Agent', message: t('desktop.agent.help_title'),
+        detail: ['desktop.agent.help_permissions', 'desktop.agent.help_environment',
+          'desktop.agent.help_connection', 'desktop.agent.help_skills'].map(key => t(key)).join('\n\n'),
+        buttons: [t('desktop.common.ok')], noLink: true,
       }),
     }),
-    { id: 'view', label: 'View', submenu: [{ role: 'resetZoom' }, { role: 'zoomIn' }, { role: 'zoomOut' }, { role: 'togglefullscreen' },
+    { id: 'view', label: t('desktop.toolbar.menu_view'), submenu: [{ role: 'resetZoom' }, { role: 'zoomIn' }, { role: 'zoomOut' }, { role: 'togglefullscreen' },
       { type: 'separator' },
       ...capture.menu().submenu,
     ] },
diff --git a/desktop/messages.js b/desktop/messages.js
new file mode 100644
index 0000000..6343851
--- /dev/null
+++ b/desktop/messages.js
@@ -0,0 +1,112 @@
+// Generated by scripts/build_ui_messages.py. Edit docs/desktop_ui_copy_review.tsv.
+(function (root) {
+    'use strict';
+    const messages = {
+    "en": {
+        "desktop.agent.getting_started": "Getting started\u2026",
+        "desktop.agent.help_connection": "Open Agent connection, choose Copy Prompt, and paste it into your agent with the task. Follow the environment shown in the dialog.",
+        "desktop.agent.help_environment": "For an Agent running on an SSH host, start Agent Tunnel on its SSH tab. Agent connection appears after setup succeeds. For a local Agent, use Authorize agent on each intended tab.",
+        "desktop.agent.help_permissions": "Select the tab where your agent runs. In Agent Panel, enable access and choose permissions for each tab it may operate.",
+        "desktop.agent.help_skills": "Skills do not need to be installed first. The prompt leads to bundled skills and helpers. Agent Info also provides installation instructions for persistent skills.",
+        "desktop.agent.help_title": "Connect your agent to StandTerm",
+        "desktop.agent.menu_title": "Agent",
+        "desktop.common.cancel": "Cancel",
+        "desktop.common.ok": "OK",
+        "desktop.language.choose": "Choose the Desktop language for the next launch.",
+        "desktop.language.detail": "Saved choice: {language}\n\nCore has its own language setting. Some Desktop text remains in English.",
+        "desktop.language.failed": "Could not confirm the language setting. Reopen Desktop language to check the saved choice.",
+        "desktop.language.menu": "Desktop language...",
+        "desktop.language.name_en": "English",
+        "desktop.language.name_zh_tw": "\u7e41\u9ad4\u4e2d\u6587",
+        "desktop.language.saved": "Language saved. It applies the next time you launch StandTerm.",
+        "desktop.language.title": "Desktop language",
+        "desktop.menu.about": "About StandTerm Desktop",
+        "desktop.menu.agent_panel": "Show / hide Agent Panel",
+        "desktop.menu.capture_settings": "Capture Settings...",
+        "desktop.menu.close_all": "Close all terminal tabs...",
+        "desktop.menu.close_tab": "Close terminal tab",
+        "desktop.menu.core_source": "Core source (Advanced)...",
+        "desktop.menu.files": "Files...",
+        "desktop.menu.new_tab": "New terminal tab",
+        "desktop.menu.open": "Open StandTerm",
+        "desktop.menu.pause_agent": "Pause Agent for current terminal",
+        "desktop.menu.pip": "Open terminal in PiP",
+        "desktop.menu.quit": "Quit StandTerm",
+        "desktop.menu.settings": "Settings...",
+        "desktop.menu.show": "Show window",
+        "desktop.toolbar.action_unavailable": "Action unavailable in the current window state.",
+        "desktop.toolbar.action_unconfirmed": "Could not confirm the action result. Check the current state.",
+        "desktop.toolbar.application_menu": "Application menu",
+        "desktop.toolbar.capture_scope": "Capture the terminal view",
+        "desktop.toolbar.clipboard_actions": "Clipboard actions",
+        "desktop.toolbar.copy_hint": "Copy selected text (not Ctrl+C)",
+        "desktop.toolbar.copy_label": "Copy selected text",
+        "desktop.toolbar.menu_agent": "Agent",
+        "desktop.toolbar.menu_diagnostics": "Diagnostics",
+        "desktop.toolbar.menu_edit": "Edit",
+        "desktop.toolbar.menu_standterm": "StandTerm",
+        "desktop.toolbar.menu_view": "View",
+        "desktop.toolbar.paste": "Paste clipboard text",
+        "desktop.toolbar.record_pause": "Pause recording",
+        "desktop.toolbar.record_resume": "Resume recording",
+        "desktop.toolbar.record_start": "Start recording (WebM, no audio)",
+        "desktop.toolbar.record_stop": "Stop and save recording",
+        "desktop.toolbar.screenshot_copy": "Copy screenshot to clipboard",
+        "desktop.toolbar.screenshot_save": "Save screenshot (PNG)"
+    },
+    "zh-TW": {
+        "desktop.agent.getting_started": "\u958b\u59cb\u4f7f\u7528\u2026",
+        "desktop.agent.help_connection": "\u958b\u555f\u300cAgent \u9023\u7dda\u300d\uff08Agent connection\uff09\uff0c\u9078\u64c7\u300c\u8907\u88fd\u9023\u7dda\u6307\u5f15\u300d\uff08Copy Prompt\uff09\uff0c\u518d\u5c07\u6307\u5f15\u9023\u540c\u4efb\u52d9\u8cbc\u7d66 Agent\u3002\u8acb\u4f9d\u5c0d\u8a71\u6846\u986f\u793a\u7684\u74b0\u5883\u64cd\u4f5c\u3002",
+        "desktop.agent.help_environment": "\u82e5 Agent \u5728 SSH \u9060\u7aef\u57f7\u884c\uff0c\u8acb\u5728\u5176 SSH \u5206\u9801\u555f\u52d5 Agent \u901a\u9053\uff08Agent Tunnel\uff09\u3002\u8a2d\u5b9a\u6210\u529f\u5f8c\u6703\u51fa\u73fe\u300cAgent \u9023\u7dda\u300d\uff08Agent connection\uff09\u3002\u82e5 Agent \u5728\u672c\u6a5f\u57f7\u884c\uff0c\u8acb\u5728\u6bcf\u500b\u9810\u5b9a\u64cd\u4f5c\u7684\u5206\u9801\u9078\u64c7\u300c\u6388\u6b0a Agent\u300d\uff08Authorize agent\uff09\u3002",
+        "desktop.agent.help_permissions": "\u9078\u53d6 Agent \u6240\u5728\u7684\u5206\u9801\u3002\u5728 Agent \u9762\u677f\uff08Agent Panel\uff09\u4e2d\uff0c\u9010\u4e00\u70ba Agent \u53ef\u64cd\u4f5c\u7684\u5206\u9801\u555f\u7528\u5b58\u53d6\u4e26\u9078\u64c7\u6b0a\u9650\u3002",
+        "desktop.agent.help_skills": "\u4e0d\u5fc5\u5148\u5b89\u88dd\u6280\u80fd\uff08skills\uff09\u3002\u9023\u7dda\u6307\u5f15\u6703\u5f15\u5c0e Agent \u4f7f\u7528\u96a8\u9644\u7684\u6280\u80fd\u8207\u8f14\u52a9\u5de5\u5177\uff1b\u82e5\u5e0c\u671b\u5b89\u88dd\u5f8c\u6301\u7e8c\u4f7f\u7528\u6280\u80fd\uff0cAgent Info \u4e5f\u63d0\u4f9b\u5b89\u88dd\u8aaa\u660e\u3002",
+        "desktop.agent.help_title": "\u8b93 Agent \u9023\u7dda\u81f3 StandTerm",
+        "desktop.agent.menu_title": "Agent",
+        "desktop.common.cancel": "\u53d6\u6d88",
+        "desktop.common.ok": "\u78ba\u5b9a",
+        "desktop.language.choose": "\u9078\u64c7\u4e0b\u6b21\u555f\u52d5\u6642\u4f7f\u7528\u7684 Desktop \u8a9e\u7cfb\u3002",
+        "desktop.language.detail": "\u5df2\u5132\u5b58\u7684\u9078\u64c7\uff1a{language}\n\nCore \u7684\u8a9e\u7cfb\u9700\u53e6\u5916\u8a2d\u5b9a\u3002\u90e8\u5206 Desktop \u6587\u5b57\u4ecd\u4f7f\u7528\u82f1\u6587\u3002",
+        "desktop.language.failed": "\u7121\u6cd5\u78ba\u8a8d\u8a9e\u7cfb\u8a2d\u5b9a\u3002\u8acb\u91cd\u65b0\u958b\u555f\u300cDesktop \u8a9e\u7cfb\u300d\u67e5\u770b\u5df2\u5132\u5b58\u7684\u9078\u64c7\u3002",
+        "desktop.language.menu": "Desktop \u8a9e\u7cfb\u2026",
+        "desktop.language.name_en": "English",
+        "desktop.language.name_zh_tw": "\u7e41\u9ad4\u4e2d\u6587",
+        "desktop.language.saved": "\u5df2\u5132\u5b58\u8a9e\u7cfb\uff0c\u4e0b\u6b21\u555f\u52d5 StandTerm \u6642\u751f\u6548\u3002",
+        "desktop.language.title": "Desktop \u8a9e\u7cfb",
+        "desktop.menu.about": "\u95dc\u65bc StandTerm Desktop",
+        "desktop.menu.agent_panel": "\u986f\u793a\uff0f\u96b1\u85cf Agent \u9762\u677f",
+        "desktop.menu.capture_settings": "\u756b\u9762\u64f7\u53d6\u8a2d\u5b9a\u2026",
+        "desktop.menu.close_all": "\u95dc\u9589\u6240\u6709\u7d42\u7aef\u5206\u9801\u2026",
+        "desktop.menu.close_tab": "\u95dc\u9589\u7d42\u7aef\u5206\u9801",
+        "desktop.menu.core_source": "Core \u4f86\u6e90\uff08\u9032\u968e\uff09\u2026",
+        "desktop.menu.files": "\u6a94\u6848\u2026",
+        "desktop.menu.new_tab": "\u65b0\u589e\u7d42\u7aef\u5206\u9801",
+        "desktop.menu.open": "\u958b\u555f StandTerm",
+        "desktop.menu.pause_agent": "\u66ab\u505c\u76ee\u524d\u7d42\u7aef\u7684 Agent",
+        "desktop.menu.pip": "\u4ee5\u5b50\u6bcd\u756b\u9762\u958b\u555f\u7d42\u7aef",
+        "desktop.menu.quit": "\u7d50\u675f StandTerm",
+        "desktop.menu.settings": "\u8a2d\u5b9a\u2026",
+        "desktop.menu.show": "\u986f\u793a\u8996\u7a97",
+        "desktop.toolbar.action_unavailable": "\u76ee\u524d\u7684\u8996\u7a97\u72c0\u614b\u7121\u6cd5\u57f7\u884c\u6b64\u64cd\u4f5c\u3002",
+        "desktop.toolbar.action_unconfirmed": "\u7121\u6cd5\u78ba\u8a8d\u64cd\u4f5c\u7d50\u679c\u3002\u8acb\u6aa2\u67e5\u76ee\u524d\u72c0\u614b\u3002",
+        "desktop.toolbar.application_menu": "\u61c9\u7528\u7a0b\u5f0f\u9078\u55ae",
+        "desktop.toolbar.capture_scope": "\u64f7\u53d6\u7d42\u7aef\u756b\u9762",
+        "desktop.toolbar.clipboard_actions": "\u526a\u8cbc\u7c3f\u64cd\u4f5c",
+        "desktop.toolbar.copy_hint": "\u8907\u88fd\u9078\u53d6\u6587\u5b57\uff08\u4e0d\u9001\u51fa Ctrl+C\uff09",
+        "desktop.toolbar.copy_label": "\u8907\u88fd\u9078\u53d6\u6587\u5b57",
+        "desktop.toolbar.menu_agent": "Agent",
+        "desktop.toolbar.menu_diagnostics": "\u8a3a\u65b7",
+        "desktop.toolbar.menu_edit": "\u7de8\u8f2f",
+        "desktop.toolbar.menu_standterm": "StandTerm",
+        "desktop.toolbar.menu_view": "\u6aa2\u8996",
+        "desktop.toolbar.paste": "\u8cbc\u4e0a\u526a\u8cbc\u7c3f\u6587\u5b57",
+        "desktop.toolbar.record_pause": "\u66ab\u505c\u9304\u5f71",
+        "desktop.toolbar.record_resume": "\u7e7c\u7e8c\u9304\u5f71",
+        "desktop.toolbar.record_start": "\u958b\u59cb\u9304\u5f71\uff08WebM\uff0c\u7121\u97f3\u8a0a\uff09",
+        "desktop.toolbar.record_stop": "\u505c\u6b62\u4e26\u5132\u5b58\u9304\u5f71",
+        "desktop.toolbar.screenshot_copy": "\u8907\u88fd\u622a\u5716\u81f3\u526a\u8cbc\u7c3f",
+        "desktop.toolbar.screenshot_save": "\u5132\u5b58\u622a\u5716\uff08PNG\uff09"
+    }
+};
+    if (typeof module === 'object' && module.exports) module.exports = messages;
+    else root.StandTermDesktopMessages = messages;
+})(globalThis);
diff --git a/desktop/stage-windows.cjs b/desktop/stage-windows.cjs
index ff73109..55c6b7b 100644
--- a/desktop/stage-windows.cjs
+++ b/desktop/stage-windows.cjs
@@ -35,6 +35,7 @@ const shellFiles = [
   'test/external-links-smoke.cjs',
   'capture-settings.cjs', 'ui-commands.cjs', 'toolbar.cjs', 'toolbar-preload.cjs',
   'toolbar.html', 'toolbar.js', 'toolbar.css',
+  'language.cjs', 'messages.js', 'i18n.js',
   'test/toolbar-smoke.cjs',
   'browser-access.cjs',
   'context-paste.cjs',
diff --git a/desktop/test/agent-menu.test.cjs b/desktop/test/agent-menu.test.cjs
index 4d4f09f..94d18a4 100644
--- a/desktop/test/agent-menu.test.cjs
+++ b/desktop/test/agent-menu.test.cjs
@@ -3,6 +3,7 @@
 const test = require('node:test');
 const assert = require('node:assert/strict');
 const { agentMenu } = require('../agent-menu.cjs');
+const { create } = require('../i18n.js');
 
 test('Agent menu delegates terminal authority to Core and offers guidance', () => {
   const calls = [];
@@ -19,3 +20,14 @@ test('Agent menu delegates terminal authority to Core and offers guidance', () =
   for (const item of menu.submenu) if (item.click) item.click();
   assert.deepEqual(calls, ['panel', 'pause', 'help']);
 });
+
+test('translated Agent menu labels preserve command identities and help callback', () => {
+  let called = 0;
+  const { t } = create('zh-TW');
+  const menu = agentMenu({ t, showHelp: () => called++ });
+  assert.equal(menu.id, 'agent-menu');
+  assert.equal(menu.submenu[0].id, 'agent-help');
+  assert.equal(menu.submenu[0].label, t('desktop.agent.getting_started'));
+  menu.submenu[0].click();
+  assert.equal(called, 1);
+});
diff --git a/desktop/test/i18n.test.cjs b/desktop/test/i18n.test.cjs
new file mode 100644
index 0000000..0066a7f
--- /dev/null
+++ b/desktop/test/i18n.test.cjs
@@ -0,0 +1,28 @@
+'use strict';
+
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const vm = require('node:vm');
+const { create, normalizeLocale } = require('../i18n.js');
+const messages = require('../messages.js');
+
+test('the Desktop catalog contains reviewed bilingual messages and normalizes locales', () => {
+  assert.deepEqual(Object.keys(messages.en).sort(), Object.keys(messages['zh-TW']).sort());
+  for (const value of [undefined, null, {}, 'zh-CN', 'constructor', '../zh-TW']) assert.equal(normalizeLocale(value), 'en');
+  assert.equal(normalizeLocale('zh-TW'), 'zh-TW');
+  assert.equal(create('en').t('desktop.menu.new_tab'), 'New terminal tab');
+  assert.notEqual(create('zh-TW').t('desktop.menu.new_tab'), create('en').t('desktop.menu.new_tab'));
+  assert.equal(create('en').t('constructor'), 'constructor');
+  assert.equal(create('zh-TW').t('desktop.missing'), 'desktop.missing');
+});
+
+test('missing translations fall back to English and substitution remains literal display data', () => {
+  const context = { StandTermDesktopMessages: { en: { 'test.literal': '{value} / {missing}' }, 'zh-TW': {} } };
+  vm.runInNewContext(fs.readFileSync(path.join(__dirname, '..', 'i18n.js'), 'utf8'), context);
+  const t = context.StandTermDesktopI18n.create('zh-TW').t;
+  const value = '<b>$& {missing}</b>';
+  assert.equal(t('test.literal', { value }), value + ' / {missing}');
+  assert.equal(t('test.literal', Object.create({ value: 'inherited' })), '{value} / {missing}');
+});
diff --git a/desktop/test/language.test.cjs b/desktop/test/language.test.cjs
new file mode 100644
index 0000000..eb64e9a
--- /dev/null
+++ b/desktop/test/language.test.cjs
@@ -0,0 +1,101 @@
+'use strict';
+
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { createLanguage } = require('../language.cjs');
+const { create } = require('../i18n.js');
+
+const owner = { isDestroyed: () => false };
+function fixture() {
+  const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'standterm-language-'));
+  return { directory, file: path.join(directory, 'language.json') };
+}
+function dialog(response) {
+  const calls = [];
+  return { calls, showMessageBox: async (_win, options) => { calls.push(options); return { response }; } };
+}
+
+test('language persists per profile and takes effect only for a new instance', async () => {
+  const f = fixture(), original = createLanguage(f.file), prompt = dialog(2);
+  assert.equal(original.locale, 'en');
+  assert.equal(await original.choose(prompt, owner), true);
+  assert.deepEqual(JSON.parse(fs.readFileSync(f.file, 'utf8')), { version: 1, locale: 'zh-TW' });
+  assert.equal(original.locale, 'en');
+  assert.equal(original.t('desktop.menu.settings'), 'Settings...');
+  const reloaded = createLanguage(f.file);
+  assert.equal(reloaded.locale, 'zh-TW');
+  assert.equal(reloaded.t('desktop.menu.settings'), create('zh-TW').t('desktop.menu.settings'));
+  assert.equal(createLanguage(path.join(f.directory, 'other-profile', 'language.json')).locale, 'en');
+  const english = dialog(1);
+  assert.equal(await reloaded.choose(english, owner), true);
+  assert.equal(english.calls[0].buttons[0], reloaded.t('desktop.common.cancel'));
+  assert.equal(createLanguage(f.file).locale, 'en');
+  assert.deepEqual(fs.readdirSync(f.directory), ['language.json']);
+});
+
+test('missing, malformed and unsupported preferences fall back to English', () => {
+  const f = fixture();
+  assert.equal(createLanguage(f.file).locale, 'en');
+  for (const value of ['invalid', 'null', '{"version":2,"locale":"zh-TW"}',
+    '{"version":1,"locale":"zh-CN"}', '{"version":1,"locale":{}}',
+    '{"version":1,"locale":"zh-TW","padding":"' + 'x'.repeat(16384) + '"}']) {
+    fs.writeFileSync(f.file, value);
+    assert.equal(createLanguage(f.file).locale, 'en');
+  }
+});
+
+test('cancel, unknown responses and selecting the current language do not write', async () => {
+  const f = fixture(), language = createLanguage(f.file);
+  for (const response of [0, -1, 3, '2', undefined, 1]) {
+    const prompt = dialog(response);
+    assert.equal(await language.choose(prompt, owner), response === 1);
+    assert.equal(prompt.calls[0].defaultId, 0);
+    assert.equal(prompt.calls[0].cancelId, 0);
+    assert.equal(fs.existsSync(f.file), false);
+  }
+});
+
+test('duplicate and stale language dialogs cannot write a selection', async () => {
+  const f = fixture(), language = createLanguage(f.file);
+  let resolve, destroyed = false, calls = 0;
+  const win = { isDestroyed: () => destroyed };
+  const prompt = { showMessageBox: () => { calls++; return new Promise(done => { resolve = done; }); } };
+  const pending = language.choose(prompt, win);
+  assert.equal(await language.choose(prompt, win), false);
+  destroyed = true;
+  resolve({ response: 2 });
+  assert.equal(await pending, false);
+  assert.equal(calls, 1);
+  assert.equal(fs.existsSync(f.file), false);
+  assert.equal(await language.choose(prompt, win), false);
+});
+
+test('failed persistence leaves the saved choice and active language unchanged', async () => {
+  const f = fixture(), language = createLanguage(f.file), prompt = dialog(2);
+  fs.mkdirSync(f.file);
+  assert.equal(await language.choose(prompt, owner), false);
+  assert.equal(language.locale, 'en');
+  assert.equal(prompt.calls.at(-1).type, 'error');
+  assert.equal(prompt.calls.at(-1).message, language.t('desktop.language.failed'));
+  assert.deepEqual(fs.readdirSync(f.directory), ['language.json']);
+  const check = dialog(0);
+  await language.choose(check, owner);
+  assert.match(check.calls[0].detail, /Saved choice: English/);
+});
+
+test('a lost save notification does not report rollback or discard the persisted choice', async () => {
+  const f = fixture(), language = createLanguage(f.file);
+  let calls = 0;
+  const prompt = { showMessageBox: async () => {
+    if (++calls > 1) throw new Error('Window closed');
+    return { response: 2 };
+  } };
+  assert.equal(await language.choose(prompt, owner), false);
+  assert.equal(createLanguage(f.file).locale, 'zh-TW');
+  const check = dialog(0);
+  await language.choose(check, owner);
+  assert.equal(check.calls[0].detail, language.t('desktop.language.detail', { language: language.t('desktop.language.name_zh_tw') }));
+});
diff --git a/desktop/test/package-inspect.cjs b/desktop/test/package-inspect.cjs
index 9991a60..f851103 100644
--- a/desktop/test/package-inspect.cjs
+++ b/desktop/test/package-inspect.cjs
@@ -34,7 +34,7 @@ for (const name of names) {
 for (const file of ['main.cjs', 'agent-menu.cjs', 'browser-session.cjs', 'diagnostics.cjs', 'diagnostics-window.cjs',
   'external-links.cjs', 'floating-windows.cjs', 'test/external-links-smoke.cjs', 'browser-access.cjs', 'context-paste.cjs',
   'capture-settings.cjs', 'ui-commands.cjs', 'toolbar.cjs', 'toolbar-preload.cjs',
-  'toolbar.html', 'toolbar.js', 'toolbar.css', 'test/toolbar-smoke.cjs', 'release-identity.json']) {
+  'toolbar.html', 'toolbar.js', 'toolbar.css', 'language.cjs', 'messages.js', 'i18n.js', 'test/toolbar-smoke.cjs', 'release-identity.json']) {
   assert.ok(names.includes('/' + file), `Missing ${file}`);
 }
 const metadata = JSON.parse(asar.extractFile(archive, 'package.json'));
diff --git a/desktop/test/toolbar-i18n-browser-smoke.py b/desktop/test/toolbar-i18n-browser-smoke.py
new file mode 100644
index 0000000..c4cdf57
--- /dev/null
+++ b/desktop/test/toolbar-i18n-browser-smoke.py
@@ -0,0 +1,79 @@
+"""Check the real toolbar DOM with mocked native IPC, without starting Core."""
+
+import json
+import os
+from pathlib import Path
+
+
+ROOT = Path(__file__).resolve().parents[2]
+os.environ.setdefault('PLAYWRIGHT_BROWSERS_PATH', str(ROOT / 'tools' / '.ms-playwright'))
+
+from playwright.sync_api import sync_playwright
+
+
+def run():
+    with sync_playwright() as playwright:
+        browser = playwright.chromium.launch(headless=True)
+        try:
+            for locale in ('en', 'zh-TW'):
+                page = browser.new_page(viewport={'width': 640, 'height': 100})
+                errors = []
+                page.on('pageerror', lambda error: errors.append(str(error)))
+                page.add_init_script("""
+                    window.fixture = {calls: [], result: true, fail: false};
+                    window.desktopToolbar = {
+                        onState: callback => { window.fixture.receive = callback; },
+                        invoke: action => {
+                            window.fixture.calls.push(action);
+                            return window.fixture.fail ? Promise.reject(new Error('Private fixture error'))
+                                : Promise.resolve(window.fixture.result);
+                        },
+                    };
+                """)
+                page.goto((ROOT / 'desktop' / 'toolbar.html').as_uri())
+                original_svg = page.locator('#capture-tools').evaluate('el => [...el.querySelectorAll("svg")].map(svg => svg.outerHTML)')
+                page.evaluate("locale => fixture.receive({locale, mac:false, state:'idle'})", locale)
+                assert page.locator('html').get_attribute('lang') == locale
+                assert page.evaluate("""locale => {
+                    const t = StandTermDesktopI18n.create(locale).t;
+                    return [...document.querySelectorAll('[data-i18n]')].every(el =>
+                        el.textContent === t(el.dataset.i18n)) && ['title', 'aria-label'].every(attribute =>
+                        [...document.querySelectorAll(`[data-i18n-${attribute}]`)].every(el =>
+                            el.getAttribute(attribute) === t(el.getAttribute(`data-i18n-${attribute}`))));
+                }""", locale)
+                assert page.locator('#capture-tools').evaluate('el => [...el.querySelectorAll("svg")].map(svg => svg.outerHTML)') == original_svg
+                assert page.evaluate("""() => [...document.querySelectorAll('#menus button, #edit-tools button, #capture-tools button')]
+                    .filter(el => !el.hidden).every(el => {
+                        const box = el.getBoundingClientRect(); return box.width > 0 && box.x >= 0 && box.right <= innerWidth;
+                    })""")
+                for state, key in [('recording', 'record_pause'), ('paused', 'record_resume')]:
+                    page.evaluate("state => fixture.receive({state, label:'Fixture 00:04'})", state)
+                    expected = page.evaluate("({locale,key}) => StandTermDesktopI18n.create(locale).t('desktop.toolbar.' + key)", dict(locale=locale, key=key))
+                    assert page.locator('#pause').get_attribute('title') == expected
+                    assert page.locator('#pause').get_attribute('aria-label') == expected
+                    assert page.locator('#recording-status').text_content() == 'Fixture 00:04'
+                page.evaluate("fixture.receive({state:'idle'}); fixture.result = false")
+                page.click('#save')
+                expected = page.evaluate("locale => StandTermDesktopI18n.create(locale).t('desktop.toolbar.action_unavailable')", locale)
+                page.wait_for_function('text => document.getElementById("notice").textContent === text', arg=expected)
+                page.evaluate('fixture.fail = true')
+                page.click('[data-menu="standterm"]')
+                expected = page.evaluate("locale => StandTermDesktopI18n.create(locale).t('desktop.toolbar.action_unconfirmed')", locale)
+                page.wait_for_function('text => document.getElementById("notice").textContent === text', arg=expected)
+                assert page.evaluate('fixture.calls') == ['ready', 'screenshot-file', 'menu:standterm']
+                page.evaluate("fixture.receive({mac:true, notice:'Literal <b>& {value}', noticeId:1})")
+                assert not page.locator('#menus').is_visible()
+                assert page.locator('#notice').text_content() == 'Literal <b>& {value}'
+                assert page.locator('#notice b').count() == 0
+                page.evaluate("fixture.receive({locale:'invalid', mac:false, state:'idle'})")
+                assert page.locator('html').get_attribute('lang') == 'en'
+                assert page.locator('[data-menu="edit"]').text_content() == 'Edit'
+                assert not errors, errors
+                page.close()
+                print(json.dumps({'locale': locale, 'toolbar_dom': 'passed', 'native_ipc': 'mocked'}))
+        finally:
+            browser.close()
+
+
+if __name__ == '__main__':
+    run()
diff --git a/desktop/test/toolbar-notice.test.cjs b/desktop/test/toolbar-notice.test.cjs
index b77f7b4..e302626 100644
--- a/desktop/test/toolbar-notice.test.cjs
+++ b/desktop/test/toolbar-notice.test.cjs
@@ -21,8 +21,9 @@ function fixture(action = 'screenshot-file') {
   let time = 0, next = 0, receive, fail = false, result = true;
   const source = fs.readFileSync(path.join(__dirname, '..', 'toolbar.js'), 'utf8');
   vm.runInNewContext(source, {
-    document: { getElementById: id => elements.get(id), querySelectorAll: () => [elements.get('save')] },
-    window: { desktopToolbar: { onState: callback => { receive = callback; },
+    document: { documentElement: {}, getElementById: id => elements.get(id),
+      querySelectorAll: selector => selector === '[data-action], [data-menu]' ? [elements.get('save')] : [] },
+    window: { StandTermDesktopI18n: require('../i18n.js'), desktopToolbar: { onState: callback => { receive = callback; },
       invoke: action => {
         calls.push(action);
         return fail ? Promise.reject(new Error('Fixture failure')) : Promise.resolve(result);
diff --git a/desktop/test/toolbar.test.cjs b/desktop/test/toolbar.test.cjs
index c856110..be6ba31 100644
--- a/desktop/test/toolbar.test.cjs
+++ b/desktop/test/toolbar.test.cjs
@@ -7,11 +7,12 @@ const path = require('node:path');
 const vm = require('node:vm');
 const { EventEmitter } = require('node:events');
 
-function fixture(platform = 'win32') {
+function fixture(platform = 'win32', locale = 'en') {
   let handler, requestFilter, permission, device, popup = 0, calls = 0, focused;
   const edits = [];
+  const sent = [];
   const contents = new EventEmitter();
-  Object.assign(contents, { mainFrame: {}, isDestroyed: () => false, send: () => {}, setWindowOpenHandler: () => {},
+  Object.assign(contents, { mainFrame: {}, isDestroyed: () => false, send: (_channel, value) => sent.push(value), setWindowOpenHandler: () => {},
     session: { setPermissionRequestHandler: fn => { permission = fn; }, setPermissionCheckHandler: () => {},
       setDevicePermissionHandler: fn => { device = fn; }, webRequest: { onBeforeRequest: fn => { requestFilter = fn; } } } });
   const win = new EventEmitter();
@@ -24,18 +25,18 @@ function fixture(platform = 'win32') {
     ipcMain: { handle: (_name, fn) => { handler = fn; }, removeHandler: () => { handler = null; } },
     Menu: { getApplicationMenu: () => ({ getMenuItemById: () => ({ submenu: { popup: () => { popup++; } } }) }) } };
   vm.runInNewContext(fs.readFileSync(path.join(__dirname, '..', 'toolbar.cjs'), 'utf8'), {
-    require: name => name === 'electron' ? electron : require(name), module: api,
+    require: name => name === 'electron' ? electron : require(name.startsWith('.') ? path.join(__dirname, '..', name) : name), module: api,
     __dirname: path.join(__dirname, '..'), process: { platform },
   });
   const capture = { screenshot: async () => { calls++; }, start: async () => { calls++; },
     togglePause: async () => { calls++; }, stop: async () => { calls++; } };
   const toolbar = api.exports.installToolbar(win, core, capture, {
     refresh: async () => {}, edit: action => { edits.push(action); return true; },
-  });
+  }, locale);
   contents.mainFrame.url = toolbar.url;
   const event = { sender: contents, senderFrame: contents.mainFrame };
   return { invoke: (action, source = event) => handler(source, action), event, win, core, contents, toolbar,
-    unfocus: () => { focused = null; }, calls: () => calls, popup: () => popup, edits,
+    unfocus: () => { focused = null; }, calls: () => calls, popup: () => popup, edits, sent,
     filter: url => new Promise(resolve => requestFilter({ url }, resolve)),
     permission: () => new Promise(resolve => permission(contents, 'media', resolve)), device: () => device() };
 }
@@ -71,7 +72,9 @@ test('toolbar resource and permission boundaries are identical on Windows and ma
   for (const platform of ['win32', 'darwin']) {
     const f = fixture(platform);
     assert.equal((await f.filter(f.toolbar.url)).cancel, false);
-    for (const url of ['https://example.com/', 'http://127.0.0.1:5000/', 'file:///private.txt']) {
+    for (const file of ['messages.js', 'i18n.js']) assert.equal((await f.filter(new URL(file, f.toolbar.url).href)).cancel, false);
+    for (const url of ['https://example.com/', 'http://127.0.0.1:5000/', 'file:///private.txt',
+      new URL('language.cjs', f.toolbar.url).href, new URL('messages.js?locale=zh-TW', f.toolbar.url).href]) {
       assert.equal((await f.filter(url)).cancel, true);
     }
     assert.equal(await f.permission(), false);
@@ -82,3 +85,13 @@ test('toolbar resource and permission boundaries are identical on Windows and ma
     assert.equal(await f.invoke('record'), false);
   }
 });
+
+test('toolbar readiness sends only a normalized locale alongside existing state', async () => {
+  for (const [locale, expected] of [['en', 'en'], ['zh-TW', 'zh-TW'], ['../private', 'en']]) {
+    const f = fixture('win32', locale);
+    assert.equal(await f.invoke('ready'), true);
+    assert.equal(f.sent[0].locale, expected);
+    assert.equal(f.sent[0].state, 'idle');
+    assert.equal(f.calls(), 0);
+  }
+});
diff --git a/desktop/test/ui-commands.test.cjs b/desktop/test/ui-commands.test.cjs
index 26e1228..9439e3d 100644
--- a/desktop/test/ui-commands.test.cjs
+++ b/desktop/test/ui-commands.test.cjs
@@ -16,7 +16,8 @@ test('native clipboard commands preserve the Core editing target and reject stal
     focus: () => calls.push('focus'), copy: () => calls.push('copy'), paste: () => calls.push('paste') };
   const api = { exports: {} };
   vm.runInNewContext(fs.readFileSync(path.join(__dirname, '..', 'ui-commands.cjs'), 'utf8'), {
-    require: name => name === 'electron' ? { BrowserWindow: { getFocusedWindow: () => state.focused ? win : null } } : { allowedNavigation },
+    require: name => name === 'electron' ? { BrowserWindow: { getFocusedWindow: () => state.focused ? win : null } }
+      : name === './policy.cjs' ? { allowedNavigation } : require(path.join(__dirname, '..', name)),
     module: api, setInterval: () => 0, clearInterval: () => {},
   });
   const commands = api.exports.createUiCommands(win, contents, 'http://127.0.0.1:64487');
@@ -33,3 +34,35 @@ test('native clipboard commands preserve the Core editing target and reject stal
   assert.equal(commands.edit('paste'), false);
   assert.equal(calls.length, 4);
 });
+
+test('localized menu labels preserve typed commands, target IDs and focus checks', async () => {
+  for (const locale of ['en', 'zh-TW']) {
+    const calls = [];
+    let focused = true;
+    const win = new EventEmitter();
+    Object.assign(win, { isDestroyed: () => false });
+    const contents = { isDestroyed: () => false, getURL: () => 'http://127.0.0.1:64487/',
+      executeJavaScript: async script => {
+        if (script.includes('.snapshot()')) return { version: 1, ready: true, actions: { newTab: true }, terminalId: 'terminal-1' };
+        calls.push(script); return true;
+      } };
+    const api = { exports: {} };
+    const i18n = require('../i18n.js');
+    vm.runInNewContext(fs.readFileSync(path.join(__dirname, '..', 'ui-commands.cjs'), 'utf8'), {
+      require: name => name === 'electron' ? { BrowserWindow: { getFocusedWindow: () => focused ? win : null } }
+        : name === './policy.cjs' ? { allowedNavigation } : i18n,
+      module: api, setInterval: () => 0, clearInterval: () => {},
+    });
+    const { t } = i18n.create(locale);
+    const commands = api.exports.createUiCommands(win, contents, 'http://127.0.0.1:64487', t);
+    const item = commands.item('newTab');
+    assert.equal(item.id, 'ui-newTab');
+    assert.equal(item.label, t('desktop.menu.new_tab'));
+    assert.equal(await item.click(), true);
+    assert.deepEqual(calls, ['window.standtermUi?.run("newTab", "terminal-1")']);
+    assert.equal(await commands.run(item.label), false);
+    focused = false;
+    assert.equal(await item.click(), false);
+    assert.equal(calls.length, 1);
+  }
+});
diff --git a/desktop/toolbar.cjs b/desktop/toolbar.cjs
index 7b09968..57e9e73 100644
--- a/desktop/toolbar.cjs
+++ b/desktop/toolbar.cjs
@@ -3,15 +3,16 @@
 const { ipcMain, Menu, BrowserWindow } = require('electron');
 const path = require('node:path');
 const { pathToFileURL } = require('node:url');
+const { normalizeLocale } = require('./i18n.js');
 
 const TOOLBAR_HEIGHT = 36;
 const TOOLBAR_URL = pathToFileURL(path.join(__dirname, 'toolbar.html')).href;
-const TOOLBAR_ASSETS = ['toolbar.html', 'toolbar.js', 'toolbar.css'].map(file => pathToFileURL(path.join(__dirname, file)).href);
+const TOOLBAR_ASSETS = ['toolbar.html', 'toolbar.js', 'toolbar.css', 'messages.js', 'i18n.js'].map(file => pathToFileURL(path.join(__dirname, file)).href);
 const TOOLBAR_MENUS = ['standterm', 'edit', 'agent-menu', 'view', 'diagnostics'];
 
-function installToolbar(win, coreView, capture, commands) {
+function installToolbar(win, coreView, capture, commands, locale = 'en') {
   const contents = win.webContents;
-  let state = { mac: process.platform === 'darwin', state: 'idle', label: '' };
+  let state = { mac: process.platform === 'darwin', state: 'idle', label: '', locale: normalizeLocale(locale) };
   let noticeId = 0;
   const send = value => {
     state = { ...state, ...value };
diff --git a/desktop/toolbar.html b/desktop/toolbar.html
index 0a21472..6367d7b 100644
--- a/desktop/toolbar.html
+++ b/desktop/toolbar.html
@@ -7,27 +7,29 @@
   <link rel="stylesheet" href="toolbar.css">
 </head>
 <body>
-  <nav id="menus" aria-label="Application menu">
-    <button data-menu="standterm">StandTerm</button><button data-menu="edit">Edit</button><button data-menu="agent-menu">Agent</button><button data-menu="view">View</button><button data-menu="diagnostics">Diagnostics</button>
+  <nav id="menus" data-i18n-aria-label="desktop.toolbar.application_menu" aria-label="Application menu">
+    <button data-menu="standterm" data-i18n="desktop.toolbar.menu_standterm">StandTerm</button><button data-menu="edit" data-i18n="desktop.toolbar.menu_edit">Edit</button><button data-menu="agent-menu" data-i18n="desktop.toolbar.menu_agent">Agent</button><button data-menu="view" data-i18n="desktop.toolbar.menu_view">View</button><button data-menu="diagnostics" data-i18n="desktop.toolbar.menu_diagnostics">Diagnostics</button>
   </nav>
-  <div id="edit-tools" role="toolbar" aria-label="Clipboard actions">
+  <div id="edit-tools" data-i18n-aria-label="desktop.toolbar.clipboard_actions" role="toolbar" aria-label="Clipboard actions">
     <!-- Original StandTerm geometric SVG artwork; no third-party icon paths. -->
-    <button id="edit-copy" data-action="copy-text" title="Copy selected text (not Ctrl+C)" aria-label="Copy selected text"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M7 16H4V3h11v3"/><rect x="8" y="7" width="12" height="14" rx="1"/></svg></button>
-    <button id="edit-paste" data-action="paste-text" title="Paste clipboard text" aria-label="Paste clipboard text"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M8 5H4v16h16V5h-4M8 12h8M8 16h6"/><rect x="8" y="3" width="8" height="4" rx="1"/></svg></button>
+    <button id="edit-copy" data-i18n-aria-label="desktop.toolbar.copy_label" data-i18n-title="desktop.toolbar.copy_hint" data-action="copy-text" title="Copy selected text (not Ctrl+C)" aria-label="Copy selected text"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M7 16H4V3h11v3"/><rect x="8" y="7" width="12" height="14" rx="1"/></svg></button>
+    <button id="edit-paste" data-i18n-aria-label="desktop.toolbar.paste" data-i18n-title="desktop.toolbar.paste" data-action="paste-text" title="Paste clipboard text" aria-label="Paste clipboard text"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M8 5H4v16h16V5h-4M8 12h8M8 16h6"/><rect x="8" y="3" width="8" height="4" rx="1"/></svg></button>
   </div>
   <span id="notice-area" role="status" aria-live="polite" aria-atomic="true">
     <span id="notice-indicator" aria-hidden="true"></span>
     <span id="notice"></span>
   </span>
   <span id="recording-status" role="status"></span>
-  <div id="capture-tools" role="toolbar" aria-label="Capture the StandTerm terminal view">
+  <div id="capture-tools" data-i18n-aria-label="desktop.toolbar.capture_scope" role="toolbar" aria-label="Capture the terminal view">
     <!-- Original StandTerm geometric SVG artwork; no third-party icon paths. -->
-    <button id="save" data-action="screenshot-file" title="Save screenshot (PNG)" aria-label="Save screenshot (PNG)"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M14 4H3v15h9M3 14l4-4 5 5 2-2M18 9v12m-4-4 4 4 4-4"/><circle cx="11" cy="8" r="1"/></svg></button>
-    <button id="copy" data-action="screenshot-clipboard" title="Copy screenshot to clipboard" aria-label="Copy screenshot to clipboard"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M8 5H3v14h7M3 14l4-4 3 3M14 7h-3v15h11V7h-3"/><rect x="14" y="5" width="5" height="4" rx="1"/></svg></button>
-    <button id="record" data-action="record" title="Start silent recording (WebM)" aria-label="Start silent recording (WebM)"><svg viewBox="0 0 24 24" aria-hidden="true"><circle cx="12" cy="12" r="7"/></svg></button>
-    <button id="pause" data-action="pause-recording" title="Pause recording" aria-label="Pause recording" hidden><svg viewBox="0 0 24 24" aria-hidden="true"><path id="pause-shape" d="M8 5v14M16 5v14"/></svg></button>
-    <button id="stop" data-action="stop-recording" title="Stop and save recording" aria-label="Stop and save recording" hidden><svg viewBox="0 0 24 24" aria-hidden="true"><rect x="5" y="5" width="14" height="14" rx="1"/></svg></button>
+    <button id="save" data-i18n-aria-label="desktop.toolbar.screenshot_save" data-i18n-title="desktop.toolbar.screenshot_save" data-action="screenshot-file" title="Save screenshot (PNG)" aria-label="Save screenshot (PNG)"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M14 4H3v15h9M3 14l4-4 5 5 2-2M18 9v12m-4-4 4 4 4-4"/><circle cx="11" cy="8" r="1"/></svg></button>
+    <button id="copy" data-i18n-aria-label="desktop.toolbar.screenshot_copy" data-i18n-title="desktop.toolbar.screenshot_copy" data-action="screenshot-clipboard" title="Copy screenshot to clipboard" aria-label="Copy screenshot to clipboard"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M8 5H3v14h7M3 14l4-4 3 3M14 7h-3v15h11V7h-3"/><rect x="14" y="5" width="5" height="4" rx="1"/></svg></button>
+    <button id="record" data-i18n-aria-label="desktop.toolbar.record_start" data-i18n-title="desktop.toolbar.record_start" data-action="record" title="Start recording (WebM, no audio)" aria-label="Start recording (WebM, no audio)"><svg viewBox="0 0 24 24" aria-hidden="true"><circle cx="12" cy="12" r="7"/></svg></button>
+    <button id="pause" data-i18n-aria-label="desktop.toolbar.record_pause" data-i18n-title="desktop.toolbar.record_pause" data-action="pause-recording" title="Pause recording" aria-label="Pause recording" hidden><svg viewBox="0 0 24 24" aria-hidden="true"><path id="pause-shape" d="M8 5v14M16 5v14"/></svg></button>
+    <button id="stop" data-i18n-aria-label="desktop.toolbar.record_stop" data-i18n-title="desktop.toolbar.record_stop" data-action="stop-recording" title="Stop and save recording" aria-label="Stop and save recording" hidden><svg viewBox="0 0 24 24" aria-hidden="true"><rect x="5" y="5" width="14" height="14" rx="1"/></svg></button>
   </div>
+  <script src="messages.js"></script>
+  <script src="i18n.js"></script>
   <script src="toolbar.js"></script>
 </body>
 </html>
diff --git a/desktop/toolbar.js b/desktop/toolbar.js
index 104bbe1..37a8f38 100644
--- a/desktop/toolbar.js
+++ b/desktop/toolbar.js
@@ -1,6 +1,8 @@
 'use strict';
 
 const byId = id => document.getElementById(id);
+let i18n = window.StandTermDesktopI18n.create('en');
+let appliedLocale;
 let lastNoticeId = 0;
 let noticeTimer;
 function showNotice(message, error = false) {
@@ -24,13 +26,19 @@ for (const button of document.querySelectorAll('[data-action], [data-menu]')) {
   button.addEventListener('click', () => {
     const action = button.dataset.action || `menu:${button.dataset.menu}`;
     window.desktopToolbar.invoke(action).then(result => {
-      if (result === false) showNotice('Action unavailable in the current window state.', true);
+      if (result === false) showNotice(i18n.t('desktop.toolbar.action_unavailable'), true);
     }).catch(() => {
-      showNotice('Could not confirm the action result. Check the current state.', true);
+      showNotice(i18n.t('desktop.toolbar.action_unconfirmed'), true);
     });
   });
 }
 window.desktopToolbar.onState(state => {
+  if (typeof state.locale === 'string' && state.locale !== appliedLocale) {
+    i18n = window.StandTermDesktopI18n.create(state.locale);
+    appliedLocale = state.locale;
+    document.documentElement.lang = i18n.locale;
+    i18n.apply(document);
+  }
   if (typeof state.mac === 'boolean') {
     byId('menus').hidden = state.mac;
   }
@@ -47,7 +55,7 @@ window.desktopToolbar.onState(state => {
   byId('stop').disabled = !stoppable;
   byId('save').disabled = byId('copy').disabled = state.screenshotBusy === true;
   byId('recording-status').textContent = active ? state.label : '';
-  const pauseLabel = state.state === 'paused' ? 'Resume recording' : 'Pause recording';
+  const pauseLabel = i18n.t(state.state === 'paused' ? 'desktop.toolbar.record_resume' : 'desktop.toolbar.record_pause');
   byId('pause').title = pauseLabel;
   byId('pause').setAttribute('aria-label', pauseLabel);
   byId('pause-shape').setAttribute('d', state.state === 'paused' ? 'M7 4l13 8-13 8z' : 'M8 5v14M16 5v14');
diff --git a/desktop/ui-commands.cjs b/desktop/ui-commands.cjs
index c56c71a..bdef687 100644
--- a/desktop/ui-commands.cjs
+++ b/desktop/ui-commands.cjs
@@ -2,14 +2,15 @@
 
 const { BrowserWindow, Menu } = require('electron');
 const { allowedNavigation } = require('./policy.cjs');
+const { create } = require('./i18n.js');
 
 const UI_ACTIONS = Object.freeze({
-  settings: 'Settings...', newTab: 'New terminal tab', closeTab: 'Close terminal tab',
-  closeAll: 'Close all terminal tabs...', files: 'Files...', pip: 'Terminal to PiP',
-  agentPanel: 'Show / hide Agent Panel', pauseAgent: 'Pause Agent for current terminal',
+  settings: 'desktop.menu.settings', newTab: 'desktop.menu.new_tab', closeTab: 'desktop.menu.close_tab',
+  closeAll: 'desktop.menu.close_all', files: 'desktop.menu.files', pip: 'desktop.menu.pip',
+  agentPanel: 'desktop.menu.agent_panel', pauseAgent: 'desktop.menu.pause_agent',
 });
 
-function createUiCommands(win, contents, origin) {
+function createUiCommands(win, contents, origin, t = create('en').t) {
   let refreshing = false;
   const current = () => !win.isDestroyed() && !contents.isDestroyed() && allowedNavigation(contents.getURL(), origin);
   const focused = () => current() && BrowserWindow.getFocusedWindow() === win;
@@ -54,7 +55,7 @@ function createUiCommands(win, contents, origin) {
   win.on('blur', () => { void refresh(); });
   return {
     run, refresh, edit,
-    item: action => ({ id: `ui-${action}`, label: UI_ACTIONS[action], enabled: false, click: () => run(action) }),
+    item: action => ({ id: `ui-${action}`, label: t(UI_ACTIONS[action]), enabled: false, click: () => run(action) }),
   };
 }
 
diff --git a/docs/desktop_ui_copy_review.tsv b/docs/desktop_ui_copy_review.tsv
index 54d4c70..60b3885 100644
--- a/docs/desktop_ui_copy_review.tsv
+++ b/docs/desktop_ui_copy_review.tsv
@@ -1,29 +1,29 @@
 key	current_en	en	zh-TW	context	placeholders	constraints	status	source
-desktop.toolbar.application_menu	Application menu	Application menu		Navigation accessible name; custom menu captions are separate entries.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
-desktop.toolbar.clipboard_actions	Clipboard actions	Clipboard actions		Clipboard toolbar accessible name.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
-desktop.toolbar.copy_hint	Copy selected text (not Ctrl+C)	Copy selected text (not Ctrl+C)		Native clipboard copy, not terminal interrupt input; retain the distinction.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
-desktop.toolbar.copy_label	Copy selected text	Copy selected text		Accessible name of native clipboard copy.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
-desktop.toolbar.paste	Paste clipboard text	Paste clipboard text		Native clipboard paste into the Core editing target.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
-desktop.toolbar.capture_scope	Capture the StandTerm terminal view	Capture the terminal view		Capture toolbar accessible name; scope stays the Core view, not the whole desktop.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
-desktop.toolbar.screenshot_save	Save screenshot (PNG)	Save screenshot (PNG)		Screenshot file action; initial folder selection is separate.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
-desktop.toolbar.screenshot_copy	Copy screenshot to clipboard	Copy screenshot to clipboard		Screenshot clipboard action; distinct from copying selected text.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
-desktop.toolbar.record_start	Start silent recording (WebM)	Start recording (WebM, no audio)		Recording start button; preserve silent capture scope.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
-desktop.toolbar.record_pause	Pause recording	Pause recording		Recording pause state, not Pause Agent.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
-desktop.toolbar.record_stop	Stop and save recording	Stop and save recording		Requests stop/save; this label alone is not a save-success notification.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	proposed	desktop/toolbar.html
-desktop.toolbar.record_resume	Resume recording	Resume recording		Dynamic pause-button label for typed paused state.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks. Select by state.state, never translated label.	proposed	desktop/toolbar.js:onState
-desktop.toolbar.action_unavailable	Action unavailable in the current window state.	Action unavailable in the current window state.		Notice for an explicit false result from the toolbar action handler. English feedback implemented in order 0; localization remains proposed.		Handle exactly false. Invoke once; do not replay. Do not reinterpret true as proof that output was saved.	proposed	desktop/toolbar.js:click handler; desktop/toolbar.cjs:standterm-toolbar-action
-desktop.toolbar.action_unconfirmed	Could not confirm the action result. Check the current state.	Could not confirm the action result. Check the current state.		Rejected IPC promise: operation outcome is uncertain. English feedback implemented in order 0; localization remains proposed.		Keep exception handling distinct from explicit false. Invoke once; never automatically retry or claim the action did not happen.	proposed	desktop/toolbar.js:click handler
-desktop.menu.settings	Settings...	Settings...		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
-desktop.menu.new_tab	New terminal tab	New terminal tab		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
-desktop.menu.close_tab	Close terminal tab	Close terminal tab		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
-desktop.menu.close_all	Close all terminal tabs...	Close all terminal tabs...		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
-desktop.menu.files	Files...	Files...		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
-desktop.menu.pip	Terminal to PiP	Open terminal in PiP		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
-desktop.menu.agent_panel	Show / hide Agent Panel	Show / hide Agent Panel		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
-desktop.menu.pause_agent	Pause Agent for current terminal	Pause Agent for current terminal		Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	proposed	desktop/ui-commands.cjs:UI_ACTIONS
-desktop.agent.help_title	Give your agent a StandTerm prompt	Connect your agent to StandTerm		Getting-started dialog heading; descriptive text alone grants no access.		Keep permission requirements in the accompanying instructions. Do not expand public Agent Info.	proposed	desktop/main.cjs:agentMenu.showHelp
-desktop.agent.help_permissions	Select the tab where your agent runs. Use Agent Panel to enable access and choose permissions on each tab it may operate.	Select the tab where your agent runs. In Agent Panel, enable access and choose permissions for each tab it may operate.		First paragraph of Agent help; caller tab and permitted target tabs can differ.		Keep per-tab authorization, local/SSH distinction and current permission defaults. No implicit cross-tab grants.	proposed	desktop/main.cjs:agentMenu.showHelp
-desktop.agent.help_connection	Open Agent connection, choose Copy Prompt, and paste it into your agent with the intended task. Follow the environment shown in that dialog.	Open Agent connection, choose Copy Prompt, and paste it into your agent with the task. Follow the environment shown in the dialog.		Connection-instructions paragraph; SSH/local setup remains in the preceding paragraph.		Match the actual Core control names, including Copy Prompt; retain environment/target guidance. Do not translate or modify the copied prompt payload here.	proposed	desktop/main.cjs:agentMenu.showHelp
+desktop.toolbar.application_menu	Application menu	Application menu	應用程式選單	Navigation accessible name; custom menu captions are separate entries.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	translation-reviewed	desktop/toolbar.html
+desktop.toolbar.clipboard_actions	Clipboard actions	Clipboard actions	剪貼簿操作	Clipboard toolbar accessible name.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	translation-reviewed	desktop/toolbar.html
+desktop.toolbar.copy_hint	Copy selected text (not Ctrl+C)	Copy selected text (not Ctrl+C)	複製選取文字（不送出 Ctrl+C）	Native clipboard copy, not terminal interrupt input; retain the distinction.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	translation-reviewed	desktop/toolbar.html
+desktop.toolbar.copy_label	Copy selected text	Copy selected text	複製選取文字	Accessible name of native clipboard copy.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	translation-reviewed	desktop/toolbar.html
+desktop.toolbar.paste	Paste clipboard text	Paste clipboard text	貼上剪貼簿文字	Native clipboard paste into the Core editing target.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	translation-reviewed	desktop/toolbar.html
+desktop.toolbar.capture_scope	Capture the StandTerm terminal view	Capture the terminal view	擷取終端畫面	Capture toolbar accessible name; scope stays the Core view, not the whole desktop.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	translation-reviewed	desktop/toolbar.html
+desktop.toolbar.screenshot_save	Save screenshot (PNG)	Save screenshot (PNG)	儲存截圖（PNG）	Screenshot file action; initial folder selection is separate.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	translation-reviewed	desktop/toolbar.html
+desktop.toolbar.screenshot_copy	Copy screenshot to clipboard	Copy screenshot to clipboard	複製截圖至剪貼簿	Screenshot clipboard action; distinct from copying selected text.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	translation-reviewed	desktop/toolbar.html
+desktop.toolbar.record_start	Start silent recording (WebM)	Start recording (WebM, no audio)	開始錄影（WebM，無音訊）	Recording start button; preserve silent capture scope.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	translation-reviewed	desktop/toolbar.html
+desktop.toolbar.record_pause	Pause recording	Pause recording	暫停錄影	Recording pause state, not Pause Agent.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	translation-reviewed	desktop/toolbar.html
+desktop.toolbar.record_stop	Stop and save recording	Stop and save recording	停止並儲存錄影	Requests stop/save; this label alone is not a save-success notification.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks.	translation-reviewed	desktop/toolbar.html
+desktop.toolbar.record_resume	Resume recording	Resume recording	繼續錄影	Dynamic pause-button label for typed paused state.		Translate title/aria-label only; preserve SVG children, dataset action, fixed IPC IDs and focus checks. Select by state.state, never translated label.	translation-reviewed	desktop/toolbar.js:onState
+desktop.toolbar.action_unavailable	Action unavailable in the current window state.	Action unavailable in the current window state.	目前的視窗狀態無法執行此操作。	Notice for an explicit false result from the toolbar action handler. English feedback implemented in order 0; included in the localization pilot.		Handle exactly false. Invoke once; do not replay. Do not reinterpret true as proof that output was saved.	translation-reviewed	desktop/toolbar.js:click handler; desktop/toolbar.cjs:standterm-toolbar-action
+desktop.toolbar.action_unconfirmed	Could not confirm the action result. Check the current state.	Could not confirm the action result. Check the current state.	無法確認操作結果。請檢查目前狀態。	Rejected IPC promise: operation outcome is uncertain. English feedback implemented in order 0; included in the localization pilot.		Keep exception handling distinct from explicit false. Invoke once; never automatically retry or claim the action did not happen.	translation-reviewed	desktop/toolbar.js:click handler
+desktop.menu.settings	Settings...	Settings...	設定…	Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	translation-reviewed	desktop/ui-commands.cjs:UI_ACTIONS
+desktop.menu.new_tab	New terminal tab	New terminal tab	新增終端分頁	Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	translation-reviewed	desktop/ui-commands.cjs:UI_ACTIONS
+desktop.menu.close_tab	Close terminal tab	Close terminal tab	關閉終端分頁	Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	translation-reviewed	desktop/ui-commands.cjs:UI_ACTIONS
+desktop.menu.close_all	Close all terminal tabs...	Close all terminal tabs...	關閉所有終端分頁…	Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	translation-reviewed	desktop/ui-commands.cjs:UI_ACTIONS
+desktop.menu.files	Files...	Files...	檔案…	Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	translation-reviewed	desktop/ui-commands.cjs:UI_ACTIONS
+desktop.menu.pip	Terminal to PiP	Open terminal in PiP	以子母畫面開啟終端	Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	translation-reviewed	desktop/ui-commands.cjs:UI_ACTIONS
+desktop.menu.agent_panel	Show / hide Agent Panel	Show / hide Agent Panel	顯示／隱藏 Agent 面板	Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	translation-reviewed	desktop/ui-commands.cjs:UI_ACTIONS
+desktop.menu.pause_agent	Pause Agent for current terminal	Pause Agent for current terminal	暫停目前終端的 Agent	Custom UI_ACTIONS menu label; preserve target scope and existing confirmation behavior.		Keep UI_ACTIONS keys, ui-* IDs, action availability, terminalId, accelerators and focus/origin checks unchanged. Do not dispatch by label.	translation-reviewed	desktop/ui-commands.cjs:UI_ACTIONS
+desktop.agent.help_title	Give your agent a StandTerm prompt	Connect your agent to StandTerm	讓 Agent 連線至 StandTerm	Getting-started dialog heading; descriptive text alone grants no access.		Keep permission requirements in the accompanying instructions. Do not expand public Agent Info. Desktop and Core may use different languages; keep the English Core control names recognizable alongside Chinese labels.	translation-reviewed	desktop/main.cjs:agentMenu.showHelp
+desktop.agent.help_permissions	Select the tab where your agent runs. Use Agent Panel to enable access and choose permissions on each tab it may operate.	Select the tab where your agent runs. In Agent Panel, enable access and choose permissions for each tab it may operate.	選取 Agent 所在的分頁。在 Agent 面板（Agent Panel）中，逐一為 Agent 可操作的分頁啟用存取並選擇權限。	First paragraph of Agent help; caller tab and permitted target tabs can differ.		Keep per-tab authorization, local/SSH distinction and current permission defaults. No implicit cross-tab grants. Desktop and Core may use different languages; keep the English Core control names recognizable alongside Chinese labels.	translation-reviewed	desktop/main.cjs:agentMenu.showHelp
+desktop.agent.help_connection	Open Agent connection, choose Copy Prompt, and paste it into your agent with the intended task. Follow the environment shown in that dialog.	Open Agent connection, choose Copy Prompt, and paste it into your agent with the task. Follow the environment shown in the dialog.	開啟「Agent 連線」（Agent connection），選擇「複製連線指引」（Copy Prompt），再將指引連同任務貼給 Agent。請依對話框顯示的環境操作。	Connection-instructions paragraph; SSH/local setup remains in the preceding paragraph.		Match the actual Core control names, including Copy Prompt; retain environment/target guidance. Do not translate or modify the copied prompt payload here. Desktop and Core may use different languages; keep the English Core control names recognizable alongside Chinese labels.	translation-reviewed	desktop/main.cjs:agentMenu.showHelp
 desktop.capture.folder_policy	Future captures save here automatically. Change this in StandTerm > Capture Settings.	Future files of this capture type save here automatically. Change the folder in Capture Settings.		Folder chooser message. PNG and WebM have separate saved folder preferences; this is a retained per-type choice, not a one-off Save As path. The first folder selection also seeds the other format if unset; later choices update only the selected format.		Keep extension values png/webm and chosen filesystem path literal. Cancel still returns null; do not change folder persistence or auto-save behavior. Preserve first-choice seeding; do not describe the two preferences as fully independent.	proposed	desktop/capture.cjs:chooseDirectory:94-103
 desktop.capture.settings_detail	Screenshots: {screenshot_folder}\nRecordings: {recording_folder}\n\nPNG screenshots and silent WebM recordings are saved automatically.	Screenshots: {screenshot_folder}\nRecordings: {recording_folder}\n\nPNG screenshots and WebM recordings save to these folders. Recordings have no audio.		Capture Settings detail. Resolve the two current unset-folder labels separately in the later full catalog pass; this row preserves raw folder paths.	{screenshot_folder}, {recording_folder}	Keep response indices 0 Done, 1 screenshot-folder chooser, 2 recording-folder chooser, 3 open screenshot folder, 4 open recording folder. defaultId=0 and cancelId=0. No action inference from labels.	proposed	desktop/capture.cjs:configure:110-121
 desktop.capture.capture_failed	The terminal view could not be captured. Bring StandTerm to the foreground and retry. Window state is available in Diagnostics.	Could not capture the terminal view. Bring StandTerm to the foreground and try again. Check Diagnostics if it still fails.		Screenshot capturePage or empty-image failure before file output begins; retained diagnostic includes window state.		Preserve original Error cause and diagnostic fields. No automatic retry, focus manipulation, or capture-scope expansion.	proposed	desktop/capture.cjs:screenshot:136-146
@@ -44,3 +44,28 @@ desktop.core_source.failure_choices	The Desktop shell can retry or restore its i
 desktop.browser_access.opened	Browser authorization opened in the default browser.	Authorization link opened in the default browser.		Success notice after awaiting OS open callback; browser authorization has not been observed as completed.		Keep action open distinct from copy-auth/copy-url/copy-token; retain existing confirmation. Do not claim the browser is authorized or reveal the URL/token in the notice.	proposed	desktop/browser-access.cjs:createBrowserAccess.run:46-62
 desktop.browser_access.copied	Access information copied. Treat it as a password.	Access information copied. Keep it private, like a password.		Shared notice for copied authorization URL, access URL, or access token; the copied payload is sensitive.		Keep exact clipboard payload and fixed action IDs; do not insert secrets into catalog parameters, logs or notifications. No extra mint, reveal, or retry.	proposed	desktop/browser-access.cjs:createBrowserAccess.run:58-62
 desktop.browser_access.failed	Could not prepare browser access. Check that this Desktop backend is still running.	Could not prepare browser access. Check that this Desktop backend is running.		Sanitized generic failure notice; implementation deliberately discards URL-bearing network errors.		Preserve generic failure and error=true notification. Never display raw caught errors, URLs, grants or tokens. Keep pending/available guards and no automatic retry.	proposed	desktop/browser-access.cjs:createBrowserAccess.run catch:64-67
+desktop.toolbar.menu_standterm	StandTerm	StandTerm	StandTerm	Visible toolbar menu caption for data-menu=standterm.		Translate textContent only. Preserve data-menu, menu IDs, IPC routing and the macOS visibility rule.	translation-reviewed	desktop/toolbar.html:12
+desktop.toolbar.menu_edit	Edit	Edit	編輯	Visible toolbar menu caption for data-menu=edit.		Translate textContent only. Preserve data-menu, menu IDs, IPC routing and the macOS visibility rule.	translation-reviewed	desktop/toolbar.html:12
+desktop.toolbar.menu_agent	Agent	Agent	Agent	Visible toolbar menu caption for data-menu=agent-menu.		Translate textContent only. Preserve data-menu, menu IDs, IPC routing and the macOS visibility rule.	translation-reviewed	desktop/toolbar.html:12
+desktop.toolbar.menu_view	View	View	檢視	Visible toolbar menu caption for data-menu=view.		Translate textContent only. Preserve data-menu, menu IDs, IPC routing and the macOS visibility rule.	translation-reviewed	desktop/toolbar.html:12
+desktop.toolbar.menu_diagnostics	Diagnostics	Diagnostics	診斷	Visible toolbar menu caption for data-menu=diagnostics.		Translate textContent only. Preserve data-menu, menu IDs, IPC routing and the macOS visibility rule.	translation-reviewed	desktop/toolbar.html:12
+desktop.agent.menu_title	Agent	Agent	Agent	Custom native Agent submenu title.		Keep Agent in English and id=agent-menu unchanged. Do not dispatch by label.	translation-reviewed	desktop/agent-menu.cjs:4
+desktop.agent.getting_started	Getting started...	Getting started…	開始使用…	Agent help menu item; opens the existing informational dialog.		Preserve id=agent-help, showHelp callback and UI action order. Opening help grants no access.	translation-reviewed	desktop/agent-menu.cjs:6
+desktop.agent.help_environment	For an SSH agent, start Agent Tunnel on its SSH tab. Agent connection appears after setup succeeds. For a local agent, use Authorize agent on each intended tab.	For an Agent running on an SSH host, start Agent Tunnel on its SSH tab. Agent connection appears after setup succeeds. For a local Agent, use Authorize agent on each intended tab.	若 Agent 在 SSH 遠端執行，請在其 SSH 分頁啟動 Agent 通道（Agent Tunnel）。設定成功後會出現「Agent 連線」（Agent connection）。若 Agent 在本機執行，請在每個預定操作的分頁選擇「授權 Agent」（Authorize agent）。	Complete SSH/local paragraph between the per-tab permission and Copy Prompt instructions.		Preserve the SSH carrier tab, successful-setup prerequisite, per-target authorization and local/SSH distinction. Keep English Core control names for independently selected Desktop/Core languages. Do not imply setup authorizes additional tabs.	translation-reviewed	desktop/main.cjs:414-415:agentMenu.showHelp
+desktop.agent.help_skills	Skills do not need to be installed first. The prompt leads to the bundled skills and helpers; Agent Info also provides installation instructions when persistent skills are wanted.	Skills do not need to be installed first. The prompt leads to bundled skills and helpers. Agent Info also provides installation instructions for persistent skills.	不必先安裝技能（skills）。連線指引會引導 Agent 使用隨附的技能與輔助工具；若希望安裝後持續使用技能，Agent Info 也提供安裝說明。	Complete final Agent help paragraph about optional skill installation and bundled helpers.		Keep Agent Info recognizable. Preserve optional installation, bundled-skill/helper guidance and the distinction between copying instructions and installing skills. Do not modify prompt contents or imply automatic installation.	translation-reviewed	desktop/main.cjs:418-419:agentMenu.showHelp
+desktop.common.cancel	Cancel	Cancel	取消	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
+desktop.common.ok	OK	OK	確定	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
+desktop.language.menu		Desktop language...	Desktop 語系…	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
+desktop.language.title		Desktop language	Desktop 語系	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
+desktop.language.choose		Choose the Desktop language for the next launch.	選擇下次啟動時使用的 Desktop 語系。	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
+desktop.language.detail		Saved choice: {language}\n\nCore has its own language setting. Some Desktop text remains in English.	已儲存的選擇：{language}\n\nCore 的語系需另外設定。部分 Desktop 文字仍使用英文。	Desktop language dialog; language names are self-names in both locales.	{language}	Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
+desktop.language.saved		Language saved. It applies the next time you launch StandTerm.	已儲存語系，下次啟動 StandTerm 時生效。	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
+desktop.language.failed		Could not confirm the language setting. Reopen Desktop language to check the saved choice.	無法確認語系設定。請重新開啟「Desktop 語系」查看已儲存的選擇。	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
+desktop.language.name_en		English	English	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
+desktop.language.name_zh_tw		繁體中文	繁體中文	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
+desktop.menu.open	Open StandTerm	Open StandTerm	開啟 StandTerm	Custom main/tray menu label; destination dialog may remain English during the pilot.		Translate display label only. Keep callbacks, accelerators, native roles and action IDs unchanged.	translation-reviewed	desktop/main.cjs:createTray/start
+desktop.menu.show	Show window	Show window	顯示視窗	Custom main/tray menu label; destination dialog may remain English during the pilot.		Translate display label only. Keep callbacks, accelerators, native roles and action IDs unchanged.	translation-reviewed	desktop/main.cjs:createTray/start
+desktop.menu.quit	Quit StandTerm	Quit StandTerm	結束 StandTerm	Custom main/tray menu label; destination dialog may remain English during the pilot.		Translate display label only. Keep callbacks, accelerators, native roles and action IDs unchanged.	translation-reviewed	desktop/main.cjs:createTray/start
+desktop.menu.about	About StandTerm Desktop	About StandTerm Desktop	關於 StandTerm Desktop	Custom main/tray menu label; destination dialog may remain English during the pilot.		Translate display label only. Keep callbacks, accelerators, native roles and action IDs unchanged.	translation-reviewed	desktop/main.cjs:createTray/start
+desktop.menu.core_source	Core source (Advanced)...	Core source (Advanced)...	Core 來源（進階）…	Custom main/tray menu label; destination dialog may remain English during the pilot.		Translate display label only. Keep callbacks, accelerators, native roles and action IDs unchanged.	translation-reviewed	desktop/main.cjs:createTray/start
+desktop.menu.capture_settings	Capture Settings...	Capture Settings...	畫面擷取設定…	Custom main/tray menu label; destination dialog may remain English during the pilot.		Translate display label only. Keep callbacks, accelerators, native roles and action IDs unchanged.	translation-reviewed	desktop/main.cjs:createTray/start
diff --git a/docs/desktop_ui_review_plan.md b/docs/desktop_ui_review_plan.md
index 844b25d..7009093 100644
--- a/docs/desktop_ui_review_plan.md
+++ b/docs/desktop_ui_review_plan.md
@@ -2,7 +2,8 @@
 
 Review date: 2026-09-20. The initial review inventories Desktop copy, reviews
 behavior and orders implementation. Completed implementation steps are recorded
-below; a Desktop language setting is not yet enabled. Browser acceptance is recorded separately in
+below. The Desktop language pilot is available; broader translation and native
+acceptance remain separate. Browser acceptance is recorded in
 [browser_ui_acceptance.md](browser_ui_acceptance.md).
 
 ## Recommended implementation order
@@ -10,12 +11,13 @@ below; a Desktop language setting is not yet enabled. Browser acceptance is reco
 | Order | Deliverable | Relative effort | Completion evidence |
 | --- | --- | --- | --- |
 | 0 — Complete | Clarify toolbar action feedback before localization. A resolved `false` now shows unavailable feedback; a rejected invocation reports an uncertain result without suggesting retry. | Small | Both original failures reproduced before the fix; renderer and command-guard checks passed. Each click invokes once, with no automatic replay or invented completion notice. |
-| 1 | Add a Desktop-owned language preference and catalog; pilot custom menus, toolbar labels and Agent help. | Medium | English default/fallback, `en` and `zh-TW`, malformed preference fallback, next-launch application, translated title/ARIA labels without losing SVGs, fixed command IDs, focus/origin guards and explicit packaged asset inventory. |
+| 1 — Complete | Add a Desktop-owned language preference and catalog; pilot custom menus, toolbar labels and Agent help. | Medium | English default/fallback, `en` and `zh-TW`, malformed preference fallback, next-launch application, translated title/ARIA labels without losing SVGs, fixed command IDs, focus/origin guards and staging inclusion verified. Native acceptance remains order 4. |
 | 2 | Review and localize Capture, Browser Access and Diagnostics. Resolve the recording save-failure exit policy before the Capture portion. | Medium | Typed recording states, partial-file paths, cancel/default buttons, first-folder seeding, sensitive clipboard feedback and escaped diagnostic fields retain their contracts. Add combined save-failure plus close/quit coverage. |
 | 3 | Localize setup, Core source selection, startup failure and recoverable environment cleanup. | Medium to large | Both languages work before Core is available. Cancellation waits for owned installers; stale confirmations do nothing; source switching, restart/session closure, retained files and recovery moves remain explicit. |
 | 4 | Complete Windows and macOS native acceptance and packaged asset checks. | Platform-dependent | Menus, native dialogs, narrow layouts, keyboard/ARIA labels, clipboard, setup and recovery are checked on each OS. Verify staged and packaged Desktop catalogs independently of the selected Core version. |
 
-The next implementation is the language preference and small pilot in order 1.
+The next implementation is Browser Access/Diagnostics and then Capture in order 2.
+Resolve the recording save-failure exit policy before changing its confirmation.
 Orders 1–3 should remain separate reviewable changes. First-run setup can move
 ahead of order 2 if onboarding becomes the priority; it is not required to prove
 the small localization pilot.
@@ -28,19 +30,21 @@ scriptless diagnostics. A complete Desktop rollout has moderate implementation
 cost and broader acceptance cost than the toolbar pilot. The estimates above
 are relative scope assessments, not measured delivery times.
 
-Recommend storing the Desktop language in the existing profile's `userData`,
+The pilot stores the Desktop language in `language.json` under the existing profile's `userData`,
 with English as default and only `en` / `zh-TW` initially. Apply a change on the
 next launch; changing language should not itself restart StandTerm or stop a
 recording. Keep the existing Core browser preference independent. This covers
 setup and recovery before Core starts, at the cost of two language preferences.
-It is a proposed product choice, not a security requirement. A validated
+It is a product choice, not a security requirement. A validated
 two-value advisory preference from Core is also feasible, but needs startup,
 origin and older-Core fallback rules. Automatic OS-language selection is deferred.
 
 Ship the Desktop catalog with the shell. Do not depend on the selected bundled
 or Git Core supplying compatible renderer scripts. Reuse the existing TSV
-schema and validation rules; extend generator support minimally when integration
-starts. Do not add the Desktop rows to the Core runtime catalog.
+schema and validation rules. `build_ui_messages.py --desktop` produces
+`desktop/messages.js`; the default command still produces only Core's catalog.
+The headless smoke runner checks both targets. Do not add the Desktop rows to
+the Core runtime catalog.
 
 Keep these implementation boundaries:
 
@@ -64,11 +68,13 @@ Keep these implementation boundaries:
 
 [desktop_ui_copy_review.tsv](desktop_ui_copy_review.tsv) is a prioritized seed
 inventory, not a claim that every Desktop string has been extracted. It uses
-the same nine columns as the browser table. All initial rows are `proposed`;
-`zh-TW` is empty. Some `current_en` cells are exact fragments or normalize
+the same nine columns as the browser table. After the pilot, 50 rows are
+`translation-reviewed` with English and Traditional Chinese text; 20 workflow
+rows remain `proposed` with empty `zh-TW` cells. Some `current_en` cells are exact fragments or normalize
 dynamic values to named placeholders; `context` identifies these cases.
 
-Approve the English behavior and terminology before requesting translations.
+Approve the English behavior and terminology before requesting translations of
+the remaining proposed rows. Keep already reviewed rows unchanged.
 An external translation AI should return the same keys/order/columns, fill only
 `zh-TW`, preserve placeholders and literal identifiers, and keep `status`
 unchanged. Human/source review promotes rows to `translation-reviewed`; a
@@ -122,8 +128,44 @@ limited public Agent Info, per-tab permission instructions, exact renderer
 allowlists and recoverable cleanup. No discovery expansion is needed for
 Desktop localization.
 
+## Pilot review and evidence
+
+The independent implementation review accepted the preference lifetime, numeric
+dialog responses, typed commands and exact renderer asset boundaries. Its only
+copy finding changed the language dialog from “Some Desktop dialogs remain in
+English” to “Some Desktop text remains in English”: recording status and some
+menus are also outside this pilot. The focused second pass found no material
+remaining gap in the new preference, DOM and command tests.
+
+| Finding | Severity | Evidence | Critic remedy | Main response | Resolution | Validation |
+| --- | --- | --- | --- | --- | --- | --- |
+| Partial coverage disclosure mentions dialogs only | Low | `toolbar.js` preserves raw capture status; View retains capture menu labels | Say some Desktop text remains English | Applied to both languages | Accept | Reviewed TSV and regenerated catalog. |
+| Save can finish before its notification fails | Validation boundary | `language.cjs:choose` persists before notification | Verify saved choice survives notification failure | Keep uncertain-result wording and the stored selection | Accept | Lost-notification test plus reopening the chooser passed. |
+| Labels must not change action or target dispatch | Correctness boundary | `ui-commands.cjs` action and snapshot target | Test both locales with unchanged dispatch values | Retained existing guards | Accept | Typed command/terminal ID, invalid display-label dispatch and focus tests passed. |
+
+No policy was reopened. Core's independent language preference and the existing
+recording-exit behavior remain intact. Native OS qualification is still order 4.
+
 ## Evidence and acceptance limits
 
+Order 1 completed on 2026-09-20 with 50 reviewed bilingual messages:
+
+- All 110 Desktop unit tests passed under Electron's Node 24.20.0 runtime.
+- Seven catalog regression tests passed, including independent Desktop output
+  and stale detection without changing Core output. Both generated catalogs
+  passed their freshness checks.
+- The real toolbar DOM passed in English and Traditional Chinese at 640px:
+  labels, ARIA, SVG preservation, typed recording state, literal notices,
+  failure feedback without replay and unknown-locale fallback. Native IPC was
+  mocked in this headless Chromium check.
+- The actual staging script copied the new catalog/helper/preferences module.
+  Their bytes matched the source; the staged catalog loaded independently, and
+  the builder's inclusion rules covered all three files. No installer was built.
+
+The restricted sandbox initially blocked Chromium startup and a Git subprocess
+used by the full Desktop suite. The same checks passed after running outside
+that process restriction. This was an environment failure, not a product fix.
+
 Order 0 completed on 2026-09-20. Before the renderer change, regression tests
 reproduced both the missing explicit-rejection notice and the misleading retry
 notice. After the change, all seven renderer notice tests passed, covering
@@ -142,7 +184,7 @@ inspection of Capture/setup/recovery does not imply their smoke suites ran in
 this review.
 
 The review table is checked using `build_ui_messages.build_catalog` for schema,
-keys and placeholders, plus an assertion that all rows are proposed and all
-Traditional Chinese cells remain empty. No runtime catalog is generated.
+keys, placeholders and review gates. Only the 50 reviewed pilot rows enter the
+Desktop runtime catalog; the remaining workflow proposals stay out of it.
 Windows/macOS native localization, installer lifecycle and packaged acceptance
 remain future work. This plan does not qualify or publish a release.
diff --git a/scripts/build_ui_messages.py b/scripts/build_ui_messages.py
index 82297be..f026c11 100644
--- a/scripts/build_ui_messages.py
+++ b/scripts/build_ui_messages.py
@@ -54,15 +54,17 @@ def build_catalog(source):
     return messages
 
 
-def render_catalog(messages):
+def render_catalog(messages, desktop=False):
     payload = json.dumps(messages, ensure_ascii=True, indent=4, sort_keys=True)
+    source = 'desktop_ui_copy_review.tsv' if desktop else 'ui_copy_review.tsv'
+    global_name = 'StandTermDesktopMessages' if desktop else 'StandTermMessages'
     return (
-        '// Generated by scripts/build_ui_messages.py. Edit docs/ui_copy_review.tsv.\n'
+        f'// Generated by scripts/build_ui_messages.py. Edit docs/{source}.\n'
         '(function (root) {\n'
         "    'use strict';\n"
         f'    const messages = {payload};\n'
         "    if (typeof module === 'object' && module.exports) module.exports = messages;\n"
-        '    else root.StandTermMessages = messages;\n'
+        f'    else root.{global_name} = messages;\n'
         '})(globalThis);\n'
     )
 
@@ -70,14 +72,18 @@ def render_catalog(messages):
 def main(argv=None):
     parser = argparse.ArgumentParser(description=__doc__)
     parser.add_argument('--check', action='store_true', help='Fail if the committed catalog is stale')
+    parser.add_argument('--desktop', action='store_true', help='Build the independent Desktop catalog')
     args = parser.parse_args(argv)
+    source = ROOT / 'docs' / 'desktop_ui_copy_review.tsv' if args.desktop else SOURCE
+    output = ROOT / 'desktop' / 'messages.js' if args.desktop else OUTPUT
     try:
-        expected = render_catalog(build_catalog(SOURCE))
+        expected = render_catalog(build_catalog(source), desktop=args.desktop)
         if args.check:
-            if not OUTPUT.is_file() or OUTPUT.read_text(encoding='utf-8') != expected:
-                raise ValueError('UI catalog is stale; run scripts/build_ui_messages.py')
+            if not output.is_file() or output.read_text(encoding='utf-8') != expected:
+                command = 'scripts/build_ui_messages.py' + (' --desktop' if args.desktop else '')
+                raise ValueError(f'UI catalog is stale; run {command}')
         else:
-            OUTPUT.write_text(expected, encoding='utf-8')
+            output.write_text(expected, encoding='utf-8')
     except (OSError, ValueError) as exc:
         parser.exit(1, f'{exc}\n')
     return 0
diff --git a/scripts/run_smoke_tests.py b/scripts/run_smoke_tests.py
index f96ee89..32bb58f 100644
--- a/scripts/run_smoke_tests.py
+++ b/scripts/run_smoke_tests.py
@@ -78,6 +78,7 @@ def main(argv=None):
         )
 
     run_step('Check generated UI catalog', [sys.executable, 'scripts/build_ui_messages.py', '--check'])
+    run_step('Check generated Desktop catalog', [sys.executable, 'scripts/build_ui_messages.py', '--desktop', '--check'])
 
     for test_path in HEADLESS_SMOKE_TESTS:
         run_step(test_path, [sys.executable, test_path])
diff --git a/tests/ui_messages_smoke.py b/tests/ui_messages_smoke.py
index e76b8db..160ba83 100644
--- a/tests/ui_messages_smoke.py
+++ b/tests/ui_messages_smoke.py
@@ -132,6 +132,33 @@ def invoke(*args):
         self.assertNotEqual(output.read_bytes(), original)
         self.assertEqual(invoke('--check').returncode, 0)
 
+    def test_desktop_cli_targets_its_own_catalog_without_touching_core(self):
+        root = Path(self.directory.name)
+        script = root / 'scripts' / BUILDER.name
+        source = root / 'docs' / 'desktop_ui_copy_review.tsv'
+        output = root / 'desktop' / 'messages.js'
+        core_output = root / 'static' / 'js' / 'standterm-messages.js'
+        for path in (script, source, output, core_output):
+            path.parent.mkdir(parents=True, exist_ok=True)
+        shutil.copyfile(BUILDER, script)
+        core_output.write_text('Core fixture stays unchanged', encoding='utf-8')
+        write_table(source, [message(status='translation-reviewed', **{'zh-TW': 'Translated'})])
+
+        def invoke(*args):
+            return subprocess.run([sys.executable, str(script), '--desktop', *args],
+                                  capture_output=True, text=True, timeout=10, check=False)
+
+        self.assertEqual(invoke('--check').returncode, 1)
+        result = invoke()
+        self.assertEqual(result.returncode, 0, result.stderr)
+        original = output.read_bytes()
+        self.assertIn(b'root.StandTermDesktopMessages', original)
+        self.assertEqual(invoke('--check').returncode, 0)
+        write_table(source, [message(en='Changed')])
+        self.assertEqual(invoke('--check').returncode, 1)
+        self.assertEqual(output.read_bytes(), original)
+        self.assertEqual(core_output.read_text(encoding='utf-8'), 'Core fixture stays unchanged')
+
 
 if __name__ == '__main__':
     unittest.main()

From e2b417974a1b9d743a4673fab2e1893000cc49a2 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sun, 20 Sep 2026 09:56:11 +0800
Subject: [PATCH 30/43] Localize Desktop browser access and diagnostics

## Why
Browser access confirmations and diagnostic windows stay English after changing
the Desktop language. The log status label also implies a live writability check
although it reflects recorded write outcomes.

## What changed
- Add 76 reviewed bilingual messages for browser access, diagnostics, About
  and external-browser confirmations.
- Keep authorization actions, consent indices, sensitive clipboard payloads
  and sanitized error feedback unchanged.
- Escape translated diagnostic text while retaining scriptless rendering and
  literal event JSON, identifiers, paths and version metadata.
- Describe log write outcomes without promising current filesystem writability.

## Testing
All 115 Desktop unit tests and seven catalog regression tests pass; both catalogs
are current. Headless Chromium checks pass in both languages for diagnostic
headings, literal paths/events, escaped markup, empty state and narrow layout.
Native OS dialogs, menus and installer acceptance remain separate.
---
 desktop/README.md                             |   8 +-
 desktop/browser-access.cjs                    |  18 ++-
 desktop/diagnostics-window.cjs                |  34 ++--
 desktop/diagnostics.cjs                       |  25 +--
 desktop/main.cjs                              |  75 +++++----
 desktop/messages.js                           | 152 ++++++++++++++++++
 desktop/test/browser-access.test.cjs          |  63 +++++++-
 .../test/diagnostics-i18n-browser-smoke.py    |  74 +++++++++
 desktop/test/diagnostics.test.cjs             | 106 ++++++++++++
 docs/desktop_ui_copy_review.tsv               |  79 ++++++++-
 docs/desktop_ui_review_plan.md                |  46 +++++-
 11 files changed, 590 insertions(+), 90 deletions(-)
 create mode 100644 desktop/test/diagnostics-i18n-browser-smoke.py

diff --git a/desktop/README.md b/desktop/README.md
index 545a5a7..9001300 100644
--- a/desktop/README.md
+++ b/desktop/README.md
@@ -13,8 +13,9 @@ Desktop copy and localization are planned in the
 Choose **StandTerm > Desktop language...** to select English or Traditional
 Chinese (Taiwan) for the next launch. The preference belongs to the Desktop
 profile; Core keeps its own language setting. Saving a choice does not restart
-StandTerm or interrupt recording. This initial coverage includes custom menus,
-toolbar labels and Agent help. Capture status, setup, recovery and other Desktop
+StandTerm or interrupt recording. Coverage includes custom menus, toolbar labels,
+Agent help, Browser Access, Diagnostics, About and external-browser confirmations.
+Capture status, setup, recovery and other Desktop
 text still use English; native role labels follow the platform.
 
 Edit reviewed messages in the table, then generate the independent shell
@@ -24,6 +25,9 @@ headless smoke runner checks both Desktop and Core catalogs. The toolbar DOM
 check, `desktop/test/toolbar-i18n-browser-smoke.py`, uses the existing Playwright
 development environment and mocked native IPC; it does not qualify native
 menus, dialogs or installers.
+`desktop/test/diagnostics-i18n-browser-smoke.py` checks the actual diagnostics
+HTML in both languages, including escaped display data and unchanged event JSON.
+It needs Node 22.12+; use `--node <executable>` to select a prepared runtime.
 
 ## macOS Apple Silicon evaluation
 
diff --git a/desktop/browser-access.cjs b/desktop/browser-access.cjs
index 9893a4a..af7c66b 100644
--- a/desktop/browser-access.cjs
+++ b/desktop/browser-access.cjs
@@ -1,5 +1,7 @@
 'use strict';
 
+const { create } = require('./i18n.js');
+
 function validateAccessUrl(value, origin, authorization = false) {
   if (typeof value !== 'string' || value.length > 8192) throw new Error('Invalid access response.');
   const url = new URL(value);
@@ -12,7 +14,7 @@ function validateAccessUrl(value, origin, authorization = false) {
   return url;
 }
 
-function createBrowserAccess({ origin, session, launcherToken, available, confirm, copy, open, notify }) {
+function createBrowserAccess({ origin, session, launcherToken, available, confirm, copy, open, notify, t = create('en').t }) {
   const base = new URL(origin);
   if (base.origin !== origin || base.protocol !== 'http:' || base.hostname !== '127.0.0.1'
       || !base.port || typeof launcherToken !== 'string' || !launcherToken) throw new Error('Invalid browser access authority.');
@@ -56,23 +58,23 @@ function createBrowserAccess({ origin, session, launcherToken, available, confir
       if (!available()) return false;
       if (action === 'open') await open(url.href);
       else copy(action === 'copy-token' ? url.searchParams.get('token') : url.href);
-      await notify(action === 'open' ? 'Browser authorization opened in the default browser.' : 'Access information copied. Treat it as a password.');
+      await notify(t(action === 'open' ? 'desktop.browser_access.opened' : 'desktop.browser_access.copied'));
       return true;
     } catch {
       // Never forward URL-bearing network errors, access tokens or grants to logs/UI.
-      await notify('Could not prepare browser access. Check that this Desktop backend is still running.', true);
+      await notify(t('desktop.browser_access.failed'), true);
       return false;
     } finally { pending = false; }
   }
   return {
     run,
     dispose: () => { launcherToken = ''; },
-    menu: { label: 'Browser Access', submenu: [
-      { label: 'Open in browser...', click: () => run('open') },
-      { label: 'Copy browser authorization URL...', click: () => run('copy-auth') },
+    menu: { label: t('desktop.browser_access.menu'), submenu: [
+      { label: t('desktop.browser_access.open'), click: () => run('open') },
+      { label: t('desktop.browser_access.copy_authorization'), click: () => run('copy-auth') },
       { type: 'separator' },
-      { label: 'Copy access URL (sensitive)', click: () => run('copy-url') },
-      { label: 'Copy access token (sensitive)', click: () => run('copy-token') },
+      { label: t('desktop.browser_access.copy_url'), click: () => run('copy-url') },
+      { label: t('desktop.browser_access.copy_token'), click: () => run('copy-token') },
     ] },
   };
 }
diff --git a/desktop/diagnostics-window.cjs b/desktop/diagnostics-window.cjs
index fc9c619..9658130 100644
--- a/desktop/diagnostics-window.cjs
+++ b/desktop/diagnostics-window.cjs
@@ -1,31 +1,31 @@
 'use strict';
 
 const { randomUUID } = require('node:crypto');
+const { create, normalizeLocale } = require('./i18n.js');
 
-function statusHtml(rows, events) {
+function statusHtml(rows, events, { locale, t } = create('en')) {
   const escape = value => String(value).replace(/[&<>"']/g, char => ({
     '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;',
   })[char]);
-  return `<!doctype html><html lang="en"><meta charset="utf-8">
+  const text = key => escape(t(`desktop.diagnostics.${key}`));
+  return `<!doctype html><html lang="${normalizeLocale(locale)}"><meta charset="utf-8">
     <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'">
-    <title>StandTerm Desktop - Diagnostics</title>
+    <title>${text('window_title')}</title>
     <style>body{font:15px system-ui;background:#18212b;color:#e6edf3;margin:28px}
     h1{font-size:24px}h2{font-size:18px;margin-top:28px}table{border-collapse:collapse;width:100%}
     th,td{text-align:left;vertical-align:top;padding:9px;border-bottom:1px solid #384454;overflow-wrap:anywhere}
     th{width:180px}pre{white-space:pre-wrap;overflow-wrap:anywhere;background:#101820;padding:16px}
     p{color:#b8c7d8}</style>
-    <h1>Desktop diagnostics</h1><p>Read-only snapshot. Use View &gt; Refresh (Ctrl/Cmd+R) for current data.</p>
-    <h2>Runtime and storage</h2><table>${rows.map(([name, value]) => `<tr><th>${escape(name)}</th><td>${escape(value)}</td></tr>`).join('')}</table>
-    <h2>Preview and browser handoff</h2><p>External embedded previews are blocked in Desktop.
-    Use the preview's Open in browser button and confirm the destination. This opens your OS default browser;
-    its cookies and login are separate. Desktop credentials are not added to the URL.</p>
-    <h2>Recent startup events</h2><p>Up to 200 structured events from this run. No terminal content,
-    private keys, tokens or external URLs. Previous runs are available in the diagnostics log folder.</p>
-    <pre>${escape(events.map(event => JSON.stringify(event)).join('\n') || 'No events yet.')}</pre></html>`;
+    <h1>${text('title')}</h1><p>${text('read_only_hint')}</p>
+    <h2>${text('runtime_heading')}</h2><table>${rows.map(([name, value]) => `<tr><th>${escape(name)}</th><td>${escape(value)}</td></tr>`).join('')}</table>
+    <h2>${text('handoff_heading')}</h2><p>${text('handoff_hint')}</p>
+    <h2>${text('events_heading')}</h2><p>${text('events_hint')}</p>
+    <pre>${escape(events.map(event => JSON.stringify(event)).join('\n') || t('desktop.diagnostics.no_events'))}</pre></html>`;
 }
 
-function createStatusWindow(owner, snapshot, { copyUrl }) {
+function createStatusWindow(owner, snapshot, { copyUrl, i18n = create('en') }) {
   const { BrowserWindow, Menu, session } = require('electron');
+  const { t } = i18n;
   let win;
   let opening;
   async function show() {
@@ -36,16 +36,16 @@ function createStatusWindow(owner, snapshot, { copyUrl }) {
       isolated.setPermissionCheckHandler(() => false);
       isolated.setDevicePermissionHandler(() => false);
       isolated.webRequest.onBeforeRequest((details, callback) => callback({ cancel: !details.url.startsWith('data:text/html,') }));
-      win = new BrowserWindow({ title: 'StandTerm Desktop - Diagnostics', width: 900, height: 720,
+      win = new BrowserWindow({ title: t('desktop.diagnostics.window_title'), width: 900, height: 720,
         show: false, parent: owner, webPreferences: { session: isolated, sandbox: true,
           contextIsolation: true, nodeIntegration: false, webviewTag: false, devTools: false } });
       win.webContents.setWindowOpenHandler(() => ({ action: 'deny' }));
       for (const name of ['will-navigate', 'will-frame-navigate', 'will-redirect', 'will-attach-webview']) {
         win.webContents.on(name, event => event.preventDefault());
       }
-      win.setMenu(Menu.buildFromTemplate([{ label: 'View', submenu: [
-        { label: 'Refresh', accelerator: 'CommandOrControl+R', click: () => refresh().catch(() => {}) },
-        { label: 'Copy backend URL', click: copyUrl },
+      win.setMenu(Menu.buildFromTemplate([{ label: t('desktop.toolbar.menu_view'), submenu: [
+        { label: t('desktop.diagnostics.refresh'), accelerator: 'CommandOrControl+R', click: () => refresh().catch(() => {}) },
+        { label: t('desktop.diagnostics.copy_backend_url'), click: copyUrl },
         { role: 'close' },
       ] }]));
       const owned = win;
@@ -55,7 +55,7 @@ function createStatusWindow(owner, snapshot, { copyUrl }) {
     }
     async function refresh() {
       const { rows, events } = snapshot();
-      await win.loadURL('data:text/html,' + encodeURIComponent(statusHtml(rows, events)));
+      await win.loadURL('data:text/html,' + encodeURIComponent(statusHtml(rows, events, i18n)));
     }
     await refresh();
     win.show();
diff --git a/desktop/diagnostics.cjs b/desktop/diagnostics.cjs
index 21296ce..a108f1d 100644
--- a/desktop/diagnostics.cjs
+++ b/desktop/diagnostics.cjs
@@ -2,6 +2,7 @@
 
 const fs = require('node:fs');
 const path = require('node:path');
+const { create } = require('./i18n.js');
 const EVENTS = new Set(['startup', 'setup_start', 'setup_ready', 'backend_launch', 'backend_ready',
   'backend_exit', 'backend_spawn_failed', 'backend_verify_retry', 'backend_verified',
   'host_port_rejected', 'port_change', 'window_ready', 'startup_failed', 'core_failed', 'shutdown', 'devtools_opened', 'capture_failed']);
@@ -56,20 +57,20 @@ function agentConnectionInfo({ origin, mode, instanceId }) {
 }
 
 function diagnosticsMenu({ origin, mode, instanceId, version, coreVersion, logger, openLogs, openTools, openStatus,
-  copyText, persistent = false }) {
+  copyText, persistent = false, t = create('en').t }) {
   const info = agentConnectionInfo({ origin, mode, instanceId });
-  return { id: 'diagnostics', label: 'Diagnostics', submenu: [
-    { id: 'diagnostics-status', label: 'Status and recent events...', click: openStatus },
-    { id: 'diagnostics-version', label: `StandTerm Desktop ${version}`, enabled: false },
-    { id: 'diagnostics-core-version', label: `Core version: ${coreVersion || 'Unknown (older Core)'}`, enabled: false },
-    { id: 'diagnostics-backend', label: `Backend: ${mode === 'wsl' ? 'WSL' : 'Native'}`, enabled: false },
-    { id: 'diagnostics-origin', label: `URL: ${origin}`, enabled: false },
-    { id: 'diagnostics-copy-origin', label: 'Copy backend URL', click: () => copyText(info.base_url) },
-    { label: persistent ? 'Web settings: saved per origin (same as Core)' : 'Web settings: temporary test profile', enabled: false },
+  return { id: 'diagnostics', label: t('desktop.toolbar.menu_diagnostics'), submenu: [
+    { id: 'diagnostics-status', label: t('desktop.diagnostics.show_status'), click: openStatus },
+    { id: 'diagnostics-version', label: t('desktop.about.desktop_version', { version }), enabled: false },
+    { id: 'diagnostics-core-version', label: t('desktop.about.core_version', { version: coreVersion || t('desktop.about.unknown_version') }), enabled: false },
+    { id: 'diagnostics-backend', label: t('desktop.about.backend', { backend: mode === 'wsl' ? 'WSL' : t('desktop.diagnostics.native_backend') }), enabled: false },
+    { id: 'diagnostics-origin', label: t('desktop.diagnostics.origin', { origin }), enabled: false },
+    { id: 'diagnostics-copy-origin', label: t('desktop.diagnostics.copy_backend_url'), click: () => copyText(info.base_url) },
+    { label: t(persistent ? 'desktop.diagnostics.web_settings_persistent' : 'desktop.diagnostics.web_settings_temporary'), enabled: false },
     { type: 'separator' },
-    { id: 'diagnostics-logs', label: 'Open diagnostics log folder', click: openLogs },
-    { label: logger.available ? 'Logs exclude credentials and terminal content' : 'Diagnostic log could not be written', enabled: false },
-    { id: 'diagnostics-devtools', label: 'Developer Tools...', click: openTools },
+    { id: 'diagnostics-logs', label: t('desktop.diagnostics.open_logs'), click: openLogs },
+    { label: t(logger.available ? 'desktop.diagnostics.logs_filtered' : 'desktop.diagnostics.log_unwritable'), enabled: false },
+    { id: 'diagnostics-devtools', label: t('desktop.diagnostics.devtools_menu'), click: openTools },
   ] };
 }
 
diff --git a/desktop/main.cjs b/desktop/main.cjs
index 6ef424a..a268f11 100644
--- a/desktop/main.cjs
+++ b/desktop/main.cjs
@@ -346,12 +346,12 @@ async function start() {
   toolbar = installToolbar(win, coreView, capture, commands, language.locale);
   installContextPaste(win, contents, handoff.origin, toolbar.notify);
   const browserAccess = createBrowserAccess({ origin: handoff.origin, session: desktopSession, launcherToken,
+    t,
     available: () => !win.isDestroyed() && !contents.isDestroyed() && allowedNavigation(contents.getURL(), handoff.origin),
     confirm: async () => {
-      const result = await dialog.showMessageBox(win, { type: 'warning', title: 'Authorize another browser',
-        message: 'Allow another browser to access this StandTerm instance?',
-        detail: 'The authorization URL contains sensitive access information. Share it only with your own trusted browser. Opening it may store it in browser history. A new authorization link replaces the previous unused link.',
-        buttons: ['Cancel', 'Continue'], defaultId: 0, cancelId: 0, noLink: true });
+      const result = await dialog.showMessageBox(win, { type: 'warning', title: t('desktop.browser_access.confirm_title'),
+        message: t('desktop.browser_access.confirm_message'), detail: t('desktop.browser_access.confirm_detail'),
+        buttons: [t('desktop.common.cancel'), t('desktop.browser_access.continue')], defaultId: 0, cancelId: 0, noLink: true });
       return result.response === 1;
     },
     copy: value => clipboard.writeText(value), open: value => shell.openExternal(value), notify: toolbar.notify,
@@ -363,29 +363,29 @@ async function start() {
     updateTitle();
   });
   const connectionInfo = agentConnectionInfo({ origin: handoff.origin, instanceId: handoff.instance_id, mode });
-  const coreVersion = handoff.core_version || 'Unknown (older Core)';
+  const coreVersion = handoff.core_version || t('desktop.about.unknown_version');
   const coreBuild = prepared?.source === 'git' ? prepared.coreSource
-    : handoff.core_bundle_id || 'Source checkout / no managed bundle identity';
-  const pythonVersion = handoff.python_version || 'Unknown (older Core)';
-  const buildLabel = prepared?.source === 'git' ? 'Core Git revision' : 'Core bundle SHA-256';
-  const aboutDetails = `Core version: ${coreVersion}\n${buildLabel}: ${coreBuild}\n`
-    + `Backend: ${MODES[mode]}\nPython: ${pythonVersion}\n`
-    + `Electron: ${process.versions.electron}\nChromium: ${process.versions.chrome}\nNode.js: ${process.versions.node}\n`
-    + `Platform: ${process.platform} / ${process.arch}\n\nEvaluation build; updates are installed manually.`;
+    : handoff.core_bundle_id || t('desktop.about.unmanaged_source');
+  const pythonVersion = handoff.python_version || t('desktop.about.unknown_version');
+  const buildLabel = t(prepared?.source === 'git' ? 'desktop.about.git_revision' : 'desktop.about.bundle_sha256');
+  const aboutDetails = t('desktop.about.details', { core_version: coreVersion, build_label: buildLabel,
+    core_build: coreBuild, backend: MODES[mode], python_version: pythonVersion,
+    electron_version: process.versions.electron, chromium_version: process.versions.chrome,
+    node_version: process.versions.node, platform: process.platform, arch: process.arch });
   const openStatus = createStatusWindow(win, () => ({ rows: [
-    ['Desktop version', app.getVersion()], ['Backend mode', MODES[mode]],
-    ['Core version', coreVersion], [buildLabel, coreBuild], ['Python version', pythonVersion],
-    ['Backend URL', handoff.origin], ['Instance ID', handoff.instance_id],
-    ['Platform', `${process.platform} / ${process.arch}`],
-    ['Electron / Chromium / Node', `${process.versions.electron} / ${process.versions.chrome} / ${process.versions.node}`],
-    ['Backend process', child && child.exitCode === null && child.signalCode === null ? 'Running' : 'Stopped'],
-    ['Renderer process', contents.isCrashed() ? 'Crashed' : 'Running'],
-    ['Browser storage', smoke ? 'Temporary test profile' : 'Persistent per origin; same as Core'],
-    ['Profile directory', app.getPath('userData')], ['Port settings', settingsPath],
-    ['Diagnostic log', diagnostics.file], ['Log writable', diagnostics.available ? 'Yes' : 'No'],
-    ['Security', 'Core sandbox on; Node/preload off; isolated Desktop toolbar; external preview network blocked'],
+    [t('desktop.diagnostics.desktop_version'), app.getVersion()], [t('desktop.diagnostics.backend_mode'), MODES[mode]],
+    [t('desktop.diagnostics.core_version'), coreVersion], [buildLabel, coreBuild], [t('desktop.diagnostics.python_version'), pythonVersion],
+    [t('desktop.diagnostics.backend_url'), handoff.origin], [t('desktop.diagnostics.instance_id'), handoff.instance_id],
+    [t('desktop.diagnostics.platform'), `${process.platform} / ${process.arch}`],
+    [t('desktop.diagnostics.engines'), `${process.versions.electron} / ${process.versions.chrome} / ${process.versions.node}`],
+    [t('desktop.diagnostics.backend_process'), t(child && child.exitCode === null && child.signalCode === null ? 'desktop.diagnostics.running' : 'desktop.diagnostics.stopped')],
+    [t('desktop.diagnostics.renderer_process'), t(contents.isCrashed() ? 'desktop.diagnostics.crashed' : 'desktop.diagnostics.running')],
+    [t('desktop.diagnostics.browser_storage'), t(smoke ? 'desktop.diagnostics.storage_temporary' : 'desktop.diagnostics.storage_persistent')],
+    [t('desktop.diagnostics.profile_directory'), app.getPath('userData')], [t('desktop.diagnostics.port_settings'), settingsPath],
+    [t('desktop.diagnostics.log_file'), diagnostics.file], [t('desktop.diagnostics.log_writable'), t(diagnostics.available ? 'desktop.diagnostics.log_write_ok' : 'desktop.diagnostics.log_write_failed')],
+    [t('desktop.diagnostics.security'), t('desktop.diagnostics.security_detail')],
   ], events: diagnostics.snapshot() }), {
-    copyUrl: () => clipboard.writeText(connectionInfo.base_url),
+    copyUrl: () => clipboard.writeText(connectionInfo.base_url), i18n: language,
   });
   Menu.setApplicationMenu(Menu.buildFromTemplate([
     { id: 'standterm', label: 'StandTerm', submenu: [
@@ -401,7 +401,7 @@ async function start() {
       commands.item('files'), commands.item('pip'),
       { type: 'separator' },
       { id: 'desktop-about', label: t('desktop.menu.about'), click: () => dialog.showMessageBox(win, {
-        type: 'info', title: t('desktop.menu.about'), message: `StandTerm Desktop ${app.getVersion()}`,
+        type: 'info', title: t('desktop.menu.about'), message: t('desktop.about.desktop_version', { version: app.getVersion() }),
         detail: aboutDetails, buttons: [t('desktop.common.ok')], noLink: true,
       }) },
       { label: t('desktop.menu.show'), click: showWindow },
@@ -424,22 +424,21 @@ async function start() {
       ...capture.menu().submenu,
     ] },
     diagnosticsMenu({ origin: handoff.origin, mode, instanceId: handoff.instance_id,
+      t,
       version: app.getVersion(), coreVersion: handoff.core_version, logger: diagnostics, persistent: !smoke,
       copyText: text => clipboard.writeText(text),
       openStatus: () => openStatus().catch(() => {
-        if (!win.isDestroyed()) dialog.showMessageBox(win, { type: 'warning', message: 'Could not open the diagnostics page.' });
+        if (!win.isDestroyed()) dialog.showMessageBox(win, { type: 'warning', message: t('desktop.diagnostics.open_failed') });
       }),
       openLogs: async () => {
         const error = await shell.openPath(diagnostics.directory);
-        if (error) await dialog.showMessageBox(win, { type: 'warning', message: 'Could not open the diagnostics folder.', detail: diagnostics.directory });
+        if (error) await dialog.showMessageBox(win, { type: 'warning', message: t('desktop.diagnostics.folder_failed'), detail: diagnostics.directory });
       },
       openTools: async () => {
         const opened = await openDeveloperTools(contents, async () => {
-          const answer = await dialog.showMessageBox(win, { type: 'warning', title: 'Developer Tools',
-            message: 'Open Developer Tools for this authenticated terminal UI?',
-            detail: 'Console code can read page data and operate connected terminals. Only run code you trust. '
-              + 'This opens a local frontend debugger, not a remote debugging port or a Node.js bridge.',
-            buttons: ['Cancel', 'Open Developer Tools'], defaultId: 0, cancelId: 0, noLink: true });
+          const answer = await dialog.showMessageBox(win, { type: 'warning', title: t('desktop.diagnostics.devtools_title'),
+            message: t('desktop.diagnostics.devtools_message'), detail: t('desktop.diagnostics.devtools_detail'),
+            buttons: [t('desktop.common.cancel'), t('desktop.diagnostics.devtools_open')], defaultId: 0, cancelId: 0, noLink: true });
           return answer.response === 1;
         });
         if (opened) diagnostics.write('devtools_opened');
@@ -448,15 +447,15 @@ async function start() {
   ]));
   const openExternal = createExternalOpener({ origin: handoff.origin, owner: contents,
     confirm: async url => {
-      const answer = await dialog.showMessageBox(win, { type: 'question', title: 'Open in default browser',
-        message: `Open ${new URL(url).host} in your default browser?`,
-        detail: `${url}\n\nThe browser uses its own login. StandTerm does not add its token or cookies.`,
-        buttons: ['Cancel', 'Open in browser'], defaultId: 0, cancelId: 0, noLink: true });
+      const answer = await dialog.showMessageBox(win, { type: 'question', title: t('desktop.external_browser.title'),
+        message: t('desktop.external_browser.message', { host: new URL(url).host }),
+        detail: t('desktop.external_browser.detail', { url }),
+        buttons: [t('desktop.common.cancel'), t('desktop.external_browser.open')], defaultId: 0, cancelId: 0, noLink: true });
       return answer.response === 1;
     },
     open: url => shell.openExternal(url),
-    notify: () => dialog.showMessageBox(win, { type: 'warning', message: 'Could not open the default browser.',
-      detail: 'Check the default HTTP/HTTPS browser in your operating system settings.' }),
+    notify: () => dialog.showMessageBox(win, { type: 'warning', message: t('desktop.external_browser.failed'),
+      detail: t('desktop.external_browser.failure_hint') }),
   });
   installFloatingWindows(win, handoff.origin, openExternal, contents, (result, owner) => {
     const completed = result.state === 'completed' && !!result.path;
diff --git a/desktop/messages.js b/desktop/messages.js
index 6343851..f76b232 100644
--- a/desktop/messages.js
+++ b/desktop/messages.js
@@ -3,6 +3,14 @@
     'use strict';
     const messages = {
     "en": {
+        "desktop.about.backend": "Backend: {backend}",
+        "desktop.about.bundle_sha256": "Core bundle SHA-256",
+        "desktop.about.core_version": "Core version: {version}",
+        "desktop.about.desktop_version": "StandTerm Desktop {version}",
+        "desktop.about.details": "Core version: {core_version}\n{build_label}: {core_build}\nBackend: {backend}\nPython: {python_version}\nElectron: {electron_version}\nChromium: {chromium_version}\nNode.js: {node_version}\nPlatform: {platform} / {arch}\n\nEvaluation build. Install updates manually.",
+        "desktop.about.git_revision": "Core Git revision",
+        "desktop.about.unknown_version": "Unknown (older Core)",
+        "desktop.about.unmanaged_source": "Source checkout / no managed bundle identity",
         "desktop.agent.getting_started": "Getting started\u2026",
         "desktop.agent.help_connection": "Open Agent connection, choose Copy Prompt, and paste it into your agent with the task. Follow the environment shown in the dialog.",
         "desktop.agent.help_environment": "For an Agent running on an SSH host, start Agent Tunnel on its SSH tab. Agent connection appears after setup succeeds. For a local Agent, use Authorize agent on each intended tab.",
@@ -10,8 +18,76 @@
         "desktop.agent.help_skills": "Skills do not need to be installed first. The prompt leads to bundled skills and helpers. Agent Info also provides installation instructions for persistent skills.",
         "desktop.agent.help_title": "Connect your agent to StandTerm",
         "desktop.agent.menu_title": "Agent",
+        "desktop.browser_access.confirm_detail": "The authorization URL contains sensitive access information. Use it only in your own trusted browser. Opening it may save it in browser history. A new link replaces the previous unused authorization link.",
+        "desktop.browser_access.confirm_message": "Allow another browser to access this StandTerm instance?",
+        "desktop.browser_access.confirm_title": "Authorize another browser",
+        "desktop.browser_access.continue": "Continue",
+        "desktop.browser_access.copied": "Access information copied. Keep it private, like a password.",
+        "desktop.browser_access.copy_authorization": "Copy browser authorization URL\u2026",
+        "desktop.browser_access.copy_token": "Copy access token (sensitive)",
+        "desktop.browser_access.copy_url": "Copy access URL (sensitive)",
+        "desktop.browser_access.failed": "Could not prepare browser access. Check that this Desktop backend is running.",
+        "desktop.browser_access.menu": "Browser access",
+        "desktop.browser_access.open": "Open in browser\u2026",
+        "desktop.browser_access.opened": "Authorization link opened in the default browser.",
         "desktop.common.cancel": "Cancel",
         "desktop.common.ok": "OK",
+        "desktop.diagnostics.backend_mode": "Backend mode",
+        "desktop.diagnostics.backend_process": "Backend process",
+        "desktop.diagnostics.backend_url": "Backend URL",
+        "desktop.diagnostics.browser_storage": "Browser storage",
+        "desktop.diagnostics.copy_backend_url": "Copy backend URL",
+        "desktop.diagnostics.core_version": "Core version",
+        "desktop.diagnostics.crashed": "Crashed",
+        "desktop.diagnostics.desktop_version": "Desktop version",
+        "desktop.diagnostics.devtools_detail": "Console code can read page data and operate connected terminals. Run only code you trust. This opens a local frontend debugger, not a remote debugging port or Node.js bridge.",
+        "desktop.diagnostics.devtools_menu": "Developer Tools\u2026",
+        "desktop.diagnostics.devtools_message": "Open Developer Tools for this authenticated terminal UI?",
+        "desktop.diagnostics.devtools_open": "Open Developer Tools",
+        "desktop.diagnostics.devtools_title": "Developer Tools",
+        "desktop.diagnostics.engines": "Electron / Chromium / Node",
+        "desktop.diagnostics.events_heading": "Recent startup events",
+        "desktop.diagnostics.events_hint": "Up to 200 structured events from this run. No terminal content, private keys, tokens or external URLs. Find previous runs in the diagnostics log folder.",
+        "desktop.diagnostics.folder_failed": "Could not open the diagnostics folder.",
+        "desktop.diagnostics.handoff_heading": "Preview and browser handoff",
+        "desktop.diagnostics.handoff_hint": "Desktop blocks external embedded previews. Choose Open in browser in the preview and confirm the destination. Your default browser uses separate cookies and login. Desktop credentials are not added to the URL.",
+        "desktop.diagnostics.instance_id": "Instance ID",
+        "desktop.diagnostics.log_file": "Diagnostic log",
+        "desktop.diagnostics.log_unwritable": "Could not write the diagnostic log",
+        "desktop.diagnostics.log_writable": "Log write status",
+        "desktop.diagnostics.log_write_failed": "Write failed",
+        "desktop.diagnostics.log_write_ok": "No write error reported",
+        "desktop.diagnostics.logs_filtered": "Logs exclude credentials and terminal content",
+        "desktop.diagnostics.native_backend": "Native",
+        "desktop.diagnostics.no_events": "No events yet.",
+        "desktop.diagnostics.open_failed": "Could not open the diagnostics page.",
+        "desktop.diagnostics.open_logs": "Open diagnostics log folder",
+        "desktop.diagnostics.origin": "URL: {origin}",
+        "desktop.diagnostics.platform": "Platform",
+        "desktop.diagnostics.port_settings": "Port settings",
+        "desktop.diagnostics.profile_directory": "Profile directory",
+        "desktop.diagnostics.python_version": "Python version",
+        "desktop.diagnostics.read_only_hint": "Read-only snapshot. Use View > Refresh (Ctrl/Cmd+R) to update.",
+        "desktop.diagnostics.refresh": "Refresh",
+        "desktop.diagnostics.renderer_process": "Renderer process",
+        "desktop.diagnostics.running": "Running",
+        "desktop.diagnostics.runtime_heading": "Runtime and storage",
+        "desktop.diagnostics.security": "Security",
+        "desktop.diagnostics.security_detail": "Core sandbox on; Node/preload off; isolated Desktop toolbar; external preview network blocked",
+        "desktop.diagnostics.show_status": "Status and recent events\u2026",
+        "desktop.diagnostics.stopped": "Stopped",
+        "desktop.diagnostics.storage_persistent": "Persistent per origin; same as Core",
+        "desktop.diagnostics.storage_temporary": "Temporary test profile",
+        "desktop.diagnostics.title": "Desktop diagnostics",
+        "desktop.diagnostics.web_settings_persistent": "Web settings: saved per origin (same as Core)",
+        "desktop.diagnostics.web_settings_temporary": "Web settings: temporary test profile",
+        "desktop.diagnostics.window_title": "StandTerm Desktop - Diagnostics",
+        "desktop.external_browser.detail": "{url}\n\nThe browser uses its own login. StandTerm does not add its token or cookies.",
+        "desktop.external_browser.failed": "Could not open the default browser.",
+        "desktop.external_browser.failure_hint": "Check the default HTTP/HTTPS browser in your operating system settings.",
+        "desktop.external_browser.message": "Open {host} in your default browser?",
+        "desktop.external_browser.open": "Open in browser",
+        "desktop.external_browser.title": "Open in default browser",
         "desktop.language.choose": "Choose the Desktop language for the next launch.",
         "desktop.language.detail": "Saved choice: {language}\n\nCore has its own language setting. Some Desktop text remains in English.",
         "desktop.language.failed": "Could not confirm the language setting. Reopen Desktop language to check the saved choice.",
@@ -55,6 +131,14 @@
         "desktop.toolbar.screenshot_save": "Save screenshot (PNG)"
     },
     "zh-TW": {
+        "desktop.about.backend": "\u5f8c\u7aef\uff1a{backend}",
+        "desktop.about.bundle_sha256": "Core \u5957\u4ef6 SHA-256",
+        "desktop.about.core_version": "Core \u7248\u672c\uff1a{version}",
+        "desktop.about.desktop_version": "StandTerm Desktop {version}",
+        "desktop.about.details": "Core \u7248\u672c\uff1a{core_version}\n{build_label}\uff1a{core_build}\n\u5f8c\u7aef\uff1a{backend}\nPython\uff1a{python_version}\nElectron\uff1a{electron_version}\nChromium\uff1a{chromium_version}\nNode.js\uff1a{node_version}\n\u5e73\u53f0\uff1a{platform} / {arch}\n\n\u8a55\u4f30\u7248\u672c\uff0c\u66f4\u65b0\u9700\u624b\u52d5\u5b89\u88dd\u3002",
+        "desktop.about.git_revision": "Core Git \u4fee\u8a02\u7248\u672c",
+        "desktop.about.unknown_version": "\u672a\u77e5\uff08\u820a\u7248 Core\uff09",
+        "desktop.about.unmanaged_source": "\u539f\u59cb\u78bc\u5de5\u4f5c\u76ee\u9304\uff0f\u7121\u53d7\u7ba1\u7406\u7684\u5957\u4ef6\u8b58\u5225\u8cc7\u8a0a",
         "desktop.agent.getting_started": "\u958b\u59cb\u4f7f\u7528\u2026",
         "desktop.agent.help_connection": "\u958b\u555f\u300cAgent \u9023\u7dda\u300d\uff08Agent connection\uff09\uff0c\u9078\u64c7\u300c\u8907\u88fd\u9023\u7dda\u6307\u5f15\u300d\uff08Copy Prompt\uff09\uff0c\u518d\u5c07\u6307\u5f15\u9023\u540c\u4efb\u52d9\u8cbc\u7d66 Agent\u3002\u8acb\u4f9d\u5c0d\u8a71\u6846\u986f\u793a\u7684\u74b0\u5883\u64cd\u4f5c\u3002",
         "desktop.agent.help_environment": "\u82e5 Agent \u5728 SSH \u9060\u7aef\u57f7\u884c\uff0c\u8acb\u5728\u5176 SSH \u5206\u9801\u555f\u52d5 Agent \u901a\u9053\uff08Agent Tunnel\uff09\u3002\u8a2d\u5b9a\u6210\u529f\u5f8c\u6703\u51fa\u73fe\u300cAgent \u9023\u7dda\u300d\uff08Agent connection\uff09\u3002\u82e5 Agent \u5728\u672c\u6a5f\u57f7\u884c\uff0c\u8acb\u5728\u6bcf\u500b\u9810\u5b9a\u64cd\u4f5c\u7684\u5206\u9801\u9078\u64c7\u300c\u6388\u6b0a Agent\u300d\uff08Authorize agent\uff09\u3002",
@@ -62,8 +146,76 @@
         "desktop.agent.help_skills": "\u4e0d\u5fc5\u5148\u5b89\u88dd\u6280\u80fd\uff08skills\uff09\u3002\u9023\u7dda\u6307\u5f15\u6703\u5f15\u5c0e Agent \u4f7f\u7528\u96a8\u9644\u7684\u6280\u80fd\u8207\u8f14\u52a9\u5de5\u5177\uff1b\u82e5\u5e0c\u671b\u5b89\u88dd\u5f8c\u6301\u7e8c\u4f7f\u7528\u6280\u80fd\uff0cAgent Info \u4e5f\u63d0\u4f9b\u5b89\u88dd\u8aaa\u660e\u3002",
         "desktop.agent.help_title": "\u8b93 Agent \u9023\u7dda\u81f3 StandTerm",
         "desktop.agent.menu_title": "Agent",
+        "desktop.browser_access.confirm_detail": "\u6388\u6b0a\u7db2\u5740\u542b\u6709\u654f\u611f\u7684\u5b58\u53d6\u8cc7\u8a0a\uff0c\u8acb\u50c5\u5728\u81ea\u5df1\u4fe1\u4efb\u7684\u700f\u89bd\u5668\u4e2d\u4f7f\u7528\u3002\u958b\u555f\u5f8c\u53ef\u80fd\u7559\u5b58\u5728\u700f\u89bd\u7d00\u9304\u4e2d\u3002\u65b0\u7684\u6388\u6b0a\u9023\u7d50\u6703\u53d6\u4ee3\u5148\u524d\u5c1a\u672a\u4f7f\u7528\u7684\u6388\u6b0a\u9023\u7d50\u3002",
+        "desktop.browser_access.confirm_message": "\u5141\u8a31\u5176\u4ed6\u700f\u89bd\u5668\u5b58\u53d6\u6b64 StandTerm \u57f7\u884c\u500b\u9ad4\u55ce\uff1f",
+        "desktop.browser_access.confirm_title": "\u6388\u6b0a\u5176\u4ed6\u700f\u89bd\u5668",
+        "desktop.browser_access.continue": "\u7e7c\u7e8c",
+        "desktop.browser_access.copied": "\u5df2\u8907\u88fd\u5b58\u53d6\u8cc7\u8a0a\u3002\u8acb\u50cf\u4fdd\u7ba1\u5bc6\u78bc\u4e00\u6a23\u59a5\u5584\u4fdd\u5bc6\u3002",
+        "desktop.browser_access.copy_authorization": "\u8907\u88fd\u700f\u89bd\u5668\u6388\u6b0a\u7db2\u5740\u2026",
+        "desktop.browser_access.copy_token": "\u8907\u88fd\u5b58\u53d6\u6b0a\u6756\uff08\u654f\u611f\u8cc7\u8a0a\uff09",
+        "desktop.browser_access.copy_url": "\u8907\u88fd\u5b58\u53d6\u7db2\u5740\uff08\u654f\u611f\u8cc7\u8a0a\uff09",
+        "desktop.browser_access.failed": "\u7121\u6cd5\u6e96\u5099\u700f\u89bd\u5668\u5b58\u53d6\u8cc7\u8a0a\u3002\u8acb\u78ba\u8a8d\u6b64 Desktop \u7684\u5f8c\u7aef\u4ecd\u5728\u57f7\u884c\u3002",
+        "desktop.browser_access.menu": "\u700f\u89bd\u5668\u5b58\u53d6",
+        "desktop.browser_access.open": "\u5728\u700f\u89bd\u5668\u958b\u555f\u2026",
+        "desktop.browser_access.opened": "\u5df2\u5728\u9810\u8a2d\u700f\u89bd\u5668\u958b\u555f\u6388\u6b0a\u9023\u7d50\u3002",
         "desktop.common.cancel": "\u53d6\u6d88",
         "desktop.common.ok": "\u78ba\u5b9a",
+        "desktop.diagnostics.backend_mode": "\u5f8c\u7aef\u6a21\u5f0f",
+        "desktop.diagnostics.backend_process": "\u5f8c\u7aef\u7a0b\u5e8f",
+        "desktop.diagnostics.backend_url": "\u5f8c\u7aef\u7db2\u5740",
+        "desktop.diagnostics.browser_storage": "\u700f\u89bd\u5668\u5132\u5b58",
+        "desktop.diagnostics.copy_backend_url": "\u8907\u88fd\u5f8c\u7aef\u7db2\u5740",
+        "desktop.diagnostics.core_version": "Core \u7248\u672c",
+        "desktop.diagnostics.crashed": "\u5df2\u7576\u6a5f",
+        "desktop.diagnostics.desktop_version": "Desktop \u7248\u672c",
+        "desktop.diagnostics.devtools_detail": "\u4e3b\u63a7\u53f0\u7a0b\u5f0f\u78bc\u53ef\u8b80\u53d6\u9801\u9762\u8cc7\u6599\u4e26\u64cd\u4f5c\u5df2\u9023\u7dda\u7684\u7d42\u7aef\u3002\u8acb\u53ea\u57f7\u884c\u53ef\u4fe1\u4efb\u7684\u7a0b\u5f0f\u78bc\u3002\u6b64\u64cd\u4f5c\u6703\u958b\u555f\u672c\u6a5f\u524d\u7aef\u5075\u932f\u5de5\u5177\uff0c\u4e0d\u6703\u958b\u555f\u9060\u7aef\u5075\u932f\u9023\u63a5\u57e0\u6216 Node.js \u6a4b\u63a5\u4ecb\u9762\u3002",
+        "desktop.diagnostics.devtools_menu": "\u958b\u767c\u4eba\u54e1\u5de5\u5177\u2026",
+        "desktop.diagnostics.devtools_message": "\u8981\u70ba\u6b64\u5df2\u901a\u904e\u8eab\u5206\u9a57\u8b49\u7684\u7d42\u7aef\u4ecb\u9762\u958b\u555f\u958b\u767c\u4eba\u54e1\u5de5\u5177\u55ce\uff1f",
+        "desktop.diagnostics.devtools_open": "\u958b\u555f\u958b\u767c\u4eba\u54e1\u5de5\u5177",
+        "desktop.diagnostics.devtools_title": "\u958b\u767c\u4eba\u54e1\u5de5\u5177",
+        "desktop.diagnostics.engines": "Electron / Chromium / Node",
+        "desktop.diagnostics.events_heading": "\u8fd1\u671f\u555f\u52d5\u4e8b\u4ef6",
+        "desktop.diagnostics.events_hint": "\u986f\u793a\u672c\u6b21\u57f7\u884c\u6700\u591a 200 \u7b46\u7d50\u69cb\u5316\u4e8b\u4ef6\uff0c\u4e0d\u542b\u7d42\u7aef\u5167\u5bb9\u3001\u79c1\u5bc6\u91d1\u9470\u3001\u6b0a\u6756\u6216\u5916\u90e8\u7db2\u5740\u3002\u5148\u524d\u57f7\u884c\u7684\u7d00\u9304\u53ef\u5728\u8a3a\u65b7\u7d00\u9304\u8cc7\u6599\u593e\u4e2d\u67e5\u770b\u3002",
+        "desktop.diagnostics.folder_failed": "\u7121\u6cd5\u958b\u555f\u8a3a\u65b7\u8cc7\u6599\u593e\u3002",
+        "desktop.diagnostics.handoff_heading": "\u9810\u89bd\u8207\u5916\u90e8\u700f\u89bd\u5668",
+        "desktop.diagnostics.handoff_hint": "Desktop \u6703\u5c01\u9396\u5916\u90e8\u7db2\u9801\u7684\u5167\u5d4c\u9810\u89bd\u3002\u8acb\u5728\u9810\u89bd\u4e2d\u9078\u64c7\u300c\u5728\u700f\u89bd\u5668\u958b\u555f\u300d\uff08Open in browser\uff09\u4e26\u78ba\u8a8d\u76ee\u7684\u5730\u3002\u9810\u8a2d\u700f\u89bd\u5668\u4f7f\u7528\u7368\u7acb\u7684 Cookie \u8207\u767b\u5165\u72c0\u614b\uff0c\u7db2\u5740\u4e0d\u6703\u52a0\u5165 Desktop \u6191\u8b49\u3002",
+        "desktop.diagnostics.instance_id": "\u57f7\u884c\u500b\u9ad4 ID",
+        "desktop.diagnostics.log_file": "\u8a3a\u65b7\u7d00\u9304",
+        "desktop.diagnostics.log_unwritable": "\u7121\u6cd5\u5beb\u5165\u8a3a\u65b7\u7d00\u9304",
+        "desktop.diagnostics.log_writable": "\u8a18\u9304\u5beb\u5165\u72c0\u614b",
+        "desktop.diagnostics.log_write_failed": "\u5beb\u5165\u5931\u6557",
+        "desktop.diagnostics.log_write_ok": "\u672a\u56de\u5831\u5beb\u5165\u932f\u8aa4",
+        "desktop.diagnostics.logs_filtered": "\u7d00\u9304\u4e0d\u542b\u6191\u8b49\u8207\u7d42\u7aef\u5167\u5bb9",
+        "desktop.diagnostics.native_backend": "\u539f\u751f",
+        "desktop.diagnostics.no_events": "\u76ee\u524d\u6c92\u6709\u4e8b\u4ef6\u3002",
+        "desktop.diagnostics.open_failed": "\u7121\u6cd5\u958b\u555f\u8a3a\u65b7\u9801\u9762\u3002",
+        "desktop.diagnostics.open_logs": "\u958b\u555f\u8a3a\u65b7\u7d00\u9304\u8cc7\u6599\u593e",
+        "desktop.diagnostics.origin": "\u7db2\u5740\uff1a{origin}",
+        "desktop.diagnostics.platform": "\u5e73\u53f0",
+        "desktop.diagnostics.port_settings": "\u9023\u63a5\u57e0\u8a2d\u5b9a",
+        "desktop.diagnostics.profile_directory": "\u8a2d\u5b9a\u6a94\u76ee\u9304",
+        "desktop.diagnostics.python_version": "Python \u7248\u672c",
+        "desktop.diagnostics.read_only_hint": "\u552f\u8b80\u5feb\u7167\u3002\u8acb\u9078\u64c7\u300c\u6aa2\u8996 > \u91cd\u65b0\u6574\u7406\u300d\uff08Ctrl/Cmd+R\uff09\u53d6\u5f97\u6700\u65b0\u8cc7\u6599\u3002",
+        "desktop.diagnostics.refresh": "\u91cd\u65b0\u6574\u7406",
+        "desktop.diagnostics.renderer_process": "\u6e32\u67d3\u7a0b\u5e8f",
+        "desktop.diagnostics.running": "\u57f7\u884c\u4e2d",
+        "desktop.diagnostics.runtime_heading": "\u57f7\u884c\u74b0\u5883\u8207\u5132\u5b58",
+        "desktop.diagnostics.security": "\u5b89\u5168\u6027",
+        "desktop.diagnostics.security_detail": "Core \u6c99\u7bb1\u5df2\u555f\u7528\uff1bNode\uff0fpreload \u5df2\u505c\u7528\uff1bDesktop \u5de5\u5177\u5217\u7368\u7acb\u9694\u96e2\uff1b\u5df2\u5c01\u9396\u5916\u90e8\u9810\u89bd\u7684\u7db2\u8def\u5b58\u53d6",
+        "desktop.diagnostics.show_status": "\u72c0\u614b\u8207\u8fd1\u671f\u4e8b\u4ef6\u2026",
+        "desktop.diagnostics.stopped": "\u5df2\u505c\u6b62",
+        "desktop.diagnostics.storage_persistent": "\u4f9d\u4f86\u6e90\u6301\u7e8c\u4fdd\u7559\uff1b\u8207 Core \u76f8\u540c",
+        "desktop.diagnostics.storage_temporary": "\u66ab\u5b58\u6e2c\u8a66\u8a2d\u5b9a\u6a94",
+        "desktop.diagnostics.title": "Desktop \u8a3a\u65b7",
+        "desktop.diagnostics.web_settings_persistent": "\u7db2\u9801\u8a2d\u5b9a\uff1a\u4f9d\u4f86\u6e90\u5132\u5b58\uff08\u8207 Core \u76f8\u540c\uff09",
+        "desktop.diagnostics.web_settings_temporary": "\u7db2\u9801\u8a2d\u5b9a\uff1a\u66ab\u5b58\u6e2c\u8a66\u8a2d\u5b9a\u6a94",
+        "desktop.diagnostics.window_title": "StandTerm Desktop - \u8a3a\u65b7",
+        "desktop.external_browser.detail": "{url}\n\n\u700f\u89bd\u5668\u4f7f\u7528\u81ea\u5df1\u7684\u767b\u5165\u72c0\u614b\u3002StandTerm \u4e0d\u6703\u52a0\u5165\u81ea\u5df1\u7684\u6b0a\u6756\u6216 Cookie\u3002",
+        "desktop.external_browser.failed": "\u7121\u6cd5\u958b\u555f\u9810\u8a2d\u700f\u89bd\u5668\u3002",
+        "desktop.external_browser.failure_hint": "\u8acb\u5728\u4f5c\u696d\u7cfb\u7d71\u8a2d\u5b9a\u4e2d\u6aa2\u67e5 HTTP\uff0fHTTPS \u7684\u9810\u8a2d\u700f\u89bd\u5668\u3002",
+        "desktop.external_browser.message": "\u8981\u5728\u9810\u8a2d\u700f\u89bd\u5668\u958b\u555f {host} \u55ce\uff1f",
+        "desktop.external_browser.open": "\u5728\u700f\u89bd\u5668\u958b\u555f",
+        "desktop.external_browser.title": "\u5728\u9810\u8a2d\u700f\u89bd\u5668\u958b\u555f",
         "desktop.language.choose": "\u9078\u64c7\u4e0b\u6b21\u555f\u52d5\u6642\u4f7f\u7528\u7684 Desktop \u8a9e\u7cfb\u3002",
         "desktop.language.detail": "\u5df2\u5132\u5b58\u7684\u9078\u64c7\uff1a{language}\n\nCore \u7684\u8a9e\u7cfb\u9700\u53e6\u5916\u8a2d\u5b9a\u3002\u90e8\u5206 Desktop \u6587\u5b57\u4ecd\u4f7f\u7528\u82f1\u6587\u3002",
         "desktop.language.failed": "\u7121\u6cd5\u78ba\u8a8d\u8a9e\u7cfb\u8a2d\u5b9a\u3002\u8acb\u91cd\u65b0\u958b\u555f\u300cDesktop \u8a9e\u7cfb\u300d\u67e5\u770b\u5df2\u5132\u5b58\u7684\u9078\u64c7\u3002",
diff --git a/desktop/test/browser-access.test.cjs b/desktop/test/browser-access.test.cjs
index ea8f7c9..66ef392 100644
--- a/desktop/test/browser-access.test.cjs
+++ b/desktop/test/browser-access.test.cjs
@@ -3,20 +3,23 @@
 const test = require('node:test');
 const assert = require('node:assert/strict');
 const { createBrowserAccess, validateAccessUrl } = require('../browser-access.cjs');
+const { create } = require('../i18n.js');
 
 const origin = 'http://127.0.0.1:64487';
-function fixture({ consent = true, badUrl = false } = {}) {
-  const requests = [], copied = [], opened = [], notices = [];
+function fixture({ consent = true, badUrl = false, locale = 'en', failure = false } = {}) {
+  const requests = [], copied = [], opened = [], notices = [], confirmations = [], errors = [];
   const access = createBrowserAccess({ origin, launcherToken: 'launcher-test', available: () => true,
-    confirm: async () => consent, copy: value => copied.push(value), open: async value => opened.push(value),
-    notify: async value => notices.push(value), session: { fetch: async (url, options) => {
+    t: create(locale).t,
+    confirm: async action => { confirmations.push(action); return consent; }, copy: value => copied.push(value), open: async value => opened.push(value),
+    notify: async (value, error = false) => { notices.push(value); errors.push(error); }, session: { fetch: async (url, options) => {
       requests.push({ url, options });
+      if (failure) throw new Error(`${origin}/?token=access-test&authorize=grant-test`);
       return new Response(JSON.stringify(url.endsWith('/access-url')
         ? { status: 'ok', access_url: badUrl ? 'https://example.com/?token=access-test' : `${origin}/?token=access-test` }
         : { status: 'ok', authorization_url: `${origin}/?token=access-test&authorize=grant-test` }));
     } },
   });
-  return { access, requests, copied, opened, notices };
+  return { access, requests, copied, opened, notices, confirmations, errors };
 }
 
 test('access token is copied on demand, never the Desktop session cookie', async () => {
@@ -30,6 +33,56 @@ test('access token is copied on demand, never the Desktop session cookie', async
   assert.ok(!f.notices.join().includes('access-test'));
 });
 
+test('translated browser access menus preserve all four fixed actions and sensitive payloads', async () => {
+  for (const locale of ['en', 'zh-TW']) {
+    const { t } = create(locale);
+    for (const [index, action, key] of [[0, 'open', 'open'], [1, 'copy-auth', 'copy_authorization'],
+      [3, 'copy-url', 'copy_url'], [4, 'copy-token', 'copy_token']]) {
+      const f = fixture({ locale });
+      assert.equal(f.access.menu.label, t('desktop.browser_access.menu'));
+      assert.equal(f.access.menu.submenu[index].label, t(`desktop.browser_access.${key}`));
+      assert.equal(await f.access.menu.submenu[index].click(), true);
+      const authorization = ['open', 'copy-auth'].includes(action);
+      assert.deepEqual(f.confirmations, authorization ? [action] : []);
+      assert.deepEqual(f.requests.map(request => request.url), authorization
+        ? [`${origin}/access-url`, `${origin}/launcher/browser_authorization_url`] : [`${origin}/access-url`]);
+      if (authorization) {
+        assert.equal(f.requests[1].options.method, 'POST');
+        assert.equal(new URLSearchParams(f.requests[1].options.body).get('access_url'), `${origin}/?token=access-test`);
+      }
+      const payload = action === 'copy-token' ? 'access-test'
+        : `${origin}/?token=access-test${authorization ? '&authorize=grant-test' : ''}`;
+      assert.deepEqual(f.opened, action === 'open' ? [payload] : []);
+      assert.deepEqual(f.copied, action === 'open' ? [] : [payload]);
+      assert.deepEqual(f.notices, [t(action === 'open' ? 'desktop.browser_access.opened' : 'desktop.browser_access.copied')]);
+      assert.deepEqual(f.errors, [false]);
+      assert.ok(!f.notices.join().includes('access-test'));
+      assert.ok(!f.notices.join().includes('grant-test'));
+      assert.equal(await f.access.run(f.access.menu.submenu[index].label), false);
+      assert.equal(f.requests.length, authorization ? 2 : 1);
+    }
+  }
+});
+
+test('both languages retain zero-request cancellation and sanitized errors without retry', async () => {
+  for (const locale of ['en', 'zh-TW']) {
+    for (const action of ['open', 'copy-auth']) {
+      const canceled = fixture({ consent: false, locale });
+      assert.equal(await canceled.access.run(action), false);
+      assert.deepEqual(canceled.requests, []);
+      assert.deepEqual(canceled.notices, []);
+    }
+    const failed = fixture({ locale, failure: true });
+    assert.equal(await failed.access.run('open'), false);
+    assert.equal(failed.requests.length, 1);
+    assert.deepEqual(failed.copied, []);
+    assert.deepEqual(failed.opened, []);
+    assert.deepEqual(failed.notices, [create(locale).t('desktop.browser_access.failed')]);
+    assert.deepEqual(failed.errors, [true]);
+    for (const privateValue of [origin, 'access-test', 'grant-test']) assert.ok(!failed.notices.join().includes(privateValue));
+  }
+});
+
 test('new browser authorization requires consent and stays bound to the backend origin', async () => {
   const f = fixture();
   assert.equal(await f.access.run('open'), true);
diff --git a/desktop/test/diagnostics-i18n-browser-smoke.py b/desktop/test/diagnostics-i18n-browser-smoke.py
new file mode 100644
index 0000000..9d7af77
--- /dev/null
+++ b/desktop/test/diagnostics-i18n-browser-smoke.py
@@ -0,0 +1,74 @@
+"""Render the actual scriptless diagnostics HTML in both Desktop languages."""
+
+import argparse
+import json
+import os
+from pathlib import Path
+import subprocess
+from urllib.parse import quote
+
+
+ROOT = Path(__file__).resolve().parents[2]
+os.environ.setdefault('PLAYWRIGHT_BROWSERS_PATH', str(ROOT / 'tools' / '.ms-playwright'))
+
+from playwright.sync_api import sync_playwright
+
+
+SNAPSHOTS = r"""
+const { statusHtml } = require('./desktop/diagnostics-window.cjs');
+const { create } = require('./desktop/i18n.js');
+const raw = '/tmp/<img src="https://example.com/private" onerror="alert(1)">&{path}';
+const events = [{ event: 'backend_ready', mode: 'wsl', code: 'ECONNREFUSED',
+  literal: '</pre><script>window.injected = true</script>&' }];
+const snapshots = ['en', 'zh-TW'].map(locale => {
+  const i18n = create(locale);
+  return { locale, raw, eventText: events.map(event => JSON.stringify(event)).join('\n'),
+    title: i18n.t('desktop.diagnostics.title'),
+    windowTitle: i18n.t('desktop.diagnostics.window_title'),
+    label: i18n.t('desktop.diagnostics.profile_directory'),
+    emptyText: i18n.t('desktop.diagnostics.no_events'),
+    html: statusHtml([[i18n.t('desktop.diagnostics.profile_directory'), raw]], events, i18n),
+    emptyHtml: statusHtml([], [], i18n) };
+});
+console.log(JSON.stringify(snapshots));
+"""
+
+
+def run():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument('--node', default='node', help='Node 22.12+ or an Electron executable in Node mode')
+    args = parser.parse_args()
+    result = subprocess.run([args.node, '-e', SNAPSHOTS], cwd=ROOT,
+                            env={**os.environ, 'ELECTRON_RUN_AS_NODE': '1'},
+                            capture_output=True, text=True, check=True, timeout=30)
+    snapshots = json.loads(result.stdout)
+    with sync_playwright() as playwright:
+        browser = playwright.chromium.launch(headless=True)
+        try:
+            for snapshot in snapshots:
+                page = browser.new_page(viewport={'width': 640, 'height': 720})
+                requests = []
+                page.on('request', lambda request: requests.append(request.url))
+                page.goto('data:text/html,' + quote(snapshot['html'], safe=''))
+                assert page.locator('html').get_attribute('lang') == snapshot['locale']
+                assert page.title() == snapshot['windowTitle']
+                assert page.locator('h1').text_content() == snapshot['title']
+                assert page.locator('th').text_content() == snapshot['label']
+                assert page.locator('td').text_content() == snapshot['raw']
+                assert page.locator('pre').text_content() == snapshot['eventText']
+                assert page.locator('script, img, iframe, a').count() == 0
+                assert page.evaluate('typeof window.injected') == 'undefined'
+                csp = page.locator('meta[http-equiv="Content-Security-Policy"]').get_attribute('content')
+                assert "default-src 'none'" in csp
+                assert page.evaluate('document.documentElement.scrollWidth <= innerWidth')
+                page.goto('data:text/html,' + quote(snapshot['emptyHtml'], safe=''))
+                assert page.locator('pre').text_content() == snapshot['emptyText']
+                assert not any(url.startswith(('http:', 'https:', 'file:')) for url in requests), requests
+                page.close()
+                print(json.dumps({'locale': snapshot['locale'], 'diagnostics_dom': 'passed', 'events': 'literal'}))
+        finally:
+            browser.close()
+
+
+if __name__ == '__main__':
+    run()
diff --git a/desktop/test/diagnostics.test.cjs b/desktop/test/diagnostics.test.cjs
index a105178..bacefe2 100644
--- a/desktop/test/diagnostics.test.cjs
+++ b/desktop/test/diagnostics.test.cjs
@@ -4,6 +4,9 @@ const assert = require('node:assert/strict');
 const fs = require('node:fs');
 const os = require('node:os');
 const path = require('node:path');
+const vm = require('node:vm');
+const { EventEmitter } = require('node:events');
+const { create } = require('../i18n.js');
 const { createDiagnostics, diagnosticsMenu, agentConnectionInfo, openDeveloperTools, MAX_LOG_BYTES } = require('../diagnostics.cjs');
 const { statusHtml } = require('../diagnostics-window.cjs');
 
@@ -32,6 +35,109 @@ test('diagnostics persist only bounded structured metadata, never payloads or cr
   assert.equal(Object.hasOwn(exited, 'port'), false);
 });
 
+test('both diagnostic languages preserve menu IDs, callbacks and literal backend URLs', t => {
+  const { logger } = fixture(t);
+  for (const locale of ['en', 'zh-TW']) {
+    const { t: translate } = create(locale), calls = [], copied = [];
+    const menu = diagnosticsMenu({ t: translate, origin: 'http://127.0.0.1:64487', mode: 'wsl',
+      instanceId: 'test-instance', version: '0.5.2', logger, persistent: true,
+      openLogs: () => calls.push('logs'), openTools: () => calls.push('tools'), openStatus: () => calls.push('status'),
+      copyText: value => copied.push(value) });
+    assert.equal(menu.id, 'diagnostics');
+    assert.equal(menu.label, translate('desktop.toolbar.menu_diagnostics'));
+    const item = id => menu.submenu.find(item => item.id === id);
+    item('diagnostics-status').click(); item('diagnostics-logs').click(); item('diagnostics-devtools').click();
+    item('diagnostics-copy-origin').click();
+    assert.deepEqual(calls, ['status', 'logs', 'tools']);
+    assert.deepEqual(copied, ['http://127.0.0.1:64487']);
+    assert.equal(item('diagnostics-origin').label, translate('desktop.diagnostics.origin', { origin: copied[0] }));
+    assert.equal(item('diagnostics-core-version').label, translate('desktop.about.core_version', { version: translate('desktop.about.unknown_version') }));
+    assert.ok(menu.submenu.some(item => item.label === translate('desktop.diagnostics.web_settings_persistent')));
+  }
+});
+
+test('diagnostic translations and raw events stay escaped in a scriptless snapshot', () => {
+  const event = { event: 'backend_ready', mode: 'wsl', code: 'ECONNREFUSED', value: '</pre><script>bad()</script>&' };
+  for (const locale of ['en', 'zh-TW']) {
+    const i18n = create(locale);
+    const html = statusHtml([['Literal label', '/tmp/<profile>&{value}']], [event], i18n);
+    assert.ok(html.includes(`<html lang="${locale}">`));
+    assert.ok(html.includes(i18n.t('desktop.diagnostics.title')));
+    assert.ok(html.includes('/tmp/&lt;profile&gt;&amp;{value}'));
+    assert.ok(html.includes('&quot;event&quot;:&quot;backend_ready&quot;'));
+    assert.ok(html.includes('ECONNREFUSED'));
+    assert.ok(!html.includes('<script'));
+    assert.ok(html.includes("default-src 'none'"));
+    assert.ok(statusHtml([], [], i18n).includes(i18n.t('desktop.diagnostics.no_events')));
+  }
+  const injected = statusHtml([], [], { locale: 'en" onload="bad()', t: () => '<img src=x onerror=bad()>&' });
+  assert.ok(injected.includes('<html lang="en">'));
+  assert.ok(!injected.includes('<img'));
+  assert.ok(injected.includes('&lt;img'));
+});
+
+test('translated diagnostic windows refresh through the same isolated scriptless route', async () => {
+  for (const locale of ['en', 'zh-TW']) {
+    const owner = new EventEmitter(); owner.isDestroyed = () => false;
+    let requestFilter, permission, device, snapshotCalls = 0, copied = 0;
+    const windows = [];
+    class Window extends EventEmitter {
+      constructor(options) {
+        super(); this.options = options; this.urls = []; this.destroyed = false;
+        this.webContents = new EventEmitter();
+        this.webContents.setWindowOpenHandler = handler => { this.openHandler = handler; };
+        windows.push(this);
+      }
+      isDestroyed() { return this.destroyed; }
+      destroy() { this.destroyed = true; this.emit('closed'); }
+      setMenu(menu) { this.menu = menu; }
+      async loadURL(url) { this.urls.push(url); }
+      show() {}
+      focus() {}
+    }
+    const isolated = {
+      setPermissionRequestHandler: handler => { permission = handler; },
+      setPermissionCheckHandler: handler => { isolated.permissionCheck = handler; },
+      setDevicePermissionHandler: handler => { device = handler; },
+      webRequest: { onBeforeRequest: handler => { requestFilter = handler; } },
+    };
+    const electron = { BrowserWindow: Window, Menu: { buildFromTemplate: template => template },
+      session: { fromPartition: (_partition, options) => { assert.equal(options.cache, false); return isolated; } } };
+    const api = { exports: {} };
+    vm.runInNewContext(fs.readFileSync(path.join(__dirname, '..', 'diagnostics-window.cjs'), 'utf8'), {
+      require: name => name === 'electron' ? electron : require(name.startsWith('.') ? path.join(__dirname, '..', name) : name),
+      module: api,
+    });
+    const i18n = create(locale);
+    const show = api.exports.createStatusWindow(owner, () => ({ rows: [['Snapshot', ++snapshotCalls]], events: [] }),
+      { copyUrl: () => copied++, i18n });
+    const win = await show();
+    assert.equal(win.options.title, i18n.t('desktop.diagnostics.window_title'));
+    assert.equal(win.options.webPreferences.sandbox, true);
+    assert.equal(win.options.webPreferences.nodeIntegration, false);
+    assert.equal(win.options.webPreferences.preload, undefined);
+    assert.equal(win.menu[0].label, i18n.t('desktop.toolbar.menu_view'));
+    const [refresh, copy] = win.menu[0].submenu;
+    assert.equal(refresh.label, i18n.t('desktop.diagnostics.refresh'));
+    assert.equal(refresh.accelerator, 'CommandOrControl+R');
+    await refresh.click(); copy.click();
+    assert.equal(snapshotCalls, 2);
+    assert.equal(copied, 1);
+    assert.equal(await show(), win);
+    assert.equal(windows.length, 1);
+    assert.ok(decodeURIComponent(win.urls.at(-1)).includes(`<html lang="${locale}">`));
+    assert.equal(win.openHandler().action, 'deny');
+    for (const [url, blocked] of [[win.urls[0], false], ['https://example.com/', true], ['file:///private.txt', true]]) {
+      requestFilter({ url }, result => assert.equal(result.cancel, blocked));
+    }
+    permission(null, 'media', allowed => assert.equal(allowed, false));
+    assert.equal(isolated.permissionCheck(), false);
+    assert.equal(device(), false);
+    owner.emit('closed');
+    assert.equal(win.isDestroyed(), true);
+  }
+});
+
 test('diagnostic rotation is bounded and write failure does not block startup', t => {
   const { directory, logger } = fixture(t);
   fs.writeFileSync(logger.file, 'x'.repeat(MAX_LOG_BYTES));
diff --git a/docs/desktop_ui_copy_review.tsv b/docs/desktop_ui_copy_review.tsv
index 60b3885..8eb31cb 100644
--- a/docs/desktop_ui_copy_review.tsv
+++ b/docs/desktop_ui_copy_review.tsv
@@ -41,9 +41,9 @@ desktop.core_source.recovery_retention	Core files and data in the previous envir
 desktop.core_source.git_policy	Git uses the official askac/standterm repository, main branch. Its files are not checked against the installed bundle hashes. Local changes are allowed, but updates refuse to overwrite them. The Desktop shell stays installed.	Git Core uses askac/standterm on the main branch. Its files are not verified against the installed bundle hashes. Updates refuse to overwrite local changes. The Desktop shell stays installed.		Git-source confirmation detail; removes marketing qualifier while keeping source provenance and integrity boundary.		Keep askac/standterm and main literal. Preserve refusal on local changes and no reset/stash behavior. No automatic update, retry, or implied equivalence to the verified installed bundle.	proposed	desktop/core-source.cjs:coreController.confirm:62-63
 desktop.core_source.reauthorization	Authorization and recovery data are local to each Core source; switching may require reauthorization.	Each Core source has separate authorization and recovery data. Switching may require reauthorization.		Common source-change confirmation suffix; switching may change which credentials or recovery registrations are available.		Do not promise migration, reuse, deletion, or automatic authorization. Preserve sourceStore identity/source/pending fields and backend credential boundaries.	proposed	desktop/core-source.cjs:coreController.confirm:64
 desktop.core_source.failure_choices	The Desktop shell can retry or restore its installed Core. Existing files are retained.	Choose Retry to restart StandTerm and try again, or restore bundled Core. Existing files are kept.		Core unavailable dialog detail. Retry invokes restart(lastAction); displaying this dialog does not itself retry.		Keep response indices 0 Quit, 1 Retry, 2 Restore bundled Core, 3 Core source, 4 Open logs. defaultId=0/cancelId=0. Preserve fixed action IDs and lastAction replay; no automatic retry.	proposed	desktop/core-source.cjs:coreController.failure:111-124
-desktop.browser_access.opened	Browser authorization opened in the default browser.	Authorization link opened in the default browser.		Success notice after awaiting OS open callback; browser authorization has not been observed as completed.		Keep action open distinct from copy-auth/copy-url/copy-token; retain existing confirmation. Do not claim the browser is authorized or reveal the URL/token in the notice.	proposed	desktop/browser-access.cjs:createBrowserAccess.run:46-62
-desktop.browser_access.copied	Access information copied. Treat it as a password.	Access information copied. Keep it private, like a password.		Shared notice for copied authorization URL, access URL, or access token; the copied payload is sensitive.		Keep exact clipboard payload and fixed action IDs; do not insert secrets into catalog parameters, logs or notifications. No extra mint, reveal, or retry.	proposed	desktop/browser-access.cjs:createBrowserAccess.run:58-62
-desktop.browser_access.failed	Could not prepare browser access. Check that this Desktop backend is still running.	Could not prepare browser access. Check that this Desktop backend is running.		Sanitized generic failure notice; implementation deliberately discards URL-bearing network errors.		Preserve generic failure and error=true notification. Never display raw caught errors, URLs, grants or tokens. Keep pending/available guards and no automatic retry.	proposed	desktop/browser-access.cjs:createBrowserAccess.run catch:64-67
+desktop.browser_access.opened	Browser authorization opened in the default browser.	Authorization link opened in the default browser.	已在預設瀏覽器開啟授權連結。	Success notice after awaiting OS open callback; browser authorization has not been observed as completed.		Keep action open distinct from copy-auth/copy-url/copy-token; retain existing confirmation. Do not claim the browser is authorized or reveal the URL/token in the notice.	translation-reviewed	desktop/browser-access.cjs:createBrowserAccess.run:46-62
+desktop.browser_access.copied	Access information copied. Treat it as a password.	Access information copied. Keep it private, like a password.	已複製存取資訊。請像保管密碼一樣妥善保密。	Shared notice for copied authorization URL, access URL, or access token; the copied payload is sensitive.		Keep exact clipboard payload and fixed action IDs; do not insert secrets into catalog parameters, logs or notifications. No extra mint, reveal, or retry.	translation-reviewed	desktop/browser-access.cjs:createBrowserAccess.run:58-62
+desktop.browser_access.failed	Could not prepare browser access. Check that this Desktop backend is still running.	Could not prepare browser access. Check that this Desktop backend is running.	無法準備瀏覽器存取資訊。請確認此 Desktop 的後端仍在執行。	Sanitized generic failure notice; implementation deliberately discards URL-bearing network errors.		Preserve generic failure and error=true notification. Never display raw caught errors, URLs, grants or tokens. Keep pending/available guards and no automatic retry.	translation-reviewed	desktop/browser-access.cjs:createBrowserAccess.run catch:64-67
 desktop.toolbar.menu_standterm	StandTerm	StandTerm	StandTerm	Visible toolbar menu caption for data-menu=standterm.		Translate textContent only. Preserve data-menu, menu IDs, IPC routing and the macOS visibility rule.	translation-reviewed	desktop/toolbar.html:12
 desktop.toolbar.menu_edit	Edit	Edit	編輯	Visible toolbar menu caption for data-menu=edit.		Translate textContent only. Preserve data-menu, menu IDs, IPC routing and the macOS visibility rule.	translation-reviewed	desktop/toolbar.html:12
 desktop.toolbar.menu_agent	Agent	Agent	Agent	Visible toolbar menu caption for data-menu=agent-menu.		Translate textContent only. Preserve data-menu, menu IDs, IPC routing and the macOS visibility rule.	translation-reviewed	desktop/toolbar.html:12
@@ -69,3 +69,76 @@ desktop.menu.quit	Quit StandTerm	Quit StandTerm	結束 StandTerm	Custom main/tra
 desktop.menu.about	About StandTerm Desktop	About StandTerm Desktop	關於 StandTerm Desktop	Custom main/tray menu label; destination dialog may remain English during the pilot.		Translate display label only. Keep callbacks, accelerators, native roles and action IDs unchanged.	translation-reviewed	desktop/main.cjs:createTray/start
 desktop.menu.core_source	Core source (Advanced)...	Core source (Advanced)...	Core 來源（進階）…	Custom main/tray menu label; destination dialog may remain English during the pilot.		Translate display label only. Keep callbacks, accelerators, native roles and action IDs unchanged.	translation-reviewed	desktop/main.cjs:createTray/start
 desktop.menu.capture_settings	Capture Settings...	Capture Settings...	畫面擷取設定…	Custom main/tray menu label; destination dialog may remain English during the pilot.		Translate display label only. Keep callbacks, accelerators, native roles and action IDs unchanged.	translation-reviewed	desktop/main.cjs:createTray/start
+desktop.browser_access.menu	Browser Access	Browser access	瀏覽器存取	Native Browser Access submenu.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Never put token, grant or URL values into a notice or translated label. Preserve exact clipboard payloads and action-specific confirmation rules.	translation-reviewed	desktop/browser-access.cjs:createBrowserAccess.menu
+desktop.browser_access.open	Open in browser...	Open in browser…	在瀏覽器開啟…	Action open; requires existing authorization confirmation.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Never put token, grant or URL values into a notice or translated label. Preserve exact clipboard payloads and action-specific confirmation rules.	translation-reviewed	desktop/browser-access.cjs:createBrowserAccess.menu
+desktop.browser_access.copy_authorization	Copy browser authorization URL...	Copy browser authorization URL…	複製瀏覽器授權網址…	Action copy-auth; requests a new authorization link after confirmation.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Never put token, grant or URL values into a notice or translated label. Preserve exact clipboard payloads and action-specific confirmation rules.	translation-reviewed	desktop/browser-access.cjs:createBrowserAccess.menu
+desktop.browser_access.copy_url	Copy access URL (sensitive)	Copy access URL (sensitive)	複製存取網址（敏感資訊）	Action copy-url; copies the current token-bearing access URL.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Never put token, grant or URL values into a notice or translated label. Preserve exact clipboard payloads and action-specific confirmation rules.	translation-reviewed	desktop/browser-access.cjs:createBrowserAccess.menu
+desktop.browser_access.copy_token	Copy access token (sensitive)	Copy access token (sensitive)	複製存取權杖（敏感資訊）	Action copy-token; copies only the current access token.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Never put token, grant or URL values into a notice or translated label. Preserve exact clipboard payloads and action-specific confirmation rules.	translation-reviewed	desktop/browser-access.cjs:createBrowserAccess.menu
+desktop.browser_access.confirm_title	Authorize another browser	Authorize another browser	授權其他瀏覽器	Browser Access confirmation before opening or copying a browser authorization link.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep Cancel at response/defaultId/cancelId 0 and Continue at response 1. Preserve replacement of the previous unused grant; do not claim current browser authorization or existing sessions are revoked.	translation-reviewed	desktop/main.cjs:createBrowserAccess.confirm
+desktop.browser_access.confirm_message	Allow another browser to access this StandTerm instance?	Allow another browser to access this StandTerm instance?	允許其他瀏覽器存取此 StandTerm 執行個體嗎？	Browser Access confirmation before opening or copying a browser authorization link.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep Cancel at response/defaultId/cancelId 0 and Continue at response 1. Preserve replacement of the previous unused grant; do not claim current browser authorization or existing sessions are revoked.	translation-reviewed	desktop/main.cjs:createBrowserAccess.confirm
+desktop.browser_access.confirm_detail	The authorization URL contains sensitive access information. Share it only with your own trusted browser. Opening it may store it in browser history. A new authorization link replaces the previous unused link.	The authorization URL contains sensitive access information. Use it only in your own trusted browser. Opening it may save it in browser history. A new link replaces the previous unused authorization link.	授權網址含有敏感的存取資訊，請僅在自己信任的瀏覽器中使用。開啟後可能留存在瀏覽紀錄中。新的授權連結會取代先前尚未使用的授權連結。	Browser Access confirmation before opening or copying a browser authorization link.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep Cancel at response/defaultId/cancelId 0 and Continue at response 1. Preserve replacement of the previous unused grant; do not claim current browser authorization or existing sessions are revoked.	translation-reviewed	desktop/main.cjs:createBrowserAccess.confirm
+desktop.browser_access.continue	Continue	Continue	繼續	Browser Access confirmation before opening or copying a browser authorization link.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep Cancel at response/defaultId/cancelId 0 and Continue at response 1. Preserve replacement of the previous unused grant; do not claim current browser authorization or existing sessions are revoked.	translation-reviewed	desktop/main.cjs:createBrowserAccess.confirm
+desktop.about.desktop_version	StandTerm Desktop {version}	StandTerm Desktop {version}	StandTerm Desktop {version}	About/runtime text also reusable by the native diagnostics menu.	{version}	Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep version strings, Git revisions, SHA-256 values, WSL/Native menu values and MODES runtime labels literal. Translate only an explicit missing-value fallback.	translation-reviewed	desktop/main.cjs:coreVersion/coreBuild/buildLabel/aboutDetails; desktop/diagnostics.cjs:diagnosticsMenu
+desktop.about.core_version	Core version: {version}	Core version: {version}	Core 版本：{version}	About/runtime text also reusable by the native diagnostics menu.	{version}	Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep version strings, Git revisions, SHA-256 values, WSL/Native menu values and MODES runtime labels literal. Translate only an explicit missing-value fallback.	translation-reviewed	desktop/main.cjs:coreVersion/coreBuild/buildLabel/aboutDetails; desktop/diagnostics.cjs:diagnosticsMenu
+desktop.about.backend	Backend: {backend}	Backend: {backend}	後端：{backend}	About/runtime text also reusable by the native diagnostics menu.	{backend}	Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep version strings, Git revisions, SHA-256 values, WSL/Native menu values and MODES runtime labels literal. Translate only an explicit missing-value fallback.	translation-reviewed	desktop/main.cjs:coreVersion/coreBuild/buildLabel/aboutDetails; desktop/diagnostics.cjs:diagnosticsMenu
+desktop.about.unknown_version	Unknown (older Core)	Unknown (older Core)	未知（舊版 Core）	About/runtime text also reusable by the native diagnostics menu.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep version strings, Git revisions, SHA-256 values, WSL/Native menu values and MODES runtime labels literal. Translate only an explicit missing-value fallback.	translation-reviewed	desktop/main.cjs:coreVersion/coreBuild/buildLabel/aboutDetails; desktop/diagnostics.cjs:diagnosticsMenu
+desktop.about.unmanaged_source	Source checkout / no managed bundle identity	Source checkout / no managed bundle identity	原始碼工作目錄／無受管理的套件識別資訊	About/runtime text also reusable by the native diagnostics menu.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep version strings, Git revisions, SHA-256 values, WSL/Native menu values and MODES runtime labels literal. Translate only an explicit missing-value fallback.	translation-reviewed	desktop/main.cjs:coreVersion/coreBuild/buildLabel/aboutDetails; desktop/diagnostics.cjs:diagnosticsMenu
+desktop.about.git_revision	Core Git revision	Core Git revision	Core Git 修訂版本	About/runtime text also reusable by the native diagnostics menu.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep version strings, Git revisions, SHA-256 values, WSL/Native menu values and MODES runtime labels literal. Translate only an explicit missing-value fallback.	translation-reviewed	desktop/main.cjs:coreVersion/coreBuild/buildLabel/aboutDetails; desktop/diagnostics.cjs:diagnosticsMenu
+desktop.about.bundle_sha256	Core bundle SHA-256	Core bundle SHA-256	Core 套件 SHA-256	About/runtime text also reusable by the native diagnostics menu.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep version strings, Git revisions, SHA-256 values, WSL/Native menu values and MODES runtime labels literal. Translate only an explicit missing-value fallback.	translation-reviewed	desktop/main.cjs:coreVersion/coreBuild/buildLabel/aboutDetails; desktop/diagnostics.cjs:diagnosticsMenu
+desktop.about.details	Core version: {core_version}\n{build_label}: {core_build}\nBackend: {backend}\nPython: {python_version}\nElectron: {electron_version}\nChromium: {chromium_version}\nNode.js: {node_version}\nPlatform: {platform} / {arch}\n\nEvaluation build; updates are installed manually.	Core version: {core_version}\n{build_label}: {core_build}\nBackend: {backend}\nPython: {python_version}\nElectron: {electron_version}\nChromium: {chromium_version}\nNode.js: {node_version}\nPlatform: {platform} / {arch}\n\nEvaluation build. Install updates manually.	Core 版本：{core_version}\n{build_label}：{core_build}\n後端：{backend}\nPython：{python_version}\nElectron：{electron_version}\nChromium：{chromium_version}\nNode.js：{node_version}\n平台：{platform} / {arch}\n\n評估版本，更新需手動安裝。	Complete About detail with existing line breaks and literal runtime values.	{core_version}, {build_label}, {core_build}, {backend}, {python_version}, {electron_version}, {chromium_version}, {node_version}, {platform}, {arch}	Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. TSV stores literal \n sequences; convert them to line breaks when generating messages. build_label is the translated Git-revision or bundle-SHA-256 label. Never translate MODES values, platform/arch, version, revision or hash parameters.	translation-reviewed	desktop/main.cjs:aboutDetails
+desktop.diagnostics.show_status	Status and recent events...	Status and recent events…	狀態與近期事件…	Native diagnostics status-window action.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Copy backend URL means the validated base_url/origin without token or authorization query parameters. Keep diagnostics event and schema field names unchanged.	translation-reviewed	desktop/diagnostics.cjs:diagnosticsMenu
+desktop.diagnostics.origin	URL: {origin}	URL: {origin}	網址：{origin}	Disabled native-menu row showing the tokenless backend origin.	{origin}	Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Copy backend URL means the validated base_url/origin without token or authorization query parameters. Keep diagnostics event and schema field names unchanged.	translation-reviewed	desktop/diagnostics.cjs:diagnosticsMenu
+desktop.diagnostics.copy_backend_url	Copy backend URL	Copy backend URL	複製後端網址	Native menu action shared with diagnostics window.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Copy backend URL means the validated base_url/origin without token or authorization query parameters. Keep diagnostics event and schema field names unchanged.	translation-reviewed	desktop/diagnostics.cjs:diagnosticsMenu
+desktop.diagnostics.web_settings_persistent	Web settings: saved per origin (same as Core)	Web settings: saved per origin (same as Core)	網頁設定：依來源儲存（與 Core 相同）	Native menu persistence status for a normal profile.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Copy backend URL means the validated base_url/origin without token or authorization query parameters. Keep diagnostics event and schema field names unchanged.	translation-reviewed	desktop/diagnostics.cjs:diagnosticsMenu
+desktop.diagnostics.web_settings_temporary	Web settings: temporary test profile	Web settings: temporary test profile	網頁設定：暫存測試設定檔	Native menu persistence status for the smoke profile.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Copy backend URL means the validated base_url/origin without token or authorization query parameters. Keep diagnostics event and schema field names unchanged.	translation-reviewed	desktop/diagnostics.cjs:diagnosticsMenu
+desktop.diagnostics.open_logs	Open diagnostics log folder	Open diagnostics log folder	開啟診斷紀錄資料夾	Native log-folder action.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Copy backend URL means the validated base_url/origin without token or authorization query parameters. Keep diagnostics event and schema field names unchanged.	translation-reviewed	desktop/diagnostics.cjs:diagnosticsMenu
+desktop.diagnostics.logs_filtered	Logs exclude credentials and terminal content	Logs exclude credentials and terminal content	紀錄不含憑證與終端內容	Status for the existing structured diagnostic logger.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Copy backend URL means the validated base_url/origin without token or authorization query parameters. Keep diagnostics event and schema field names unchanged.	translation-reviewed	desktop/diagnostics.cjs:diagnosticsMenu
+desktop.diagnostics.log_unwritable	Diagnostic log could not be written	Could not write the diagnostic log	無法寫入診斷紀錄	Logger available=false display; no assurance that a file was created.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Copy backend URL means the validated base_url/origin without token or authorization query parameters. Keep diagnostics event and schema field names unchanged.	translation-reviewed	desktop/diagnostics.cjs:diagnosticsMenu
+desktop.diagnostics.devtools_menu	Developer Tools...	Developer Tools…	開發人員工具…	Native developer-tools menu action; confirmation remains required.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Copy backend URL means the validated base_url/origin without token or authorization query parameters. Keep diagnostics event and schema field names unchanged.	translation-reviewed	desktop/diagnostics.cjs:diagnosticsMenu
+desktop.diagnostics.window_title	StandTerm Desktop - Diagnostics	StandTerm Desktop - Diagnostics	StandTerm Desktop - 診斷	Native window title and HTML title.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep the page scriptless and isolated; escape both translated prose and runtime data before HTML interpolation. JSON event names, field names, schema, mode and code values stay literal. Reuse desktop.toolbar.menu_view.	translation-reviewed	desktop/diagnostics-window.cjs:statusHtml/createStatusWindow
+desktop.diagnostics.title	Desktop diagnostics	Desktop diagnostics	Desktop 診斷	Scriptless diagnostics page heading.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep the page scriptless and isolated; escape both translated prose and runtime data before HTML interpolation. JSON event names, field names, schema, mode and code values stay literal. Reuse desktop.toolbar.menu_view.	translation-reviewed	desktop/diagnostics-window.cjs:statusHtml/createStatusWindow
+desktop.diagnostics.read_only_hint	Read-only snapshot. Use View > Refresh (Ctrl/Cmd+R) for current data.	Read-only snapshot. Use View > Refresh (Ctrl/Cmd+R) to update.	唯讀快照。請選擇「檢視 > 重新整理」（Ctrl/Cmd+R）取得最新資料。	Snapshot freshness explanation; no automatic refresh promise.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep the page scriptless and isolated; escape both translated prose and runtime data before HTML interpolation. JSON event names, field names, schema, mode and code values stay literal. Reuse desktop.toolbar.menu_view.	translation-reviewed	desktop/diagnostics-window.cjs:statusHtml/createStatusWindow
+desktop.diagnostics.runtime_heading	Runtime and storage	Runtime and storage	執行環境與儲存	Runtime table heading.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep the page scriptless and isolated; escape both translated prose and runtime data before HTML interpolation. JSON event names, field names, schema, mode and code values stay literal. Reuse desktop.toolbar.menu_view.	translation-reviewed	desktop/diagnostics-window.cjs:statusHtml/createStatusWindow
+desktop.diagnostics.handoff_heading	Preview and browser handoff	Preview and browser handoff	預覽與外部瀏覽器	External preview behavior heading.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep the page scriptless and isolated; escape both translated prose and runtime data before HTML interpolation. JSON event names, field names, schema, mode and code values stay literal. Reuse desktop.toolbar.menu_view.	translation-reviewed	desktop/diagnostics-window.cjs:statusHtml/createStatusWindow
+desktop.diagnostics.handoff_hint	External embedded previews are blocked in Desktop. Use the preview's Open in browser button and confirm the destination. This opens your OS default browser; its cookies and login are separate. Desktop credentials are not added to the URL.	Desktop blocks external embedded previews. Choose Open in browser in the preview and confirm the destination. Your default browser uses separate cookies and login. Desktop credentials are not added to the URL.	Desktop 會封鎖外部網頁的內嵌預覽。請在預覽中選擇「在瀏覽器開啟」（Open in browser）並確認目的地。預設瀏覽器使用獨立的 Cookie 與登入狀態，網址不會加入 Desktop 憑證。	Full external-preview explanation; preserve explicit destination confirmation and separate browser login.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep the page scriptless and isolated; escape both translated prose and runtime data before HTML interpolation. JSON event names, field names, schema, mode and code values stay literal. Reuse desktop.toolbar.menu_view.	translation-reviewed	desktop/diagnostics-window.cjs:statusHtml/createStatusWindow
+desktop.diagnostics.events_heading	Recent startup events	Recent startup events	近期啟動事件	Structured startup-event list heading.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep the page scriptless and isolated; escape both translated prose and runtime data before HTML interpolation. JSON event names, field names, schema, mode and code values stay literal. Reuse desktop.toolbar.menu_view.	translation-reviewed	desktop/diagnostics-window.cjs:statusHtml/createStatusWindow
+desktop.diagnostics.events_hint	Up to 200 structured events from this run. No terminal content, private keys, tokens or external URLs. Previous runs are available in the diagnostics log folder.	Up to 200 structured events from this run. No terminal content, private keys, tokens or external URLs. Find previous runs in the diagnostics log folder.	顯示本次執行最多 200 筆結構化事件，不含終端內容、私密金鑰、權杖或外部網址。先前執行的紀錄可在診斷紀錄資料夾中查看。	Event retention and redaction explanation; events themselves remain raw JSON.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep the page scriptless and isolated; escape both translated prose and runtime data before HTML interpolation. JSON event names, field names, schema, mode and code values stay literal. Reuse desktop.toolbar.menu_view.	translation-reviewed	desktop/diagnostics-window.cjs:statusHtml/createStatusWindow
+desktop.diagnostics.no_events	No events yet.	No events yet.	目前沒有事件。	Empty preformatted event list fallback.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep the page scriptless and isolated; escape both translated prose and runtime data before HTML interpolation. JSON event names, field names, schema, mode and code values stay literal. Reuse desktop.toolbar.menu_view.	translation-reviewed	desktop/diagnostics-window.cjs:statusHtml/createStatusWindow
+desktop.diagnostics.refresh	Refresh	Refresh	重新整理	Native diagnostics View submenu action; accelerator unchanged.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep the page scriptless and isolated; escape both translated prose and runtime data before HTML interpolation. JSON event names, field names, schema, mode and code values stay literal. Reuse desktop.toolbar.menu_view.	translation-reviewed	desktop/diagnostics-window.cjs:statusHtml/createStatusWindow
+desktop.diagnostics.desktop_version	Desktop version	Desktop version	Desktop 版本	Read-only runtime table row label.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate the label only. Keep MODES values, IDs, URL origin, versions, platform/architecture, paths and hashes literal and escaped.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.backend_mode	Backend mode	Backend mode	後端模式	Read-only runtime table row label.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate the label only. Keep MODES values, IDs, URL origin, versions, platform/architecture, paths and hashes literal and escaped.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.core_version	Core version	Core version	Core 版本	Read-only runtime table row label.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate the label only. Keep MODES values, IDs, URL origin, versions, platform/architecture, paths and hashes literal and escaped.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.python_version	Python version	Python version	Python 版本	Read-only runtime table row label.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate the label only. Keep MODES values, IDs, URL origin, versions, platform/architecture, paths and hashes literal and escaped.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.backend_url	Backend URL	Backend URL	後端網址	Read-only runtime table row label.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate the label only. Keep MODES values, IDs, URL origin, versions, platform/architecture, paths and hashes literal and escaped.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.instance_id	Instance ID	Instance ID	執行個體 ID	Read-only runtime table row label.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate the label only. Keep MODES values, IDs, URL origin, versions, platform/architecture, paths and hashes literal and escaped.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.platform	Platform	Platform	平台	Read-only runtime table row label.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate the label only. Keep MODES values, IDs, URL origin, versions, platform/architecture, paths and hashes literal and escaped.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.engines	Electron / Chromium / Node	Electron / Chromium / Node	Electron / Chromium / Node	Read-only runtime table row label.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate the label only. Keep MODES values, IDs, URL origin, versions, platform/architecture, paths and hashes literal and escaped.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.backend_process	Backend process	Backend process	後端程序	Read-only runtime table row label.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate the label only. Keep MODES values, IDs, URL origin, versions, platform/architecture, paths and hashes literal and escaped.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.renderer_process	Renderer process	Renderer process	渲染程序	Read-only runtime table row label.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate the label only. Keep MODES values, IDs, URL origin, versions, platform/architecture, paths and hashes literal and escaped.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.browser_storage	Browser storage	Browser storage	瀏覽器儲存	Read-only runtime table row label.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate the label only. Keep MODES values, IDs, URL origin, versions, platform/architecture, paths and hashes literal and escaped.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.profile_directory	Profile directory	Profile directory	設定檔目錄	Read-only runtime table row label.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate the label only. Keep MODES values, IDs, URL origin, versions, platform/architecture, paths and hashes literal and escaped.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.port_settings	Port settings	Port settings	連接埠設定	Read-only runtime table row label.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate the label only. Keep MODES values, IDs, URL origin, versions, platform/architecture, paths and hashes literal and escaped.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.log_file	Diagnostic log	Diagnostic log	診斷紀錄	Read-only runtime table row label.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate the label only. Keep MODES values, IDs, URL origin, versions, platform/architecture, paths and hashes literal and escaped.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.log_writable	Log writable	Log write status	記錄寫入狀態	Runtime log status label. The available flag records the last write outcome; it is not a current filesystem-writability probe.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate the label only. Keep MODES values, IDs, URL origin, versions, platform/architecture, paths and hashes literal and escaped.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.security	Security	Security	安全性	Read-only runtime table row label.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate the label only. Keep MODES values, IDs, URL origin, versions, platform/architecture, paths and hashes literal and escaped.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.running	Running	Running	執行中	Runtime table display value selected from existing typed process/storage/logging state.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate display state only. Keep running/crashed checks, smoke-profile selection, logging availability, sandbox and network policy unchanged. Do not translate diagnostic JSON values.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.stopped	Stopped	Stopped	已停止	Runtime table display value selected from existing typed process/storage/logging state.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate display state only. Keep running/crashed checks, smoke-profile selection, logging availability, sandbox and network policy unchanged. Do not translate diagnostic JSON values.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.crashed	Crashed	Crashed	已當機	Runtime table display value selected from existing typed process/storage/logging state.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate display state only. Keep running/crashed checks, smoke-profile selection, logging availability, sandbox and network policy unchanged. Do not translate diagnostic JSON values.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.log_write_ok	Yes	No write error reported	未回報寫入錯誤	Log-write status when diagnostics.available is true, including its initial true state. Not a generic Yes label.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate display state only. Keep running/crashed checks, smoke-profile selection, logging availability, sandbox and network policy unchanged. Do not translate diagnostic JSON values. Do not claim a successful write or a current writable-path probe.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.log_write_failed	No	Write failed	寫入失敗	Log-write status when diagnostics.available is false after a write exception. Not a generic No label.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate display state only. Keep running/crashed checks, smoke-profile selection, logging availability, sandbox and network policy unchanged. Do not translate diagnostic JSON values.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.storage_persistent	Persistent per origin; same as Core	Persistent per origin; same as Core	依來源持續保留；與 Core 相同	Runtime table display value selected from existing typed process/storage/logging state.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate display state only. Keep running/crashed checks, smoke-profile selection, logging availability, sandbox and network policy unchanged. Do not translate diagnostic JSON values.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.storage_temporary	Temporary test profile	Temporary test profile	暫存測試設定檔	Runtime table display value selected from existing typed process/storage/logging state.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate display state only. Keep running/crashed checks, smoke-profile selection, logging availability, sandbox and network policy unchanged. Do not translate diagnostic JSON values.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.security_detail	Core sandbox on; Node/preload off; isolated Desktop toolbar; external preview network blocked	Core sandbox on; Node/preload off; isolated Desktop toolbar; external preview network blocked	Core 沙箱已啟用；Node／preload 已停用；Desktop 工具列獨立隔離；已封鎖外部預覽的網路存取	Runtime table display value selected from existing typed process/storage/logging state.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Translate display state only. Keep running/crashed checks, smoke-profile selection, logging availability, sandbox and network policy unchanged. Do not translate diagnostic JSON values.	translation-reviewed	desktop/main.cjs:openStatus.snapshot.rows
+desktop.diagnostics.open_failed	Could not open the diagnostics page.	Could not open the diagnostics page.	無法開啟診斷頁面。	Status-window open failure; no raw Error text in the notice.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep Cancel response/defaultId/cancelId 0 and developer-tools response 1. Preserve devtools_opened event ID and detached frontend-only debugger. Raw log-folder path stays in the designated detail field.	translation-reviewed	desktop/main.cjs:diagnosticsMenu.openStatus/openLogs/openTools
+desktop.diagnostics.folder_failed	Could not open the diagnostics folder.	Could not open the diagnostics folder.	無法開啟診斷資料夾。	Log-folder open failure; existing raw path remains in dialog detail.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep Cancel response/defaultId/cancelId 0 and developer-tools response 1. Preserve devtools_opened event ID and detached frontend-only debugger. Raw log-folder path stays in the designated detail field.	translation-reviewed	desktop/main.cjs:diagnosticsMenu.openStatus/openLogs/openTools
+desktop.diagnostics.devtools_title	Developer Tools	Developer Tools	開發人員工具	Developer-tools confirmation title.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep Cancel response/defaultId/cancelId 0 and developer-tools response 1. Preserve devtools_opened event ID and detached frontend-only debugger. Raw log-folder path stays in the designated detail field.	translation-reviewed	desktop/main.cjs:diagnosticsMenu.openStatus/openLogs/openTools
+desktop.diagnostics.devtools_message	Open Developer Tools for this authenticated terminal UI?	Open Developer Tools for this authenticated terminal UI?	要為此已通過身分驗證的終端介面開啟開發人員工具嗎？	Developer-tools confirmation question.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep Cancel response/defaultId/cancelId 0 and developer-tools response 1. Preserve devtools_opened event ID and detached frontend-only debugger. Raw log-folder path stays in the designated detail field.	translation-reviewed	desktop/main.cjs:diagnosticsMenu.openStatus/openLogs/openTools
+desktop.diagnostics.devtools_detail	Console code can read page data and operate connected terminals. Only run code you trust. This opens a local frontend debugger, not a remote debugging port or a Node.js bridge.	Console code can read page data and operate connected terminals. Run only code you trust. This opens a local frontend debugger, not a remote debugging port or Node.js bridge.	主控台程式碼可讀取頁面資料並操作已連線的終端。請只執行可信任的程式碼。此操作會開啟本機前端偵錯工具，不會開啟遠端偵錯連接埠或 Node.js 橋接介面。	Complete consequence explanation before attaching frontend developer tools.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep Cancel response/defaultId/cancelId 0 and developer-tools response 1. Preserve devtools_opened event ID and detached frontend-only debugger. Raw log-folder path stays in the designated detail field.	translation-reviewed	desktop/main.cjs:diagnosticsMenu.openStatus/openLogs/openTools
+desktop.diagnostics.devtools_open	Open Developer Tools	Open Developer Tools	開啟開發人員工具	Affirmative developer-tools confirmation button.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Keep Cancel response/defaultId/cancelId 0 and developer-tools response 1. Preserve devtools_opened event ID and detached frontend-only debugger. Raw log-folder path stays in the designated detail field.	translation-reviewed	desktop/main.cjs:diagnosticsMenu.openStatus/openLogs/openTools
+desktop.external_browser.title	Open in default browser	Open in default browser	在預設瀏覽器開啟	External-browser destination confirmation or generic OS open failure.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Only the confirmation may show the raw destination URL and host. Never insert URL, token, grant or cookies into generic notices. Preserve Cancel response/defaultId/cancelId 0, Open response 1, destination validation and user confirmation. TSV detail stores literal \n separators.	translation-reviewed	desktop/main.cjs:createExternalOpener.confirm/notify
+desktop.external_browser.message	Open {host} in your default browser?	Open {host} in your default browser?	要在預設瀏覽器開啟 {host} 嗎？	External-browser destination confirmation or generic OS open failure.	{host}	Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Only the confirmation may show the raw destination URL and host. Never insert URL, token, grant or cookies into generic notices. Preserve Cancel response/defaultId/cancelId 0, Open response 1, destination validation and user confirmation. TSV detail stores literal \n separators.	translation-reviewed	desktop/main.cjs:createExternalOpener.confirm/notify
+desktop.external_browser.detail	{url}\n\nThe browser uses its own login. StandTerm does not add its token or cookies.	{url}\n\nThe browser uses its own login. StandTerm does not add its token or cookies.	{url}\n\n瀏覽器使用自己的登入狀態。StandTerm 不會加入自己的權杖或 Cookie。	External-browser destination confirmation or generic OS open failure.	{url}	Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Only the confirmation may show the raw destination URL and host. Never insert URL, token, grant or cookies into generic notices. Preserve Cancel response/defaultId/cancelId 0, Open response 1, destination validation and user confirmation. TSV detail stores literal \n separators.	translation-reviewed	desktop/main.cjs:createExternalOpener.confirm/notify
+desktop.external_browser.open	Open in browser	Open in browser	在瀏覽器開啟	External-browser destination confirmation or generic OS open failure.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Only the confirmation may show the raw destination URL and host. Never insert URL, token, grant or cookies into generic notices. Preserve Cancel response/defaultId/cancelId 0, Open response 1, destination validation and user confirmation. TSV detail stores literal \n separators.	translation-reviewed	desktop/main.cjs:createExternalOpener.confirm/notify
+desktop.external_browser.failed	Could not open the default browser.	Could not open the default browser.	無法開啟預設瀏覽器。	External-browser destination confirmation or generic OS open failure.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Only the confirmation may show the raw destination URL and host. Never insert URL, token, grant or cookies into generic notices. Preserve Cancel response/defaultId/cancelId 0, Open response 1, destination validation and user confirmation. TSV detail stores literal \n separators.	translation-reviewed	desktop/main.cjs:createExternalOpener.confirm/notify
+desktop.external_browser.failure_hint	Check the default HTTP/HTTPS browser in your operating system settings.	Check the default HTTP/HTTPS browser in your operating system settings.	請在作業系統設定中檢查 HTTP／HTTPS 的預設瀏覽器。	External-browser destination confirmation or generic OS open failure.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Only the confirmation may show the raw destination URL and host. Never insert URL, token, grant or cookies into generic notices. Preserve Cancel response/defaultId/cancelId 0, Open response 1, destination validation and user confirmation. TSV detail stores literal \n separators.	translation-reviewed	desktop/main.cjs:createExternalOpener.confirm/notify
+desktop.diagnostics.native_backend	Native	Native	原生	Native diagnostics-menu backend display selected when mode is not wsl.		Display label only. Keep wsl/windows/macos mode IDs, MODES runtime values and event JSON unchanged. Keep WSL literal. Escape translated values in any HTML renderer.	translation-reviewed	desktop/diagnostics.cjs:diagnosticsMenu:diagnostics-backend
diff --git a/docs/desktop_ui_review_plan.md b/docs/desktop_ui_review_plan.md
index 7009093..5071e3c 100644
--- a/docs/desktop_ui_review_plan.md
+++ b/docs/desktop_ui_review_plan.md
@@ -12,11 +12,11 @@ acceptance remain separate. Browser acceptance is recorded in
 | --- | --- | --- | --- |
 | 0 — Complete | Clarify toolbar action feedback before localization. A resolved `false` now shows unavailable feedback; a rejected invocation reports an uncertain result without suggesting retry. | Small | Both original failures reproduced before the fix; renderer and command-guard checks passed. Each click invokes once, with no automatic replay or invented completion notice. |
 | 1 — Complete | Add a Desktop-owned language preference and catalog; pilot custom menus, toolbar labels and Agent help. | Medium | English default/fallback, `en` and `zh-TW`, malformed preference fallback, next-launch application, translated title/ARIA labels without losing SVGs, fixed command IDs, focus/origin guards and staging inclusion verified. Native acceptance remains order 4. |
-| 2 | Review and localize Capture, Browser Access and Diagnostics. Resolve the recording save-failure exit policy before the Capture portion. | Medium | Typed recording states, partial-file paths, cancel/default buttons, first-folder seeding, sensitive clipboard feedback and escaped diagnostic fields retain their contracts. Add combined save-failure plus close/quit coverage. |
+| 2 — Partial | Browser Access and Diagnostics are localized, including About and external-browser confirmations. Capture remains; resolve its save-failure exit policy first. | Medium | Sensitive clipboard feedback, fixed authorization actions, escaped diagnostic fields and literal event JSON verified in both languages. Capture still needs typed state, partial-file, folder-seeding and combined save-failure plus close/quit coverage. |
 | 3 | Localize setup, Core source selection, startup failure and recoverable environment cleanup. | Medium to large | Both languages work before Core is available. Cancellation waits for owned installers; stale confirmations do nothing; source switching, restart/session closure, retained files and recovery moves remain explicit. |
 | 4 | Complete Windows and macOS native acceptance and packaged asset checks. | Platform-dependent | Menus, native dialogs, narrow layouts, keyboard/ARIA labels, clipboard, setup and recovery are checked on each OS. Verify staged and packaged Desktop catalogs independently of the selected Core version. |
 
-The next implementation is Browser Access/Diagnostics and then Capture in order 2.
+The next implementation is Capture in order 2.
 Resolve the recording save-failure exit policy before changing its confirmation.
 Orders 1–3 should remain separate reviewable changes. First-run setup can move
 ahead of order 2 if onboarding becomes the priority; it is not required to prove
@@ -68,8 +68,8 @@ Keep these implementation boundaries:
 
 [desktop_ui_copy_review.tsv](desktop_ui_copy_review.tsv) is a prioritized seed
 inventory, not a claim that every Desktop string has been extracted. It uses
-the same nine columns as the browser table. After the pilot, 50 rows are
-`translation-reviewed` with English and Traditional Chinese text; 20 workflow
+the same nine columns as the browser table. After Browser Access/Diagnostics,
+126 rows are `translation-reviewed` with English and Traditional Chinese text; 17 workflow
 rows remain `proposed` with empty `zh-TW` cells. Some `current_en` cells are exact fragments or normalize
 dynamic values to named placeholders; `context` identifies these cases.
 
@@ -146,8 +146,44 @@ remaining gap in the new preference, DOM and command tests.
 No policy was reopened. Core's independent language preference and the existing
 recording-exit behavior remain intact. Native OS qualification is still order 4.
 
+## Browser Access and Diagnostics review
+
+The second implementation batch adds 76 reviewed bilingual messages. Browser
+authorization notices describe opening a link, without claiming the browser
+completed authorization. Copying a token/access URL still makes no grant request;
+creating an authorization link still requires the existing confirmation. The
+warning retains sensitive URL handling, browser history and replacement of the
+previous unused link. Exceptions still produce a sanitized notice.
+
+Diagnostics localizes menus, runtime field labels/states and explanatory text.
+Version strings, paths, bundle hashes, instance IDs, backend origins and event
+JSON remain literal data. The diagnostic HTML still has no scripts; every
+translated string and displayed value is escaped at the final HTML boundary.
+About and external-browser confirmations share these display conventions.
+
+| Finding | Severity | Evidence | Critic remedy | Main response | Resolution | Validation |
+| --- | --- | --- | --- | --- | --- | --- |
+| “Log writable” implies a live filesystem check | Low | `createDiagnostics.available` starts true and tracks write outcomes | Describe write status, not present writability | Use “Log write status” with “No write error reported” / “Write failed” | Accept | Existing log-failure tests and localized display reviewed; flag semantics unchanged. |
+| An opened authorization link does not prove completed authorization | Correctness boundary | `createBrowserAccess.run` awaits the OS open callback | Keep link-open feedback distinct from authorization | Applied reviewed copy; no request or permission changes | Accept | Both locales exercise four actions, exact payloads/request counts, cancellation and sanitized exceptions. |
+| Translation must not introduce markup or change diagnostic exports | Correctness boundary | `statusHtml` and structured logger | Escape all display content; retain raw event JSON and CSP | No event translation layer or renderer scripts added | Accept | Malicious translation/data tests, isolated window callbacks and real browser DOM checks passed. |
+
+The critic's focused second pass found no remaining material issue. It also
+checked that Browser Access, DevTools and external-browser confirmations retain
+`response === 1`, default/cancel index 0 and the original sensitive-data boundaries.
+Native dialog layout and interaction are still part of order 4.
+
 ## Evidence and acceptance limits
 
+Browser Access/Diagnostics completed on 2026-09-20:
+
+- All 115 Desktop unit tests passed under Electron's Node 24.20.0 runtime.
+- Seven catalog regression tests and both catalog freshness checks passed.
+- The actual diagnostics HTML passed headless Chromium checks in both locales
+  at 640px: translated headings/labels, raw paths and JSON, empty-state copy,
+  escaped markup, no external requests and no horizontal overflow.
+- No native OS GUI or installer acceptance is claimed. The new messages use
+  the catalog already included by the existing staging and builder rules.
+
 Order 1 completed on 2026-09-20 with 50 reviewed bilingual messages:
 
 - All 110 Desktop unit tests passed under Electron's Node 24.20.0 runtime.
@@ -184,7 +220,7 @@ inspection of Capture/setup/recovery does not imply their smoke suites ran in
 this review.
 
 The review table is checked using `build_ui_messages.build_catalog` for schema,
-keys, placeholders and review gates. Only the 50 reviewed pilot rows enter the
+keys, placeholders and review gates. Only the 126 reviewed rows enter the
 Desktop runtime catalog; the remaining workflow proposals stay out of it.
 Windows/macOS native localization, installer lifecycle and packaged acceptance
 remain future work. This plan does not qualify or publish a release.

From 27fdebb8bf72fbfea3410d2afc8369c0c4e1e0a9 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sun, 20 Sep 2026 10:22:36 +0800
Subject: [PATCH 31/43] Keep Desktop open when recording save fails

## Why
Recording finalization can fail while close or quit is pending. Losing the
file outcome across startup or notification awaits permits premature exit
and hides the retained file locations.

## What changed
- Cancel the current close or quit on failed or unconfirmed recording saves
  and show the original error with available partial and destination paths.
- Preserve structured job results across concurrent operations and keep
  notification failure from changing publication or exit decisions.
- Localize Capture settings, status and dialogs in the Desktop table while
  retaining typed actions, raw diagnostics and later explicit exit.
- Keep paused recording controls visible in the compact toolbar.

## Testing
All 133 Desktop unit tests and seven catalog tests pass. Both generated
catalogs are current. English and Traditional Chinese toolbar DOM checks
pass at 640px with mocked native IPC. Native OS dialogs, encoder smoke and
installer acceptance remain separate.
---
 desktop/README.md                          |  19 ++-
 desktop/capture.cjs                        | 127 +++++++++++------
 desktop/main.cjs                           |  10 +-
 desktop/messages.js                        |  88 ++++++++++++
 desktop/test/capture-close.test.cjs        |  65 +++++++++
 desktop/test/capture-file.test.cjs         |  22 +++
 desktop/test/capture-lifecycle.test.cjs    | 145 +++++++++++++++++++
 desktop/test/capture-shutdown.test.cjs     | 156 +++++++++++++++++++++
 desktop/test/capture-smoke.cjs             |   2 +-
 desktop/test/capture-status.test.cjs       |  18 ++-
 desktop/test/capture-ui.test.cjs           |  58 ++++++++
 desktop/test/toolbar-i18n-browser-smoke.py |   8 +-
 desktop/toolbar.css                        |   2 +-
 docs/desktop_ui_copy_review.tsv            |  51 ++++++-
 docs/desktop_ui_review_plan.md             |  65 +++++++--
 15 files changed, 753 insertions(+), 83 deletions(-)
 create mode 100644 desktop/test/capture-close.test.cjs
 create mode 100644 desktop/test/capture-lifecycle.test.cjs
 create mode 100644 desktop/test/capture-shutdown.test.cjs
 create mode 100644 desktop/test/capture-ui.test.cjs

diff --git a/desktop/README.md b/desktop/README.md
index 9001300..47b9aec 100644
--- a/desktop/README.md
+++ b/desktop/README.md
@@ -14,8 +14,8 @@ Choose **StandTerm > Desktop language...** to select English or Traditional
 Chinese (Taiwan) for the next launch. The preference belongs to the Desktop
 profile; Core keeps its own language setting. Saving a choice does not restart
 StandTerm or interrupt recording. Coverage includes custom menus, toolbar labels,
-Agent help, Browser Access, Diagnostics, About and external-browser confirmations.
-Capture status, setup, recovery and other Desktop
+Agent help, Browser Access, Diagnostics, About, external-browser confirmations
+and Capture dialogs/status. Setup, recovery and other Desktop
 text still use English; native role labels follow the platform.
 
 Edit reviewed messages in the table, then generate the independent shell
@@ -484,9 +484,9 @@ layout is shared with Core Web and does not change approval policy or payloads.
 Use the direct capture buttons in the Desktop toolbar. Capture shortcuts are
 also available under **View**; there is no separate Capture dropdown:
 
-- **Copy screenshot** (Ctrl/Cmd+Alt+S): PNG to the OS clipboard.
+- **Copy screenshot to clipboard** (Ctrl/Cmd+Alt+S): PNG to the OS clipboard.
 - **Save screenshot (PNG)**: save directly to the configured screenshot folder.
-- **Start recording (WebM)**: record directly to the configured recording folder.
+- **Start recording (WebM, no audio)**: record directly to the configured recording folder.
 - **Pause / resume recording**: suspend capture without finishing the file.
 - **Stop and save recording** (Ctrl/Cmd+Alt+R): finalize the silent WebM.
 
@@ -498,7 +498,12 @@ while recording records the newly visible tab as well.
 
 The native title and Desktop toolbar show recording status and elapsed active
 recording time. The stop button remains available while paused. Closing
-or quitting asks whether to keep recording or stop and save. Hiding, minimizing,
+or quitting asks whether to keep the window open or stop and save. If saving
+fails or its result cannot be confirmed, Desktop cancels that close/quit,
+keeps the window open and shows an error dialog with the original error and
+available unfinished-file and requested-destination paths. Dismissing the error
+does not retry saving; a later explicit close/quit is allowed once recording is
+inactive. Hiding, minimizing,
 reloading or entering fullscreen stops and saves automatically, because hidden
 pages can stop producing frames or hide the indicator. Leave fullscreen before
 starting a recording; maximizing is supported.
@@ -516,7 +521,9 @@ varies between players because this prototype does not rewrite container indexes
 Successful output is published without overwriting existing files or copying the
 video a second time. This currently requires a filesystem with hard-link support
 (for example NTFS or ext4); choose a local supported drive rather than FAT/exFAT.
-If publication fails, the error reports the retained partial file. Unix files
+If publication fails, the error reports the retained partial file. If publication
+succeeds but removing the partial link fails, both paths may exist; a requested
+destination in an error does not imply a confirmed save. Unix files
 are created with mode `0600`; Windows access follows the destination directory's
 ACL. Screenshot files use the same no-overwrite publication policy.
 
diff --git a/desktop/capture.cjs b/desktop/capture.cjs
index 1bfcb38..dd35ee9 100644
--- a/desktop/capture.cjs
+++ b/desktop/capture.cjs
@@ -7,6 +7,7 @@ const { pathToFileURL } = require('node:url');
 const { randomUUID } = require('node:crypto');
 const { CaptureFile, MAX_CHUNK_BYTES } = require('./capture-file.cjs');
 const { CaptureSettings, captureName } = require('./capture-settings.cjs');
+const { create } = require('./i18n.js');
 
 const RECORDER_URL = pathToFileURL(path.join(__dirname, 'recorder.html')).href;
 const RECORDER_SCRIPT_URL = pathToFileURL(path.join(__dirname, 'recorder.js')).href;
@@ -22,13 +23,14 @@ async function bounded(promise) {
 }
 
 class DesktopCapture {
-  constructor(win, { contents = win.webContents, onChange = () => {}, onDiagnostic = () => {}, notify = null } = {}) {
+  constructor(win, { contents = win.webContents, onChange = () => {}, onDiagnostic = () => {}, notify = null, t = create('en').t } = {}) {
     this.win = win;
     this.contents = contents;
     this.onChange = onChange;
     this.onDiagnostic = onDiagnostic;
+    this.t = t;
     this.notify = notify || ((message, error = false) => dialog.showMessageBox(win, {
-      type: error ? 'error' : 'info', title: 'StandTerm Capture', message,
+      type: error ? 'error' : 'info', title: this.t('desktop.capture.title'), message,
     }));
     this.state = 'idle';
     this.job = null;
@@ -46,28 +48,28 @@ class DesktopCapture {
     const menu = Menu.getApplicationMenu();
     const elapsed = this.job?.startedAt ? Math.floor(((this.job.pausedAt || Date.now()) - this.job.startedAt - (this.job.pausedMs || 0)) / 1000) : 0;
     const clock = `${Math.floor(elapsed / 60).toString().padStart(2, '0')}:${(elapsed % 60).toString().padStart(2, '0')}`;
-    const label = this.state === 'paused' ? `Recording paused ${clock}` : this.state === 'recording' ? `Recording ${clock}`
-      : this.state === 'idle' ? 'Not recording' : `${this.state === 'starting' ? 'Starting' : 'Saving'} recording...`;
+    const label = this.t(this.state === 'paused' ? 'desktop.capture.status_paused' : this.state === 'recording' ? 'desktop.capture.status_recording'
+      : this.state === 'idle' ? 'desktop.capture.status_idle' : this.state === 'starting' ? 'desktop.capture.status_starting' : 'desktop.capture.status_saving', { time: clock });
     const status = menu?.getMenuItemById('capture-status');
     if (status) status.label = label;
     const start = menu?.getMenuItemById('capture-start');
     if (start) start.enabled = !this.active;
     const stop = menu?.getMenuItemById('capture-stop');
     if (stop) stop.enabled = ['recording', 'paused'].includes(this.state);
-    this.onChange(this.active ? `${this.state === 'paused' ? 'PAUSED' : 'REC'} ${clock}` : '', {
+    this.onChange(this.active ? this.t(this.state === 'paused' ? 'desktop.capture.title_paused' : 'desktop.capture.title_recording', { time: clock }) : '', {
       state: this.state, label, screenshotBusy: this.screenshotBusy,
     });
   }
 
   menu() {
-    return { label: 'Capture', submenu: [
-      { label: 'Copy screenshot', accelerator: 'CommandOrControl+Alt+S', click: () => this.screenshot('clipboard') },
-      { label: 'Save screenshot (PNG)', click: () => this.screenshot('file') },
+    return { label: this.t('desktop.capture.menu'), submenu: [
+      { label: this.t('desktop.toolbar.screenshot_copy'), accelerator: 'CommandOrControl+Alt+S', click: () => this.screenshot('clipboard') },
+      { label: this.t('desktop.toolbar.screenshot_save'), click: () => this.screenshot('file') },
       { type: 'separator' },
-      { id: 'capture-start', label: 'Start recording (WebM)', click: () => this.start() },
-      { id: 'capture-stop', label: 'Stop and save recording', accelerator: 'CommandOrControl+Alt+R',
+      { id: 'capture-start', label: this.t('desktop.toolbar.record_start'), click: () => this.start() },
+      { id: 'capture-stop', label: this.t('desktop.toolbar.record_stop'), accelerator: 'CommandOrControl+Alt+R',
         enabled: false, click: () => this.stop() },
-      { id: 'capture-status', label: 'Not recording', enabled: false },
+      { id: 'capture-status', label: this.t('desktop.capture.status_idle'), enabled: false },
     ] };
   }
 
@@ -78,7 +80,7 @@ class DesktopCapture {
         if (!(await fs.stat(directory)).isDirectory()) throw new Error('Not a folder.');
         await fs.access(directory, fs.constants.W_OK);
       } catch {
-        await this.notify('The saved capture folder is unavailable. Choose a writable folder again.', true);
+        await this.notify(this.t('desktop.capture.folder_unavailable'), true);
         directory = null;
       }
     }
@@ -90,14 +92,14 @@ class DesktopCapture {
     if (this.folderSelection) { await this.folderSelection; return this.settings.get(extension); }
     this.folderSelection = (async () => {
       const result = await dialog.showOpenDialog(this.win, {
-        title: extension === 'png' ? 'Choose screenshot folder' : 'Choose recording folder',
-        message: 'Future captures save here automatically. Change this in StandTerm > Capture Settings.',
+        title: this.t(extension === 'png' ? 'desktop.capture.choose_screenshot_folder' : 'desktop.capture.choose_recording_folder'),
+        message: this.t('desktop.capture.folder_policy'),
         defaultPath: this.settings.get(extension) || this.directory,
-        properties: ['openDirectory', 'createDirectory'], buttonLabel: 'Use this folder',
+        properties: ['openDirectory', 'createDirectory'], buttonLabel: this.t('desktop.capture.use_folder'),
       });
       if (result.canceled || !result.filePaths?.[0]) return null;
       const directory = result.filePaths[0];
-      if (!(await fs.stat(directory)).isDirectory()) throw new Error('Choose a folder.');
+      if (!(await fs.stat(directory)).isDirectory()) throw new Error(this.t('desktop.capture.folder_required'));
       await fs.access(directory, fs.constants.W_OK);
       this.settings.set(extension, directory);
       return directory;
@@ -108,9 +110,13 @@ class DesktopCapture {
   async configure() {
     try {
       const { response } = await dialog.showMessageBox(this.win, {
-        title: 'Capture Settings', message: 'Desktop capture folders',
-        detail: `Screenshots: ${this.settings.get('png') || 'Choose on first save'}\nRecordings: ${this.settings.get('webm') || 'Choose on first recording'}\n\nPNG screenshots and silent WebM recordings are saved automatically.`,
-        buttons: ['Done', 'Screenshot folder...', 'Recording folder...', 'Open screenshot folder', 'Open recording folder'],
+        title: this.t('desktop.capture.settings_title'), message: this.t('desktop.capture.settings_message'),
+        detail: this.t('desktop.capture.settings_detail', {
+          screenshot_folder: this.settings.get('png') || this.t('desktop.capture.first_screenshot'),
+          recording_folder: this.settings.get('webm') || this.t('desktop.capture.first_recording'),
+        }),
+        buttons: ['done', 'change_screenshot_folder', 'change_recording_folder', 'open_screenshot_folder', 'open_recording_folder']
+          .map(key => this.t(`desktop.capture.${key}`)),
         defaultId: 0, cancelId: 0, noLink: true,
       });
       if (response === 1 || response === 2) await this.chooseDirectory(response === 1 ? 'png' : 'webm');
@@ -118,7 +124,7 @@ class DesktopCapture {
         const directory = this.settings.get(response === 3 ? 'png' : 'webm');
         if (!directory) return;
         const error = await shell.openPath(directory);
-        if (error) throw new Error('Could not open the capture folder.');
+        if (error) throw new Error(this.t('desktop.capture.open_folder_failed'));
       }
     } catch (error) { await this.notify(error.message, true); }
   }
@@ -130,7 +136,7 @@ class DesktopCapture {
     let output;
     try {
       if (this.win.isDestroyed() || !this.win.isVisible() || this.win.isMinimized()) {
-        throw new Error('Show the StandTerm window before capturing it.');
+        throw new Error(this.t('desktop.capture.show_window_capture'));
       }
       // Capture before opening a dialog so the saved image is the requested view.
       let image;
@@ -143,12 +149,12 @@ class DesktopCapture {
           this.onDiagnostic({ width, height, visible: this.win.isVisible(),
             minimized: this.win.isMinimized(), focused: this.win.isFocused() });
         }
-        throw new Error('The terminal view could not be captured. Bring StandTerm to the foreground and retry. Window state is available in Diagnostics.', { cause: error });
+        throw new Error(this.t('desktop.capture.capture_failed'), { cause: error });
       }
       const png = image.toPNG();
       if (kind === 'clipboard') {
         await clipboard.write([new ClipboardItem({ 'image/png': new Blob([png], { type: 'image/png' }) })]);
-        await this.notify('Screenshot copied to the clipboard.');
+        await this.notify(this.t('desktop.capture.screenshot_copied'));
         return { copied: true };
       }
       destination = destination || await this.chooseFile('png');
@@ -158,11 +164,11 @@ class DesktopCapture {
         await output.write(png.subarray(offset, offset + MAX_CHUNK_BYTES));
       }
       await output.finish();
-      await this.notify(`Screenshot saved to:\n${destination}`);
+      await this.notify(this.t('desktop.capture.screenshot_saved', { path: destination }));
       return { destination };
     } catch (error) {
       await output?.close().catch(() => {});
-      await this.notify(`${error.message}${output?.partial ? `\nUnfinished file retained at:\n${output.partial}` : ''}`, true);
+      await this.notify(`${error.message}${output?.partial ? '\n' + this.t('desktop.capture.partial_file', { path: output.partial }) : ''}`, true);
       return { error: true };
     } finally { this.screenshotBusy = false; this.update(); }
   }
@@ -180,11 +186,11 @@ class DesktopCapture {
     this.job = job;
     try {
       destination = destination || await this.chooseFile('webm');
-      if (!destination) { this.job = null; this.state = 'idle'; this.update(); return null; }
+      if (!destination) { job.result = { canceled: true }; this.job = null; this.state = 'idle'; this.update(); return null; }
       if (this.win.isDestroyed() || !this.win.isVisible() || this.win.isMinimized()) {
-        throw new Error('Show the StandTerm window before recording it.');
+        throw new Error(this.t('desktop.capture.show_window_recording'));
       }
-      if (this.win.isFullScreen()) throw new Error('Leave fullscreen before recording so the recording indicator remains visible.');
+      if (this.win.isFullScreen()) throw new Error(this.t('desktop.capture.leave_fullscreen'));
       job.output = await CaptureFile.create(destination);
       const isolated = session.fromPartition(this.recorderPartition);
       const trustedRecorder = contents => contents === job.recorder?.webContents
@@ -240,8 +246,7 @@ class DesktopCapture {
       return { destination, mimeType: job.mimeType };
     } catch (error) {
       job.error = error;
-      await this.finish(job, false);
-      return { error: true };
+      return this.finish(job, false);
     }
   }
 
@@ -267,9 +272,12 @@ class DesktopCapture {
   }
 
   async stop() {
-    if (this.state === 'starting') await this.starting;
-    if (!this.job) return null;
+    if (this.state === 'starting') {
+      const started = await this.starting;
+      if (started?.error) return started;
+    }
     if (this.stopping) return this.stopping;
+    if (!this.job) return null;
     const job = this.job;
     this.state = 'stopping';
     clearInterval(job.timer);
@@ -314,28 +322,55 @@ class DesktopCapture {
       if (publish) destination = await job.output.finish();
     } catch (error) { job.error = error; }
     await job.output?.close().catch(error => { job.error = job.error || error; });
+    const result = job.result = job.error
+      ? { error: true, message: job.error.message || String(job.error), partial: job.output?.partial, destination: job.output?.destination }
+      : { destination, bytes: job.output.bytes, mimeType: job.mimeType };
     try {
-      if (job.error) {
-        await this.notify(`${job.error.message || String(job.error)}${job.output?.partial ? `\nUnfinished recording retained at:\n${job.output.partial}` : ''}`, true);
-        return { error: true, partial: job.output?.partial };
-      }
-      await this.notify(`Recording saved to:\n${destination}`);
-      return { destination, bytes: job.output.bytes, mimeType: job.mimeType };
+      await this.notify(result.error ? this.recordingError(result) : this.t('desktop.capture.recording_saved', { path: destination }), !!result.error);
+    } catch { /* Notification failure must not change the file outcome or repeat publication. */
     } finally {
       if (this.job === job) { this.job = null; this.state = 'idle'; this.update(); }
     }
+    return result;
+  }
+
+  recordingError(result) {
+    return (result.message || this.t('desktop.capture.save_unconfirmed'))
+      + (result.partial ? '\n' + this.t('desktop.capture.partial_recording', { path: result.partial }) : '')
+      + (result.destination ? '\n' + this.t('desktop.capture.requested_destination', { path: result.destination }) : '');
   }
 
   async confirmStop(action) {
+    if (!['close', 'quit'].includes(action) || this.confirming) return false;
     if (!this.active) return true;
-    const { response } = await dialog.showMessageBox(this.win, {
-      type: 'question', title: 'StandTerm recording is active',
-      message: `Stop and save the recording before ${action}?`,
-      buttons: ['Keep recording', 'Stop and save'], defaultId: 0, cancelId: 0,
-    });
-    if (response !== 1) return false;
-    await this.stop();
-    return true;
+    const job = this.job;
+    this.confirming = true;
+    try {
+      const { response } = await dialog.showMessageBox(this.win, {
+        type: 'question', title: this.t('desktop.capture.confirm_title'),
+        message: this.t(action === 'close' ? 'desktop.capture.confirm_close' : 'desktop.capture.confirm_quit'),
+        buttons: [this.t('desktop.capture.keep_recording'), this.t('desktop.toolbar.record_stop')], defaultId: 0, cancelId: 0,
+      });
+      if (response !== 1 || this.win.isDestroyed() || (this.job && this.job !== job)) return false;
+      let result;
+      try { result = job?.result || await this.stop() || job?.result; }
+      catch (error) {
+        result = { error: true, message: error.message || String(error), partial: job?.output?.partial, destination: job?.output?.destination };
+      }
+      if (this.job && this.job !== job) return false;
+      if (result?.canceled === true || (!result?.error && typeof result?.destination === 'string')) return true;
+      if (!this.win.isDestroyed()) {
+        if (this.win.isMinimized()) this.win.restore();
+        this.win.show(); this.win.focus();
+        await dialog.showMessageBox(this.win, {
+          type: 'error', title: this.t('desktop.capture.save_failed_title'), message: this.t('desktop.capture.save_failed_message'),
+          detail: this.t('desktop.capture.save_failed_detail', { error: this.recordingError(result || {}) }),
+          buttons: [this.t('desktop.common.ok')], defaultId: 0, cancelId: 0, noLink: true,
+        });
+      }
+      return false;
+    } catch { return false; }
+    finally { this.confirming = false; }
   }
 }
 
diff --git a/desktop/main.cjs b/desktop/main.cjs
index a268f11..47881ab 100644
--- a/desktop/main.cjs
+++ b/desktop/main.cjs
@@ -335,7 +335,7 @@ async function start() {
     if (!win.isDestroyed()) win.setTitle(`${captureTitle ? `[${captureTitle}] ` : ''}${MODES[mode]} - ${pageTitle}`);
   };
   capture = new DesktopCapture(win, {
-    contents,
+    contents, t,
     onDiagnostic: state => diagnostics.write('capture_failed', state),
     onChange: (value, state) => { captureTitle = value; updateTitle(); toolbar?.send(state); },
     notify: async (message, error) => toolbar?.notify(message, error),
@@ -477,11 +477,11 @@ async function start() {
   });
   contents.on('will-attach-webview', event => event.preventDefault());
   win.on('close', event => {
-    if (capture.active) {
+    if (capture.active || capture.confirming || closePending) {
       event.preventDefault();
       if (!quitting && !closePending) {
         closePending = true;
-        capture.confirmStop('closing the window').then(allowed => {
+        capture.confirmStop('close').then(allowed => {
           closePending = false;
           if (allowed) win.close();
         }).catch(() => { closePending = false; });
@@ -572,8 +572,8 @@ app.on('before-quit', event => {
   diagnostics.write('shutdown');
   (async () => {
     if (!await confirmSetupQuit()) { restartRequest = null; quitting = false; return; }
-    if (capture?.active) {
-      const allowed = smoke ? (await capture.stop(), true) : await capture.confirmStop('quitting StandTerm');
+    if (capture?.active || capture?.confirming) {
+      const allowed = smoke ? (await capture.stop(), true) : await capture.confirmStop('quit').catch(() => false);
       if (!allowed) { restartRequest = null; quitting = false; return; }
     }
     cancelSetup();
diff --git a/desktop/messages.js b/desktop/messages.js
index f76b232..fc8de4f 100644
--- a/desktop/messages.js
+++ b/desktop/messages.js
@@ -30,6 +30,50 @@
         "desktop.browser_access.menu": "Browser access",
         "desktop.browser_access.open": "Open in browser\u2026",
         "desktop.browser_access.opened": "Authorization link opened in the default browser.",
+        "desktop.capture.capture_failed": "Could not capture the terminal view. Bring StandTerm to the foreground and try again. Check Diagnostics if it still fails.",
+        "desktop.capture.change_recording_folder": "Recording folder\u2026",
+        "desktop.capture.change_screenshot_folder": "Screenshot folder\u2026",
+        "desktop.capture.choose_recording_folder": "Choose recording folder",
+        "desktop.capture.choose_screenshot_folder": "Choose screenshot folder",
+        "desktop.capture.confirm_close": "Stop and save the recording before closing this window?",
+        "desktop.capture.confirm_quit": "Stop and save the recording before quitting StandTerm?",
+        "desktop.capture.confirm_title": "Recording in progress",
+        "desktop.capture.done": "Done",
+        "desktop.capture.first_recording": "Choose on first recording",
+        "desktop.capture.first_screenshot": "Choose on first save",
+        "desktop.capture.folder_policy": "Files of this capture type save here automatically. If the other capture folder is unset, this choice sets it too. Change either folder in Capture Settings.",
+        "desktop.capture.folder_required": "Choose a folder.",
+        "desktop.capture.folder_unavailable": "The saved capture folder is unavailable. Choose a writable folder again.",
+        "desktop.capture.keep_recording": "Keep window open",
+        "desktop.capture.leave_fullscreen": "Leave fullscreen before recording so the recording indicator stays visible.",
+        "desktop.capture.menu": "Capture",
+        "desktop.capture.open_folder_failed": "Could not open the capture folder.",
+        "desktop.capture.open_recording_folder": "Open recording folder",
+        "desktop.capture.open_screenshot_folder": "Open screenshot folder",
+        "desktop.capture.partial_file": "Partial screenshot kept at:\n{path}",
+        "desktop.capture.partial_recording": "Partial recording kept at:\n{path}",
+        "desktop.capture.recording_saved": "Recording saved to:\n{path}",
+        "desktop.capture.requested_destination": "Requested destination:\n{path}",
+        "desktop.capture.save_failed_detail": "Review the error and file locations below.\n\n{error}",
+        "desktop.capture.save_failed_message": "Recording save was not confirmed. This close or quit request was cancelled.",
+        "desktop.capture.save_failed_title": "Recording save not confirmed",
+        "desktop.capture.save_unconfirmed": "Could not confirm the recording save result.",
+        "desktop.capture.screenshot_copied": "Screenshot copied to the clipboard.",
+        "desktop.capture.screenshot_saved": "Screenshot saved to:\n{path}",
+        "desktop.capture.settings_detail": "Screenshots: {screenshot_folder}\nRecordings: {recording_folder}\n\nPNG screenshots and WebM recordings save to these folders. Recordings have no audio.",
+        "desktop.capture.settings_message": "Desktop capture folders",
+        "desktop.capture.settings_title": "Capture Settings",
+        "desktop.capture.show_window_capture": "Show the StandTerm window before capturing it.",
+        "desktop.capture.show_window_recording": "Show the StandTerm window before recording it.",
+        "desktop.capture.status_idle": "Not recording",
+        "desktop.capture.status_paused": "Recording paused {time}",
+        "desktop.capture.status_recording": "Recording {time}",
+        "desktop.capture.status_saving": "Saving recording\u2026",
+        "desktop.capture.status_starting": "Starting recording\u2026",
+        "desktop.capture.title": "StandTerm Capture",
+        "desktop.capture.title_paused": "PAUSED {time}",
+        "desktop.capture.title_recording": "REC {time}",
+        "desktop.capture.use_folder": "Use this folder",
         "desktop.common.cancel": "Cancel",
         "desktop.common.ok": "OK",
         "desktop.diagnostics.backend_mode": "Backend mode",
@@ -158,6 +202,50 @@
         "desktop.browser_access.menu": "\u700f\u89bd\u5668\u5b58\u53d6",
         "desktop.browser_access.open": "\u5728\u700f\u89bd\u5668\u958b\u555f\u2026",
         "desktop.browser_access.opened": "\u5df2\u5728\u9810\u8a2d\u700f\u89bd\u5668\u958b\u555f\u6388\u6b0a\u9023\u7d50\u3002",
+        "desktop.capture.capture_failed": "\u7121\u6cd5\u64f7\u53d6\u7d42\u7aef\u756b\u9762\u3002\u8acb\u5c07 StandTerm \u5207\u63db\u81f3\u524d\u666f\u5f8c\u518d\u8a66\u4e00\u6b21\uff1b\u82e5\u4ecd\u5931\u6557\uff0c\u8acb\u67e5\u770b\u300c\u8a3a\u65b7\u300d\u3002",
+        "desktop.capture.change_recording_folder": "\u9304\u5f71\u8cc7\u6599\u593e\u2026",
+        "desktop.capture.change_screenshot_folder": "\u622a\u5716\u8cc7\u6599\u593e\u2026",
+        "desktop.capture.choose_recording_folder": "\u9078\u64c7\u9304\u5f71\u8cc7\u6599\u593e",
+        "desktop.capture.choose_screenshot_folder": "\u9078\u64c7\u622a\u5716\u8cc7\u6599\u593e",
+        "desktop.capture.confirm_close": "\u8981\u5148\u505c\u6b62\u4e26\u5132\u5b58\u9304\u5f71\uff0c\u518d\u95dc\u9589\u6b64\u8996\u7a97\u55ce\uff1f",
+        "desktop.capture.confirm_quit": "\u8981\u5148\u505c\u6b62\u4e26\u5132\u5b58\u9304\u5f71\uff0c\u518d\u7d50\u675f StandTerm \u55ce\uff1f",
+        "desktop.capture.confirm_title": "\u9304\u5f71\u5c1a\u672a\u7d50\u675f",
+        "desktop.capture.done": "\u5b8c\u6210",
+        "desktop.capture.first_recording": "\u9996\u6b21\u9304\u5f71\u6642\u9078\u64c7",
+        "desktop.capture.first_screenshot": "\u9996\u6b21\u5132\u5b58\u6642\u9078\u64c7",
+        "desktop.capture.folder_policy": "\u6b64\u985e\u64f7\u53d6\u6a94\u6848\u4e4b\u5f8c\u6703\u81ea\u52d5\u5132\u5b58\u65bc\u6b64\u3002\u82e5\u53e6\u4e00\u985e\u64f7\u53d6\u7684\u8cc7\u6599\u593e\u5c1a\u672a\u8a2d\u5b9a\uff0c\u4e5f\u6703\u63a1\u7528\u6b64\u8cc7\u6599\u593e\u3002\u4e4b\u5f8c\u53ef\u5728\u300c\u756b\u9762\u64f7\u53d6\u8a2d\u5b9a\u300d\u5206\u5225\u8b8a\u66f4\u3002",
+        "desktop.capture.folder_required": "\u8acb\u9078\u64c7\u8cc7\u6599\u593e\u3002",
+        "desktop.capture.folder_unavailable": "\u5df2\u5132\u5b58\u7684\u64f7\u53d6\u8cc7\u6599\u593e\u7121\u6cd5\u4f7f\u7528\u3002\u8acb\u91cd\u65b0\u9078\u64c7\u53ef\u5beb\u5165\u7684\u8cc7\u6599\u593e\u3002",
+        "desktop.capture.keep_recording": "\u4fdd\u6301\u8996\u7a97\u958b\u555f",
+        "desktop.capture.leave_fullscreen": "\u8acb\u5148\u96e2\u958b\u5168\u87a2\u5e55\u518d\u958b\u59cb\u9304\u5f71\uff0c\u8b93\u9304\u5f71\u6307\u793a\u4fdd\u6301\u53ef\u898b\u3002",
+        "desktop.capture.menu": "\u756b\u9762\u64f7\u53d6",
+        "desktop.capture.open_folder_failed": "\u7121\u6cd5\u958b\u555f\u64f7\u53d6\u8cc7\u6599\u593e\u3002",
+        "desktop.capture.open_recording_folder": "\u958b\u555f\u9304\u5f71\u8cc7\u6599\u593e",
+        "desktop.capture.open_screenshot_folder": "\u958b\u555f\u622a\u5716\u8cc7\u6599\u593e",
+        "desktop.capture.partial_file": "\u672a\u5b8c\u6210\u7684\u622a\u5716\u5df2\u4fdd\u7559\u65bc\uff1a\n{path}",
+        "desktop.capture.partial_recording": "\u672a\u5b8c\u6210\u7684\u9304\u5f71\u5df2\u4fdd\u7559\u65bc\uff1a\n{path}",
+        "desktop.capture.recording_saved": "\u9304\u5f71\u5df2\u5132\u5b58\u81f3\uff1a\n{path}",
+        "desktop.capture.requested_destination": "\u9810\u5b9a\u5132\u5b58\u4f4d\u7f6e\uff1a\n{path}",
+        "desktop.capture.save_failed_detail": "\u8acb\u6aa2\u67e5\u4ee5\u4e0b\u932f\u8aa4\u8207\u6a94\u6848\u4f4d\u7f6e\u3002\n\n{error}",
+        "desktop.capture.save_failed_message": "\u7121\u6cd5\u78ba\u8a8d\u9304\u5f71\u5df2\u5132\u5b58\u3002\u5df2\u53d6\u6d88\u672c\u6b21\u95dc\u9589\u6216\u7d50\u675f\u64cd\u4f5c\u3002",
+        "desktop.capture.save_failed_title": "\u7121\u6cd5\u78ba\u8a8d\u9304\u5f71\u5132\u5b58\u7d50\u679c",
+        "desktop.capture.save_unconfirmed": "\u7121\u6cd5\u78ba\u8a8d\u9304\u5f71\u5132\u5b58\u7d50\u679c\u3002",
+        "desktop.capture.screenshot_copied": "\u5df2\u5c07\u622a\u5716\u8907\u88fd\u81f3\u526a\u8cbc\u7c3f\u3002",
+        "desktop.capture.screenshot_saved": "\u622a\u5716\u5df2\u5132\u5b58\u81f3\uff1a\n{path}",
+        "desktop.capture.settings_detail": "\u622a\u5716\uff1a{screenshot_folder}\n\u9304\u5f71\uff1a{recording_folder}\n\nPNG \u622a\u5716\u8207 WebM \u9304\u5f71\u6703\u5132\u5b58\u81f3\u4e0a\u8ff0\u8cc7\u6599\u593e\u3002\u9304\u5f71\u4e0d\u542b\u97f3\u8a0a\u3002",
+        "desktop.capture.settings_message": "Desktop \u756b\u9762\u64f7\u53d6\u8cc7\u6599\u593e",
+        "desktop.capture.settings_title": "\u756b\u9762\u64f7\u53d6\u8a2d\u5b9a",
+        "desktop.capture.show_window_capture": "\u8acb\u5148\u986f\u793a StandTerm \u8996\u7a97\uff0c\u518d\u64f7\u53d6\u756b\u9762\u3002",
+        "desktop.capture.show_window_recording": "\u8acb\u5148\u986f\u793a StandTerm \u8996\u7a97\uff0c\u518d\u958b\u59cb\u9304\u5f71\u3002",
+        "desktop.capture.status_idle": "\u672a\u5728\u9304\u5f71",
+        "desktop.capture.status_paused": "\u9304\u5f71\u5df2\u66ab\u505c {time}",
+        "desktop.capture.status_recording": "\u9304\u5f71\u4e2d {time}",
+        "desktop.capture.status_saving": "\u6b63\u5728\u5132\u5b58\u9304\u5f71\u2026",
+        "desktop.capture.status_starting": "\u6b63\u5728\u6e96\u5099\u9304\u5f71\u2026",
+        "desktop.capture.title": "StandTerm \u756b\u9762\u64f7\u53d6",
+        "desktop.capture.title_paused": "\u66ab\u505c {time}",
+        "desktop.capture.title_recording": "\u9304\u5f71 {time}",
+        "desktop.capture.use_folder": "\u4f7f\u7528\u6b64\u8cc7\u6599\u593e",
         "desktop.common.cancel": "\u53d6\u6d88",
         "desktop.common.ok": "\u78ba\u5b9a",
         "desktop.diagnostics.backend_mode": "\u5f8c\u7aef\u6a21\u5f0f",
diff --git a/desktop/test/capture-close.test.cjs b/desktop/test/capture-close.test.cjs
new file mode 100644
index 0000000..45e6593
--- /dev/null
+++ b/desktop/test/capture-close.test.cjs
@@ -0,0 +1,65 @@
+'use strict';
+
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const vm = require('node:vm');
+const { EventEmitter } = require('node:events');
+
+// Exercise the actual close handler without starting Core or an Electron window.
+const source = fs.readFileSync(path.join(__dirname, '..', 'main.cjs'), 'utf8');
+const registration = source.match(/win\.on\('close', event => \{[\s\S]*?\n  \}\);/)[0];
+
+function fixture() {
+  const win = new EventEmitter(), calls = [];
+  let resolve;
+  const capture = { active: true, confirming: false, confirmStop: action => {
+    calls.push(action); capture.confirming = true;
+    return new Promise(done => { resolve = value => { capture.confirming = false; done(value); }; });
+  } };
+  const context = vm.createContext({ win, capture, closePending: false, quitting: false, tray: false, smoke: false });
+  let closed = 0, hidden = 0;
+  const close = () => {
+    let prevented = false;
+    win.emit('close', { preventDefault: () => { prevented = true; } });
+    if (!prevented) closed++;
+    return prevented;
+  };
+  win.close = close; win.hide = () => hidden++;
+  vm.runInContext(registration, context);
+  return { capture, context, calls, close, resolve: value => resolve(value),
+    closed: () => closed, hidden: () => hidden, settle: () => new Promise(setImmediate) };
+}
+
+test('clearing the recording job cannot bypass a pending close failure notice', async () => {
+  const f = fixture();
+  assert.equal(f.close(), true);
+  f.capture.active = false;
+  assert.equal(f.close(), true);
+  assert.deepEqual(f.calls, ['close']);
+  assert.equal(f.closed(), 0);
+  f.resolve(false); await f.settle();
+  assert.equal(f.closed(), 0);
+  assert.equal(f.context.closePending, false);
+  assert.equal(f.close(), false, 'a later explicit close remains available');
+});
+
+test('closing during a quit error notice neither hides nor destroys the window', () => {
+  const f = fixture();
+  f.capture.active = false; f.capture.confirming = true;
+  f.context.quitting = true; f.context.tray = true;
+  assert.equal(f.close(), true);
+  assert.equal(f.closed(), 0);
+  assert.equal(f.hidden(), 0);
+  assert.deepEqual(f.calls, []);
+});
+
+test('a confirmed save permits exactly one subsequent close', async () => {
+  const f = fixture();
+  assert.equal(f.close(), true);
+  f.capture.active = false;
+  f.resolve(true); await f.settle();
+  assert.equal(f.closed(), 1);
+  assert.equal(f.context.closePending, false);
+});
diff --git a/desktop/test/capture-file.test.cjs b/desktop/test/capture-file.test.cjs
index 6e666fb..4956a73 100644
--- a/desktop/test/capture-file.test.cjs
+++ b/desktop/test/capture-file.test.cjs
@@ -5,6 +5,7 @@ const assert = require('node:assert/strict');
 const fs = require('node:fs/promises');
 const path = require('node:path');
 const os = require('node:os');
+const vm = require('node:vm');
 const { CaptureFile, MAX_CHUNK_BYTES } = require('../capture-file.cjs');
 
 test('capture publishes exact bytes without overwriting existing files', async () => {
@@ -22,6 +23,27 @@ test('capture publishes exact bytes without overwriting existing files', async (
   assert.equal(await fs.readFile(target, 'utf8'), 'firstsecond');
 });
 
+test('failed partial cleanup retains both published and partial paths without another publication', async () => {
+  const directory = await fs.mkdtemp(path.join(os.tmpdir(), 'standterm-capture-unlink-'));
+  const target = path.join(directory, 'test.webm');
+  let links = 0;
+  const api = { exports: {} };
+  vm.runInNewContext(await fs.readFile(path.join(__dirname, '..', 'capture-file.cjs'), 'utf8'), {
+    Uint8Array, module: api,
+    require: name => name === 'node:fs/promises' ? { ...fs,
+      link: async (...args) => { links++; return fs.link(...args); },
+      unlink: async () => { throw new Error('Fixture partial cleanup failure'); },
+    } : require(name),
+  });
+  const output = await api.exports.CaptureFile.create(target);
+  await output.write(Buffer.from('recording bytes'));
+  await assert.rejects(output.finish(), /Fixture partial cleanup failure/);
+  assert.equal(await fs.readFile(target, 'utf8'), 'recording bytes');
+  assert.equal(await fs.readFile(output.partial, 'utf8'), 'recording bytes');
+  assert.equal(links, 1);
+  assert.equal(output.handle, null);
+});
+
 test('capture retains partial output on a publish race or empty recording', async () => {
   const directory = await fs.mkdtemp(path.join(os.tmpdir(), 'standterm-capture-race-'));
   const target = path.join(directory, 'test.webm');
diff --git a/desktop/test/capture-lifecycle.test.cjs b/desktop/test/capture-lifecycle.test.cjs
new file mode 100644
index 0000000..95c9d75
--- /dev/null
+++ b/desktop/test/capture-lifecycle.test.cjs
@@ -0,0 +1,145 @@
+'use strict';
+
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const vm = require('node:vm');
+const { createRequire } = require('node:module');
+const { create } = require('../i18n.js');
+
+function fixture({ locale = 'en', failure = true, notifyFailure = false, decision = null } = {}) {
+  const filename = path.join(__dirname, '..', 'capture.cjs');
+  const localRequire = createRequire(filename);
+  const dialogs = [], notices = [], calls = [];
+  const dialog = { showMessageBox: async (_win, options) => {
+    dialogs.push(options);
+    if (options.type === 'question') return decision ? decision() : { response: 1 };
+    return { response: 0 };
+  } };
+  const context = { module: { exports: {} }, __dirname: path.dirname(filename),
+    setTimeout, clearTimeout, setInterval, clearInterval,
+    require: name => name === 'electron' ? { Menu: { getApplicationMenu: () => null }, dialog } : localRequire(name) };
+  vm.runInNewContext(fs.readFileSync(filename, 'utf8'), context);
+  const capture = Object.create(context.module.exports.DesktopCapture.prototype);
+  const output = { partial: '/tmp/capture <fixture>.partial', destination: '/tmp/capture <fixture>.webm', bytes: 5,
+    finish: async () => {
+      calls.push('publish');
+      if (failure) throw new Error('Fixture disk error');
+      output.partial = null; return output.destination;
+    }, close: async () => { calls.push('close-output'); } };
+  const job = { startedAt: Date.now(), output, mimeType: 'video/webm',
+    recorder: { isDestroyed: () => false, destroy: () => calls.push('destroy-recorder'),
+      webContents: { executeJavaScript: async script => {
+        calls.push(script);
+        return script === 'window.recorder.drain()' ? { chunks: [] } : undefined;
+      } } } };
+  Object.assign(capture, { t: create(locale).t, state: 'recording', job,
+    onChange: () => {}, notify: async (message, error) => {
+      notices.push({ message, error });
+      if (notifyFailure) throw new Error('Fixture notice unavailable');
+    },
+    win: { isDestroyed: () => false, isMinimized: () => true,
+      restore: () => calls.push('restore'), show: () => calls.push('show'), focus: () => calls.push('focus') },
+  });
+  return { capture, job, output, dialogs, notices, calls, dialog };
+}
+
+test('failed save cancels this close or quit and leaves a readable error with retained paths', async () => {
+  for (const locale of ['en', 'zh-TW']) for (const action of ['close', 'quit']) {
+    const f = fixture({ locale });
+    assert.equal(await f.capture.confirmStop(action), false);
+    assert.equal(f.capture.state, 'idle');
+    assert.equal(f.calls.filter(call => call === 'publish').length, 1);
+    assert.equal(f.dialogs[0].defaultId, 0);
+    assert.equal(f.dialogs[0].cancelId, 0);
+    assert.equal(f.dialogs[0].message, f.capture.t(`desktop.capture.confirm_${action}`));
+    const error = f.dialogs.at(-1);
+    assert.equal(error.type, 'error');
+    assert.ok(error.detail.includes('Fixture disk error'));
+    assert.ok(error.detail.includes(f.output.partial));
+    assert.ok(error.detail.includes(f.output.destination));
+    assert.ok(f.calls.includes('show'));
+    assert.equal(await f.capture.confirmStop(action), true, 'a later explicit exit is not permanently blocked');
+  }
+});
+
+test('cancel keeps the recording untouched and a successful save permits closing', async () => {
+  const canceled = fixture({ decision: async () => ({ response: 0 }) });
+  assert.equal(await canceled.capture.confirmStop('close'), false);
+  assert.equal(canceled.capture.state, 'recording');
+  assert.deepEqual(canceled.calls, []);
+  const saved = fixture({ failure: false });
+  assert.equal(await saved.capture.confirmStop('quit'), true);
+  assert.equal(saved.capture.state, 'idle');
+  assert.equal(saved.dialogs.length, 1);
+  assert.equal(saved.calls.filter(call => call === 'publish').length, 1);
+});
+
+test('failure while a confirmation is waiting cannot be lost when the job is cleared', async () => {
+  let answer;
+  const f = fixture({ decision: () => new Promise(resolve => { answer = resolve; }) });
+  const confirming = f.capture.confirmStop('quit');
+  assert.equal((await f.capture.stop()).error, true);
+  assert.equal(f.capture.job, null);
+  answer({ response: 1 });
+  assert.equal(await confirming, false);
+  assert.equal(f.calls.filter(call => call === 'publish').length, 1);
+  assert.ok(f.dialogs.at(-1).detail.includes(f.output.partial));
+});
+
+test('stop retains startup failure and confirmation distinguishes canceled startup', async () => {
+  const f = fixture();
+  f.capture.state = 'idle'; f.capture.job = null;
+  f.capture.chooseFile = async () => { throw new Error('Fixture startup error'); };
+  const starting = f.capture.start();
+  const [result, allowed] = await Promise.all([f.capture.stop(), f.capture.confirmStop('quit')]);
+  assert.equal(result.error, true);
+  assert.equal(result, await starting);
+  assert.equal(result.partial, undefined);
+  assert.equal(allowed, false);
+  assert.ok(f.dialogs.at(-1).detail.includes('Fixture startup error'));
+  const canceled = fixture();
+  canceled.capture.state = 'idle'; canceled.capture.job = null;
+  canceled.capture.chooseFile = async () => null;
+  const canceling = canceled.capture.start();
+  assert.equal(await canceled.capture.confirmStop('quit'), true);
+  assert.equal(await canceling, null);
+});
+
+test('notification failure never changes the saved result or permits a failed-save exit', async () => {
+  for (const failure of [false, true]) {
+    const f = fixture({ failure, notifyFailure: true });
+    assert.equal(await f.capture.confirmStop('quit'), !failure);
+    assert.equal(f.calls.filter(call => call === 'publish').length, 1);
+    if (failure) assert.ok(f.dialogs.at(-1).detail.includes('Fixture disk error'));
+  }
+});
+
+test('an unavailable error dialog still cancels closing after a failed save', async () => {
+  const f = fixture();
+  f.dialog.showMessageBox = async (_win, options) => {
+    if (options.type === 'question') return { response: 1 };
+    throw new Error('Fixture dialog unavailable');
+  };
+  assert.equal(await f.capture.confirmStop('quit'), false);
+  assert.equal(f.capture.state, 'idle');
+});
+
+test('concurrent stops share one publication and a stale confirmation never stops a new job', { timeout: 3000 }, async () => {
+  const f = fixture({ failure: false });
+  const [first, second] = await Promise.all([f.capture.stop(), f.capture.stop()]);
+  assert.equal(first, second);
+  assert.equal(f.calls.filter(call => call === 'publish').length, 1);
+  let answer;
+  const stale = fixture({ failure: false, decision: () => new Promise(resolve => { answer = resolve; }) });
+  const confirming = stale.capture.confirmStop('close');
+  assert.equal(await stale.capture.confirmStop('quit'), false);
+  await stale.capture.stop();
+  const replacement = {};
+  stale.capture.job = replacement; stale.capture.state = 'recording';
+  answer({ response: 1 });
+  assert.equal(await confirming, false);
+  assert.equal(stale.capture.job, replacement);
+  assert.equal(stale.calls.filter(call => call === 'publish').length, 1);
+});
diff --git a/desktop/test/capture-shutdown.test.cjs b/desktop/test/capture-shutdown.test.cjs
new file mode 100644
index 0000000..38f9982
--- /dev/null
+++ b/desktop/test/capture-shutdown.test.cjs
@@ -0,0 +1,156 @@
+'use strict';
+
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const vm = require('node:vm');
+const { EventEmitter } = require('node:events');
+
+function fixture(confirmStop, restartRequest = { action: 'recover' }) {
+  const calls = { confirm: [], cancelSetup: 0, stopBackend: 0, resetBrowser: 0,
+    flushBrowser: 0, queue: [], relaunch: 0, exit: [], errors: [], destroyTray: 0 };
+  const forbidden = name => () => { throw new Error(`Unexpected fixture operation: ${name}`); };
+  const app = new EventEmitter();
+  Object.assign(app, {
+    isPackaged: false,
+    commandLine: { getSwitchValue: () => '', appendSwitch: () => {} },
+    setName: () => {}, setAppUserModelId: () => {}, enableSandbox: () => {},
+    getPath: () => path.join(__dirname, 'unused-profile'), getVersion: () => 'fixture',
+    requestSingleInstanceLock: () => true,
+    whenReady: () => new Promise(() => {}),
+    quit: forbidden('app.quit'),
+    relaunch: () => { calls.relaunch++; },
+    exit: code => { calls.exit.push(code); },
+  });
+  const processStub = new EventEmitter();
+  Object.assign(processStub, { platform: 'win32', argv: ['node', 'main.cjs'], env: {} });
+  const electron = { app,
+    BrowserWindow: forbidden('BrowserWindow'), WebContentsView: forbidden('WebContentsView'),
+    dialog: { showErrorBox: (title, message) => { calls.errors.push({ title, message }); } },
+  };
+  const modules = {
+    './installer.cjs': { installerRequest: () => null },
+    './desktop-mode.cjs': { APP_ID: 'fixture', desktopMode: () => 'windows' },
+    './language.cjs': { createLanguage: () => ({ t: key => key, locale: 'en' }) },
+    './diagnostics.cjs': { createDiagnostics: () => ({ write: () => {} }) },
+    './setup.cjs': { confirmSetupQuit: async () => true,
+      cancelSetup: () => { calls.cancelSetup++; } },
+    './backend-stop.cjs': { stopOwnedBackend: async () => { calls.stopBackend++; } },
+    './browser-session.cjs': { resetBrowserAuthentication: async () => { calls.resetBrowser++; } },
+  };
+  const context = vm.createContext({
+    process: processStub, console, Buffer, URL, setTimeout, clearTimeout,
+    __dirname: path.resolve(__dirname, '..'),
+    require: name => {
+      if (name === 'electron') return electron;
+      if (Object.hasOwn(modules, name)) return modules[name];
+      if (name === 'node:child_process') return { spawn: forbidden('spawn') };
+      if (name === 'node:http') return { request: forbidden('http.request') };
+      if (name === 'node:fs') return new Proxy({}, { get: (_target, method) => forbidden(`fs.${String(method)}`) });
+      if (name.startsWith('./')) return {};
+      return require(name);
+    },
+  });
+  const source = fs.readFileSync(path.join(__dirname, '..', 'main.cjs'), 'utf8');
+  vm.runInContext('(function () {\n' + source + `
+    globalThis.injectShutdownState = state => {
+      capture = state.capture;
+      child = state.child;
+      desktopSession = state.desktopSession;
+      coreStore = state.coreStore;
+      tray = state.tray;
+      restartRequest = state.restartRequest;
+    };
+    globalThis.readShutdownState = () => ({ quitting, stopped, restartRequest });
+  })()`, context);
+  context.injectShutdownState({
+    capture: { active: true, confirmStop: async action => {
+      calls.confirm.push(action);
+      return confirmStop();
+    } },
+    child: {},
+    desktopSession: { flushStorageData: () => { calls.flushBrowser++; } },
+    coreStore: { queue: async action => { calls.queue.push(action); } },
+    tray: { destroy: () => { calls.destroyTray++; } },
+    restartRequest,
+  });
+  let prevented = 0;
+  return { calls, state: () => context.readShutdownState(),
+    quit: () => app.emit('before-quit', { preventDefault: () => { prevented++; } }),
+    prevented: () => prevented,
+    settle: () => new Promise(setImmediate),
+  };
+}
+
+function assertKeptRunning(f) {
+  assert.equal(f.calls.cancelSetup, 0);
+  assert.equal(f.calls.stopBackend, 0);
+  assert.equal(f.calls.resetBrowser, 0);
+  assert.equal(f.calls.flushBrowser, 0);
+  assert.deepEqual(f.calls.queue, []);
+  assert.equal(f.calls.relaunch, 0);
+  assert.deepEqual(f.calls.exit, []);
+  assert.equal(f.calls.destroyTray, 0);
+  assert.equal(f.state().quitting, false);
+  assert.equal(f.state().stopped, false);
+  assert.equal(f.state().restartRequest, null);
+}
+
+test('cancelled recording confirmation keeps Desktop running and clears restart intent', async () => {
+  const f = fixture(async () => false);
+  f.quit();
+  await f.settle();
+  assert.equal(f.prevented(), 1);
+  assert.equal(f.calls.confirm.length, 1);
+  assertKeptRunning(f);
+  f.quit();
+  await f.settle();
+  assert.equal(f.calls.confirm.length, 2);
+  assertKeptRunning(f);
+});
+
+test('rejected recording confirmation keeps Desktop running and clears restart intent', async () => {
+  const f = fixture(async () => { throw new Error('Synthetic confirmation failure'); });
+  f.quit();
+  await f.settle();
+  assert.equal(f.prevented(), 1);
+  assert.equal(f.calls.confirm.length, 1);
+  assertKeptRunning(f);
+  f.quit();
+  await f.settle();
+  assert.equal(f.calls.confirm.length, 2);
+  assertKeptRunning(f);
+});
+
+for (const restartRequest of [null, { action: 'recover' }]) {
+  test(`confirmed recording shutdown ${restartRequest ? 'relaunches' : 'exits'} once despite duplicate quit events`, async () => {
+    let resolveConfirmation;
+    const confirmation = new Promise(resolve => { resolveConfirmation = resolve; });
+    const f = fixture(() => confirmation, restartRequest);
+    f.quit();
+    await f.settle();
+    f.quit();
+    assert.equal(f.state().quitting, true);
+    assert.equal(f.calls.confirm.length, 1);
+    assert.equal(f.calls.stopBackend, 0);
+    assert.deepEqual(f.calls.exit, []);
+    resolveConfirmation(true);
+    await f.settle();
+    assert.equal(f.calls.cancelSetup, 1);
+    assert.equal(f.calls.stopBackend, 1);
+    assert.equal(f.calls.resetBrowser, 1);
+    assert.equal(f.calls.flushBrowser, 1);
+    assert.deepEqual(f.calls.queue, restartRequest ? ['recover'] : []);
+    assert.equal(f.calls.relaunch, restartRequest ? 1 : 0);
+    assert.deepEqual(f.calls.exit, [0]);
+    assert.equal(f.calls.destroyTray, 1);
+    assert.equal(f.state().stopped, true);
+    assert.deepEqual(f.calls.errors, []);
+    f.quit();
+    await f.settle();
+    assert.equal(f.calls.confirm.length, 1);
+    assert.equal(f.calls.stopBackend, 1);
+    assert.deepEqual(f.calls.exit, [0]);
+  });
+}
diff --git a/desktop/test/capture-smoke.cjs b/desktop/test/capture-smoke.cjs
index 329b2d5..104dcbc 100644
--- a/desktop/test/capture-smoke.cjs
+++ b/desktop/test/capture-smoke.cjs
@@ -229,7 +229,7 @@ async function run(win, capture, contents = win.webContents) {
   await new Promise(resolve => setTimeout(resolve, 1200));
   dialog.showMessageBox = async () => ({ response: 1 });
   try {
-    assert.equal(await capture.confirmStop('closing the test window'), true);
+    assert.equal(await capture.confirmStop('close'), true);
     assert.equal(capture.active, false);
     assert.ok((await fs.stat(confirmed)).size > 0);
   } finally { dialog.showMessageBox = originalMessage; }
diff --git a/desktop/test/capture-status.test.cjs b/desktop/test/capture-status.test.cjs
index 0176cd0..163d670 100644
--- a/desktop/test/capture-status.test.cjs
+++ b/desktop/test/capture-status.test.cjs
@@ -6,8 +6,9 @@ const fs = require('node:fs');
 const path = require('node:path');
 const vm = require('node:vm');
 const { createRequire } = require('node:module');
+const { create } = require('../i18n.js');
 
-function fixture() {
+function fixture(locale = 'en') {
   const filename = path.join(__dirname, '..', 'capture.cjs');
   const localRequire = createRequire(filename);
   let now = 13000, status, diagnostic, message;
@@ -18,7 +19,7 @@ function fixture() {
   vm.runInNewContext(fs.readFileSync(filename, 'utf8'), context);
   const capture = Object.create(context.module.exports.DesktopCapture.prototype);
   Object.assign(capture, {
-    state: 'recording', job: { startedAt: 1000 },
+    t: create(locale).t, state: 'recording', job: { startedAt: 1000 },
     onChange: (_title, state) => { status = state; },
     onDiagnostic: state => { diagnostic = state; },
     notify: async value => { message = value; },
@@ -48,7 +49,18 @@ test('failed capture reports only window metadata and releases the screenshot ac
   assert.deepEqual(JSON.parse(JSON.stringify(f.diagnostic())), {
     width: 624, height: 561, visible: true, minimized: false, focused: true,
   });
-  assert.match(f.message(), /foreground and retry/);
+  assert.equal(f.message(), create('en').t('desktop.capture.capture_failed'));
   assert.ok(!f.message().includes('sensitive fixture'));
   assert.equal(f.capture.screenshotBusy, false);
 });
+
+test('translated status preserves typed recording state and raw clock values', () => {
+  const f = fixture('zh-TW');
+  for (const [state, key] of [['recording', 'status_recording'], ['paused', 'status_paused'],
+    ['starting', 'status_starting'], ['stopping', 'status_saving'], ['idle', 'status_idle']]) {
+    f.capture.state = state;
+    f.capture.update();
+    assert.equal(f.status().state, state);
+    assert.equal(f.status().label, f.capture.t(`desktop.capture.${key}`, { time: '00:12' }));
+  }
+});
diff --git a/desktop/test/capture-ui.test.cjs b/desktop/test/capture-ui.test.cjs
new file mode 100644
index 0000000..1c217d3
--- /dev/null
+++ b/desktop/test/capture-ui.test.cjs
@@ -0,0 +1,58 @@
+'use strict';
+
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const vm = require('node:vm');
+const { createRequire } = require('node:module');
+const { create } = require('../i18n.js');
+
+function fixture(locale, response = 0) {
+  const filename = path.join(__dirname, '..', 'capture.cjs'), localRequire = createRequire(filename);
+  const dialogs = [], calls = [], folders = { png: '/tmp/PNG <fixture> {recording_folder}', webm: '/tmp/WebM <fixture>' };
+  const api = { exports: {} };
+  vm.runInNewContext(fs.readFileSync(filename, 'utf8'), {
+    module: api, __dirname: path.dirname(filename),
+    require: name => name === 'electron' ? {
+      dialog: { showMessageBox: async (_win, options) => { dialogs.push(options); return { response }; } },
+      shell: { openPath: async directory => { calls.push(directory); return ''; } },
+    } : localRequire(name),
+  });
+  const capture = Object.create(api.exports.DesktopCapture.prototype);
+  Object.assign(capture, { t: create(locale).t, win: {}, settings: { get: extension => folders[extension] },
+    chooseDirectory: async extension => calls.push(extension),
+    screenshot: kind => calls.push(kind), start: () => calls.push('start'), stop: () => calls.push('stop'),
+    notify: async () => assert.fail('Unexpected capture error'),
+  });
+  return { capture, dialogs, calls, folders };
+}
+
+test('both languages preserve Capture Settings response indices and raw folder paths', async () => {
+  for (const locale of ['en', 'zh-TW']) for (const response of [0, 1, 2, 3, 4]) {
+    const f = fixture(locale, response);
+    await f.capture.configure();
+    const options = f.dialogs[0];
+    assert.equal(options.title, f.capture.t('desktop.capture.settings_title'));
+    assert.equal(options.defaultId, 0); assert.equal(options.cancelId, 0);
+    assert.equal(options.buttons.length, 5);
+    assert.equal(options.buttons[1], f.capture.t('desktop.capture.change_screenshot_folder'));
+    assert.ok(options.detail.includes(f.folders.png));
+    assert.ok(options.detail.includes(f.folders.webm));
+    assert.deepEqual(f.calls, [[], ['png'], ['webm'], [f.folders.png], [f.folders.webm]][response]);
+  }
+});
+
+test('translated capture menu labels keep fixed callbacks, IDs and accelerators', () => {
+  for (const locale of ['en', 'zh-TW']) {
+    const f = fixture(locale), menu = f.capture.menu();
+    assert.equal(menu.label, f.capture.t('desktop.capture.menu'));
+    assert.equal(menu.submenu[0].accelerator, 'CommandOrControl+Alt+S');
+    assert.equal(menu.submenu[3].id, 'capture-start');
+    assert.equal(menu.submenu[4].id, 'capture-stop');
+    assert.equal(menu.submenu[4].accelerator, 'CommandOrControl+Alt+R');
+    assert.equal(menu.submenu[5].id, 'capture-status');
+    for (const item of menu.submenu) if (item.click) item.click();
+    assert.deepEqual(f.calls, ['clipboard', 'file', 'start', 'stop']);
+  }
+});
diff --git a/desktop/test/toolbar-i18n-browser-smoke.py b/desktop/test/toolbar-i18n-browser-smoke.py
index c4cdf57..723cfdd 100644
--- a/desktop/test/toolbar-i18n-browser-smoke.py
+++ b/desktop/test/toolbar-i18n-browser-smoke.py
@@ -47,11 +47,15 @@ def run():
                         const box = el.getBoundingClientRect(); return box.width > 0 && box.x >= 0 && box.right <= innerWidth;
                     })""")
                 for state, key in [('recording', 'record_pause'), ('paused', 'record_resume')]:
-                    page.evaluate("state => fixture.receive({state, label:'Fixture 00:04'})", state)
+                    label = page.evaluate("({locale,state}) => StandTermDesktopI18n.create(locale).t('desktop.capture.status_' + state, {time:'00:04'})", dict(locale=locale, state=state))
+                    page.evaluate("({state,label}) => fixture.receive({state,label})", dict(state=state, label=label))
                     expected = page.evaluate("({locale,key}) => StandTermDesktopI18n.create(locale).t('desktop.toolbar.' + key)", dict(locale=locale, key=key))
                     assert page.locator('#pause').get_attribute('title') == expected
                     assert page.locator('#pause').get_attribute('aria-label') == expected
-                    assert page.locator('#recording-status').text_content() == 'Fixture 00:04'
+                    assert page.locator('#recording-status').text_content() == label
+                    layout = page.evaluate("""() => [...document.querySelectorAll('#capture-tools button')]
+                        .filter(el => !el.hidden).map(el => ({id:el.id, right:el.getBoundingClientRect().right, width:innerWidth}))""")
+                    assert all(item['right'] <= item['width'] for item in layout), (locale, state, layout)
                 page.evaluate("fixture.receive({state:'idle'}); fixture.result = false")
                 page.click('#save')
                 expected = page.evaluate("locale => StandTermDesktopI18n.create(locale).t('desktop.toolbar.action_unavailable')", locale)
diff --git a/desktop/toolbar.css b/desktop/toolbar.css
index f79d3c6..a301c85 100644
--- a/desktop/toolbar.css
+++ b/desktop/toolbar.css
@@ -17,5 +17,5 @@ button:disabled { opacity: .4; cursor: default; }
 #capture-tools { border-left: 1px solid #555; padding-left: 6px; margin-left: auto; }
 svg { width: 20px; height: 20px; fill: none; stroke: currentColor; stroke-width: 1.7; stroke-linecap: round; stroke-linejoin: round; vertical-align: middle; }
 #record svg, #stop svg { fill: #ed6666; stroke: #ed6666; }
-@media (max-width: 750px) { button { padding: 0 5px; } }
+@media (max-width: 750px) { button { padding: 0 3px; } }
 @media (prefers-reduced-motion: reduce) { #notice-area { transition: none; } }
diff --git a/docs/desktop_ui_copy_review.tsv b/docs/desktop_ui_copy_review.tsv
index 8eb31cb..4710519 100644
--- a/docs/desktop_ui_copy_review.tsv
+++ b/docs/desktop_ui_copy_review.tsv
@@ -24,12 +24,12 @@ desktop.menu.pause_agent	Pause Agent for current terminal	Pause Agent for curren
 desktop.agent.help_title	Give your agent a StandTerm prompt	Connect your agent to StandTerm	讓 Agent 連線至 StandTerm	Getting-started dialog heading; descriptive text alone grants no access.		Keep permission requirements in the accompanying instructions. Do not expand public Agent Info. Desktop and Core may use different languages; keep the English Core control names recognizable alongside Chinese labels.	translation-reviewed	desktop/main.cjs:agentMenu.showHelp
 desktop.agent.help_permissions	Select the tab where your agent runs. Use Agent Panel to enable access and choose permissions on each tab it may operate.	Select the tab where your agent runs. In Agent Panel, enable access and choose permissions for each tab it may operate.	選取 Agent 所在的分頁。在 Agent 面板（Agent Panel）中，逐一為 Agent 可操作的分頁啟用存取並選擇權限。	First paragraph of Agent help; caller tab and permitted target tabs can differ.		Keep per-tab authorization, local/SSH distinction and current permission defaults. No implicit cross-tab grants. Desktop and Core may use different languages; keep the English Core control names recognizable alongside Chinese labels.	translation-reviewed	desktop/main.cjs:agentMenu.showHelp
 desktop.agent.help_connection	Open Agent connection, choose Copy Prompt, and paste it into your agent with the intended task. Follow the environment shown in that dialog.	Open Agent connection, choose Copy Prompt, and paste it into your agent with the task. Follow the environment shown in the dialog.	開啟「Agent 連線」（Agent connection），選擇「複製連線指引」（Copy Prompt），再將指引連同任務貼給 Agent。請依對話框顯示的環境操作。	Connection-instructions paragraph; SSH/local setup remains in the preceding paragraph.		Match the actual Core control names, including Copy Prompt; retain environment/target guidance. Do not translate or modify the copied prompt payload here. Desktop and Core may use different languages; keep the English Core control names recognizable alongside Chinese labels.	translation-reviewed	desktop/main.cjs:agentMenu.showHelp
-desktop.capture.folder_policy	Future captures save here automatically. Change this in StandTerm > Capture Settings.	Future files of this capture type save here automatically. Change the folder in Capture Settings.		Folder chooser message. PNG and WebM have separate saved folder preferences; this is a retained per-type choice, not a one-off Save As path. The first folder selection also seeds the other format if unset; later choices update only the selected format.		Keep extension values png/webm and chosen filesystem path literal. Cancel still returns null; do not change folder persistence or auto-save behavior. Preserve first-choice seeding; do not describe the two preferences as fully independent.	proposed	desktop/capture.cjs:chooseDirectory:94-103
-desktop.capture.settings_detail	Screenshots: {screenshot_folder}\nRecordings: {recording_folder}\n\nPNG screenshots and silent WebM recordings are saved automatically.	Screenshots: {screenshot_folder}\nRecordings: {recording_folder}\n\nPNG screenshots and WebM recordings save to these folders. Recordings have no audio.		Capture Settings detail. Resolve the two current unset-folder labels separately in the later full catalog pass; this row preserves raw folder paths.	{screenshot_folder}, {recording_folder}	Keep response indices 0 Done, 1 screenshot-folder chooser, 2 recording-folder chooser, 3 open screenshot folder, 4 open recording folder. defaultId=0 and cancelId=0. No action inference from labels.	proposed	desktop/capture.cjs:configure:110-121
-desktop.capture.capture_failed	The terminal view could not be captured. Bring StandTerm to the foreground and retry. Window state is available in Diagnostics.	Could not capture the terminal view. Bring StandTerm to the foreground and try again. Check Diagnostics if it still fails.		Screenshot capturePage or empty-image failure before file output begins; retained diagnostic includes window state.		Preserve original Error cause and diagnostic fields. No automatic retry, focus manipulation, or capture-scope expansion.	proposed	desktop/capture.cjs:screenshot:136-146
-desktop.capture.partial_file	Unfinished file retained at:\n{path}	Partial screenshot kept at:\n{path}		Suffix added only if failed screenshot output has a partial path; it is not a successful PNG save notice.	{path}	Keep the raw path and preceding error. Do not delete or overwrite partial files, promise readability, or automatically retry. Preserve conditional display only when output.partial exists.	proposed	desktop/capture.cjs:screenshot catch:163-166
-desktop.capture.partial_recording	Unfinished recording retained at:\n{path}	Partial recording kept at:\n{path}		Recording failure suffix after recorder teardown and output close; partial WebM may be incomplete.	{path}	Keep raw error and path; do not promise playable or recoverable video, delete partial output, publish it as complete, or retry automatically.	proposed	desktop/capture.cjs:finish:311-324
-desktop.capture.stop_confirm	Stop and save the recording before {action}?	Stop recording and attempt to save it before {action}?		Recording guard for another Desktop action. Current confirmStop awaits stop but returns true even if stop returns an error result; wording cannot guarantee a successful save.	{action}	Keep numeric response 1 as stop-and-continue; response 0/defaultId=0/cancelId=0 keeps recording and cancels the pending action. Keep capture-start/capture-stop/capture-status IDs and state unchanged. No new retry or save-success gate in this copy-only stage. Policy checkpoint before integration: decide whether save failure should block close/quit; use separate whole-message keys for close and quit if grammar requires it.	proposed	desktop/capture.cjs:confirmStop:329-339
+desktop.capture.folder_policy	Future captures save here automatically. Change this in StandTerm > Capture Settings.	Files of this capture type save here automatically. If the other capture folder is unset, this choice sets it too. Change either folder in Capture Settings.	此類擷取檔案之後會自動儲存於此。若另一類擷取的資料夾尚未設定，也會採用此資料夾。之後可在「畫面擷取設定」分別變更。	Folder chooser message. PNG and WebM have separate saved folder preferences; this is a retained per-type choice, not a one-off Save As path. The first folder selection also seeds the other format if unset; later choices update only the selected format.		Keep extension values png/webm and chosen filesystem path literal. Cancel still returns null; do not change folder persistence or auto-save behavior. Preserve first-choice seeding; do not describe the two preferences as fully independent.	translation-reviewed	desktop/capture.cjs:chooseDirectory:94-103
+desktop.capture.settings_detail	Screenshots: {screenshot_folder}\nRecordings: {recording_folder}\n\nPNG screenshots and silent WebM recordings are saved automatically.	Screenshots: {screenshot_folder}\nRecordings: {recording_folder}\n\nPNG screenshots and WebM recordings save to these folders. Recordings have no audio.	截圖：{screenshot_folder}\n錄影：{recording_folder}\n\nPNG 截圖與 WebM 錄影會儲存至上述資料夾。錄影不含音訊。	Capture Settings detail. Resolve the two current unset-folder labels separately in the later full catalog pass; this row preserves raw folder paths.	{screenshot_folder}, {recording_folder}	Keep response indices 0 Done, 1 screenshot-folder chooser, 2 recording-folder chooser, 3 open screenshot folder, 4 open recording folder. defaultId=0 and cancelId=0. No action inference from labels.	translation-reviewed	desktop/capture.cjs:configure:110-121
+desktop.capture.capture_failed	The terminal view could not be captured. Bring StandTerm to the foreground and retry. Window state is available in Diagnostics.	Could not capture the terminal view. Bring StandTerm to the foreground and try again. Check Diagnostics if it still fails.	無法擷取終端畫面。請將 StandTerm 切換至前景後再試一次；若仍失敗，請查看「診斷」。	Screenshot capturePage or empty-image failure before file output begins; retained diagnostic includes window state.		Preserve original Error cause and diagnostic fields. No automatic retry, focus manipulation, or capture-scope expansion.	translation-reviewed	desktop/capture.cjs:screenshot:136-146
+desktop.capture.partial_file	Unfinished file retained at:\n{path}	Partial screenshot kept at:\n{path}	未完成的截圖已保留於：\n{path}	Suffix added only if failed screenshot output has a partial path; it is not a successful PNG save notice.	{path}	Keep the raw path and preceding error. Do not delete or overwrite partial files, promise readability, or automatically retry. Preserve conditional display only when output.partial exists.	translation-reviewed	desktop/capture.cjs:screenshot catch:163-166
+desktop.capture.partial_recording	Unfinished recording retained at:\n{path}	Partial recording kept at:\n{path}	未完成的錄影已保留於：\n{path}	Recording failure suffix after recorder teardown and output close; partial WebM may be incomplete.	{path}	Keep raw error and path; do not promise playable or recoverable video, delete partial output, publish it as complete, or retry automatically.	translation-reviewed	desktop/capture.cjs:finish:311-324
+desktop.capture.stop_confirm	Stop and save the recording before {action}?			Replaced by desktop.capture.confirm_close and desktop.capture.confirm_quit. The caller supplies typed close/quit actions; complete translated sentences no longer interpolate an English action fragment.	{action}	Remove this message from runtime catalogs. Keep the original source and {action} placeholder here for review history only. The authorized implementation cancels the current close/quit if stop/save is not confirmed; preserve the window, show the error and any partial path, and do not retry automatically.	remove	desktop/capture.cjs:confirmStop:329-339
 desktop.setup.cancel_detail	Keep this window open or minimize it to continue. Canceling stops the owned installation processes; prepared files are retained so you can retry on the next launch.	Keep this window open or minimize it to continue. Canceling stops this setup’s installation processes and keeps prepared files. Relaunch StandTerm to try again.		Close confirmation during preparation. Cancellation targets owned setup processes and waits for cleanup; prepared files remain.		Keep button index 0 Keep preparing and 1 Cancel setup; defaultId=0/cancelId=0. Preserve stale-window check and cooperative cancellation. Do not imply all Python processes are stopped or retry is automatic.	proposed	desktop/setup.cjs:requestSetupCancel:61-76
 desktop.setup.install_effects	and downloads and installs Python dependencies from your configured package index. Dependencies can execute installation code. Internet access and disk space are required.	Python dependencies are downloaded from your configured package index and installed in the private environment. Installation can run code and requires internet access and disk space.		Exact dependency-effects fragment in preparePackagedBackend confirmation detail; preceding Core-copy/path/Python requirements and following retention policy remain separate.		Keep existing environment/backend selection and raw destination path. Confirm response 1 creates the environment; 0/defaultId/cancelId cancel. Do not imply bundled or verified dependencies, system Python installation, or privilege elevation.	proposed	desktop/setup.cjs:preparePackagedBackend:262-268
 desktop.setup.retention	Failed setup is retained for retry. Uninstall keeps environments by default; optional cleanup moves only verified idle venvs to a recovery folder. Core and user data are retained.	Failed setup files are kept for retry. Uninstall keeps environments by default. Optional cleanup moves verified idle venvs to recovery and keeps Core files and user data.		Exact retention fragment of the initial setup confirmation. The cleanup operation is a recoverable move rather than disk-space reclamation.		Keep venv-only cleanup boundary and verified/idle checks. Do not imply uninstall deletes Core or user data, that partial setup is ready, or that retry occurs without a user action.	proposed	desktop/setup.cjs:preparePackagedBackend:267
@@ -142,3 +142,42 @@ desktop.external_browser.open	Open in browser	Open in browser	在瀏覽器開啟
 desktop.external_browser.failed	Could not open the default browser.	Could not open the default browser.	無法開啟預設瀏覽器。	External-browser destination confirmation or generic OS open failure.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Only the confirmation may show the raw destination URL and host. Never insert URL, token, grant or cookies into generic notices. Preserve Cancel response/defaultId/cancelId 0, Open response 1, destination validation and user confirmation. TSV detail stores literal \n separators.	translation-reviewed	desktop/main.cjs:createExternalOpener.confirm/notify
 desktop.external_browser.failure_hint	Check the default HTTP/HTTPS browser in your operating system settings.	Check the default HTTP/HTTPS browser in your operating system settings.	請在作業系統設定中檢查 HTTP／HTTPS 的預設瀏覽器。	External-browser destination confirmation or generic OS open failure.		Display text only. Preserve typed action IDs, response indices, origin checks, permissions and focus rules. Escape every translated string and runtime value when rendering scriptless HTML. Only the confirmation may show the raw destination URL and host. Never insert URL, token, grant or cookies into generic notices. Preserve Cancel response/defaultId/cancelId 0, Open response 1, destination validation and user confirmation. TSV detail stores literal \n separators.	translation-reviewed	desktop/main.cjs:createExternalOpener.confirm/notify
 desktop.diagnostics.native_backend	Native	Native	原生	Native diagnostics-menu backend display selected when mode is not wsl.		Display label only. Keep wsl/windows/macos mode IDs, MODES runtime values and event JSON unchanged. Keep WSL literal. Escape translated values in any HTML renderer.	translation-reviewed	desktop/diagnostics.cjs:diagnosticsMenu:diagnostics-backend
+desktop.capture.title	StandTerm Capture	StandTerm Capture	StandTerm 畫面擷取	Fallback capture notification dialog title.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels.	translation-reviewed	desktop/capture.cjs:DesktopCapture.constructor:notify
+desktop.capture.menu	Capture	Capture	畫面擷取	Native capture submenu title.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Reuse desktop.toolbar.screenshot_copy/screenshot_save/record_start/record_stop for action labels. Pause/resume already use desktop.toolbar.record_pause/record_resume. Do not add duplicate catalog entries.	translation-reviewed	desktop/capture.cjs:DesktopCapture.menu
+desktop.capture.status_recording	Recording {time}	Recording {time}	錄影中 {time}	Recording state label in the disabled native menu item and toolbar status.	{time}	Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Use the existing formatted clock unchanged as time. Preserve idle/starting/recording/paused/stopping state values, active-state calculation and menu enablement.	translation-reviewed	desktop/capture.cjs:DesktopCapture.update
+desktop.capture.status_paused	Recording paused {time}	Recording paused {time}	錄影已暫停 {time}	Paused state label; elapsed clock excludes paused duration.	{time}	Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Use the existing formatted clock unchanged as time. Preserve idle/starting/recording/paused/stopping state values, active-state calculation and menu enablement.	translation-reviewed	desktop/capture.cjs:DesktopCapture.update
+desktop.capture.status_idle	Not recording	Not recording	未在錄影	Idle menu status; does not mean a previous recording was saved.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Use the existing formatted clock unchanged as time. Preserve idle/starting/recording/paused/stopping state values, active-state calculation and menu enablement.	translation-reviewed	desktop/capture.cjs:DesktopCapture.update
+desktop.capture.status_starting	Starting recording...	Starting recording…	正在準備錄影…	Starting state while folder selection and recorder preparation may still be pending.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Use the existing formatted clock unchanged as time. Preserve idle/starting/recording/paused/stopping state values, active-state calculation and menu enablement.	translation-reviewed	desktop/capture.cjs:DesktopCapture.update
+desktop.capture.status_saving	Saving recording...	Saving recording…	正在儲存錄影…	Stopping state; completion and final output are not yet confirmed.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Use the existing formatted clock unchanged as time. Preserve idle/starting/recording/paused/stopping state values, active-state calculation and menu enablement.	translation-reviewed	desktop/capture.cjs:DesktopCapture.update
+desktop.capture.title_recording	REC {time}	REC {time}	錄影 {time}	Window-title recording indicator for existing active, non-paused states.	{time}	Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Use the existing formatted clock unchanged as time. Preserve idle/starting/recording/paused/stopping state values, active-state calculation and menu enablement.	translation-reviewed	desktop/capture.cjs:DesktopCapture.update
+desktop.capture.title_paused	PAUSED {time}	PAUSED {time}	暫停 {time}	Window-title recording indicator for typed paused state.	{time}	Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Use the existing formatted clock unchanged as time. Preserve idle/starting/recording/paused/stopping state values, active-state calculation and menu enablement.	translation-reviewed	desktop/capture.cjs:DesktopCapture.update
+desktop.capture.folder_unavailable	The saved capture folder is unavailable. Choose a writable folder again.	The saved capture folder is unavailable. Choose a writable folder again.	已儲存的擷取資料夾無法使用。請重新選擇可寫入的資料夾。	Saved folder failed directory or write-access validation; a new picker follows.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Cancel returns null. Preserve initial seeding of the other unset format and subsequent per-format changes. Do not claim the selected path is already saved or any capture has completed.	translation-reviewed	desktop/capture.cjs:DesktopCapture.chooseFile
+desktop.capture.choose_screenshot_folder	Choose screenshot folder	Choose screenshot folder	選擇截圖資料夾	Native folder chooser title for png.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Cancel returns null. Preserve initial seeding of the other unset format and subsequent per-format changes. Do not claim the selected path is already saved or any capture has completed.	translation-reviewed	desktop/capture.cjs:DesktopCapture.chooseDirectory
+desktop.capture.choose_recording_folder	Choose recording folder	Choose recording folder	選擇錄影資料夾	Native folder chooser title for webm.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Cancel returns null. Preserve initial seeding of the other unset format and subsequent per-format changes. Do not claim the selected path is already saved or any capture has completed.	translation-reviewed	desktop/capture.cjs:DesktopCapture.chooseDirectory
+desktop.capture.use_folder	Use this folder	Use this folder	使用此資料夾	Affirmative native folder-picker action.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Cancel returns null. Preserve initial seeding of the other unset format and subsequent per-format changes. Do not claim the selected path is already saved or any capture has completed.	translation-reviewed	desktop/capture.cjs:DesktopCapture.chooseDirectory
+desktop.capture.folder_required	Choose a folder.	Choose a folder.	請選擇資料夾。	Selected path is not a directory; visible local validation error.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Cancel returns null. Preserve initial seeding of the other unset format and subsequent per-format changes. Do not claim the selected path is already saved or any capture has completed.	translation-reviewed	desktop/capture.cjs:DesktopCapture.chooseDirectory
+desktop.capture.settings_title	Capture Settings	Capture Settings	畫面擷取設定	Native capture-settings dialog title; no menu ellipsis.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Use desktop.capture.done at response index 0; keep defaultId=0/cancelId=0 and other response indices unchanged. Do not open an unset folder or translate an existing folder path.	translation-reviewed	desktop/capture.cjs:DesktopCapture.configure
+desktop.capture.settings_message	Desktop capture folders	Desktop capture folders	Desktop 畫面擷取資料夾	Capture-settings dialog heading.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Use desktop.capture.done at response index 0; keep defaultId=0/cancelId=0 and other response indices unchanged. Do not open an unset folder or translate an existing folder path.	translation-reviewed	desktop/capture.cjs:DesktopCapture.configure
+desktop.capture.first_screenshot	Choose on first save	Choose on first save	首次儲存時選擇	Fallback screenshot folder display when png preference is unset.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Use desktop.capture.done at response index 0; keep defaultId=0/cancelId=0 and other response indices unchanged. Do not open an unset folder or translate an existing folder path.	translation-reviewed	desktop/capture.cjs:DesktopCapture.configure
+desktop.capture.first_recording	Choose on first recording	Choose on first recording	首次錄影時選擇	Fallback recording folder display when webm preference is unset.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Use desktop.capture.done at response index 0; keep defaultId=0/cancelId=0 and other response indices unchanged. Do not open an unset folder or translate an existing folder path.	translation-reviewed	desktop/capture.cjs:DesktopCapture.configure
+desktop.capture.change_screenshot_folder	Screenshot folder...	Screenshot folder…	截圖資料夾…	Settings button at response index 1 opens png folder selection.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Use desktop.capture.done at response index 0; keep defaultId=0/cancelId=0 and other response indices unchanged. Do not open an unset folder or translate an existing folder path.	translation-reviewed	desktop/capture.cjs:DesktopCapture.configure
+desktop.capture.change_recording_folder	Recording folder...	Recording folder…	錄影資料夾…	Settings button at response index 2 opens webm folder selection.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Use desktop.capture.done at response index 0; keep defaultId=0/cancelId=0 and other response indices unchanged. Do not open an unset folder or translate an existing folder path.	translation-reviewed	desktop/capture.cjs:DesktopCapture.configure
+desktop.capture.open_screenshot_folder	Open screenshot folder	Open screenshot folder	開啟截圖資料夾	Settings button at response index 3 opens the current png folder.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Use desktop.capture.done at response index 0; keep defaultId=0/cancelId=0 and other response indices unchanged. Do not open an unset folder or translate an existing folder path.	translation-reviewed	desktop/capture.cjs:DesktopCapture.configure
+desktop.capture.open_recording_folder	Open recording folder	Open recording folder	開啟錄影資料夾	Settings button at response index 4 opens the current webm folder.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Use desktop.capture.done at response index 0; keep defaultId=0/cancelId=0 and other response indices unchanged. Do not open an unset folder or translate an existing folder path.	translation-reviewed	desktop/capture.cjs:DesktopCapture.configure
+desktop.capture.open_folder_failed	Could not open the capture folder.	Could not open the capture folder.	無法開啟擷取資料夾。	Generic local failure after OS folder-open callback reports an error.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Use desktop.capture.done at response index 0; keep defaultId=0/cancelId=0 and other response indices unchanged. Do not open an unset folder or translate an existing folder path.	translation-reviewed	desktop/capture.cjs:DesktopCapture.configure
+desktop.capture.show_window_capture	Show the StandTerm window before capturing it.	Show the StandTerm window before capturing it.	請先顯示 StandTerm 視窗，再擷取畫面。	Visible local guard before screenshot capture; do not focus or show the window automatically.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Preserve raw filesystem/recorder errors and existing output guarantees. Keep paths literal. Literal \n separates message text from its path; never claim success for partial output.	translation-reviewed	desktop/capture.cjs:DesktopCapture.screenshot
+desktop.capture.show_window_recording	Show the StandTerm window before recording it.	Show the StandTerm window before recording it.	請先顯示 StandTerm 視窗，再開始錄影。	Visible local guard before recorder creation.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Preserve raw filesystem/recorder errors and existing output guarantees. Keep paths literal. Literal \n separates message text from its path; never claim success for partial output.	translation-reviewed	desktop/capture.cjs:DesktopCapture.begin
+desktop.capture.leave_fullscreen	Leave fullscreen before recording so the recording indicator remains visible.	Leave fullscreen before recording so the recording indicator stays visible.	請先離開全螢幕再開始錄影，讓錄影指示保持可見。	Fullscreen recording guard; no automatic window-mode changes.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Preserve raw filesystem/recorder errors and existing output guarantees. Keep paths literal. Literal \n separates message text from its path; never claim success for partial output.	translation-reviewed	desktop/capture.cjs:DesktopCapture.begin
+desktop.capture.screenshot_copied	Screenshot copied to the clipboard.	Screenshot copied to the clipboard.	已將截圖複製至剪貼簿。	Shown only after the existing awaited image clipboard operation succeeds.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Preserve raw filesystem/recorder errors and existing output guarantees. Keep paths literal. Literal \n separates message text from its path; never claim success for partial output.	translation-reviewed	desktop/capture.cjs:DesktopCapture.screenshot
+desktop.capture.screenshot_saved	Screenshot saved to:\n{path}	Screenshot saved to:\n{path}	截圖已儲存至：\n{path}	Success notification after screenshot output.finish completes.	{path}	Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Preserve raw filesystem/recorder errors and existing output guarantees. Keep paths literal. Literal \n separates message text from its path; never claim success for partial output.	translation-reviewed	desktop/capture.cjs:DesktopCapture.screenshot
+desktop.capture.recording_saved	Recording saved to:\n{path}	Recording saved to:\n{path}	錄影已儲存至：\n{path}	Success notification after recording output finalization.	{path}	Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Preserve raw filesystem/recorder errors and existing output guarantees. Keep paths literal. Literal \n separates message text from its path; never claim success for partial output.	translation-reviewed	desktop/capture.cjs:DesktopCapture.finish
+desktop.capture.confirm_title	StandTerm recording is active	Recording in progress	錄影尚未結束	Confirmation title for an active recording, including paused/starting states.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Keep defaultId=0/cancelId=0 and response 1 as stop-and-save. Reuse desktop.toolbar.record_stop for the affirmative button. Do not interpolate localized action text as control data. The authorized gate cancels this close/quit unless save is confirmed; retain the window to show errors/partial paths.	translation-reviewed	desktop/capture.cjs:DesktopCapture.confirmStop; desktop/main.cjs:window-close/before-quit
+desktop.capture.confirm_close	Stop and save the recording before closing the window?	Stop and save the recording before closing this window?	要先停止並儲存錄影，再關閉此視窗嗎？	Complete question selected only by typed action close.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Keep defaultId=0/cancelId=0 and response 1 as stop-and-save. Reuse desktop.toolbar.record_stop for the affirmative button. Do not interpolate localized action text as control data. The authorized gate cancels this close/quit unless save is confirmed; retain the window to show errors/partial paths.	translation-reviewed	desktop/capture.cjs:DesktopCapture.confirmStop; desktop/main.cjs:window-close/before-quit
+desktop.capture.confirm_quit	Stop and save the recording before quitting StandTerm?	Stop and save the recording before quitting StandTerm?	要先停止並儲存錄影，再結束 StandTerm 嗎？	Complete question selected only by typed action quit.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Keep defaultId=0/cancelId=0 and response 1 as stop-and-save. Reuse desktop.toolbar.record_stop for the affirmative button. Do not interpolate localized action text as control data. The authorized gate cancels this close/quit unless save is confirmed; retain the window to show errors/partial paths.	translation-reviewed	desktop/capture.cjs:DesktopCapture.confirmStop; desktop/main.cjs:window-close/before-quit
+desktop.capture.keep_recording	Keep recording	Keep window open	保持視窗開啟	Safe response 0 cancels the pending close/quit and preserves the current recording or paused state; it does not resume a paused recorder.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Keep defaultId=0/cancelId=0 and response 1 as stop-and-save. Reuse desktop.toolbar.record_stop for the affirmative button. Do not interpolate localized action text as control data. The authorized gate cancels this close/quit unless save is confirmed; retain the window to show errors/partial paths.	translation-reviewed	desktop/capture.cjs:DesktopCapture.confirmStop; desktop/main.cjs:window-close/before-quit
+desktop.capture.save_failed_title		Recording save not confirmed	無法確認錄影儲存結果	Error dialog title when stop/save failed during a pending close or quit.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Requires the user-authorized failure gate: no closing/quitting on unconfirmed save. Preserve raw error and optional partial path; keep the window open. Do not imply recording continues, a partial WebM is playable, or saving can be retried automatically. Reuse desktop.common.ok for acknowledgment.	translation-reviewed	desktop/capture.cjs:DesktopCapture.confirmStop
+desktop.capture.save_failed_message		Recording save was not confirmed. This close or quit request was cancelled.	無法確認錄影已儲存。已取消本次關閉或結束操作。	Failure gate feedback; does not assert that no output file exists.		Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Requires the user-authorized failure gate: no closing/quitting on unconfirmed save. Preserve raw error and optional partial path; keep the window open. Do not imply recording continues, a partial WebM is playable, or saving can be retried automatically. Reuse desktop.common.ok for acknowledgment.	translation-reviewed	desktop/capture.cjs:DesktopCapture.confirmStop
+desktop.capture.save_failed_detail		Review the error and file locations below.\n\n{error}	請檢查以下錯誤與檔案位置。\n\n{error}	Failure detail with original error. Append partial_recording for a reported partial path and requested_destination for the intended output path. Neither location is a success guarantee.	{error}	Display text only. Keep capture scope, no-audio recording, png/webm values, IPC/menu IDs, typed states, accelerators and file paths unchanged. Do not dispatch actions by translated labels. Requires the user-authorized failure gate: no closing/quitting on unconfirmed save. Preserve raw error and optional partial path; keep the window open. Do not imply recording continues, a partial WebM is playable, or saving can be retried automatically. Reuse desktop.common.ok for acknowledgment. Publishing may have succeeded before partial-file cleanup failed; do not claim the final file is absent.	translation-reviewed	desktop/capture.cjs:DesktopCapture.confirmStop
+desktop.capture.save_unconfirmed		Could not confirm the recording save result.	無法確認錄影儲存結果。	Fallback error when a stop/save result does not positively confirm completion.		Cancel the pending close/quit and retain the window. Do not claim that no output exists, retry automatically, or imply recording continues.	translation-reviewed	desktop/capture.cjs:DesktopCapture.confirmStop
+desktop.capture.requested_destination		Requested destination:\n{path}	預定儲存位置：\n{path}	Failure-dialog suffix naming the requested final output path, distinct from a retained partial path.	{path}	Keep path literal. Final publication may have happened before partial cleanup failed. This label does not guarantee that the path exists, that the file is complete or playable, or that saving succeeded.	translation-reviewed	desktop/capture.cjs:DesktopCapture.confirmStop
+desktop.capture.done	Done	Done	完成	Close Capture Settings without changing either folder preference.		Keep response index 0 and defaultId=0/cancelId=0. This closes the settings dialog only; it is not a capture-save result.	translation-reviewed	desktop/capture.cjs:DesktopCapture.configure
diff --git a/docs/desktop_ui_review_plan.md b/docs/desktop_ui_review_plan.md
index 5071e3c..88f0a4e 100644
--- a/docs/desktop_ui_review_plan.md
+++ b/docs/desktop_ui_review_plan.md
@@ -12,15 +12,14 @@ acceptance remain separate. Browser acceptance is recorded in
 | --- | --- | --- | --- |
 | 0 — Complete | Clarify toolbar action feedback before localization. A resolved `false` now shows unavailable feedback; a rejected invocation reports an uncertain result without suggesting retry. | Small | Both original failures reproduced before the fix; renderer and command-guard checks passed. Each click invokes once, with no automatic replay or invented completion notice. |
 | 1 — Complete | Add a Desktop-owned language preference and catalog; pilot custom menus, toolbar labels and Agent help. | Medium | English default/fallback, `en` and `zh-TW`, malformed preference fallback, next-launch application, translated title/ARIA labels without losing SVGs, fixed command IDs, focus/origin guards and staging inclusion verified. Native acceptance remains order 4. |
-| 2 — Partial | Browser Access and Diagnostics are localized, including About and external-browser confirmations. Capture remains; resolve its save-failure exit policy first. | Medium | Sensitive clipboard feedback, fixed authorization actions, escaped diagnostic fields and literal event JSON verified in both languages. Capture still needs typed state, partial-file, folder-seeding and combined save-failure plus close/quit coverage. |
+| 2 — Complete | Localize Browser Access, Diagnostics, About, external-browser confirmations and Capture; retain the window when recording save fails during close/quit. | Medium | Sensitive clipboard feedback, fixed authorization actions, escaped diagnostic fields, literal event JSON, typed Capture state, folder settings and combined save-failure plus close/quit coverage verified. |
 | 3 | Localize setup, Core source selection, startup failure and recoverable environment cleanup. | Medium to large | Both languages work before Core is available. Cancellation waits for owned installers; stale confirmations do nothing; source switching, restart/session closure, retained files and recovery moves remain explicit. |
 | 4 | Complete Windows and macOS native acceptance and packaged asset checks. | Platform-dependent | Menus, native dialogs, narrow layouts, keyboard/ARIA labels, clipboard, setup and recovery are checked on each OS. Verify staged and packaged Desktop catalogs independently of the selected Core version. |
 
-The next implementation is Capture in order 2.
-Resolve the recording save-failure exit policy before changing its confirmation.
-Orders 1–3 should remain separate reviewable changes. First-run setup can move
-ahead of order 2 if onboarding becomes the priority; it is not required to prove
-the small localization pilot.
+The next implementation is setup and Core source/recovery in order 3.
+The operator chose to retain the window and show the error and unfinished-file
+location when recording save fails during close/quit. Orders 1–3 remain separate
+reviewable changes; native OS acceptance remains order 4.
 
 ## Difficulty and design choices
 
@@ -68,9 +67,10 @@ Keep these implementation boundaries:
 
 [desktop_ui_copy_review.tsv](desktop_ui_copy_review.tsv) is a prioritized seed
 inventory, not a claim that every Desktop string has been extracted. It uses
-the same nine columns as the browser table. After Browser Access/Diagnostics,
-126 rows are `translation-reviewed` with English and Traditional Chinese text; 17 workflow
-rows remain `proposed` with empty `zh-TW` cells. Some `current_en` cells are exact fragments or normalize
+the same nine columns as the browser table. After Capture,
+170 rows are `translation-reviewed` with English and Traditional Chinese text;
+11 setup/Core source rows remain `proposed` with empty `zh-TW` cells. One retired
+Capture sentence fragment is marked `remove`. Some `current_en` cells are exact fragments or normalize
 dynamic values to named placeholders; `context` identifies these cases.
 
 Approve the English behavior and terminology before requesting translations of
@@ -115,7 +115,7 @@ proposals, not implementation authorization.
 | --- | --- | --- | --- | --- | --- | --- |
 | Rejected toolbar invocation encourages retry despite an uncertain outcome | Low | `toolbar.js` click handler; `toolbar-notice.test.cjs` rejection case | Clarify result and avoid replay | Use “Could not confirm the action result. Check the current state.” | Modify; order 0 | Add assertion that invocation occurs once and the unknown-result notice appears. |
 | Explicit toolbar rejection has no notice | Low; main-review addition | `toolbar.cjs` handler returns `false`; renderer only catches exceptions | Complement exception handling | Handle exactly `false`; do not infer completion from truthiness or message content | Accept; order 0 | Cover explicit rejection, exception and successful operation separately. |
-| Stop/save failure still permits close or quit | Medium | `capture.cjs:confirmStop` awaits `stop()` then returns true; `main.cjs` close and before-quit handlers | Do not promise a successful save before leaving | Current copy proposal says “attempt to save”; retaining the window on failure is a separate behavior decision | Policy before order 2 | Existing capture smoke checks partial output and successful confirmation separately; combined failure plus exit coverage is missing. |
+| Stop/save failure still permits close or quit | Medium | Original `capture.cjs:confirmStop` awaited `stop()` then returned true | Retain the window when saving fails | Operator approved retaining the window and showing error/file locations | Resolved in Capture batch below | Combined failure, close/quit and concurrent-dialog coverage now passes. |
 | Capture folder hint sounds global | Low | `capture.cjs:chooseDirectory`; `capture-settings.cjs:set` | Describe per-format preference | Preserve first-selection seeding of the other unset format; do not claim preferences are completely independent | Modify; order 2 | Cover initial seeding and later independent PNG/WebM changes. |
 | Localization could alter command or renderer boundaries | Integration constraint | `ui-commands.cjs:UI_ACTIONS`; `toolbar.cjs` sender and asset guards | Preserve structural commands and strict assets | Accept as invariants, not findings of a current bypass | Accept; order 1 | Existing guard tests plus explicit asset and localized-label cases. |
 | Independent Desktop locale adds a second preference | Product tradeoff | Pre-Core setup/recovery; independently selectable Core source | Consider shared/advisory locale | Recommend independence for startup coverage; validated advisory locale is a feasible alternative | Policy; recommended for order 1 | Test missing/malformed preference and unavailable/older Core. |
@@ -143,8 +143,9 @@ remaining gap in the new preference, DOM and command tests.
 | Save can finish before its notification fails | Validation boundary | `language.cjs:choose` persists before notification | Verify saved choice survives notification failure | Keep uncertain-result wording and the stored selection | Accept | Lost-notification test plus reopening the chooser passed. |
 | Labels must not change action or target dispatch | Correctness boundary | `ui-commands.cjs` action and snapshot target | Test both locales with unchanged dispatch values | Retained existing guards | Accept | Typed command/terminal ID, invalid display-label dispatch and focus tests passed. |
 
-No policy was reopened. Core's independent language preference and the existing
-recording-exit behavior remain intact. Native OS qualification is still order 4.
+The pilot preserved Core's independent language preference and recording-exit
+behavior. The later Capture batch changes the exit policy with operator approval.
+Native OS qualification is still order 4.
 
 ## Browser Access and Diagnostics review
 
@@ -172,6 +173,44 @@ checked that Browser Access, DevTools and external-browser confirmations retain
 `response === 1`, default/cancel index 0 and the original sensitive-data boundaries.
 Native dialog layout and interaction are still part of order 4.
 
+## Capture review and evidence
+
+The operator-approved contract cancels the current close/quit when recording
+save fails or cannot be confirmed. Desktop restores/shows the window and displays
+a persistent error dialog with the original error and available unfinished-file
+and requested-destination paths. It does not automatically retry. Once recording
+is inactive and the dialog is dismissed, a later explicit close/quit is allowed;
+this is not a permanent exit lock. A canceled recording folder chooser is not a
+save failure.
+
+The batch adds 44 reviewed bilingual messages for Capture settings, menus,
+recording state, notifications and whole close/quit prompts. The old grammatical
+`{action}` fragment is retired. Action IDs and numeric dialog responses remain
+structural; paths and lower-level recorder/file errors remain literal data.
+Folder selection still seeds the other format only when that preference is unset.
+
+| Finding | Severity | Evidence | Critic remedy | Main response | Resolution | Validation |
+| --- | --- | --- | --- | --- | --- | --- |
+| Startup/background failure can clear the job before confirmation observes it | High | `begin`, `stop`, `finish` and pending confirmation lifetime | Preserve the original job outcome across awaits | Save structured results on the job and propagate startup failure; reject stale replacement jobs | Accept | Startup failure, background completion, canceled chooser and stale/duplicate confirmation tests pass. |
+| A notification exception can obscure a saved result or reach generic process exit | High | Publication precedes notification; before-quit generic exception path exits | Separate file outcome from notification; reject uncertain quit | Store result before notification, treat notification as best effort and make quit rejection keep the app running | Accept | Notification/dialog rejection, single publication and actual main shutdown callback tests pass. |
+| Final and partial paths can both exist after partial-link cleanup fails | Medium | Hard-link publication precedes partial unlink | Avoid claiming the destination is absent | Show a requested destination without asserting save completion; preserve both files | Accept | Real temporary-file test verifies both paths retain bytes after an injected unlink failure. |
+
+The critic's focused second pass found no remaining material race or premature
+exit issue. Main review also blocks repeated close events while the failure
+dialog is pending. Native dialog readability remains unqualified.
+
+Capture completed on 2026-09-20:
+
+- All 133 Desktop unit tests passed under Electron's Node 24.20.0 runtime.
+- Seven catalog regression tests and both catalog freshness checks passed.
+- The real toolbar DOM passed in both locales at 640px, including active/paused
+  labels, pause/resume ARIA and visible capture controls. The paused English case
+  initially placed the stop button about 29px outside the viewport; reducing the
+  existing compact button padding fixes this without shortening state text.
+- Native IPC is mocked in the DOM test. No native OS dialog, encoder smoke or
+  installer acceptance was run for this batch. Capture permissions, recorder
+  isolation and automatic finalization on hide/minimize/navigation are unchanged.
+
 ## Evidence and acceptance limits
 
 Browser Access/Diagnostics completed on 2026-09-20:
@@ -220,7 +259,7 @@ inspection of Capture/setup/recovery does not imply their smoke suites ran in
 this review.
 
 The review table is checked using `build_ui_messages.build_catalog` for schema,
-keys, placeholders and review gates. Only the 126 reviewed rows enter the
+keys, placeholders and review gates. Only the 170 reviewed rows enter the
 Desktop runtime catalog; the remaining workflow proposals stay out of it.
 Windows/macOS native localization, installer lifecycle and packaged acceptance
 remain future work. This plan does not qualify or publish a release.

From b83f5f1f57cf3d13d6922961554647f440a7d2af Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sun, 20 Sep 2026 10:37:48 +0800
Subject: [PATCH 32/43] Localize Desktop setup and Core recovery

## Why
Environment preparation and Core recovery can run before the Core UI is
available. Their English-only dialogs do not follow the Desktop language
selected for the current launch.

## What changed
- Localize setup consent, progress, cancellation, typed error explanations,
  per-mode cleanup, and Core source management through the review table.
- Keep normal dialogs on the launch language and read the relevant mode
  profile for installer preparation and cleanup.
- Preserve numeric actions, process ownership, raw diagnostics, retained
  files and restart consequences; remove an inaccurate shared Git promise.
- Leave installer-wide summaries and remaining shell notices explicitly
  scheduled for a separate batch.

## Testing
All 145 Desktop unit tests and seven catalog regression tests pass.
Both catalogs are current. Six real setup DOM cases cover both languages
and all platform display branches, with native processes mocked. Focused
checks also cover conflicting installer profile preferences and the final
copy changes. Native GUI and packaged acceptance remain separate.
---
 desktop/README.md                        |  10 +-
 desktop/core-source.cjs                  |  48 ++---
 desktop/macos-python.cjs                 |   7 +-
 desktop/main.cjs                         |  12 +-
 desktop/messages.js                      | 198 ++++++++++++++++++++
 desktop/setup.cjs                        | 226 +++++++++++------------
 desktop/setup.html                       |   8 +-
 desktop/test/core-source-i18n.test.cjs   | 115 ++++++++++++
 desktop/test/setup-i18n-browser-smoke.py |  70 +++++++
 desktop/test/setup-i18n-fixture.cjs      | 100 ++++++++++
 desktop/test/setup.test.cjs              | 108 ++++++++++-
 docs/desktop_ui_copy_review.tsv          | 113 ++++++++++--
 docs/desktop_ui_review_plan.md           |  70 +++++--
 13 files changed, 899 insertions(+), 186 deletions(-)
 create mode 100644 desktop/test/core-source-i18n.test.cjs
 create mode 100644 desktop/test/setup-i18n-browser-smoke.py
 create mode 100644 desktop/test/setup-i18n-fixture.cjs

diff --git a/desktop/README.md b/desktop/README.md
index 47b9aec..f4dc478 100644
--- a/desktop/README.md
+++ b/desktop/README.md
@@ -15,8 +15,11 @@ Chinese (Taiwan) for the next launch. The preference belongs to the Desktop
 profile; Core keeps its own language setting. Saving a choice does not restart
 StandTerm or interrupt recording. Coverage includes custom menus, toolbar labels,
 Agent help, Browser Access, Diagnostics, About, external-browser confirmations
-and Capture dialogs/status. Setup, recovery and other Desktop
-text still use English; native role labels follow the platform.
+and Capture dialogs/status, environment preparation and Core source/recovery.
+Installer preparation and cleanup confirmations use the relevant mode profile's
+language. Installer-wide summary/error dialogs, port selection and Files download
+notices still use English; raw technical errors remain unchanged and native role
+labels follow the platform.
 
 Edit reviewed messages in the table, then generate the independent shell
 catalog with `python scripts/build_ui_messages.py --desktop` from the repository
@@ -28,6 +31,9 @@ menus, dialogs or installers.
 `desktop/test/diagnostics-i18n-browser-smoke.py` checks the actual diagnostics
 HTML in both languages, including escaped display data and unchanged event JSON.
 It needs Node 22.12+; use `--node <executable>` to select a prepared runtime.
+`desktop/test/setup-i18n-browser-smoke.py` uses the same option and checks the
+actual setup initialization, progress and cancellation scripts in both languages
+for Windows, macOS and WSL. Setup processes and native dialogs are mocked.
 
 ## macOS Apple Silicon evaluation
 
diff --git a/desktop/core-source.cjs b/desktop/core-source.cjs
index 24cf679..8c62645 100644
--- a/desktop/core-source.cjs
+++ b/desktop/core-source.cjs
@@ -3,6 +3,7 @@
 const fs = require('node:fs/promises');
 const path = require('node:path');
 const { randomUUID } = require('node:crypto');
+const { create } = require('./i18n.js');
 
 const ACTIONS = ['enable', 'update', 'prepare', 'recover'];
 
@@ -51,18 +52,16 @@ async function installedStore(profile, resources, version) {
   return sourceStore(profile, `${version}:${metadata.id}`);
 }
 
-function coreController({ store, prepareBundled, manage, dialog, openLogs, restart }) {
+function coreController({ store, prepareBundled, manage, dialog, openLogs, restart, t = create('en').t }) {
   let lastAction = null;
   let managing = false;
   async function confirm(action) {
-    const result = await dialog.showMessageBox({ type: 'warning', title: 'Change StandTerm Core',
-      message: action === 'recover' ? 'Restore the Core bundled with this Desktop installation?' : 'Use the advanced Git Core environment?',
-      detail: 'This restarts StandTerm and closes terminal sessions. Python dependencies may be downloaded and installed. '
-        + (action === 'recover' ? 'Core files and data in the previous environment are retained. Recovery does not roll back user data. '
-          : 'Git uses the official askac/standterm repository, main branch. Its files are not checked against the installed bundle hashes. '
-            + 'Local changes are allowed, but updates refuse to overwrite them. The Desktop shell stays installed. ')
-        + 'Authorization and recovery data are local to each Core source; switching may require reauthorization.',
-      buttons: ['Cancel', 'Restart and continue'], defaultId: 0, cancelId: 0, noLink: true });
+    const result = await dialog.showMessageBox({ type: 'warning', title: t('desktop.core_source.change_title'),
+      message: t(action === 'recover' ? 'desktop.core_source.confirm_recover' : 'desktop.core_source.confirm_git'),
+      detail: [t('desktop.core_source.restart_notice'),
+        t(action === 'recover' ? 'desktop.core_source.recovery_retention' : 'desktop.core_source.git_policy'),
+        t('desktop.core_source.reauthorization')].join('\n\n'),
+      buttons: [t('desktop.common.cancel'), t('desktop.core_source.restart_continue')], defaultId: 0, cancelId: 0, noLink: true });
     if (result.response === 1) restart(action);
     return result.response === 1;
   }
@@ -74,22 +73,24 @@ function coreController({ store, prepareBundled, manage, dialog, openLogs, resta
       let status;
       let issue = '';
       try { status = await manage('status'); } catch (error) { issue = error.message; }
-      const actions = [{ id: 'cancel', label: 'Close' }];
+      const actions = [{ id: 'cancel', label: t('desktop.core_source.close') }];
       if (status?.git_available) {
         actions.push({ id: settings.source === 'git' ? 'prepare' : 'enable',
-          label: settings.source === 'git' ? 'Prepare Git environment' : 'Enable Git Core' });
+          label: t(settings.source === 'git' ? 'desktop.core_source.prepare_git' : 'desktop.core_source.enable_git') });
         if (status.workspace === 'present') {
-          if (settings.source !== 'git') actions.push({ id: 'prepare', label: 'Prepare Git environment' });
-          actions.push({ id: 'update', label: 'Update Git Core' });
+          if (settings.source !== 'git') actions.push({ id: 'prepare', label: t('desktop.core_source.prepare_git') });
+          actions.push({ id: 'update', label: t('desktop.core_source.update_git') });
         }
       }
-      actions.push({ id: 'recover', label: 'Restore bundled Core' }, { id: 'logs', label: 'Open Desktop logs' });
-      const answer = await dialog.showMessageBox({ type: 'info', title: 'Core source (Advanced)',
-        message: `Core source: ${settings.source === 'git' ? 'Git' : 'Bundled with Desktop'}`,
-        detail: `Git in this backend environment: ${status?.git_available ? 'Available' : 'Unavailable'}\n`
-          + (status?.commit ? `Commit: ${status.commit}${status.dirty ? ' (local changes)' : ''}\n` : '')
-          + (status ? `Workspace: ${status.workspace}\n` : '') + issue
-          + '\nGit updates are manual. Install Git in the selected Windows, macOS or WSL environment to enable them.',
+      actions.push({ id: 'recover', label: t('desktop.core_source.restore_bundled') }, { id: 'logs', label: t('desktop.core_source.open_logs') });
+      const workspace = ['absent', 'present', 'unavailable', 'invalid'].includes(status?.workspace)
+        ? t(`desktop.core_source.workspace_${status.workspace}`) : status?.workspace;
+      const answer = await dialog.showMessageBox({ type: 'info', title: t('desktop.core_source.manager_title'),
+        message: t('desktop.core_source.source', { source: settings.source === 'git' ? 'Git' : t('desktop.core_source.bundled') }),
+        detail: t(status?.git_available ? 'desktop.core_source.git_available' : 'desktop.core_source.git_unavailable') + '\n'
+          + (status?.commit ? t(status.dirty ? 'desktop.core_source.commit_dirty' : 'desktop.core_source.commit', { commit: status.commit }) + '\n' : '')
+          + (status ? t('desktop.core_source.workspace', { workspace }) + '\n' : '') + issue
+          + '\n' + t('desktop.core_source.manual_updates'),
         buttons: actions.map(item => item.label), defaultId: 0, cancelId: 0, noLink: true });
       const action = actions[answer.response]?.id;
       if (action === 'logs') await openLogs();
@@ -110,9 +111,10 @@ function coreController({ store, prepareBundled, manage, dialog, openLogs, resta
     },
     async failure(error) {
       while (true) {
-        const answer = await dialog.showMessageBox({ type: 'error', title: 'StandTerm Core is unavailable',
-          message: error.message, detail: 'The Desktop shell can retry or restore its installed Core. Existing files are retained.',
-          buttons: ['Quit', 'Retry', 'Restore bundled Core', 'Core source (Advanced)', 'Open Desktop logs'],
+        const answer = await dialog.showMessageBox({ type: 'error', title: t('desktop.core_source.unavailable_title'),
+          message: error.message, detail: t('desktop.core_source.failure_choices'),
+          buttons: [t('desktop.core_source.quit'), t('desktop.core_source.retry'), t('desktop.core_source.restore_bundled'),
+            t('desktop.core_source.manager_title'), t('desktop.core_source.open_logs')],
           defaultId: 0, cancelId: 0, noLink: true });
         if (answer.response === 4) { await openLogs(); continue; }
         if (answer.response === 3) { if (await showManager()) return 'restart'; continue; }
diff --git a/desktop/macos-python.cjs b/desktop/macos-python.cjs
index e9df23b..d4f1e52 100644
--- a/desktop/macos-python.cjs
+++ b/desktop/macos-python.cjs
@@ -2,11 +2,6 @@
 
 const path = require('node:path');
 
-const MACOS_HELP = 'Install native macOS Python 3.10+ with venv and ensurepip support first.\n\n'
-  + 'Python must match this app’s CPU architecture. StandTerm checks Homebrew, MacPorts and PATH, '
-  + 'or lets you select an installed interpreter. Apple’s /usr/bin/python3 developer-tools stub is not launched. '
-  + 'StandTerm does not install Python, Homebrew, Rosetta or system packages.';
-
 function macPythonCandidates(saved, env = {}) {
   // Finder launch has a minimal PATH; known package-manager locations remain usable.
   return [...new Set([saved, '/opt/homebrew/bin/python3', '/opt/local/bin/python3', '/usr/local/bin/python3',
@@ -25,4 +20,4 @@ function validMacPython(info, arch) {
     && info.executable !== '/usr/bin/python3' && !/[\r\n\0]/.test(info.executable);
 }
 
-module.exports = { MACOS_HELP, macPythonCandidates, validMacPython };
+module.exports = { macPythonCandidates, validMacPython };
diff --git a/desktop/main.cjs b/desktop/main.cjs
index 47881ab..2e5e391 100644
--- a/desktop/main.cjs
+++ b/desktop/main.cjs
@@ -244,8 +244,8 @@ async function start() {
   diagnostics.write('setup_start');
   if (app.isPackaged && !smoke) {
     coreStore = await installedStore(app.getPath('userData'), process.resourcesPath, app.getVersion());
-    coreManager = coreController({ store: coreStore, prepareBundled: () => preparePackagedBackend(mode),
-      manage: action => manageCore(mode, action), dialog,
+    coreManager = coreController({ store: coreStore, prepareBundled: () => preparePackagedBackend(mode, { language }),
+      manage: action => manageCore(mode, action, { language }), dialog, t,
       openLogs: () => shell.openPath(path.dirname(diagnostics.file)),
       restart: action => { restartRequest = { action }; app.quit(); },
     });
@@ -392,7 +392,7 @@ async function start() {
       commands.item('settings'),
       { id: 'desktop-language', label: t('desktop.language.menu'), click: () => { void language.choose(dialog, win); } },
       ...(coreManager ? [{ label: t('desktop.menu.core_source'), click: () => {
-        void coreManager.showManager().catch(error => dialog.showErrorBox('Core management unavailable', error.message));
+        void coreManager.showManager().catch(error => dialog.showErrorBox(t('desktop.startup.management_unavailable'), error.message));
       } }] : []),
       { label: t('desktop.menu.capture_settings'), click: () => capture.configure() },
       browserAccess.menu,
@@ -544,12 +544,12 @@ async function handleCoreFailure(error) {
     } else {
       exitCode = 1;
       if (smoke) console.error(error.stack || error.message);
-      else dialog.showErrorBox('StandTerm Desktop could not start', `${error.message}\n\nDiagnostics: ${diagnostics.file}`);
+      else dialog.showErrorBox(t('desktop.startup.start_failed'), t('desktop.startup.diagnostics_detail', { error: error.message, path: diagnostics.file }));
       app.quit();
     }
   } catch (failure) {
     restartRequest = null;
-    dialog.showErrorBox('StandTerm Desktop could not recover', failure.message);
+    dialog.showErrorBox(t('desktop.startup.recovery_failed'), failure.message);
     app.quit();
   } finally { failurePending = false; }
 }
@@ -587,7 +587,7 @@ app.on('before-quit', event => {
     app.exit(exitCode);
   })().catch(error => {
     restartRequest = null;
-    if (!smoke) dialog.showErrorBox('StandTerm could not complete shutdown', error.message);
+    if (!smoke) dialog.showErrorBox(t('desktop.startup.shutdown_failed'), error.message);
     stopped = true;
     app.exit(1);
   });
diff --git a/desktop/messages.js b/desktop/messages.js
index fc8de4f..12a3113 100644
--- a/desktop/messages.js
+++ b/desktop/messages.js
@@ -76,6 +76,37 @@
         "desktop.capture.use_folder": "Use this folder",
         "desktop.common.cancel": "Cancel",
         "desktop.common.ok": "OK",
+        "desktop.core_source.bundled": "Bundled with Desktop",
+        "desktop.core_source.change_title": "Change StandTerm Core",
+        "desktop.core_source.close": "Close",
+        "desktop.core_source.commit": "Commit: {commit}",
+        "desktop.core_source.commit_dirty": "Commit: {commit} (local changes)",
+        "desktop.core_source.confirm_git": "Use the advanced Git Core environment?",
+        "desktop.core_source.confirm_recover": "Restore the Core bundled with this Desktop installation?",
+        "desktop.core_source.enable_git": "Enable Git Core",
+        "desktop.core_source.failure_choices": "Choose Retry to restart StandTerm and try again, or restore bundled Core. Existing files are kept.",
+        "desktop.core_source.git_available": "Git in this backend environment: Available",
+        "desktop.core_source.git_policy": "Git Core uses askac/standterm on the main branch. Its files are not verified against the installed bundle hashes. Updates refuse to overwrite local changes. The Desktop shell stays installed.",
+        "desktop.core_source.git_unavailable": "Git in this backend environment: Unavailable",
+        "desktop.core_source.manager_title": "Core source (Advanced)",
+        "desktop.core_source.manual_updates": "Git Core updates are manual. Install Git in the selected Windows, macOS or WSL environment to enable them.",
+        "desktop.core_source.open_logs": "Open Desktop logs",
+        "desktop.core_source.prepare_git": "Prepare Git environment",
+        "desktop.core_source.quit": "Quit",
+        "desktop.core_source.reauthorization": "Each Core source has separate authorization and recovery data. Switching may require reauthorization.",
+        "desktop.core_source.recovery_retention": "The previous environment\u2019s Core files and data are kept. Restoring bundled Core does not roll back user data.",
+        "desktop.core_source.restart_continue": "Restart and continue",
+        "desktop.core_source.restart_notice": "StandTerm will restart and close terminal sessions. Python dependencies may be downloaded and installed.",
+        "desktop.core_source.restore_bundled": "Restore bundled Core",
+        "desktop.core_source.retry": "Retry",
+        "desktop.core_source.source": "Core source: {source}",
+        "desktop.core_source.unavailable_title": "StandTerm Core is unavailable",
+        "desktop.core_source.update_git": "Update Git Core",
+        "desktop.core_source.workspace": "Workspace: {workspace}",
+        "desktop.core_source.workspace_absent": "Not created",
+        "desktop.core_source.workspace_invalid": "Invalid or inaccessible",
+        "desktop.core_source.workspace_present": "Present",
+        "desktop.core_source.workspace_unavailable": "Cannot inspect without Git",
         "desktop.diagnostics.backend_mode": "Backend mode",
         "desktop.diagnostics.backend_process": "Backend process",
         "desktop.diagnostics.backend_url": "Backend URL",
@@ -154,6 +185,74 @@
         "desktop.menu.quit": "Quit StandTerm",
         "desktop.menu.settings": "Settings...",
         "desktop.menu.show": "Show window",
+        "desktop.setup.cancel_detail": "Keep this window open or minimize it to continue. Canceling stops this setup\u2019s installation processes and keeps prepared files. Relaunch StandTerm to try again.",
+        "desktop.setup.cancel_message": "The Python environment is still being prepared.",
+        "desktop.setup.cancel_setup": "Cancel setup",
+        "desktop.setup.cancel_title": "Cancel StandTerm setup?",
+        "desktop.setup.canceling_status": "Canceling setup. Waiting for installation processes to stop...",
+        "desktop.setup.canceling_title": "StandTerm Desktop - Canceling setup",
+        "desktop.setup.cleanup_detail": "{paths}\n\nThis move does not free disk space. Core and settings stay in place. Busy or unverified environments are kept. Cancel keeps every listed venv.",
+        "desktop.setup.cleanup_inventory_unavailable": "Environment inventory was unavailable. No venv cleanup was started.",
+        "desktop.setup.cleanup_keep": "Keep environments",
+        "desktop.setup.cleanup_message": "Move these idle venvs to recovery in {platform}?",
+        "desktop.setup.cleanup_move": "Move listed venvs to recovery",
+        "desktop.setup.cleanup_title": "Confirm environment cleanup",
+        "desktop.setup.cleanup_unconfirmed": "Cleanup completion was not confirmed. Check venv-recovery before retrying.",
+        "desktop.setup.create_environment": "Create environment and install dependencies",
+        "desktop.setup.error_dependencies_failed": "Dependency installation or verification failed. Check internet access and the runtime setup.log, then retry.",
+        "desktop.setup.error_git_dirty": "The Git Core has local changes. Keep them or resolve them in its checkout before updating. Nothing was reset or stashed.",
+        "desktop.setup.error_git_diverged": "The Git Core cannot fast-forward to the official branch. Local history is retained. Restore the bundled Core or resolve the checkout manually.",
+        "desktop.setup.error_git_failed": "Git could not complete the operation. Check network access and the runtime setup.log. Prepared files are retained.",
+        "desktop.setup.error_git_needs_setup": "The Git Core requirements changed or its environment is missing. Use Prepare Git environment from Core source (Advanced).",
+        "desktop.setup.error_git_required": "Git is unavailable in the selected backend environment. Install Git there, or restore the bundled Core.",
+        "desktop.setup.error_git_source_changed": "The managed Git origin or branch has changed. The official repository and main branch are required.",
+        "desktop.setup.error_invalid_archive": "The recovery archive failed verification. Reinstall StandTerm Desktop if its installed bundle is also damaged.",
+        "desktop.setup.error_invalid_bundle": "The bundled Core failed its integrity check. Reinstall StandTerm Desktop.",
+        "desktop.setup.error_invalid_git_workspace": "The private Git checkout is incomplete or damaged. It is retained. Restore the bundled Core or repair that checkout manually.",
+        "desktop.setup.error_modified_runtime": "The managed Core contains modified files. Setup will not overwrite them.",
+        "desktop.setup.error_setup_busy": "This runtime is in use by StandTerm or another setup. Quit that desktop mode before retrying.",
+        "desktop.setup.error_setup_canceled": "Setup was canceled. Relaunch StandTerm to retry.",
+        "desktop.setup.error_setup_failed": "Setup failed. Check the selected Python environment and available disk space.",
+        "desktop.setup.error_setup_timeout": "Setup timed out. Check internet access and the setup log before retrying.",
+        "desktop.setup.error_unsafe_runtime_path": "The runtime directory is not safe to use. Setup will not overwrite unrelated files or follow directory links.",
+        "desktop.setup.help_macos": "Install native macOS Python 3.10+ with venv and ensurepip support first.\n\nPython must match this app\u2019s CPU architecture. StandTerm checks Homebrew, MacPorts and PATH, or lets you select an installed interpreter. Apple\u2019s /usr/bin/python3 developer-tools stub is not launched. StandTerm does not install Python, Homebrew, Rosetta or system packages.",
+        "desktop.setup.help_windows": "Install 64-bit Python 3.10+ with venv support on Windows first.\n\nStandTerm checks PATH for python.exe or lets you select it. Microsoft Store aliases and py.exe are not launched automatically. No system Python installation or administrator access is requested.",
+        "desktop.setup.help_wsl": "Install WSL and Python 3.10+ with venv support in the selected distribution first.\n\nFor Ubuntu/Debian, run this yourself in WSL:\nsudo apt install python3 python3-venv\n\nStandTerm never runs sudo or installs system Python automatically.",
+        "desktop.setup.keep_preparing": "Keep preparing",
+        "desktop.setup.preparation_macos": "Preparing Core for native macOS.",
+        "desktop.setup.preparation_windows": "Preparing Core for native Windows.",
+        "desktop.setup.preparation_wsl": "Preparing Core inside WSL: {distro}.",
+        "desktop.setup.prepare_detail": "{requirements}\n\nThis copies the bundled Core to {path} and creates a private venv. Python dependencies are downloaded from your configured package index and installed there. Installation can run code and requires internet access and disk space.\n\nNo system Python installation, sudo, Git checkout changes or existing-session interruption. Failed setup files are kept for retry. Uninstall keeps environments by default. Optional cleanup moves verified idle venvs to recovery and keeps Core files and user data.",
+        "desktop.setup.prepare_message": "Create a private StandTerm environment in {platform}?",
+        "desktop.setup.prepare_title": "Prepare StandTerm Core",
+        "desktop.setup.progress_aria": "Environment preparation in progress",
+        "desktop.setup.progress_close_hint": "You can minimize this window while setup continues. Closing it asks for confirmation before canceling.",
+        "desktop.setup.progress_detail": "Creating a private venv and installing dependencies may take several minutes. The progress indicator does not show a completion percentage.",
+        "desktop.setup.progress_heading": "Preparing your Python environment",
+        "desktop.setup.progress_scope": "StandTerm uses your installed Python; it does not install system Python or run sudo. If canceled, prepared files are kept for retry.",
+        "desktop.setup.progress_starting": "Starting setup...",
+        "desktop.setup.progress_title": "StandTerm Desktop - Preparing environment",
+        "desktop.setup.python_executable": "Python executable",
+        "desktop.setup.python_required_title": "StandTerm Desktop: Python required",
+        "desktop.setup.requirements_macos": "Requires Python 3.10+ with venv support on native macOS.",
+        "desktop.setup.requirements_windows": "Requires 64-bit Python 3.10+ with venv support on Windows.",
+        "desktop.setup.requirements_wsl": "Requires Python 3.10+ with venv support inside WSL.",
+        "desktop.setup.select_python_macos": "Select installed Python...",
+        "desktop.setup.select_python_macos_title": "Select a native macOS Python 3.10+ interpreter",
+        "desktop.setup.select_python_windows": "Select installed python.exe...",
+        "desktop.setup.select_python_windows_title": "Select an installed 64-bit Python interpreter",
+        "desktop.setup.select_wsl_message": "Select an existing WSL distribution for StandTerm Core.",
+        "desktop.setup.select_wsl_title": "StandTerm Desktop: select WSL",
+        "desktop.setup.stage_copy": "Copying verified Core files...",
+        "desktop.setup.stage_dependencies": "Installing Python dependencies. This can take several minutes...",
+        "desktop.setup.stage_git": "Updating the private Git checkout...",
+        "desktop.setup.stage_venv": "Creating the private Python environment...",
+        "desktop.setup.stage_verify": "Verifying the installed dependencies...",
+        "desktop.startup.diagnostics_detail": "{error}\n\nDiagnostics: {path}",
+        "desktop.startup.management_unavailable": "Core management unavailable",
+        "desktop.startup.recovery_failed": "StandTerm Desktop could not recover",
+        "desktop.startup.shutdown_failed": "StandTerm could not complete shutdown",
+        "desktop.startup.start_failed": "StandTerm Desktop could not start",
         "desktop.toolbar.action_unavailable": "Action unavailable in the current window state.",
         "desktop.toolbar.action_unconfirmed": "Could not confirm the action result. Check the current state.",
         "desktop.toolbar.application_menu": "Application menu",
@@ -248,6 +347,37 @@
         "desktop.capture.use_folder": "\u4f7f\u7528\u6b64\u8cc7\u6599\u593e",
         "desktop.common.cancel": "\u53d6\u6d88",
         "desktop.common.ok": "\u78ba\u5b9a",
+        "desktop.core_source.bundled": "Desktop \u96a8\u9644",
+        "desktop.core_source.change_title": "\u8b8a\u66f4 StandTerm Core",
+        "desktop.core_source.close": "\u95dc\u9589",
+        "desktop.core_source.commit": "Commit\uff1a{commit}",
+        "desktop.core_source.commit_dirty": "Commit\uff1a{commit}\uff08\u6709\u672c\u6a5f\u8b8a\u66f4\uff09",
+        "desktop.core_source.confirm_git": "\u8981\u4f7f\u7528\u9032\u968e Git Core \u74b0\u5883\u55ce\uff1f",
+        "desktop.core_source.confirm_recover": "\u8981\u9084\u539f\u6b64 Desktop \u5b89\u88dd\u7248\u672c\u96a8\u9644\u7684 Core \u55ce\uff1f",
+        "desktop.core_source.enable_git": "\u555f\u7528 Git Core",
+        "desktop.core_source.failure_choices": "\u9078\u64c7\u300c\u91cd\u8a66\u300d\u4ee5\u91cd\u65b0\u555f\u52d5 StandTerm \u518d\u8a66\u4e00\u6b21\uff0c\u6216\u9084\u539f\u96a8\u9644 Core\u3002\u73fe\u6709\u6a94\u6848\u6703\u4fdd\u7559\u3002",
+        "desktop.core_source.git_available": "\u6b64\u5f8c\u7aef\u74b0\u5883\u7684 Git\uff1a\u53ef\u7528",
+        "desktop.core_source.git_policy": "Git Core \u4f7f\u7528 askac/standterm \u7684 main \u5206\u652f\u3002\u5176\u6a94\u6848\u4e0d\u6703\u4f9d\u5df2\u5b89\u88dd\u5957\u4ef6\u7684\u96dc\u6e4a\u503c\u9a57\u8b49\u3002\u66f4\u65b0\u6642\u4e0d\u6703\u8986\u5beb\u672c\u6a5f\u8b8a\u66f4\u3002Desktop \u61c9\u7528\u7a0b\u5f0f\u6703\u4fdd\u7559\u3002",
+        "desktop.core_source.git_unavailable": "\u6b64\u5f8c\u7aef\u74b0\u5883\u7684 Git\uff1a\u7121\u6cd5\u4f7f\u7528",
+        "desktop.core_source.manager_title": "Core \u4f86\u6e90\uff08\u9032\u968e\uff09",
+        "desktop.core_source.manual_updates": "Git Core \u9700\u624b\u52d5\u66f4\u65b0\u3002\u8acb\u5728\u6240\u9078\u7684 Windows\u3001macOS \u6216 WSL \u74b0\u5883\u4e2d\u5b89\u88dd Git\uff0c\u624d\u80fd\u9032\u884c\u66f4\u65b0\u3002",
+        "desktop.core_source.open_logs": "\u958b\u555f Desktop \u7d00\u9304\u8cc7\u6599\u593e",
+        "desktop.core_source.prepare_git": "\u6e96\u5099 Git \u74b0\u5883",
+        "desktop.core_source.quit": "\u7d50\u675f",
+        "desktop.core_source.reauthorization": "\u5404 Core \u4f86\u6e90\u7684\u6388\u6b0a\u8207\u5fa9\u539f\u8cc7\u6599\u4e92\u76f8\u7368\u7acb\u3002\u5207\u63db\u5f8c\u53ef\u80fd\u9700\u8981\u91cd\u65b0\u6388\u6b0a\u3002",
+        "desktop.core_source.recovery_retention": "\u539f\u74b0\u5883\u7684 Core \u6a94\u6848\u8207\u8cc7\u6599\u6703\u4fdd\u7559\u3002\u9084\u539f\u96a8\u9644 Core \u4e0d\u6703\u56de\u5fa9\u4f7f\u7528\u8005\u8cc7\u6599\u3002",
+        "desktop.core_source.restart_continue": "\u91cd\u65b0\u555f\u52d5\u4e26\u7e7c\u7e8c",
+        "desktop.core_source.restart_notice": "StandTerm \u5c07\u91cd\u65b0\u555f\u52d5\u4e26\u95dc\u9589\u7d42\u7aef\u5de5\u4f5c\u968e\u6bb5\u3002\u53ef\u80fd\u6703\u4e0b\u8f09\u4e26\u5b89\u88dd Python \u76f8\u4f9d\u5957\u4ef6\u3002",
+        "desktop.core_source.restore_bundled": "\u9084\u539f\u96a8\u9644 Core",
+        "desktop.core_source.retry": "\u91cd\u8a66",
+        "desktop.core_source.source": "Core \u4f86\u6e90\uff1a{source}",
+        "desktop.core_source.unavailable_title": "StandTerm Core \u7121\u6cd5\u4f7f\u7528",
+        "desktop.core_source.update_git": "\u66f4\u65b0 Git Core",
+        "desktop.core_source.workspace": "\u5de5\u4f5c\u76ee\u9304\uff1a{workspace}",
+        "desktop.core_source.workspace_absent": "\u5c1a\u672a\u5efa\u7acb",
+        "desktop.core_source.workspace_invalid": "\u7121\u6548\u6216\u7121\u6cd5\u5b58\u53d6",
+        "desktop.core_source.workspace_present": "\u5df2\u5efa\u7acb",
+        "desktop.core_source.workspace_unavailable": "\u7f3a\u5c11 Git\uff0c\u7121\u6cd5\u6aa2\u67e5",
         "desktop.diagnostics.backend_mode": "\u5f8c\u7aef\u6a21\u5f0f",
         "desktop.diagnostics.backend_process": "\u5f8c\u7aef\u7a0b\u5e8f",
         "desktop.diagnostics.backend_url": "\u5f8c\u7aef\u7db2\u5740",
@@ -326,6 +456,74 @@
         "desktop.menu.quit": "\u7d50\u675f StandTerm",
         "desktop.menu.settings": "\u8a2d\u5b9a\u2026",
         "desktop.menu.show": "\u986f\u793a\u8996\u7a97",
+        "desktop.setup.cancel_detail": "\u4fdd\u6301\u6b64\u8996\u7a97\u958b\u555f\u6216\u6700\u5c0f\u5316\u5373\u53ef\u7e7c\u7e8c\u3002\u53d6\u6d88\u6703\u505c\u6b62\u6b64\u6b21\u5b89\u88dd\u7684\u8655\u7406\u7a0b\u5e8f\uff0c\u4e26\u4fdd\u7559\u5df2\u6e96\u5099\u7684\u6a94\u6848\u3002\u8acb\u91cd\u65b0\u555f\u52d5 StandTerm \u4ee5\u91cd\u8a66\u3002",
+        "desktop.setup.cancel_message": "Python \u74b0\u5883\u4ecd\u5728\u6e96\u5099\u4e2d\u3002",
+        "desktop.setup.cancel_setup": "\u53d6\u6d88\u6e96\u5099",
+        "desktop.setup.cancel_title": "\u53d6\u6d88 StandTerm \u6e96\u5099\uff1f",
+        "desktop.setup.canceling_status": "\u6b63\u5728\u53d6\u6d88\u6e96\u5099\uff0c\u7b49\u5f85\u5b89\u88dd\u7a0b\u5e8f\u505c\u6b62\u2026",
+        "desktop.setup.canceling_title": "StandTerm Desktop\uff0d\u6b63\u5728\u53d6\u6d88\u6e96\u5099",
+        "desktop.setup.cleanup_detail": "{paths}\n\n\u79fb\u52d5\u4e0d\u6703\u91cb\u653e\u78c1\u789f\u7a7a\u9593\u3002Core \u8207\u8a2d\u5b9a\u6703\u7559\u5728\u539f\u8655\u3002\u4f7f\u7528\u4e2d\u6216\u672a\u901a\u904e\u9a57\u8b49\u7684\u74b0\u5883\u6703\u4fdd\u7559\u3002\u53d6\u6d88\u6703\u4fdd\u7559\u6e05\u55ae\u4e2d\u7684\u6240\u6709 venv\u3002",
+        "desktop.setup.cleanup_inventory_unavailable": "\u7121\u6cd5\u53d6\u5f97\u74b0\u5883\u6e05\u55ae\uff0c\u5c1a\u672a\u958b\u59cb\u6e05\u7406 venv\u3002",
+        "desktop.setup.cleanup_keep": "\u4fdd\u7559\u74b0\u5883",
+        "desktop.setup.cleanup_message": "\u8981\u5c07 {platform} \u4e2d\u9019\u4e9b\u672a\u4f7f\u7528\u4e2d\u7684 venv \u79fb\u81f3\u5fa9\u539f\u8cc7\u6599\u593e\u55ce\uff1f",
+        "desktop.setup.cleanup_move": "\u5c07\u6e05\u55ae\u4e2d\u7684 venv \u79fb\u81f3\u5fa9\u539f\u8cc7\u6599\u593e",
+        "desktop.setup.cleanup_title": "\u78ba\u8a8d\u6e05\u7406\u74b0\u5883",
+        "desktop.setup.cleanup_unconfirmed": "\u7121\u6cd5\u78ba\u8a8d\u6e05\u7406\u662f\u5426\u5b8c\u6210\u3002\u91cd\u8a66\u524d\uff0c\u8acb\u5148\u6aa2\u67e5 venv-recovery\u3002",
+        "desktop.setup.create_environment": "\u5efa\u7acb\u74b0\u5883\u4e26\u5b89\u88dd\u76f8\u4f9d\u5957\u4ef6",
+        "desktop.setup.error_dependencies_failed": "\u76f8\u4f9d\u5957\u4ef6\u5b89\u88dd\u6216\u9a57\u8b49\u5931\u6557\u3002\u8acb\u6aa2\u67e5\u7db2\u8def\u9023\u7dda\u53ca\u57f7\u884c\u74b0\u5883\u4e2d\u7684 setup.log\uff0c\u518d\u91cd\u8a66\u3002",
+        "desktop.setup.error_git_dirty": "Git Core \u6709\u672c\u6a5f\u8b8a\u66f4\u3002\u66f4\u65b0\u524d\uff0c\u8acb\u6c7a\u5b9a\u4fdd\u7559\u6216\u5728\u5176\u5de5\u4f5c\u76ee\u9304\u4e2d\u8655\u7406\u9019\u4e9b\u8b8a\u66f4\u3002\u7cfb\u7d71\u672a\u57f7\u884c reset \u6216 stash\u3002",
+        "desktop.setup.error_git_diverged": "Git Core \u7121\u6cd5\u4ee5\u5feb\u8f49\u65b9\u5f0f\u66f4\u65b0\u81f3\u5b98\u65b9\u5206\u652f\u3002\u672c\u6a5f\u6b77\u53f2\u7d00\u9304\u5df2\u4fdd\u7559\u3002\u8acb\u9084\u539f\u96a8\u9644 Core\uff0c\u6216\u624b\u52d5\u8655\u7406\u5176\u5de5\u4f5c\u76ee\u9304\u3002",
+        "desktop.setup.error_git_failed": "Git \u7121\u6cd5\u5b8c\u6210\u64cd\u4f5c\u3002\u8acb\u6aa2\u67e5\u7db2\u8def\u9023\u7dda\u53ca\u57f7\u884c\u74b0\u5883\u4e2d\u7684 setup.log\u3002\u5df2\u6e96\u5099\u7684\u6a94\u6848\u6703\u4fdd\u7559\u3002",
+        "desktop.setup.error_git_needs_setup": "Git Core \u7684\u76f8\u4f9d\u9700\u6c42\u5df2\u8b8a\u66f4\uff0c\u6216\u7f3a\u5c11\u57f7\u884c\u74b0\u5883\u3002\u8acb\u5728\u300cCore \u4f86\u6e90\uff08\u9032\u968e\uff09\u300d\u9078\u64c7\u300c\u6e96\u5099 Git \u74b0\u5883\u300d\u3002",
+        "desktop.setup.error_git_required": "\u9078\u53d6\u7684\u5f8c\u7aef\u74b0\u5883\u7121\u6cd5\u4f7f\u7528 Git\u3002\u8acb\u5728\u8a72\u74b0\u5883\u5b89\u88dd Git\uff0c\u6216\u9084\u539f\u96a8\u9644 Core\u3002",
+        "desktop.setup.error_git_source_changed": "\u53d7\u7ba1\u7406\u7684 Git origin \u6216\u5206\u652f\u5df2\u8b8a\u66f4\u3002\u5fc5\u9808\u4f7f\u7528\u5b98\u65b9\u5132\u5b58\u5eab\u53ca main \u5206\u652f\u3002",
+        "desktop.setup.error_invalid_archive": "\u5fa9\u539f\u5c01\u5b58\u6a94\u672a\u901a\u904e\u9a57\u8b49\u3002\u82e5\u5df2\u5b89\u88dd\u7684\u96a8\u9644\u6a94\u6848\u4e5f\u5df2\u640d\u58de\uff0c\u8acb\u91cd\u65b0\u5b89\u88dd StandTerm Desktop\u3002",
+        "desktop.setup.error_invalid_bundle": "\u96a8\u9644 Core \u672a\u901a\u904e\u5b8c\u6574\u6027\u6aa2\u67e5\u3002\u8acb\u91cd\u65b0\u5b89\u88dd StandTerm Desktop\u3002",
+        "desktop.setup.error_invalid_git_workspace": "\u5c08\u7528 Git \u5de5\u4f5c\u76ee\u9304\u4e0d\u5b8c\u6574\u6216\u5df2\u640d\u58de\uff0c\u7cfb\u7d71\u5df2\u4fdd\u7559\u8a72\u76ee\u9304\u3002\u8acb\u9084\u539f\u96a8\u9644 Core\uff0c\u6216\u624b\u52d5\u4fee\u5fa9\u8a72\u76ee\u9304\u3002",
+        "desktop.setup.error_modified_runtime": "\u53d7\u7ba1\u7406\u7684 Core \u542b\u6709\u5df2\u4fee\u6539\u7684\u6a94\u6848\u3002\u5b89\u88dd\u7a0b\u5e8f\u4e0d\u6703\u8986\u5beb\u9019\u4e9b\u6a94\u6848\u3002",
+        "desktop.setup.error_setup_busy": "StandTerm \u6216\u5176\u4ed6\u5b89\u88dd\u7a0b\u5e8f\u6b63\u5728\u4f7f\u7528\u6b64\u57f7\u884c\u74b0\u5883\u3002\u8acb\u5148\u7d50\u675f\u4f7f\u7528\u8a72\u74b0\u5883\u7684 Desktop \u6a21\u5f0f\uff0c\u518d\u91cd\u8a66\u3002",
+        "desktop.setup.error_setup_canceled": "\u5df2\u53d6\u6d88\u6e96\u5099\u3002\u8acb\u91cd\u65b0\u555f\u52d5 StandTerm \u4ee5\u91cd\u8a66\u3002",
+        "desktop.setup.error_setup_failed": "\u5b89\u88dd\u5931\u6557\u3002\u8acb\u6aa2\u67e5\u9078\u53d6\u7684 Python \u74b0\u5883\u53ca\u53ef\u7528\u78c1\u789f\u7a7a\u9593\u3002",
+        "desktop.setup.error_setup_timeout": "\u5b89\u88dd\u903e\u6642\u3002\u8acb\u5148\u6aa2\u67e5\u7db2\u8def\u9023\u7dda\u53ca\u5b89\u88dd\u8a18\u9304\uff0c\u518d\u91cd\u8a66\u3002",
+        "desktop.setup.error_unsafe_runtime_path": "\u7121\u6cd5\u5b89\u5168\u4f7f\u7528\u6b64\u57f7\u884c\u74b0\u5883\u76ee\u9304\u3002\u5b89\u88dd\u7a0b\u5e8f\u4e0d\u6703\u8986\u5beb\u7121\u95dc\u6a94\u6848\uff0c\u4e5f\u4e0d\u6703\u6cbf\u7528\u76ee\u9304\u9023\u7d50\u3002",
+        "desktop.setup.help_macos": "\u8acb\u5148\u5b89\u88dd\u652f\u63f4 venv \u8207 ensurepip \u7684 macOS \u539f\u751f Python 3.10 \u4ee5\u4e0a\u7248\u672c\u3002\n\nPython \u5fc5\u9808\u7b26\u5408\u6b64\u61c9\u7528\u7a0b\u5f0f\u7684 CPU \u67b6\u69cb\u3002StandTerm \u6703\u5f9e Homebrew\u3001MacPorts \u8207 PATH \u5c0b\u627e\uff0c\u6216\u8b93\u4f60\u9078\u53d6\u5df2\u5b89\u88dd\u7684\u76f4\u8b6f\u5668\u3002\u7cfb\u7d71\u4e0d\u6703\u555f\u52d5 Apple \u7684 /usr/bin/python3 \u958b\u767c\u5de5\u5177\u555f\u52d5\u7a0b\u5f0f\uff0c\u4e5f\u4e0d\u6703\u5b89\u88dd Python\u3001Homebrew\u3001Rosetta \u6216\u7cfb\u7d71\u5957\u4ef6\u3002",
+        "desktop.setup.help_windows": "\u8acb\u5148\u5728 Windows \u5b89\u88dd\u652f\u63f4 venv \u7684 64 \u4f4d\u5143 Python 3.10 \u4ee5\u4e0a\u7248\u672c\u3002\n\nStandTerm \u6703\u5f9e PATH \u5c0b\u627e python.exe\uff0c\u6216\u8b93\u4f60\u81ea\u884c\u9078\u53d6\u3002\u7cfb\u7d71\u4e0d\u6703\u81ea\u52d5\u555f\u52d5 Microsoft Store \u5225\u540d\u6216 py.exe\uff0c\u4e5f\u4e0d\u6703\u5b89\u88dd\u7cfb\u7d71 Python \u6216\u8981\u6c42\u7cfb\u7d71\u7ba1\u7406\u54e1\u6b0a\u9650\u3002",
+        "desktop.setup.help_wsl": "\u8acb\u5148\u5b89\u88dd WSL\uff0c\u4e26\u5728\u9078\u53d6\u7684\u767c\u884c\u7248\u4e2d\u5b89\u88dd\u652f\u63f4 venv \u7684 Python 3.10 \u4ee5\u4e0a\u7248\u672c\u3002\n\n\u82e5\u4f7f\u7528 Ubuntu\uff0fDebian\uff0c\u8acb\u81ea\u884c\u5728 WSL \u57f7\u884c\uff1a\nsudo apt install python3 python3-venv\n\nStandTerm \u4e0d\u6703\u81ea\u52d5\u57f7\u884c sudo \u6216\u5b89\u88dd\u7cfb\u7d71 Python\u3002",
+        "desktop.setup.keep_preparing": "\u7e7c\u7e8c\u6e96\u5099",
+        "desktop.setup.preparation_macos": "\u6b63\u5728\u70ba macOS \u539f\u751f\u74b0\u5883\u6e96\u5099 Core\u3002",
+        "desktop.setup.preparation_windows": "\u6b63\u5728\u70ba Windows \u539f\u751f\u74b0\u5883\u6e96\u5099 Core\u3002",
+        "desktop.setup.preparation_wsl": "\u6b63\u5728 WSL \u767c\u884c\u7248 {distro} \u5167\u6e96\u5099 Core\u3002",
+        "desktop.setup.prepare_detail": "{requirements}\n\n\u7cfb\u7d71\u6703\u5c07\u96a8\u9644 Core \u8907\u88fd\u5230 {path}\uff0c\u4e26\u5efa\u7acb\u5c08\u7528 venv\u3002Python \u76f8\u4f9d\u5957\u4ef6\u6703\u5f9e\u4f60\u8a2d\u5b9a\u7684\u5957\u4ef6\u7d22\u5f15\u4e0b\u8f09\uff0c\u4e26\u5b89\u88dd\u5230\u8a72\u74b0\u5883\u3002\u5b89\u88dd\u53ef\u80fd\u57f7\u884c\u7a0b\u5f0f\u78bc\uff0c\u4e14\u9700\u8981\u7db2\u8def\u9023\u7dda\u8207\u78c1\u789f\u7a7a\u9593\u3002\n\n\u7cfb\u7d71\u4e0d\u6703\u5b89\u88dd\u7cfb\u7d71 Python\u3001\u57f7\u884c sudo\u3001\u8b8a\u66f4 Git \u5de5\u4f5c\u76ee\u9304\uff0c\u6216\u4e2d\u65b7\u73fe\u6709\u5de5\u4f5c\u968e\u6bb5\u3002\u5b89\u88dd\u5931\u6557\u6642\u6703\u4fdd\u7559\u6a94\u6848\u4f9b\u91cd\u8a66\u3002\u89e3\u9664\u5b89\u88dd\u9810\u8a2d\u6703\u4fdd\u7559\u74b0\u5883\u3002\u9078\u7528\u7684\u6e05\u7406\u529f\u80fd\u53ea\u6703\u5c07\u901a\u904e\u9a57\u8b49\u4e14\u672a\u4f7f\u7528\u4e2d\u7684 venv \u79fb\u81f3\u5fa9\u539f\u8cc7\u6599\u593e\uff0c\u4e26\u4fdd\u7559 Core \u6a94\u6848\u8207\u4f7f\u7528\u8005\u8cc7\u6599\u3002",
+        "desktop.setup.prepare_message": "\u8981\u5728 {platform} \u5efa\u7acb StandTerm \u5c08\u7528\u74b0\u5883\u55ce\uff1f",
+        "desktop.setup.prepare_title": "\u6e96\u5099 StandTerm Core",
+        "desktop.setup.progress_aria": "\u6b63\u5728\u6e96\u5099\u74b0\u5883",
+        "desktop.setup.progress_close_hint": "\u6e96\u5099\u671f\u9593\u53ef\u5c07\u6b64\u8996\u7a97\u6700\u5c0f\u5316\u3002\u95dc\u9589\u8996\u7a97\u6642\uff0c\u7cfb\u7d71\u6703\u5148\u78ba\u8a8d\u662f\u5426\u53d6\u6d88\u3002",
+        "desktop.setup.progress_detail": "\u5efa\u7acb\u5c08\u7528 venv \u53ca\u5b89\u88dd\u76f8\u4f9d\u5957\u4ef6\u53ef\u80fd\u9700\u8981\u6578\u5206\u9418\u3002\u9032\u5ea6\u6307\u793a\u5668\u4e0d\u4ee3\u8868\u5b8c\u6210\u767e\u5206\u6bd4\u3002",
+        "desktop.setup.progress_heading": "\u6b63\u5728\u6e96\u5099 Python \u74b0\u5883",
+        "desktop.setup.progress_scope": "StandTerm \u4f7f\u7528\u5df2\u5b89\u88dd\u7684 Python\uff0c\u4e0d\u6703\u5b89\u88dd\u7cfb\u7d71 Python \u6216\u57f7\u884c sudo\u3002\u82e5\u53d6\u6d88\uff0c\u5df2\u6e96\u5099\u7684\u6a94\u6848\u6703\u4fdd\u7559\u4f9b\u91cd\u8a66\u3002",
+        "desktop.setup.progress_starting": "\u6b63\u5728\u958b\u59cb\u6e96\u5099\u2026",
+        "desktop.setup.progress_title": "StandTerm Desktop\uff0d\u6b63\u5728\u6e96\u5099\u74b0\u5883",
+        "desktop.setup.python_executable": "Python \u57f7\u884c\u6a94",
+        "desktop.setup.python_required_title": "StandTerm Desktop\uff1a\u9700\u8981 Python",
+        "desktop.setup.requirements_macos": "\u9700\u8981 macOS \u539f\u751f Python 3.10 \u4ee5\u4e0a\u7248\u672c\uff0c\u4e26\u652f\u63f4 venv\u3002",
+        "desktop.setup.requirements_windows": "\u9700\u8981 Windows 64 \u4f4d\u5143 Python 3.10 \u4ee5\u4e0a\u7248\u672c\uff0c\u4e26\u652f\u63f4 venv\u3002",
+        "desktop.setup.requirements_wsl": "\u9700\u8981 WSL \u5167\u7684 Python 3.10 \u4ee5\u4e0a\u7248\u672c\uff0c\u4e26\u652f\u63f4 venv\u3002",
+        "desktop.setup.select_python_macos": "\u9078\u53d6\u5df2\u5b89\u88dd\u7684 Python\u2026",
+        "desktop.setup.select_python_macos_title": "\u9078\u53d6 macOS \u539f\u751f Python 3.10 \u4ee5\u4e0a\u7248\u672c\u7684\u76f4\u8b6f\u5668",
+        "desktop.setup.select_python_windows": "\u9078\u53d6\u5df2\u5b89\u88dd\u7684 python.exe\u2026",
+        "desktop.setup.select_python_windows_title": "\u9078\u53d6\u5df2\u5b89\u88dd\u7684 64 \u4f4d\u5143 Python \u76f4\u8b6f\u5668",
+        "desktop.setup.select_wsl_message": "\u70ba StandTerm Core \u9078\u53d6\u73fe\u6709\u7684 WSL \u767c\u884c\u7248\u3002",
+        "desktop.setup.select_wsl_title": "StandTerm Desktop\uff1a\u9078\u53d6 WSL",
+        "desktop.setup.stage_copy": "\u6b63\u5728\u8907\u88fd\u5df2\u9a57\u8b49\u7684 Core \u6a94\u6848\u2026",
+        "desktop.setup.stage_dependencies": "\u6b63\u5728\u5b89\u88dd Python \u76f8\u4f9d\u5957\u4ef6\uff0c\u53ef\u80fd\u9700\u8981\u6578\u5206\u9418\u2026",
+        "desktop.setup.stage_git": "\u6b63\u5728\u66f4\u65b0\u5c08\u7528 Git \u5de5\u4f5c\u76ee\u9304\u2026",
+        "desktop.setup.stage_venv": "\u6b63\u5728\u5efa\u7acb\u5c08\u7528 Python \u74b0\u5883\u2026",
+        "desktop.setup.stage_verify": "\u6b63\u5728\u9a57\u8b49\u5df2\u5b89\u88dd\u7684\u76f8\u4f9d\u5957\u4ef6\u2026",
+        "desktop.startup.diagnostics_detail": "{error}\n\n\u8a3a\u65b7\u7d00\u9304\uff1a{path}",
+        "desktop.startup.management_unavailable": "\u7121\u6cd5\u4f7f\u7528 Core \u7ba1\u7406\u529f\u80fd",
+        "desktop.startup.recovery_failed": "StandTerm Desktop \u7121\u6cd5\u5fa9\u539f",
+        "desktop.startup.shutdown_failed": "StandTerm \u7121\u6cd5\u5b8c\u6210\u7d50\u675f\u7a0b\u5e8f",
+        "desktop.startup.start_failed": "StandTerm Desktop \u7121\u6cd5\u555f\u52d5",
         "desktop.toolbar.action_unavailable": "\u76ee\u524d\u7684\u8996\u7a97\u72c0\u614b\u7121\u6cd5\u57f7\u884c\u6b64\u64cd\u4f5c\u3002",
         "desktop.toolbar.action_unconfirmed": "\u7121\u6cd5\u78ba\u8a8d\u64cd\u4f5c\u7d50\u679c\u3002\u8acb\u6aa2\u67e5\u76ee\u524d\u72c0\u614b\u3002",
         "desktop.toolbar.application_menu": "\u61c9\u7528\u7a0b\u5f0f\u9078\u55ae",
diff --git a/desktop/setup.cjs b/desktop/setup.cjs
index 9cff3df..8c564c7 100644
--- a/desktop/setup.cjs
+++ b/desktop/setup.cjs
@@ -5,45 +5,25 @@ const { spawn } = require('node:child_process');
 const fs = require('node:fs/promises');
 const path = require('node:path');
 const { pathToFileURL } = require('node:url');
-const { macPythonCandidates, validMacPython, MACOS_HELP } = require('./macos-python.cjs');
+const { macPythonCandidates, validMacPython } = require('./macos-python.cjs');
+const { create } = require('./i18n.js');
+const { createLanguage } = require('./language.cjs');
 
 const SETUP_URL = pathToFileURL(path.join(__dirname, 'setup.html')).href;
-const HELP = 'Install WSL and Python 3.10+ with venv support in the selected distribution first.\n\n'
-  + 'For Ubuntu/Debian, run this yourself in WSL:\nsudo apt install python3 python3-venv\n\n'
-  + 'StandTerm never runs sudo or installs system Python automatically.';
-const WINDOWS_HELP = 'Install 64-bit Python 3.10+ with venv support on Windows first.\n\n'
-  + 'StandTerm can locate python.exe on PATH or let you select it. Microsoft Store aliases and py.exe '
-  + 'are not launched automatically. No system Python installation or administrator access is requested.';
 const PYTHON_PROBE = 'import sys, struct, importlib.util, json; print(json.dumps({"type":"python_info",'
   + '"executable":sys.executable,"platform":sys.platform,"version":list(sys.version_info[:2]),'
   + '"machine":__import__("platform").machine(),"bits":struct.calcsize("P")*8,"venv":bool(importlib.util.find_spec("venv") and importlib.util.find_spec("ensurepip"))}))';
-const ERRORS = {
-  python_required: HELP,
-  venv_failed: `Python could not create the private venv.\n\n${HELP}`,
-  dependencies_failed: 'Dependency installation or verification failed. Check internet access and the runtime setup.log, then retry.',
-  setup_busy: 'This runtime is in use by StandTerm or another setup. Quit that desktop mode before retrying.',
-  modified_runtime: 'The managed Core contains modified files. Setup will not overwrite them.',
-  unsafe_runtime_path: 'The runtime directory is not safe to use. Setup will not overwrite unrelated files or follow directory links.',
-  invalid_bundle: 'The bundled Core failed its integrity check. Reinstall StandTerm Desktop.',
-  setup_canceled: 'Setup was canceled. Restart StandTerm to retry.',
-  setup_timeout: 'Setup timed out. Check internet access and retry.',
-  git_required: 'Git is unavailable in the selected backend environment. Install Git there, or restore the bundled Core.',
-  git_dirty: 'The Git Core has local changes. Keep them or resolve them in its checkout before updating. Nothing was reset or stashed.',
-  git_diverged: 'The Git Core cannot fast-forward to the official branch. Local history is retained. Restore bundled Core or resolve the checkout manually.',
-  git_source_changed: 'The managed Git origin or branch has changed. Expected the official repository and main branch.',
-  invalid_git_workspace: 'The private Git checkout is incomplete or damaged. It is retained. Restore the bundled Core or repair that checkout manually.',
-  git_needs_setup: 'The Git Core requirements changed or its environment is missing. Use Prepare Git environment from Core source (Advanced).',
-  git_failed: 'Git could not complete the operation. Check network access and the runtime setup.log. Prepared files are retained.',
-  invalid_archive: 'The recovery archive failed verification. Reinstall StandTerm Desktop if its installed bundle is also damaged.',
-  setup_failed: 'Setup failed. Check the selected Python environment and available disk space.',
-};
+const ERROR_CODES = ['dependencies_failed', 'setup_busy', 'modified_runtime', 'unsafe_runtime_path',
+  'invalid_bundle', 'setup_canceled', 'setup_timeout', 'git_required', 'git_dirty', 'git_diverged',
+  'git_source_changed', 'invalid_git_workspace', 'git_needs_setup', 'git_failed', 'invalid_archive', 'setup_failed'];
 let window;
+let setupLanguage = create('en');
 let current;
 let canceled = false;
 let closeRequest;
 let setupFinished;
 let executionFinished;
-const canceledError = () => Object.assign(new Error(ERRORS.setup_canceled), { code: 'SETUP_CANCELED' });
+const canceledError = (t = setupLanguage.t) => Object.assign(new Error(t('desktop.setup.error_setup_canceled')), { code: 'SETUP_CANCELED' });
 
 function focusSetup() { if (window && !window.isDestroyed()) { window.show(); window.focus(); } }
 function cancelSetup() { canceled = true; current?.cancelSetup?.(); }
@@ -58,20 +38,20 @@ async function requestSetupCancel() {
   if (!window || window.isDestroyed() || canceled) return true;
   if (closeRequest) return closeRequest;
   const target = window;
+  const { t } = setupLanguage;
   closeRequest = dialog.showMessageBox(target, {
-    type: 'question', title: 'Cancel StandTerm setup?',
-    message: 'The Python environment is still being prepared.',
-    detail: 'Keep this window open or minimize it to continue. Canceling stops the owned installation processes; '
-      + 'prepared files are retained so you can retry on the next launch.',
-    buttons: ['Keep preparing', 'Cancel setup'], defaultId: 0, cancelId: 0, noLink: true,
+    type: 'question', title: t('desktop.setup.cancel_title'),
+    message: t('desktop.setup.cancel_message'),
+    detail: t('desktop.setup.cancel_detail'),
+    buttons: [t('desktop.setup.keep_preparing'), t('desktop.setup.cancel_setup')], defaultId: 0, cancelId: 0, noLink: true,
   }).then(answer => {
     // Setup may finish while the confirmation is open. Do not cancel a
     // completed setup or apply its stale answer to a subsequent window.
     if (window !== target || target.isDestroyed() || answer.response !== 1) return false;
     cancelSetup();
-    target.setTitle('StandTerm Desktop - Canceling setup');
+    target.setTitle(t('desktop.setup.canceling_title'));
     void target.webContents.executeJavaScript(
-      "document.getElementById('stage').textContent = 'Canceling setup. Waiting for installation processes to stop...';",
+      `document.getElementById('stage').textContent = ${JSON.stringify(t('desktop.setup.canceling_status'))}`,
     ).catch(() => {});
     return true;
   }).catch(() => false).finally(() => { closeRequest = null; });
@@ -87,9 +67,9 @@ async function confirmSetupQuit() {
   return true;
 }
 
-function execute(executable, args, { encoding = 'utf8', timeout = 20000, progress = null, stream = false, help = HELP } = {}) {
+function execute(executable, args, { encoding = 'utf8', timeout = 20000, progress = null, stream = false, t = create('en').t, help = t('desktop.setup.help_wsl') } = {}) {
   const running = new Promise((resolve, reject) => {
-    if (canceled) { reject(canceledError()); return; }
+    if (canceled) { reject(canceledError(t)); return; }
     const child = spawn(executable, args, { windowsHide: true, shell: false, stdio: ['pipe', 'pipe', 'pipe'],
       env: { ...process.env, PYTHON_MANAGER_AUTOMATIC_INSTALL: 'false' } });
     current = child;
@@ -108,8 +88,8 @@ function execute(executable, args, { encoding = 'utf8', timeout = 20000, progres
       // the outer launcher. A new setup cannot race a still-closing process.
       forceTimer = setTimeout(() => { child.kill(); reject(abortError); }, 25000);
     }
-    child.cancelSetup = () => abort(canceledError());
-    const timer = setTimeout(() => abort(new Error(ERRORS.setup_timeout)), timeout);
+    child.cancelSetup = () => abort(canceledError(t));
+    const timer = setTimeout(() => abort(new Error(t('desktop.setup.error_setup_timeout'))), timeout);
     child.on('error', () => { clearTimeout(timer); clearTimeout(forceTimer); reject(new Error(help)); });
     child.stdout.on('data', bytes => {
       output = Buffer.concat([output, bytes]);
@@ -130,13 +110,13 @@ function execute(executable, args, { encoding = 'utf8', timeout = 20000, progres
       clearTimeout(timer);
       clearTimeout(forceTimer);
       if (current === child) current = null;
-      if (canceled) reject(canceledError());
+      if (canceled) reject(canceledError(t));
       else if (abortError) reject(abortError);
       else if (protocolError || (stream && output.length)) reject(new Error('Invalid setup control response.'));
       else if (stream) {
         const result = frames.at(-1);
         if (code !== 0 || !result || result.type === 'error') reject(Object.assign(new Error(
-          ['python_required', 'venv_failed'].includes(result?.code) ? help : ERRORS[result?.code] || help), { code: result?.code }));
+          ERROR_CODES.includes(result?.code) ? t(`desktop.setup.error_${result.code}`) : help), { code: result?.code }));
         else resolve(result);
       } else if (code !== 0) reject(new Error(help));
       else resolve(output.toString(encoding).replace(/^\uFEFF/, '').trim());
@@ -146,63 +126,66 @@ function execute(executable, args, { encoding = 'utf8', timeout = 20000, progres
   return running;
 }
 
-async function windowsPython(saved) {
+async function windowsPython(saved, t) {
+  const help = t('desktop.setup.help_windows');
   const candidates = [];
   if (typeof saved === 'string') candidates.push(saved);
   try {
-    candidates.push(...(await execute('where.exe', ['python.exe'], { help: WINDOWS_HELP })).split(/\r?\n/));
+    candidates.push(...(await execute('where.exe', ['python.exe'], { help, t })).split(/\r?\n/));
   } catch { /* Manual selection remains available when PATH has no Python. */ }
   async function probe(candidate) {
     if (!path.win32.isAbsolute(candidate) || /\\Microsoft\\WindowsApps\\/i.test(candidate)
-        || !/^python(?:3(?:\.\d+)?)?\.exe$/i.test(path.win32.basename(candidate))) throw new Error(WINDOWS_HELP);
-    const result = await execute(candidate, ['-I', '-c', PYTHON_PROBE], { stream: true, help: WINDOWS_HELP });
+        || !/^python(?:3(?:\.\d+)?)?\.exe$/i.test(path.win32.basename(candidate))) throw new Error(help);
+    const result = await execute(candidate, ['-I', '-c', PYTHON_PROBE], { stream: true, help, t });
     if (result.type !== 'python_info' || result.platform !== 'win32' || result.bits !== 64 || !result.venv
         || !Array.isArray(result.version) || result.version[0] !== 3 || result.version[1] < 10
-        || !path.win32.isAbsolute(result.executable)) throw new Error(WINDOWS_HELP);
+        || !path.win32.isAbsolute(result.executable)) throw new Error(help);
     return result.executable;
   }
   for (const candidate of [...new Set(candidates)].slice(0, 5)) {
-    try { return await probe(candidate.trim()); } catch { if (canceled) throw canceledError(); }
+    try { return await probe(candidate.trim()); } catch { if (canceled) throw canceledError(t); }
   }
-  const answer = await dialog.showMessageBox({ type: 'info', title: 'StandTerm Desktop: Python required',
-    message: WINDOWS_HELP, buttons: ['Cancel', 'Select installed python.exe...'], defaultId: 0, cancelId: 0 });
-  if (answer.response !== 1) throw canceledError();
-  const selected = await dialog.showOpenDialog({ title: 'Select an installed 64-bit Python interpreter',
-    properties: ['openFile'], filters: [{ name: 'Python executable', extensions: ['exe'] }] });
-  if (selected.canceled || selected.filePaths.length !== 1) throw canceledError();
+  const answer = await dialog.showMessageBox({ type: 'info', title: t('desktop.setup.python_required_title'),
+    message: help, buttons: [t('desktop.common.cancel'), t('desktop.setup.select_python_windows')], defaultId: 0, cancelId: 0 });
+  if (answer.response !== 1) throw canceledError(t);
+  const selected = await dialog.showOpenDialog({ title: t('desktop.setup.select_python_windows_title'),
+    properties: ['openFile'], filters: [{ name: t('desktop.setup.python_executable'), extensions: ['exe'] }] });
+  if (selected.canceled || selected.filePaths.length !== 1) throw canceledError(t);
   return probe(selected.filePaths[0]);
 }
 
-async function macosPython(saved) {
+async function macosPython(saved, t) {
+  const help = t('desktop.setup.help_macos');
   async function probe(candidate) {
     if (!path.posix.isAbsolute(candidate) || /[\r\n\0]/.test(candidate) || candidate === '/usr/bin/python3') {
-      throw new Error(MACOS_HELP);
+      throw new Error(help);
     }
-    const result = await execute(candidate, ['-I', '-c', PYTHON_PROBE], { stream: true, help: MACOS_HELP });
-    if (!validMacPython(result, process.arch)) throw new Error(MACOS_HELP);
+    const result = await execute(candidate, ['-I', '-c', PYTHON_PROBE], { stream: true, help, t });
+    if (!validMacPython(result, process.arch)) throw new Error(help);
     return result.executable;
   }
   for (const candidate of macPythonCandidates(saved, process.env)) {
-    try { return await probe(candidate); } catch { if (canceled) throw canceledError(); }
+    try { return await probe(candidate); } catch { if (canceled) throw canceledError(t); }
   }
-  const answer = await dialog.showMessageBox({ type: 'info', title: 'StandTerm Desktop: Python required',
-    message: MACOS_HELP, buttons: ['Cancel', 'Select installed Python...'], defaultId: 0, cancelId: 0 });
-  if (answer.response !== 1) throw canceledError();
-  const selected = await dialog.showOpenDialog({ title: 'Select a native macOS Python 3.10+ interpreter',
+  const answer = await dialog.showMessageBox({ type: 'info', title: t('desktop.setup.python_required_title'),
+    message: help, buttons: [t('desktop.common.cancel'), t('desktop.setup.select_python_macos')], defaultId: 0, cancelId: 0 });
+  if (answer.response !== 1) throw canceledError(t);
+  const selected = await dialog.showOpenDialog({ title: t('desktop.setup.select_python_macos_title'),
     properties: ['openFile'] });
-  if (selected.canceled || selected.filePaths.length !== 1) throw canceledError();
+  if (selected.canceled || selected.filePaths.length !== 1) throw canceledError(t);
   return probe(selected.filePaths[0]);
 }
 
-async function setupEnvironment(mode, installer = false) {
+async function setupEnvironment(mode, installer, language) {
+  const { t } = language;
   if (!['windows', 'wsl', 'macos'].includes(mode)) throw new Error('Choose a supported desktop backend.');
   const windows = mode === 'windows';
   const macos = mode === 'macos';
   const native = windows || macos;
-  const help = macos ? MACOS_HELP : windows ? WINDOWS_HELP : HELP;
+  const help = t(`desktop.setup.help_${mode}`);
   const bundle = path.join(process.resourcesPath, 'bundle');
   const metadata = JSON.parse(await fs.readFile(path.join(bundle, 'manifest.json'), 'utf8'));
-  if (!/^[a-f0-9]{64}$/.test(metadata.id)) throw new Error(ERRORS.invalid_bundle);
+  if (!/^[a-f0-9]{64}$/.test(metadata.id)) throw new Error(t('desktop.setup.error_invalid_bundle'));
   const settingsPath = path.join(installer ? modeProfile(mode) : app.getPath('userData'), 'launcher.json');
   let settings;
   try {
@@ -214,7 +197,7 @@ async function setupEnvironment(mode, installer = false) {
   let args;
   let saved;
   if (native) {
-    executable = await (macos ? macosPython(settings?.python) : windowsPython(settings?.python));
+    executable = await (macos ? macosPython(settings?.python, t) : windowsPython(settings?.python, t));
     args = ['-I', path.join(bundle, 'bootstrap.py'), '--bundle', bundle];
     saved = { version: 1, python: executable };
   } else {
@@ -226,48 +209,48 @@ async function setupEnvironment(mode, installer = false) {
         if (legacy.version === 1 && typeof legacy.distro === 'string') settings = legacy;
       } catch { /* A fresh selection is safe if the legacy file is absent/invalid. */ }
     }
-    const distributions = (await execute('wsl.exe', ['--list', '--quiet'], { encoding: 'utf16le' }))
+    const distributions = (await execute('wsl.exe', ['--list', '--quiet'], { encoding: 'utf16le', t, help }))
       .split(/\r?\n/).map(item => item.trim()).filter(Boolean);
-    if (!distributions.length) throw new Error(HELP);
+    if (!distributions.length) throw new Error(help);
     distro = settings?.distro;
     if (installer || !distributions.includes(distro)) {
       const choices = distributions.slice(0, 12);
       const result = await dialog.showMessageBox({
-        type: 'question', title: 'StandTerm Desktop: select WSL',
-        message: 'Select an existing WSL distribution for StandTerm Core.', detail: HELP,
-        buttons: [...choices, 'Cancel'], cancelId: choices.length, defaultId: choices.length,
+        type: 'question', title: t('desktop.setup.select_wsl_title'),
+        message: t('desktop.setup.select_wsl_message'), detail: help,
+        buttons: [...choices, t('desktop.common.cancel')], cancelId: choices.length, defaultId: choices.length,
         noLink: true,
       });
-      if (result.response >= choices.length) throw canceledError();
+      if (result.response >= choices.length) throw canceledError(t);
       distro = choices[result.response];
     }
     const prefix = ['--distribution', distro, '--exec'];
-    const linuxBundle = await execute('wsl.exe', [...prefix, 'wslpath', '-u', bundle]);
-    if (!linuxBundle.startsWith('/') || /[\r\n\0]/.test(linuxBundle)) throw new Error(ERRORS.invalid_bundle);
+    const linuxBundle = await execute('wsl.exe', [...prefix, 'wslpath', '-u', bundle], { t });
+    if (!linuxBundle.startsWith('/') || /[\r\n\0]/.test(linuxBundle)) throw new Error(t('desktop.setup.error_invalid_bundle'));
     executable = 'wsl.exe';
     args = [...prefix, 'python3', '-I', `${linuxBundle}/bootstrap.py`, '--bundle', linuxBundle];
     saved = { version: 1, distro };
   }
-  return { windows, macos, native, help, bundle, metadata, settingsPath, executable, args, saved, distro };
+  return { language, t, windows, macos, native, help, bundle, metadata, settingsPath, executable, args, saved, distro };
 }
 
-async function preparePackagedBackend(mode, { installer = false } = {}) {
-  const environment = await setupEnvironment(mode, installer);
-  const { windows, macos, native, help, metadata, settingsPath, executable, args, saved, distro } = environment;
-  let result = await execute(executable, args, { stream: true, timeout: 60000, help });
+async function preparePackagedBackend(mode, { installer = false,
+  language = createLanguage(path.join(installer ? modeProfile(mode) : app.getPath('userData'), 'language.json')) } = {}) {
+  const environment = await setupEnvironment(mode, installer, language);
+  const { t, windows, macos, native, help, metadata, settingsPath, executable, args, saved, distro } = environment;
+  let result = await execute(executable, args, { stream: true, timeout: 60000, help, t });
   if (result.type === 'needs_setup') {
     const answer = await dialog.showMessageBox({
-      type: 'question', title: 'Prepare StandTerm Core',
-      message: `Create a private StandTerm environment in ${macos ? 'macOS' : windows ? 'Windows' : distro}?`,
-      detail: `Requires Python 3.10+ and venv support ${macos ? 'on native macOS' : windows ? 'on Windows (64-bit)' : 'inside WSL'}.\n\n`
-        + `This copies the bundled Core into ${macos ? '~/Library/Application Support/StandTermDesktop/runtimes/' : windows ? '%LOCALAPPDATA%\\StandTermDesktop\\runtimes\\' : '~/.local/share/standterm-desktop/runtimes/'}, creates its own venv, `
-        + 'and downloads and installs Python dependencies from your configured package index. '
-        + 'Dependencies can execute installation code. Internet access and disk space are required.\n\n'
-        + 'No system Python installation, sudo, Git checkout changes or existing-session interruption. '
-        + 'Failed setup is retained for retry. Uninstall keeps environments by default; optional cleanup moves only verified idle venvs to a recovery folder. Core and user data are retained.',
-      buttons: ['Cancel', 'Create environment and install dependencies'], defaultId: 0, cancelId: 0,
+      type: 'question', title: t('desktop.setup.prepare_title'),
+      message: t('desktop.setup.prepare_message', { platform: macos ? 'macOS' : windows ? 'Windows' : distro }),
+      detail: t('desktop.setup.prepare_detail', {
+        requirements: t(`desktop.setup.requirements_${mode}`),
+        path: macos ? '~/Library/Application Support/StandTermDesktop/runtimes/'
+          : windows ? '%LOCALAPPDATA%\\StandTermDesktop\\runtimes\\' : '~/.local/share/standterm-desktop/runtimes/',
+      }),
+      buttons: [t('desktop.common.cancel'), t('desktop.setup.create_environment')], defaultId: 0, cancelId: 0,
     });
-    if (answer.response !== 1) throw canceledError();
+    if (answer.response !== 1) throw canceledError(t);
     result = await runPreparation(environment, [...args, '--prepare']);
   }
   const runtimePath = windows ? path.win32 : path.posix;
@@ -285,7 +268,8 @@ async function preparePackagedBackend(mode, { installer = false } = {}) {
     '-u', `${result.root}/desktop/backend.py`], cwd: process.resourcesPath };
 }
 
-async function cleanupManagedVenvs(mode) {
+async function cleanupManagedVenvs(mode, { language = createLanguage(path.join(modeProfile(mode), 'language.json')) } = {}) {
+  const { t } = language;
   if (!['windows', 'wsl'].includes(mode)) throw new Error('Environment cleanup is available through the Windows installer only.');
   // Only the configured interpreter/distribution is considered. Never discover
   // other projects or provision a WSL distribution during uninstallation.
@@ -310,26 +294,25 @@ async function cleanupManagedVenvs(mode) {
       return { mode, status: 'retained', reason: 'No configured WSL distribution.' };
     }
     const prefix = ['--distribution', settings.distro, '--exec'];
-    const linuxBundle = await execute('wsl.exe', [...prefix, 'wslpath', '-u', bundle]);
-    if (!linuxBundle.startsWith('/') || /[\r\n\0]/.test(linuxBundle)) throw new Error(ERRORS.invalid_bundle);
+    const linuxBundle = await execute('wsl.exe', [...prefix, 'wslpath', '-u', bundle], { t });
+    if (!linuxBundle.startsWith('/') || /[\r\n\0]/.test(linuxBundle)) throw new Error(t('desktop.setup.error_invalid_bundle'));
     executable = 'wsl.exe';
     args = [...prefix, 'python3', '-I', `${linuxBundle}/runtime_cleanup.py`];
   }
   const inventory = await execute(executable, [...args, '--inventory'], { stream: true, timeout: 60000,
-    help: 'Environment inventory was unavailable. No venv cleanup was started.' });
+    t, help: t('desktop.setup.cleanup_inventory_unavailable') });
   if (inventory.type !== 'cleanup_inventory' || !Array.isArray(inventory.results) || inventory.results.length > 32
       || inventory.results.some(item => !/^[a-f0-9]{64}$/.test(item.id) || typeof item.source !== 'string'
         || !['retained', 'candidate'].includes(item.status))) throw new Error('Invalid cleanup inventory.');
   const candidates = inventory.results.filter(item => item.status === 'candidate');
   if (!candidates.length) return { mode, status: 'checked', results: inventory.results };
-  const answer = await dialog.showMessageBox({ type: 'question', title: 'Confirm environment cleanup',
-    message: `Move these idle venvs to recovery in ${mode === 'windows' ? 'Windows' : `WSL: ${settings.distro}`}?`,
-    detail: candidates.map(item => item.source).join('\n') + '\n\nNo disk space is freed. Core and settings are retained. '
-      + 'Any environment that becomes busy or fails verification will be retained. Cancel keeps all listed venvs.',
-    buttons: ['Keep environments', 'Move listed venvs to recovery'], defaultId: 0, cancelId: 0, noLink: true });
+  const answer = await dialog.showMessageBox({ type: 'question', title: t('desktop.setup.cleanup_title'),
+    message: t('desktop.setup.cleanup_message', { platform: mode === 'windows' ? 'Windows' : `WSL: ${settings.distro}` }),
+    detail: t('desktop.setup.cleanup_detail', { paths: candidates.map(item => item.source).join('\n') }),
+    buttons: [t('desktop.setup.cleanup_keep'), t('desktop.setup.cleanup_move')], defaultId: 0, cancelId: 0, noLink: true });
   if (answer.response !== 1) return { mode, status: 'retained', reason: 'User kept environments.' };
   const result = await execute(executable, [...args, '--detach-idle-venvs', JSON.stringify(candidates.map(item => item.id))],
-    { stream: true, timeout: 60000, help: 'Cleanup did not report completion. Check venv-recovery before retrying.' });
+    { stream: true, timeout: 60000, t, help: t('desktop.setup.cleanup_unconfirmed') });
   if (result.type !== 'cleanup_summary' || !Array.isArray(result.results) || result.results.length > 32
       || result.results.some(item => !/^[a-f0-9]{64}$/.test(item.id) || !['retained', 'detached'].includes(item.status))) {
     throw new Error('Invalid cleanup response.');
@@ -340,11 +323,11 @@ async function cleanupManagedVenvs(mode) {
 module.exports = { preparePackagedBackend, focusSetup, cancelSetup, confirmSetupQuit,
   stopSetup, cleanupManagedVenvs, modeProfile, manageCore };
 
-async function manageCore(mode, action) {
+async function manageCore(mode, action, { language = createLanguage(path.join(app.getPath('userData'), 'language.json')) } = {}) {
   if (!['status', 'enable', 'update', 'prepare', 'check', 'recover'].includes(action)) throw new Error('Invalid Core action.');
   // Select the base interpreter without requiring either Core or venv to work.
-  const environment = await setupEnvironment(mode);
-  const { windows, macos, native, help, executable, args, metadata, settingsPath, saved, distro } = environment;
+  const environment = await setupEnvironment(mode, false, language);
+  const { t, windows, macos, native, help, executable, args, metadata, settingsPath, saved, distro } = environment;
   const runtimePath = windows ? path.win32 : path.posix;
   const scriptIndex = args.indexOf('-I') + 1;
   const bundle = args[args.indexOf('--bundle') + 1];
@@ -352,7 +335,7 @@ async function manageCore(mode, action) {
   managedArgs[scriptIndex] = runtimePath.join(bundle, 'core_manager.py');
   managedArgs.push('--action', action);
   const result = ['status', 'check'].includes(action)
-    ? await execute(executable, managedArgs, { stream: true, timeout: 60000, help })
+    ? await execute(executable, managedArgs, { stream: true, timeout: 60000, help, t })
     : await runPreparation(environment, managedArgs);
   if (action === 'status') {
     if (result.type !== 'core_status' || typeof result.git_available !== 'boolean'
@@ -383,12 +366,13 @@ async function manageCore(mode, action) {
 }
 
 async function runPreparation(environment, args) {
-  const { executable, help, macos, windows, distro } = environment;
+  const { language, t, executable, help, macos, windows, distro } = environment;
+  setupLanguage = language;
   const isolated = session.fromPartition('standterm-setup');
   isolated.setPermissionRequestHandler((_contents, _permission, callback) => callback(false));
   isolated.setPermissionCheckHandler(() => false);
   isolated.webRequest.onBeforeRequest((details, callback) => callback({ cancel: details.url !== SETUP_URL }));
-  window = new BrowserWindow({ title: 'StandTerm Desktop - Preparing environment',
+  window = new BrowserWindow({ title: t('desktop.setup.progress_title'),
     width: 700, height: 500, resizable: false, autoHideMenuBar: true,
     webPreferences: { session: isolated, sandbox: true, contextIsolation: true, nodeIntegration: false, devTools: false } });
   window.webContents.setWindowOpenHandler(() => ({ action: 'deny' }));
@@ -402,14 +386,28 @@ async function runPreparation(environment, args) {
   setupFinished = new Promise(resolve => { finishSetup = resolve; });
   try {
     await window.loadURL(SETUP_URL);
-    await window.webContents.executeJavaScript(`document.getElementById('requirements').textContent = ${JSON.stringify(
-      macos ? 'Preparing Core for native macOS.' : windows ? 'Preparing Core for native Windows.' : `Preparing Core inside WSL: ${distro}.`)}`);
-    return await execute(executable, args, { stream: true, timeout: 30 * 60 * 1000, help, progress: stage => {
-      const labels = { git: 'Updating the private Git checkout...', copy: 'Copying verified Core files...', venv: 'Creating the private Python environment...',
-        dependencies: 'Installing Python dependencies. This can take several minutes...', verify: 'Verifying the installed dependencies...' };
-      if (labels[stage] && !canceled && !window.isDestroyed()) void window.webContents.executeJavaScript(
-        `document.getElementById('stage').textContent = ${JSON.stringify(labels[stage])}`,
-      ).catch(() => {});
+    await window.webContents.executeJavaScript(`(() => {
+      const copy = ${JSON.stringify({
+        locale: language.locale, title: t('desktop.setup.progress_title'),
+        heading: t('desktop.setup.progress_heading'),
+        requirements: t(`desktop.setup.preparation_${macos ? 'macos' : windows ? 'windows' : 'wsl'}`, { distro }),
+        stage: t('desktop.setup.progress_starting'), detail: t('desktop.setup.progress_detail'),
+        closeHint: t('desktop.setup.progress_close_hint'), scope: t('desktop.setup.progress_scope'),
+        aria: t('desktop.setup.progress_aria'),
+      })};
+      document.documentElement.lang = copy.locale;
+      document.title = copy.title;
+      for (const id of ['heading', 'requirements', 'stage', 'detail', 'closeHint', 'scope']) {
+        document.getElementById(id).textContent = copy[id];
+      }
+      document.querySelector('progress').setAttribute('aria-label', copy.aria);
+    })()`);
+    return await execute(executable, args, { stream: true, timeout: 30 * 60 * 1000, help, t, progress: stage => {
+      if (['git', 'copy', 'venv', 'dependencies', 'verify'].includes(stage) && !canceled && !window.isDestroyed()) {
+        void window.webContents.executeJavaScript(
+          `document.getElementById('stage').textContent = ${JSON.stringify(t(`desktop.setup.stage_${stage}`))}`,
+        ).catch(() => {});
+      }
     } });
   } finally {
     if (!window.isDestroyed()) { window.removeListener('closed', cancelSetup); window.destroy(); }
diff --git a/desktop/setup.html b/desktop/setup.html
index 4a3a2d8..44d4024 100644
--- a/desktop/setup.html
+++ b/desktop/setup.html
@@ -3,10 +3,10 @@
 <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'">
 <title>StandTerm Desktop Setup</title>
 <style>body{background:#171b22;color:#e4e9f0;font:16px system-ui;padding:24px;line-height:1.6}h1{font-size:24px}#stage{color:#8ecbff}small{color:#b2bac7}progress{width:100%;height:12px;accent-color:#8ecbff}</style></head>
-<body><h1>Preparing your Python environment</h1>
+<body><h1 id="heading">Preparing your Python environment</h1>
 <p id="requirements">Preparing StandTerm Core...</p>
 <progress aria-label="Environment preparation in progress"></progress>
 <p id="stage" role="status" aria-live="polite">Starting setup...</p>
-<p>Creating a private venv and installing dependencies may take several minutes. The progress indicator does not represent a completion percentage.</p>
-<p>You can minimize this window while setup continues. Closing it asks for confirmation before canceling.</p>
-<small>StandTerm uses your installed Python; it does not install system Python, run sudo, or modify an existing Git checkout. If canceled, prepared files are retained for retry.</small></body></html>
+<p id="detail">Creating a private venv and installing dependencies may take several minutes. The progress indicator does not represent a completion percentage.</p>
+<p id="closeHint">You can minimize this window while setup continues. Closing it asks for confirmation before canceling.</p>
+<small id="scope">StandTerm uses your installed Python; it does not install system Python or run sudo. If canceled, prepared files are retained for retry.</small></body></html>
diff --git a/desktop/test/core-source-i18n.test.cjs b/desktop/test/core-source-i18n.test.cjs
new file mode 100644
index 0000000..1bc3407
--- /dev/null
+++ b/desktop/test/core-source-i18n.test.cjs
@@ -0,0 +1,115 @@
+'use strict';
+
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const { coreController } = require('../core-source.cjs');
+const { create } = require('../i18n.js');
+
+function fixture(locale, { source = 'bundled', status = { git_available: true, workspace: 'present', commit: 'a'.repeat(40), dirty: true }, responses = [], issue, pending = null, t = create(locale).t } = {}) {
+  const dialogs = [];
+  const restarts = [];
+  const managed = [];
+  let logs = 0;
+  const controller = coreController({ t,
+    store: { read: async () => ({ source }), consume: async () => ({ source, pending }), select: async () => assert.fail('Dialogs must not select a source') },
+    manage: async action => { managed.push(action); if (issue) throw new Error(issue); return status; },
+    restart: action => restarts.push(action), openLogs: async () => { logs++; },
+    dialog: { showMessageBox: async options => {
+      assert.equal(options.defaultId, 0);
+      assert.equal(options.cancelId, 0);
+      assert.equal(options.noLink, true);
+      dialogs.push(options);
+      assert.ok(responses.length, 'Unexpected additional dialog');
+      return { response: responses.shift() };
+    } },
+  });
+  return { controller, dialogs, restarts, managed, get logs() { return logs; } };
+}
+
+for (const locale of ['en', 'zh-TW']) {
+  const { t } = create(locale);
+  test(`${locale}: Core manager preserves every typed action across source and Git states`, async () => {
+    const cases = [
+      ['bundled', false, 'absent', ['cancel', 'recover', 'logs']],
+      ['bundled', true, 'absent', ['cancel', 'enable', 'recover', 'logs']],
+      ['bundled', true, 'present', ['cancel', 'enable', 'prepare', 'update', 'recover', 'logs']],
+      ['git', true, 'present', ['cancel', 'prepare', 'update', 'recover', 'logs']],
+    ];
+    for (const [source, git_available, workspace, actions] of cases) {
+      for (let index = 0; index < actions.length; index++) {
+        const action = actions[index];
+        const changesSource = !['cancel', 'logs'].includes(action);
+        const f = fixture(locale, { source, status: { git_available, workspace }, responses: changesSource ? [index, 1] : [index] });
+        await f.controller.showManager();
+        assert.equal(f.dialogs[0].buttons.length, actions.length);
+        assert.equal(f.dialogs[0].title, t('desktop.core_source.manager_title'));
+        assert.equal(f.dialogs[0].message, t('desktop.core_source.source', { source: source === 'git' ? 'Git' : t('desktop.core_source.bundled') }));
+        assert.deepEqual(f.managed, ['status']);
+        assert.deepEqual(f.restarts, changesSource ? [action] : []);
+        assert.equal(f.logs, action === 'logs' ? 1 : 0);
+        if (changesSource) {
+          const confirm = f.dialogs[1];
+          assert.deepEqual(confirm.buttons, [t('desktop.common.cancel'), t('desktop.core_source.restart_continue')]);
+          assert.equal(confirm.message, t(action === 'recover' ? 'desktop.core_source.confirm_recover' : 'desktop.core_source.confirm_git'));
+          assert.ok(confirm.detail.includes(t('desktop.core_source.restart_notice')));
+          assert.ok(confirm.detail.includes(t('desktop.core_source.reauthorization')));
+          assert.ok(confirm.detail.includes(t(action === 'recover' ? 'desktop.core_source.recovery_retention' : 'desktop.core_source.git_policy')));
+        }
+      }
+    }
+    const canceled = fixture(locale, { responses: [1, 0] });
+    assert.equal(await canceled.controller.showManager(), false);
+    assert.deepEqual(canceled.restarts, []);
+  });
+
+  test(`${locale}: status renders known enums while preserving raw data and unknown values`, async () => {
+    const commit = 'raw-{workspace}-<commit>';
+    for (const workspace of ['absent', 'present', 'unavailable', 'invalid', 'future-{commit}']) {
+      const f = fixture(locale, { status: { git_available: true, workspace, commit, dirty: true }, responses: [0] });
+      await f.controller.showManager();
+      const detail = f.dialogs[0].detail;
+      const label = workspace.startsWith('future-') ? workspace : t(`desktop.core_source.workspace_${workspace}`);
+      assert.ok(detail.includes(t('desktop.core_source.workspace', { workspace: label })));
+      assert.ok(detail.includes(t('desktop.core_source.commit_dirty', { commit })));
+      assert.ok(detail.includes(commit));
+    }
+    const issue = 'raw failure {source} <path>';
+    const f = fixture(locale, { issue, responses: [0] });
+    await f.controller.showManager();
+    assert.ok(f.dialogs[0].detail.includes(issue));
+    assert.ok(f.dialogs[0].detail.includes(t('desktop.core_source.git_unavailable')));
+  });
+
+  test(`${locale}: recovery and retry keep failure-dialog response semantics`, async () => {
+    const issue = 'Original failure {commit} <raw>';
+    const quit = fixture(locale, { responses: [0] });
+    assert.equal(await quit.controller.failure(new Error(issue)), 'quit');
+    assert.equal(quit.dialogs[0].message, issue);
+    assert.deepEqual(quit.dialogs[0].buttons, ['quit', 'retry', 'restore_bundled', 'manager_title', 'open_logs'].map(key => t(`desktop.core_source.${key}`)));
+    assert.equal(quit.dialogs[0].detail, t('desktop.core_source.failure_choices'));
+    assert.deepEqual(quit.restarts, []);
+    const retry = fixture(locale, { responses: [1], issue, pending: 'update' });
+    await assert.rejects(retry.controller.prepare(), /Original failure/);
+    assert.equal(await retry.controller.failure(new Error(issue)), 'restart');
+    assert.deepEqual(retry.restarts, ['update']);
+    const recovery = fixture(locale, { responses: [2, 1] });
+    assert.equal(await recovery.controller.failure(new Error(issue)), 'restart');
+    assert.deepEqual(recovery.restarts, ['recover']);
+    const cancelRecovery = fixture(locale, { responses: [2, 0, 0] });
+    assert.equal(await cancelRecovery.controller.failure(new Error(issue)), 'quit');
+    assert.deepEqual(cancelRecovery.restarts, []);
+    const logs = fixture(locale, { responses: [4, 0] });
+    assert.equal(await logs.controller.failure(new Error(issue)), 'quit');
+    assert.equal(logs.logs, 1);
+    assert.equal(logs.dialogs.length, 2);
+    const manager = fixture(locale, { responses: [3, 1, 1] });
+    assert.equal(await manager.controller.failure(new Error(issue)), 'restart');
+    assert.deepEqual(manager.restarts, ['enable']);
+  });
+}
+
+test('duplicate translated labels cannot select a different Core action', async () => {
+  const f = fixture('en', { t: () => 'same display label', responses: [3, 1] });
+  await f.controller.showManager();
+  assert.deepEqual(f.restarts, ['update']);
+});
diff --git a/desktop/test/setup-i18n-browser-smoke.py b/desktop/test/setup-i18n-browser-smoke.py
new file mode 100644
index 0000000..8428d0d
--- /dev/null
+++ b/desktop/test/setup-i18n-browser-smoke.py
@@ -0,0 +1,70 @@
+"""Render actual setup initialization, progress and cancellation scripts in Chromium."""
+
+import argparse
+import json
+import os
+from pathlib import Path
+import subprocess
+
+
+ROOT = Path(__file__).resolve().parents[2]
+os.environ.setdefault('PLAYWRIGHT_BROWSERS_PATH', str(ROOT / 'tools' / '.ms-playwright'))
+
+from playwright.sync_api import sync_playwright
+
+
+def run():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument('--node', default='node', help='Node 22.12+ or an Electron executable in Node mode')
+    args = parser.parse_args()
+    result = subprocess.run([args.node, str(ROOT / 'desktop/test/setup-i18n-fixture.cjs')], cwd=ROOT,
+                            env={**os.environ, 'ELECTRON_RUN_AS_NODE': '1'},
+                            capture_output=True, text=True, check=True, timeout=30)
+    snapshots = json.loads(result.stdout)
+    setup_url = (ROOT / 'desktop/setup.html').as_uri()
+    with sync_playwright() as playwright:
+        browser = playwright.chromium.launch(headless=True)
+        try:
+            for snapshot in snapshots:
+                page = browser.new_page(viewport={'width': 700, 'height': 500})
+                requests = []
+                errors = []
+                page.on('request', lambda request: requests.append(request.url))
+                page.on('pageerror', lambda error: errors.append(str(error)))
+                page.goto(setup_url)
+                page.evaluate(snapshot['init'])
+                assert page.locator('html').get_attribute('lang') == snapshot['locale']
+                assert page.title() == snapshot['title']
+                assert page.locator('h1').text_content() == snapshot['heading']
+                assert page.locator('progress').get_attribute('aria-label') == snapshot['aria']
+                assert page.locator('progress').get_attribute('value') is None
+                for element in ('requirements', 'scope', 'detail', 'closeHint'):
+                    assert page.locator('#' + element).text_content() == snapshot[element]
+                assert page.locator('#stage').text_content() == snapshot['starting']
+                assert page.locator('#stage').get_attribute('role') == 'status'
+                assert page.locator('#stage').get_attribute('aria-live') == 'polite'
+                if snapshot['mode'] == 'wsl':
+                    assert snapshot['raw'] in page.locator('#requirements').text_content()
+                assert 'sudo' in page.locator('#scope').text_content()
+                for frame in snapshot['progress']:
+                    page.evaluate(frame['script'])
+                    assert page.locator('#stage').text_content() == frame['expected']
+                page.evaluate(snapshot['cancel'])
+                assert page.locator('#stage').text_content() == snapshot['canceling']
+                assert page.locator('script, img, iframe, a').count() == 0
+                assert page.evaluate('typeof window.injected') == 'undefined'
+                assert page.evaluate('document.documentElement.scrollWidth <= innerWidth')
+                assert page.evaluate('document.documentElement.scrollHeight <= innerHeight')
+                csp = page.locator('meta[http-equiv="Content-Security-Policy"]').get_attribute('content')
+                assert "default-src 'none'" in csp
+                assert requests == [setup_url], requests
+                assert not errors, errors
+                page.close()
+                print(json.dumps({'locale': snapshot['locale'], 'mode': snapshot['mode'],
+                                  'setup_dom': 'passed', 'native_processes': 'mocked'}))
+        finally:
+            browser.close()
+
+
+if __name__ == '__main__':
+    run()
diff --git a/desktop/test/setup-i18n-fixture.cjs b/desktop/test/setup-i18n-fixture.cjs
new file mode 100644
index 0000000..f3e0cc0
--- /dev/null
+++ b/desktop/test/setup-i18n-fixture.cjs
@@ -0,0 +1,100 @@
+'use strict';
+
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const vm = require('node:vm');
+const { EventEmitter } = require('node:events');
+const { createRequire } = require('node:module');
+const { create } = require('../i18n.js');
+
+const filename = path.join(__dirname, '..', 'setup.cjs');
+const nativeRequire = createRequire(filename);
+const source = fs.readFileSync(filename, 'utf8');
+const raw = 'Distro </p><img src="https://example.invalid/private" onerror="window.injected=true"> <script>window.injected=true</script> {distro}';
+
+async function snapshot(locale, mode) {
+  const language = create(locale);
+  const { t } = language;
+  const scripts = [];
+  const titles = [];
+  let child;
+  let spawned;
+  const preparing = new Promise(resolve => { spawned = resolve; });
+  class Window extends EventEmitter {
+    constructor(options) {
+      super();
+      assert.equal(options.webPreferences.sandbox, true);
+      assert.equal(options.webPreferences.nodeIntegration, false);
+      this.webContents = new EventEmitter();
+      this.webContents.setWindowOpenHandler = callback => assert.equal(callback().action, 'deny');
+      this.webContents.executeJavaScript = async script => { scripts.push(script); };
+    }
+    async loadURL(url) { assert.ok(url.endsWith('/desktop/setup.html')); }
+    isDestroyed() { return !!this.destroyed; }
+    destroy() { this.destroyed = true; this.emit('closed'); }
+    setTitle(title) { titles.push(title); }
+  }
+  const electron = { app: {}, BrowserWindow: Window,
+    dialog: { showMessageBox: async (_window, options) => {
+      assert.equal(options.defaultId, 0);
+      assert.equal(options.cancelId, 0);
+      return { response: 1 };
+    } },
+    session: { fromPartition: () => ({ setPermissionRequestHandler() {}, setPermissionCheckHandler() {},
+      webRequest: { onBeforeRequest(callback) {
+        callback({ url: 'https://example.invalid/' }, result => assert.equal(result.cancel, true));
+      } } }) },
+  };
+  function spawn() {
+    child = new EventEmitter();
+    child.stdin = new EventEmitter();
+    child.stdin.end = () => {};
+    child.stdout = new EventEmitter();
+    child.stderr = { resume() {} };
+    child.kill = () => assert.fail('Cancellation must finish without forced termination');
+    spawned();
+    return child;
+  }
+  const context = vm.createContext({ module: { exports: {} }, __dirname: path.dirname(filename),
+    require: name => name === 'electron' ? electron : name === 'node:child_process' ? { spawn } : nativeRequire(name),
+    process: { env: {} }, Buffer, setTimeout, clearTimeout });
+  vm.runInContext(source + '\nmodule.exports.fixture = { runPreparation, requestSetupCancel };', context, { filename });
+  const fixture = context.module.exports.fixture;
+  const completion = fixture.runPreparation({ language, t, executable: 'fixture', help: 'fixture help',
+    windows: mode === 'windows', macos: mode === 'macos', distro: raw }, []);
+  await preparing;
+  assert.equal(scripts.length, 1);
+  const init = scripts[0];
+  const progress = [];
+  function frame(stage) { child.stdout.emit('data', Buffer.from(JSON.stringify({ type: 'progress', stage }) + '\n')); }
+  for (const stage of ['git', 'copy', 'venv', 'dependencies', 'verify']) {
+    frame(stage);
+    progress.push({ stage, script: scripts.at(-1), expected: t(`desktop.setup.stage_${stage}`) });
+  }
+  const beforeUnknown = scripts.length;
+  for (const stage of ['__proto__', 'constructor', '<script>window.injected=true</script>']) frame(stage);
+  assert.equal(scripts.length, beforeUnknown);
+  assert.equal(await fixture.requestSetupCancel(), true);
+  const cancel = scripts.at(-1);
+  assert.equal(scripts.length, beforeUnknown + 1);
+  frame('dependencies');
+  assert.equal(scripts.length, beforeUnknown + 1);
+  child.emit('close', 1);
+  await assert.rejects(completion, error => error.code === 'SETUP_CANCELED');
+  assert.deepEqual(titles, [t('desktop.setup.canceling_title')]);
+  return { locale, mode, raw, init, progress, cancel,
+    title: t('desktop.setup.progress_title'), heading: t('desktop.setup.progress_heading'),
+    requirements: t(`desktop.setup.preparation_${mode}`, { distro: raw }),
+    aria: t('desktop.setup.progress_aria'), scope: t('desktop.setup.progress_scope'),
+    detail: t('desktop.setup.progress_detail'), closeHint: t('desktop.setup.progress_close_hint'),
+    starting: t('desktop.setup.progress_starting'), canceling: t('desktop.setup.canceling_status') };
+}
+
+(async () => {
+  const snapshots = [];
+  for (const locale of ['en', 'zh-TW']) {
+    for (const mode of ['windows', 'macos', 'wsl']) snapshots.push(await snapshot(locale, mode));
+  }
+  process.stdout.write(JSON.stringify(snapshots));
+})().catch(error => { console.error(error); process.exitCode = 1; });
diff --git a/desktop/test/setup.test.cjs b/desktop/test/setup.test.cjs
index f923abf..3457550 100644
--- a/desktop/test/setup.test.cjs
+++ b/desktop/test/setup.test.cjs
@@ -7,16 +7,20 @@ const path = require('node:path');
 const os = require('node:os');
 const vm = require('node:vm');
 const { EventEmitter } = require('node:events');
+const { create } = require('../i18n.js');
 
 async function fixture({ consent = true, pythonMissing = false, ready = false, native = false,
-  macos = false, machine = 'arm64', wrongVenv = false,
+  macos = false, machine = 'arm64', wrongVenv = false, locale = 'en',
   coreError = null,
   holdPrepare = false, cleanupConfirm = false, closeDecision = async () => ({ response: 0 }) } = {}) {
   const root = await fs.mkdtemp(path.join(os.tmpdir(), 'standterm-setup-test-'));
   await fs.mkdir(path.join(root, 'bundle'));
   const id = 'a'.repeat(64);
   await fs.writeFile(path.join(root, 'bundle', 'manifest.json'), JSON.stringify({ id }));
+  const language = create(locale), { t } = language;
+  await fs.writeFile(path.join(root, 'language.json'), JSON.stringify({ version: 1, locale }));
   const calls = [];
+  const dialogs = [], scripts = [];
   let progressWindow;
   let preparedChild;
   let completePrepare;
@@ -29,7 +33,7 @@ async function fixture({ consent = true, pythonMissing = false, ready = false, n
       assert.equal(options.webPreferences.nodeIntegration, false);
       this.webContents = new EventEmitter();
       this.webContents.setWindowOpenHandler = () => {};
-      this.webContents.executeJavaScript = async () => {};
+      this.webContents.executeJavaScript = async script => { scripts.push(script); };
       progressWindow = this;
     }
     async loadURL() {}
@@ -41,13 +45,14 @@ async function fixture({ consent = true, pythonMissing = false, ready = false, n
     app: { getPath: () => root }, BrowserWindow: Window,
     dialog: { showMessageBox: async (...args) => {
       const options = args.at(-1);
-      if (options.title === 'Confirm environment cleanup') {
+      dialogs.push(options);
+      if (options.title === t('desktop.setup.cleanup_title')) {
         assert.equal(options.defaultId, 0);
         assert.equal(options.cancelId, 0);
         assert.match(options.detail, /C:\\Runtime\\tools\\.venv_win/);
         return { response: cleanupConfirm ? 1 : 0 };
       }
-      if (options.title === 'Cancel StandTerm setup?') {
+      if (options.title === t('desktop.setup.cancel_title')) {
         closeDialogs++;
         assert.equal(args[0], progressWindow);
         assert.equal(options.defaultId, 0);
@@ -55,9 +60,9 @@ async function fixture({ consent = true, pythonMissing = false, ready = false, n
         return closeDecision();
       }
       assert.equal(options.cancelId, options.defaultId);
-      if (options.title === 'StandTerm Desktop: select WSL') return { response: 0 };
-      if (options.title === 'StandTerm Desktop: Python required') return { response: 0 };
-      assert.match(options.detail, /Requires Python 3.10\+/);
+      if (options.title === t('desktop.setup.select_wsl_title')) return { response: 0 };
+      if (options.title === t('desktop.setup.python_required_title')) return { response: 0 };
+      assert.ok(options.detail.includes(t(`desktop.setup.requirements_${macos ? 'macos' : native ? 'windows' : 'wsl'}`)));
       return { response: consent ? 1 : 0 };
     } },
     session: { fromPartition: () => ({ setPermissionRequestHandler() {}, setPermissionCheckHandler() {},
@@ -112,12 +117,13 @@ async function fixture({ consent = true, pythonMissing = false, ready = false, n
   };
   const context = vm.createContext({ module: { exports: {} }, __dirname: path.join(__dirname, '..'),
     require: name => name === 'electron' ? electron : name === 'node:child_process' ? { spawn }
-      : name === './macos-python.cjs' ? require('../macos-python.cjs') : require(name),
+      : name.startsWith('./') ? require(path.join(__dirname, '..', name)) : require(name),
     process: { resourcesPath: root, arch: 'arm64', env: {} }, Buffer, setTimeout, clearTimeout });
   vm.runInContext(await fs.readFile(path.join(__dirname, '..', 'setup.cjs'), 'utf8'), context);
   return { run: options => context.module.exports.preparePackagedBackend(macos ? 'macos' : native ? 'windows' : 'wsl', options), root, calls,
     manage: action => context.module.exports.manageCore(macos ? 'macos' : native ? 'windows' : 'wsl', action),
-    cleanup: () => context.module.exports.cleanupManagedVenvs(native ? 'windows' : 'wsl'),
+    cleanup: options => context.module.exports.cleanupManagedVenvs(native ? 'windows' : 'wsl', options),
+    dialogs, scripts, language,
     preparing, window: () => progressWindow, child: () => preparedChild, complete: () => completePrepare(),
     closeDialogs: () => closeDialogs, quit: () => context.module.exports.confirmSetupQuit() };
 }
@@ -288,3 +294,87 @@ test('a cancellation answer arriving after successful setup is ignored', async (
   assert.equal(f.child().cancelRequested, undefined);
   assert.ok(await fs.stat(path.join(f.root, 'launcher.json')));
 });
+
+test('both setup languages preserve consent, backend selection and cancellation codes', async () => {
+  for (const locale of ['en', 'zh-TW']) for (const platform of [{}, { native: true }, { macos: true }]) {
+    for (const consent of [false, true]) {
+      const f = await fixture({ locale, consent, ...platform });
+      const { t } = f.language;
+      if (consent) await f.run({ language: f.language });
+      else await assert.rejects(f.run({ language: f.language }), { code: 'SETUP_CANCELED' });
+      const confirm = f.dialogs.find(item => item.title === t('desktop.setup.prepare_title'));
+      assert.deepEqual(Array.from(confirm.buttons), [t('desktop.common.cancel'), t('desktop.setup.create_environment')]);
+      assert.equal(confirm.defaultId, 0);
+      assert.equal(confirm.cancelId, 0);
+      assert.equal(f.calls.filter(args => args.includes('--prepare')).length, Number(consent));
+      assert.equal(f.calls.some(args => args.includes('--distribution')), !platform.native && !platform.macos);
+      if (consent) assert.ok(f.scripts[0].includes(t('desktop.setup.progress_heading')));
+    }
+  }
+});
+
+test('localized cancellation waits for owned processes and ignores stale confirmations', async () => {
+  for (const locale of ['en', 'zh-TW']) {
+    const f = await fixture({ locale, holdPrepare: true, closeDecision: async () => ({ response: 1 }) });
+    const running = assert.rejects(f.run(), { code: 'SETUP_CANCELED' });
+    await f.preparing;
+    let done = false;
+    const quitting = f.quit().then(result => { done = true; return result; });
+    await new Promise(setImmediate);
+    assert.equal(done, false);
+    assert.equal(f.child().cancelRequested, true);
+    assert.equal(f.window().title, f.language.t('desktop.setup.canceling_title'));
+    assert.ok(f.scripts.at(-1).includes(f.language.t('desktop.setup.canceling_status')));
+    f.child().emit('close', 1);
+    await running;
+    assert.equal(await quitting, true);
+
+    let answer;
+    const stale = await fixture({ locale, holdPrepare: true,
+      closeDecision: () => new Promise(resolve => { answer = resolve; }) });
+    const preparing = stale.run();
+    await stale.preparing;
+    const closing = stale.quit();
+    stale.complete(); await preparing;
+    answer({ response: 1 });
+    assert.equal(await closing, false);
+    assert.equal(stale.child().cancelRequested, undefined);
+  }
+});
+
+test('typed setup errors select translated messages without interpreting payload text', async () => {
+  for (const locale of ['en', 'zh-TW']) for (const code of ['git_dirty', 'invalid_bundle', 'setup_timeout', 'constructor', 'python_required']) {
+    const f = await fixture({ locale, native: true, coreError: code });
+    await assert.rejects(f.manage('update'), error => {
+      assert.equal(error.code, code);
+      assert.equal(error.message, f.language.t(['constructor', 'python_required'].includes(code)
+        ? 'desktop.setup.help_windows' : `desktop.setup.error_${code}`));
+      return true;
+    });
+  }
+});
+
+test('installer preparation and cleanup use the selected mode profile language', async () => {
+  for (const locale of ['en', 'zh-TW']) for (const cleanupConfirm of [false, true]) for (const native of [false, true]) {
+    const f = await fixture({ locale, native, cleanupConfirm });
+    const profile = path.join(f.root, 'StandTermDesktopEvaluation', native ? 'windows' : 'wsl');
+    await fs.mkdir(profile, { recursive: true });
+    await fs.writeFile(path.join(profile, 'language.json'), JSON.stringify({ version: 1, locale }));
+    await fs.writeFile(path.join(f.root, 'language.json'), JSON.stringify({ version: 1, locale: locale === 'en' ? 'zh-TW' : 'en' }));
+    await f.run({ installer: true });
+    const result = await f.cleanup();
+    const { t } = f.language;
+    const confirm = f.dialogs.find(item => item.title === t('desktop.setup.cleanup_title'));
+    assert.deepEqual(Array.from(confirm.buttons), [t('desktop.setup.cleanup_keep'), t('desktop.setup.cleanup_move')]);
+    assert.equal(result.status, cleanupConfirm ? 'checked' : 'retained');
+    assert.equal(f.calls.filter(args => args.includes('--detach-idle-venvs')).length, Number(cleanupConfirm));
+    assert.equal(f.calls.some(args => args.includes('--distribution')), !native);
+  }
+});
+
+test('launch language stays fixed when a different next-launch preference is saved', async () => {
+  const f = await fixture({ locale: 'en' });
+  await fs.writeFile(path.join(f.root, 'language.json'), JSON.stringify({ version: 1, locale: 'zh-TW' }));
+  await f.run({ language: f.language });
+  assert.ok(f.dialogs.some(item => item.title === 'Prepare StandTerm Core'));
+});
diff --git a/docs/desktop_ui_copy_review.tsv b/docs/desktop_ui_copy_review.tsv
index 4710519..19e755e 100644
--- a/docs/desktop_ui_copy_review.tsv
+++ b/docs/desktop_ui_copy_review.tsv
@@ -30,17 +30,17 @@ desktop.capture.capture_failed	The terminal view could not be captured. Bring St
 desktop.capture.partial_file	Unfinished file retained at:\n{path}	Partial screenshot kept at:\n{path}	未完成的截圖已保留於：\n{path}	Suffix added only if failed screenshot output has a partial path; it is not a successful PNG save notice.	{path}	Keep the raw path and preceding error. Do not delete or overwrite partial files, promise readability, or automatically retry. Preserve conditional display only when output.partial exists.	translation-reviewed	desktop/capture.cjs:screenshot catch:163-166
 desktop.capture.partial_recording	Unfinished recording retained at:\n{path}	Partial recording kept at:\n{path}	未完成的錄影已保留於：\n{path}	Recording failure suffix after recorder teardown and output close; partial WebM may be incomplete.	{path}	Keep raw error and path; do not promise playable or recoverable video, delete partial output, publish it as complete, or retry automatically.	translation-reviewed	desktop/capture.cjs:finish:311-324
 desktop.capture.stop_confirm	Stop and save the recording before {action}?			Replaced by desktop.capture.confirm_close and desktop.capture.confirm_quit. The caller supplies typed close/quit actions; complete translated sentences no longer interpolate an English action fragment.	{action}	Remove this message from runtime catalogs. Keep the original source and {action} placeholder here for review history only. The authorized implementation cancels the current close/quit if stop/save is not confirmed; preserve the window, show the error and any partial path, and do not retry automatically.	remove	desktop/capture.cjs:confirmStop:329-339
-desktop.setup.cancel_detail	Keep this window open or minimize it to continue. Canceling stops the owned installation processes; prepared files are retained so you can retry on the next launch.	Keep this window open or minimize it to continue. Canceling stops this setup’s installation processes and keeps prepared files. Relaunch StandTerm to try again.		Close confirmation during preparation. Cancellation targets owned setup processes and waits for cleanup; prepared files remain.		Keep button index 0 Keep preparing and 1 Cancel setup; defaultId=0/cancelId=0. Preserve stale-window check and cooperative cancellation. Do not imply all Python processes are stopped or retry is automatic.	proposed	desktop/setup.cjs:requestSetupCancel:61-76
-desktop.setup.install_effects	and downloads and installs Python dependencies from your configured package index. Dependencies can execute installation code. Internet access and disk space are required.	Python dependencies are downloaded from your configured package index and installed in the private environment. Installation can run code and requires internet access and disk space.		Exact dependency-effects fragment in preparePackagedBackend confirmation detail; preceding Core-copy/path/Python requirements and following retention policy remain separate.		Keep existing environment/backend selection and raw destination path. Confirm response 1 creates the environment; 0/defaultId/cancelId cancel. Do not imply bundled or verified dependencies, system Python installation, or privilege elevation.	proposed	desktop/setup.cjs:preparePackagedBackend:262-268
-desktop.setup.retention	Failed setup is retained for retry. Uninstall keeps environments by default; optional cleanup moves only verified idle venvs to a recovery folder. Core and user data are retained.	Failed setup files are kept for retry. Uninstall keeps environments by default. Optional cleanup moves verified idle venvs to recovery and keeps Core files and user data.		Exact retention fragment of the initial setup confirmation. The cleanup operation is a recoverable move rather than disk-space reclamation.		Keep venv-only cleanup boundary and verified/idle checks. Do not imply uninstall deletes Core or user data, that partial setup is ready, or that retry occurs without a user action.	proposed	desktop/setup.cjs:preparePackagedBackend:267
-desktop.setup.cleanup_detail	{paths}\n\nNo disk space is freed. Core and settings are retained. Any environment that becomes busy or fails verification will be retained. Cancel keeps all listed venvs.	{paths}\n\nThis move does not free disk space. Core and settings stay in place. Busy or unverified environments are kept. Cancel keeps every listed venv.		Cleanup confirmation detail after candidate inventory, before detach-idle-venvs. Candidate paths are shown as a raw list.	{paths}	Keep candidate IDs and source paths literal. Button index 0 keeps environments; index 1 moves listed candidates. defaultId=0/cancelId=0. Recheck eligibility; no deletion or permission expansion.	proposed	desktop/setup.cjs:cleanupManagedVenvs:319-332
-desktop.setup.cleanup_unconfirmed	Cleanup did not report completion. Check venv-recovery before retrying.	Cleanup completion was not confirmed. Check venv-recovery before retrying.		execute help when detach-idle-venvs does not provide confirmed completion; moves may have partially occurred.		Keep recovery-directory name venv-recovery literal. Do not claim no files moved, roll back, delete, or automatically retry.	proposed	desktop/setup.cjs:cleanupManagedVenvs:331-333
-desktop.setup.timeout	Setup timed out. Check internet access and retry.	Setup timed out. Check internet access and the setup log before retrying.		Fixed ERRORS.setup_timeout message. Timeout does not guarantee prepared files were removed or no installation work occurred.		Keep setup_timeout error key, timeout values, cancellation and retained files unchanged. No automatic retry or promise of a clean environment.	proposed	desktop/setup.cjs:ERRORS.setup_timeout:29
-desktop.core_source.restart_notice	This restarts StandTerm and closes terminal sessions. Python dependencies may be downloaded and installed.	StandTerm will restart and close terminal sessions. Python dependencies may be downloaded and installed.		Common consequence fragment for source enable/update/prepare/recover confirmations.		Keep action IDs enable/update/prepare/recover and source values bundled/git. Button index 1 restarts; 0/defaultId/cancelId cancel. Do not treat translated labels as action IDs.	proposed	desktop/core-source.cjs:coreController.confirm:58-66
-desktop.core_source.recovery_retention	Core files and data in the previous environment are retained. Recovery does not roll back user data.	The previous environment’s Core files and data are kept. Restoring bundled Core does not roll back user data.		Conditional recover confirmation detail; restores the installed Core source rather than reverting user data.		Only for typed action recover. Preserve previous environment and pending-action consumption. No destructive cleanup or rollback feature.	proposed	desktop/core-source.cjs:coreController.confirm:61
-desktop.core_source.git_policy	Git uses the official askac/standterm repository, main branch. Its files are not checked against the installed bundle hashes. Local changes are allowed, but updates refuse to overwrite them. The Desktop shell stays installed.	Git Core uses askac/standterm on the main branch. Its files are not verified against the installed bundle hashes. Updates refuse to overwrite local changes. The Desktop shell stays installed.		Git-source confirmation detail; removes marketing qualifier while keeping source provenance and integrity boundary.		Keep askac/standterm and main literal. Preserve refusal on local changes and no reset/stash behavior. No automatic update, retry, or implied equivalence to the verified installed bundle.	proposed	desktop/core-source.cjs:coreController.confirm:62-63
-desktop.core_source.reauthorization	Authorization and recovery data are local to each Core source; switching may require reauthorization.	Each Core source has separate authorization and recovery data. Switching may require reauthorization.		Common source-change confirmation suffix; switching may change which credentials or recovery registrations are available.		Do not promise migration, reuse, deletion, or automatic authorization. Preserve sourceStore identity/source/pending fields and backend credential boundaries.	proposed	desktop/core-source.cjs:coreController.confirm:64
-desktop.core_source.failure_choices	The Desktop shell can retry or restore its installed Core. Existing files are retained.	Choose Retry to restart StandTerm and try again, or restore bundled Core. Existing files are kept.		Core unavailable dialog detail. Retry invokes restart(lastAction); displaying this dialog does not itself retry.		Keep response indices 0 Quit, 1 Retry, 2 Restore bundled Core, 3 Core source, 4 Open logs. defaultId=0/cancelId=0. Preserve fixed action IDs and lastAction replay; no automatic retry.	proposed	desktop/core-source.cjs:coreController.failure:111-124
+desktop.setup.cancel_detail	Keep this window open or minimize it to continue. Canceling stops the owned installation processes; prepared files are retained so you can retry on the next launch.	Keep this window open or minimize it to continue. Canceling stops this setup’s installation processes and keeps prepared files. Relaunch StandTerm to try again.	保持此視窗開啟或最小化即可繼續。取消會停止此次安裝的處理程序，並保留已準備的檔案。請重新啟動 StandTerm 以重試。	Cancel confirmation detail. Only owned installation processes are stopped.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.install_effects	and downloads and installs Python dependencies from your configured package index. Dependencies can execute installation code. Internet access and disk space are required.			Exact dependency-effects fragment in preparePackagedBackend confirmation detail; preceding Core-copy/path/Python requirements and following retention policy remain separate. Merged into the complete prepare_detail message to avoid grammatical fragments.		Keep existing environment/backend selection and raw destination path. Confirm response 1 creates the environment; 0/defaultId/cancelId cancel. Do not imply bundled or verified dependencies, system Python installation, or privilege elevation.	remove	desktop/setup.cjs:preparePackagedBackend:262-268
+desktop.setup.retention	Failed setup is retained for retry. Uninstall keeps environments by default; optional cleanup moves only verified idle venvs to a recovery folder. Core and user data are retained.			Exact retention fragment of the initial setup confirmation. The cleanup operation is a recoverable move rather than disk-space reclamation. Merged into the complete prepare_detail message to avoid grammatical fragments.		Keep venv-only cleanup boundary and verified/idle checks. Do not imply uninstall deletes Core or user data, that partial setup is ready, or that retry occurs without a user action.	remove	desktop/setup.cjs:preparePackagedBackend:267
+desktop.setup.cleanup_detail	{paths}\n\nNo disk space is freed. Core and settings are retained. Any environment that becomes busy or fails verification will be retained. Cancel keeps all listed venvs.	{paths}\n\nThis move does not free disk space. Core and settings stay in place. Busy or unverified environments are kept. Cancel keeps every listed venv.	{paths}\n\n移動不會釋放磁碟空間。Core 與設定會留在原處。使用中或未通過驗證的環境會保留。取消會保留清單中的所有 venv。	Candidate paths remain a raw newline-separated list. Eligibility is checked again before moving.	{paths}	Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.cleanup_unconfirmed	Cleanup did not report completion. Check venv-recovery before retrying.	Cleanup completion was not confirmed. Check venv-recovery before retrying.	無法確認清理是否完成。重試前，請先檢查 venv-recovery。	Detach command failure may mean partial moves; do not imply no mutation occurred.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.timeout	Setup timed out. Check internet access and retry.			Fixed ERRORS.setup_timeout message. Timeout does not guarantee prepared files were removed or no installation work occurred. Replaced by error_setup_timeout for consistent stable-code mapping.		Keep setup_timeout error key, timeout values, cancellation and retained files unchanged. No automatic retry or promise of a clean environment.	remove	desktop/setup.cjs:ERRORS.setup_timeout:29
+desktop.core_source.restart_notice	This restarts StandTerm and closes terminal sessions. Python dependencies may be downloaded and installed.	StandTerm will restart and close terminal sessions. Python dependencies may be downloaded and installed.	StandTerm 將重新啟動並關閉終端工作階段。可能會下載並安裝 Python 相依套件。	Common consequence fragment for source enable/update/prepare/recover confirmations.		Keep action IDs enable/update/prepare/recover and source values bundled/git. Button index 1 restarts; 0/defaultId/cancelId cancel. Do not treat translated labels as action IDs.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.recovery_retention	Core files and data in the previous environment are retained. Recovery does not roll back user data.	The previous environment’s Core files and data are kept. Restoring bundled Core does not roll back user data.	原環境的 Core 檔案與資料會保留。還原隨附 Core 不會回復使用者資料。	Conditional recover confirmation detail; restores the installed Core source rather than reverting user data.		Only for typed action recover. Preserve previous environment and pending-action consumption. No destructive cleanup or rollback feature.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.git_policy	Git uses the official askac/standterm repository, main branch. Its files are not checked against the installed bundle hashes. Local changes are allowed, but updates refuse to overwrite them. The Desktop shell stays installed.	Git Core uses askac/standterm on the main branch. Its files are not verified against the installed bundle hashes. Updates refuse to overwrite local changes. The Desktop shell stays installed.	Git Core 使用 askac/standterm 的 main 分支。其檔案不會依已安裝套件的雜湊值驗證。更新時不會覆寫本機變更。Desktop 應用程式會保留。	Git-source confirmation detail; removes marketing qualifier while keeping source provenance and integrity boundary.		Keep askac/standterm and main literal. Preserve refusal on local changes and no reset/stash behavior. No automatic update, retry, or implied equivalence to the verified installed bundle.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.reauthorization	Authorization and recovery data are local to each Core source; switching may require reauthorization.	Each Core source has separate authorization and recovery data. Switching may require reauthorization.	各 Core 來源的授權與復原資料互相獨立。切換後可能需要重新授權。	Common source-change confirmation suffix; switching may change which credentials or recovery registrations are available.		Do not promise migration, reuse, deletion, or automatic authorization. Preserve sourceStore identity/source/pending fields and backend credential boundaries.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.failure_choices	The Desktop shell can retry or restore its installed Core. Existing files are retained.	Choose Retry to restart StandTerm and try again, or restore bundled Core. Existing files are kept.	選擇「重試」以重新啟動 StandTerm 再試一次，或還原隨附 Core。現有檔案會保留。	Core unavailable dialog detail. Retry invokes restart(lastAction); displaying this dialog does not itself retry.		Keep response indices 0 Quit, 1 Retry, 2 Restore bundled Core, 3 Core source, 4 Open logs. defaultId=0/cancelId=0. Preserve fixed action IDs and lastAction replay; no automatic retry.	translation-reviewed	desktop/core-source.cjs:coreController
 desktop.browser_access.opened	Browser authorization opened in the default browser.	Authorization link opened in the default browser.	已在預設瀏覽器開啟授權連結。	Success notice after awaiting OS open callback; browser authorization has not been observed as completed.		Keep action open distinct from copy-auth/copy-url/copy-token; retain existing confirmation. Do not claim the browser is authorized or reveal the URL/token in the notice.	translation-reviewed	desktop/browser-access.cjs:createBrowserAccess.run:46-62
 desktop.browser_access.copied	Access information copied. Treat it as a password.	Access information copied. Keep it private, like a password.	已複製存取資訊。請像保管密碼一樣妥善保密。	Shared notice for copied authorization URL, access URL, or access token; the copied payload is sensitive.		Keep exact clipboard payload and fixed action IDs; do not insert secrets into catalog parameters, logs or notifications. No extra mint, reveal, or retry.	translation-reviewed	desktop/browser-access.cjs:createBrowserAccess.run:58-62
 desktop.browser_access.failed	Could not prepare browser access. Check that this Desktop backend is still running.	Could not prepare browser access. Check that this Desktop backend is running.	無法準備瀏覽器存取資訊。請確認此 Desktop 的後端仍在執行。	Sanitized generic failure notice; implementation deliberately discards URL-bearing network errors.		Preserve generic failure and error=true notification. Never display raw caught errors, URLs, grants or tokens. Keep pending/available guards and no automatic retry.	translation-reviewed	desktop/browser-access.cjs:createBrowserAccess.run catch:64-67
@@ -181,3 +181,94 @@ desktop.capture.save_failed_detail		Review the error and file locations below.\n
 desktop.capture.save_unconfirmed		Could not confirm the recording save result.	無法確認錄影儲存結果。	Fallback error when a stop/save result does not positively confirm completion.		Cancel the pending close/quit and retain the window. Do not claim that no output exists, retry automatically, or imply recording continues.	translation-reviewed	desktop/capture.cjs:DesktopCapture.confirmStop
 desktop.capture.requested_destination		Requested destination:\n{path}	預定儲存位置：\n{path}	Failure-dialog suffix naming the requested final output path, distinct from a retained partial path.	{path}	Keep path literal. Final publication may have happened before partial cleanup failed. This label does not guarantee that the path exists, that the file is complete or playable, or that saving succeeded.	translation-reviewed	desktop/capture.cjs:DesktopCapture.confirmStop
 desktop.capture.done	Done	Done	完成	Close Capture Settings without changing either folder preference.		Keep response index 0 and defaultId=0/cancelId=0. This closes the settings dialog only; it is not a capture-save result.	translation-reviewed	desktop/capture.cjs:DesktopCapture.configure
+desktop.setup.help_wsl	Install WSL and Python 3.10+ with venv support in the selected distribution first.\n\nFor Ubuntu/Debian, run this yourself in WSL:\nsudo apt install python3 python3-venv\n\nStandTerm never runs sudo or installs system Python automatically.	Install WSL and Python 3.10+ with venv support in the selected distribution first.\n\nFor Ubuntu/Debian, run this yourself in WSL:\nsudo apt install python3 python3-venv\n\nStandTerm never runs sudo or installs system Python automatically.	請先安裝 WSL，並在選取的發行版中安裝支援 venv 的 Python 3.10 以上版本。\n\n若使用 Ubuntu／Debian，請自行在 WSL 執行：\nsudo apt install python3 python3-venv\n\nStandTerm 不會自動執行 sudo 或安裝系統 Python。	WSL prerequisites and manual installation instructions. Preserve the command exactly.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.help_windows	Install 64-bit Python 3.10+ with venv support on Windows first.\n\nStandTerm checks PATH for python.exe or lets you select it. Microsoft Store aliases and py.exe are not launched automatically. No system Python installation or administrator access is requested.	Install 64-bit Python 3.10+ with venv support on Windows first.\n\nStandTerm checks PATH for python.exe or lets you select it. Microsoft Store aliases and py.exe are not launched automatically. No system Python installation or administrator access is requested.	請先在 Windows 安裝支援 venv 的 64 位元 Python 3.10 以上版本。\n\nStandTerm 會從 PATH 尋找 python.exe，或讓你自行選取。系統不會自動啟動 Microsoft Store 別名或 py.exe，也不會安裝系統 Python 或要求系統管理員權限。	Windows Python discovery and prerequisites. Keep executable names literal.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.help_macos	Install native macOS Python 3.10+ with venv and ensurepip support first.\n\nPython must match this app’s CPU architecture. StandTerm checks Homebrew, MacPorts and PATH, or lets you select an installed interpreter. Apple’s /usr/bin/python3 developer-tools stub is not launched. StandTerm does not install Python, Homebrew, Rosetta or system packages.	Install native macOS Python 3.10+ with venv and ensurepip support first.\n\nPython must match this app’s CPU architecture. StandTerm checks Homebrew, MacPorts and PATH, or lets you select an installed interpreter. Apple’s /usr/bin/python3 developer-tools stub is not launched. StandTerm does not install Python, Homebrew, Rosetta or system packages.	請先安裝支援 venv 與 ensurepip 的 macOS 原生 Python 3.10 以上版本。\n\nPython 必須符合此應用程式的 CPU 架構。StandTerm 會從 Homebrew、MacPorts 與 PATH 尋找，或讓你選取已安裝的直譯器。系統不會啟動 Apple 的 /usr/bin/python3 開發工具啟動程式，也不會安裝 Python、Homebrew、Rosetta 或系統套件。	macOS native architecture and interpreter prerequisites.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs:macosPython
+desktop.setup.error_dependencies_failed	Dependency installation or verification failed. Check internet access and the runtime setup.log, then retry.	Dependency installation or verification failed. Check internet access and the runtime setup.log, then retry.	相依套件安裝或驗證失敗。請檢查網路連線及執行環境中的 setup.log，再重試。	Display message for stable dependencies_failed error code. Preserve code-based behavior and retained files.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.error_setup_busy	This runtime is in use by StandTerm or another setup. Quit that desktop mode before retrying.	This runtime is in use by StandTerm or another setup. Quit that desktop mode before retrying.	StandTerm 或其他安裝程序正在使用此執行環境。請先結束使用該環境的 Desktop 模式，再重試。	Display message for stable setup_busy error code. Preserve code-based behavior and retained files.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.error_modified_runtime	The managed Core contains modified files. Setup will not overwrite them.	The managed Core contains modified files. Setup will not overwrite them.	受管理的 Core 含有已修改的檔案。安裝程序不會覆寫這些檔案。	Display message for stable modified_runtime error code. Preserve code-based behavior and retained files.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.error_unsafe_runtime_path	The runtime directory is not safe to use. Setup will not overwrite unrelated files or follow directory links.	The runtime directory is not safe to use. Setup will not overwrite unrelated files or follow directory links.	無法安全使用此執行環境目錄。安裝程序不會覆寫無關檔案，也不會沿用目錄連結。	Display message for stable unsafe_runtime_path error code. Preserve code-based behavior and retained files.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.error_invalid_bundle	The bundled Core failed its integrity check. Reinstall StandTerm Desktop.	The bundled Core failed its integrity check. Reinstall StandTerm Desktop.	隨附 Core 未通過完整性檢查。請重新安裝 StandTerm Desktop。	Display message for stable invalid_bundle error code. Preserve code-based behavior and retained files.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.error_setup_canceled	Setup was canceled. Relaunch StandTerm to retry.	Setup was canceled. Relaunch StandTerm to retry.	已取消準備。請重新啟動 StandTerm 以重試。	Display message for stable setup_canceled error code. Preserve code-based behavior and retained files.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.error_setup_timeout	Setup timed out. Check internet access and the setup log before retrying.	Setup timed out. Check internet access and the setup log before retrying.	安裝逾時。請先檢查網路連線及安裝記錄，再重試。	Display message for stable setup_timeout error code. Preserve code-based behavior and retained files.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.error_git_required	Git is unavailable in the selected backend environment. Install Git there, or restore the bundled Core.	Git is unavailable in the selected backend environment. Install Git there, or restore the bundled Core.	選取的後端環境無法使用 Git。請在該環境安裝 Git，或還原隨附 Core。	Display message for stable git_required error code. Preserve code-based behavior and retained files.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.error_git_dirty	The Git Core has local changes. Keep them or resolve them in its checkout before updating. Nothing was reset or stashed.	The Git Core has local changes. Keep them or resolve them in its checkout before updating. Nothing was reset or stashed.	Git Core 有本機變更。更新前，請決定保留或在其工作目錄中處理這些變更。系統未執行 reset 或 stash。	Display message for stable git_dirty error code. Preserve code-based behavior and retained files.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.error_git_diverged	The Git Core cannot fast-forward to the official branch. Local history is retained. Restore the bundled Core or resolve the checkout manually.	The Git Core cannot fast-forward to the official branch. Local history is retained. Restore the bundled Core or resolve the checkout manually.	Git Core 無法以快轉方式更新至官方分支。本機歷史紀錄已保留。請還原隨附 Core，或手動處理其工作目錄。	Display message for stable git_diverged error code. Preserve code-based behavior and retained files.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.error_git_source_changed	The managed Git origin or branch has changed. The official repository and main branch are required.	The managed Git origin or branch has changed. The official repository and main branch are required.	受管理的 Git origin 或分支已變更。必須使用官方儲存庫及 main 分支。	Display message for stable git_source_changed error code. Preserve code-based behavior and retained files.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.error_invalid_git_workspace	The private Git checkout is incomplete or damaged. It is retained. Restore the bundled Core or repair that checkout manually.	The private Git checkout is incomplete or damaged. It is retained. Restore the bundled Core or repair that checkout manually.	專用 Git 工作目錄不完整或已損壞，系統已保留該目錄。請還原隨附 Core，或手動修復該目錄。	Display message for stable invalid_git_workspace error code. Preserve code-based behavior and retained files.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.error_git_needs_setup	The Git Core requirements changed or its environment is missing. Use Prepare Git environment from Core source (Advanced).	The Git Core requirements changed or its environment is missing. Use Prepare Git environment from Core source (Advanced).	Git Core 的相依需求已變更，或缺少執行環境。請在「Core 來源（進階）」選擇「準備 Git 環境」。	Display message for stable git_needs_setup error code. Preserve code-based behavior and retained files.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.error_git_failed	Git could not complete the operation. Check network access and the runtime setup.log. Prepared files are retained.	Git could not complete the operation. Check network access and the runtime setup.log. Prepared files are retained.	Git 無法完成操作。請檢查網路連線及執行環境中的 setup.log。已準備的檔案會保留。	Display message for stable git_failed error code. Preserve code-based behavior and retained files.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.error_invalid_archive	The recovery archive failed verification. Reinstall StandTerm Desktop if its installed bundle is also damaged.	The recovery archive failed verification. Reinstall StandTerm Desktop if its installed bundle is also damaged.	復原封存檔未通過驗證。若已安裝的隨附檔案也已損壞，請重新安裝 StandTerm Desktop。	Display message for stable invalid_archive error code. Preserve code-based behavior and retained files.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.error_setup_failed	Setup failed. Check the selected Python environment and available disk space.	Setup failed. Check the selected Python environment and available disk space.	安裝失敗。請檢查選取的 Python 環境及可用磁碟空間。	Display message for stable setup_failed error code. Preserve code-based behavior and retained files.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.cancel_title	Cancel StandTerm setup?	Cancel StandTerm setup?	取消 StandTerm 準備？	Cancel confirmation title.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.cancel_message	The Python environment is still being prepared.	The Python environment is still being prepared.	Python 環境仍在準備中。	Cancel confirmation message.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.keep_preparing	Keep preparing	Keep preparing	繼續準備	Cancel confirmation response 0; default and escape preserve preparation.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.cancel_setup	Cancel setup	Cancel setup	取消準備	Cancel confirmation response 1.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.canceling_title	StandTerm Desktop - Canceling setup	StandTerm Desktop - Canceling setup	StandTerm Desktop－正在取消準備	Progress window title after confirmed cancellation.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.canceling_status	Canceling setup. Waiting for installation processes to stop...	Canceling setup. Waiting for installation processes to stop...	正在取消準備，等待安裝程序停止…	Progress live status while cooperative cancellation finishes.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.python_required_title	StandTerm Desktop: Python required	StandTerm Desktop: Python required	StandTerm Desktop：需要 Python	Windows and macOS missing interpreter dialog title.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.select_python_windows	Select installed python.exe...	Select installed python.exe...	選取已安裝的 python.exe…	Windows interpreter selection button, response 1.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.select_python_macos	Select installed Python...	Select installed Python...	選取已安裝的 Python…	macOS interpreter selection button, response 1.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.select_python_windows_title	Select an installed 64-bit Python interpreter	Select an installed 64-bit Python interpreter	選取已安裝的 64 位元 Python 直譯器	Windows native file picker title.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.select_python_macos_title	Select a native macOS Python 3.10+ interpreter	Select a native macOS Python 3.10+ interpreter	選取 macOS 原生 Python 3.10 以上版本的直譯器	macOS native file picker title.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.python_executable	Python executable	Python executable	Python 執行檔	Windows exe file filter label.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.select_wsl_title	StandTerm Desktop: select WSL	StandTerm Desktop: select WSL	StandTerm Desktop：選取 WSL	WSL distribution dialog title.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.select_wsl_message	Select an existing WSL distribution for StandTerm Core.	Select an existing WSL distribution for StandTerm Core.	為 StandTerm Core 選取現有的 WSL 發行版。	Distribution names remain literal. No installation of distributions.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.prepare_title	Prepare StandTerm Core	Prepare StandTerm Core	準備 StandTerm Core	Initial dependency installation consent title.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.prepare_message	Create a private StandTerm environment in {platform}?	Create a private StandTerm environment in {platform}?	要在 {platform} 建立 StandTerm 專用環境嗎？	Initial consent message. Platform is Windows, macOS or the raw WSL distro name.	{platform}	Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.requirements_macos	Requires Python 3.10+ with venv support on native macOS.	Requires Python 3.10+ with venv support on native macOS.	需要 macOS 原生 Python 3.10 以上版本，並支援 venv。	Complete requirement sentence inserted as data into prepare_detail.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.requirements_windows	Requires 64-bit Python 3.10+ with venv support on Windows.	Requires 64-bit Python 3.10+ with venv support on Windows.	需要 Windows 64 位元 Python 3.10 以上版本，並支援 venv。	Complete requirement sentence inserted as data into prepare_detail.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.requirements_wsl	Requires Python 3.10+ with venv support inside WSL.	Requires Python 3.10+ with venv support inside WSL.	需要 WSL 內的 Python 3.10 以上版本，並支援 venv。	Complete requirement sentence inserted as data into prepare_detail.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.prepare_detail	{requirements}\n\nThis copies the bundled Core to {path} and creates a private venv. Python dependencies are downloaded from your configured package index and installed there. Installation can run code and requires internet access and disk space.\n\nNo system Python installation, sudo, Git checkout changes or existing-session interruption. Failed setup files are kept for retry. Uninstall keeps environments by default. Optional cleanup moves verified idle venvs to recovery and keeps Core files and user data.	{requirements}\n\nThis copies the bundled Core to {path} and creates a private venv. Python dependencies are downloaded from your configured package index and installed there. Installation can run code and requires internet access and disk space.\n\nNo system Python installation, sudo, Git checkout changes or existing-session interruption. Failed setup files are kept for retry. Uninstall keeps environments by default. Optional cleanup moves verified idle venvs to recovery and keeps Core files and user data.	{requirements}\n\n系統會將隨附 Core 複製到 {path}，並建立專用 venv。Python 相依套件會從你設定的套件索引下載，並安裝到該環境。安裝可能執行程式碼，且需要網路連線與磁碟空間。\n\n系統不會安裝系統 Python、執行 sudo、變更 Git 工作目錄，或中斷現有工作階段。安裝失敗時會保留檔案供重試。解除安裝預設會保留環境。選用的清理功能只會將通過驗證且未使用中的 venv 移至復原資料夾，並保留 Core 檔案與使用者資料。	Full initial setup consent. This dialog prepares bundled Core only; do not reuse unchanged for managed Git updates.	{requirements} {path}	Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.create_environment	Create environment and install dependencies	Create environment and install dependencies	建立環境並安裝相依套件	Initial setup response 1; default/cancel response 0 remains Cancel.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.progress_title	StandTerm Desktop - Preparing environment	StandTerm Desktop - Preparing environment	StandTerm Desktop－正在準備環境	Native progress window title and document title.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs; desktop/setup.html
+desktop.setup.progress_heading	Preparing your Python environment	Preparing your Python environment	正在準備 Python 環境	Progress HTML heading.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.html
+desktop.setup.progress_starting	Starting setup...	Starting setup...	正在開始準備…	Initial preparation status.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.html
+desktop.setup.progress_aria	Environment preparation in progress	Environment preparation in progress	正在準備環境	Indeterminate progress accessible label.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.html
+desktop.setup.progress_detail	Creating a private venv and installing dependencies may take several minutes. The progress indicator does not show a completion percentage.	Creating a private venv and installing dependencies may take several minutes. The progress indicator does not show a completion percentage.	建立專用 venv 及安裝相依套件可能需要數分鐘。進度指示器不代表完成百分比。	Indeterminate progress explanation.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.html
+desktop.setup.progress_close_hint	You can minimize this window while setup continues. Closing it asks for confirmation before canceling.	You can minimize this window while setup continues. Closing it asks for confirmation before canceling.	準備期間可將此視窗最小化。關閉視窗時，系統會先確認是否取消。	Window close semantics; close is not immediate cancellation.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.html
+desktop.setup.progress_scope	StandTerm uses your installed Python. It does not install system Python or run sudo. It prepares the managed Core environment and leaves unrelated Git checkouts unchanged. If canceled, prepared files are kept for retry.	StandTerm uses your installed Python; it does not install system Python or run sudo. If canceled, prepared files are kept for retry.	StandTerm 使用已安裝的 Python，不會安裝系統 Python 或執行 sudo。若取消，已準備的檔案會保留供重試。	Shared by bundled setup and private Git Core management; private managed checkout may change.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.html
+desktop.setup.preparation_macos	Preparing Core for native macOS.	Preparing Core for native macOS.	正在為 macOS 原生環境準備 Core。	Progress requirements line for macOS.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.preparation_windows	Preparing Core for native Windows.	Preparing Core for native Windows.	正在為 Windows 原生環境準備 Core。	Progress requirements line for Windows.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.preparation_wsl	Preparing Core inside WSL: {distro}.	Preparing Core inside WSL: {distro}.	正在 WSL 發行版 {distro} 內準備 Core。	Progress requirements line; distro remains raw.	{distro}	Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.stage_git	Updating the private Git checkout...	Updating the private Git checkout...	正在更新專用 Git 工作目錄…	Progress text selected by stable git stage ID. Unknown stages remain ignored.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.stage_copy	Copying verified Core files...	Copying verified Core files...	正在複製已驗證的 Core 檔案…	Progress text selected by stable copy stage ID. Unknown stages remain ignored.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.stage_venv	Creating the private Python environment...	Creating the private Python environment...	正在建立專用 Python 環境…	Progress text selected by stable venv stage ID. Unknown stages remain ignored.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.stage_dependencies	Installing Python dependencies. This can take several minutes...	Installing Python dependencies. This can take several minutes...	正在安裝 Python 相依套件，可能需要數分鐘…	Progress text selected by stable dependencies stage ID. Unknown stages remain ignored.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.stage_verify	Verifying the installed dependencies...	Verifying the installed dependencies...	正在驗證已安裝的相依套件…	Progress text selected by stable verify stage ID. Unknown stages remain ignored.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.cleanup_inventory_unavailable	Environment inventory was unavailable. No venv cleanup was started.	Environment inventory was unavailable. No venv cleanup was started.	無法取得環境清單，尚未開始清理 venv。	Inventory command failure; no detach operation has been requested.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.cleanup_title	Confirm environment cleanup	Confirm environment cleanup	確認清理環境	Windows installer optional cleanup confirmation.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.cleanup_message	Move these idle venvs to recovery in {platform}?	Move these idle venvs to recovery in {platform}?	要將 {platform} 中這些未使用中的 venv 移至復原資料夾嗎？	Platform is Windows or WSL followed by the raw selected distro name.	{platform}	Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.cleanup_keep	Keep environments	Keep environments	保留環境	Cleanup response 0, default and escape.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.setup.cleanup_move	Move listed venvs to recovery	Move listed venvs to recovery	將清單中的 venv 移至復原資料夾	Cleanup response 1; recoverable move only, no deletion.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.startup.start_failed	StandTerm Desktop could not start	StandTerm Desktop could not start	StandTerm Desktop 無法啟動	Startup failure dialog title.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/main.cjs
+desktop.startup.recovery_failed	StandTerm Desktop could not recover	StandTerm Desktop could not recover	StandTerm Desktop 無法復原	Recovery failure dialog title.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/main.cjs
+desktop.startup.shutdown_failed	StandTerm could not complete shutdown	StandTerm could not complete shutdown	StandTerm 無法完成結束程序	Shutdown failure dialog title.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/main.cjs
+desktop.startup.management_unavailable	Core management unavailable	Core management unavailable	無法使用 Core 管理功能	Core management failure dialog title.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/main.cjs
+desktop.startup.diagnostics_detail	{error}\n\nDiagnostics: {path}	{error}\n\nDiagnostics: {path}	{error}\n\n診斷紀錄：{path}	Startup raw error and diagnostic log path. Never translate or parse the error payload.	{error} {path}	Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/main.cjs
+desktop.core_source.change_title	Change StandTerm Core	Change StandTerm Core	變更 StandTerm Core	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.confirm_recover	Restore the Core bundled with this Desktop installation?	Restore the Core bundled with this Desktop installation?	要還原此 Desktop 安裝版本隨附的 Core 嗎？	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.confirm_git	Use the advanced Git Core environment?	Use the advanced Git Core environment?	要使用進階 Git Core 環境嗎？	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.restart_continue	Restart and continue	Restart and continue	重新啟動並繼續	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.close	Close	Close	關閉	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.prepare_git	Prepare Git environment	Prepare Git environment	準備 Git 環境	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.enable_git	Enable Git Core	Enable Git Core	啟用 Git Core	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.update_git	Update Git Core	Update Git Core	更新 Git Core	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.restore_bundled	Restore bundled Core	Restore bundled Core	還原隨附 Core	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.open_logs	Open Desktop logs	Open Desktop logs	開啟 Desktop 紀錄資料夾	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.manager_title	Core source (Advanced)	Core source (Advanced)	Core 來源（進階）	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.source	Core source: {source}	Core source: {source}	Core 來源：{source}	Native Core source manager and recovery dialogs; fixed action IDs and response indices.	{source}	Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.bundled	Bundled with Desktop	Bundled with Desktop	Desktop 隨附	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.git_available	Git in this backend environment: Available	Git in this backend environment: Available	此後端環境的 Git：可用	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.git_unavailable	Git in this backend environment: Unavailable	Git in this backend environment: Unavailable	此後端環境的 Git：無法使用	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.commit	Commit: {commit}	Commit: {commit}	Commit：{commit}	Native Core source manager and recovery dialogs; fixed action IDs and response indices.	{commit}	Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.commit_dirty	Commit: {commit} (local changes)	Commit: {commit} (local changes)	Commit：{commit}（有本機變更）	Native Core source manager and recovery dialogs; fixed action IDs and response indices.	{commit}	Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.workspace	Workspace: {workspace}	Workspace: {workspace}	工作目錄：{workspace}	Native Core source manager and recovery dialogs; fixed action IDs and response indices.	{workspace}	Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.workspace_absent	absent	Not created	尚未建立	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.workspace_present	present	Present	已建立	Git workspace is present; this does not assert that its Python environment is ready.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.workspace_unavailable	unavailable	Cannot inspect without Git	缺少 Git，無法檢查	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.workspace_invalid	invalid	Invalid or inaccessible	無效或無法存取	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.manual_updates	Git updates are manual. Install Git in the selected Windows, macOS or WSL environment to enable them.	Git Core updates are manual. Install Git in the selected Windows, macOS or WSL environment to enable them.	Git Core 需手動更新。請在所選的 Windows、macOS 或 WSL 環境中安裝 Git，才能進行更新。	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.unavailable_title	StandTerm Core is unavailable	StandTerm Core is unavailable	StandTerm Core 無法使用	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.quit	Quit	Quit	結束	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.core_source.retry	Retry	Retry	重試	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
diff --git a/docs/desktop_ui_review_plan.md b/docs/desktop_ui_review_plan.md
index 88f0a4e..a566d11 100644
--- a/docs/desktop_ui_review_plan.md
+++ b/docs/desktop_ui_review_plan.md
@@ -13,10 +13,11 @@ acceptance remain separate. Browser acceptance is recorded in
 | 0 — Complete | Clarify toolbar action feedback before localization. A resolved `false` now shows unavailable feedback; a rejected invocation reports an uncertain result without suggesting retry. | Small | Both original failures reproduced before the fix; renderer and command-guard checks passed. Each click invokes once, with no automatic replay or invented completion notice. |
 | 1 — Complete | Add a Desktop-owned language preference and catalog; pilot custom menus, toolbar labels and Agent help. | Medium | English default/fallback, `en` and `zh-TW`, malformed preference fallback, next-launch application, translated title/ARIA labels without losing SVGs, fixed command IDs, focus/origin guards and staging inclusion verified. Native acceptance remains order 4. |
 | 2 — Complete | Localize Browser Access, Diagnostics, About, external-browser confirmations and Capture; retain the window when recording save fails during close/quit. | Medium | Sensitive clipboard feedback, fixed authorization actions, escaped diagnostic fields, literal event JSON, typed Capture state, folder settings and combined save-failure plus close/quit coverage verified. |
-| 3 | Localize setup, Core source selection, startup failure and recoverable environment cleanup. | Medium to large | Both languages work before Core is available. Cancellation waits for owned installers; stale confirmations do nothing; source switching, restart/session closure, retained files and recovery moves remain explicit. |
+| 3 — Complete | Localize setup, Core source selection/recovery, startup error wrappers and per-mode environment cleanup confirmations. | Medium to large | Both languages work before Core is available. Cancellation waits for owned installers; stale confirmations do nothing; source switching, restart/session closure, retained files and recovery moves remain explicit. Installer-wide dialogs remain in order 3b. |
+| 3b | Review and localize remaining shell notices: port selection, Files download feedback and installer-wide summary/error dialogs. | Small to medium | Preserve structured port outcomes, download status and recovery counts. Settle the installer-wide locale when Windows/WSL preferences differ; do not infer a new shared preference from per-mode setup. |
 | 4 | Complete Windows and macOS native acceptance and packaged asset checks. | Platform-dependent | Menus, native dialogs, narrow layouts, keyboard/ARIA labels, clipboard, setup and recovery are checked on each OS. Verify staged and packaged Desktop catalogs independently of the selected Core version. |
 
-The next implementation is setup and Core source/recovery in order 3.
+The next implementation is the remaining shell notices in order 3b.
 The operator chose to retain the window and show the error and unfinished-file
 location when recording save fails during close/quit. Orders 1–3 remain separate
 reviewable changes; native OS acceptance remains order 4.
@@ -67,14 +68,15 @@ Keep these implementation boundaries:
 
 [desktop_ui_copy_review.tsv](desktop_ui_copy_review.tsv) is a prioritized seed
 inventory, not a claim that every Desktop string has been extracted. It uses
-the same nine columns as the browser table. After Capture,
-170 rows are `translation-reviewed` with English and Traditional Chinese text;
-11 setup/Core source rows remain `proposed` with empty `zh-TW` cells. One retired
-Capture sentence fragment is marked `remove`. Some `current_en` cells are exact fragments or normalize
+the same nine columns as the browser table. After setup/Core source,
+269 rows are `translation-reviewed` with English and Traditional Chinese text.
+Four retired Capture/setup fragments or renamed messages are marked `remove`;
+no seed rows remain `proposed`. This does not include every remaining shell
+notice listed in order 3b. Some `current_en` cells are exact fragments or normalize
 dynamic values to named placeholders; `context` identifies these cases.
 
 Approve the English behavior and terminology before requesting translations of
-the remaining proposed rows. Keep already reviewed rows unchanged.
+newly inventoried rows. Keep already reviewed rows unchanged.
 An external translation AI should return the same keys/order/columns, fill only
 `zh-TW`, preserve placeholders and literal identifiers, and keep `status`
 unchanged. Human/source review promotes rows to `translation-reviewed`; a
@@ -91,9 +93,9 @@ separate keys instead of a grammatical `{action}` fragment.
 
 Existing agreed terms remain in
 [agent_ui_review_plan.md](agent_ui_review_plan.md#agreed-terminology). The
-following Desktop additions are proposals to settle before translation:
+following Desktop additions are used by the reviewed messages:
 
-| Concept | English | Proposed Traditional Chinese | Boundary |
+| Concept | English | Traditional Chinese | Boundary |
 | --- | --- | --- | --- |
 | Image of the terminal view | Screenshot | 螢幕截圖 | A PNG of the Core view; not CLI output capture. |
 | Silent video of the terminal view | Recording | 錄影 | WebM without audio; not a transcript or terminal log. |
@@ -211,6 +213,52 @@ Capture completed on 2026-09-20:
   installer acceptance was run for this batch. Capture permissions, recorder
   isolation and automatic finalization on hide/minimize/navigation are unchanged.
 
+## Setup and Core source review and evidence
+
+The batch adds 99 reviewed bilingual messages. Python prerequisites, environment
+creation consent, preparation/cancellation progress, per-mode cleanup, Core source
+management and recovery use the Desktop catalog before Core is available. Stable
+setup error codes select translated explanations; unknown codes retain the
+platform-help fallback. Original technical errors, paths, distribution names and
+commit identifiers remain data. The replaced macOS help constant was removed;
+interpreter discovery and architecture checks are unchanged.
+
+Normal Desktop calls pass the language captured at launch, so a newly saved
+preference does not change later dialogs until restart. Installer preparation
+and cleanup read the selected Windows/WSL mode profile directly; the maintenance
+profile does not override either mode. Installer-wide summary/error dialogs stay
+English for now. Their common-language policy is separate from per-mode setup.
+No OS-language inference, preference migration or installer lifecycle change was
+introduced.
+
+| Finding | Severity | Evidence | Critic remedy | Main response | Resolution | Validation |
+| --- | --- | --- | --- | --- | --- | --- |
+| Shared setup page promises not to modify a Git checkout while Git update uses that page | Medium; preexisting copy defect | `setup.html`, `manageCore`, `runPreparation` | Remove the shared Git assertion | Keep the narrower bundled-setup promise in its action-specific consent; remove it from shared progress copy | Accept | Actual page and Git/copy progress scripts checked in both locales. |
+| Maintenance exits before normal Desktop language initialization | Medium; integration requirement | `main.cjs` maintenance branch and `installer.cjs` setup/cleanup callbacks | Wire per-mode locale or explicitly defer installer UI | Read the relevant mode profile in setup/cleanup defaults; pass launch language explicitly for normal Desktop | Modify | Both Windows and WSL tests use a conflicting maintenance preference; installer ownership tests remain passing. |
+| Existing setup tests do not execute injected DOM updates | Medium; validation gap | `setup.test.cjs` original no-op renderer | Add bilingual DOM execution with literal interpolation | Capture actual initialization/progress/cancel scripts and execute them against actual HTML in Chromium | Accept | Six locale/platform cases passed, including malicious distribution text, ARIA and 700px layout. |
+| English-only button mocks do not prove localized routing | Low; validation gap | Setup and Core manager dialog fixtures | Test numeric action effects in both languages | Preserve numeric decisions and fixed action IDs; add bilingual consent, cleanup, cancellation, retry/recover and label-collision cases | Accept | Both-language action tests and retained typed error codes passed. |
+| Inherited progress-map properties can display unknown stages | Low; preexisting hardening | Original `labels[stage]` lookup | Use an own-property or supported-stage check when translating | Limit display updates to five existing stage IDs | Accept | Unknown `__proto__`, `constructor` and markup-like stages leave the display unchanged; cancellation suppresses later progress. |
+
+The focused second review found no remaining material correctness issue. The
+review changed shared copy, maintenance locale wiring and validation coverage;
+it preserved process ownership, stale-confirmation guards, no-space-freed cleanup,
+restart/session closure, reauthorization warnings and raw error details. Native
+dialog and installer-wide language qualification remain deferred until their
+explicit acceptance/implementation stages. No behavioral policy was reopened.
+
+Setup/Core source completed on 2026-09-20:
+
+- All 145 Desktop unit tests passed under Electron's Node 24.20.0 runtime.
+- Seven catalog regression tests and both generated catalog freshness checks
+  passed. The table contains 269 reviewed messages and four retired rows.
+- The real setup HTML and injected scripts passed six Chromium cases: both
+  locales on Windows, macOS and WSL display branches. Progress/cancel text,
+  language/title, ARIA, literal data, no injection, no external requests and
+  700x500 layout passed. Native dialogs and setup processes are mocked.
+- No renderer scripts/assets or permissions were added; the existing setup URL
+  allowlist and CSP are unchanged. No native GUI, real dependency installation,
+  installer build or packaged acceptance is claimed for this batch.
+
 ## Evidence and acceptance limits
 
 Browser Access/Diagnostics completed on 2026-09-20:
@@ -259,7 +307,7 @@ inspection of Capture/setup/recovery does not imply their smoke suites ran in
 this review.
 
 The review table is checked using `build_ui_messages.build_catalog` for schema,
-keys, placeholders and review gates. Only the 170 reviewed rows enter the
-Desktop runtime catalog; the remaining workflow proposals stay out of it.
+keys, placeholders and review gates. Only the 269 reviewed rows enter the
+Desktop runtime catalog; retired rows stay out of it.
 Windows/macOS native localization, installer lifecycle and packaged acceptance
 remain future work. This plan does not qualify or publish a release.

From 38861555f667f05a45ae499298d813a255349966 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sun, 20 Sep 2026 11:09:11 +0800
Subject: [PATCH 33/43] Localize port, download, installer and paste notices

## Why
Remaining native notices ignore the Desktop language, and several messages
infer more than their structured operation results establish.

## What changed
- Localize port decisions, download results, installer summaries and native
  paste confirmation through the reviewed Desktop table.
- Select the common effective installer profile language or fall back to
  English without writing a shared preference.
- Describe retained result counts, partial maintenance changes and uncertain
  download or paste completion without suggesting automatic replay.
- Preserve numeric decisions, typed states, clipboard guards, verification
  timing and installer ownership.

## Testing
All 165 Desktop unit tests and seven catalog regression tests pass. Both
catalogs are current. Bilingual fixtures cover partial uninstall, owner
loss, mixed locale preferences, port persistence timing, pathless downloads
and lost paste acknowledgments. Native GUI and packaged acceptance remain
separate.
---
 desktop/README.md                        |  10 +-
 desktop/context-paste.cjs                |  19 +-
 desktop/installer.cjs                    |  25 ++-
 desktop/main.cjs                         |  23 ++-
 desktop/messages.js                      |  64 ++++++
 desktop/port.cjs                         |  15 +-
 desktop/test/context-paste.test.cjs      |  46 ++++-
 desktop/test/installer-i18n.test.cjs     | 235 +++++++++++++++++++++++
 desktop/test/port.test.cjs               |  57 ++++++
 desktop/test/shell-notices-i18n.test.cjs |  88 +++++++++
 docs/desktop_ui_copy_review.tsv          |  32 +++
 docs/desktop_ui_review_plan.md           |  62 +++++-
 12 files changed, 623 insertions(+), 53 deletions(-)
 create mode 100644 desktop/test/installer-i18n.test.cjs
 create mode 100644 desktop/test/shell-notices-i18n.test.cjs

diff --git a/desktop/README.md b/desktop/README.md
index f4dc478..d159adc 100644
--- a/desktop/README.md
+++ b/desktop/README.md
@@ -15,10 +15,14 @@ Chinese (Taiwan) for the next launch. The preference belongs to the Desktop
 profile; Core keeps its own language setting. Saving a choice does not restart
 StandTerm or interrupt recording. Coverage includes custom menus, toolbar labels,
 Agent help, Browser Access, Diagnostics, About, external-browser confirmations
-and Capture dialogs/status, environment preparation and Core source/recovery.
+and Capture dialogs/status, environment preparation, Core source/recovery, port
+selection, Files download notices and native paste confirmation.
 Installer preparation and cleanup confirmations use the relevant mode profile's
-language. Installer-wide summary/error dialogs, port selection and Files download
-notices still use English; raw technical errors remain unchanged and native role
+language. Installer-wide summary/error dialogs use the common language of the
+selected modes, or English when they differ. Uninstall considers both Windows
+and WSL; missing or invalid preferences use the usual English fallback. This
+does not write a shared preference. Raw technical errors, early startup/legacy
+installer messages and the external installer UI remain English; native role
 labels follow the platform.
 
 Edit reviewed messages in the table, then generate the independent shell
diff --git a/desktop/context-paste.cjs b/desktop/context-paste.cjs
index e660bd6..c3ed274 100644
--- a/desktop/context-paste.cjs
+++ b/desktop/context-paste.cjs
@@ -2,8 +2,9 @@
 
 const { BrowserWindow, clipboard, dialog } = require('electron');
 const { allowedNavigation } = require('./policy.cjs');
+const { create } = require('./i18n.js');
 
-function installContextPaste(win, contents, origin, notify) {
+function installContextPaste(win, contents, origin, notify, t = create('en').t) {
   let pending = false;
   let navigation = 0;
   contents.on('did-start-navigation', (_event, _url, _inPlace, mainFrame) => {
@@ -28,24 +29,22 @@ function installContextPaste(win, contents, origin, notify) {
       const id = await frame.executeJavaScript('window.standtermUi?.contextPasteRequest()');
       if (typeof id !== 'string' || id.length > 80 || !current()) return;
       const result = await dialog.showMessageBox(win, {
-        type: 'question', title: 'Paste into StandTerm',
-        message: 'Paste clipboard text into this terminal?',
-        detail: 'This reads clipboard text once. Multi-line or large text still requires review. '
-          + 'For direct paste, use the Paste button beside the application menu.',
-        buttons: ['Cancel', 'Paste'], defaultId: 0, cancelId: 0, noLink: true,
+        type: 'question', title: t('desktop.paste.title'),
+        message: t('desktop.paste.message'), detail: t('desktop.paste.detail'),
+        buttons: [t('desktop.common.cancel'), t('desktop.paste.confirm')], defaultId: 0, cancelId: 0, noLink: true,
       });
       if (result.response !== 1) return;
       if (!current()) return;
       const valid = await frame.executeJavaScript(`window.standtermUi?.contextPasteRequest() === ${JSON.stringify(id)}`);
-      if (!valid || !current()) { await notify('Paste canceled because the target changed.', true); return; }
+      if (!valid || !current()) { await notify(t('desktop.paste.target_changed'), true); return; }
       const text = await clipboard.readText();
       if (!current()) return;
       const delivered = await frame.executeJavaScript(
         `window.standtermUi?.completeContextPaste(${JSON.stringify(id)}, ${JSON.stringify(text)})`);
-      if (!delivered) await notify('Paste canceled because the target changed.', true);
-      else if (!text) await notify('The clipboard contains no text.');
+      if (!delivered) await notify(t('desktop.paste.target_changed'), true);
+      else if (!text) await notify(t('desktop.paste.empty'));
     })().catch(async () => {
-      if (!win.isDestroyed()) await notify('Paste unavailable. Use the Paste toolbar button or your terminal paste shortcut.', true);
+      if (!win.isDestroyed()) await notify(t('desktop.paste.unconfirmed'), true);
     }).finally(() => {
       pending = false;
       callback(false);
diff --git a/desktop/installer.cjs b/desktop/installer.cjs
index 89a23a7..a352334 100644
--- a/desktop/installer.cjs
+++ b/desktop/installer.cjs
@@ -3,6 +3,8 @@
 const { spawn } = require('node:child_process');
 const path = require('node:path');
 const { shortcutPlan, applyShortcuts } = require('./installer-shortcuts.cjs');
+const { createLanguage } = require('./language.cjs');
+const { create } = require('./i18n.js');
 
 function installerRequest(argv) {
   const flags = argv.filter(value => value.startsWith('--installer-'));
@@ -91,6 +93,9 @@ async function runInstaller(request) {
   const { app, dialog, shell } = require('electron');
   const { preparePackagedBackend, cleanupManagedVenvs, stopSetup, confirmSetupQuit, modeProfile } = require('./setup.cjs');
   const { installedStore } = require('./core-source.cjs');
+  const modes = request.action === 'prepare' ? request.modes : ['windows', 'wsl'];
+  const locales = modes.map(mode => createLanguage(path.join(modeProfile(mode), 'language.json')).locale);
+  const { t } = create(locales.every(locale => locale === locales[0]) ? locales[0] : 'en');
   let exiting = false;
   const watcher = watchInstaller(request.parent, () => {
     void stopSetup().finally(() => { exiting = true; app.exit(2); });
@@ -118,23 +123,23 @@ async function runInstaller(request) {
         const detached = results.flatMap(result => result.results || []).filter(item => item.status === 'detached').length;
         const retained = results.flatMap(result => result.results || [result]).filter(item => item.status === 'retained').length;
         const unknown = results.filter(result => result.status === 'unknown').length;
-        await dialog.showMessageBox({ type: 'info', title: 'StandTerm environment cleanup',
-          message: `${detached} confirmed move(s); ${retained} retained entry/entries; ${unknown} unconfirmed environment(s).`,
-          detail: 'In-use, legacy, unverified and unavailable environments are retained. Only Windows and the configured WSL distribution were checked.\n\n'
-            + 'Recovery folders (disk space is not freed):\n%LOCALAPPDATA%\\StandTermDesktop\\venv-recovery\n'
-            + '~/.local/share/standterm-desktop/venv-recovery\n\nIf a result is unconfirmed, inspect these folders; some moves may already have completed. '
-            + 'Core, settings, captures, system Python and WSL distributions are untouched.',
-          buttons: ['Continue uninstall'] });
+        await dialog.showMessageBox({ type: 'info', title: t('desktop.installer.cleanup_title'),
+          message: t('desktop.installer.cleanup_summary', { detached, retained, unknown }),
+          detail: t('desktop.installer.cleanup_detail', {
+            windows_path: '%LOCALAPPDATA%\\StandTermDesktop\\venv-recovery',
+            wsl_path: '~/.local/share/standterm-desktop/venv-recovery',
+          }),
+          buttons: [t('desktop.installer.continue_uninstall')] });
       },
     });
     ensureAlive();
     return 0;
   } catch (error) {
     await stopSetup();
-    if (watcher.alive()) await dialog.showMessageBox({ type: 'error', title: 'StandTerm setup did not complete',
+    if (watcher.alive()) await dialog.showMessageBox({ type: 'error', title: t('desktop.installer.setup_failed_title'),
       message: error.message,
-      detail: 'Prepared environments and application files are retained. Run the installer again to retry. No terminal backend was started.',
-      buttons: ['Return to installer'] });
+      detail: t('desktop.installer.setup_failed_detail'),
+      buttons: [t('desktop.installer.return_to_installer')] });
     return error.code === 'SETUP_CANCELED' ? 2 : 1;
   } finally { exiting = true; watcher.stop(); }
 }
diff --git a/desktop/main.cjs b/desktop/main.cjs
index 2e5e391..09952a2 100644
--- a/desktop/main.cjs
+++ b/desktop/main.cjs
@@ -261,7 +261,7 @@ async function start() {
     fs.writeFileSync(settingsPath, JSON.stringify({ version: 1, port }), { flag: 'wx' });
   }
   const handoff = await startWithPort({
-    settingsPath,
+    settingsPath, t,
     launch: port => launchBackend(prepared, port), verify: verifyBackend, stop: stopBackend,
     checkHost: process.platform === 'win32' && mode === 'wsl' ? async (port, options) => {
       try { await checkHostPort(port, options); }
@@ -270,13 +270,12 @@ async function start() {
     confirm: async (port, candidate, reason) => {
       diagnostics.write('port_change', { port, candidate });
       if (smoke) { testPortChanges++; console.log(`Port smoke: approved replacement ${port} -> ${candidate} (${reason || 'backend_address_in_use'}).`); return 'remember'; }
-      const problem = reason === 'host_permission_denied' ? 'is reserved or denied by Windows'
-        : reason === 'host_address_in_use' ? 'is already in use on Windows' : 'is already in use';
+      const message = reason === 'host_permission_denied' ? 'desktop.port.confirm_permission'
+        : reason === 'host_address_in_use' ? 'desktop.port.confirm_host_in_use' : 'desktop.port.confirm_in_use';
       const answer = await dialog.showMessageBox({ type: 'question', title: MODES[mode],
-        message: `Port ${port} ${problem}. Use port ${candidate}?`,
-        detail: 'No existing service will be stopped or reused. Changing the port changes the browser origin; '
-          + 'browser settings and SSH keys are not migrated. Windows and WSL remember their ports separately.',
-        buttons: ['Cancel', 'Use once', 'Use and remember'], defaultId: 0, cancelId: 0, noLink: true });
+        message: t(message, { port, candidate }), detail: t('desktop.port.change_detail'),
+        buttons: [t('desktop.common.cancel'), t('desktop.port.use_once'), t('desktop.port.use_and_remember')],
+        defaultId: 0, cancelId: 0, noLink: true });
       return ['cancel', 'once', 'remember'][answer.response];
     },
     notify: message => smoke ? console.warn(message) : dialog.showMessageBox({ type: 'warning', title: MODES[mode], message }),
@@ -344,7 +343,7 @@ async function start() {
     } } : {}),
   });
   toolbar = installToolbar(win, coreView, capture, commands, language.locale);
-  installContextPaste(win, contents, handoff.origin, toolbar.notify);
+  installContextPaste(win, contents, handoff.origin, toolbar.notify, t);
   const browserAccess = createBrowserAccess({ origin: handoff.origin, session: desktopSession, launcherToken,
     t,
     available: () => !win.isDestroyed() && !contents.isDestroyed() && allowedNavigation(contents.getURL(), handoff.origin),
@@ -460,10 +459,10 @@ async function start() {
   installFloatingWindows(win, handoff.origin, openExternal, contents, (result, owner) => {
     const completed = result.state === 'completed' && !!result.path;
     void dialog.showMessageBox(owner, {
-      type: completed ? 'info' : 'warning', title: 'Files download',
-      message: completed ? 'Download complete' : 'Download did not complete',
-      detail: completed ? `Saved to:\n${result.path}` : 'The connection was interrupted. Retry the download from Files.',
-      buttons: completed ? ['Close', 'Show in folder'] : ['Close'],
+      type: completed ? 'info' : 'warning', title: t('desktop.download.title'),
+      message: t(completed ? 'desktop.download.complete' : 'desktop.download.incomplete'),
+      detail: completed ? t('desktop.download.saved_to', { path: result.path }) : t('desktop.download.retry'),
+      buttons: completed ? [t('desktop.download.close'), t('desktop.download.show_in_folder')] : [t('desktop.download.close')],
       defaultId: 0, cancelId: 0, noLink: true,
     }).then(answer => {
       if (completed && answer.response === 1) shell.showItemInFolder(result.path);
diff --git a/desktop/messages.js b/desktop/messages.js
index 12a3113..be084bc 100644
--- a/desktop/messages.js
+++ b/desktop/messages.js
@@ -157,12 +157,26 @@
         "desktop.diagnostics.web_settings_persistent": "Web settings: saved per origin (same as Core)",
         "desktop.diagnostics.web_settings_temporary": "Web settings: temporary test profile",
         "desktop.diagnostics.window_title": "StandTerm Desktop - Diagnostics",
+        "desktop.download.close": "Close",
+        "desktop.download.complete": "Download complete",
+        "desktop.download.incomplete": "Download completion could not be confirmed.",
+        "desktop.download.retry": "Check the download destination before downloading again.",
+        "desktop.download.saved_to": "Saved to:\n{path}",
+        "desktop.download.show_in_folder": "Show in folder",
+        "desktop.download.title": "Files download",
         "desktop.external_browser.detail": "{url}\n\nThe browser uses its own login. StandTerm does not add its token or cookies.",
         "desktop.external_browser.failed": "Could not open the default browser.",
         "desktop.external_browser.failure_hint": "Check the default HTTP/HTTPS browser in your operating system settings.",
         "desktop.external_browser.message": "Open {host} in your default browser?",
         "desktop.external_browser.open": "Open in browser",
         "desktop.external_browser.title": "Open in default browser",
+        "desktop.installer.cleanup_detail": "Cleanup is limited to Windows and the configured WSL distribution. In-use, legacy, unverified and unavailable environments are retained. A retained result may represent one item or an entire mode.\n\nRecovery folders (disk space is not freed):\n{windows_path}\n{wsl_path}\n\nFor unconfirmed results, inspect these folders; some moves may already have completed. This cleanup leaves Core, settings, captures, system Python and WSL distributions unchanged.",
+        "desktop.installer.cleanup_summary": "Confirmed moves: {detached}; retained results: {retained}; modes with unconfirmed results: {unknown}.",
+        "desktop.installer.cleanup_title": "StandTerm environment cleanup",
+        "desktop.installer.continue_uninstall": "Continue uninstall",
+        "desktop.installer.return_to_installer": "Return to installer",
+        "desktop.installer.setup_failed_detail": "Some environment preparation, moves to recovery, or shortcut changes may already have completed. Completed changes are not automatically undone. Check venv-recovery before retrying with the installer. No terminal backend was started.",
+        "desktop.installer.setup_failed_title": "StandTerm operation did not complete",
         "desktop.language.choose": "Choose the Desktop language for the next launch.",
         "desktop.language.detail": "Saved choice: {language}\n\nCore has its own language setting. Some Desktop text remains in English.",
         "desktop.language.failed": "Could not confirm the language setting. Reopen Desktop language to check the saved choice.",
@@ -185,6 +199,24 @@
         "desktop.menu.quit": "Quit StandTerm",
         "desktop.menu.settings": "Settings...",
         "desktop.menu.show": "Show window",
+        "desktop.paste.confirm": "Paste",
+        "desktop.paste.detail": "This reads clipboard text once. Multi-line or large text still requires review. For direct paste, use the Paste button beside the application menu.",
+        "desktop.paste.empty": "The clipboard contains no text.",
+        "desktop.paste.message": "Paste clipboard text into this terminal?",
+        "desktop.paste.target_changed": "Paste canceled because the target changed.",
+        "desktop.paste.title": "Paste into StandTerm",
+        "desktop.paste.unconfirmed": "Could not confirm the paste result. Check the terminal before pasting again.",
+        "desktop.port.change_detail": "Existing services will keep running and will not be reused. Changing the port changes the browser origin; browser settings and SSH keys are not migrated. Windows and WSL remember their ports separately.",
+        "desktop.port.confirm_host_in_use": "Port {port} is already in use on Windows. Use port {candidate}?",
+        "desktop.port.confirm_in_use": "Port {port} is already in use. Use port {candidate}?",
+        "desktop.port.confirm_permission": "Windows reserves port {port} or denies access to it. Use port {candidate}?",
+        "desktop.port.no_candidate": "Port {port} is in use and no automatic port is available.",
+        "desktop.port.no_host_port": "No usable Windows/WSL loopback port was found. The saved port was not changed.",
+        "desktop.port.save_failed": "Port {port} passed verification, but its setting could not be saved.",
+        "desktop.port.saved_read_failed": "Could not read the saved desktop port. Selecting an automatic port.",
+        "desktop.port.startup_canceled": "Desktop startup canceled. The saved port was not changed.",
+        "desktop.port.use_and_remember": "Use and remember",
+        "desktop.port.use_once": "Use once",
         "desktop.setup.cancel_detail": "Keep this window open or minimize it to continue. Canceling stops this setup\u2019s installation processes and keeps prepared files. Relaunch StandTerm to try again.",
         "desktop.setup.cancel_message": "The Python environment is still being prepared.",
         "desktop.setup.cancel_setup": "Cancel setup",
@@ -428,12 +460,26 @@
         "desktop.diagnostics.web_settings_persistent": "\u7db2\u9801\u8a2d\u5b9a\uff1a\u4f9d\u4f86\u6e90\u5132\u5b58\uff08\u8207 Core \u76f8\u540c\uff09",
         "desktop.diagnostics.web_settings_temporary": "\u7db2\u9801\u8a2d\u5b9a\uff1a\u66ab\u5b58\u6e2c\u8a66\u8a2d\u5b9a\u6a94",
         "desktop.diagnostics.window_title": "StandTerm Desktop - \u8a3a\u65b7",
+        "desktop.download.close": "\u95dc\u9589",
+        "desktop.download.complete": "\u4e0b\u8f09\u5b8c\u6210",
+        "desktop.download.incomplete": "\u7121\u6cd5\u78ba\u8a8d\u4e0b\u8f09\u5df2\u5b8c\u6210\u3002",
+        "desktop.download.retry": "\u518d\u6b21\u4e0b\u8f09\u524d\uff0c\u8acb\u5148\u6aa2\u67e5\u4e0b\u8f09\u76ee\u7684\u5730\u3002",
+        "desktop.download.saved_to": "\u5df2\u5132\u5b58\u81f3\uff1a\n{path}",
+        "desktop.download.show_in_folder": "\u5728\u8cc7\u6599\u593e\u4e2d\u986f\u793a",
+        "desktop.download.title": "\u6a94\u6848\u4e0b\u8f09",
         "desktop.external_browser.detail": "{url}\n\n\u700f\u89bd\u5668\u4f7f\u7528\u81ea\u5df1\u7684\u767b\u5165\u72c0\u614b\u3002StandTerm \u4e0d\u6703\u52a0\u5165\u81ea\u5df1\u7684\u6b0a\u6756\u6216 Cookie\u3002",
         "desktop.external_browser.failed": "\u7121\u6cd5\u958b\u555f\u9810\u8a2d\u700f\u89bd\u5668\u3002",
         "desktop.external_browser.failure_hint": "\u8acb\u5728\u4f5c\u696d\u7cfb\u7d71\u8a2d\u5b9a\u4e2d\u6aa2\u67e5 HTTP\uff0fHTTPS \u7684\u9810\u8a2d\u700f\u89bd\u5668\u3002",
         "desktop.external_browser.message": "\u8981\u5728\u9810\u8a2d\u700f\u89bd\u5668\u958b\u555f {host} \u55ce\uff1f",
         "desktop.external_browser.open": "\u5728\u700f\u89bd\u5668\u958b\u555f",
         "desktop.external_browser.title": "\u5728\u9810\u8a2d\u700f\u89bd\u5668\u958b\u555f",
+        "desktop.installer.cleanup_detail": "\u6e05\u7406\u7bc4\u570d\u50c5\u9650 Windows \u8207\u5df2\u8a2d\u5b9a\u7684 WSL \u767c\u884c\u7248\u3002\u4f7f\u7528\u4e2d\u3001\u820a\u7248\u3001\u672a\u901a\u904e\u9a57\u8b49\u6216\u7121\u6cd5\u5b58\u53d6\u7684\u74b0\u5883\u6703\u4fdd\u7559\u3002\u4e00\u7b46\u4fdd\u7559\u7d50\u679c\u53ef\u80fd\u4ee3\u8868\u55ae\u4e00\u9805\u76ee\u6216\u6574\u500b\u57f7\u884c\u6a21\u5f0f\u3002\n\n\u5fa9\u539f\u8cc7\u6599\u593e\uff08\u4e0d\u6703\u91cb\u653e\u78c1\u789f\u7a7a\u9593\uff09\uff1a\n{windows_path}\n{wsl_path}\n\n\u82e5\u7d50\u679c\u672a\u78ba\u8a8d\uff0c\u8acb\u6aa2\u67e5\u9019\u4e9b\u8cc7\u6599\u593e\uff1b\u90e8\u5206\u79fb\u52d5\u53ef\u80fd\u5df2\u5b8c\u6210\u3002\u6b64\u6e05\u7406\u4e0d\u6703\u8b8a\u66f4 Core\u3001\u8a2d\u5b9a\u3001\u64f7\u53d6\u6a94\u6848\u3001\u7cfb\u7d71 Python \u6216 WSL \u767c\u884c\u7248\u3002",
+        "desktop.installer.cleanup_summary": "\u5df2\u78ba\u8a8d\u79fb\u52d5\uff1a{detached}\uff1b\u4fdd\u7559\u7d50\u679c\uff1a{retained}\uff1b\u7d50\u679c\u672a\u78ba\u8a8d\u7684\u57f7\u884c\u6a21\u5f0f\uff1a{unknown}\u3002",
+        "desktop.installer.cleanup_title": "StandTerm \u74b0\u5883\u6e05\u7406",
+        "desktop.installer.continue_uninstall": "\u7e7c\u7e8c\u89e3\u9664\u5b89\u88dd",
+        "desktop.installer.return_to_installer": "\u8fd4\u56de\u5b89\u88dd\u7a0b\u5f0f",
+        "desktop.installer.setup_failed_detail": "\u90e8\u5206\u74b0\u5883\u6e96\u5099\u3001\u79fb\u81f3\u5fa9\u539f\u8cc7\u6599\u593e\u6216\u6377\u5f91\u8b8a\u66f4\u53ef\u80fd\u5df2\u5b8c\u6210\u3002\u5df2\u5b8c\u6210\u7684\u8b8a\u66f4\u4e0d\u6703\u81ea\u52d5\u9084\u539f\u3002\u8acb\u5148\u6aa2\u67e5 venv-recovery\uff0c\u518d\u900f\u904e\u5b89\u88dd\u7a0b\u5f0f\u91cd\u8a66\u3002\u672a\u555f\u52d5\u7d42\u7aef\u5f8c\u7aef\u3002",
+        "desktop.installer.setup_failed_title": "StandTerm \u64cd\u4f5c\u672a\u5b8c\u6210",
         "desktop.language.choose": "\u9078\u64c7\u4e0b\u6b21\u555f\u52d5\u6642\u4f7f\u7528\u7684 Desktop \u8a9e\u7cfb\u3002",
         "desktop.language.detail": "\u5df2\u5132\u5b58\u7684\u9078\u64c7\uff1a{language}\n\nCore \u7684\u8a9e\u7cfb\u9700\u53e6\u5916\u8a2d\u5b9a\u3002\u90e8\u5206 Desktop \u6587\u5b57\u4ecd\u4f7f\u7528\u82f1\u6587\u3002",
         "desktop.language.failed": "\u7121\u6cd5\u78ba\u8a8d\u8a9e\u7cfb\u8a2d\u5b9a\u3002\u8acb\u91cd\u65b0\u958b\u555f\u300cDesktop \u8a9e\u7cfb\u300d\u67e5\u770b\u5df2\u5132\u5b58\u7684\u9078\u64c7\u3002",
@@ -456,6 +502,24 @@
         "desktop.menu.quit": "\u7d50\u675f StandTerm",
         "desktop.menu.settings": "\u8a2d\u5b9a\u2026",
         "desktop.menu.show": "\u986f\u793a\u8996\u7a97",
+        "desktop.paste.confirm": "\u8cbc\u4e0a",
+        "desktop.paste.detail": "\u9019\u6703\u8b80\u53d6\u526a\u8cbc\u7c3f\u6587\u5b57\u4e00\u6b21\u3002\u591a\u884c\u6216\u5927\u91cf\u6587\u5b57\u4ecd\u9808\u78ba\u8a8d\u3002\u82e5\u8981\u76f4\u63a5\u8cbc\u4e0a\uff0c\u8acb\u4f7f\u7528\u61c9\u7528\u7a0b\u5f0f\u9078\u55ae\u65c1\u7684\u300c\u8cbc\u4e0a\u300d\u6309\u9215\u3002",
+        "desktop.paste.empty": "\u526a\u8cbc\u7c3f\u6c92\u6709\u6587\u5b57\u3002",
+        "desktop.paste.message": "\u8981\u5c07\u526a\u8cbc\u7c3f\u6587\u5b57\u8cbc\u4e0a\u81f3\u6b64\u7d42\u7aef\u55ce\uff1f",
+        "desktop.paste.target_changed": "\u8cbc\u4e0a\u76ee\u6a19\u5df2\u8b8a\u66f4\uff0c\u56e0\u6b64\u53d6\u6d88\u8cbc\u4e0a\u3002",
+        "desktop.paste.title": "\u8cbc\u4e0a\u81f3 StandTerm",
+        "desktop.paste.unconfirmed": "\u7121\u6cd5\u78ba\u8a8d\u8cbc\u4e0a\u7d50\u679c\u3002\u518d\u6b21\u8cbc\u4e0a\u524d\uff0c\u8acb\u5148\u6aa2\u67e5\u7d42\u7aef\u3002",
+        "desktop.port.change_detail": "\u73fe\u6709\u670d\u52d9\u6703\u7e7c\u7e8c\u57f7\u884c\uff0c\u4e5f\u4e0d\u6703\u88ab\u91cd\u7528\u3002\u8b8a\u66f4\u9023\u63a5\u57e0\u6703\u6539\u8b8a\u700f\u89bd\u5668\u4f86\u6e90\uff1b\u700f\u89bd\u5668\u8a2d\u5b9a\u8207 SSH \u91d1\u9470\u4e0d\u6703\u79fb\u8f49\u3002Windows \u8207 WSL \u5206\u5225\u8a18\u4f4f\u5404\u81ea\u7684\u9023\u63a5\u57e0\u3002",
+        "desktop.port.confirm_host_in_use": "Windows \u4e0a\u7684\u9023\u63a5\u57e0 {port} \u5df2\u88ab\u4f7f\u7528\u3002\u8981\u6539\u7528\u9023\u63a5\u57e0 {candidate} \u55ce\uff1f",
+        "desktop.port.confirm_in_use": "\u9023\u63a5\u57e0 {port} \u5df2\u88ab\u4f7f\u7528\u3002\u8981\u6539\u7528\u9023\u63a5\u57e0 {candidate} \u55ce\uff1f",
+        "desktop.port.confirm_permission": "Windows \u4fdd\u7559\u4e86\u9023\u63a5\u57e0 {port}\uff0c\u6216\u62d2\u7d55\u5b58\u53d6\u3002\u8981\u6539\u7528\u9023\u63a5\u57e0 {candidate} \u55ce\uff1f",
+        "desktop.port.no_candidate": "\u9023\u63a5\u57e0 {port} \u5df2\u88ab\u4f7f\u7528\uff0c\u4e14\u6c92\u6709\u53ef\u81ea\u52d5\u9078\u7528\u7684\u9023\u63a5\u57e0\u3002",
+        "desktop.port.no_host_port": "\u627e\u4e0d\u5230\u53ef\u7528\u7684 Windows\uff0fWSL \u672c\u6a5f\u56de\u9001\u9023\u63a5\u57e0\u3002\u5df2\u5132\u5b58\u7684\u9023\u63a5\u57e0\u8a2d\u5b9a\u672a\u8b8a\u66f4\u3002",
+        "desktop.port.save_failed": "\u9023\u63a5\u57e0 {port} \u5df2\u901a\u904e\u9a57\u8b49\uff0c\u4f46\u7121\u6cd5\u5132\u5b58\u5176\u8a2d\u5b9a\u3002",
+        "desktop.port.saved_read_failed": "\u7121\u6cd5\u8b80\u53d6\u5df2\u5132\u5b58\u7684 Desktop \u9023\u63a5\u57e0\u8a2d\u5b9a\uff0c\u5c07\u81ea\u52d5\u9078\u64c7\u9023\u63a5\u57e0\u3002",
+        "desktop.port.startup_canceled": "\u5df2\u53d6\u6d88\u555f\u52d5 Desktop\u3002\u5df2\u5132\u5b58\u7684\u9023\u63a5\u57e0\u8a2d\u5b9a\u672a\u8b8a\u66f4\u3002",
+        "desktop.port.use_and_remember": "\u4f7f\u7528\u4e26\u8a18\u4f4f",
+        "desktop.port.use_once": "\u50c5\u672c\u6b21\u4f7f\u7528",
         "desktop.setup.cancel_detail": "\u4fdd\u6301\u6b64\u8996\u7a97\u958b\u555f\u6216\u6700\u5c0f\u5316\u5373\u53ef\u7e7c\u7e8c\u3002\u53d6\u6d88\u6703\u505c\u6b62\u6b64\u6b21\u5b89\u88dd\u7684\u8655\u7406\u7a0b\u5e8f\uff0c\u4e26\u4fdd\u7559\u5df2\u6e96\u5099\u7684\u6a94\u6848\u3002\u8acb\u91cd\u65b0\u555f\u52d5 StandTerm \u4ee5\u91cd\u8a66\u3002",
         "desktop.setup.cancel_message": "Python \u74b0\u5883\u4ecd\u5728\u6e96\u5099\u4e2d\u3002",
         "desktop.setup.cancel_setup": "\u53d6\u6d88\u6e96\u5099",
diff --git a/desktop/port.cjs b/desktop/port.cjs
index 47c0302..1db73c8 100644
--- a/desktop/port.cjs
+++ b/desktop/port.cjs
@@ -4,6 +4,7 @@ const fs = require('node:fs/promises');
 const path = require('node:path');
 const { randomUUID } = require('node:crypto');
 const net = require('node:net');
+const { create } = require('./i18n.js');
 
 const validPort = value => Number.isInteger(value) && value >= 1 && value <= 65535;
 const HOST_PORT_ATTEMPTS = 20;
@@ -42,14 +43,14 @@ function parsePortConflict(line, requestedPort) {
   });
 }
 
-async function startWithPort({ settingsPath, launch, verify, stop, confirm, notify, checkHost }) {
+async function startWithPort({ settingsPath, launch, verify, stop, confirm, notify, checkHost, t = create('en').t }) {
   let savedPort;
   try {
     const settings = JSON.parse(await fs.readFile(settingsPath, 'utf8'));
     if (settings.version !== 1 || !validPort(settings.port)) throw new Error('Invalid port settings.');
     savedPort = settings.port;
   } catch (error) {
-    if (error.code !== 'ENOENT') await notify('Could not read the saved desktop port. Selecting an automatic port.');
+    if (error.code !== 'ENOENT') await notify(t('desktop.port.saved_read_failed'));
   }
   let port = savedPort ?? 0;
   let remember = true;
@@ -68,7 +69,7 @@ async function startWithPort({ settingsPath, launch, verify, stop, confirm, noti
     } catch (error) {
       await stop();
       if (checkHost && error.code === 'HOST_PORT_UNAVAILABLE') {
-        if (++hostAttempts >= HOST_PORT_ATTEMPTS) throw new Error('No usable Windows/WSL loopback port was found. The saved port was not changed.');
+        if (++hostAttempts >= HOST_PORT_ATTEMPTS) throw new Error(t('desktop.port.no_host_port'));
         if (port && !pendingChange) pendingChange = { port, reason: error.reason };
         // Core still selects candidates using its service exclusions and real
         // binding. Do not replace that policy with an unchecked host-only port.
@@ -76,10 +77,10 @@ async function startWithPort({ settingsPath, launch, verify, stop, confirm, noti
         continue;
       }
       if (error.code !== 'PORT_IN_USE') throw error;
-      if (error.suggestedPort === null) throw new Error(`Port ${port} is in use and no automatic port is available.`);
+      if (error.suggestedPort === null) throw new Error(t('desktop.port.no_candidate', { port }));
       const choice = await confirm(port, error.suggestedPort);
       if (!['once', 'remember'].includes(choice)) {
-        throw Object.assign(new Error('Desktop startup canceled. The saved port was not changed.'), { code: 'SETUP_CANCELED' });
+        throw Object.assign(new Error(t('desktop.port.startup_canceled')), { code: 'SETUP_CANCELED' });
       }
       port = error.suggestedPort;
       remember = choice === 'remember';
@@ -91,7 +92,7 @@ async function startWithPort({ settingsPath, launch, verify, stop, confirm, noti
       catch (error) { await stop(); throw error; }
       if (!['once', 'remember'].includes(choice)) {
         await stop();
-        throw Object.assign(new Error('Desktop startup canceled. The saved port was not changed.'), { code: 'SETUP_CANCELED' });
+        throw Object.assign(new Error(t('desktop.port.startup_canceled')), { code: 'SETUP_CANCELED' });
       }
       remember = choice === 'remember';
     }
@@ -104,7 +105,7 @@ async function startWithPort({ settingsPath, launch, verify, stop, confirm, noti
         await fs.writeFile(temporary, JSON.stringify({ version: 1, port }, null, 2) + '\n', { flag: 'wx', mode: 0o600 });
         await fs.rename(temporary, settingsPath);
       } catch {
-        await notify(`Port ${port} is active, but could not be saved. This launch will continue.`);
+        await notify(t('desktop.port.save_failed', { port }));
       } finally {
         await fs.unlink(temporary).catch(() => {});
       }
diff --git a/desktop/test/context-paste.test.cjs b/desktop/test/context-paste.test.cjs
index 7ab953a..313b56a 100644
--- a/desktop/test/context-paste.test.cjs
+++ b/desktop/test/context-paste.test.cjs
@@ -7,11 +7,12 @@ const path = require('node:path');
 const vm = require('node:vm');
 const { EventEmitter } = require('node:events');
 const { allowedNavigation } = require('../policy.cjs');
+const { create } = require('../i18n.js');
 
 const origin = 'http://127.0.0.1:64487';
 const deferred = () => { let resolve; const promise = new Promise(done => { resolve = done; }); return { promise, resolve }; };
 const tick = () => new Promise(resolve => setImmediate(resolve));
-function fixture() {
+function fixture(locale = 'en') {
   const consent = deferred(), read = deferred(), notices = [], scripts = [], callbacks = [];
   const state = { focused: true, visible: true, minimized: false, destroyed: false, loading: false,
     url: origin + '/', target: 'fixture-request', prompts: 0, reads: 0, delivered: true };
@@ -27,13 +28,13 @@ function fixture() {
   Object.assign(contents, { mainFrame: frame, isDestroyed: () => state.destroyed, getURL: () => state.url,
     isLoadingMainFrame: () => state.loading, session: { setPermissionRequestHandler: fn => { handler = fn; } } });
   const electron = { BrowserWindow: { getFocusedWindow: () => state.focused ? win : null },
-    dialog: { showMessageBox: () => { state.prompts++; return consent.promise; } },
+    dialog: { showMessageBox: (_owner, options) => { state.prompts++; state.dialog = options; return consent.promise; } },
     clipboard: { readText: () => { state.reads++; return read.promise; } } };
   const api = { exports: {} };
   vm.runInNewContext(fs.readFileSync(path.join(__dirname, '..', 'context-paste.cjs'), 'utf8'), {
-    require: name => name === 'electron' ? electron : { allowedNavigation }, module: api,
+    require: name => name === 'electron' ? electron : name === './i18n.js' ? { create } : { allowedNavigation }, module: api,
   });
-  api.exports.installContextPaste(win, contents, origin, async value => notices.push(value));
+  api.exports.installContextPaste(win, contents, origin, async value => notices.push(value), create(locale).t);
   return { state, consent, read, contents, scripts, callbacks, notices,
     request: (permission = 'clipboard-read', requester = contents, details = { isMainFrame: true, requestingUrl: state.url }) =>
       new Promise(resolve => handler(requester, permission, value => { callbacks.push(value); resolve(value); }, details)),
@@ -102,3 +103,40 @@ test('renderer failures deny exactly once, report no private data and clear pend
   assert.equal(f.notices.length, 2);
   assert.ok(f.notices.every(value => !value.includes('private fixture')));
 });
+
+test('both paste languages preserve explicit consent, one read and stale-target denial', async () => {
+  for (const locale of ['en', 'zh-TW']) for (const phase of ['cancel', 'paste', 'stale', 'empty']) {
+    const f = fixture(locale), { t } = create(locale);
+    const result = f.request(); await tick();
+    assert.equal(f.state.dialog.message, t('desktop.paste.message'));
+    assert.deepEqual(Array.from(f.state.dialog.buttons), [t('desktop.common.cancel'), t('desktop.paste.confirm')]);
+    assert.equal(f.state.dialog.defaultId, 0);
+    assert.equal(f.state.dialog.cancelId, 0);
+    if (phase === 'stale') f.state.target = 'other';
+    f.consent.resolve({ response: phase === 'cancel' ? 0 : 1 }); await tick();
+    f.read.resolve(phase === 'empty' ? '' : 'literal {text} <data>');
+    assert.equal(await result, false, 'renderer clipboard permission is always denied');
+    assert.equal(f.state.reads, ['paste', 'empty'].includes(phase) ? 1 : 0);
+    assert.equal(f.scripts.filter(code => code.includes('completeContextPaste')).length, ['paste', 'empty'].includes(phase) ? 1 : 0);
+    assert.deepEqual(f.notices, phase === 'stale' ? [t('desktop.paste.target_changed')]
+      : phase === 'empty' ? [t('desktop.paste.empty')] : []);
+  }
+});
+
+test('lost paste delivery acknowledgment reports uncertainty without reading or delivering twice', async () => {
+  for (const locale of ['en', 'zh-TW']) {
+    const f = fixture(locale);
+    const original = f.contents.mainFrame.executeJavaScript;
+    f.contents.mainFrame.executeJavaScript = async code => {
+      const value = await original(code);
+      if (code.includes('completeContextPaste')) throw new Error('Private delivery acknowledgment failure');
+      return value;
+    };
+    const result = f.request(); await tick();
+    f.consent.resolve({ response: 1 }); await tick(); f.read.resolve('private clipboard text');
+    assert.equal(await result, false);
+    assert.equal(f.state.reads, 1);
+    assert.equal(f.scripts.filter(code => code.includes('completeContextPaste')).length, 1);
+    assert.deepEqual(f.notices, [create(locale).t('desktop.paste.unconfirmed')]);
+  }
+});
diff --git a/desktop/test/installer-i18n.test.cjs b/desktop/test/installer-i18n.test.cjs
new file mode 100644
index 0000000..5989ca7
--- /dev/null
+++ b/desktop/test/installer-i18n.test.cjs
@@ -0,0 +1,235 @@
+'use strict';
+
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const vm = require('node:vm');
+const { EventEmitter } = require('node:events');
+const { create } = require('../i18n.js');
+const { createLanguage } = require('../language.cjs');
+
+function fixture(testContext, preferences = {}, options = {}) {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'standterm-installer-i18n-'));
+  testContext.after(() => fs.rmSync(root, { recursive: true, force: true }));
+  const profiles = Object.fromEntries(['windows', 'wsl'].map(mode => [mode, path.join(root, mode)]));
+  for (const [mode, value] of Object.entries(preferences)) {
+    fs.mkdirSync(profiles[mode], { recursive: true });
+    fs.writeFileSync(path.join(profiles[mode], 'language.json'),
+      typeof value === 'string' ? value : JSON.stringify(value));
+  }
+  const snapshot = () => Object.fromEntries(Object.entries(profiles).map(([mode, directory]) => [mode,
+    fs.existsSync(directory) ? fs.readdirSync(directory).map(name => [name, fs.readFileSync(path.join(directory, name), 'utf8')]) : null]));
+  const initialPreferences = snapshot();
+  const calls = { dialogs: [], events: [], exit: [], stopSetup: 0, watcherKills: 0, launches: [] };
+  const app = new EventEmitter();
+  Object.assign(app, { getVersion: () => 'test-version', getPath: name => path.join(root, name),
+    exit: code => calls.exit.push(code) });
+  let watcher;
+  const modules = {
+    electron: { app, shell: {}, dialog: { showMessageBox: async settings => {
+      calls.dialogs.push(settings); return { response: 0 };
+    } } },
+    'node:child_process': { spawn: (executable, args, launchOptions) => {
+      calls.launches.push({ executable, args, options: launchOptions });
+      watcher = new EventEmitter();
+      watcher.stdout = new EventEmitter();
+      watcher.kill = () => { calls.watcherKills++; watcher.emit('exit', 0); };
+      queueMicrotask(() => watcher.stdout.emit('data', Buffer.from('{"type":"parent_ready"}\n')));
+      return watcher;
+    } },
+    './language.cjs': { createLanguage },
+    './i18n.js': require('../i18n.js'),
+    './setup.cjs': {
+      modeProfile: mode => profiles[mode],
+      preparePackagedBackend: async (mode, settings) => {
+        assert.equal(settings.installer, true);
+        calls.events.push(`prepare:${mode}`);
+        await options.prepare?.(mode);
+      },
+      cleanupManagedVenvs: async mode => {
+        calls.events.push(`cleanup:${mode}`);
+        return options.cleanup ? options.cleanup(mode) : { mode, status: 'retained' };
+      },
+      stopSetup: async () => { calls.stopSetup++; },
+      confirmSetupQuit: async () => false,
+    },
+    './core-source.cjs': { installedStore: async (profile, resources, version) => {
+      assert.equal(resources, path.join(root, 'resources'));
+      assert.equal(version, 'test-version');
+      const mode = Object.keys(profiles).find(key => profiles[key] === profile);
+      assert.ok(mode);
+      return { reset: async () => { calls.events.push(`reset:${mode}`); } };
+    } },
+    './installer-shortcuts.cjs': {
+      shortcutPlan: (_executable, _desktop, _programs, selected) => Array.from(selected),
+      applyShortcuts: async (_shell, selected) => {
+        calls.events.push(`shortcuts:${selected.join(',')}`);
+        await options.shortcuts?.(selected);
+      },
+    },
+  };
+  const exported = { exports: {} };
+  vm.runInNewContext(fs.readFileSync(path.join(__dirname, '..', 'installer.cjs'), 'utf8'), {
+    module: exported, exports: exported.exports, Buffer, setTimeout, clearTimeout,
+    process: { env: {}, resourcesPath: path.join(root, 'resources'), execPath: path.join(root, 'StandTermDesktop.exe') },
+    require: name => {
+      if (Object.hasOwn(modules, name)) return modules[name];
+      if (name === 'node:path') return path;
+      throw new Error(`Unexpected installer dependency: ${name}`);
+    },
+  }, { filename: 'installer.cjs' });
+  return { calls,
+    run: request => exported.exports.runInstaller({ parent: 123, modes: [], ...request }),
+    loseWatcher: () => watcher.emit('exit', 0),
+    assertUnchanged: () => assert.deepEqual(snapshot(), initialPreferences),
+  };
+}
+
+const preference = locale => ({ version: 1, locale });
+const rawError = 'Failed at C:\\User {retained}\\core: permission denied <details>';
+
+for (const locale of ['en', 'zh-TW']) {
+  test(`installer cleanup summary uses ${locale} and preserves separate result counts and recovery paths`, async context => {
+    const f = fixture(context, { windows: preference(locale), wsl: preference(locale) }, {
+      cleanup: mode => mode === 'windows'
+        ? { mode, status: 'checked', results: [{ status: 'detached' }, { status: 'detached' }, { status: 'retained' }] }
+        : { mode, status: 'retained' },
+    });
+    assert.equal(await f.run({ action: 'uninstall', cleanup: true }), 0);
+    const [dialog] = f.calls.dialogs;
+    const { t } = create(locale);
+    assert.notEqual(t('desktop.installer.cleanup_title'), 'desktop.installer.cleanup_title');
+    assert.equal(dialog.title, t('desktop.installer.cleanup_title'));
+    assert.equal(dialog.message, t('desktop.installer.cleanup_summary', { detached: 2, retained: 2, unknown: 0 }));
+    assert.ok(dialog.detail.includes('%LOCALAPPDATA%\\StandTermDesktop\\venv-recovery'));
+    assert.ok(dialog.detail.includes('~/.local/share/standterm-desktop/venv-recovery'));
+    assert.deepEqual(Array.from(dialog.buttons), [t('desktop.installer.continue_uninstall')]);
+    assert.deepEqual(f.calls.events, ['cleanup:windows', 'cleanup:wsl', 'shortcuts:']);
+    assert.equal(f.calls.dialogs.length, 1);
+    assert.equal(f.calls.launches.length, 1);
+    assert.match(f.calls.launches[0].executable, /powershell\.exe$/);
+    assert.equal(f.calls.launches[0].options.shell, false);
+    assert.equal(f.calls.watcherKills, 1);
+    assert.deepEqual(f.calls.exit, []);
+    f.assertUnchanged();
+  });
+
+  test(`installer setup failure uses ${locale} while preserving the original error and source reset order`, async context => {
+    const f = fixture(context, { windows: preference(locale), wsl: preference(locale) }, {
+      prepare: async mode => { if (mode === 'wsl') throw new Error(rawError); },
+    });
+    assert.equal(await f.run({ action: 'prepare', modes: ['windows', 'wsl'] }), 1);
+    const [dialog] = f.calls.dialogs;
+    const { t } = create(locale);
+    assert.equal(dialog.title, t('desktop.installer.setup_failed_title'));
+    assert.equal(dialog.message, rawError);
+    assert.equal(dialog.detail, t('desktop.installer.setup_failed_detail'));
+    assert.deepEqual(Array.from(dialog.buttons), [t('desktop.installer.return_to_installer')]);
+    assert.deepEqual(f.calls.events, ['prepare:windows', 'reset:windows', 'prepare:wsl']);
+    assert.equal(f.calls.stopSetup, 1);
+    assert.equal(f.calls.dialogs.length, 1);
+    f.assertUnchanged();
+  });
+}
+
+test('installer summary falls back to English for mixed, missing or invalid profile preferences without writing them', async context => {
+  for (const preferences of [
+    { windows: preference('zh-TW'), wsl: preference('en') },
+    { windows: preference('zh-TW') },
+    { windows: preference('zh-TW'), wsl: '{malformed' },
+    { windows: preference('zh-TW'), wsl: preference('zh-CN') },
+    { windows: preference('zh-TW'), wsl: { version: 99, locale: 'zh-TW' } },
+    {},
+  ]) {
+    const f = fixture(context, preferences);
+    assert.equal(await f.run({ action: 'uninstall', cleanup: true }), 0);
+    assert.equal(f.calls.dialogs[0].title, create('en').t('desktop.installer.cleanup_title'));
+    f.assertUnchanged();
+  }
+});
+
+test('single-mode preparation uses only its selected profile language', async context => {
+  for (const mode of ['windows', 'wsl']) {
+    const other = mode === 'windows' ? 'wsl' : 'windows';
+    const f = fixture(context, { [mode]: preference('zh-TW'), [other]: preference('en') }, {
+      prepare: async () => { throw new Error(rawError); },
+    });
+    assert.equal(await f.run({ action: 'prepare', modes: [mode] }), 1);
+    assert.equal(f.calls.dialogs[0].title, create('zh-TW').t('desktop.installer.setup_failed_title'));
+    assert.deepEqual(f.calls.events, [`prepare:${mode}`]);
+    f.assertUnchanged();
+  }
+});
+
+test('preparation resets each selected source before the next mode and publishes shortcuts only after both finish', async context => {
+  const f = fixture(context);
+  assert.equal(await f.run({ action: 'prepare', modes: ['windows', 'wsl'] }), 0);
+  assert.deepEqual(f.calls.events, ['prepare:windows', 'reset:windows', 'prepare:wsl', 'reset:wsl', 'shortcuts:windows,wsl']);
+  assert.deepEqual(f.calls.dialogs, []);
+  f.assertUnchanged();
+});
+
+test('cleanup exceptions count as unknown modes rather than retained entries', async context => {
+  const f = fixture(context, { windows: preference('zh-TW'), wsl: preference('zh-TW') }, {
+    cleanup: async mode => { if (mode === 'wsl') throw new Error('WSL unavailable'); return { mode, status: 'retained' }; },
+  });
+  assert.equal(await f.run({ action: 'uninstall', cleanup: true }), 0);
+  assert.equal(f.calls.dialogs[0].message, create('zh-TW').t('desktop.installer.cleanup_summary', {
+    detached: 0, retained: 1, unknown: 1,
+  }));
+});
+
+test('installer cancellation remains exit code 2 and other setup failures remain exit code 1', async context => {
+  for (const [code, expected] of [['SETUP_CANCELED', 2], ['OTHER', 1]]) {
+    const f = fixture(context, { windows: preference('zh-TW') }, {
+      prepare: async () => { throw Object.assign(new Error(rawError), { code }); },
+    });
+    assert.equal(await f.run({ action: 'prepare', modes: ['windows'] }), expected);
+    assert.equal(f.calls.dialogs[0].message, rawError);
+    assert.deepEqual(f.calls.events, ['prepare:windows']);
+    assert.equal(f.calls.stopSetup, 1);
+  }
+});
+
+test('losing the owning installer prevents dialogs, source reset, later preparation and shortcuts', async context => {
+  const f = fixture(context, { windows: preference('zh-TW'), wsl: preference('zh-TW') }, {
+    prepare: async () => { f.loseWatcher(); },
+  });
+  assert.equal(await f.run({ action: 'prepare', modes: ['windows', 'wsl'] }), 1);
+  assert.deepEqual(f.calls.events, ['prepare:windows']);
+  assert.deepEqual(f.calls.dialogs, []);
+  assert.deepEqual(f.calls.exit, [2]);
+  assert.equal(f.calls.watcherKills, 1);
+  f.assertUnchanged();
+});
+
+test('losing the owning installer during cleanup prevents the summary and shortcut removal', async context => {
+  const f = fixture(context, { windows: preference('zh-TW'), wsl: preference('zh-TW') }, {
+    cleanup: async mode => { f.loseWatcher(); return { mode, status: 'retained' }; },
+  });
+  assert.equal(await f.run({ action: 'uninstall', cleanup: true }), 1);
+  assert.deepEqual(f.calls.events, ['cleanup:windows']);
+  assert.deepEqual(f.calls.dialogs, []);
+  assert.deepEqual(f.calls.exit, [2]);
+  assert.equal(f.calls.watcherKills, 1);
+  f.assertUnchanged();
+});
+
+test('uninstall failure after confirmed recovery moves uses the partial-operation notice', async context => {
+  for (const locale of ['en', 'zh-TW']) {
+    const f = fixture(context, { windows: preference(locale), wsl: preference(locale) }, {
+      cleanup: async mode => ({ mode, status: 'checked', results: [{ status: 'detached' }] }),
+      shortcuts: async () => { throw new Error(rawError); },
+    });
+    assert.equal(await f.run({ action: 'uninstall', cleanup: true }), 1);
+    const { t } = create(locale);
+    assert.equal(f.calls.dialogs[0].message, t('desktop.installer.cleanup_summary', { detached: 2, retained: 0, unknown: 0 }));
+    const failure = f.calls.dialogs[1];
+    assert.equal(failure.message, rawError);
+    assert.equal(failure.detail, t('desktop.installer.setup_failed_detail'));
+    assert.ok(failure.detail.includes('venv-recovery'));
+    assert.deepEqual(f.calls.events, ['cleanup:windows', 'cleanup:wsl', 'shortcuts:']);
+  }
+});
diff --git a/desktop/test/port.test.cjs b/desktop/test/port.test.cjs
index 004d66d..de544d8 100644
--- a/desktop/test/port.test.cjs
+++ b/desktop/test/port.test.cjs
@@ -184,3 +184,60 @@ test('host probing uses typed socket errors and allows an existing relay only af
   }
   await assert.rejects(checkHostPort(0));
 });
+
+test('both port languages preserve save timing and cancel or use-once decisions', async context => {
+  const { create } = require('../i18n.js');
+  for (const locale of ['en', 'zh-TW']) for (const choice of ['cancel', 'once', 'remember']) {
+    const { options, read } = await fixture(context, { version: 1, port: 51000 });
+    options.t = create(locale).t;
+    const launch = options.launch;
+    options.launch = async port => { if (port === 51000) throw conflict(port); return launch(port); };
+    options.confirm = async () => choice;
+    options.verify = async () => assert.equal((await read()).port, 51000);
+    if (choice === 'cancel') await assert.rejects(startWithPort(options), {
+      code: 'SETUP_CANCELED', message: options.t('desktop.port.startup_canceled'),
+    });
+    else await startWithPort(options);
+    assert.equal((await read()).port, choice === 'remember' ? 51001 : 51000);
+  }
+});
+
+test('localized port warnings distinguish read fallback and verified-port persistence failure', async context => {
+  const { create } = require('../i18n.js');
+  for (const locale of ['en', 'zh-TW']) {
+    const { options } = await fixture(context, { version: 1, port: false });
+    const messages = [];
+    options.t = create(locale).t;
+    options.notify = async message => messages.push(message);
+    await startWithPort(options);
+    assert.deepEqual(messages, [options.t('desktop.port.saved_read_failed')]);
+    await fs.unlink(options.settingsPath);
+    await fs.mkdir(options.settingsPath);
+    messages.length = 0;
+    let verified = false;
+    options.verify = async () => { verified = true; };
+    options.notify = async message => {
+      if (messages.length) assert.equal(verified, true);
+      messages.push(message);
+    };
+    await startWithPort(options);
+    assert.deepEqual(messages, [options.t('desktop.port.saved_read_failed'), options.t('desktop.port.save_failed', { port: 45678 })]);
+  }
+});
+
+test('localized exhausted-port errors retain the saved port and existing retry bound', async context => {
+  const { create } = require('../i18n.js');
+  for (const locale of ['en', 'zh-TW']) {
+    const { options, read } = await fixture(context, { version: 1, port: 51000 });
+    options.t = create(locale).t;
+    options.launch = async port => { throw Object.assign(conflict(port), { suggestedPort: null }); };
+    await assert.rejects(startWithPort(options), { message: options.t('desktop.port.no_candidate', { port: 51000 }) });
+    let attempts = 0;
+    options.checkHost = async port => { throw hostConflict(port); };
+    options.launch = async () => ({ origin: 'http://127.0.0.1:51001' });
+    options.stop = async () => { attempts++; };
+    await assert.rejects(startWithPort(options), { message: options.t('desktop.port.no_host_port') });
+    assert.equal(attempts, 20);
+    assert.equal((await read()).port, 51000);
+  }
+});
diff --git a/desktop/test/shell-notices-i18n.test.cjs b/desktop/test/shell-notices-i18n.test.cjs
new file mode 100644
index 0000000..4a6a360
--- /dev/null
+++ b/desktop/test/shell-notices-i18n.test.cjs
@@ -0,0 +1,88 @@
+'use strict';
+
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const vm = require('node:vm');
+const { create } = require('../i18n.js');
+
+// Run the actual main-process callbacks without launching Core or a native window.
+const source = fs.readFileSync(path.join(__dirname, '..', 'main.cjs'), 'utf8');
+const portOptions = source.match(/  const handoff = await startWithPort\(([\s\S]*?\n  })\);/)[1];
+const downloadRegistration = source.match(/  installFloatingWindows\(win,[\s\S]*?\n  }\);/)[0];
+
+test('localized port prompts preserve numeric choices and structured reasons', async () => {
+  for (const locale of ['en', 'zh-TW']) for (const response of [0, 1, 2]) {
+    const { t } = create(locale);
+    const dialogs = [];
+    const options = vm.runInNewContext('(' + portOptions + ')', {
+      settingsPath: 'fixture', t, mode: 'windows', MODES: { windows: 'Windows' },
+      process: { platform: 'linux' }, smoke: false,
+      launchBackend: () => assert.fail('Unexpected launch'), prepared: null,
+      verifyBackend: () => assert.fail('Unexpected verify'), stopBackend: () => assert.fail('Unexpected stop'),
+      diagnostics: { write() {} },
+      dialog: { showMessageBox: async options => { dialogs.push(options); return { response }; } },
+    });
+    assert.equal(options.t, t);
+    for (const [reason, key] of [[undefined, 'confirm_in_use'], ['host_permission_denied', 'confirm_permission'],
+      ['host_address_in_use', 'confirm_host_in_use'], ['is reserved or denied by Windows', 'confirm_in_use']]) {
+      assert.equal(await options.confirm(51000, 51001, reason), ['cancel', 'once', 'remember'][response]);
+      const notice = dialogs.at(-1);
+      assert.equal(notice.message, t(`desktop.port.${key}`, { port: 51000, candidate: 51001 }));
+      assert.deepEqual(Array.from(notice.buttons), [t('desktop.common.cancel'), t('desktop.port.use_once'), t('desktop.port.use_and_remember')]);
+      assert.equal(notice.defaultId, 0);
+      assert.equal(notice.cancelId, 0);
+    }
+  }
+});
+
+function downloadFixture(locale, response, reject = false) {
+  const { t } = create(locale);
+  const dialogs = [], reveals = [], events = [];
+  const owner = {};
+  let callback;
+  vm.runInNewContext(downloadRegistration, {
+    t, win: {}, handoff: { origin: 'http://127.0.0.1:51000' }, openExternal() {}, contents: {},
+    installFloatingWindows: (_win, _origin, _open, _contents, done) => { callback = done; },
+    dialog: { showMessageBox: async (target, options) => {
+      assert.equal(target, owner);
+      dialogs.push(options);
+      if (reject) throw new Error('Private dialog failure');
+      return { response };
+    } },
+    shell: { showItemInFolder: value => reveals.push(value) },
+    diagnostics: { write: value => events.push(value) },
+  });
+  return { t, dialogs, reveals, events,
+    send: async result => { callback(result, owner); await new Promise(setImmediate); } };
+}
+
+test('download notices reveal only a confirmed completed native path in both languages', async () => {
+  const rawPath = 'C:\\Downloads\\<file> {path}.txt';
+  for (const locale of ['en', 'zh-TW']) for (const response of [0, 1]) {
+    for (const result of [{ state: 'completed', path: rawPath }, { state: 'completed', path: '' },
+      { state: 'interrupted', path: rawPath }]) {
+      const f = downloadFixture(locale, response);
+      await f.send(result);
+      const completed = result.state === 'completed' && !!result.path;
+      const notice = f.dialogs[0];
+      assert.equal(notice.type, completed ? 'info' : 'warning');
+      assert.equal(notice.message, f.t(completed ? 'desktop.download.complete' : 'desktop.download.incomplete'));
+      assert.equal(notice.detail, f.t(completed ? 'desktop.download.saved_to' : 'desktop.download.retry', { path: rawPath }));
+      assert.equal(notice.buttons.length, completed ? 2 : 1);
+      assert.equal(notice.cancelId, 0);
+      assert.equal(notice.defaultId, 0);
+      assert.deepEqual(f.reveals, completed && response === 1 ? [rawPath] : []);
+      assert.deepEqual(f.events, []);
+    }
+  }
+});
+
+test('download notification failure neither reveals a path nor retries the operation', async () => {
+  const f = downloadFixture('zh-TW', 1, true);
+  await f.send({ state: 'completed', path: 'C:\\Downloads\\secret.txt' });
+  assert.equal(f.dialogs.length, 1);
+  assert.deepEqual(f.reveals, []);
+  assert.deepEqual(f.events, ['download_notice_failed']);
+});
diff --git a/docs/desktop_ui_copy_review.tsv b/docs/desktop_ui_copy_review.tsv
index 19e755e..69359cc 100644
--- a/docs/desktop_ui_copy_review.tsv
+++ b/docs/desktop_ui_copy_review.tsv
@@ -272,3 +272,35 @@ desktop.core_source.manual_updates	Git updates are manual. Install Git in the se
 desktop.core_source.unavailable_title	StandTerm Core is unavailable	StandTerm Core is unavailable	StandTerm Core 無法使用	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
 desktop.core_source.quit	Quit	Quit	結束	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
 desktop.core_source.retry	Retry	Retry	重試	Native Core source manager and recovery dialogs; fixed action IDs and response indices.		Display text only. Preserve typed action IDs enable/update/prepare/recover and bundled/git source values. Keep numeric response mapping and defaultId=0/cancelId=0. Never dispatch by translated text. Preserve raw error messages and commit identifiers; unknown workspace values remain literal. Restart explicitly closes sessions; do not imply automatic retries, data rollback, source authorization migration, or verified Git files.	translation-reviewed	desktop/core-source.cjs:coreController
+desktop.port.confirm_permission	Port {port} is reserved or denied by Windows. Use port {candidate}?	Windows reserves port {port} or denies access to it. Use port {candidate}?	Windows 保留了連接埠 {port}，或拒絕存取。要改用連接埠 {candidate} 嗎？	Whole prompt for typed host_permission_denied; do not translate a sentence fragment.	{port} {candidate}	Display text only. Preserve typed reasons, error codes, numeric button responses and once/remember semantics. Reuse desktop.common.cancel for response 0. Keep raw port values literal; do not stop or reuse an existing service.	translation-reviewed	desktop/main.cjs:port confirmation
+desktop.port.confirm_host_in_use	Port {port} is already in use on Windows. Use port {candidate}?	Port {port} is already in use on Windows. Use port {candidate}?	Windows 上的連接埠 {port} 已被使用。要改用連接埠 {candidate} 嗎？	Whole prompt for typed host_address_in_use.	{port} {candidate}	Display text only. Preserve typed reasons, error codes, numeric button responses and once/remember semantics. Reuse desktop.common.cancel for response 0. Keep raw port values literal; do not stop or reuse an existing service.	translation-reviewed	desktop/main.cjs:port confirmation
+desktop.port.confirm_in_use	Port {port} is already in use. Use port {candidate}?	Port {port} is already in use. Use port {candidate}?	連接埠 {port} 已被使用。要改用連接埠 {candidate} 嗎？	Whole prompt for backend address conflict; default typed reason mapping.	{port} {candidate}	Display text only. Preserve typed reasons, error codes, numeric button responses and once/remember semantics. Reuse desktop.common.cancel for response 0. Keep raw port values literal; do not stop or reuse an existing service.	translation-reviewed	desktop/main.cjs:port confirmation
+desktop.port.change_detail	No existing service will be stopped or reused. Changing the port changes the browser origin; browser settings and SSH keys are not migrated. Windows and WSL remember their ports separately.	Existing services will keep running and will not be reused. Changing the port changes the browser origin; browser settings and SSH keys are not migrated. Windows and WSL remember their ports separately.	現有服務會繼續執行，也不會被重用。變更連接埠會改變瀏覽器來源；瀏覽器設定與 SSH 金鑰不會移轉。Windows 與 WSL 分別記住各自的連接埠。	Consequences of choosing a replacement port; origin-scoped browser data is not migrated.		Display text only. Preserve typed reasons, error codes, numeric button responses and once/remember semantics. Reuse desktop.common.cancel for response 0. Keep raw port values literal; do not stop or reuse an existing service.	translation-reviewed	desktop/main.cjs:port confirmation
+desktop.port.use_once	Use once	Use once	僅本次使用	Response 1 returns once and leaves saved port preference unchanged.		Display text only. Preserve typed reasons, error codes, numeric button responses and once/remember semantics. Reuse desktop.common.cancel for response 0. Keep raw port values literal; do not stop or reuse an existing service.	translation-reviewed	desktop/main.cjs:port confirmation
+desktop.port.use_and_remember	Use and remember	Use and remember	使用並記住	Response 2 returns remember; persist only after verified launch.		Display text only. Preserve typed reasons, error codes, numeric button responses and once/remember semantics. Reuse desktop.common.cancel for response 0. Keep raw port values literal; do not stop or reuse an existing service.	translation-reviewed	desktop/main.cjs:port confirmation
+desktop.port.saved_read_failed	Could not read the saved desktop port. Selecting an automatic port.	Could not read the saved desktop port. Selecting an automatic port.	無法讀取已儲存的 Desktop 連接埠設定，將自動選擇連接埠。	Warning on unreadable saved preference; missing file is silent.		Display text only. Preserve typed reasons, error codes, numeric button responses and once/remember semantics. Reuse desktop.common.cancel for response 0. Keep raw port values literal; do not stop or reuse an existing service.	translation-reviewed	desktop/port.cjs:startWithPort
+desktop.port.no_host_port	No usable Windows/WSL loopback port was found. The saved port was not changed.	No usable Windows/WSL loopback port was found. The saved port was not changed.	找不到可用的 Windows／WSL 本機回送連接埠。已儲存的連接埠設定未變更。	User-facing error after host retry limit; keep the attempt limit unchanged.		Display text only. Preserve typed reasons, error codes, numeric button responses and once/remember semantics. Reuse desktop.common.cancel for response 0. Keep raw port values literal; do not stop or reuse an existing service.	translation-reviewed	desktop/port.cjs:startWithPort
+desktop.port.no_candidate	Port {port} is in use and no automatic port is available.	Port {port} is in use and no automatic port is available.	連接埠 {port} 已被使用，且沒有可自動選用的連接埠。	User-facing error when structured Core conflict reports no suggested port.	{port}	Display text only. Preserve typed reasons, error codes, numeric button responses and once/remember semantics. Reuse desktop.common.cancel for response 0. Keep raw port values literal; do not stop or reuse an existing service.	translation-reviewed	desktop/port.cjs:startWithPort
+desktop.port.startup_canceled	Desktop startup canceled. The saved port was not changed.	Desktop startup canceled. The saved port was not changed.	已取消啟動 Desktop。已儲存的連接埠設定未變更。	Cancellation after rejecting replacement; preserve SETUP_CANCELED and backend teardown.		Display text only. Preserve typed reasons, error codes, numeric button responses and once/remember semantics. Reuse desktop.common.cancel for response 0. Keep raw port values literal; do not stop or reuse an existing service.	translation-reviewed	desktop/port.cjs:startWithPort
+desktop.port.save_failed	Port {port} is active, but could not be saved. This launch will continue.	Port {port} passed verification, but its setting could not be saved.	連接埠 {port} 已通過驗證，但無法儲存其設定。	Persistence warning after verified backend launch; port itself is active.	{port}	Display text only. Preserve typed reasons, error codes, numeric button responses and once/remember semantics. Reuse desktop.common.cancel for response 0. Keep raw port values literal; do not stop or reuse an existing service.	translation-reviewed	desktop/port.cjs:startWithPort
+desktop.download.title	Files download	Files download	檔案下載	Native completion/failure dialog for an allowed Files download.		Display text only. Keep completed/interrupted state checks and nonempty path requirement. Canceled downloads remain silent. Response 1 reveals the completed file only; never retry or open the file automatically. Insert the raw saved path literally.	translation-reviewed	desktop/main.cjs:installFloatingWindows downloadDone
+desktop.download.complete	Download complete	Download complete	下載完成	Only for completed state with a nonempty save path.		Display text only. Keep completed/interrupted state checks and nonempty path requirement. Canceled downloads remain silent. Response 1 reveals the completed file only; never retry or open the file automatically. Insert the raw saved path literally.	translation-reviewed	desktop/main.cjs:installFloatingWindows downloadDone
+desktop.download.incomplete	Download did not complete	Download completion could not be confirmed.	無法確認下載已完成。	Interrupted state or missing completion path; do not infer the underlying cause.		Display text only. Keep completed/interrupted state checks and nonempty path requirement. Canceled downloads remain silent. Response 1 reveals the completed file only; never retry or open the file automatically. Insert the raw saved path literally.	translation-reviewed	desktop/main.cjs:installFloatingWindows downloadDone
+desktop.download.saved_to	Saved to:\n{path}	Saved to:\n{path}	已儲存至：\n{path}	Completed download destination; path is unmodified display data.	{path}	Display text only. Keep completed/interrupted state checks and nonempty path requirement. Canceled downloads remain silent. Response 1 reveals the completed file only; never retry or open the file automatically. Insert the raw saved path literally.	translation-reviewed	desktop/main.cjs:installFloatingWindows downloadDone
+desktop.download.retry	The connection was interrupted. Retry the download from Files.	Check the download destination before downloading again.	再次下載前，請先檢查下載目的地。	Completion could not be confirmed; inspect the local download destination before manually downloading again.		Display text only. Keep completed/interrupted state checks and nonempty path requirement. Canceled downloads remain silent. Response 1 reveals the completed file only; never retry or open the file automatically. Insert the raw saved path literally.	translation-reviewed	desktop/main.cjs:installFloatingWindows downloadDone
+desktop.download.close	Close	Close	關閉	Response 0 closes only this dialog.		Display text only. Keep completed/interrupted state checks and nonempty path requirement. Canceled downloads remain silent. Response 1 reveals the completed file only; never retry or open the file automatically. Insert the raw saved path literally.	translation-reviewed	desktop/main.cjs:installFloatingWindows downloadDone
+desktop.download.show_in_folder	Show in folder	Show in folder	在資料夾中顯示	Response 1 calls showItemInFolder only after completed download.		Display text only. Keep completed/interrupted state checks and nonempty path requirement. Canceled downloads remain silent. Response 1 reveals the completed file only; never retry or open the file automatically. Insert the raw saved path literally.	translation-reviewed	desktop/main.cjs:installFloatingWindows downloadDone
+desktop.installer.cleanup_title	StandTerm environment cleanup	StandTerm environment cleanup	StandTerm 環境清理	Native summary after optional uninstall cleanup.		Display text only. Preserve installer action, mode scope, parent watcher, exit codes and raw error message. Do not infer a complete rollback or zero changes from an unconfirmed result. Recovery moves do not free disk space. Keep path placeholders literal and outside translated source text.	translation-reviewed	desktop/installer.cjs:runInstaller
+desktop.installer.cleanup_summary	{detached} confirmed move(s); {retained} retained entry/entries; {unknown} unconfirmed environment(s).	Confirmed moves: {detached}; retained results: {retained}; modes with unconfirmed results: {unknown}.	已確認移動：{detached}；保留結果：{retained}；結果未確認的執行模式：{unknown}。	Detached counts entries; retained mixes individual entries and whole-mode results; unknown counts modes with unknown results. Do not call these three environment counts.	{detached} {retained} {unknown}	Display text only. Preserve installer action, mode scope, parent watcher, exit codes and raw error message. Do not infer a complete rollback or zero changes from an unconfirmed result. Recovery moves do not free disk space. Keep path placeholders literal and outside translated source text.	translation-reviewed	desktop/installer.cjs:runInstaller
+desktop.installer.cleanup_detail	In-use, legacy, unverified and unavailable environments are retained. Only Windows and the configured WSL distribution were checked.\n\nRecovery folders (disk space is not freed):\n{windows_path}\n{wsl_path}\n\nIf a result is unconfirmed, inspect these folders; some moves may already have completed. Core, settings, captures, system Python and WSL distributions are untouched.	Cleanup is limited to Windows and the configured WSL distribution. In-use, legacy, unverified and unavailable environments are retained. A retained result may represent one item or an entire mode.\n\nRecovery folders (disk space is not freed):\n{windows_path}\n{wsl_path}\n\nFor unconfirmed results, inspect these folders; some moves may already have completed. This cleanup leaves Core, settings, captures, system Python and WSL distributions unchanged.	清理範圍僅限 Windows 與已設定的 WSL 發行版。使用中、舊版、未通過驗證或無法存取的環境會保留。一筆保留結果可能代表單一項目或整個執行模式。\n\n復原資料夾（不會釋放磁碟空間）：\n{windows_path}\n{wsl_path}\n\n若結果未確認，請檢查這些資料夾；部分移動可能已完成。此清理不會變更 Core、設定、擷取檔案、系統 Python 或 WSL 發行版。	Recovery scope and retained data; only claims this cleanup preserves these resources, not subsequent NSIS uninstall.	{windows_path} {wsl_path}	Display text only. Preserve installer action, mode scope, parent watcher, exit codes and raw error message. Do not infer a complete rollback or zero changes from an unconfirmed result. Recovery moves do not free disk space. Keep path placeholders literal and outside translated source text.	translation-reviewed	desktop/installer.cjs:runInstaller
+desktop.installer.continue_uninstall	Continue uninstall	Continue uninstall	繼續解除安裝	Summary acknowledgment returns control to the owning installer.		Display text only. Preserve installer action, mode scope, parent watcher, exit codes and raw error message. Do not infer a complete rollback or zero changes from an unconfirmed result. Recovery moves do not free disk space. Keep path placeholders literal and outside translated source text.	translation-reviewed	desktop/installer.cjs:runInstaller
+desktop.installer.setup_failed_title	StandTerm setup did not complete	StandTerm operation did not complete	StandTerm 操作未完成	Failure in preparation, cleanup, source reset or shortcuts; do not narrow to preparation only.		Display text only. Preserve installer action, mode scope, parent watcher, exit codes and raw error message. Do not infer a complete rollback or zero changes from an unconfirmed result. Recovery moves do not free disk space. Keep path placeholders literal and outside translated source text.	translation-reviewed	desktop/installer.cjs:runInstaller
+desktop.installer.setup_failed_detail	Prepared environments and application files are retained. Run the installer again to retry. No terminal backend was started.	Some environment preparation, moves to recovery, or shortcut changes may already have completed. Completed changes are not automatically undone. Check venv-recovery before retrying with the installer. No terminal backend was started.	部分環境準備、移至復原資料夾或捷徑變更可能已完成。已完成的變更不會自動還原。請先檢查 venv-recovery，再透過安裝程式重試。未啟動終端後端。	Generic maintenance failure can follow partial shortcut modifications or recovery moves; avoid blanket application-files-retained claim. Raw error remains the message.		Display text only. Preserve installer action, mode scope, parent watcher, exit codes and raw error message. Do not infer a complete rollback or zero changes from an unconfirmed result. Recovery moves do not free disk space. Keep path placeholders literal and outside translated source text.	translation-reviewed	desktop/installer.cjs:runInstaller
+desktop.installer.return_to_installer	Return to installer	Return to installer	返回安裝程式	Failure acknowledgment; keep existing exit-code handling.		Display text only. Preserve installer action, mode scope, parent watcher, exit codes and raw error message. Do not infer a complete rollback or zero changes from an unconfirmed result. Recovery moves do not free disk space. Keep path placeholders literal and outside translated source text.	translation-reviewed	desktop/installer.cjs:runInstaller
+desktop.paste.title	Paste into StandTerm	Paste into StandTerm	貼上至 StandTerm	Native context-paste confirmation and notices; an exception can occur after delivery.		Preserve numeric consent, focus/frame/navigation/target guards and exactly one clipboard read. Never grant renderer clipboard permission, infer control flow from labels, expose clipboard text in notices or automatically retry.	translation-reviewed	desktop/context-paste.cjs
+desktop.paste.message	Paste clipboard text into this terminal?	Paste clipboard text into this terminal?	要將剪貼簿文字貼上至此終端嗎？	Native context-paste confirmation and notices; an exception can occur after delivery.		Preserve numeric consent, focus/frame/navigation/target guards and exactly one clipboard read. Never grant renderer clipboard permission, infer control flow from labels, expose clipboard text in notices or automatically retry.	translation-reviewed	desktop/context-paste.cjs
+desktop.paste.detail	This reads clipboard text once. Multi-line or large text still requires review. For direct paste, use the Paste button beside the application menu.	This reads clipboard text once. Multi-line or large text still requires review. For direct paste, use the Paste button beside the application menu.	這會讀取剪貼簿文字一次。多行或大量文字仍須確認。若要直接貼上，請使用應用程式選單旁的「貼上」按鈕。	Native context-paste confirmation and notices; an exception can occur after delivery.		Preserve numeric consent, focus/frame/navigation/target guards and exactly one clipboard read. Never grant renderer clipboard permission, infer control flow from labels, expose clipboard text in notices or automatically retry.	translation-reviewed	desktop/context-paste.cjs
+desktop.paste.confirm	Paste	Paste	貼上	Native context-paste confirmation and notices; an exception can occur after delivery.		Preserve numeric consent, focus/frame/navigation/target guards and exactly one clipboard read. Never grant renderer clipboard permission, infer control flow from labels, expose clipboard text in notices or automatically retry.	translation-reviewed	desktop/context-paste.cjs
+desktop.paste.target_changed	Paste canceled because the target changed.	Paste canceled because the target changed.	貼上目標已變更，因此取消貼上。	Native context-paste confirmation and notices; an exception can occur after delivery.		Preserve numeric consent, focus/frame/navigation/target guards and exactly one clipboard read. Never grant renderer clipboard permission, infer control flow from labels, expose clipboard text in notices or automatically retry.	translation-reviewed	desktop/context-paste.cjs
+desktop.paste.empty	The clipboard contains no text.	The clipboard contains no text.	剪貼簿沒有文字。	Native context-paste confirmation and notices; an exception can occur after delivery.		Preserve numeric consent, focus/frame/navigation/target guards and exactly one clipboard read. Never grant renderer clipboard permission, infer control flow from labels, expose clipboard text in notices or automatically retry.	translation-reviewed	desktop/context-paste.cjs
+desktop.paste.unconfirmed	Paste unavailable. Use the Paste toolbar button or your terminal paste shortcut.	Could not confirm the paste result. Check the terminal before pasting again.	無法確認貼上結果。再次貼上前，請先檢查終端。	Native context-paste confirmation and notices; an exception can occur after delivery.		Preserve numeric consent, focus/frame/navigation/target guards and exactly one clipboard read. Never grant renderer clipboard permission, infer control flow from labels, expose clipboard text in notices or automatically retry.	translation-reviewed	desktop/context-paste.cjs
diff --git a/docs/desktop_ui_review_plan.md b/docs/desktop_ui_review_plan.md
index a566d11..bd9401d 100644
--- a/docs/desktop_ui_review_plan.md
+++ b/docs/desktop_ui_review_plan.md
@@ -14,10 +14,12 @@ acceptance remain separate. Browser acceptance is recorded in
 | 1 — Complete | Add a Desktop-owned language preference and catalog; pilot custom menus, toolbar labels and Agent help. | Medium | English default/fallback, `en` and `zh-TW`, malformed preference fallback, next-launch application, translated title/ARIA labels without losing SVGs, fixed command IDs, focus/origin guards and staging inclusion verified. Native acceptance remains order 4. |
 | 2 — Complete | Localize Browser Access, Diagnostics, About, external-browser confirmations and Capture; retain the window when recording save fails during close/quit. | Medium | Sensitive clipboard feedback, fixed authorization actions, escaped diagnostic fields, literal event JSON, typed Capture state, folder settings and combined save-failure plus close/quit coverage verified. |
 | 3 — Complete | Localize setup, Core source selection/recovery, startup error wrappers and per-mode environment cleanup confirmations. | Medium to large | Both languages work before Core is available. Cancellation waits for owned installers; stale confirmations do nothing; source switching, restart/session closure, retained files and recovery moves remain explicit. Installer-wide dialogs remain in order 3b. |
-| 3b | Review and localize remaining shell notices: port selection, Files download feedback and installer-wide summary/error dialogs. | Small to medium | Preserve structured port outcomes, download status and recovery counts. Settle the installer-wide locale when Windows/WSL preferences differ; do not infer a new shared preference from per-mode setup. |
+| 3b — Complete | Localize port selection, Files download feedback, installer-wide summary/error dialogs and native paste confirmation. | Small to medium | Preserve structured outcomes/counts, numeric actions and clipboard guards. Installer-wide notices use the common effective language of relevant modes, otherwise English; no shared preference is written. |
 | 4 | Complete Windows and macOS native acceptance and packaged asset checks. | Platform-dependent | Menus, native dialogs, narrow layouts, keyboard/ARIA labels, clipboard, setup and recovery are checked on each OS. Verify staged and packaged Desktop catalogs independently of the selected Core version. |
 
-The next implementation is the remaining shell notices in order 3b.
+The next stage is native Windows/macOS and packaged acceptance in order 4.
+Raw diagnostic errors, errors before profile selection, legacy shortcut setup
+and external installer UI are outside the current Desktop catalog coverage.
 The operator chose to retain the window and show the error and unfinished-file
 location when recording save fails during close/quit. Orders 1–3 remain separate
 reviewable changes; native OS acceptance remains order 4.
@@ -68,11 +70,11 @@ Keep these implementation boundaries:
 
 [desktop_ui_copy_review.tsv](desktop_ui_copy_review.tsv) is a prioritized seed
 inventory, not a claim that every Desktop string has been extracted. It uses
-the same nine columns as the browser table. After setup/Core source,
-269 rows are `translation-reviewed` with English and Traditional Chinese text.
+the same nine columns as the browser table. After the remaining shell notices,
+301 rows are `translation-reviewed` with English and Traditional Chinese text.
 Four retired Capture/setup fragments or renamed messages are marked `remove`;
-no seed rows remain `proposed`. This does not include every remaining shell
-notice listed in order 3b. Some `current_en` cells are exact fragments or normalize
+no seed rows remain `proposed`. This does not claim translation of raw errors or
+the external installer UI. Some `current_en` cells are exact fragments or normalize
 dynamic values to named placeholders; `context` identifies these cases.
 
 Approve the English behavior and terminology before requesting translations of
@@ -259,6 +261,52 @@ Setup/Core source completed on 2026-09-20:
   allowlist and CSP are unchanged. No native GUI, real dependency installation,
   installer build or packaged acceptance is claimed for this batch.
 
+## Remaining shell notices review and evidence
+
+The batch adds 32 reviewed bilingual messages for port selection, download
+results, installer-wide summaries/errors and the native context-paste dialog.
+Port prompts use whole messages selected by typed reasons, preserving cancel,
+use-once and remember decisions. Saving still follows host checks, authenticated
+verification and consent. The saved-port warning now states only that the port
+passed verification but its setting could not be saved; it does not promise that
+later startup steps succeed.
+
+Installer-wide notices capture the common effective language of the relevant
+profiles at entry: selected modes for preparation, Windows and WSL for uninstall.
+Missing/invalid preferences retain the existing English fallback, and mixed
+effective locales use English. No preference is written or migrated; per-mode
+preparation and cleanup keep their own language. The operator selected this
+policy: use the common setting, otherwise English, without a new preference.
+
+| Finding | Severity | Evidence | Critic remedy | Main response | Resolution | Validation |
+| --- | --- | --- | --- | --- | --- | --- |
+| Interrupted or pathless download result does not establish a connection failure | Medium | `floating-windows.cjs` reports state/path only; `main.cjs` requires a completed state and path | Use neutral outcome wording | Report unconfirmed completion and ask the operator to inspect the download destination before downloading again | Accept | Both languages cover completed/pathless/interrupted outcomes; reveal requires completed plus response 1; no automatic replay. |
+| Retained count mixes per-item results and whole-mode retention | Medium | `installer.cjs` aggregation and `cleanupManagedVenvs` top-level retained result | Name the count as results, not environments | Preserve aggregation and explain the mixed units; count unknown modes separately | Accept | Mixed item/mode results and cleanup exceptions retain exact numeric totals. |
+| Generic installer failure can occur after completed recovery moves or shortcut changes | Medium | Uninstall cleanup/report precede shortcut updates | Acknowledge partial changes without implying rollback | Explain that completed changes remain and recovery locations should be checked before retry | Accept | Injected shortcut failure after two confirmed moves retains original error and failure exit code. |
+| Cleanup scope wording implies both environments were successfully checked | Low | Missing settings/interpreter can retain a mode before inventory | Describe the permitted scope only | State that cleanup is limited to Windows and the configured WSL distribution | Accept | Copy review; mode iteration and owned installer lifecycle unchanged. |
+| Notification rejection can still abort startup despite a saved-port notice | Preexisting behavior boundary | `startWithPort` awaits `notify` | Avoid silently changing notification behavior during localization | Remove the future-continuation promise; defer any best-effort notification change to a separate behavior patch | Modify | Existing startup flow retained; verification and persistence-failure ordering tested. |
+| Files is the source UI, not the local download destination | Low; focused second pass | Download completion reports a native path | Direct the operator to the destination | Applied in both languages | Accept | Final table/callback review. |
+| Paste delivery can precede a rejected acknowledgment | Main-review addition after independent review | `context-paste.cjs` awaits `completeContextPaste` before generic catch | Avoid encouraging a second paste when the outcome is unknown | Use an unconfirmed-result notice and tell the operator to inspect the terminal | Accept | One clipboard read and one delivery attempt despite lost acknowledgment; both-language cancel/stale-target tests pass. |
+
+The independent two-round review of port/download/installer changes found no
+remaining material correctness, authorization or lifetime issue. The final
+context-paste inventory addition was reviewed by the main agent and covered by
+the final suite; it was not a third independent review round. Existing clipboard
+permission denial, focus/frame/navigation/target guards, silent canceled downloads,
+typed action dispatch, owner watching and shortcut publication order remain.
+
+Order 3b completed on 2026-09-20:
+
+- All 165 Desktop unit tests passed under Electron's Node 24.20.0 runtime,
+  including actual main-process callbacks and the installer coordinator in VM
+  fixtures. Native dialogs and installer subprocesses are mocked.
+- Seven catalog regression tests and both catalog freshness checks passed;
+  the catalog contains 301 reviewed messages and four retired rows.
+- No renderer HTML/CSS/assets changed in this batch, so the earlier DOM results
+  remain separate evidence; no new browser or native GUI acceptance is claimed.
+- Native dialog readability, Windows installer behavior and packaged acceptance
+  remain order 4. This batch does not build or publish a release.
+
 ## Evidence and acceptance limits
 
 Browser Access/Diagnostics completed on 2026-09-20:
@@ -307,7 +355,7 @@ inspection of Capture/setup/recovery does not imply their smoke suites ran in
 this review.
 
 The review table is checked using `build_ui_messages.build_catalog` for schema,
-keys, placeholders and review gates. Only the 269 reviewed rows enter the
+keys, placeholders and review gates. Only the 301 reviewed rows enter the
 Desktop runtime catalog; retired rows stay out of it.
 Windows/macOS native localization, installer lifecycle and packaged acceptance
 remain future work. This plan does not qualify or publish a release.

From b8fae88396695f3f586d59526fe2107b962f7947 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Sun, 20 Sep 2026 11:26:51 +0800
Subject: [PATCH 34/43] Verify Windows localization and installer payload

## Why
Browser and mocked dialog tests cannot establish Windows font/layout or
prove that a built installer contains every bootstrap helper.

## What changed
- Add an isolated Windows Electron rendering probe for both Desktop locales,
  native menu labels, compact toolbar states and setup progress.
- Let the setup fixture target an arbitrary build stage using an exact URL.
- Compare all six packaged Python helpers against the matching stage.
- Record the candidate installer and source hashes, automated acceptance and
  remaining native dialog, installer lifecycle and macOS limits.

## Testing
Windows Node passes all 165 Desktop tests. Native localization captures pass
for both locales. The fresh extracted installer payload passes inspection,
and its Windows and WSL backends pass packaged smoke with isolated profiles.
The installed StandTerm instance is not replaced; installation, upgrade and
uninstall are not exercised.
---
 desktop/test/native-i18n-smoke.cjs  | 167 ++++++++++++++++++++++++++++
 desktop/test/package-inspect.cjs    |   4 +
 desktop/test/setup-i18n-fixture.cjs |   3 +-
 docs/desktop_ui_acceptance.md       |  80 +++++++++++++
 docs/desktop_ui_review_plan.md      |   9 +-
 5 files changed, 259 insertions(+), 4 deletions(-)
 create mode 100644 desktop/test/native-i18n-smoke.cjs
 create mode 100644 docs/desktop_ui_acceptance.md

diff --git a/desktop/test/native-i18n-smoke.cjs b/desktop/test/native-i18n-smoke.cjs
new file mode 100644
index 0000000..eaa5af9
--- /dev/null
+++ b/desktop/test/native-i18n-smoke.cjs
@@ -0,0 +1,167 @@
+'use strict';
+
+// Run with Windows Electron, not ELECTRON_RUN_AS_NODE. Only owned windows are captured.
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const vm = require('node:vm');
+const { createRequire } = require('node:module');
+const { pathToFileURL } = require('node:url');
+const { app, BrowserWindow, Menu, ipcMain, session } = require('electron');
+
+const [stageArgument, evidenceArgument] = process.argv.slice(2);
+assert.ok(stageArgument && evidenceArgument, 'Usage: electron native-i18n-smoke.cjs <desktop-stage> <evidence-dir>');
+assert.equal(process.platform, 'win32', 'This probe qualifies Windows rendering only');
+const stage = path.resolve(stageArgument);
+const evidence = path.resolve(evidenceArgument);
+fs.mkdirSync(evidence, { recursive: true });
+app.setPath('userData', path.join(evidence, 'profile'));
+app.setPath('sessionData', path.join(evidence, 'session'));
+app.setAppLogsPath(path.join(evidence, 'logs'));
+const { create } = require(path.join(stage, 'i18n.js'));
+const { createUiCommands, UI_ACTIONS } = require(path.join(stage, 'ui-commands.cjs'));
+const results = { platform: process.platform, electron: process.versions.electron,
+  stage, checks: [], screenshots: [], limitations: [
+    'No Core, installer, clipboard, capture encoder, or user profile is exercised.',
+    'Setup process events are fixtures; HTML and generated scripts are rendered by Windows Electron.',
+    'Menu labels are checked through the native Menu API; OS dialog interaction is not qualified.',
+  ] };
+const windows = new Set();
+const errors = [];
+let finished = false;
+const timeout = setTimeout(() => finish(new Error('Native localization probe timed out')), 45000);
+
+function finish(error) {
+  if (finished) return;
+  finished = true;
+  clearTimeout(timeout);
+  if (error) results.error = error.stack || String(error);
+  results.passed = !error;
+  results.rendererErrors = errors;
+  for (const win of windows) if (!win.isDestroyed()) win.destroy();
+  fs.writeFileSync(path.join(evidence, 'native-i18n-result.json'), JSON.stringify(results, null, 2) + '\n');
+  process.stdout.write(JSON.stringify(results) + '\n');
+  app.exit(error ? 1 : 0);
+}
+
+function createWindow(width, height, preload) {
+  const partition = `native-i18n-${windows.size}-${Date.now()}`;
+  const isolated = session.fromPartition(partition);
+  const allowed = new Set(['toolbar.html', 'toolbar.css', 'toolbar.js', 'toolbar-preload.cjs',
+    'messages.js', 'i18n.js', 'setup.html'].map(name => pathToFileURL(path.join(stage, name)).href));
+  isolated.webRequest.onBeforeRequest((details, callback) => callback({ cancel: !allowed.has(details.url) }));
+  isolated.setPermissionRequestHandler((_contents, _permission, callback) => callback(false));
+  isolated.setPermissionCheckHandler(() => false);
+  const win = new BrowserWindow({ width, height, useContentSize: true, show: false,
+    title: 'StandTerm localization acceptance probe',
+    webPreferences: { preload, session: isolated, sandbox: true, contextIsolation: true,
+      nodeIntegration: false, backgroundThrottling: false } });
+  windows.add(win);
+  win.webContents.setWindowOpenHandler(() => ({ action: 'deny' }));
+  win.webContents.on('will-navigate', event => event.preventDefault());
+  win.webContents.on('console-message', (_event, level, message) => {
+    if (level >= 3) errors.push(message);
+  });
+  win.webContents.on('render-process-gone', (_event, detail) => errors.push(JSON.stringify(detail)));
+  return win;
+}
+
+async function capture(win, name) {
+  await win.webContents.executeJavaScript('new Promise(resolve => requestAnimationFrame(() => requestAnimationFrame(resolve)))');
+  const file = `${name}.png`;
+  fs.writeFileSync(path.join(evidence, file), (await win.webContents.capturePage()).toPNG());
+  results.screenshots.push(file);
+}
+
+async function setupSnapshots() {
+  // Reuse the existing process fixture against the staged setup module and catalog.
+  const filename = path.join(__dirname, 'setup-i18n-fixture.cjs');
+  const nativeRequire = createRequire(filename);
+  let output = '';
+  const context = { __dirname: path.join(stage, 'test'), Buffer, setTimeout, clearTimeout,
+    console, process: { stdout: { write: text => { output += text; } } },
+    require: name => name === '../i18n.js' ? require(path.join(stage, 'i18n.js')) : nativeRequire(name) };
+  await vm.runInNewContext(fs.readFileSync(filename, 'utf8'), context, { filename });
+  assert.equal(context.process.exitCode, undefined, 'Setup fixture generation failed');
+  return JSON.parse(output);
+}
+
+async function run() {
+  await app.whenReady();
+  Menu.setApplicationMenu(null);
+  const toolbarStates = new Map();
+  ipcMain.handle('standterm-toolbar-action', (event, action) => {
+    assert.equal(action, 'ready', 'The probe never invokes terminal or clipboard actions');
+    event.sender.send('standterm-toolbar-state', toolbarStates.get(event.sender.id));
+    return true;
+  });
+  for (const locale of ['en', 'zh-TW']) {
+    const { t } = create(locale);
+    const win = createWindow(640, 180, path.join(stage, 'toolbar-preload.cjs'));
+    toolbarStates.set(win.webContents.id, { locale, mac: false, state: 'idle' });
+    await win.loadFile(path.join(stage, 'toolbar.html'));
+    win.show();
+    const commands = createUiCommands(win, win.webContents, 'http://127.0.0.1:1', t);
+    const menu = Menu.buildFromTemplate(Object.keys(UI_ACTIONS).map(action => commands.item(action)));
+    for (const [action, key] of Object.entries(UI_ACTIONS)) {
+      assert.equal(menu.getMenuItemById(`ui-${action}`).label, t(key));
+    }
+    results.checks.push({ locale, nativeMenuLabels: menu.items.map(item => item.label) });
+    for (const state of ['idle', 'recording', 'paused']) {
+      const label = state === 'idle' ? '' : t(`desktop.capture.status_${state}`, { time: '00:04' });
+      win.webContents.send('standterm-toolbar-state', { locale, mac: false, state, label });
+      await capture(win, `toolbar-${locale}-${state}`);
+      const actual = await win.webContents.executeJavaScript(`(() => ({
+        locale: document.documentElement.lang,
+        label: document.getElementById('recording-status').textContent,
+        pause: document.getElementById('pause').getAttribute('aria-label'),
+        csp: document.querySelector('meta[http-equiv="Content-Security-Policy"]').content,
+        buttons: [...document.querySelectorAll('button')].filter(button => !button.hidden && button.getBoundingClientRect().width)
+          .map(button => ({ id: button.id || button.dataset.menu, left: button.getBoundingClientRect().left,
+            right: button.getBoundingClientRect().right, viewport: innerWidth }))
+      }))()`);
+      assert.equal(actual.locale, locale);
+      assert.equal(actual.label, label);
+      assert.ok(actual.csp.includes("default-src 'none'"));
+      assert.ok(actual.buttons.every(button => button.left >= 0 && button.right <= button.viewport), JSON.stringify(actual));
+      assert.equal(actual.pause, t(state === 'paused' ? 'desktop.toolbar.record_resume' : 'desktop.toolbar.record_pause'));
+      results.checks.push({ locale, toolbarState: state, ...actual });
+    }
+    win.close();
+  }
+  for (const snapshot of await setupSnapshots()) {
+    const win = createWindow(700, 500);
+    await win.loadFile(path.join(stage, 'setup.html'));
+    await win.webContents.executeJavaScript(snapshot.init);
+    win.show();
+    const actual = await win.webContents.executeJavaScript(`(() => ({
+      locale: document.documentElement.lang, title: document.title,
+      requirements: document.getElementById('requirements').textContent,
+      scope: document.getElementById('scope').textContent,
+      overflow: document.documentElement.scrollWidth > innerWidth || document.documentElement.scrollHeight > innerHeight,
+      injected: typeof window.injected !== 'undefined', elements: document.querySelectorAll('script,img,iframe,a').length
+    }))()`);
+    assert.equal(actual.locale, snapshot.locale);
+    assert.equal(actual.title, snapshot.title);
+    assert.equal(actual.requirements, snapshot.requirements);
+    assert.equal(actual.scope, snapshot.scope);
+    assert.equal(actual.overflow, false);
+    assert.equal(actual.injected, false);
+    assert.equal(actual.elements, 0);
+    for (const frame of snapshot.progress) {
+      await win.webContents.executeJavaScript(frame.script);
+      assert.equal(await win.webContents.executeJavaScript('document.getElementById("stage").textContent'), frame.expected);
+    }
+    await capture(win, `setup-${snapshot.locale}-${snapshot.mode}`);
+    await win.webContents.executeJavaScript(snapshot.cancel);
+    assert.equal(await win.webContents.executeJavaScript('document.getElementById("stage").textContent'), snapshot.canceling);
+    results.checks.push({ locale: snapshot.locale, setupMode: snapshot.mode, ...actual });
+    win.close();
+  }
+  assert.deepEqual(errors, []);
+  finish();
+}
+
+// Keep the probe alive between its separately owned windows.
+app.on('window-all-closed', () => {});
+run().catch(finish);
diff --git a/desktop/test/package-inspect.cjs b/desktop/test/package-inspect.cjs
index f851103..8a6127d 100644
--- a/desktop/test/package-inspect.cjs
+++ b/desktop/test/package-inspect.cjs
@@ -17,6 +17,10 @@ const archive = path.join(resources, 'app.asar');
 const manifest = JSON.parse(fs.readFileSync(path.join(resources, 'bundle', 'manifest.json'), 'utf8'));
 const stagedManifest = JSON.parse(fs.readFileSync(path.join(stage, 'bundle', 'manifest.json'), 'utf8'));
 assert.deepEqual(manifest, stagedManifest);
+for (const file of ['bootstrap.py', 'windows_job.py', 'runtime.py', 'runtime_cleanup.py', 'core_manager.py', 'backend.py']) {
+  assert.deepEqual(fs.readFileSync(path.join(resources, 'bundle', file)),
+    fs.readFileSync(path.join(stage, 'bundle', file)), `Bootstrap helper mismatch: ${file}`);
+}
 validateCoreFiles(path.join(resources, 'bundle', 'core'), Object.keys(manifest.files));
 const hash = bytes => createHash('sha256').update(bytes).digest('hex');
 for (const [file, expected] of Object.entries(manifest.files)) {
diff --git a/desktop/test/setup-i18n-fixture.cjs b/desktop/test/setup-i18n-fixture.cjs
index f3e0cc0..58ae5dc 100644
--- a/desktop/test/setup-i18n-fixture.cjs
+++ b/desktop/test/setup-i18n-fixture.cjs
@@ -6,6 +6,7 @@ const path = require('node:path');
 const vm = require('node:vm');
 const { EventEmitter } = require('node:events');
 const { createRequire } = require('node:module');
+const { pathToFileURL } = require('node:url');
 const { create } = require('../i18n.js');
 
 const filename = path.join(__dirname, '..', 'setup.cjs');
@@ -30,7 +31,7 @@ async function snapshot(locale, mode) {
       this.webContents.setWindowOpenHandler = callback => assert.equal(callback().action, 'deny');
       this.webContents.executeJavaScript = async script => { scripts.push(script); };
     }
-    async loadURL(url) { assert.ok(url.endsWith('/desktop/setup.html')); }
+    async loadURL(url) { assert.equal(url, pathToFileURL(path.join(path.dirname(filename), 'setup.html')).href); }
     isDestroyed() { return !!this.destroyed; }
     destroy() { this.destroyed = true; this.emit('closed'); }
     setTitle(title) { titles.push(title); }
diff --git a/docs/desktop_ui_acceptance.md b/docs/desktop_ui_acceptance.md
new file mode 100644
index 0000000..508cefe
--- /dev/null
+++ b/docs/desktop_ui_acceptance.md
@@ -0,0 +1,80 @@
+# Desktop localization candidate acceptance
+
+Date: 2026-09-20. This records an unsigned Windows x64 local evaluation
+candidate, not a public release or completed Windows/macOS qualification.
+
+## Artifact and source identity
+
+| Field | Value |
+| --- | --- |
+| Desktop / Core | `0.5.2` / `2.13.1-dev` |
+| Source repository | `/mnt/d/workspace/github/standterm` |
+| Build source commit | `38861555f667f05a45ae499298d813a255349966` |
+| Candidate directory | `desktop/dist/candidate-0.5.2-2.13.1-dev-3886155/` |
+| Installer | `StandTerm-Desktop-0.5.2-2.13.1-dev-win32-x64-Setup.exe` |
+| Installer bytes | `112385015` |
+| Installer SHA-256 | `f31b8ee9cb1ab91af155e55eb6b48fdaf380c7cb87bf38749bd109040cf36979` |
+| Exact build-source snapshot | `standterm-build-source-3886155.tar.gz` |
+| Snapshot SHA-256 | `16a2fdfb818e6dce92a9a2be13b2a9bf8f7d51046b92ecdded9f1a5e33e4bba2` |
+| Core bundle ID | `229a71a3026ea6c63c05d74d3ded05aed6b9886a4b9205987e25f7d96c3bdeb6` |
+| Tools | Windows Node 22.14.0, Electron 44.2.0, electron-builder 26.15.3 |
+| Host | Windows 10.0.26200 with WSL Ubuntu-24.04.1 |
+| Authenticode | `NotSigned` |
+
+The directory also contains the full Git source archive, release identity,
+build metadata, checksum list and selected validation evidence. All 145 staged
+source inputs match the Git archive bytes; Git archive honors the repository's
+line-ending attributes. The build-source snapshot retains those inputs, all 270
+tracked source files and the exact local build invocation. Neither archive
+contains a venv, credentials or an operator profile. Acceptance-tool additions
+are a later validation commit, not changes to the installer payload.
+
+## Completed checks
+
+| Check | Result and scope |
+| --- | --- |
+| Windows unit suite | 165 passed using Windows Node 22.14.0. |
+| Native Windows localization rendering | English and Traditional Chinese passed with real Electron windows, staged HTML/CSP/preload and native Menu API labels. |
+| Compact toolbar | All controls remain visible at 640 CSS px in idle, recording and paused states, in both languages. |
+| Setup rendering | Windows, macOS and WSL text branches render on Windows in both languages at 700x500 CSS px; progress/cancellation updates and literal distribution text pass. This is not macOS OS qualification. |
+| Visual evidence | Twelve captures of owned test windows retained; Traditional Chinese toolbar and setup captures visually inspected. No operator window was captured. |
+| Installer payload | Extracted from the new NSIS installer; a fresh extraction passes ASAR/stage equality, 92 exact Core files, all six Python bootstrap helpers and release identity checks. |
+| Packaged Windows backend | Passed authenticated terminal, sandbox/navigation, focus return, native UI actions, toolbar and isolated clipboard-routing smoke using the extracted bundled Core. |
+| Packaged WSL backend | The same checks pass, including Files browse/download/transition. |
+| Isolation | Separate temporary profiles, runtime and recovery paths. No installation or replacement of the running StandTerm instance. |
+
+Evidence is retained in `desktop/dist/desktop-i18n-3886155/`; selected logs,
+screenshots and JSON results are copied under the candidate's `validation/`.
+The application-smoke clipboard is mocked; real terminal I/O and window behavior
+are exercised. The localization probe's setup events are fixtures rendered by
+Windows Electron, not dependency installations.
+
+## Test-environment findings
+
+The first packaged Windows smoke used `tools/.venv_win`, which lacks Flask and
+exited before backend startup. The successful run uses the existing complete
+Windows `tools/.venv`; WSL uses `/tmp/standterm_wslvenv`. No dependencies were
+installed and no product change was needed.
+
+Python creates bytecode in an executed extraction. Final package inspection
+therefore uses a second untouched extraction; it does not relax the exact-file
+allowlist to accept runtime-generated files. The inspector now explicitly checks
+the six bundle-root Python helpers, closing a validation gap identified in the
+independent packaging review.
+
+## Remaining qualification
+
+- Real install, upgrade and uninstall flows were not executed. Packaged smoke
+  bypasses first-run setup and uses prepared, isolated test environments.
+- Native OS dialog interaction/readability, physical clipboard/IME and a real
+  recording-save failure remain manual acceptance items.
+- macOS requires a native Mac build and acceptance run; no macOS artifact was
+  produced. Windows rendering of macOS setup text does not substitute for it.
+- No signing, public release, tag, push or mirror synchronization was performed.
+
+To repeat the native rendering probe, run Windows Electron with
+`desktop/test/native-i18n-smoke.cjs`, the Desktop stage directory and a separate
+evidence directory. Leave `ELECTRON_RUN_AS_NODE` unset. The probe creates only
+owned test windows and writes a structured result plus PNGs. Use
+`desktop/test/package-inspect.cjs` against a fresh extracted resources directory
+and its matching stage before running Core from that extraction.
diff --git a/docs/desktop_ui_review_plan.md b/docs/desktop_ui_review_plan.md
index bd9401d..a5da076 100644
--- a/docs/desktop_ui_review_plan.md
+++ b/docs/desktop_ui_review_plan.md
@@ -15,9 +15,11 @@ acceptance remain separate. Browser acceptance is recorded in
 | 2 — Complete | Localize Browser Access, Diagnostics, About, external-browser confirmations and Capture; retain the window when recording save fails during close/quit. | Medium | Sensitive clipboard feedback, fixed authorization actions, escaped diagnostic fields, literal event JSON, typed Capture state, folder settings and combined save-failure plus close/quit coverage verified. |
 | 3 — Complete | Localize setup, Core source selection/recovery, startup error wrappers and per-mode environment cleanup confirmations. | Medium to large | Both languages work before Core is available. Cancellation waits for owned installers; stale confirmations do nothing; source switching, restart/session closure, retained files and recovery moves remain explicit. Installer-wide dialogs remain in order 3b. |
 | 3b — Complete | Localize port selection, Files download feedback, installer-wide summary/error dialogs and native paste confirmation. | Small to medium | Preserve structured outcomes/counts, numeric actions and clipboard guards. Installer-wide notices use the common effective language of relevant modes, otherwise English; no shared preference is written. |
-| 4 | Complete Windows and macOS native acceptance and packaged asset checks. | Platform-dependent | Menus, native dialogs, narrow layouts, keyboard/ARIA labels, clipboard, setup and recovery are checked on each OS. Verify staged and packaged Desktop catalogs independently of the selected Core version. |
+| 4 — Partial; Windows candidate produced | Complete Windows and macOS native acceptance and packaged asset checks. | Platform-dependent | Windows native rendering, 165 Windows unit tests, exact extracted-installer payload and packaged Windows/WSL smoke passed. Native OS dialogs, install/upgrade/uninstall and macOS remain; see the acceptance report. |
 
-The next stage is native Windows/macOS and packaged acceptance in order 4.
+Order 4 produced a Windows evaluation candidate; results, source/artifact hashes
+and remaining native acceptance are recorded in
+[desktop_ui_acceptance.md](desktop_ui_acceptance.md).
 Raw diagnostic errors, errors before profile selection, legacy shortcut setup
 and external installer UI are outside the current Desktop catalog coverage.
 The operator chose to retain the window and show the error and unfinished-file
@@ -357,5 +359,6 @@ this review.
 The review table is checked using `build_ui_messages.build_catalog` for schema,
 keys, placeholders and review gates. Only the 301 reviewed rows enter the
 Desktop runtime catalog; retired rows stay out of it.
-Windows/macOS native localization, installer lifecycle and packaged acceptance
+Windows automated native rendering and packaged acceptance are recorded in the
+acceptance report. Native dialog/installer lifecycle and macOS qualification
 remain future work. This plan does not qualify or publish a release.

From 98e490d4b21fef8f276a16b4420c2f070014226b Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Mon, 21 Sep 2026 00:31:47 +0800
Subject: [PATCH 35/43] Simplify Agent connection and restore Desktop copy

---
 desktop/README.md                   |  3 +
 desktop/context-paste.cjs           | 11 +++-
 desktop/test/context-paste.test.cjs | 38 ++++++++++-
 docs/desktop_ui_review_plan.md      | 40 +++++++++++-
 docs/ui_copy_review.tsv             |  2 +
 static/js/standterm-messages.js     |  4 ++
 templates/index.html                | 99 ++++++++++++++++++-----------
 tests/agent_browser_smoke.py        | 53 +++++++++++----
 8 files changed, 193 insertions(+), 57 deletions(-)

diff --git a/desktop/README.md b/desktop/README.md
index d159adc..5269824 100644
--- a/desktop/README.md
+++ b/desktop/README.md
@@ -588,6 +588,9 @@ places Copy/Paste after the title in the window's Desktop toolbar. Menu labels a
 not selectable; terminal text, text fields and status notices remain selectable.
 
 **Copy selected text** uses native Copy, never the terminal Ctrl+C interrupt.
+Core's copy buttons may write sanitized clipboard content only from the focused,
+visible main Core page at the owned backend origin. This does not grant clipboard
+reads, child-frame access, or access to other windows sharing the session.
 **Paste clipboard text** restores the Core editing target and uses native Paste;
 text fields keep normal editing behavior. Windows/Linux Ctrl+V remains the terminal
 control code; use Ctrl+Shift+V for keyboard paste (Cmd+V on macOS).
diff --git a/desktop/context-paste.cjs b/desktop/context-paste.cjs
index c3ed274..4573e27 100644
--- a/desktop/context-paste.cjs
+++ b/desktop/context-paste.cjs
@@ -13,7 +13,16 @@ function installContextPaste(win, contents, origin, notify, t = create('en').t)
   const available = () => !win.isDestroyed() && !contents.isDestroyed()
     && !contents.isLoadingMainFrame() && allowedNavigation(contents.getURL(), origin)
     && win.isVisible() && !win.isMinimized() && BrowserWindow.getFocusedWindow() === win;
+  const canWrite = (requester, permission, details) => permission === 'clipboard-sanitized-write'
+    && requester === contents && details?.isMainFrame === true
+    && allowedNavigation(details.requestingUrl, origin) && available();
+  contents.session.setPermissionCheckHandler((requester, permission, requestingOrigin, details) =>
+    allowedNavigation(requestingOrigin, origin) && canWrite(requester, permission, details));
   contents.session.setPermissionRequestHandler((requester, permission, callback, details) => {
+    if (canWrite(requester, permission, details)) {
+      callback(true);
+      return;
+    }
     if (permission !== 'clipboard-read' || requester !== contents || details?.isMainFrame !== true
         || !allowedNavigation(details.requestingUrl, origin) || pending || !available()) {
       callback(false);
@@ -23,7 +32,7 @@ function installContextPaste(win, contents, origin, notify, t = create('en').t)
     const epoch = navigation;
     const frame = contents.mainFrame;
     const current = () => epoch === navigation && !frame.isDestroyed() && contents.mainFrame === frame && available();
-    // Never grant web clipboard access. Only the native confirmation authorizes
+    // Never grant web clipboard reads. Only the native confirmation authorizes
     // a single text read, delivered to the captured Core paste-review target.
     void (async () => {
       const id = await frame.executeJavaScript('window.standtermUi?.contextPasteRequest()');
diff --git a/desktop/test/context-paste.test.cjs b/desktop/test/context-paste.test.cjs
index 313b56a..a3b4e92 100644
--- a/desktop/test/context-paste.test.cjs
+++ b/desktop/test/context-paste.test.cjs
@@ -17,7 +17,7 @@ function fixture(locale = 'en') {
   const state = { focused: true, visible: true, minimized: false, destroyed: false, loading: false,
     url: origin + '/', target: 'fixture-request', prompts: 0, reads: 0, delivered: true };
   const win = { isDestroyed: () => state.destroyed, isVisible: () => state.visible, isMinimized: () => state.minimized };
-  let handler;
+  let handler, checkHandler;
   const contents = new EventEmitter();
   const frame = { isDestroyed: () => state.destroyed, executeJavaScript: async code => {
     scripts.push(code);
@@ -26,7 +26,10 @@ function fixture(locale = 'en') {
     return state.target;
   } };
   Object.assign(contents, { mainFrame: frame, isDestroyed: () => state.destroyed, getURL: () => state.url,
-    isLoadingMainFrame: () => state.loading, session: { setPermissionRequestHandler: fn => { handler = fn; } } });
+    isLoadingMainFrame: () => state.loading, session: {
+      setPermissionRequestHandler: fn => { handler = fn; },
+      setPermissionCheckHandler: fn => { checkHandler = fn; },
+    } });
   const electron = { BrowserWindow: { getFocusedWindow: () => state.focused ? win : null },
     dialog: { showMessageBox: (_owner, options) => { state.prompts++; state.dialog = options; return consent.promise; } },
     clipboard: { readText: () => { state.reads++; return read.promise; } } };
@@ -36,12 +39,43 @@ function fixture(locale = 'en') {
   });
   api.exports.installContextPaste(win, contents, origin, async value => notices.push(value), create(locale).t);
   return { state, consent, read, contents, scripts, callbacks, notices,
+    check: (permission = 'clipboard-sanitized-write', requester = contents, requestingOrigin = origin,
+      details = { isMainFrame: true, requestingUrl: state.url }) => checkHandler(requester, permission, requestingOrigin, details),
     request: (permission = 'clipboard-read', requester = contents, details = { isMainFrame: true, requestingUrl: state.url }) =>
       new Promise(resolve => handler(requester, permission, value => { callbacks.push(value); resolve(value); }, details)),
     navigate: () => contents.emit('did-start-navigation', {}, origin + '/', false, true),
   };
 }
 
+test('focused Core may copy without gaining clipboard read permission', async () => {
+  const f = fixture();
+  assert.equal(f.check(), true);
+  assert.equal(await f.request('clipboard-sanitized-write'), true);
+  assert.equal(f.check('clipboard-read'), false);
+  assert.equal(f.check('deprecated-sync-clipboard-read'), false);
+  assert.equal(f.state.prompts + f.state.reads, 0);
+});
+
+test('copy permission rejects foreign, child, loading and inactive contents', async () => {
+  for (const change of [s => { s.focused = false; }, s => { s.visible = false; },
+    s => { s.minimized = true; }, s => { s.destroyed = true; }, s => { s.loading = true; },
+    s => { s.url = 'https://example.com/'; }]) {
+    const f = fixture(); change(f.state);
+    assert.equal(f.check(), false);
+    assert.equal(await f.request('clipboard-sanitized-write'), false);
+  }
+  const f = fixture();
+  assert.equal(f.check('clipboard-sanitized-write', {}), false);
+  assert.equal(f.check('clipboard-sanitized-write', f.contents, 'https://example.com'), false);
+  for (const details of [undefined, { isMainFrame: false, requestingUrl: origin },
+    { isMainFrame: true, requestingUrl: 'https://example.com' }]) {
+    const invalid = details || {};
+    assert.equal(f.check('clipboard-sanitized-write', f.contents, origin, invalid), false);
+    assert.equal(await f.request('clipboard-sanitized-write', f.contents, invalid), false);
+  }
+  assert.equal(f.state.prompts + f.state.reads, 0);
+});
+
 test('one explicit native confirmation reads text once without granting renderer permission', async () => {
   const f = fixture();
   const result = f.request();
diff --git a/docs/desktop_ui_review_plan.md b/docs/desktop_ui_review_plan.md
index a5da076..461259d 100644
--- a/docs/desktop_ui_review_plan.md
+++ b/docs/desktop_ui_review_plan.md
@@ -26,6 +26,41 @@ The operator chose to retain the window and show the error and unfinished-file
 location when recording save fails during close/quit. Orders 1–3 remain separate
 reviewable changes; native OS acceptance remains order 4.
 
+## Follow-up from candidate feedback
+
+The candidate exposed a copy regression: the Desktop permission handlers denied
+`clipboard-sanitized-write` along with reads, so Core's Agent connection copy
+buttons always reported failure. The source fix permits sanitized writes only
+for the owned, focused, visible Core main frame at its backend origin. Clipboard
+reads retain their native confirmation and target guards. The existing candidate
+installer does not contain this fix until rebuilt.
+
+Validation: all 167 Desktop unit tests pass, including foreground write access
+and foreign-frame/background denial. A separate Windows Electron 44.2.0 window
+reports clipboard-write permission changing from `denied` to `granted` with the
+fix while clipboard-read stays `denied`. This probe queries permissions only;
+it does not read or replace the operator's clipboard and is not OS copy/paste
+acceptance. The attempted Linux headless runtime probe exited before producing
+results; Windows provided the native permission evidence.
+
+The operator requests a single language setting and asks about live switching.
+The following is the proposed next implementation phase, not completed behavior:
+
+| Order | Change | Effort | Required acceptance |
+| --- | --- | --- | --- |
+| 1 | Apply the saved Core language without reloading the page. Replace the fixed translator with a current-locale lookup and refresh labels from structured state. | Medium | Switch both ways with connected terminals, an active Agent grant, Files and floating windows; preserve input, selection, drafts and pending operations. |
+| 2 | Make Desktop follow the current Core page's language and remove the separate Desktop language menu. | Medium | Validate the exact owned sender/frame/origin and the two supported locale values; rebuild menus and refresh toolbar, tray and diagnostics without restarting Core or recording. |
+| 3 | Keep `language.json` as the last synchronized language for startup/setup/recovery before Core is available. | Small | Retain the cached value for older Core versions lacking synchronization; use English when no valid cache exists. Preserve the agreed installer common-language/English fallback. |
+
+Core's setting remains scoped to its browser profile; this does not synchronize
+unrelated browsers, hosts or backend modes. A browser connection does not acquire
+authority to change another Desktop instance. Already-open native confirmations
+keep their language and button meanings until dismissed; subsequent dialogs use
+the new language. Existing terminal output and raw diagnostic messages are not
+translated retroactively. Dynamic UI must render from state/message keys rather
+than infer state by matching displayed text. Settings import/reset must use the
+same language application path as Settings Save.
+
 ## Difficulty and design choices
 
 Copy extraction is straightforward. Most work lies in several display contexts:
@@ -34,14 +69,15 @@ scriptless diagnostics. A complete Desktop rollout has moderate implementation
 cost and broader acceptance cost than the toolbar pilot. The estimates above
 are relative scope assessments, not measured delivery times.
 
-The pilot stores the Desktop language in `language.json` under the existing profile's `userData`,
+The shipped pilot stores the Desktop language in `language.json` under the existing profile's `userData`,
 with English as default and only `en` / `zh-TW` initially. Apply a change on the
 next launch; changing language should not itself restart StandTerm or stop a
 recording. Keep the existing Core browser preference independent. This covers
 setup and recovery before Core starts, at the cost of two language preferences.
 It is a product choice, not a security requirement. A validated
 two-value advisory preference from Core is also feasible, but needs startup,
-origin and older-Core fallback rules. Automatic OS-language selection is deferred.
+origin and older-Core fallback rules. The follow-up above supersedes the independent
+preference design once implemented. Automatic OS-language selection is deferred.
 
 Ship the Desktop catalog with the shell. Do not depend on the selected bundled
 or Git Core supplying compatible renderer scripts. Reuse the existing TSV
diff --git a/docs/ui_copy_review.tsv b/docs/ui_copy_review.tsv
index 454789f..76ee4d5 100644
--- a/docs/ui_copy_review.tsv
+++ b/docs/ui_copy_review.tsv
@@ -66,6 +66,8 @@ agent.token.tab_expired	Agent token expired; create a new token to continue	Agen
 agent.pause.action	Pause Agent	Pause Agent	暫停 Agent	Pause Agent access; do not close or disconnect the terminal.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 agent.pause.target	Pause Agent access for {target}	Pause Agent access for {target}	暫停 {target} 的 Agent 存取	Pause action tooltip naming its target.	{target}	Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 agent.connection.tooltip	Copy the agent prompt for the current tab's environment	Copy the agent prompt for the current tab's environment	複製目前分頁所在環境的 Agent 連線指引	The active tab selects the execution environment, not the grant scope.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.summary	Copy the connection instructions and give them to the agent in the current tab’s environment.	Copy the connection instructions and give them to the agent in the current tab’s environment.	複製連線指引，貼給目前分頁環境中的 Agent。	Compact local or SSH connection introduction; the adjacent button copies the full prompt, including the URL and execution environment.		Copying does not authorize tabs. Full instructions remain in Read more.	translation-reviewed	templates/index.html
+agent.connection.read_more	Read more	Read more	閱讀更多	Native disclosure for connection instructions, activity and secondary actions.		Keep keyboard-accessible expand and collapse behavior.	translation-reviewed	templates/index.html
 agent.connection.environment	Run the agent where Core runs (WSL if Core runs in WSL). It can access only individually authorized tabs.	Run the agent where Core runs (WSL if Core runs in WSL). It can access only individually authorized tabs.	請在 Core 所在環境執行 Agent（若 Core 在 WSL 中執行，Agent 也須在 WSL 中執行）。Agent 僅能存取已個別授權的分頁。	Core-host connection info; distinguish Windows browser from WSL Core.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 agent.connection.step_authorize	Choose Authorize agent on each intended tab. Change its permission in Settings or the Agent panel.	Choose the default permission in Settings, then Authorize agent on each intended tab. Adjust an authorized tab in the Agent panel.	先在 Settings 選擇預設權限，再於各個要開放存取的分頁選擇「授權 Agent」。已授權分頁的權限可在 Agent 面板調整。	Local connection setup step; the primary action creates the token.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 agent.connection.step_copy	Copy the prompt to the agent running on the Core host.	Copy the prompt to the agent running on the Core host.	將連線指引複製給在 Core 主機上執行的 Agent。	Give the prompt to the correct runtime environment.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
diff --git a/static/js/standterm-messages.js b/static/js/standterm-messages.js
index dd2603d..e762d48 100644
--- a/static/js/standterm-messages.js
+++ b/static/js/standterm-messages.js
@@ -30,11 +30,13 @@
         "agent.connection.loading": "Loading connection info\u2026",
         "agent.connection.no_grants": "No active grants. Authorize the intended tabs first.",
         "agent.connection.prompt": "Agent connection prompt",
+        "agent.connection.read_more": "Read more",
         "agent.connection.ready": "Copy Prompt to the agent running on the Core host. Its first authenticated request confirms access.",
         "agent.connection.request_at": "last authenticated request {time}",
         "agent.connection.step_authorize": "Choose the default permission in Settings, then Authorize agent on each intended tab. Adjust an authorized tab in the Agent panel.",
         "agent.connection.step_confirm": "Run discover, then hello. Authenticated requests appear below.",
         "agent.connection.step_copy": "Copy the prompt to the agent running on the Core host.",
+        "agent.connection.summary": "Copy the connection instructions and give them to the agent in the current tab\u2019s environment.",
         "agent.connection.title": "Agent connection",
         "agent.connection.tooltip": "Copy the agent prompt for the current tab's environment",
         "agent.connection.unavailable": "Connection info unavailable.",
@@ -828,11 +830,13 @@
         "agent.connection.loading": "\u6b63\u5728\u8f09\u5165\u9023\u7dda\u8cc7\u8a0a\u2026",
         "agent.connection.no_grants": "\u76ee\u524d\u6c92\u6709\u6709\u6548\u6388\u6b0a\u3002\u8acb\u5148\u6388\u6b0a\u8981\u958b\u653e\u5b58\u53d6\u7684\u5206\u9801\u3002",
         "agent.connection.prompt": "Agent \u9023\u7dda\u6307\u5f15",
+        "agent.connection.read_more": "\u95b1\u8b80\u66f4\u591a",
         "agent.connection.ready": "\u6309\u300c\u8907\u88fd\u9023\u7dda\u6307\u5f15\u300d\uff0c\u518d\u8cbc\u7d66\u5728 Core \u4e3b\u6a5f\u4e0a\u57f7\u884c\u7684 Agent\u3002Agent \u9996\u6b21\u901a\u904e\u9a57\u8b49\u7684\u8acb\u6c42\u53ef\u78ba\u8a8d\u5176\u5b58\u53d6\u6b0a\u3002",
         "agent.connection.request_at": "\u6700\u8fd1\u4e00\u6b21\u901a\u904e\u9a57\u8b49\u7684\u8acb\u6c42\uff1a{time}",
         "agent.connection.step_authorize": "\u5148\u5728 Settings \u9078\u64c7\u9810\u8a2d\u6b0a\u9650\uff0c\u518d\u65bc\u5404\u500b\u8981\u958b\u653e\u5b58\u53d6\u7684\u5206\u9801\u9078\u64c7\u300c\u6388\u6b0a Agent\u300d\u3002\u5df2\u6388\u6b0a\u5206\u9801\u7684\u6b0a\u9650\u53ef\u5728 Agent \u9762\u677f\u8abf\u6574\u3002",
         "agent.connection.step_confirm": "\u5148\u57f7\u884c discover\uff0c\u518d\u57f7\u884c hello\u3002\u5df2\u901a\u904e\u9a57\u8b49\u7684\u8acb\u6c42\u6703\u986f\u793a\u5728\u4e0b\u65b9\u3002",
         "agent.connection.step_copy": "\u5c07\u9023\u7dda\u6307\u5f15\u8907\u88fd\u7d66\u5728 Core \u4e3b\u6a5f\u4e0a\u57f7\u884c\u7684 Agent\u3002",
+        "agent.connection.summary": "\u8907\u88fd\u9023\u7dda\u6307\u5f15\uff0c\u8cbc\u7d66\u76ee\u524d\u5206\u9801\u74b0\u5883\u4e2d\u7684 Agent\u3002",
         "agent.connection.title": "Agent \u9023\u7dda",
         "agent.connection.tooltip": "\u8907\u88fd\u76ee\u524d\u5206\u9801\u6240\u5728\u74b0\u5883\u7684 Agent \u9023\u7dda\u6307\u5f15",
         "agent.connection.unavailable": "\u7121\u6cd5\u53d6\u5f97\u9023\u7dda\u8cc7\u8a0a\u3002",
diff --git a/templates/index.html b/templates/index.html
index 3b8d9e0..fb8076c 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -304,6 +304,7 @@
         .agent-connect-url input { flex: 1; min-width: 220px; background: #111; color: #ddd; padding: 8px; border: 1px solid #555; }
         .agent-connect-activity { white-space: pre-wrap; }
         .agent-connect-steps { padding-left: 24px; line-height: 1.5; }
+        #agent-connect-details summary, #agent-tunnel-details summary { cursor: pointer; margin: 12px 0; }
         #agent-tunnel-message { white-space: pre-wrap; }
         #ssh-tunnels-dialog { width: min(720px, calc(100vw - 32px)); box-sizing: border-box;
             max-height: 85vh; overflow: auto; background: #222; color: #ddd; border: 1px solid #555; border-radius: 8px; }
@@ -1480,61 +1481,72 @@ <h3 id="browser-auth-help-title" data-i18n="browser.auth.help_title">Manual brow
     </section>
     <dialog id="agent-connect-dialog" aria-labelledby="agent-connect-title">
         <h3 id="agent-connect-title" data-i18n="agent.connection.title">Agent connection</h3>
-        <p data-i18n="agent.connection.environment">Run the agent where Core runs (WSL if Core runs in WSL). It can access only individually authorized tabs.</p>
-        <ol class="agent-connect-steps">
-            <li data-i18n="agent.connection.step_authorize">Choose the default permission in Settings, then Authorize agent on each intended tab. Adjust an authorized tab in the Agent panel.</li>
-            <li data-i18n="agent.connection.step_copy">Copy the prompt to the agent running on the Core host.</li>
-            <li data-i18n="agent.connection.step_confirm">Run discover, then hello. Authenticated requests appear below.</li>
-        </ol>
+        <p data-i18n="agent.connection.summary">Copy the connection instructions and give them to the agent in the current tab’s environment.</p>
         <div class="agent-connect-url">
             <label for="agent-connect-url" data-i18n="agent.connection.url">Agent Info URL</label>
             <input id="agent-connect-url" readonly aria-label="Agent Info URL" data-i18n-aria-label="agent.connection.url">
-            <button id="agent-connect-copy-url" type="button" disabled data-i18n="common.copy_url">Copy URL</button>
+            <button id="agent-connect-copy" type="button" disabled data-i18n="agent.connection.copy">Copy Prompt</button>
         </div>
         <p id="agent-connect-message" role="status"></p>
-        <p id="agent-connect-activity" class="agent-connect-activity" aria-live="polite"></p>
-        <textarea id="agent-connect-info" readonly aria-label="Local agent prompt" hidden data-i18n-aria-label="agent.connection.prompt"></textarea>
+        <details id="agent-connect-details">
+            <summary data-i18n="agent.connection.read_more">Read more</summary>
+            <p data-i18n="agent.connection.environment">Run the agent where Core runs (WSL if Core runs in WSL). It can access only individually authorized tabs.</p>
+            <ol class="agent-connect-steps">
+                <li data-i18n="agent.connection.step_authorize">Choose the default permission in Settings, then Authorize agent on each intended tab. Adjust an authorized tab in the Agent panel.</li>
+                <li data-i18n="agent.connection.step_copy">Copy the prompt to the agent running on the Core host.</li>
+                <li data-i18n="agent.connection.step_confirm">Run discover, then hello. Authenticated requests appear below.</li>
+            </ol>
+            <p id="agent-connect-activity" class="agent-connect-activity" aria-live="polite"></p>
+            <textarea id="agent-connect-info" readonly aria-label="Local agent prompt" hidden data-i18n-aria-label="agent.connection.prompt"></textarea>
+            <div class="agent-tunnel-actions">
+                <button id="agent-connect-open-panel" type="button" data-i18n="agent.panel.open">Open Agent Panel</button>
+                <button id="agent-connect-refresh" type="button" data-i18n="common.refresh">Refresh Status</button>
+                <button id="agent-connect-copy-url" type="button" disabled data-i18n="common.copy_url">Copy URL</button>
+            </div>
+        </details>
         <div class="agent-tunnel-actions">
-            <button id="agent-connect-open-panel" type="button" data-i18n="agent.panel.open">Open Agent Panel</button>
-            <button id="agent-connect-refresh" type="button" data-i18n="common.refresh">Refresh Status</button>
-            <button id="agent-connect-copy" type="button" disabled data-i18n="agent.connection.copy">Copy Prompt</button>
             <button id="agent-connect-close" type="button" data-i18n="common.close">Close</button>
         </div>
     </dialog>
     <dialog id="agent-tunnel-dialog" aria-labelledby="agent-tunnel-title">
         <h3 id="agent-tunnel-title" data-i18n="agent.tunnel.title">Agent Tunnel</h3>
-        <p id="agent-tunnel-carrier"></p>
-        <div id="agent-tunnel-setup">
-        <ol class="agent-connect-steps">
-            <li data-i18n="agent.tunnel.step_permissions">In each intended tab’s Agent panel, enable access and choose its permission.</li>
-            <li data-i18n="agent.tunnel.step_start">Click Start / Renew Access to start or update this tunnel’s access. Valid tokens keep their expiry; separate local tokens are not required.</li>
-            <li data-i18n="agent.tunnel.step_copy">Once ready, click Copy Prompt and paste it to the agent on this SSH host.</li>
-        </ol>
-        <p data-i18n="agent.tunnel.requirements">A new tunnel copies the current helpers and skills to a private temporary directory on this SSH host. Requires Python 3.9+, SFTP, remote forwarding and listener inspection; checks support Linux, FreeBSD and macOS.</p>
-        <p id="agent-tunnel-targets-hint" data-i18n="agent.tunnel.targets_hint">Refresh Status updates this list; it does not check the tunnel.</p>
-        <div id="agent-tunnel-targets"></div>
-        </div>
-        <p id="agent-tunnel-lifecycle-hint" data-i18n="agent.tunnel.lifecycle_hint">This tunnel follows this page’s tab permissions, including tabs enabled later. Close keeps it running. Stop revokes this tunnel’s access. It stops when its SSH connection closes or this page disconnects, including a reload.</p>
-        <p id="agent-tunnel-check-hint" data-i18n="agent.tunnel.check_hint">Check Tunnel verifies the remote loopback listener, helpers, and connection to this Core instance. Failure stops this tunnel and revokes its access.</p>
-        <p id="agent-tunnel-message" role="status"></p>
+        <p id="agent-tunnel-introduction" data-i18n="agent.connection.summary" hidden>Copy the connection instructions and give them to the agent in the current tab’s environment.</p>
         <div id="agent-tunnel-connection" hidden>
-            <h4 data-i18n="agent.connection.title">Agent connection</h4>
             <div class="agent-connect-url">
                 <label for="agent-tunnel-url" data-i18n="agent.connection.url">Agent Info URL</label>
                 <input id="agent-tunnel-url" readonly aria-label="Agent Info URL" data-i18n-aria-label="agent.connection.url">
-                <button id="agent-tunnel-copy-url" type="button" data-i18n="common.copy_url">Copy URL</button>
+                <button id="agent-tunnel-copy" type="button" data-i18n="agent.connection.copy" hidden>Copy Prompt</button>
             </div>
+        </div>
+        <p id="agent-tunnel-message" role="status"></p>
+        <details id="agent-tunnel-details" open>
+            <summary id="agent-tunnel-details-summary" data-i18n="agent.connection.read_more" hidden>Read more</summary>
+            <p id="agent-tunnel-carrier"></p>
+            <div id="agent-tunnel-setup">
+            <ol class="agent-connect-steps">
+                <li data-i18n="agent.tunnel.step_permissions">In each intended tab’s Agent panel, enable access and choose its permission.</li>
+                <li data-i18n="agent.tunnel.step_start">Click Start / Renew Access to start or update this tunnel’s access. Valid tokens keep their expiry; separate local tokens are not required.</li>
+                <li data-i18n="agent.tunnel.step_copy">Once ready, click Copy Prompt and paste it to the agent on this SSH host.</li>
+            </ol>
+            <p data-i18n="agent.tunnel.requirements">A new tunnel copies the current helpers and skills to a private temporary directory on this SSH host. Requires Python 3.9+, SFTP, remote forwarding and listener inspection; checks support Linux, FreeBSD and macOS.</p>
+            <p id="agent-tunnel-targets-hint" data-i18n="agent.tunnel.targets_hint">Refresh Status updates this list; it does not check the tunnel.</p>
+            <div id="agent-tunnel-targets"></div>
+            </div>
+            <p id="agent-tunnel-lifecycle-hint" data-i18n="agent.tunnel.lifecycle_hint">This tunnel follows this page’s tab permissions, including tabs enabled later. Close keeps it running. Stop revokes this tunnel’s access. It stops when its SSH connection closes or this page disconnects, including a reload.</p>
+            <p id="agent-tunnel-check-hint" data-i18n="agent.tunnel.check_hint">Check Tunnel verifies the remote loopback listener, helpers, and connection to this Core instance. Failure stops this tunnel and revokes its access.</p>
             <p id="agent-tunnel-verification"></p>
             <p id="agent-tunnel-activity" class="agent-connect-activity" aria-live="polite"></p>
-        </div>
-        <textarea id="agent-tunnel-info" readonly aria-label="Agent connection prompt" data-i18n-aria-label="agent.connection.prompt" hidden></textarea>
+            <textarea id="agent-tunnel-info" readonly aria-label="Agent connection prompt" data-i18n-aria-label="agent.connection.prompt" hidden></textarea>
+            <div class="agent-tunnel-actions">
+                <button id="agent-tunnel-copy-url" type="button" data-i18n="common.copy_url" disabled>Copy URL</button>
+                <button id="agent-tunnel-manage" type="button" data-i18n="agent.tunnel.manage" hidden>Manage Tunnel</button>
+                <button id="agent-tunnel-refresh" type="button" data-i18n="common.refresh">Refresh Status</button>
+                <button id="agent-tunnel-check" type="button" data-i18n="agent.tunnel.check" aria-describedby="agent-tunnel-check-hint" disabled>Check Tunnel</button>
+                <button id="agent-tunnel-stop" type="button" data-i18n="agent.tunnel.stop" aria-describedby="agent-tunnel-lifecycle-hint">Stop Tunnel</button>
+                <button id="agent-tunnel-apply" type="button" data-i18n="agent.tunnel.apply">Start / Renew Access</button>
+            </div>
+        </details>
         <div class="agent-tunnel-actions">
-            <button id="agent-tunnel-copy" type="button" data-i18n="agent.connection.copy" hidden>Copy Prompt</button>
-            <button id="agent-tunnel-manage" type="button" data-i18n="agent.tunnel.manage" hidden>Manage Tunnel</button>
-            <button id="agent-tunnel-refresh" type="button" data-i18n="common.refresh">Refresh Status</button>
-            <button id="agent-tunnel-check" type="button" data-i18n="agent.tunnel.check" aria-describedby="agent-tunnel-check-hint" disabled>Check Tunnel</button>
-            <button id="agent-tunnel-stop" type="button" data-i18n="agent.tunnel.stop" aria-describedby="agent-tunnel-lifecycle-hint">Stop Tunnel</button>
-            <button id="agent-tunnel-apply" type="button" data-i18n="agent.tunnel.apply">Start / Renew Access</button>
             <button id="agent-tunnel-close" type="button" data-i18n="common.close">Close</button>
         </div>
     </dialog>
@@ -2910,6 +2922,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             const agentConnectDialog = document.getElementById('agent-connect-dialog');
             const agentConnectInfo = document.getElementById('agent-connect-info');
             const agentConnectMessage = document.getElementById('agent-connect-message');
+            let agentTunnelInfoView = false;
             let agentTunnelCarrier = null;
             let agentTunnelRequest = 0;
             let agentTunnelId = null;
@@ -2931,6 +2944,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 element.classList.toggle('agent-copy-warning', copyFailed);
                 element.setAttribute('role', copyFailed ? 'alert' : 'status');
                 element.textContent = message;
+                element.hidden = !message;
             }
 
             async function copyAgentConnectionField(fieldId, messageElement) {
@@ -2940,6 +2954,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     await navigator.clipboard.writeText(field.value);
                     setAgentConnectionMessage(messageElement, t('agent.connection.copied'));
                 } catch (_error) {
+                    const details = field.closest('details');
+                    if (details) details.open = true;
                     field.focus();
                     field.select();
                     const shortcut = isApplePlatform() ? 'Command+C' : 'Ctrl+C';
@@ -2973,7 +2989,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     agentConnectActivity = available ? result.terminals || [] : [];
                     renderAgentConnectionActivity('agent-connect-activity', agentConnectActivity);
                     setAgentConnectionMessage(agentConnectMessage, available
-                        ? t('agent.connection.ready')
+                        ? ''
                         : result?.message || t('agent.connection.unavailable'));
                 });
             }
@@ -2986,6 +3002,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     return;
                 }
                 agentConnectInfo.hidden = true;
+                document.getElementById('agent-connect-details').open = false;
                 agentConnectDialog.showModal();
                 requestAgentConnectInfo();
             });
@@ -3179,6 +3196,10 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             });
 
             function setAgentTunnelInfoView(infoView) {
+                agentTunnelInfoView = infoView;
+                document.getElementById('agent-tunnel-introduction').hidden = !infoView;
+                document.getElementById('agent-tunnel-details-summary').hidden = !infoView;
+                document.getElementById('agent-tunnel-details').open = !infoView;
                 document.getElementById('agent-tunnel-title').textContent = t(infoView ? 'agent.connection.title' : 'agent.tunnel.title');
                 document.getElementById('agent-tunnel-setup').hidden = infoView;
                 document.getElementById('agent-tunnel-apply').hidden = infoView;
@@ -3214,6 +3235,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 agentTunnelInfo.hidden = true;
                 document.getElementById('agent-tunnel-connection').hidden = true;
                 document.getElementById('agent-tunnel-url').value = '';
+                document.getElementById('agent-tunnel-copy-url').disabled = true;
                 document.getElementById('agent-tunnel-check').disabled = true;
                 document.getElementById('agent-tunnel-stop').disabled = true;
                 document.getElementById('agent-tunnel-copy').hidden = true;
@@ -3246,7 +3268,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     readyAgentTunnels.delete(agentTunnelCarrier);
                 }
                 updateAgentTunnelButtons();
-                setAgentConnectionMessage(agentTunnelMessage, ready ? t('agent.tunnel.ready')
+                setAgentConnectionMessage(agentTunnelMessage, ready ? (agentTunnelInfoView ? '' : t('agent.tunnel.ready'))
                     : result && result.status === 'stopped'
                         ? t(result.cleanup_pending ? 'agent.tunnel.cleanup_pending' : 'agent.tunnel.stopped')
                     : (result && result.message) || t('agent.tunnel.setup_failed'));
@@ -3256,6 +3278,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 agentTunnelActivity = ready ? result.terminals || [] : [];
                 document.getElementById('agent-tunnel-connection').hidden = !ready;
                 document.getElementById('agent-tunnel-url').value = ready ? result.agentinfo_url : '';
+                document.getElementById('agent-tunnel-copy-url').disabled = !ready;
                 document.getElementById('agent-tunnel-check').disabled = !ready;
                 document.getElementById('agent-tunnel-verification').textContent = ready
                     ? t('agent.tunnel.verified_at', { time: new Date(result.verified_at * 1000).toLocaleString(uiText.locale) }) : '';
diff --git a/tests/agent_browser_smoke.py b/tests/agent_browser_smoke.py
index 9d7bf29..a179866 100644
--- a/tests/agent_browser_smoke.py
+++ b/tests/agent_browser_smoke.py
@@ -895,7 +895,7 @@ def test_agent_language_preview_preserves_access_and_applies_on_next_page(browse
         check(page.locator('#agent-connect-info').get_attribute('aria-label') == 'Agent 連線指引',
               'connection prompt accessible name was not localized')
         check(page.inner_text('#agent-connect-copy') == '複製連線指引', 'connection copy action was not localized')
-        check('main: 等待 Agent' in page.inner_text('#agent-connect-activity'),
+        check('main: 等待 Agent' in page.text_content('#agent-connect-activity'),
               'localized connection activity did not distinguish a grant from Agent activity')
         prompt = page.input_value('#agent-connect-info')
         check('Run discover, then hello' in prompt, 'display language translated the machine-facing connection prompt')
@@ -4486,8 +4486,9 @@ def test_terminal_payload_text_is_not_control(browser, access_url):
         close_context(context)
 
 
-def test_core_agent_connect_info_can_be_copied_and_confirmed(browser, access_url):
-    context, page = new_page(browser, access_url)
+def test_core_agent_connect_info_can_be_copied_and_confirmed(browser, access_url, ui_language='en'):
+    context, page = new_page(browser, access_url, ui_language)
+    zh = ui_language == 'zh-TW'
     try:
         parsed = urllib.parse.urlparse(access_url)
         agentinfo_url = urllib.parse.urlunparse(parsed._replace(
@@ -4497,21 +4498,30 @@ def test_core_agent_connect_info_can_be_copied_and_confirmed(browser, access_url
         })''')
         page.click('#agent-connect-btn')
         page.wait_for_selector('#agent-connect-copy:not([disabled])')
+        check(not page.locator('#agent-connect-details').evaluate('element => element.open'),
+              'Connection details were not collapsed by default')
+        for selector in ['#agent-connect-info', '#agent-connect-activity', '#agent-connect-copy-url',
+                         '#agent-connect-refresh', '#agent-connect-open-panel']:
+            check(page.locator(selector).is_hidden(), 'Secondary connection content remained visible: ' + selector)
+        check(page.locator('#agent-connect-message').is_hidden(), 'Ready state repeated the introduction')
         check(page.input_value('#agent-connect-url') == agentinfo_url, 'Core did not expose its Agent Info URL')
         info_text = page.input_value('#agent-connect-info')
         check('Core host environment' in info_text and 'Run discover, then hello' in info_text,
               'Connect Info did not explain where and how to confirm access')
         check('--token' not in info_text and 'agt_' not in info_text, 'Connect Info exposed a token')
         check(page.locator('.terminal-tab.agent-token-active').count() == 0, 'Reading Connect Info minted a token')
-        check('No active grants' in page.inner_text('#agent-connect-activity'), 'Missing authorization was not explained')
+        check(('目前沒有有效授權' if zh else 'No active grants') in page.text_content('#agent-connect-activity'), 'Missing authorization was not explained')
         check(page.locator('#agent-tunnel-btn').is_hidden(), 'Local shell offered an SSH tunnel')
         check(page.locator('#agent-remote-info-btn').count() == 0, 'A separate remote Agent Info button remains')
-        check(page.inner_text('#agent-connect-btn') == 'Agent connection', 'Info button did not identify the Agent connection workflow')
-        check(page.inner_text('#agent-connect-copy') == 'Copy Prompt', 'Local info did not offer a prompt')
-        page.click('#agent-connect-copy-url')
-        page.wait_for_function('url => window.copiedAgentText === url', arg=agentinfo_url)
+        check(page.inner_text('#agent-connect-btn') == ('Agent 連線' if zh else 'Agent connection'), 'Info button did not identify the Agent connection workflow')
+        check(page.inner_text('#agent-connect-copy') == ('複製連線指引' if zh else 'Copy Prompt'), 'Local info did not offer a prompt')
         page.click('#agent-connect-copy')
         page.wait_for_function('text => window.copiedAgentText === text', arg=info_text)
+        page.locator('#agent-connect-details summary').focus()
+        page.keyboard.press('Enter')
+        check(page.locator('#agent-connect-info').is_visible(), 'Keyboard disclosure did not reveal the prompt')
+        page.click('#agent-connect-copy-url')
+        page.wait_for_function('url => window.copiedAgentText === url', arg=agentinfo_url)
         page.focus('#agent-connect-url')
         page.evaluate("() => { window.dispatchEvent(new Event('blur')); window.dispatchEvent(new Event('focus')); }")
         page.wait_for_timeout(150)
@@ -4524,7 +4534,11 @@ def test_core_agent_connect_info_can_be_copied_and_confirmed(browser, access_url
         page.click('#agent-external-token-btn')
         page.wait_for_selector('.terminal-tab.agent-token-active', state='attached')
         page.click('#agent-connect-btn')
-        page.wait_for_function("() => document.getElementById('agent-connect-activity').innerText.includes('main: waiting for agent')")
+        check(not page.locator('#agent-connect-details').evaluate('element => element.open'),
+              'Reopening connection details retained the expanded view')
+        page.click('#agent-connect-details summary')
+        page.wait_for_function("text => document.getElementById('agent-connect-activity').innerText.includes(text)",
+                               arg='main: ' + ('等待 Agent' if zh else 'waiting for agent'))
         with urllib.request.urlopen(agentinfo_url, timeout=5) as response:
             info = json.load(response)
         hello = subprocess.run([
@@ -4532,12 +4546,17 @@ def test_core_agent_connect_info_can_be_copied_and_confirmed(browser, access_url
             '--terminal', 'main', 'hello',
         ], capture_output=True, text=True, timeout=15)
         check(hello.returncode == 0, 'The copied Agent Info URL could not run the shared hello helper')
-        page.wait_for_function("() => document.getElementById('agent-connect-activity').innerText.includes('last authenticated request')")
+        page.wait_for_function("text => document.getElementById('agent-connect-activity').innerText.includes(text)",
+                               arg='最近一次通過驗證的請求' if zh else 'last authenticated request')
+        page.click('#agent-connect-details summary')
         page.evaluate("() => { navigator.clipboard.writeText = async () => { throw new Error('Denied'); }; }")
-        page.click('#agent-connect-copy-url')
-        page.wait_for_function("() => document.getElementById('agent-connect-message').innerText.includes('copy it manually')")
-        selection = page.locator('#agent-connect-url').evaluate('field => field.value.slice(field.selectionStart, field.selectionEnd)')
-        check(selection == agentinfo_url, 'Clipboard fallback did not select the URL')
+        page.click('#agent-connect-copy')
+        page.wait_for_function("text => document.getElementById('agent-connect-message').innerText.includes(text)",
+                               arg='手動複製' if zh else 'copy it manually')
+        check(page.locator('#agent-connect-message').is_visible(), 'Copy failure was hidden in collapsed details')
+        check(page.locator('#agent-connect-info').is_visible(), 'Copy failure did not reveal the selected prompt')
+        selection = page.locator('#agent-connect-info').evaluate('field => field.value.slice(field.selectionStart, field.selectionEnd)')
+        check(selection == page.input_value('#agent-connect-info'), 'Clipboard fallback did not select the prompt')
         page.click('#agent-connect-close')
     finally:
         close_context(context)
@@ -4669,8 +4688,14 @@ def ready(carrier, port):
         check(page.locator('#agent-tunnel-setup').is_hidden(), 'Remote info repeated setup controls')
         check(page.locator('#agent-tunnel-copy').is_hidden(), 'Remote shortcut offered a stale cached prompt')
         page.evaluate('payload => window.terminalTest.completeAgentTunnelRequestForTest(1, payload)', first)
+        check(page.locator('#agent-tunnel-info').is_hidden(), 'Remote info did not collapse the full prompt')
+        for selector in ['#agent-tunnel-manage', '#agent-tunnel-refresh', '#agent-tunnel-check',
+                         '#agent-tunnel-copy-url', '#agent-tunnel-carrier']:
+            check(page.locator(selector).is_hidden(), 'Remote secondary content remained visible: ' + selector)
+        check(page.locator('#agent-tunnel-message').is_hidden(), 'Remote ready state repeated the introduction')
         page.click('#agent-tunnel-copy')
         page.wait_for_function('text => window.copiedAgentText === text', arg=prompt)
+        page.click('#agent-tunnel-details summary')
         page.click('#agent-tunnel-manage')
         check(page.locator('#agent-tunnel-setup').is_visible(), 'Manage did not reveal tunnel controls')
         page.click('#agent-tunnel-refresh')

From ca5c319b7d4ffd78c47faba6a6878356670dee92 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Mon, 21 Sep 2026 23:40:16 +0800
Subject: [PATCH 36/43] Sync Desktop language with Core Settings

---
 desktop/README.md                 |  18 +++-
 desktop/browser-access.cjs        |   4 +-
 desktop/diagnostics-window.cjs    |  12 ++-
 desktop/language.cjs              |  49 ++++------
 desktop/main.cjs                  | 148 ++++++++++++++++--------------
 desktop/messages.js               |  16 ----
 desktop/test/diagnostics.test.cjs |   1 +
 desktop/test/language.test.cjs    |  90 ++++++------------
 desktop/test/toolbar-smoke.cjs    |  20 ++++
 desktop/test/ui-commands.test.cjs |  56 ++++++++++-
 desktop/ui-commands.cjs           |  12 ++-
 docs/desktop_ui_copy_review.tsv   |  20 ++--
 docs/desktop_ui_review_plan.md    |  38 +++++---
 templates/index.html              |   1 +
 14 files changed, 269 insertions(+), 216 deletions(-)

diff --git a/desktop/README.md b/desktop/README.md
index 5269824..e57b8da 100644
--- a/desktop/README.md
+++ b/desktop/README.md
@@ -10,10 +10,20 @@ Desktop copy and localization are planned in the
 [review plan](../docs/desktop_ui_review_plan.md), with a separate
 [translation review table](../docs/desktop_ui_copy_review.tsv).
 
-Choose **StandTerm > Desktop language...** to select English or Traditional
-Chinese (Taiwan) for the next launch. The preference belongs to the Desktop
-profile; Core keeps its own language setting. Saving a choice does not restart
-StandTerm or interrupt recording. Coverage includes custom menus, toolbar labels,
+Choose English or Traditional Chinese (Taiwan) in Core **Settings**. After Save,
+Desktop follows that stored preference through its existing Core status polling;
+the separate Desktop language menu is removed. Menus, toolbar and capture status
+update without restarting Core or interrupting recording. Core's page text retains
+its existing next-load language behavior. Open native confirmations keep their
+original labels; subsequent dialogs use the synchronized language. Diagnostics
+updates when opened or refreshed.
+
+Desktop caches the last synchronized language in the mode profile's `language.json`
+for startup, setup and recovery before Core is ready. Older Core versions without
+the language snapshot field retain that cache; missing or invalid cache uses English.
+A cache write failure is logged once per changed preference and does not stop the
+active language update. This does not synchronize unrelated browser profiles or
+backend modes. Coverage includes custom menus, toolbar labels,
 Agent help, Browser Access, Diagnostics, About, external-browser confirmations
 and Capture dialogs/status, environment preparation, Core source/recovery, port
 selection, Files download notices and native paste confirmation.
diff --git a/desktop/browser-access.cjs b/desktop/browser-access.cjs
index af7c66b..4a9a41f 100644
--- a/desktop/browser-access.cjs
+++ b/desktop/browser-access.cjs
@@ -69,13 +69,13 @@ function createBrowserAccess({ origin, session, launcherToken, available, confir
   return {
     run,
     dispose: () => { launcherToken = ''; },
-    menu: { label: t('desktop.browser_access.menu'), submenu: [
+    get menu() { return { label: t('desktop.browser_access.menu'), submenu: [
       { label: t('desktop.browser_access.open'), click: () => run('open') },
       { label: t('desktop.browser_access.copy_authorization'), click: () => run('copy-auth') },
       { type: 'separator' },
       { label: t('desktop.browser_access.copy_url'), click: () => run('copy-url') },
       { label: t('desktop.browser_access.copy_token'), click: () => run('copy-token') },
-    ] },
+    ] }; },
   };
 }
 
diff --git a/desktop/diagnostics-window.cjs b/desktop/diagnostics-window.cjs
index 9658130..cdba704 100644
--- a/desktop/diagnostics-window.cjs
+++ b/desktop/diagnostics-window.cjs
@@ -43,17 +43,19 @@ function createStatusWindow(owner, snapshot, { copyUrl, i18n = create('en') }) {
       for (const name of ['will-navigate', 'will-frame-navigate', 'will-redirect', 'will-attach-webview']) {
         win.webContents.on(name, event => event.preventDefault());
       }
-      win.setMenu(Menu.buildFromTemplate([{ label: t('desktop.toolbar.menu_view'), submenu: [
-        { label: t('desktop.diagnostics.refresh'), accelerator: 'CommandOrControl+R', click: () => refresh().catch(() => {}) },
-        { label: t('desktop.diagnostics.copy_backend_url'), click: copyUrl },
-        { role: 'close' },
-      ] }]));
       const owned = win;
       const close = () => { if (!owned.isDestroyed()) owned.destroy(); };
       owner.once('closed', close);
       owned.once('closed', () => owner.removeListener('closed', close));
     }
     async function refresh() {
+      win.setTitle(t('desktop.diagnostics.window_title'));
+      win.setMenu(Menu.buildFromTemplate([{ label: t('desktop.toolbar.menu_view'), submenu: [
+        { label: t('desktop.diagnostics.refresh'), accelerator: 'CommandOrControl+R', click: () => refresh().catch(() => {}) },
+        { label: t('desktop.diagnostics.copy_backend_url'), click: copyUrl },
+        { role: 'close' },
+      ] }]));
+
       const { rows, events } = snapshot();
       await win.loadURL('data:text/html,' + encodeURIComponent(statusHtml(rows, events, i18n)));
     }
diff --git a/desktop/language.cjs b/desktop/language.cjs
index f86557a..aac7113 100644
--- a/desktop/language.cjs
+++ b/desktop/language.cjs
@@ -13,40 +13,27 @@ function createLanguage(file) {
       if (data?.version === 1) selected = normalizeLocale(data.locale);
     }
   } catch { /* Missing or invalid preferences use English. */ }
-  const { locale, t } = create(selected);
-  let pending = false;
-  async function choose(dialog, win) {
-    if (pending || win.isDestroyed()) return false;
-    pending = true;
+  let active = create(selected);
+  let lastSynchronized;
+  function sync(locale) {
+    if (!['en', 'zh-TW'].includes(locale) || locale === lastSynchronized) return { changed: false };
+    lastSynchronized = locale;
+    const changed = active.locale !== locale;
+    active = create(locale);
+    const temporary = `${file}.${randomUUID()}.tmp`;
     try {
-      const answer = await dialog.showMessageBox(win, {
-        type: 'question', title: t('desktop.language.title'), message: t('desktop.language.choose'),
-        detail: t('desktop.language.detail', { language: t(selected === 'zh-TW' ? 'desktop.language.name_zh_tw' : 'desktop.language.name_en') }),
-        buttons: [t('desktop.common.cancel'), t('desktop.language.name_en'), t('desktop.language.name_zh_tw')],
-        defaultId: 0, cancelId: 0, noLink: true,
-      });
-      if (win.isDestroyed() || ![1, 2].includes(answer.response)) return false;
-      const next = answer.response === 2 ? 'zh-TW' : 'en';
-      if (next === selected) return true;
-      const temporary = `${file}.${randomUUID()}.tmp`;
-      try {
-        fs.mkdirSync(path.dirname(file), { recursive: true });
-        fs.writeFileSync(temporary, JSON.stringify({ version: 1, locale: next }, null, 2), { flag: 'wx', mode: 0o600 });
-        fs.renameSync(temporary, file);
-      } finally {
-        try { fs.unlinkSync(temporary); } catch (error) { if (error.code !== 'ENOENT') throw error; }
-      }
-      selected = next;
-      if (!win.isDestroyed()) await dialog.showMessageBox(win, { type: 'info', title: t('desktop.language.title'),
-        message: t('desktop.language.saved'), buttons: [t('desktop.common.ok')], noLink: true });
-      return true;
+      fs.mkdirSync(path.dirname(file), { recursive: true });
+      fs.writeFileSync(temporary, JSON.stringify({ version: 1, locale }, null, 2), { flag: 'wx', mode: 0o600 });
+      fs.renameSync(temporary, file);
+      return { changed, persisted: true };
     } catch {
-      if (!win.isDestroyed()) await dialog.showMessageBox(win, { type: 'error', title: t('desktop.language.title'),
-        message: t('desktop.language.failed'), buttons: [t('desktop.common.ok')], noLink: true }).catch(() => {});
-      return false;
-    } finally { pending = false; }
+      // Keep the current Core preference active even when its startup cache cannot be saved.
+      return { changed, persisted: false };
+    } finally {
+      try { fs.unlinkSync(temporary); } catch { /* A failed cache write must not block the UI. */ }
+    }
   }
-  return { locale, t, choose };
+  return { get locale() { return active.locale; }, t: (...args) => active.t(...args), sync };
 }
 
 module.exports = { createLanguage };
diff --git a/desktop/main.cjs b/desktop/main.cjs
index 09952a2..4f01d72 100644
--- a/desktop/main.cjs
+++ b/desktop/main.cjs
@@ -231,13 +231,17 @@ function createTray() {
   const icon = nativeImage.createFromBitmap(pixels, { width: size, height: size });
   tray = new Tray(icon);
   tray.setToolTip('StandTerm Desktop');
-  tray.setContextMenu(Menu.buildFromTemplate([
+  updateTrayMenu();
+  tray.on('click', showWindow);
+  return icon;
+}
+
+function updateTrayMenu() {
+  tray?.setContextMenu(Menu.buildFromTemplate([
     { label: t('desktop.menu.open'), click: showWindow },
     { type: 'separator' },
     { label: t('desktop.menu.quit'), click: () => app.quit() },
   ]));
-  tray.on('click', showWindow);
-  return icon;
 }
 
 async function start() {
@@ -328,7 +332,15 @@ async function start() {
     sandbox: true, webSecurity: true, webviewTag: false, allowRunningInsecureContent: false, devTools: true,
   } });
   const contents = coreView.webContents;
-  const commands = createUiCommands(win, contents, handoff.origin, t);
+  const commands = createUiCommands(win, contents, handoff.origin, t, locale => {
+    const result = language.sync(locale);
+    if (result.persisted === false) diagnostics.write('language_cache_failed');
+    if (!result.changed) return;
+    rebuildMenu();
+    updateTrayMenu();
+    toolbar.send({ locale: language.locale });
+    capture.update();
+  });
   let toolbar;
   const updateTitle = () => {
     if (!win.isDestroyed()) win.setTitle(`${captureTitle ? `[${captureTitle}] ` : ''}${MODES[mode]} - ${pageTitle}`);
@@ -362,18 +374,18 @@ async function start() {
     updateTitle();
   });
   const connectionInfo = agentConnectionInfo({ origin: handoff.origin, instanceId: handoff.instance_id, mode });
-  const coreVersion = handoff.core_version || t('desktop.about.unknown_version');
-  const coreBuild = prepared?.source === 'git' ? prepared.coreSource
+  const coreVersion = () => handoff.core_version || t('desktop.about.unknown_version');
+  const coreBuild = () => prepared?.source === 'git' ? prepared.coreSource
     : handoff.core_bundle_id || t('desktop.about.unmanaged_source');
-  const pythonVersion = handoff.python_version || t('desktop.about.unknown_version');
-  const buildLabel = t(prepared?.source === 'git' ? 'desktop.about.git_revision' : 'desktop.about.bundle_sha256');
-  const aboutDetails = t('desktop.about.details', { core_version: coreVersion, build_label: buildLabel,
-    core_build: coreBuild, backend: MODES[mode], python_version: pythonVersion,
+  const pythonVersion = () => handoff.python_version || t('desktop.about.unknown_version');
+  const buildLabel = () => t(prepared?.source === 'git' ? 'desktop.about.git_revision' : 'desktop.about.bundle_sha256');
+  const aboutDetails = () => t('desktop.about.details', { core_version: coreVersion(), build_label: buildLabel(),
+    core_build: coreBuild(), backend: MODES[mode], python_version: pythonVersion(),
     electron_version: process.versions.electron, chromium_version: process.versions.chrome,
     node_version: process.versions.node, platform: process.platform, arch: process.arch });
   const openStatus = createStatusWindow(win, () => ({ rows: [
     [t('desktop.diagnostics.desktop_version'), app.getVersion()], [t('desktop.diagnostics.backend_mode'), MODES[mode]],
-    [t('desktop.diagnostics.core_version'), coreVersion], [buildLabel, coreBuild], [t('desktop.diagnostics.python_version'), pythonVersion],
+    [t('desktop.diagnostics.core_version'), coreVersion()], [buildLabel(), coreBuild()], [t('desktop.diagnostics.python_version'), pythonVersion()],
     [t('desktop.diagnostics.backend_url'), handoff.origin], [t('desktop.diagnostics.instance_id'), handoff.instance_id],
     [t('desktop.diagnostics.platform'), `${process.platform} / ${process.arch}`],
     [t('desktop.diagnostics.engines'), `${process.versions.electron} / ${process.versions.chrome} / ${process.versions.node}`],
@@ -386,64 +398,66 @@ async function start() {
   ], events: diagnostics.snapshot() }), {
     copyUrl: () => clipboard.writeText(connectionInfo.base_url), i18n: language,
   });
-  Menu.setApplicationMenu(Menu.buildFromTemplate([
-    { id: 'standterm', label: 'StandTerm', submenu: [
-      commands.item('settings'),
-      { id: 'desktop-language', label: t('desktop.language.menu'), click: () => { void language.choose(dialog, win); } },
-      ...(coreManager ? [{ label: t('desktop.menu.core_source'), click: () => {
-        void coreManager.showManager().catch(error => dialog.showErrorBox(t('desktop.startup.management_unavailable'), error.message));
-      } }] : []),
-      { label: t('desktop.menu.capture_settings'), click: () => capture.configure() },
-      browserAccess.menu,
-      { type: 'separator' },
-      commands.item('newTab'), commands.item('closeTab'), commands.item('closeAll'),
-      commands.item('files'), commands.item('pip'),
-      { type: 'separator' },
-      { id: 'desktop-about', label: t('desktop.menu.about'), click: () => dialog.showMessageBox(win, {
-        type: 'info', title: t('desktop.menu.about'), message: t('desktop.about.desktop_version', { version: app.getVersion() }),
-        detail: aboutDetails, buttons: [t('desktop.common.ok')], noLink: true,
-      }) },
-      { label: t('desktop.menu.show'), click: showWindow },
-      ...(process.platform === 'darwin' ? [{ role: 'services' }, { type: 'separator' }, { role: 'hide' }, { role: 'hideOthers' }, { role: 'unhide' }, { type: 'separator' }] : []),
-      { label: t('desktop.menu.quit'), accelerator: 'CommandOrControl+Q', click: () => app.quit() },
-    ] },
-    { id: 'edit', role: 'editMenu', label: t('desktop.toolbar.menu_edit') },
-    agentMenu({
-      t,
-      uiItems: [commands.item('agentPanel'), commands.item('pauseAgent'), { type: 'separator' }],
-      showHelp: () => dialog.showMessageBox(win, {
-        type: 'info', title: 'StandTerm Agent', message: t('desktop.agent.help_title'),
-        detail: ['desktop.agent.help_permissions', 'desktop.agent.help_environment',
-          'desktop.agent.help_connection', 'desktop.agent.help_skills'].map(key => t(key)).join('\n\n'),
-        buttons: [t('desktop.common.ok')], noLink: true,
+  function rebuildMenu() {
+    Menu.setApplicationMenu(Menu.buildFromTemplate([
+      { id: 'standterm', label: 'StandTerm', submenu: [
+        commands.item('settings'),
+        ...(coreManager ? [{ label: t('desktop.menu.core_source'), click: () => {
+          void coreManager.showManager().catch(error => dialog.showErrorBox(t('desktop.startup.management_unavailable'), error.message));
+        } }] : []),
+        { label: t('desktop.menu.capture_settings'), click: () => capture.configure() },
+        browserAccess.menu,
+        { type: 'separator' },
+        commands.item('newTab'), commands.item('closeTab'), commands.item('closeAll'),
+        commands.item('files'), commands.item('pip'),
+        { type: 'separator' },
+        { id: 'desktop-about', label: t('desktop.menu.about'), click: () => dialog.showMessageBox(win, {
+          type: 'info', title: t('desktop.menu.about'), message: t('desktop.about.desktop_version', { version: app.getVersion() }),
+          detail: aboutDetails(), buttons: [t('desktop.common.ok')], noLink: true,
+        }) },
+        { label: t('desktop.menu.show'), click: showWindow },
+        ...(process.platform === 'darwin' ? [{ role: 'services' }, { type: 'separator' }, { role: 'hide' }, { role: 'hideOthers' }, { role: 'unhide' }, { type: 'separator' }] : []),
+        { label: t('desktop.menu.quit'), accelerator: 'CommandOrControl+Q', click: () => app.quit() },
+      ] },
+      { id: 'edit', role: 'editMenu', label: t('desktop.toolbar.menu_edit') },
+      agentMenu({
+        t,
+        uiItems: [commands.item('agentPanel'), commands.item('pauseAgent'), { type: 'separator' }],
+        showHelp: () => dialog.showMessageBox(win, {
+          type: 'info', title: 'StandTerm Agent', message: t('desktop.agent.help_title'),
+          detail: ['desktop.agent.help_permissions', 'desktop.agent.help_environment',
+            'desktop.agent.help_connection', 'desktop.agent.help_skills'].map(key => t(key)).join('\n\n'),
+          buttons: [t('desktop.common.ok')], noLink: true,
+        }),
       }),
-    }),
-    { id: 'view', label: t('desktop.toolbar.menu_view'), submenu: [{ role: 'resetZoom' }, { role: 'zoomIn' }, { role: 'zoomOut' }, { role: 'togglefullscreen' },
-      { type: 'separator' },
-      ...capture.menu().submenu,
-    ] },
-    diagnosticsMenu({ origin: handoff.origin, mode, instanceId: handoff.instance_id,
-      t,
-      version: app.getVersion(), coreVersion: handoff.core_version, logger: diagnostics, persistent: !smoke,
-      copyText: text => clipboard.writeText(text),
-      openStatus: () => openStatus().catch(() => {
-        if (!win.isDestroyed()) dialog.showMessageBox(win, { type: 'warning', message: t('desktop.diagnostics.open_failed') });
+      { id: 'view', label: t('desktop.toolbar.menu_view'), submenu: [{ role: 'resetZoom' }, { role: 'zoomIn' }, { role: 'zoomOut' }, { role: 'togglefullscreen' },
+        { type: 'separator' },
+        ...capture.menu().submenu,
+      ] },
+      diagnosticsMenu({ origin: handoff.origin, mode, instanceId: handoff.instance_id,
+        t,
+        version: app.getVersion(), coreVersion: handoff.core_version, logger: diagnostics, persistent: !smoke,
+        copyText: text => clipboard.writeText(text),
+        openStatus: () => openStatus().catch(() => {
+          if (!win.isDestroyed()) dialog.showMessageBox(win, { type: 'warning', message: t('desktop.diagnostics.open_failed') });
+        }),
+        openLogs: async () => {
+          const error = await shell.openPath(diagnostics.directory);
+          if (error) await dialog.showMessageBox(win, { type: 'warning', message: t('desktop.diagnostics.folder_failed'), detail: diagnostics.directory });
+        },
+        openTools: async () => {
+          const opened = await openDeveloperTools(contents, async () => {
+            const answer = await dialog.showMessageBox(win, { type: 'warning', title: t('desktop.diagnostics.devtools_title'),
+              message: t('desktop.diagnostics.devtools_message'), detail: t('desktop.diagnostics.devtools_detail'),
+              buttons: [t('desktop.common.cancel'), t('desktop.diagnostics.devtools_open')], defaultId: 0, cancelId: 0, noLink: true });
+            return answer.response === 1;
+          });
+          if (opened) diagnostics.write('devtools_opened');
+        },
       }),
-      openLogs: async () => {
-        const error = await shell.openPath(diagnostics.directory);
-        if (error) await dialog.showMessageBox(win, { type: 'warning', message: t('desktop.diagnostics.folder_failed'), detail: diagnostics.directory });
-      },
-      openTools: async () => {
-        const opened = await openDeveloperTools(contents, async () => {
-          const answer = await dialog.showMessageBox(win, { type: 'warning', title: t('desktop.diagnostics.devtools_title'),
-            message: t('desktop.diagnostics.devtools_message'), detail: t('desktop.diagnostics.devtools_detail'),
-            buttons: [t('desktop.common.cancel'), t('desktop.diagnostics.devtools_open')], defaultId: 0, cancelId: 0, noLink: true });
-          return answer.response === 1;
-        });
-        if (opened) diagnostics.write('devtools_opened');
-      },
-    }),
-  ]));
+    ]));
+  }
+  rebuildMenu();
   const openExternal = createExternalOpener({ origin: handoff.origin, owner: contents,
     confirm: async url => {
       const answer = await dialog.showMessageBox(win, { type: 'question', title: t('desktop.external_browser.title'),
diff --git a/desktop/messages.js b/desktop/messages.js
index be084bc..86cc310 100644
--- a/desktop/messages.js
+++ b/desktop/messages.js
@@ -177,14 +177,6 @@
         "desktop.installer.return_to_installer": "Return to installer",
         "desktop.installer.setup_failed_detail": "Some environment preparation, moves to recovery, or shortcut changes may already have completed. Completed changes are not automatically undone. Check venv-recovery before retrying with the installer. No terminal backend was started.",
         "desktop.installer.setup_failed_title": "StandTerm operation did not complete",
-        "desktop.language.choose": "Choose the Desktop language for the next launch.",
-        "desktop.language.detail": "Saved choice: {language}\n\nCore has its own language setting. Some Desktop text remains in English.",
-        "desktop.language.failed": "Could not confirm the language setting. Reopen Desktop language to check the saved choice.",
-        "desktop.language.menu": "Desktop language...",
-        "desktop.language.name_en": "English",
-        "desktop.language.name_zh_tw": "\u7e41\u9ad4\u4e2d\u6587",
-        "desktop.language.saved": "Language saved. It applies the next time you launch StandTerm.",
-        "desktop.language.title": "Desktop language",
         "desktop.menu.about": "About StandTerm Desktop",
         "desktop.menu.agent_panel": "Show / hide Agent Panel",
         "desktop.menu.capture_settings": "Capture Settings...",
@@ -480,14 +472,6 @@
         "desktop.installer.return_to_installer": "\u8fd4\u56de\u5b89\u88dd\u7a0b\u5f0f",
         "desktop.installer.setup_failed_detail": "\u90e8\u5206\u74b0\u5883\u6e96\u5099\u3001\u79fb\u81f3\u5fa9\u539f\u8cc7\u6599\u593e\u6216\u6377\u5f91\u8b8a\u66f4\u53ef\u80fd\u5df2\u5b8c\u6210\u3002\u5df2\u5b8c\u6210\u7684\u8b8a\u66f4\u4e0d\u6703\u81ea\u52d5\u9084\u539f\u3002\u8acb\u5148\u6aa2\u67e5 venv-recovery\uff0c\u518d\u900f\u904e\u5b89\u88dd\u7a0b\u5f0f\u91cd\u8a66\u3002\u672a\u555f\u52d5\u7d42\u7aef\u5f8c\u7aef\u3002",
         "desktop.installer.setup_failed_title": "StandTerm \u64cd\u4f5c\u672a\u5b8c\u6210",
-        "desktop.language.choose": "\u9078\u64c7\u4e0b\u6b21\u555f\u52d5\u6642\u4f7f\u7528\u7684 Desktop \u8a9e\u7cfb\u3002",
-        "desktop.language.detail": "\u5df2\u5132\u5b58\u7684\u9078\u64c7\uff1a{language}\n\nCore \u7684\u8a9e\u7cfb\u9700\u53e6\u5916\u8a2d\u5b9a\u3002\u90e8\u5206 Desktop \u6587\u5b57\u4ecd\u4f7f\u7528\u82f1\u6587\u3002",
-        "desktop.language.failed": "\u7121\u6cd5\u78ba\u8a8d\u8a9e\u7cfb\u8a2d\u5b9a\u3002\u8acb\u91cd\u65b0\u958b\u555f\u300cDesktop \u8a9e\u7cfb\u300d\u67e5\u770b\u5df2\u5132\u5b58\u7684\u9078\u64c7\u3002",
-        "desktop.language.menu": "Desktop \u8a9e\u7cfb\u2026",
-        "desktop.language.name_en": "English",
-        "desktop.language.name_zh_tw": "\u7e41\u9ad4\u4e2d\u6587",
-        "desktop.language.saved": "\u5df2\u5132\u5b58\u8a9e\u7cfb\uff0c\u4e0b\u6b21\u555f\u52d5 StandTerm \u6642\u751f\u6548\u3002",
-        "desktop.language.title": "Desktop \u8a9e\u7cfb",
         "desktop.menu.about": "\u95dc\u65bc StandTerm Desktop",
         "desktop.menu.agent_panel": "\u986f\u793a\uff0f\u96b1\u85cf Agent \u9762\u677f",
         "desktop.menu.capture_settings": "\u756b\u9762\u64f7\u53d6\u8a2d\u5b9a\u2026",
diff --git a/desktop/test/diagnostics.test.cjs b/desktop/test/diagnostics.test.cjs
index bacefe2..a1c1f2b 100644
--- a/desktop/test/diagnostics.test.cjs
+++ b/desktop/test/diagnostics.test.cjs
@@ -91,6 +91,7 @@ test('translated diagnostic windows refresh through the same isolated scriptless
       isDestroyed() { return this.destroyed; }
       destroy() { this.destroyed = true; this.emit('closed'); }
       setMenu(menu) { this.menu = menu; }
+      setTitle(title) { this.title = title; }
       async loadURL(url) { this.urls.push(url); }
       show() {}
       focus() {}
diff --git a/desktop/test/language.test.cjs b/desktop/test/language.test.cjs
index eb64e9a..871b0d5 100644
--- a/desktop/test/language.test.cjs
+++ b/desktop/test/language.test.cjs
@@ -8,31 +8,21 @@ const path = require('node:path');
 const { createLanguage } = require('../language.cjs');
 const { create } = require('../i18n.js');
 
-const owner = { isDestroyed: () => false };
 function fixture() {
   const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'standterm-language-'));
   return { directory, file: path.join(directory, 'language.json') };
 }
-function dialog(response) {
-  const calls = [];
-  return { calls, showMessageBox: async (_win, options) => { calls.push(options); return { response }; } };
-}
 
-test('language persists per profile and takes effect only for a new instance', async () => {
-  const f = fixture(), original = createLanguage(f.file), prompt = dialog(2);
-  assert.equal(original.locale, 'en');
-  assert.equal(await original.choose(prompt, owner), true);
-  assert.deepEqual(JSON.parse(fs.readFileSync(f.file, 'utf8')), { version: 1, locale: 'zh-TW' });
-  assert.equal(original.locale, 'en');
-  assert.equal(original.t('desktop.menu.settings'), 'Settings...');
-  const reloaded = createLanguage(f.file);
-  assert.equal(reloaded.locale, 'zh-TW');
-  assert.equal(reloaded.t('desktop.menu.settings'), create('zh-TW').t('desktop.menu.settings'));
-  assert.equal(createLanguage(path.join(f.directory, 'other-profile', 'language.json')).locale, 'en');
-  const english = dialog(1);
-  assert.equal(await reloaded.choose(english, owner), true);
-  assert.equal(english.calls[0].buttons[0], reloaded.t('desktop.common.cancel'));
-  assert.equal(createLanguage(f.file).locale, 'en');
+test('Core language updates existing translators and the next-launch cache per profile', () => {
+  const f = fixture(), language = createLanguage(f.file), { t } = language;
+  assert.equal(language.locale, 'en');
+  for (const locale of ['zh-TW', 'en']) {
+    assert.deepEqual(language.sync(locale), { changed: true, persisted: true });
+    assert.equal(language.locale, locale);
+    assert.equal(t('desktop.menu.settings'), create(locale).t('desktop.menu.settings'));
+    assert.equal(createLanguage(f.file).locale, locale);
+  }
+  assert.equal(createLanguage(path.join(f.directory, 'other-profile/language.json')).locale, 'en');
   assert.deepEqual(fs.readdirSync(f.directory), ['language.json']);
 });
 
@@ -47,55 +37,31 @@ test('missing, malformed and unsupported preferences fall back to English', () =
   }
 });
 
-test('cancel, unknown responses and selecting the current language do not write', async () => {
+test('invalid and older-Core values leave the active language and cache untouched', () => {
   const f = fixture(), language = createLanguage(f.file);
-  for (const response of [0, -1, 3, '2', undefined, 1]) {
-    const prompt = dialog(response);
-    assert.equal(await language.choose(prompt, owner), response === 1);
-    assert.equal(prompt.calls[0].defaultId, 0);
-    assert.equal(prompt.calls[0].cancelId, 0);
-    assert.equal(fs.existsSync(f.file), false);
+  language.sync('zh-TW');
+  const before = fs.readFileSync(f.file, 'utf8');
+  for (const value of [undefined, null, '', 'fr', 'zh-CN', {}, 1]) {
+    assert.deepEqual(language.sync(value), { changed: false });
+    assert.equal(language.locale, 'zh-TW');
+    assert.equal(fs.readFileSync(f.file, 'utf8'), before);
   }
 });
 
-test('duplicate and stale language dialogs cannot write a selection', async () => {
+test('first English snapshot creates a cache and repeated snapshots do not rewrite it', () => {
   const f = fixture(), language = createLanguage(f.file);
-  let resolve, destroyed = false, calls = 0;
-  const win = { isDestroyed: () => destroyed };
-  const prompt = { showMessageBox: () => { calls++; return new Promise(done => { resolve = done; }); } };
-  const pending = language.choose(prompt, win);
-  assert.equal(await language.choose(prompt, win), false);
-  destroyed = true;
-  resolve({ response: 2 });
-  assert.equal(await pending, false);
-  assert.equal(calls, 1);
-  assert.equal(fs.existsSync(f.file), false);
-  assert.equal(await language.choose(prompt, win), false);
+  assert.deepEqual(language.sync('en'), { changed: false, persisted: true });
+  fs.utimesSync(f.file, 1, 1);
+  assert.deepEqual(language.sync('en'), { changed: false });
+  assert.equal(fs.statSync(f.file).mtimeMs, 1000);
 });
 
-test('failed persistence leaves the saved choice and active language unchanged', async () => {
-  const f = fixture(), language = createLanguage(f.file), prompt = dialog(2);
+test('failed cache writes still follow Core without repeated I/O or temporary files', () => {
+  const f = fixture(), language = createLanguage(f.file);
   fs.mkdirSync(f.file);
-  assert.equal(await language.choose(prompt, owner), false);
-  assert.equal(language.locale, 'en');
-  assert.equal(prompt.calls.at(-1).type, 'error');
-  assert.equal(prompt.calls.at(-1).message, language.t('desktop.language.failed'));
+  assert.deepEqual(language.sync('zh-TW'), { changed: true, persisted: false });
+  assert.equal(language.locale, 'zh-TW');
+  assert.deepEqual(language.sync('zh-TW'), { changed: false });
   assert.deepEqual(fs.readdirSync(f.directory), ['language.json']);
-  const check = dialog(0);
-  await language.choose(check, owner);
-  assert.match(check.calls[0].detail, /Saved choice: English/);
-});
-
-test('a lost save notification does not report rollback or discard the persisted choice', async () => {
-  const f = fixture(), language = createLanguage(f.file);
-  let calls = 0;
-  const prompt = { showMessageBox: async () => {
-    if (++calls > 1) throw new Error('Window closed');
-    return { response: 2 };
-  } };
-  assert.equal(await language.choose(prompt, owner), false);
-  assert.equal(createLanguage(f.file).locale, 'zh-TW');
-  const check = dialog(0);
-  await language.choose(check, owner);
-  assert.equal(check.calls[0].detail, language.t('desktop.language.detail', { language: language.t('desktop.language.name_zh_tw') }));
+  assert.equal(createLanguage(f.file).locale, 'en');
 });
diff --git a/desktop/test/toolbar-smoke.cjs b/desktop/test/toolbar-smoke.cjs
index cfd4232..b09f644 100644
--- a/desktop/test/toolbar-smoke.cjs
+++ b/desktop/test/toolbar-smoke.cjs
@@ -164,6 +164,26 @@ async function run(win, contents, browserAccess) {
     if (layout.reducedMotion) assert.equal(layout.transition, '0s');
     console.log(`macOS toolbar renderer: native menu, background five/ten-second notices and wide layout passed; ${JSON.stringify(layout)}`);
   }
+  const originalLanguage = await evaluate('window.standtermUi.snapshot().uiLanguage');
+  const originalTerminal = await evaluate('window.standtermUi.snapshot().terminalId');
+  await evaluate('window.desktopLocaleSmokeSentinel = true');
+  assert.ok(!Menu.getApplicationMenu().getMenuItemById('desktop-language'));
+  for (const locale of [originalLanguage === 'en' ? 'zh-TW' : 'en', originalLanguage]) {
+    const { t } = require('../i18n.js').create(locale);
+    await until(() => Menu.getApplicationMenu().getMenuItemById('ui-settings').enabled, 'localized Settings enabled');
+    Menu.getApplicationMenu().getMenuItemById('ui-settings').click();
+    await until(() => evaluate("document.getElementById('settings-modal').classList.contains('open')"), 'language Settings opened');
+    await evaluate(`document.getElementById('pref-uiLanguage').value = ${JSON.stringify(locale)}`);
+    assert.notEqual(await evaluate('window.standtermUi.snapshot().uiLanguage'), locale, 'unsaved dropdown must not change Desktop');
+    await evaluate("document.getElementById('settings-save').click()");
+    await until(async () => await win.webContents.executeJavaScript('document.documentElement.lang') === locale, 'Desktop locale synchronized');
+    assert.equal(Menu.getApplicationMenu().getMenuItemById('ui-settings').label, t('desktop.menu.settings'));
+    assert.equal(browserAccess.menu.label, t('desktop.browser_access.menu'));
+    assert.equal(await evaluate('window.desktopLocaleSmokeSentinel'), true, 'locale synchronization reloaded Core');
+    assert.equal(await evaluate('window.standtermUi.snapshot().terminalId'), originalTerminal);
+    assert.deepEqual(JSON.parse(await fs.readFile(path.join(app.getPath('userData'), 'language.json'), 'utf8')), { version: 1, locale });
+  }
+  console.log('Desktop locale smoke: saved Core Settings update native menus, toolbar and startup cache without reloading Core.');
   console.log(`Desktop toolbar smoke: isolated SVG toolbar, focus guards, native Settings/tab actions and compact layout passed (${directory}).`);
 }
 
diff --git a/desktop/test/ui-commands.test.cjs b/desktop/test/ui-commands.test.cjs
index 9439e3d..1f95d04 100644
--- a/desktop/test/ui-commands.test.cjs
+++ b/desktop/test/ui-commands.test.cjs
@@ -12,7 +12,7 @@ test('native clipboard commands preserve the Core editing target and reject stal
   const calls = [], state = { focused: true, hidden: false, minimized: false, destroyed: false, url: 'http://127.0.0.1:64487/' };
   const win = new EventEmitter();
   Object.assign(win, { isDestroyed: () => state.destroyed, isVisible: () => !state.hidden, isMinimized: () => state.minimized });
-  const contents = { isDestroyed: () => state.destroyed, getURL: () => state.url,
+  const contents = { on: () => {}, isLoadingMainFrame: () => false, mainFrame: {}, isDestroyed: () => state.destroyed, getURL: () => state.url,
     focus: () => calls.push('focus'), copy: () => calls.push('copy'), paste: () => calls.push('paste') };
   const api = { exports: {} };
   vm.runInNewContext(fs.readFileSync(path.join(__dirname, '..', 'ui-commands.cjs'), 'utf8'), {
@@ -41,7 +41,7 @@ test('localized menu labels preserve typed commands, target IDs and focus checks
     let focused = true;
     const win = new EventEmitter();
     Object.assign(win, { isDestroyed: () => false });
-    const contents = { isDestroyed: () => false, getURL: () => 'http://127.0.0.1:64487/',
+    const contents = { on: () => {}, isLoadingMainFrame: () => false, mainFrame: {}, isDestroyed: () => false, getURL: () => 'http://127.0.0.1:64487/',
       executeJavaScript: async script => {
         if (script.includes('.snapshot()')) return { version: 1, ready: true, actions: { newTab: true }, terminalId: 'terminal-1' };
         calls.push(script); return true;
@@ -66,3 +66,55 @@ test('localized menu labels preserve typed commands, target IDs and focus checks
     assert.equal(calls.length, 1);
   }
 });
+
+function localeFixture() {
+  const win = new EventEmitter(), contents = new EventEmitter(), locales = [];
+  const state = { destroyed: false, loading: false, url: 'http://127.0.0.1:64487/',
+    snapshot: { version: 1, ready: true, actions: {}, uiLanguage: 'zh-TW' } };
+  Object.assign(win, { isDestroyed: () => state.destroyed });
+  Object.assign(contents, { isDestroyed: () => state.destroyed, isLoadingMainFrame: () => state.loading,
+    getURL: () => state.url, mainFrame: {}, executeJavaScript: async () => state.snapshot });
+  const api = { exports: {} };
+  vm.runInNewContext(fs.readFileSync(path.join(__dirname, '..', 'ui-commands.cjs'), 'utf8'), {
+    require: name => name === 'electron' ? { BrowserWindow: { getFocusedWindow: () => win },
+      Menu: { getApplicationMenu: () => null } } : name === './policy.cjs' ? { allowedNavigation } : require('../i18n.js'),
+    module: api, setInterval: () => 0, clearInterval: () => {},
+  });
+  return { state, contents, locales,
+    commands: api.exports.createUiCommands(win, contents, 'http://127.0.0.1:64487', undefined, value => locales.push(value)) };
+}
+
+test('only ready Core snapshots with supported locale values update Desktop', async () => {
+  const f = localeFixture();
+  await f.commands.refresh();
+  for (const value of [undefined, null, 'fr', {}, 1]) {
+    f.state.snapshot.uiLanguage = value;
+    await f.commands.refresh();
+  }
+  f.state.snapshot.uiLanguage = 'en'; f.state.snapshot.ready = false;
+  await f.commands.refresh();
+  f.state.snapshot.ready = true; f.state.url = 'https://example.com/';
+  await f.commands.refresh();
+  f.state.url = 'http://127.0.0.1:64487/'; f.state.loading = true;
+  await f.commands.refresh();
+  f.state.loading = false;
+  await f.commands.refresh();
+  assert.deepEqual(f.locales, ['zh-TW', 'en']);
+});
+
+test('navigation, frame replacement and closed windows discard late locale snapshots', async () => {
+  for (const phase of ['navigation', 'frame', 'destroyed', 'loading', 'foreign']) {
+    const f = localeFixture();
+    let resolve;
+    f.contents.executeJavaScript = () => new Promise(done => { resolve = done; });
+    const pending = f.commands.refresh();
+    if (phase === 'navigation') f.contents.emit('did-start-navigation', {}, f.state.url, false, true);
+    if (phase === 'frame') f.contents.mainFrame = {};
+    if (phase === 'destroyed') f.state.destroyed = true;
+    if (phase === 'loading') f.state.loading = true;
+    if (phase === 'foreign') f.state.url = 'https://example.com/';
+    resolve(f.state.snapshot);
+    await pending;
+    assert.deepEqual(f.locales, [], phase);
+  }
+});
diff --git a/desktop/ui-commands.cjs b/desktop/ui-commands.cjs
index bdef687..ea68ca2 100644
--- a/desktop/ui-commands.cjs
+++ b/desktop/ui-commands.cjs
@@ -10,8 +10,12 @@ const UI_ACTIONS = Object.freeze({
   agentPanel: 'desktop.menu.agent_panel', pauseAgent: 'desktop.menu.pause_agent',
 });
 
-function createUiCommands(win, contents, origin, t = create('en').t) {
+function createUiCommands(win, contents, origin, t = create('en').t, onLocale = () => {}) {
   let refreshing = false;
+  let navigation = 0;
+  contents.on('did-start-navigation', (_event, _url, _inPlace, mainFrame) => {
+    if (mainFrame) navigation++;
+  });
   const current = () => !win.isDestroyed() && !contents.isDestroyed() && allowedNavigation(contents.getURL(), origin);
   const focused = () => current() && BrowserWindow.getFocusedWindow() === win;
   function edit(action) {
@@ -22,9 +26,12 @@ function createUiCommands(win, contents, origin, t = create('en').t) {
     return true;
   }
   async function snapshot() {
-    if (!current()) return null;
+    if (!current() || contents.isLoadingMainFrame()) return null;
+    const epoch = navigation;
+    const frame = contents.mainFrame;
     try {
       const state = await contents.executeJavaScript('window.standtermUi?.version === 1 ? window.standtermUi.snapshot() : null');
+      if (!current() || contents.isLoadingMainFrame() || navigation !== epoch || contents.mainFrame !== frame) return null;
       return state?.version === 1 && state.ready === true && typeof state.actions === 'object' ? state : null;
     } catch { return null; }
   }
@@ -43,6 +50,7 @@ function createUiCommands(win, contents, origin, t = create('en').t) {
     refreshing = true;
     try {
       const state = await snapshot();
+      if (['en', 'zh-TW'].includes(state?.uiLanguage)) onLocale(state.uiLanguage);
       for (const action of Object.keys(UI_ACTIONS)) {
         const item = Menu.getApplicationMenu()?.getMenuItemById(`ui-${action}`);
         if (item) item.enabled = !!state?.actions?.[action] && (action === 'settings' || focused());
diff --git a/docs/desktop_ui_copy_review.tsv b/docs/desktop_ui_copy_review.tsv
index 69359cc..3523c57 100644
--- a/docs/desktop_ui_copy_review.tsv
+++ b/docs/desktop_ui_copy_review.tsv
@@ -53,16 +53,16 @@ desktop.agent.menu_title	Agent	Agent	Agent	Custom native Agent submenu title.		K
 desktop.agent.getting_started	Getting started...	Getting started…	開始使用…	Agent help menu item; opens the existing informational dialog.		Preserve id=agent-help, showHelp callback and UI action order. Opening help grants no access.	translation-reviewed	desktop/agent-menu.cjs:6
 desktop.agent.help_environment	For an SSH agent, start Agent Tunnel on its SSH tab. Agent connection appears after setup succeeds. For a local agent, use Authorize agent on each intended tab.	For an Agent running on an SSH host, start Agent Tunnel on its SSH tab. Agent connection appears after setup succeeds. For a local Agent, use Authorize agent on each intended tab.	若 Agent 在 SSH 遠端執行，請在其 SSH 分頁啟動 Agent 通道（Agent Tunnel）。設定成功後會出現「Agent 連線」（Agent connection）。若 Agent 在本機執行，請在每個預定操作的分頁選擇「授權 Agent」（Authorize agent）。	Complete SSH/local paragraph between the per-tab permission and Copy Prompt instructions.		Preserve the SSH carrier tab, successful-setup prerequisite, per-target authorization and local/SSH distinction. Keep English Core control names for independently selected Desktop/Core languages. Do not imply setup authorizes additional tabs.	translation-reviewed	desktop/main.cjs:414-415:agentMenu.showHelp
 desktop.agent.help_skills	Skills do not need to be installed first. The prompt leads to the bundled skills and helpers; Agent Info also provides installation instructions when persistent skills are wanted.	Skills do not need to be installed first. The prompt leads to bundled skills and helpers. Agent Info also provides installation instructions for persistent skills.	不必先安裝技能（skills）。連線指引會引導 Agent 使用隨附的技能與輔助工具；若希望安裝後持續使用技能，Agent Info 也提供安裝說明。	Complete final Agent help paragraph about optional skill installation and bundled helpers.		Keep Agent Info recognizable. Preserve optional installation, bundled-skill/helper guidance and the distinction between copying instructions and installing skills. Do not modify prompt contents or imply automatic installation.	translation-reviewed	desktop/main.cjs:418-419:agentMenu.showHelp
-desktop.common.cancel	Cancel	Cancel	取消	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
-desktop.common.ok	OK	OK	確定	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
-desktop.language.menu		Desktop language...	Desktop 語系…	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
-desktop.language.title		Desktop language	Desktop 語系	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
-desktop.language.choose		Choose the Desktop language for the next launch.	選擇下次啟動時使用的 Desktop 語系。	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
-desktop.language.detail		Saved choice: {language}\n\nCore has its own language setting. Some Desktop text remains in English.	已儲存的選擇：{language}\n\nCore 的語系需另外設定。部分 Desktop 文字仍使用英文。	Desktop language dialog; language names are self-names in both locales.	{language}	Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
-desktop.language.saved		Language saved. It applies the next time you launch StandTerm.	已儲存語系，下次啟動 StandTerm 時生效。	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
-desktop.language.failed		Could not confirm the language setting. Reopen Desktop language to check the saved choice.	無法確認語系設定。請重新開啟「Desktop 語系」查看已儲存的選擇。	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
-desktop.language.name_en		English	English	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
-desktop.language.name_zh_tw		繁體中文	繁體中文	Desktop language dialog; language names are self-names in both locales.		Keep response indices 0 Cancel, 1 en, 2 zh-TW and cancel/default index 0. Persist locale only; do not restart, stop recording, authorize, or change Core preferences.	translation-reviewed	desktop/language.cjs:createLanguage
+desktop.common.cancel	Cancel	Cancel	取消	Shared native dialog action.		Preserve structured response indices and cancellation behavior.	translation-reviewed	desktop/main.cjs
+desktop.common.ok	OK	OK	確定	Shared native dialog action.		Preserve structured response indices and cancellation behavior.	translation-reviewed	desktop/main.cjs
+desktop.language.menu				Removed independent Desktop language dialog; follow Core Settings instead.		Retired key; do not translate.	remove	desktop/language.cjs:createLanguage
+desktop.language.title				Removed independent Desktop language dialog; follow Core Settings instead.		Retired key; do not translate.	remove	desktop/language.cjs:createLanguage
+desktop.language.choose				Removed independent Desktop language dialog; follow Core Settings instead.		Retired key; do not translate.	remove	desktop/language.cjs:createLanguage
+desktop.language.detail				Removed independent Desktop language dialog; follow Core Settings instead.		Retired key; do not translate.	remove	desktop/language.cjs:createLanguage
+desktop.language.saved				Removed independent Desktop language dialog; follow Core Settings instead.		Retired key; do not translate.	remove	desktop/language.cjs:createLanguage
+desktop.language.failed				Removed independent Desktop language dialog; follow Core Settings instead.		Retired key; do not translate.	remove	desktop/language.cjs:createLanguage
+desktop.language.name_en				Removed independent Desktop language dialog; follow Core Settings instead.		Retired key; do not translate.	remove	desktop/language.cjs:createLanguage
+desktop.language.name_zh_tw				Removed independent Desktop language dialog; follow Core Settings instead.		Retired key; do not translate.	remove	desktop/language.cjs:createLanguage
 desktop.menu.open	Open StandTerm	Open StandTerm	開啟 StandTerm	Custom main/tray menu label; destination dialog may remain English during the pilot.		Translate display label only. Keep callbacks, accelerators, native roles and action IDs unchanged.	translation-reviewed	desktop/main.cjs:createTray/start
 desktop.menu.show	Show window	Show window	顯示視窗	Custom main/tray menu label; destination dialog may remain English during the pilot.		Translate display label only. Keep callbacks, accelerators, native roles and action IDs unchanged.	translation-reviewed	desktop/main.cjs:createTray/start
 desktop.menu.quit	Quit StandTerm	Quit StandTerm	結束 StandTerm	Custom main/tray menu label; destination dialog may remain English during the pilot.		Translate display label only. Keep callbacks, accelerators, native roles and action IDs unchanged.	translation-reviewed	desktop/main.cjs:createTray/start
diff --git a/docs/desktop_ui_review_plan.md b/docs/desktop_ui_review_plan.md
index 461259d..c56a504 100644
--- a/docs/desktop_ui_review_plan.md
+++ b/docs/desktop_ui_review_plan.md
@@ -33,7 +33,8 @@ The candidate exposed a copy regression: the Desktop permission handlers denied
 buttons always reported failure. The source fix permits sanitized writes only
 for the owned, focused, visible Core main frame at its backend origin. Clipboard
 reads retain their native confirmation and target guards. The existing candidate
-installer does not contain this fix until rebuilt.
+installer from commit `3886155` does not contain this fix. The subsequent
+`98e490d` candidate includes the copy fix and compact local/SSH connection dialogs.
 
 Validation: all 167 Desktop unit tests pass, including foreground write access
 and foreign-frame/background denial. A separate Windows Electron 44.2.0 window
@@ -44,13 +45,22 @@ acceptance. The attempted Linux headless runtime probe exited before producing
 results; Windows provided the native permission evidence.
 
 The operator requests a single language setting and asks about live switching.
-The following is the proposed next implementation phase, not completed behavior:
+Desktop synchronization is now implemented ahead of full Core live translation,
+at the operator's request. The language is read from the saved Core preference
+through the existing version-1 UI snapshot; unsaved dropdown changes do not apply.
+Native confirmations already open retain their labels, and diagnostics update on
+open/refresh. Validation on 2026-09-21 passes all 168 Desktop unit tests
+and real Windows Electron smoke with both Windows and WSL Core backends. The
+smoke saves both languages through Settings and verifies native menu/toolbar
+updates, the startup cache, unchanged terminal identity and no Core page reload.
+These source changes are newer than the `98e490d` installer and require a rebuild. Older Core versions keep the cached language. Full Core live
+translation remains planned; its current text still changes on the next page load.
 
 | Order | Change | Effort | Required acceptance |
 | --- | --- | --- | --- |
 | 1 | Apply the saved Core language without reloading the page. Replace the fixed translator with a current-locale lookup and refresh labels from structured state. | Medium | Switch both ways with connected terminals, an active Agent grant, Files and floating windows; preserve input, selection, drafts and pending operations. |
-| 2 | Make Desktop follow the current Core page's language and remove the separate Desktop language menu. | Medium | Validate the exact owned sender/frame/origin and the two supported locale values; rebuild menus and refresh toolbar, tray and diagnostics without restarting Core or recording. |
-| 3 | Keep `language.json` as the last synchronized language for startup/setup/recovery before Core is available. | Small | Retain the cached value for older Core versions lacking synchronization; use English when no valid cache exists. Preserve the agreed installer common-language/English fallback. |
+| 2 — Implemented | Make Desktop follow the current Core page's language and remove the separate Desktop language menu. | Medium | Validate the exact owned sender/frame/origin and the two supported locale values; rebuild menus and refresh toolbar, tray and diagnostics without restarting Core or recording. |
+| 3 — Implemented | Keep `language.json` as the last synchronized language for startup/setup/recovery before Core is available. | Small | Retain the cached value for older Core versions lacking synchronization; use English when no valid cache exists. Preserve the agreed installer common-language/English fallback. |
 
 Core's setting remains scoped to its browser profile; this does not synchronize
 unrelated browsers, hosts or backend modes. A browser connection does not acquire
@@ -69,15 +79,13 @@ scriptless diagnostics. A complete Desktop rollout has moderate implementation
 cost and broader acceptance cost than the toolbar pilot. The estimates above
 are relative scope assessments, not measured delivery times.
 
-The shipped pilot stores the Desktop language in `language.json` under the existing profile's `userData`,
-with English as default and only `en` / `zh-TW` initially. Apply a change on the
-next launch; changing language should not itself restart StandTerm or stop a
-recording. Keep the existing Core browser preference independent. This covers
-setup and recovery before Core starts, at the cost of two language preferences.
-It is a product choice, not a security requirement. A validated
-two-value advisory preference from Core is also feasible, but needs startup,
-origin and older-Core fallback rules. The follow-up above supersedes the independent
-preference design once implemented. Automatic OS-language selection is deferred.
+The independent Desktop language selector is removed. Core Settings is the
+source of the saved preference; Desktop follows supported values and caches the
+last one in `language.json` for pre-Core startup/setup/recovery. Missing or invalid
+cache uses English. Poll results from navigated/replaced frames, loading pages,
+foreign origins or closed windows are discarded. Cache-write failures keep the
+active language and are logged once per changed value without repeatedly writing.
+Automatic OS-language selection and full Core live translation remain deferred.
 
 Ship the Desktop catalog with the shell. Do not depend on the selected bundled
 or Git Core supplying compatible renderer scripts. Reuse the existing TSV
@@ -109,8 +117,8 @@ Keep these implementation boundaries:
 [desktop_ui_copy_review.tsv](desktop_ui_copy_review.tsv) is a prioritized seed
 inventory, not a claim that every Desktop string has been extracted. It uses
 the same nine columns as the browser table. After the remaining shell notices,
-301 rows are `translation-reviewed` with English and Traditional Chinese text.
-Four retired Capture/setup fragments or renamed messages are marked `remove`;
+293 rows are `translation-reviewed` with English and Traditional Chinese text.
+Twelve retired Capture/setup/language-dialog messages are marked `remove`;
 no seed rows remain `proposed`. This does not claim translation of raw errors or
 the external installer UI. Some `current_en` cells are exact fragments or normalize
 dynamic values to named placeholders; `context` identifies these cases.
diff --git a/templates/index.html b/templates/index.html
index fb8076c..bad7905 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -11891,6 +11891,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     const ready = !!(socket && socket.connected);
                     return {
                         version: 1, ready, terminalId: state?.id || null,
+                        uiLanguage: loadPrefs().uiLanguage,
                         actions: {
                             settings: ready, newTab: ready,
                             closeTab: ready && terminals.size > 1,

From 5fe4b5230e07f434a219203666b894ea94813ea2 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Mon, 21 Sep 2026 23:40:29 +0800
Subject: [PATCH 37/43] Draft eight-language interface translations

---
 docs/ui_locale_expansion.md  |  9 +++++++++
 docs/ui_locale_expansion.tsv | 28 ++++++++++++++++++++++++++++
 2 files changed, 37 insertions(+)
 create mode 100644 docs/ui_locale_expansion.md
 create mode 100644 docs/ui_locale_expansion.tsv

diff --git a/docs/ui_locale_expansion.md b/docs/ui_locale_expansion.md
new file mode 100644
index 0000000..2799133
--- /dev/null
+++ b/docs/ui_locale_expansion.md
@@ -0,0 +1,9 @@
+# UI locale expansion draft
+
+This draft compares the confirmed eight-language expansion for the Desktop surface and three Core connection strings: `en`, `zh-TW`, `zh-CN`, `ja`, `ko`, `de`, `fr`, and `es`.
+
+Use `ui_locale_expansion.tsv` as an exchange table for external AI review. Keep `key` stable, copy source English and Traditional Chinese exactly from the source TSVs, preserve product tokens such as Agent, Core, and StandTerm, and preserve every placeholder if rows with interpolation are added. Return proposed edits in the same TSV shape, with `status` changed only after human review; this file is a draft and is not runtime-approved.
+
+Tentative glossary: preserve the `Agent`, `Core`, and `StandTerm` tokens; `Prompt` is translatable UI terminology, not an invariant product token. Menu actions should stay concise and retain their ellipsis style. The source catalogs contain approximately 799 Core/UI review rows and 305 Desktop review rows; the current Desktop review has 293 translation-reviewed rows and 12 removed rows (counts are review coverage, not a promise of runtime coverage).
+
+Main risks are language-specific plural and gender rules, interpolation and placeholder ordering, and labels that expand enough to affect menu width, truncation, keyboard access, or native menu layout. External review should also check typography, punctuation, and whether product names or UI labels should remain self-named.
diff --git a/docs/ui_locale_expansion.tsv b/docs/ui_locale_expansion.tsv
new file mode 100644
index 0000000..af875c5
--- /dev/null
+++ b/docs/ui_locale_expansion.tsv
@@ -0,0 +1,28 @@
+key	en	zh-TW	zh-CN	ja	ko	de	fr	es	status	context
+desktop.toolbar.application_menu	Application menu	應用程式選單	应用程序菜单	アプリケーションメニュー	애플리케이션 메뉴	Anwendungsmenü	Menu de l’application	Menú de la aplicación	draft	Desktop navigation accessible name.
+desktop.toolbar.clipboard_actions	Clipboard actions	剪貼簿操作	剪贴板操作	クリップボード操作	클립보드 작업	Zwischenablageaktionen	Actions du presse-papiers	Acciones del portapapeles	draft	Desktop clipboard toolbar accessible name.
+desktop.toolbar.copy_label	Copy selected text	複製選取文字	复制所选文本	選択したテキストをコピー	선택한 텍스트 복사	Ausgewählten Text kopieren	Copier le texte sélectionné	Copiar texto seleccionado	draft	Native clipboard action.
+desktop.toolbar.screenshot_copy	Copy screenshot to clipboard	複製截圖至剪貼簿	将屏幕截图复制到剪贴板	スクリーンショットをクリップボードにコピー	스크린샷을 클립보드에 복사	Screenshot in die Zwischenablage kopieren	Copier la capture d’écran dans le presse-papiers	Copiar captura de pantalla al portapapeles	draft	Screenshot clipboard action.
+desktop.menu.settings	Settings...	設定…	设置…	設定…	설정…	Einstellungen …	Paramètres…	Configuración…	draft	Desktop menu action.
+desktop.menu.new_tab	New terminal tab	新增終端分頁	新建终端标签页	新しいターミナルタブ	새 터미널 탭	Neuer Terminal-Tab	Nouvel onglet de terminal	Nueva pestaña de terminal	draft	Desktop menu action.
+desktop.menu.close_tab	Close terminal tab	關閉終端分頁	关闭终端标签页	ターミナルタブを閉じる	터미널 탭 닫기	Terminal-Tab schließen	Fermer l’onglet de terminal	Cerrar pestaña de terminal	draft	Desktop menu action.
+desktop.menu.close_all	Close all terminal tabs...	關閉所有終端分頁…	关闭所有终端标签页…	すべてのターミナルタブを閉じる…	모든 터미널 탭 닫기…	Alle Terminal-Tabs schließen …	Fermer tous les onglets de terminal…	Cerrar todas las pestañas de terminal…	draft	Desktop menu action.
+desktop.menu.files	Files...	檔案…	文件…	ファイル…	파일…	Dateien …	Fichiers…	Archivos…	draft	Desktop menu action.
+desktop.menu.pip	Open terminal in PiP	以子母畫面開啟終端	在画中画中打开终端	ピクチャーインピクチャーでターミナルを開く	PiP로 터미널 열기	Terminal im Bild-im-Bild-Modus öffnen	Ouvrir le terminal en incrustation	Abrir terminal en PiP	draft	Desktop menu action.
+desktop.menu.agent_panel	Show / hide Agent Panel	顯示／隱藏 Agent 面板	显示/隐藏 Agent 面板	Agent パネルを表示／非表示	Agent 패널 표시/숨기기	Agent-Panel ein-/ausblenden	Afficher/masquer le panneau Agent	Mostrar/ocultar el panel del Agent	draft	Desktop menu action; preserve Agent token.
+desktop.menu.pause_agent	Pause Agent for current terminal	暫停目前終端的 Agent	暂停当前终端的 Agent	現在のターミナルの Agent を一時停止	현재 터미널의 Agent 일시 중지	Agent für das aktuelle Terminal pausieren	Mettre l’Agent en pause pour le terminal actuel	Pausar el Agent para el terminal actual	draft	Desktop menu action; preserve Agent token.
+desktop.toolbar.menu_standterm	StandTerm	StandTerm	StandTerm	StandTerm	StandTerm	StandTerm	StandTerm	StandTerm	draft	Product name.
+desktop.toolbar.menu_edit	Edit	編輯	编辑	編集	편집	Bearbeiten	Modifier	Editar	draft	Desktop menu caption.
+desktop.toolbar.menu_agent	Agent	Agent	Agent	Agent	Agent	Agent	Agent	Agent	draft	Agent token is preserved.
+desktop.toolbar.menu_view	View	檢視	查看	表示	보기	Ansicht	Affichage	Ver	draft	Desktop menu caption.
+desktop.toolbar.menu_diagnostics	Diagnostics	診斷	诊断	診断	진단	Diagnose	Diagnostics	Diagnóstico	draft	Desktop menu caption.
+desktop.menu.open	Open StandTerm	開啟 StandTerm	打开 StandTerm	StandTerm を開く	StandTerm 열기	StandTerm öffnen	Ouvrir StandTerm	Abrir StandTerm	draft	Product name preserved.
+desktop.menu.show	Show window	顯示視窗	显示窗口	ウィンドウを表示	창 표시	Fenster anzeigen	Afficher la fenêtre	Mostrar ventana	draft	Desktop tray menu action.
+desktop.menu.quit	Quit StandTerm	結束 StandTerm	退出 StandTerm	StandTerm を終了	StandTerm 종료	StandTerm beenden	Quitter StandTerm	Salir de StandTerm	draft	Product name preserved.
+desktop.menu.about	About StandTerm Desktop	關於 StandTerm Desktop	关于 StandTerm Desktop	StandTerm Desktop について	StandTerm Desktop 정보	Über StandTerm Desktop	À propos de StandTerm Desktop	Acerca de StandTerm Desktop	draft	Product name preserved.
+desktop.browser_access.menu	Browser access	瀏覽器存取	浏览器访问	ブラウザーアクセス	브라우저 액세스	Browserzugriff	Accès au navigateur	Acceso del navegador	draft	Desktop submenu title.
+desktop.capture.menu	Capture	畫面擷取	捕获	キャプチャ	캡처	Aufnahme	Capture	Captura	draft	Desktop submenu title.
+desktop.diagnostics.devtools_menu	Developer Tools…	開發人員工具…	开发者工具…	開発者ツール…	개발자 도구…	Entwicklertools …	Outils de développement…	Herramientas de desarrollo…	draft	Desktop menu action.
+agent.connection.summary	Copy the connection instructions and give them to the agent in the current tab’s environment.	複製連線指引，貼給目前分頁環境中的 Agent。	复制连接说明，并将其提供给当前标签页环境中的 Agent。	接続手順をコピーし、現在のタブの環境にいる Agent に渡します。	연결 지침을 복사해 현재 탭 환경의 Agent에게 전달합니다.	Verbindungsanweisungen kopieren und dem Agent in der Umgebung des aktuellen Tabs geben.	Copier les instructions de connexion et les transmettre à l’Agent dans l’environnement de l’onglet actuel.	Copia las instrucciones de conexión y dáselas al Agent en el entorno de la pestaña actual.	draft	Core connection summary; preserve Agent token.
+agent.connection.read_more	Read more	閱讀更多	阅读更多	続きを読む	더 보기	Mehr erfahren	En savoir plus	Leer más	draft	Core common action.
+agent.connection.copy	Copy Prompt	複製連線指引	复制连接指引	接続手順をコピー	연결 지침 복사	Verbindungsanleitung kopieren	Copier les instructions de connexion	Copiar instrucciones de conexión	draft	Copies full connection instructions, including the environment and URL; not a generic hint.

From b6bd3a98a199ead19db02927ae57094b940723e8 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Tue, 22 Sep 2026 17:42:39 +0800
Subject: [PATCH 38/43] Make Agent Info URL the primary copy action

---
 docs/ui_copy_review.tsv         |  4 ++--
 docs/ui_locale_expansion.tsv    |  2 +-
 static/js/standterm-messages.js |  8 ++++----
 templates/index.html            | 14 ++++++-------
 tests/agent_browser_smoke.py    | 36 ++++++++++++++++++++-------------
 5 files changed, 36 insertions(+), 28 deletions(-)

diff --git a/docs/ui_copy_review.tsv b/docs/ui_copy_review.tsv
index 76ee4d5..9aeb882 100644
--- a/docs/ui_copy_review.tsv
+++ b/docs/ui_copy_review.tsv
@@ -65,8 +65,8 @@ agent.token.tab_active	Agent token active ({permission}); {seconds}s remaining w
 agent.token.tab_expired	Agent token expired; create a new token to continue	Agent token expired; create a new token to continue	Agent 權杖已過期；請建立新權杖以繼續	Tab tooltip for an expired token.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 agent.pause.action	Pause Agent	Pause Agent	暫停 Agent	Pause Agent access; do not close or disconnect the terminal.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 agent.pause.target	Pause Agent access for {target}	Pause Agent access for {target}	暫停 {target} 的 Agent 存取	Pause action tooltip naming its target.	{target}	Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
-agent.connection.tooltip	Copy the agent prompt for the current tab's environment	Copy the agent prompt for the current tab's environment	複製目前分頁所在環境的 Agent 連線指引	The active tab selects the execution environment, not the grant scope.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
-agent.connection.summary	Copy the connection instructions and give them to the agent in the current tab’s environment.	Copy the connection instructions and give them to the agent in the current tab’s environment.	複製連線指引，貼給目前分頁環境中的 Agent。	Compact local or SSH connection introduction; the adjacent button copies the full prompt, including the URL and execution environment.		Copying does not authorize tabs. Full instructions remain in Read more.	translation-reviewed	templates/index.html
+agent.connection.tooltip	View Agent connection info for the current tab's environment	View Agent connection info for the current tab's environment	檢視目前分頁環境的 Agent 連線資訊	The active tab selects the execution environment, not the grant scope.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
+agent.connection.summary	Copy the Agent Info URL and give it to the agent in the current tab’s environment.	Copy the Agent Info URL and give it to the agent in the current tab’s environment.	複製 Agent 資訊網址，貼給目前分頁環境中的 Agent。	Compact local or SSH connection introduction; the adjacent button copies only the Agent Info URL.		Copying does not authorize tabs. Full instructions remain in Read more.	translation-reviewed	templates/index.html
 agent.connection.read_more	Read more	Read more	閱讀更多	Native disclosure for connection instructions, activity and secondary actions.		Keep keyboard-accessible expand and collapse behavior.	translation-reviewed	templates/index.html
 agent.connection.environment	Run the agent where Core runs (WSL if Core runs in WSL). It can access only individually authorized tabs.	Run the agent where Core runs (WSL if Core runs in WSL). It can access only individually authorized tabs.	請在 Core 所在環境執行 Agent（若 Core 在 WSL 中執行，Agent 也須在 WSL 中執行）。Agent 僅能存取已個別授權的分頁。	Core-host connection info; distinguish Windows browser from WSL Core.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
 agent.connection.step_authorize	Choose Authorize agent on each intended tab. Change its permission in Settings or the Agent panel.	Choose the default permission in Settings, then Authorize agent on each intended tab. Adjust an authorized tab in the Agent panel.	先在 Settings 選擇預設權限，再於各個要開放存取的分頁選擇「授權 Agent」。已授權分頁的權限可在 Agent 面板調整。	Local connection setup step; the primary action creates the token.		Plain text. Preserve named values, command names, and agreed Agent terminology.	translation-reviewed	templates/index.html
diff --git a/docs/ui_locale_expansion.tsv b/docs/ui_locale_expansion.tsv
index af875c5..d1c5185 100644
--- a/docs/ui_locale_expansion.tsv
+++ b/docs/ui_locale_expansion.tsv
@@ -23,6 +23,6 @@ desktop.menu.about	About StandTerm Desktop	關於 StandTerm Desktop	关于 Stand
 desktop.browser_access.menu	Browser access	瀏覽器存取	浏览器访问	ブラウザーアクセス	브라우저 액세스	Browserzugriff	Accès au navigateur	Acceso del navegador	draft	Desktop submenu title.
 desktop.capture.menu	Capture	畫面擷取	捕获	キャプチャ	캡처	Aufnahme	Capture	Captura	draft	Desktop submenu title.
 desktop.diagnostics.devtools_menu	Developer Tools…	開發人員工具…	开发者工具…	開発者ツール…	개발자 도구…	Entwicklertools …	Outils de développement…	Herramientas de desarrollo…	draft	Desktop menu action.
-agent.connection.summary	Copy the connection instructions and give them to the agent in the current tab’s environment.	複製連線指引，貼給目前分頁環境中的 Agent。	复制连接说明，并将其提供给当前标签页环境中的 Agent。	接続手順をコピーし、現在のタブの環境にいる Agent に渡します。	연결 지침을 복사해 현재 탭 환경의 Agent에게 전달합니다.	Verbindungsanweisungen kopieren und dem Agent in der Umgebung des aktuellen Tabs geben.	Copier les instructions de connexion et les transmettre à l’Agent dans l’environnement de l’onglet actuel.	Copia las instrucciones de conexión y dáselas al Agent en el entorno de la pestaña actual.	draft	Core connection summary; preserve Agent token.
+agent.connection.summary	Copy the Agent Info URL and give it to the agent in the current tab’s environment.	複製 Agent 資訊網址，貼給目前分頁環境中的 Agent。	复制 Agent 信息网址，提供给当前标签页环境中的 Agent。	Agent 情報 URL をコピーし、現在のタブの環境で実行している Agent に渡します。	Agent 정보 URL을 복사해 현재 탭 환경의 Agent에게 전달합니다.	Agent-Info-URL kopieren und dem Agent in der Umgebung des aktuellen Tabs geben.	Copier l’URL des informations Agent et la transmettre à l’Agent dans l’environnement de l’onglet actuel.	Copia la URL de información de Agent y dásela al Agent en el entorno de la pestaña actual.	draft	Primary action copies only the Agent Info URL; preserve Agent token.
 agent.connection.read_more	Read more	閱讀更多	阅读更多	続きを読む	더 보기	Mehr erfahren	En savoir plus	Leer más	draft	Core common action.
 agent.connection.copy	Copy Prompt	複製連線指引	复制连接指引	接続手順をコピー	연결 지침 복사	Verbindungsanleitung kopieren	Copier les instructions de connexion	Copiar instrucciones de conexión	draft	Copies full connection instructions, including the environment and URL; not a generic hint.
diff --git a/static/js/standterm-messages.js b/static/js/standterm-messages.js
index e762d48..bca6278 100644
--- a/static/js/standterm-messages.js
+++ b/static/js/standterm-messages.js
@@ -36,9 +36,9 @@
         "agent.connection.step_authorize": "Choose the default permission in Settings, then Authorize agent on each intended tab. Adjust an authorized tab in the Agent panel.",
         "agent.connection.step_confirm": "Run discover, then hello. Authenticated requests appear below.",
         "agent.connection.step_copy": "Copy the prompt to the agent running on the Core host.",
-        "agent.connection.summary": "Copy the connection instructions and give them to the agent in the current tab\u2019s environment.",
+        "agent.connection.summary": "Copy the Agent Info URL and give it to the agent in the current tab\u2019s environment.",
         "agent.connection.title": "Agent connection",
-        "agent.connection.tooltip": "Copy the agent prompt for the current tab's environment",
+        "agent.connection.tooltip": "View Agent connection info for the current tab's environment",
         "agent.connection.unavailable": "Connection info unavailable.",
         "agent.connection.url": "Agent Info URL",
         "agent.connection.waiting": "waiting for agent",
@@ -836,9 +836,9 @@
         "agent.connection.step_authorize": "\u5148\u5728 Settings \u9078\u64c7\u9810\u8a2d\u6b0a\u9650\uff0c\u518d\u65bc\u5404\u500b\u8981\u958b\u653e\u5b58\u53d6\u7684\u5206\u9801\u9078\u64c7\u300c\u6388\u6b0a Agent\u300d\u3002\u5df2\u6388\u6b0a\u5206\u9801\u7684\u6b0a\u9650\u53ef\u5728 Agent \u9762\u677f\u8abf\u6574\u3002",
         "agent.connection.step_confirm": "\u5148\u57f7\u884c discover\uff0c\u518d\u57f7\u884c hello\u3002\u5df2\u901a\u904e\u9a57\u8b49\u7684\u8acb\u6c42\u6703\u986f\u793a\u5728\u4e0b\u65b9\u3002",
         "agent.connection.step_copy": "\u5c07\u9023\u7dda\u6307\u5f15\u8907\u88fd\u7d66\u5728 Core \u4e3b\u6a5f\u4e0a\u57f7\u884c\u7684 Agent\u3002",
-        "agent.connection.summary": "\u8907\u88fd\u9023\u7dda\u6307\u5f15\uff0c\u8cbc\u7d66\u76ee\u524d\u5206\u9801\u74b0\u5883\u4e2d\u7684 Agent\u3002",
+        "agent.connection.summary": "\u8907\u88fd Agent \u8cc7\u8a0a\u7db2\u5740\uff0c\u8cbc\u7d66\u76ee\u524d\u5206\u9801\u74b0\u5883\u4e2d\u7684 Agent\u3002",
         "agent.connection.title": "Agent \u9023\u7dda",
-        "agent.connection.tooltip": "\u8907\u88fd\u76ee\u524d\u5206\u9801\u6240\u5728\u74b0\u5883\u7684 Agent \u9023\u7dda\u6307\u5f15",
+        "agent.connection.tooltip": "\u6aa2\u8996\u76ee\u524d\u5206\u9801\u74b0\u5883\u7684 Agent \u9023\u7dda\u8cc7\u8a0a",
         "agent.connection.unavailable": "\u7121\u6cd5\u53d6\u5f97\u9023\u7dda\u8cc7\u8a0a\u3002",
         "agent.connection.url": "Agent \u8cc7\u8a0a\u7db2\u5740",
         "agent.connection.waiting": "\u7b49\u5f85 Agent",
diff --git a/templates/index.html b/templates/index.html
index bad7905..e1f3600 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -1458,7 +1458,7 @@ <h3 id="browser-auth-help-title" data-i18n="browser.auth.help_title">Manual brow
         <button id="agent-status-mint-3x-btn" class="status-action agent-status-mint" title="Create a token with 3× idle time for the active terminal">Create token 3&times;</button>
         <div id="terminal-tools">
             <button id="agent-access-mint-btn" class="status-action" type="button" title="Authorize Direct input access and create a standard token for the current tab" data-i18n="agent.access.grant">Authorize agent</button>
-            <button id="agent-connect-btn" class="status-action" type="button" title="Copy the agent prompt for the current tab's environment" data-i18n="agent.connection.title" data-i18n-title="agent.connection.tooltip">Agent connection</button>
+            <button id="agent-connect-btn" class="status-action" type="button" title="View Agent connection info for the current tab's environment" data-i18n="agent.connection.title" data-i18n-title="agent.connection.tooltip">Agent connection</button>
             <button id="agent-toggle-btn" class="status-action" type="button" title="Show Agent panel">Show Agent Panel</button>
             <button id="agent-tunnel-btn" class="status-action" type="button" title="Set up Agent access from this SSH host" data-i18n-title="agent.tunnel.tooltip" data-i18n="agent.tunnel.title" hidden>Agent Tunnel</button>
             <button id="ssh-tunnels-btn" class="status-action" type="button" title="Manage TCP forwarding for this SSH tab" data-i18n-title="ssh.tunnels.tooltip" data-i18n="ssh.tunnels.action" hidden>Tunnels</button>
@@ -1481,11 +1481,11 @@ <h3 id="browser-auth-help-title" data-i18n="browser.auth.help_title">Manual brow
     </section>
     <dialog id="agent-connect-dialog" aria-labelledby="agent-connect-title">
         <h3 id="agent-connect-title" data-i18n="agent.connection.title">Agent connection</h3>
-        <p data-i18n="agent.connection.summary">Copy the connection instructions and give them to the agent in the current tab’s environment.</p>
+        <p data-i18n="agent.connection.summary">Copy the Agent Info URL and give it to the agent in the current tab’s environment.</p>
         <div class="agent-connect-url">
             <label for="agent-connect-url" data-i18n="agent.connection.url">Agent Info URL</label>
             <input id="agent-connect-url" readonly aria-label="Agent Info URL" data-i18n-aria-label="agent.connection.url">
-            <button id="agent-connect-copy" type="button" disabled data-i18n="agent.connection.copy">Copy Prompt</button>
+            <button id="agent-connect-copy-url" type="button" disabled data-i18n="common.copy_url">Copy URL</button>
         </div>
         <p id="agent-connect-message" role="status"></p>
         <details id="agent-connect-details">
@@ -1501,7 +1501,7 @@ <h3 id="agent-connect-title" data-i18n="agent.connection.title">Agent connection
             <div class="agent-tunnel-actions">
                 <button id="agent-connect-open-panel" type="button" data-i18n="agent.panel.open">Open Agent Panel</button>
                 <button id="agent-connect-refresh" type="button" data-i18n="common.refresh">Refresh Status</button>
-                <button id="agent-connect-copy-url" type="button" disabled data-i18n="common.copy_url">Copy URL</button>
+                <button id="agent-connect-copy" type="button" disabled data-i18n="agent.connection.copy">Copy Prompt</button>
             </div>
         </details>
         <div class="agent-tunnel-actions">
@@ -1510,12 +1510,12 @@ <h3 id="agent-connect-title" data-i18n="agent.connection.title">Agent connection
     </dialog>
     <dialog id="agent-tunnel-dialog" aria-labelledby="agent-tunnel-title">
         <h3 id="agent-tunnel-title" data-i18n="agent.tunnel.title">Agent Tunnel</h3>
-        <p id="agent-tunnel-introduction" data-i18n="agent.connection.summary" hidden>Copy the connection instructions and give them to the agent in the current tab’s environment.</p>
+        <p id="agent-tunnel-introduction" data-i18n="agent.connection.summary" hidden>Copy the Agent Info URL and give it to the agent in the current tab’s environment.</p>
         <div id="agent-tunnel-connection" hidden>
             <div class="agent-connect-url">
                 <label for="agent-tunnel-url" data-i18n="agent.connection.url">Agent Info URL</label>
                 <input id="agent-tunnel-url" readonly aria-label="Agent Info URL" data-i18n-aria-label="agent.connection.url">
-                <button id="agent-tunnel-copy" type="button" data-i18n="agent.connection.copy" hidden>Copy Prompt</button>
+                <button id="agent-tunnel-copy-url" type="button" data-i18n="common.copy_url" disabled>Copy URL</button>
             </div>
         </div>
         <p id="agent-tunnel-message" role="status"></p>
@@ -1538,7 +1538,7 @@ <h3 id="agent-tunnel-title" data-i18n="agent.tunnel.title">Agent Tunnel</h3>
             <p id="agent-tunnel-activity" class="agent-connect-activity" aria-live="polite"></p>
             <textarea id="agent-tunnel-info" readonly aria-label="Agent connection prompt" data-i18n-aria-label="agent.connection.prompt" hidden></textarea>
             <div class="agent-tunnel-actions">
-                <button id="agent-tunnel-copy-url" type="button" data-i18n="common.copy_url" disabled>Copy URL</button>
+                <button id="agent-tunnel-copy" type="button" data-i18n="agent.connection.copy" hidden>Copy Prompt</button>
                 <button id="agent-tunnel-manage" type="button" data-i18n="agent.tunnel.manage" hidden>Manage Tunnel</button>
                 <button id="agent-tunnel-refresh" type="button" data-i18n="common.refresh">Refresh Status</button>
                 <button id="agent-tunnel-check" type="button" data-i18n="agent.tunnel.check" aria-describedby="agent-tunnel-check-hint" disabled>Check Tunnel</button>
diff --git a/tests/agent_browser_smoke.py b/tests/agent_browser_smoke.py
index a179866..1c82342 100644
--- a/tests/agent_browser_smoke.py
+++ b/tests/agent_browser_smoke.py
@@ -888,17 +888,18 @@ def test_agent_language_preview_preserves_access_and_applies_on_next_page(browse
             configurable: true, value: {writeText: async text => {window.copiedAgentText = text;}}
         })''')
         page.click('#agent-connect-btn')
-        page.wait_for_selector('#agent-connect-copy:not([disabled])')
+        page.wait_for_selector('#agent-connect-copy-url:not([disabled])')
         check(page.get_by_role('dialog', name='Agent 連線').is_visible(), 'connection dialog accessible name was not localized')
         check(page.locator('#agent-connect-url').get_attribute('aria-label') == 'Agent 資訊網址',
               'connection URL accessible name was not localized')
         check(page.locator('#agent-connect-info').get_attribute('aria-label') == 'Agent 連線指引',
               'connection prompt accessible name was not localized')
-        check(page.inner_text('#agent-connect-copy') == '複製連線指引', 'connection copy action was not localized')
         check('main: 等待 Agent' in page.text_content('#agent-connect-activity'),
               'localized connection activity did not distinguish a grant from Agent activity')
         prompt = page.input_value('#agent-connect-info')
         check('Run discover, then hello' in prompt, 'display language translated the machine-facing connection prompt')
+        page.click('#agent-connect-details summary')
+        check(page.inner_text('#agent-connect-copy') == '複製連線指引', 'connection copy action was not localized')
         page.click('#agent-connect-copy')
         page.wait_for_function('text => window.copiedAgentText === text', arg=prompt)
         check('已複製' in page.inner_text('#agent-connect-message'), 'clipboard result was not localized')
@@ -4497,10 +4498,10 @@ def test_core_agent_connect_info_can_be_copied_and_confirmed(browser, access_url
             configurable: true, value: {writeText: async text => {window.copiedAgentText = text;}}
         })''')
         page.click('#agent-connect-btn')
-        page.wait_for_selector('#agent-connect-copy:not([disabled])')
+        page.wait_for_selector('#agent-connect-copy-url:not([disabled])')
         check(not page.locator('#agent-connect-details').evaluate('element => element.open'),
               'Connection details were not collapsed by default')
-        for selector in ['#agent-connect-info', '#agent-connect-activity', '#agent-connect-copy-url',
+        for selector in ['#agent-connect-info', '#agent-connect-activity', '#agent-connect-copy',
                          '#agent-connect-refresh', '#agent-connect-open-panel']:
             check(page.locator(selector).is_hidden(), 'Secondary connection content remained visible: ' + selector)
         check(page.locator('#agent-connect-message').is_hidden(), 'Ready state repeated the introduction')
@@ -4514,14 +4515,14 @@ def test_core_agent_connect_info_can_be_copied_and_confirmed(browser, access_url
         check(page.locator('#agent-tunnel-btn').is_hidden(), 'Local shell offered an SSH tunnel')
         check(page.locator('#agent-remote-info-btn').count() == 0, 'A separate remote Agent Info button remains')
         check(page.inner_text('#agent-connect-btn') == ('Agent 連線' if zh else 'Agent connection'), 'Info button did not identify the Agent connection workflow')
-        check(page.inner_text('#agent-connect-copy') == ('複製連線指引' if zh else 'Copy Prompt'), 'Local info did not offer a prompt')
-        page.click('#agent-connect-copy')
-        page.wait_for_function('text => window.copiedAgentText === text', arg=info_text)
+        page.click('#agent-connect-copy-url')
+        page.wait_for_function('url => window.copiedAgentText === url', arg=agentinfo_url)
         page.locator('#agent-connect-details summary').focus()
         page.keyboard.press('Enter')
         check(page.locator('#agent-connect-info').is_visible(), 'Keyboard disclosure did not reveal the prompt')
-        page.click('#agent-connect-copy-url')
-        page.wait_for_function('url => window.copiedAgentText === url', arg=agentinfo_url)
+        check(page.inner_text('#agent-connect-copy') == ('複製連線指引' if zh else 'Copy Prompt'), 'Local info did not offer a prompt')
+        page.click('#agent-connect-copy')
+        page.wait_for_function('text => window.copiedAgentText === text', arg=info_text)
         page.focus('#agent-connect-url')
         page.evaluate("() => { window.dispatchEvent(new Event('blur')); window.dispatchEvent(new Event('focus')); }")
         page.wait_for_timeout(150)
@@ -4550,11 +4551,14 @@ def test_core_agent_connect_info_can_be_copied_and_confirmed(browser, access_url
                                arg='最近一次通過驗證的請求' if zh else 'last authenticated request')
         page.click('#agent-connect-details summary')
         page.evaluate("() => { navigator.clipboard.writeText = async () => { throw new Error('Denied'); }; }")
-        page.click('#agent-connect-copy')
+        page.click('#agent-connect-copy-url')
         page.wait_for_function("text => document.getElementById('agent-connect-message').innerText.includes(text)",
                                arg='手動複製' if zh else 'copy it manually')
         check(page.locator('#agent-connect-message').is_visible(), 'Copy failure was hidden in collapsed details')
-        check(page.locator('#agent-connect-info').is_visible(), 'Copy failure did not reveal the selected prompt')
+        selection = page.locator('#agent-connect-url').evaluate('field => field.value.slice(field.selectionStart, field.selectionEnd)')
+        check(selection == agentinfo_url, 'Clipboard fallback did not select the URL')
+        page.click('#agent-connect-details summary')
+        page.click('#agent-connect-copy')
         selection = page.locator('#agent-connect-info').evaluate('field => field.value.slice(field.selectionStart, field.selectionEnd)')
         check(selection == page.input_value('#agent-connect-info'), 'Clipboard fallback did not select the prompt')
         page.click('#agent-connect-close')
@@ -4687,15 +4691,18 @@ def ready(carrier, port):
         check(page.inner_text('#agent-tunnel-title') == title, 'Remote shortcut opened the wrong view')
         check(page.locator('#agent-tunnel-setup').is_hidden(), 'Remote info repeated setup controls')
         check(page.locator('#agent-tunnel-copy').is_hidden(), 'Remote shortcut offered a stale cached prompt')
+        check(page.locator('#agent-tunnel-copy-url').is_disabled(), 'Remote shortcut offered a stale cached URL')
         page.evaluate('payload => window.terminalTest.completeAgentTunnelRequestForTest(1, payload)', first)
         check(page.locator('#agent-tunnel-info').is_hidden(), 'Remote info did not collapse the full prompt')
         for selector in ['#agent-tunnel-manage', '#agent-tunnel-refresh', '#agent-tunnel-check',
-                         '#agent-tunnel-copy-url', '#agent-tunnel-carrier']:
+                         '#agent-tunnel-copy', '#agent-tunnel-carrier']:
             check(page.locator(selector).is_hidden(), 'Remote secondary content remained visible: ' + selector)
         check(page.locator('#agent-tunnel-message').is_hidden(), 'Remote ready state repeated the introduction')
+        page.click('#agent-tunnel-copy-url')
+        page.wait_for_function('url => window.copiedAgentText === url', arg=first['agentinfo_url'])
+        page.click('#agent-tunnel-details summary')
         page.click('#agent-tunnel-copy')
         page.wait_for_function('text => window.copiedAgentText === text', arg=prompt)
-        page.click('#agent-tunnel-details summary')
         page.click('#agent-tunnel-manage')
         check(page.locator('#agent-tunnel-setup').is_visible(), 'Manage did not reveal tunnel controls')
         page.click('#agent-tunnel-refresh')
@@ -4710,6 +4717,7 @@ def ready(carrier, port):
         check(page.input_value('#agent-tunnel-info') == second['connect_info'], 'Old carrier stop cleared the new tunnel')
         page.evaluate("() => window.terminalTest.applyAgentTunnelStateForTest({terminal_id: 'second', carrier_id: 'host-b', status: 'stopped'})")
         check(page.locator('#agent-tunnel-copy').is_hidden(), 'Stop retained a usable prompt')
+        check(page.locator('#agent-tunnel-copy-url').is_disabled(), 'Stop retained a usable URL')
         check(page.locator('#agent-connect-btn').is_hidden(), 'Stop retained the remote shortcut')
         page.click('#agent-tunnel-apply')
         page.evaluate('''() => window.terminalTest.applyTerminalListForTest({terminals: [
@@ -4727,7 +4735,7 @@ def ready(carrier, port):
         page.click('.terminal-tab[data-terminal-id="main"]')
         check(page.locator('#agent-connect-btn').is_visible(), 'Returning to a local tab did not restore Agent Info')
         page.click('#agent-connect-btn')
-        page.wait_for_selector('#agent-connect-copy:not([disabled])')
+        page.wait_for_selector('#agent-connect-copy-url:not([disabled])')
         check(page.locator('#agent-tunnel-dialog').is_hidden(), 'Local tab opened SSH info')
         check('Core host environment' in page.input_value('#agent-connect-info'), 'Local tab retained the SSH prompt')
         page.click('#agent-connect-close')

From a51cf5679f660b7e9001b59f1198f2665dc9a586 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Wed, 23 Sep 2026 21:47:08 +0800
Subject: [PATCH 39/43] Show startup feedback and restore window state

---
 desktop/README.md                     |  11 +++
 desktop/diagnostics.cjs               |   2 +-
 desktop/main.cjs                      |  35 +++++++--
 desktop/messages.js                   |   2 +
 desktop/stage-windows.cjs             |   1 +
 desktop/startup-window.cjs            |  48 ++++++++++++
 desktop/test/startup-window-smoke.cjs |  85 ++++++++++++++++++++
 desktop/test/startup-window.test.cjs  |  99 ++++++++++++++++++++++++
 desktop/test/window-state.test.cjs    | 107 ++++++++++++++++++++++++++
 desktop/window-state.cjs              |  81 +++++++++++++++++++
 docs/desktop_ui_copy_review.tsv       |   1 +
 11 files changed, 465 insertions(+), 7 deletions(-)
 create mode 100644 desktop/startup-window.cjs
 create mode 100644 desktop/test/startup-window-smoke.cjs
 create mode 100644 desktop/test/startup-window.test.cjs
 create mode 100644 desktop/test/window-state.test.cjs
 create mode 100644 desktop/window-state.cjs

diff --git a/desktop/README.md b/desktop/README.md
index e57b8da..a948394 100644
--- a/desktop/README.md
+++ b/desktop/README.md
@@ -18,6 +18,17 @@ its existing next-load language behavior. Open native confirmations keep their
 original labels; subsequent dialogs use the synchronized language. Diagnostics
 updates when opened or refreshed.
 
+Desktop remembers the main window's normal position, size and maximized state
+in `window-<mode>.json` in its profile. Windows and WSL modes keep separate state.
+Restored bounds fit the current display's work area; a removed display falls back
+to the primary display. Minimized, hidden and fullscreen states are not restored.
+Invalid state or a failed write does not prevent startup or shutdown.
+
+A small startup window appears before Core preparation or WSL startup begins.
+It uses the cached Desktop language and closes when the main window is ready or
+startup fails. Launching the same mode again focuses startup or its setup window
+while Core is still starting.
+
 Desktop caches the last synchronized language in the mode profile's `language.json`
 for startup, setup and recovery before Core is ready. Older Core versions without
 the language snapshot field retain that cache; missing or invalid cache uses English.
diff --git a/desktop/diagnostics.cjs b/desktop/diagnostics.cjs
index a108f1d..3ef5963 100644
--- a/desktop/diagnostics.cjs
+++ b/desktop/diagnostics.cjs
@@ -5,7 +5,7 @@ const path = require('node:path');
 const { create } = require('./i18n.js');
 const EVENTS = new Set(['startup', 'setup_start', 'setup_ready', 'backend_launch', 'backend_ready',
   'backend_exit', 'backend_spawn_failed', 'backend_verify_retry', 'backend_verified',
-  'host_port_rejected', 'port_change', 'window_ready', 'startup_failed', 'core_failed', 'shutdown', 'devtools_opened', 'capture_failed']);
+  'host_port_rejected', 'port_change', 'window_ready', 'window_state_save_failed', 'startup_failed', 'core_failed', 'shutdown', 'devtools_opened', 'capture_failed']);
 const CODES = new Set(['EACCES', 'EADDRINUSE', 'ECONNREFUSED', 'ECONNRESET', 'ETIMEDOUT',
   'ENOENT', 'EPIPE', 'HOST_PORT_UNAVAILABLE', 'PORT_IN_USE', 'SETUP_CANCELED',
   'git_required', 'git_dirty', 'git_diverged', 'git_source_changed', 'invalid_git_workspace',
diff --git a/desktop/main.cjs b/desktop/main.cjs
index 4f01d72..ac8dff3 100644
--- a/desktop/main.cjs
+++ b/desktop/main.cjs
@@ -1,6 +1,6 @@
 'use strict';
 
-const { app, BrowserWindow, WebContentsView, Menu, Tray, nativeImage, dialog, session, shell, clipboard } = require('electron');
+const { app, BrowserWindow, WebContentsView, Menu, Tray, nativeImage, dialog, session, shell, clipboard, screen } = require('electron');
 const { spawn } = require('node:child_process');
 const http = require('node:http');
 const path = require('node:path');
@@ -26,6 +26,8 @@ const { installToolbar } = require('./toolbar.cjs');
 const { createBrowserAccess } = require('./browser-access.cjs');
 const { installContextPaste } = require('./context-paste.cjs');
 const { createLanguage } = require('./language.cjs');
+const { loadWindowState, trackWindowState } = require('./window-state.cjs');
+const { createStartupWindow } = require('./startup-window.cjs');
 
 let maintenance;
 try { maintenance = installerRequest(process.argv); } catch (error) {
@@ -85,6 +87,8 @@ let child;
 let desktopSession;
 const expectedBackendExits = new WeakSet();
 let win;
+let windowState;
+let startupWindow;
 let tray;
 let capture;
 let captureTitle = '';
@@ -103,12 +107,18 @@ const diagnostics = createDiagnostics(path.join(app.getPath('userData'), 'diagno
 });
 
 function showWindow() {
+  if (booting && startupWindow) { startupWindow.focus(); focusSetup(); return; }
   if (!win || win.isDestroyed()) { focusSetup(); return; }
   if (win.isMinimized()) win.restore();
   win.show();
   win.focus();
 }
 
+function closeStartupWindow() {
+  startupWindow?.close();
+  startupWindow = null;
+}
+
 function launchBackend(preparedCommand, port = 0) {
   diagnostics.write('backend_launch', { port });
   const root = smoke && process.env.STANDTERM_DESKTOP_TEST_ROOT
@@ -245,6 +255,9 @@ function updateTrayMenu() {
 }
 
 async function start() {
+  startupWindow = createStartupWindow(MODES[mode], language);
+  await startupWindow.ready;
+  if (quitting) return;
   diagnostics.write('setup_start');
   if (app.isPackaged && !smoke) {
     coreStore = await installedStore(app.getPath('userData'), process.resourcesPath, app.getVersion());
@@ -314,9 +327,10 @@ async function start() {
   if (!smoke) {
     try { icon = createTray(); } catch { tray = null; }
   }
+  const windowStatePath = path.join(app.getPath('userData'), `window-${mode}.json`);
+  const savedWindow = loadWindowState(windowStatePath, screen);
   win = new BrowserWindow({
-    title: MODES[mode], width: 1280, height: 850,
-    minWidth: 640, minHeight: 480, show: false, icon,
+    title: MODES[mode], ...savedWindow.options, show: false, icon,
     webPreferences: {
       partition: 'standterm-desktop-toolbar', preload: path.join(__dirname, 'toolbar-preload.cjs'),
       // The trusted status strip must keep timers/notices current when unfocused.
@@ -327,6 +341,8 @@ async function start() {
       allowRunningInsecureContent: false, devTools: true,
     },
   });
+  windowState = trackWindowState(win, windowStatePath, savedWindow,
+    () => diagnostics.write('window_state_save_failed'));
   const coreView = new WebContentsView({ webPreferences: {
     session: desktopSession, nodeIntegration: false, contextIsolation: true,
     sandbox: true, webSecurity: true, webviewTag: false, allowRunningInsecureContent: false, devTools: true,
@@ -523,10 +539,15 @@ async function start() {
   await contents.loadURL(`${handoff.origin}/${smoke ? '?debug=1' : ''}`);
   if (child.exitCode !== null || child.signalCode !== null) throw new Error('The owned Core exited during startup.');
   diagnostics.write('window_ready', { port: Number(new URL(handoff.origin).port) });
+  // Apply outer bounds after native frame/menu initialization, before maximizing.
+  const { x, y, width, height } = savedWindow.options;
+  win.setBounds({ x, y, width, height });
+  if (savedWindow.maximized) win.maximize();
   booting = false;
+  showWindow();
+  closeStartupWindow();
   if (smoke) {
     // WebContentsView visibility follows its owner; exercise a real visible UI.
-    showWindow();
     contents.focus();
     await require('./smoke.cjs').run(win, handoff.origin, contents, browserAccess);
     if (captureSmoke) {
@@ -535,8 +556,6 @@ async function start() {
     }
     console.log('Desktop smoke: authenticated terminal, sandbox and navigation checks passed.');
     app.quit();
-  } else {
-    showWindow();
   }
 }
 
@@ -547,6 +566,7 @@ async function stopBackend() {
 
 async function handleCoreFailure(error) {
   if (failurePending || quitting) return;
+  closeStartupWindow();
   failurePending = true;
   booting = true;
   diagnostics.write('core_failed', { code: error.code });
@@ -590,6 +610,8 @@ app.on('before-quit', event => {
       if (!allowed) { restartRequest = null; quitting = false; return; }
     }
     cancelSetup();
+    windowState?.save();
+    closeStartupWindow();
     await finishBackendAndBrowser();
     if (restartRequest) {
       if (restartRequest.action) await coreStore.queue(restartRequest.action);
@@ -613,6 +635,7 @@ if (!app.requestSingleInstanceLock()) {
   diagnostics.write('startup');
   app.on('second-instance', showWindow);
   app.whenReady().then(start).catch(error => {
+    closeStartupWindow();
     diagnostics.write('startup_failed', { code: error.code });
     if (error.code === 'SETUP_CANCELED') { app.quit(); return; }
     void handleCoreFailure(error);
diff --git a/desktop/messages.js b/desktop/messages.js
index 86cc310..be2552a 100644
--- a/desktop/messages.js
+++ b/desktop/messages.js
@@ -277,6 +277,7 @@
         "desktop.startup.recovery_failed": "StandTerm Desktop could not recover",
         "desktop.startup.shutdown_failed": "StandTerm could not complete shutdown",
         "desktop.startup.start_failed": "StandTerm Desktop could not start",
+        "desktop.startup.starting": "Starting Core...",
         "desktop.toolbar.action_unavailable": "Action unavailable in the current window state.",
         "desktop.toolbar.action_unconfirmed": "Could not confirm the action result. Check the current state.",
         "desktop.toolbar.application_menu": "Application menu",
@@ -572,6 +573,7 @@
         "desktop.startup.recovery_failed": "StandTerm Desktop \u7121\u6cd5\u5fa9\u539f",
         "desktop.startup.shutdown_failed": "StandTerm \u7121\u6cd5\u5b8c\u6210\u7d50\u675f\u7a0b\u5e8f",
         "desktop.startup.start_failed": "StandTerm Desktop \u7121\u6cd5\u555f\u52d5",
+        "desktop.startup.starting": "\u6b63\u5728\u555f\u52d5 Core\u2026",
         "desktop.toolbar.action_unavailable": "\u76ee\u524d\u7684\u8996\u7a97\u72c0\u614b\u7121\u6cd5\u57f7\u884c\u6b64\u64cd\u4f5c\u3002",
         "desktop.toolbar.action_unconfirmed": "\u7121\u6cd5\u78ba\u8a8d\u64cd\u4f5c\u7d50\u679c\u3002\u8acb\u6aa2\u67e5\u76ee\u524d\u72c0\u614b\u3002",
         "desktop.toolbar.application_menu": "\u61c9\u7528\u7a0b\u5f0f\u9078\u55ae",
diff --git a/desktop/stage-windows.cjs b/desktop/stage-windows.cjs
index 55c6b7b..e06fd6a 100644
--- a/desktop/stage-windows.cjs
+++ b/desktop/stage-windows.cjs
@@ -36,6 +36,7 @@ const shellFiles = [
   'capture-settings.cjs', 'ui-commands.cjs', 'toolbar.cjs', 'toolbar-preload.cjs',
   'toolbar.html', 'toolbar.js', 'toolbar.css',
   'language.cjs', 'messages.js', 'i18n.js',
+  'window-state.cjs', 'startup-window.cjs',
   'test/toolbar-smoke.cjs',
   'browser-access.cjs',
   'context-paste.cjs',
diff --git a/desktop/startup-window.cjs b/desktop/startup-window.cjs
new file mode 100644
index 0000000..6d3f521
--- /dev/null
+++ b/desktop/startup-window.cjs
@@ -0,0 +1,48 @@
+'use strict';
+
+const { create, normalizeLocale } = require('./i18n.js');
+
+function startupHtml(title, { locale, t } = create('en')) {
+  const escape = value => String(value).replace(/[&<>"']/g, char => ({
+    '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;',
+  })[char]);
+  return `<!doctype html><html lang="${normalizeLocale(locale)}"><meta charset="utf-8">
+    <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'">
+    <title>${escape(title)}</title>
+    <style>body{font:15px system-ui;background:#1e1e1e;color:#eee;margin:28px}
+    h1{font-size:21px;margin:0 0 20px}p{color:#ccc}progress{width:100%;accent-color:#58a6ff}</style>
+    <h1>${escape(title)}</h1><p role="status">${escape(t('desktop.startup.starting'))}</p>
+    <progress aria-label="${escape(t('desktop.startup.starting'))}"></progress></html>`;
+}
+
+function createStartupWindow(title, i18n) {
+  const { BrowserWindow, session } = require('electron');
+  const url = 'data:text/html,' + encodeURIComponent(startupHtml(title, i18n));
+  const isolated = session.fromPartition('standterm-startup', { cache: false });
+  isolated.setPermissionRequestHandler((_contents, _permission, callback) => callback(false));
+  isolated.setPermissionCheckHandler(() => false);
+  isolated.setDevicePermissionHandler(() => false);
+  isolated.webRequest.onBeforeRequest((details, callback) => callback({ cancel: details.url !== url }));
+  const win = new BrowserWindow({ title, width: 440, height: 210, show: true,
+    backgroundColor: '#1e1e1e', resizable: false, maximizable: false, fullscreenable: false,
+    closable: false, autoHideMenuBar: true,
+    webPreferences: { session: isolated, sandbox: true, contextIsolation: true,
+      nodeIntegration: false, webviewTag: false, devTools: false } });
+  win.setMenu(null);
+  win.webContents.setWindowOpenHandler(() => ({ action: 'deny' }));
+  for (const event of ['will-navigate', 'will-frame-navigate', 'will-redirect', 'will-attach-webview']) {
+    win.webContents.on(event, event => event.preventDefault());
+  }
+  return {
+    ready: win.loadURL(url),
+    focus() {
+      if (win.isDestroyed()) return;
+      if (win.isMinimized()) win.restore();
+      win.show();
+      win.focus();
+    },
+    close() { if (!win.isDestroyed()) win.destroy(); },
+  };
+}
+
+module.exports = { startupHtml, createStartupWindow };
diff --git a/desktop/test/startup-window-smoke.cjs b/desktop/test/startup-window-smoke.cjs
new file mode 100644
index 0000000..491e890
--- /dev/null
+++ b/desktop/test/startup-window-smoke.cjs
@@ -0,0 +1,85 @@
+'use strict';
+
+// Run with native Electron. Uses a disposable profile and never starts Core.
+const { app, BrowserWindow, screen } = require('electron');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const os = require('node:os');
+const { create } = require('../i18n.js');
+const { createStartupWindow } = require('../startup-window.cjs');
+const { loadWindowState, trackWindowState } = require('../window-state.cjs');
+
+app.enableSandbox();
+if (process.platform === 'win32') app.commandLine.appendSwitch('disable-features', 'CalculateNativeWinOcclusion');
+const profile = fs.mkdtempSync(path.join(os.tmpdir(), 'standterm-startup-smoke-'));
+app.setPath('userData', profile);
+app.on('window-all-closed', () => {});
+const delay = ms => new Promise(resolve => setTimeout(resolve, ms));
+async function until(check) {
+  const deadline = Date.now() + 5000;
+  while (!check()) {
+    if (Date.now() >= deadline) throw new Error('Window transition timed out.');
+    await delay(50);
+  }
+}
+setTimeout(() => { console.error('Startup window smoke timed out.'); app.exit(1); }, 30000).unref();
+app.whenReady().then(async () => {
+  for (const locale of ['en', 'zh-TW']) {
+    console.log(`Checking startup window: ${locale}`);
+    const splash = createStartupWindow('StandTerm Desktop (WSL)', create(locale));
+    await splash.ready;
+    const win = BrowserWindow.getAllWindows()[0];
+    assert.ok(win.isVisible());
+    assert.equal(await win.webContents.executeJavaScript('document.documentElement.lang'), locale);
+    assert.equal(await win.webContents.executeJavaScript('document.querySelector("[role=status]").textContent'),
+      create(locale).t('desktop.startup.starting'));
+    win.minimize(); await until(() => win.isMinimized());
+    splash.focus(); await until(() => !win.isMinimized() && win.isVisible());
+    if (process.env.STANDTERM_STARTUP_SMOKE_OUTPUT) {
+      const output = process.env.STANDTERM_STARTUP_SMOKE_OUTPUT;
+      fs.mkdirSync(output, { recursive: true });
+      await delay(200);
+      fs.writeFileSync(path.join(output, `startup-${locale}.png`), (await win.webContents.capturePage()).toPNG());
+    }
+    splash.close(); splash.close();
+    assert.ok(win.isDestroyed());
+  }
+  const file = path.join(profile, 'window-wsl.json');
+  console.log('Checking native window state transitions.');
+  let initial = loadWindowState(file, screen);
+  let win = new BrowserWindow({ ...initial.options, show: false });
+  win.setMenu(null);
+  let tracker = trackWindowState(win, file, initial);
+  await win.loadURL('data:text/html,<title>Window state smoke</title>');
+  win.show();
+  win.setBounds({ x: initial.options.x, y: initial.options.y, width: 800, height: 600 });
+  await delay(300);
+  const normal = win.getNormalBounds();
+  win.maximize(); await until(() => win.isMaximized()); await delay(300);
+  tracker.save();
+  assert.deepEqual(JSON.parse(fs.readFileSync(file)), { version: 1, bounds: normal, maximized: true });
+  win.minimize(); await until(() => win.isMinimized()); await delay(300);
+  tracker.save();
+  assert.equal(JSON.parse(fs.readFileSync(file)).maximized, true);
+  win.destroy();
+  initial = loadWindowState(file, screen);
+  win = new BrowserWindow({ ...initial.options, show: false });
+  win.setMenu(null);
+  tracker = trackWindowState(win, file, initial);
+  await win.loadURL('data:text/html,<title>Restored window smoke</title>');
+  win.setBounds({ x: initial.options.x, y: initial.options.y, width: initial.options.width, height: initial.options.height });
+  if (initial.maximized) win.maximize();
+  win.show(); await until(() => win.isMaximized());
+  win.unmaximize(); await until(() => !win.isMaximized()); await delay(300);
+  for (const key of ['x', 'y', 'width', 'height']) {
+    assert.ok(Math.abs(win.getNormalBounds()[key] - normal[key]) <= 1, `Restored ${key} drifted beyond native rounding.`);
+  }
+  tracker.save();
+  assert.equal(JSON.parse(fs.readFileSync(file)).maximized, false);
+  assert.deepEqual(JSON.parse(fs.readFileSync(file)).bounds, normal);
+  win.hide(); tracker.save(); win.destroy();
+  assert.equal(loadWindowState(path.join(profile, 'window-windows.json'), screen).maximized, false);
+  console.log('Startup/window smoke passed: bilingual splash, focus, bounds, maximize/minimize, reopen and profile isolation.');
+  app.exit(0);
+}).catch(error => { console.error(error.stack); app.exit(1); });
diff --git a/desktop/test/startup-window.test.cjs b/desktop/test/startup-window.test.cjs
new file mode 100644
index 0000000..0ee95ec
--- /dev/null
+++ b/desktop/test/startup-window.test.cjs
@@ -0,0 +1,99 @@
+'use strict';
+
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const vm = require('node:vm');
+const { EventEmitter } = require('node:events');
+const { startupHtml } = require('../startup-window.cjs');
+const { create } = require('../i18n.js');
+
+test('startup copy follows the cached language and escapes scriptless display data', () => {
+  for (const locale of ['en', 'zh-TW']) {
+    const language = create(locale), html = startupHtml('StandTerm Desktop (WSL)', language);
+    assert.ok(html.includes(`<html lang="${locale}">`));
+    assert.ok(html.includes(language.t('desktop.startup.starting')));
+    assert.ok(html.includes("default-src 'none'"));
+    assert.ok(!html.includes('<script'));
+  }
+  const html = startupHtml('<img src=x>', { locale: 'invalid', t: () => '<script>bad()</script>' });
+  assert.ok(html.includes('&lt;img'));
+  assert.ok(!html.includes('<script>'));
+});
+
+test('startup is visible before load completes, isolated, refocusable and safe to dispose twice', async () => {
+  let win, finish, request, permissions, device;
+  const isolated = {
+    setPermissionRequestHandler: cb => { permissions = cb; },
+    setPermissionCheckHandler: cb => { isolated.check = cb; },
+    setDevicePermissionHandler: cb => { device = cb; },
+    webRequest: { onBeforeRequest: cb => { request = cb; } },
+  };
+  class Window extends EventEmitter {
+    constructor(options) {
+      super(); win = this; this.options = options; this.destroyed = false; this.minimized = true;
+      this.webContents = new EventEmitter();
+      this.webContents.setWindowOpenHandler = cb => { this.open = cb; };
+    }
+    setMenu() {}
+    loadURL(url) { this.url = url; return new Promise(resolve => { finish = resolve; }); }
+    isDestroyed() { return this.destroyed; }
+    isMinimized() { return this.minimized; }
+    restore() { this.minimized = false; }
+    show() { this.shown = true; }
+    focus() { this.focused = true; }
+    destroy() { this.destroyed = true; }
+  }
+  const api = { exports: {} };
+  vm.runInNewContext(fs.readFileSync(path.join(__dirname, '../startup-window.cjs'), 'utf8'), {
+    module: api,
+    require: name => name === 'electron' ? { BrowserWindow: Window, session: { fromPartition: () => isolated } }
+      : require(path.join(__dirname, '..', name)),
+  });
+  const startup = api.exports.createStartupWindow('StandTerm Desktop (WSL)', create('zh-TW'));
+  assert.equal(win.options.show, true);
+  assert.equal(win.options.webPreferences.sandbox, true);
+  assert.equal(win.options.webPreferences.nodeIntegration, false);
+  assert.equal(win.options.webPreferences.contextIsolation, true);
+  assert.equal(win.open().action, 'deny');
+  permissions(null, 'clipboard-read', allowed => assert.equal(allowed, false));
+  assert.equal(isolated.check(), false);
+  assert.equal(device(), false);
+  for (const url of ['https://example.com', 'file:///tmp/secret', 'data:text/html,<script>bad()</script>']) {
+    request({ url }, result => assert.equal(result.cancel, true));
+  }
+  request({ url: win.url }, result => assert.equal(result.cancel, false));
+  startup.focus();
+  assert.ok(win.shown && win.focused && !win.minimized);
+  finish(); await startup.ready;
+  startup.close(); startup.close(); startup.focus();
+  assert.equal(win.destroyed, true);
+});
+
+test('recovery restores the main window after the startup window closes', () => {
+  const source = fs.readFileSync(path.join(__dirname, '../main.cjs'), 'utf8');
+  const functions = ['closeStartupWindow', 'showWindow'].map(name => {
+    const match = source.match(new RegExp(`function ${name}\\(\\) \\{[\\s\\S]*?\\n\\}`));
+    assert.ok(match, `${name} must be available`);
+    return match[0];
+  }).join('\n');
+  const calls = [];
+  let destroyed = false, minimized = true;
+  const context = vm.createContext({
+    booting: false,
+    startupWindow: {
+      close: () => { destroyed = true; calls.push('close-startup'); },
+      focus: () => { if (!destroyed) calls.push('focus-startup'); },
+    },
+    focusSetup: () => calls.push('focus-setup'),
+    win: {
+      isDestroyed: () => false, isMinimized: () => minimized,
+      restore: () => { minimized = false; calls.push('restore-main'); },
+      show: () => calls.push('show-main'), focus: () => calls.push('focus-main'),
+    },
+  });
+  vm.runInContext(functions + '\ncloseStartupWindow(); booting = true; showWindow();', context);
+  assert.deepEqual(calls, ['close-startup', 'restore-main', 'show-main', 'focus-main']);
+  assert.equal(minimized, false);
+});
diff --git a/desktop/test/window-state.test.cjs b/desktop/test/window-state.test.cjs
new file mode 100644
index 0000000..8b489b5
--- /dev/null
+++ b/desktop/test/window-state.test.cjs
@@ -0,0 +1,107 @@
+'use strict';
+
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { EventEmitter } = require('node:events');
+const { loadWindowState, trackWindowState } = require('../window-state.cjs');
+
+const primary = { x: 0, y: 0, width: 1920, height: 1040 };
+function fixture(area = primary) {
+  const file = path.join(fs.mkdtempSync(path.join(os.tmpdir(), 'standterm-window-state-')), 'window-wsl.json');
+  const screen = { getPrimaryDisplay: () => ({ workArea: primary }), getDisplayMatching: () => ({ workArea: area }) };
+  const write = (bounds, maximized = true) => fs.writeFileSync(file, JSON.stringify({ version: 1, bounds, maximized }));
+  return { file, screen, write };
+}
+
+test('restores maximization and normal bounds on an attached secondary display', () => {
+  const f = fixture({ x: -1600, y: 0, width: 1600, height: 900 });
+  f.write({ x: -1400, y: 30, width: 1000, height: 700 });
+  assert.deepEqual(loadWindowState(f.file, f.screen), {
+    options: { x: -1400, y: 30, width: 1000, height: 700, minWidth: 640, minHeight: 480 }, maximized: true,
+  });
+});
+
+test('removed displays and changed work areas keep the entire normal window reachable', () => {
+  const f = fixture();
+  f.write({ x: -2400, y: -100, width: 2200, height: 1200 });
+  assert.deepEqual(loadWindowState(f.file, f.screen).options, { ...primary, minWidth: 640, minHeight: 480 });
+  f.write({ x: 1850, y: 1000, width: 800, height: 600 });
+  assert.deepEqual(loadWindowState(f.file, f.screen).options, {
+    x: 1120, y: 440, width: 800, height: 600, minWidth: 640, minHeight: 480,
+  });
+});
+
+test('missing, oversized, malformed and unsupported state falls back without blocking startup', () => {
+  const f = fixture();
+  const defaults = loadWindowState(f.file, f.screen);
+  for (const value of ['null', 'broken', '{"version":2}', JSON.stringify({ version: 1,
+    bounds: { x: Number.MAX_SAFE_INTEGER, y: 0, width: 1000, height: 700 }, maximized: true }),
+    ' '.repeat(16385)]) {
+    fs.writeFileSync(f.file, value);
+    assert.deepEqual(loadWindowState(f.file, f.screen), defaults);
+  }
+});
+
+function fakeWindow(bounds) {
+  const win = new EventEmitter();
+  Object.assign(win, { visible: true, minimized: false, maximized: false, fullscreen: false, bounds });
+  win.isDestroyed = () => false;
+  win.isVisible = () => win.visible;
+  win.isMinimized = () => win.minimized;
+  win.isMaximized = () => win.maximized;
+  win.isFullScreen = () => win.fullscreen;
+  win.getNormalBounds = () => win.bounds;
+  return win;
+}
+
+test('exit flushes normal bounds and preserves maximization across minimize, tray hide and fullscreen', () => {
+  for (const state of ['minimized', 'hidden', 'fullscreen']) {
+    const f = fixture(), initial = loadWindowState(f.file, f.screen);
+    const bounds = { x: 80, y: 60, width: 900, height: 650 };
+    const win = fakeWindow(bounds);
+    const tracker = trackWindowState(win, f.file, initial);
+    win.emit('move');
+    win.maximized = true;
+    win.emit('maximize');
+    win[state === 'hidden' ? 'visible' : state] = state !== 'hidden';
+    win.maximized = false;
+    win.bounds = { x: -32000, y: -32000, width: 1, height: 1 };
+    win.emit('resize');
+    tracker.save();
+    assert.deepEqual(JSON.parse(fs.readFileSync(f.file)), { version: 1, bounds, maximized: true });
+    win.emit('closed');
+  }
+});
+
+test('close to tray saves restored bounds and an unwritable cache does not block closing', () => {
+  const f = fixture(), initial = loadWindowState(f.file, f.screen);
+  const win = fakeWindow({ x: 100, y: 70, width: 800, height: 600 });
+  trackWindowState(win, f.file, initial);
+  win.emit('close');
+  assert.equal(loadWindowState(f.file, f.screen).maximized, false);
+  assert.equal(loadWindowState(f.file, f.screen).options.width, 800);
+  const other = fixture();
+  fs.mkdirSync(other.file);
+  let failures = 0;
+  trackWindowState(win, other.file, initial, () => failures++);
+  assert.doesNotThrow(() => win.emit('close'));
+  assert.equal(failures, 1);
+  assert.deepEqual(fs.readdirSync(path.dirname(other.file)), ['window-wsl.json']);
+  win.emit('closed');
+});
+
+test('native rounding does not accumulate in the saved dimensions across launches', () => {
+  const f = fixture();
+  const bounds = { x: 100, y: 70, width: 800, height: 600 };
+  f.write(bounds, false);
+  for (let launch = 0; launch < 3; launch++) {
+    const initial = loadWindowState(f.file, f.screen);
+    const win = fakeWindow({ ...bounds, height: 601 });
+    trackWindowState(win, f.file, initial);
+    win.emit('resize'); win.emit('close'); win.emit('closed');
+    assert.deepEqual(JSON.parse(fs.readFileSync(f.file)).bounds, bounds);
+  }
+});
diff --git a/desktop/window-state.cjs b/desktop/window-state.cjs
new file mode 100644
index 0000000..b1f1b2d
--- /dev/null
+++ b/desktop/window-state.cjs
@@ -0,0 +1,81 @@
+'use strict';
+
+const fs = require('node:fs');
+const path = require('node:path');
+const { randomUUID } = require('node:crypto');
+
+const SAVE_DELAY_MS = 250;
+const validBounds = value => value && ['x', 'y', 'width', 'height'].every(key => Number.isInteger(value[key])
+  && value[key] >= -2147483648 && value[key] <= 2147483647)
+  && value.width > 0 && value.height > 0;
+
+function loadWindowState(file, screen) {
+  let saved;
+  try {
+    if (fs.statSync(file).size <= 16384) {
+      const data = JSON.parse(fs.readFileSync(file, 'utf8'));
+      if (data?.version === 1 && validBounds(data.bounds) && typeof data.maximized === 'boolean') saved = data;
+    }
+  } catch { /* Missing or invalid state uses the default window. */ }
+  const primary = screen.getPrimaryDisplay().workArea;
+  let area = primary;
+  if (saved) {
+    const match = screen.getDisplayMatching(saved.bounds).workArea;
+    const b = saved.bounds;
+    if (b.x < match.x + match.width && b.x + b.width > match.x
+        && b.y < match.y + match.height && b.y + b.height > match.y) area = match;
+  }
+  const minWidth = Math.min(640, area.width), minHeight = Math.min(480, area.height);
+  const width = Math.min(area.width, Math.max(minWidth, saved?.bounds.width || 1280));
+  const height = Math.min(area.height, Math.max(minHeight, saved?.bounds.height || 850));
+  const x = Math.max(area.x, Math.min(saved?.bounds.x ?? area.x + Math.floor((area.width - width) / 2), area.x + area.width - width));
+  const y = Math.max(area.y, Math.min(saved?.bounds.y ?? area.y + Math.floor((area.height - height) / 2), area.y + area.height - height));
+  return { options: { x, y, width, height, minWidth, minHeight }, maximized: saved?.maximized || false };
+}
+
+function trackWindowState(win, file, initial, onError = () => {}) {
+  let bounds = { x: initial.options.x, y: initial.options.y, width: initial.options.width, height: initial.options.height };
+  let maximized = initial.maximized;
+  let timer;
+  let lastSaved;
+  function remember() {
+    // Minimizing can change the native maximized flag. Keep the last visible state.
+    if (!win.isDestroyed() && win.isVisible() && !win.isMinimized() && !win.isFullScreen()) {
+      maximized = win.isMaximized();
+      const normal = win.getNormalBounds();
+      if (validBounds(normal)) {
+        // Windows display scaling can round a restored coordinate by one DIP.
+        // Keep the requested value in that case so each launch does not grow it.
+        bounds = Object.fromEntries(Object.keys(bounds).map(key => [key,
+          Math.abs(normal[key] - bounds[key]) <= 1 ? bounds[key] : normal[key]]));
+      }
+    }
+  }
+  function save() {
+    clearTimeout(timer);
+    remember();
+    const value = JSON.stringify({ version: 1, bounds, maximized }, null, 2);
+    if (value === lastSaved) return;
+    const temporary = `${file}.${randomUUID()}.tmp`;
+    try {
+      fs.mkdirSync(path.dirname(file), { recursive: true });
+      fs.writeFileSync(temporary, value, { flag: 'wx', mode: 0o600 });
+      fs.renameSync(temporary, file);
+      lastSaved = value;
+    } catch { onError(); }
+    finally { try { fs.unlinkSync(temporary); } catch { /* No temporary file remains after a successful rename. */ } }
+  }
+  function changed() {
+    // Remember before a following minimize or hide event obscures native state.
+    remember();
+    clearTimeout(timer);
+    timer = setTimeout(save, SAVE_DELAY_MS);
+    timer.unref();
+  }
+  for (const event of ['move', 'resize', 'maximize', 'unmaximize']) win.on(event, changed);
+  win.on('close', save);
+  win.on('closed', () => clearTimeout(timer));
+  return { save };
+}
+
+module.exports = { loadWindowState, trackWindowState };
diff --git a/docs/desktop_ui_copy_review.tsv b/docs/desktop_ui_copy_review.tsv
index 3523c57..3efc6c5 100644
--- a/docs/desktop_ui_copy_review.tsv
+++ b/docs/desktop_ui_copy_review.tsv
@@ -241,6 +241,7 @@ desktop.setup.cleanup_title	Confirm environment cleanup	Confirm environment clea
 desktop.setup.cleanup_message	Move these idle venvs to recovery in {platform}?	Move these idle venvs to recovery in {platform}?	要將 {platform} 中這些未使用中的 venv 移至復原資料夾嗎？	Platform is Windows or WSL followed by the raw selected distro name.	{platform}	Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
 desktop.setup.cleanup_keep	Keep environments	Keep environments	保留環境	Cleanup response 0, default and escape.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
 desktop.setup.cleanup_move	Move listed venvs to recovery	Move listed venvs to recovery	將清單中的 venv 移至復原資料夾	Cleanup response 1; recoverable move only, no deletion.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/setup.cjs
+desktop.startup.starting	Starting Core...	Starting Core...	正在啟動 Core…	Startup splash shown before Core preparation, including WSL cold start.		Display only; no connection credentials or progress percentage.	translation-reviewed	desktop/startup-window.cjs
 desktop.startup.start_failed	StandTerm Desktop could not start	StandTerm Desktop could not start	StandTerm Desktop 無法啟動	Startup failure dialog title.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/main.cjs
 desktop.startup.recovery_failed	StandTerm Desktop could not recover	StandTerm Desktop could not recover	StandTerm Desktop 無法復原	Recovery failure dialog title.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/main.cjs
 desktop.startup.shutdown_failed	StandTerm could not complete shutdown	StandTerm could not complete shutdown	StandTerm 無法完成結束程序	Shutdown failure dialog title.		Translate display text only. Keep stable codes, action IDs, numeric responses, validation, process ownership and cancellation behavior unchanged. Insert paths and diagnostic text literally.	translation-reviewed	desktop/main.cjs

From 63cb3239cd12de04d311cc9623965a117306bf36 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Wed, 23 Sep 2026 22:28:20 +0800
Subject: [PATCH 40/43] Add Windows network routing for WSL SSH

---
 desktop/README.md                         |  21 +++
 docs/backend_plugin_contract.md           |   9 +
 docs/ui_copy_review.tsv                   |   4 +
 scripts/run_smoke_tests.py                |   3 +
 static/js/standterm-messages.js           |   8 +
 templates/index.html                      |  19 +-
 terminal_backends/ssh.py                  |  52 +++++-
 terminal_backends/windows_network.py      | 186 ++++++++++++++++++++
 tests/ssh_network_origin_browser_smoke.py | 123 +++++++++++++
 tests/ssh_network_origin_smoke.py         | 201 ++++++++++++++++++++++
 tests/ssh_windows_network_smoke.py        |  84 +++++++++
 tests/windows_network_smoke.py            | 140 +++++++++++++++
 12 files changed, 843 insertions(+), 7 deletions(-)
 create mode 100644 terminal_backends/windows_network.py
 create mode 100644 tests/ssh_network_origin_browser_smoke.py
 create mode 100644 tests/ssh_network_origin_smoke.py
 create mode 100644 tests/ssh_windows_network_smoke.py
 create mode 100644 tests/windows_network_smoke.py

diff --git a/desktop/README.md b/desktop/README.md
index a948394..8369b5c 100644
--- a/desktop/README.md
+++ b/desktop/README.md
@@ -29,6 +29,27 @@ It uses the cached Desktop language and closes when the main window is ready or
 startup fails. Launching the same mode again focuses startup or its setup window
 while Core is still starting.
 
+WSL Core offers **SSH network source (this connection)** when WSL interoperability
+and `powershell.exe` on its PATH are available. **Windows (preview)** opens the
+first SSH hop through a temporary Windows PowerShell TCP helper. It needs Windows
+PowerShell policy to allow that helper and Windows DNS/routing/firewall to permit
+the target connection. No Windows SSH server, Python, administrator access, new
+listener or firewall rule is required by the relay. The target still needs SSH.
+
+SSH authentication, browser keys, host-key storage and SFTP remain in Core.
+Windows `localhost` means the Windows host and never inherits Core's localhost
+automatic trust or key setup. Use a host key alias when different hosts share
+an address across the two networks. The choice applies to the current connection
+and its retries, is not saved in profiles, and never silently falls back to Core.
+Later jump hosts, SSH forwarding targets and local forwarding listeners keep
+their existing semantics; selecting Windows does not move those listeners.
+This preview is available in WSL browser launches too, under the same conditions.
+
+`tests/windows_network_smoke.py` checks the real Windows binary relay and process
+cleanup (Windows Node is only a test fixture dependency).
+`tests/ssh_windows_network_smoke.py` additionally needs a local WSL `sshd` binary
+to create disposable SSH servers for trust, jump, SFTP and forwarding checks.
+
 Desktop caches the last synchronized language in the mode profile's `language.json`
 for startup, setup and recovery before Core is ready. Older Core versions without
 the language snapshot field retain that cache; missing or invalid cache uses English.
diff --git a/docs/backend_plugin_contract.md b/docs/backend_plugin_contract.md
index eee6963..3d14ba8 100644
--- a/docs/backend_plugin_contract.md
+++ b/docs/backend_plugin_contract.md
@@ -150,6 +150,15 @@ Keep these compatibility surfaces unless there is an explicit migration plan:
   fields.
 - Secret start fields must not expose `default_value`.
 
+SSH may advertise a `network_origin` start field with `core` and `windows` values
+on WSL when Windows interoperability and PowerShell are available. Omission means
+`core`. The `windows` preview applies only to the route's first TCP connection;
+the field belongs to the top-level start payload, never an individual route node.
+Unsupported values or an unavailable Windows helper are rejected without fallback.
+Authentication and host-key checks remain in Core; Windows loopback targets do
+not qualify for Core localhost trust/key-setup shortcuts. The selected origin is
+retained in retries and Windows-backed SFTP endpoint metadata.
+
 When adding a backend, implement `build_policy_option()`,
 `get_start_form_schema()`, `validate_start_payload()`, `create_bridge()`, and
 `connect_bridge()`. Add focused backend and browser smoke tests for the exposed
diff --git a/docs/ui_copy_review.tsv b/docs/ui_copy_review.tsv
index 9aeb882..ba4be8a 100644
--- a/docs/ui_copy_review.tsv
+++ b/docs/ui_copy_review.tsv
@@ -798,3 +798,7 @@ browser.files.copy_unknown_detail	{detail} Inspect the destination before retryi
 browser.chrome.key_unavailable	The browser SSH key is unavailable.	The browser SSH key is unavailable.	無法使用瀏覽器 SSH 金鑰。	Browser-owned display fallback only.		Preserve raw labels and identifiers.	translation-reviewed	templates/index.html
 browser.chrome.terminal	Terminal	Terminal	終端	Browser-owned display fallback only.		Preserve raw labels and identifiers.	translation-reviewed	templates/index.html
 browser.chrome.file_transfer	File transfer	File transfer	檔案傳輸	Browser-owned display fallback only.		Preserve raw labels and identifiers.	translation-reviewed	templates/index.html
+connection.network_origin	SSH network source (this connection)	SSH network source (this connection)	SSH 網路來源（本次連線）	WSL SSH first-hop network source preview.		Display only. Keep core/windows payload values literal; preserve Core, WSL, Windows and localhost.	translation-reviewed	templates/index.html
+connection.network_core	Core (WSL)	Core (WSL)	Core（WSL）	WSL SSH first-hop network source preview.		Display only. Keep core/windows payload values literal; preserve Core, WSL, Windows and localhost.	translation-reviewed	templates/index.html
+connection.network_windows	Windows (preview)	Windows (preview)	Windows（試用）	WSL SSH first-hop network source preview.		Display only. Keep core/windows payload values literal; preserve Core, WSL, Windows and localhost.	translation-reviewed	templates/index.html
+connection.network_hint	First hop only; not saved in profiles. With Windows selected, localhost means the Windows host.	First hop only; not saved in profiles. With Windows selected, localhost means the Windows host.	僅影響第一站，不隨設定檔儲存。選 Windows 時，localhost 指 Windows 本機。	WSL SSH first-hop network source preview.		Display only. Keep core/windows payload values literal; preserve Core, WSL, Windows and localhost.	translation-reviewed	templates/index.html
diff --git a/scripts/run_smoke_tests.py b/scripts/run_smoke_tests.py
index 32bb58f..22adc99 100644
--- a/scripts/run_smoke_tests.py
+++ b/scripts/run_smoke_tests.py
@@ -30,6 +30,8 @@
     'tests/static_site_smoke.py',
     'tests/terminal_read_smoke.py',
     'tests/ssh_start_smoke.py',
+    'terminal_backends/windows_network.py',
+    'tests/ssh_network_origin_smoke.py',
     'tests/ssh_login_smoke.py',
     'tests/ssh_node_credentials_smoke.py',
     'tests/ssh_tunnels_smoke.py',
@@ -44,6 +46,7 @@
     'tests/access_window_smoke.py',
     'tests/terminal_read_smoke.py',
     'tests/ssh_start_smoke.py',
+    'tests/ssh_network_origin_smoke.py',
     'tests/ssh_login_smoke.py',
     'tests/ssh_node_credentials_smoke.py',
     'tests/server_startup_smoke.py',
diff --git a/static/js/standterm-messages.js b/static/js/standterm-messages.js
index bca6278..1a8fddc 100644
--- a/static/js/standterm-messages.js
+++ b/static/js/standterm-messages.js
@@ -462,6 +462,10 @@
         "connection.local_shell": "Local Shell",
         "connection.local_shell_hint": "Runs on the StandTerm host.",
         "connection.manual_port": "Manual port\u2026",
+        "connection.network_core": "Core (WSL)",
+        "connection.network_hint": "First hop only; not saved in profiles. With Windows selected, localhost means the Windows host.",
+        "connection.network_origin": "SSH network source (this connection)",
+        "connection.network_windows": "Windows (preview)",
         "connection.no_routes": "No saved routes",
         "connection.none_selected": "None selected",
         "connection.password": "Password (optional)",
@@ -1262,6 +1266,10 @@
         "connection.local_shell": "\u672c\u6a5f Shell",
         "connection.local_shell_hint": "\u5728 StandTerm \u4e3b\u6a5f\u4e0a\u57f7\u884c\u3002",
         "connection.manual_port": "\u624b\u52d5\u8f38\u5165\u5e8f\u5217\u57e0\u2026",
+        "connection.network_core": "Core\uff08WSL\uff09",
+        "connection.network_hint": "\u50c5\u5f71\u97ff\u7b2c\u4e00\u7ad9\uff0c\u4e0d\u96a8\u8a2d\u5b9a\u6a94\u5132\u5b58\u3002\u9078 Windows \u6642\uff0clocalhost \u6307 Windows \u672c\u6a5f\u3002",
+        "connection.network_origin": "SSH \u7db2\u8def\u4f86\u6e90\uff08\u672c\u6b21\u9023\u7dda\uff09",
+        "connection.network_windows": "Windows\uff08\u8a66\u7528\uff09",
         "connection.no_routes": "\u6c92\u6709\u5df2\u5132\u5b58\u8def\u5f91",
         "connection.none_selected": "\u5c1a\u672a\u9078\u64c7",
         "connection.password": "\u5bc6\u78bc\uff08\u9078\u586b\uff09",
diff --git a/templates/index.html b/templates/index.html
index e1f3600..3b5394d 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -1378,6 +1378,14 @@ <h2>StandTerm</h2>
                 <label data-mode="uart"><input type="radio" name="connection_type" value="uart">UART</label>
             </div>
             <div id="ssh-fields">
+                <div id="ssh-network-origin-field" hidden>
+                    <label for="ssh-network-origin" data-i18n="connection.network_origin">SSH network source (this connection)</label>
+                    <select id="ssh-network-origin" aria-describedby="ssh-network-origin-hint">
+                        <option value="core" data-i18n="connection.network_core">Core (WSL)</option>
+                        <option value="windows" data-i18n="connection.network_windows">Windows (preview)</option>
+                    </select>
+                    <p id="ssh-network-origin-hint" data-i18n="connection.network_hint">First hop only; not saved in profiles. With Windows selected, localhost means the Windows host.</p>
+                </div>
                 <section class="ssh-preparation-pane" id="ssh-direct-pane">
                     <button type="button" id="ssh-direct-heading" class="ssh-preparation-heading" aria-expanded="true" aria-controls="ssh-direct-body"><span class="ssh-pane-selection">●</span><span data-i18n="connection.direct">Direct connect</span><small id="ssh-direct-summary"></small></button>
                     <div class="ssh-preparation-body" id="ssh-direct-body">
@@ -2373,6 +2381,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             const modeSelector = document.getElementById('modeSelector');
             const sshFields = document.getElementById('ssh-fields');
             const sshHostInput = document.getElementById('host');
+            const sshNetworkOrigin = document.getElementById('ssh-network-origin');
             const sshPortInput = document.getElementById('port');
             const sshUsernameInput = document.getElementById('username');
             const sshPasswordInput = document.getElementById('password');
@@ -5782,6 +5791,11 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 });
                 modeSelector.classList.toggle('locked', !!forcedConnectionType || getActiveModeCount() <= 1);
                 sshFields.style.display = normalized === 'ssh' ? 'block' : 'none';
+                const windowsNetworkAvailable = getConnectionFieldOptions('ssh', 'network_origin')
+                    .some(option => option.value === 'windows');
+                document.getElementById('ssh-network-origin-field').hidden = !windowsNetworkAvailable;
+                sshNetworkOrigin.disabled = !windowsNetworkAvailable;
+                if (!windowsNetworkAvailable) sshNetworkOrigin.value = 'core';
                 localShellFields.style.display = (
                     normalized === 'local_shell' && localShellKindSelect.options.length > 0
                 ) ? 'block' : 'none';
@@ -8292,6 +8306,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     terminal_id: activeTerminalId
                 };
                 if (connectionType === 'ssh') {
+                    if (!sshNetworkOrigin.disabled && sshNetworkOrigin.value === 'windows') formData.network_origin = 'windows';
                     if (sshPreparationMode === 'route') {
                         const entry = currentSshRouteEntry();
                         if (!entry) throw new Error(t('browser.chrome.choose_route'));
@@ -8328,6 +8343,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             }
 
             function resetSshFormFields() {
+                sshNetworkOrigin.value = 'core';
                 Object.entries(CONNECTION_FIELD_IDS.ssh).forEach(([fieldName, id]) => {
                     clearConnectionFieldEdited('ssh', fieldName);
                     const input = document.getElementById(id);
@@ -8407,7 +8423,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
 
             function sshConnectionDiagnostic(value) {
                 const result = {};
-                for (const key of ['connection_type', 'terminal_id', 'attempt_id', 'node_id', 'host', 'port', 'username', 'host_key_alias', 'use_browser_key']) {
+                for (const key of ['connection_type', 'terminal_id', 'attempt_id', 'node_id', 'host', 'port', 'username', 'host_key_alias', 'use_browser_key', 'network_origin']) {
                     if (['string', 'number', 'boolean'].includes(typeof value[key])) result[key] = value[key];
                 }
                 if (Array.isArray(value.route)) result.route = value.route.map(sshConnectionDiagnostic);
@@ -8498,6 +8514,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                 input.addEventListener('input', invalidateSshRetry);
                 input.addEventListener('input', () => { directHostIdentity.invalidate(); directKeyControl.update(); applyQuickConnectKeySelection(); renderSshPreparation(); });
             });
+            sshNetworkOrigin.addEventListener('change', invalidateSshRetry);
             sshSessionPickerToggle.onclick = () => {
                 const opening = !sshSessionPickerPanel.classList.contains('open');
                 sshSessionPickerPanel.classList.toggle('open', opening);
diff --git a/terminal_backends/ssh.py b/terminal_backends/ssh.py
index 6f0dac0..c2ad939 100644
--- a/terminal_backends/ssh.py
+++ b/terminal_backends/ssh.py
@@ -18,6 +18,7 @@
     SSHHostKeyStore, fingerprint, host_key_name,
 )
 from runtime_logging import log_message
+from .windows_network import WindowsNetworkSocket, windows_network_executable
 
 
 SSH_PROFILE_NAME_MAX_LENGTH = 64
@@ -138,6 +139,7 @@ def __init__(
         self._sftp_endpoint = None
         self.ssh = None
         self.auth_method = None
+        self.network_origin = 'core'
         self._reset_ssh_client()
         self.channel = None
         self._output_decoder = codecs.getincrementaldecoder('utf-8')(errors='ignore')
@@ -152,6 +154,8 @@ def metadata(self, cols=None, rows=None):
                 'port': self._sftp_endpoint['port'],
                 'username': self._sftp_endpoint['user'],
             }
+            if self.network_origin == 'windows':
+                metadata['ssh_target']['network_origin'] = 'windows'
         return metadata
 
     def sftp_endpoint(self):
@@ -1208,8 +1212,12 @@ def _connect_route(self, route, cols, rows, interactive_login=False):
                 self._pending_host_key = None
                 if previous is None:
                     # Connect to the network address; the alias is only a trust identity.
-                    sock = self._own_connection_resource(socket.create_connection(
-                        (node['host'], node['port']), timeout=SSH_CONNECT_TIMEOUT_SECONDS))
+                    if self.network_origin == 'windows':
+                        sock = self._own_connection_resource(WindowsNetworkSocket())
+                        sock.connect((node['host'], node['port']), timeout=SSH_CONNECT_TIMEOUT_SECONDS)
+                    else:
+                        sock = self._own_connection_resource(socket.create_connection(
+                            (node['host'], node['port']), timeout=SSH_CONNECT_TIMEOUT_SECONDS))
                 else:
                     self._connection_progress(node, index, len(route), 'forward')
                     sock = self._own_connection_resource(previous.get_transport().open_channel(
@@ -1219,7 +1227,8 @@ def _connect_route(self, route, cols, rows, interactive_login=False):
                 self.ssh = None
                 self._reset_ssh_client(
                     interactive_node=node if interactive_login else None,
-                    local_direct=len(route) == 1 and not node.get('host_key_alias') and self._is_local_target(node['host']))
+                    local_direct=self.network_origin == 'core' and len(route) == 1
+                    and not node.get('host_key_alias') and self._is_local_target(node['host']))
                 client = self._own_connection_resource(self.ssh)
                 key = node.get('browser_key')
                 pkey = None
@@ -1251,6 +1260,8 @@ def _connect_route(self, route, cols, rows, interactive_login=False):
                 'route': json.dumps([[n['host'].lower(), n['port'], n['username'],
                                       n.get('host_key_alias', '')] for n in route], separators=(',', ':')),
             }
+            if self.network_origin == 'windows':
+                self._sftp_endpoint['network_origin'] = 'windows'
             return True, None
         except Exception as exc:
             if isinstance(exc, (HostKeyConfirmationRequired, paramiko_module.BadHostKeyException)):
@@ -1263,8 +1274,16 @@ def _connect_route(self, route, cols, rows, interactive_login=False):
             return False, result
 
     def connect(self, host, port, user, password=None, browser_key=None, cols=80, rows=24,
-                route=None, attempt_id=None, interactive_login=False):
+                route=None, attempt_id=None, interactive_login=False, network_origin='core'):
         self.attempt_id = attempt_id
+        if network_origin not in ('core', 'windows'):
+            return False, {'message': 'Invalid SSH network origin.', 'error_code': 'ssh_network_origin_invalid'}
+        self.network_origin = network_origin
+        if network_origin == 'windows':
+            # Windows localhost is not Core localhost: never offer local keys or automatic trust.
+            route = route or [{'node_id': 'direct', 'host': host, 'port': port, 'username': user,
+                               'password': password or '', 'browser_key': browser_key}]
+            return self._connect_route(route, cols, rows, interactive_login=interactive_login)
         if interactive_login:
             node = route[0]
             if (len(route) == 1 and not node.get('host_key_alias') and self._is_local_target(node['host'])
@@ -1366,6 +1385,8 @@ def _host_key_confirmation_hint(self, key):
         details.append('Received: ' + fingerprint(key))
         details.append('Verify this fingerprint with the host administrator before trusting it.')
         details.append('This updates the Core account\'s known_hosts file, shared with other SSH clients.')
+        if self.network_origin == 'windows':
+            details.append('The first SSH hop uses Windows networking. Use a host key alias for a different host at the same address.')
         return {
             'message': message,
             'error_code': 'ssh_host_key_changed' if saved else 'ssh_host_key_unknown',
@@ -1636,7 +1657,7 @@ def get_start_form_schema(self, context=None):
         default_host = self._get_default_host(context=context)
         default_port = self._get_default_port(context=context)
         default_user = self._get_default_user(context=context)
-        return [
+        fields = [
             BackendStartFieldSchema(
                 name='host',
                 label='Host',
@@ -1675,6 +1696,13 @@ def get_start_form_schema(self, context=None):
                 max_bytes=self._max_password_bytes,
             ),
         ]
+        if windows_network_executable():
+            fields.append(BackendStartFieldSchema(
+                name='network_origin', label='Connect from', value_type='string', input_type='select',
+                default_value='core', options=({'value': 'core', 'label': 'Core (WSL)'},
+                                               {'value': 'windows', 'label': 'Windows (preview)'}),
+            ))
+        return fields
 
     def validate_setting_update(self, setting_key, value, current_value=None):
         if setting_key == 'ssh.default_host':
@@ -1739,6 +1767,13 @@ def validate_start_payload(self, data, terminal_id, client_ip, browser_authorize
                 'error_code': 'ssh_remote_unauthorized',
             }
 
+        network_origin = data.get('network_origin', 'core')
+        if network_origin not in ('core', 'windows'):
+            return None, 'Invalid SSH network origin.'
+        if network_origin == 'windows' and not windows_network_executable():
+            return None, {'error_code': 'ssh_windows_network_unavailable',
+                          'message': 'Windows network access requires WSL interoperability and Windows PowerShell on PATH.'}
+
         if 'route' in data:
             route = data['route']
             interactive_login = data.get('interactive_login', False)
@@ -1752,7 +1787,7 @@ def validate_start_payload(self, data, terminal_id, client_ip, browser_authorize
                 return None, f'SSH routes support at most {SSH_MAX_JUMP_HOSTS} jump hosts plus the target.'
             nodes, seen = [], set()
             for index, raw in enumerate(route):
-                if not isinstance(raw, dict) or 'route' in raw:
+                if not isinstance(raw, dict) or 'route' in raw or 'network_origin' in raw:
                     return None, 'SSH route node is invalid.'
                 if not all(field in raw for field in ('host', 'port', 'username')):
                     return None, 'Each SSH route node requires its host, port and username.'
@@ -1775,6 +1810,8 @@ def validate_start_payload(self, data, terminal_id, client_ip, browser_authorize
                                      or self._has_control_chars(name)):
                 return None, 'SSH entry name is invalid.'
             payload.update(route=nodes, attempt_id=attempt_id, profile_name=name or None, interactive_login=interactive_login)
+            if network_origin == 'windows':
+                payload['network_origin'] = network_origin
             return payload, None
 
         host = data.get('host', self._get_default_host(context=context))
@@ -1882,6 +1919,7 @@ def validate_start_payload(self, data, terminal_id, client_ip, browser_authorize
             'profile_name': profile_name or None,
             'browser_key': browser_key,
             'host_key_alias': alias,
+            **({'network_origin': network_origin} if network_origin == 'windows' else {}),
         }, None
 
     def create_bridge(self, session_token, terminal_id, payload):
@@ -1893,6 +1931,8 @@ def create_bridge(self, session_token, terminal_id, payload):
 
     def connect_bridge(self, bridge, payload, cols, rows):
         options = {}
+        if payload.get('network_origin') == 'windows':
+            options['network_origin'] = 'windows'
         if payload.get('route'):
             options.update(route=payload['route'], attempt_id=payload['attempt_id'])
             if payload.get('interactive_login'):
diff --git a/terminal_backends/windows_network.py b/terminal_backends/windows_network.py
new file mode 100644
index 0000000..a4e9df5
--- /dev/null
+++ b/terminal_backends/windows_network.py
@@ -0,0 +1,186 @@
+"""WSL-only TCP transport through Windows; SSH remains in the Core process."""
+
+import base64
+import errno
+import json
+import os
+from pathlib import Path
+import select
+import shutil
+import socket
+import subprocess
+import sys
+import threading
+import time
+
+
+HELPER_EXIT_TIMEOUT = 1
+READY = b'STANDTERM_TCP_READY\n'
+# Endpoint values arrive as JSON data, never as PowerShell source or arguments.
+# The helper opens only an outbound socket and exits when either pipe closes.
+RELAY_SCRIPT = r'''
+$ErrorActionPreference = 'Stop'
+$ProgressPreference = 'SilentlyContinue'
+$inputStream = [Console]::OpenStandardInput()
+$outputStream = [Console]::OpenStandardOutput()
+$client = $null
+try {
+    $reader = New-Object IO.StreamReader($inputStream, [Text.Encoding]::UTF8, $false, 1024, $true)
+    $line = $reader.ReadLine()
+    if ($null -eq $line -or $line.Length -gt 4096) { throw 'Invalid request' }
+    $request = $line | ConvertFrom-Json
+    if ($request.version -ne 1 -or $request.host -isnot [string] -or !$request.host.Length -or
+        $request.host.Length -gt 255 -or $request.port -lt 1 -or $request.port -gt 65535 -or
+        $request.timeout_ms -lt 1 -or $request.timeout_ms -gt 60000) { throw 'Invalid request' }
+    $reader.Dispose()
+    $hello = [Text.Encoding]::ASCII.GetBytes("STANDTERM_TCP_HELPER $PID`n")
+    $outputStream.Write($hello, 0, $hello.Length)
+    $outputStream.Flush()
+    $client = New-Object Net.Sockets.TcpClient
+    $pending = $client.ConnectAsync([string]$request.host, [int]$request.port)
+    if (!$pending.Wait([int]$request.timeout_ms)) { throw 'Connection timed out' }
+    $client.NoDelay = $true
+    $stream = $client.GetStream()
+    $ready = [Text.Encoding]::ASCII.GetBytes("STANDTERM_TCP_READY`n")
+    $outputStream.Write($ready, 0, $ready.Length)
+    $outputStream.Flush()
+    $up = $inputStream.CopyToAsync($stream)
+    $down = $stream.CopyToAsync($outputStream)
+    [Threading.Tasks.Task]::WaitAny([Threading.Tasks.Task[]]@($up, $down)) | Out-Null
+} catch {
+    exit 1
+} finally {
+    if ($null -ne $client) { $client.Close() }
+}
+'''
+
+
+def windows_network_executable():
+    if sys.platform != 'linux':
+        return None
+    try:
+        if 'microsoft' not in Path('/proc/sys/kernel/osrelease').read_text().lower():
+            return None
+    except OSError:
+        return None
+    if not os.environ.get('WSL_INTEROP'):
+        return None
+    return shutil.which('powershell.exe')
+
+
+class WindowsNetworkSocket:
+    def __init__(self):
+        self.process = None
+        self.helper_pid = None
+        self.timeout = None
+        self._closed = False
+        self._lock = threading.Lock()
+
+    @property
+    def closed(self):
+        return self._closed
+
+    def connect(self, address, timeout):
+        executable = windows_network_executable()
+        if not executable:
+            raise OSError('Windows network access requires WSL interoperability and Windows PowerShell on PATH.')
+        host, port = address
+        if (not isinstance(host, str) or not 1 <= len(host) <= 255
+                or any(ord(char) < 32 or ord(char) == 127 for char in host)
+                or type(port) is not int or not 1 <= port <= 65535 or not 0 < timeout <= 60):
+            raise ValueError('Invalid Windows network endpoint.')
+        script = base64.b64encode(RELAY_SCRIPT.encode('utf-16-le')).decode('ascii')
+        with self._lock:
+            if self._closed:
+                raise OSError('Windows network connection canceled.')
+            if self.process is not None:
+                raise OSError('Windows network socket is already connected.')
+            self.process = subprocess.Popen(
+                [executable, '-NoLogo', '-NoProfile', '-NonInteractive', '-WindowStyle', 'Hidden', '-EncodedCommand', script],
+                stdin=subprocess.PIPE, stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, bufsize=0)
+            os.set_blocking(self.process.stdin.fileno(), False)
+            os.set_blocking(self.process.stdout.fileno(), False)
+        deadline = time.monotonic() + timeout
+        request = (json.dumps({'version': 1, 'host': host, 'port': port,
+                               'timeout_ms': int(timeout * 1000)}) + '\n').encode('utf-8')
+        try:
+            while request:
+                self.settimeout(max(0, deadline - time.monotonic()))
+                request = request[self.send(request):]
+            # Do not send SSH bytes until the helper's bounded request reader is done.
+            hello = self._read_line(deadline)
+            prefix, _, pid = hello.rstrip(b'\n').partition(b' ')
+            if prefix != b'STANDTERM_TCP_HELPER' or not pid.isdigit() or not 0 < int(pid) <= 2147483647:
+                raise OSError('Invalid Windows network helper identity.')
+            self.helper_pid = int(pid)
+            if self._read_line(deadline) != READY:
+                raise OSError('Invalid Windows network helper response.')
+            self.settimeout(timeout)
+        except BaseException:
+            self.close()
+            raise
+
+    def _read_line(self, deadline):
+        response = b''
+        while len(response) < 128:
+            self.settimeout(max(0, deadline - time.monotonic()))
+            part = self.recv(1)
+            if not part:
+                raise OSError('Windows could not open the network connection. Check Windows reachability and PowerShell policy.')
+            response += part
+            if part == b'\n':
+                return response
+        raise OSError('Invalid Windows network helper response.')
+
+    def settimeout(self, timeout):
+        self.timeout = timeout
+
+    def _pipe(self, sending):
+        if self._closed or self.process is None:
+            raise OSError(errno.EBADF, 'Windows network socket is closed.')
+        return self.process.stdin if sending else self.process.stdout
+
+    def send(self, data):
+        pipe = self._pipe(True)
+        try:
+            if not select.select([], [pipe], [], self.timeout)[1]:
+                raise socket.timeout('Windows network write timed out.')
+            return os.write(pipe.fileno(), data)
+        except ValueError as exc:
+            raise OSError(errno.EBADF, 'Windows network socket is closed.') from exc
+
+    def recv(self, size):
+        if not size or self._closed:
+            return b''
+        pipe = self._pipe(False)
+        try:
+            if not select.select([pipe], [], [], self.timeout)[0]:
+                raise socket.timeout('Windows network read timed out.')
+            return os.read(pipe.fileno(), size)
+        except (OSError, ValueError):
+            if self._closed:
+                return b''
+            raise
+
+    def close(self):
+        with self._lock:
+            if self._closed:
+                return
+            self._closed = True
+            process = self.process
+        if process is None:
+            return
+        for pipe in (process.stdin, process.stdout):
+            try:
+                pipe.close()
+            except OSError:
+                pass
+        try:
+            process.wait(timeout=HELPER_EXIT_TIMEOUT)
+        except subprocess.TimeoutExpired:
+            process.terminate()
+            try:
+                process.wait(timeout=HELPER_EXIT_TIMEOUT)
+            except subprocess.TimeoutExpired:
+                process.kill()
+                process.wait(timeout=HELPER_EXIT_TIMEOUT)
diff --git a/tests/ssh_network_origin_browser_smoke.py b/tests/ssh_network_origin_browser_smoke.py
new file mode 100644
index 0000000..4ba519d
--- /dev/null
+++ b/tests/ssh_network_origin_browser_smoke.py
@@ -0,0 +1,123 @@
+"""Verify one-connection network selection, policy availability and bound SSH retries."""
+
+from pathlib import Path
+import sys
+
+sys.path.insert(0, str(Path(__file__).resolve().parent))
+import agent_browser_smoke as fixture
+import ssh_routes_browser_smoke as routes
+
+
+def set_available(page, available):
+    page.evaluate('''available => {
+        const policy = window.terminalTest.getTerminalPolicy();
+        const ssh = policy.connection_options.find(item => item.connection_type === 'ssh');
+        ssh.start_fields = ssh.start_fields.filter(field => field.name !== 'network_origin');
+        if (available) ssh.start_fields.push({name: 'network_origin', input_type: 'select',
+            options: [{value: 'core'}, {value: 'windows'}], default_value: 'core'});
+        window.terminalTest.applyTerminalPolicy(policy);
+        window.terminalTest.setConnectionTypeForTest('ssh');
+    }''', available)
+
+
+def test_selection_and_route_scope(browser, url, locale):
+    context, page = fixture.new_page(browser, url, ui_language=locale)
+    try:
+        page.click('#new-tab-btn')
+        routes.show_ssh(page)
+        set_available(page, True)
+        assert page.locator('#ssh-network-origin-field').is_visible()
+        assert page.input_value('#ssh-network-origin') == 'core'
+        assert page.locator('label[for="ssh-network-origin"]').inner_text() == (
+            'SSH 網路來源（本次連線）' if locale == 'zh-TW' else 'SSH network source (this connection)')
+        page.fill('#host', 'target.test'); page.fill('#username', 'operator')
+        direct = page.evaluate('() => window.terminalTest.prepareSshConnectionForTest()')
+        assert 'network_origin' not in direct
+        page.select_option('#ssh-network-origin', 'windows')
+        direct = page.evaluate('() => window.terminalTest.prepareSshConnectionForTest()')
+        assert direct['network_origin'] == 'windows'
+        page.evaluate('''() => window.terminalTest.setSshSessionState({version:2, revision:0,
+            profiles:[{id:'route-a',name:'Route A',startNodeId:'jump'}], history:[], nodes:[
+                {id:'jump',endpoint:{host:'jump.test',port:'22',username:'u'},
+                    authentication:{method:'password'},hostKeyAlias:'',nextNodeId:'target'},
+                {id:'target',endpoint:{host:'target.test',port:'22',username:'u'},
+                    authentication:{method:'password'},hostKeyAlias:'',nextNodeId:null}
+            ]})''')
+        routes.select(page, 'route-a')
+        route = page.evaluate('() => window.terminalTest.prepareSshConnectionForTest()')
+        assert route['network_origin'] == 'windows'
+        assert [node['host'] for node in route['route']] == ['jump.test', 'target.test']
+        assert all('network_origin' not in node for node in route['route'])
+        state = page.evaluate('() => window.terminalTest.getSshSessionState()')
+        assert all('network_origin' not in entry for entry in state['profiles'] + state['nodes'])
+        set_available(page, False)
+        assert page.locator('#ssh-network-origin-field').is_hidden()
+        assert page.locator('#ssh-network-origin').is_disabled()
+        assert page.input_value('#ssh-network-origin') == 'core'
+        route = page.evaluate('() => window.terminalTest.prepareSshConnectionForTest()')
+        assert 'network_origin' not in route
+    finally:
+        fixture.close_context(context)
+
+
+def test_trust_retry_keeps_the_selected_network(browser, url):
+    context, page = routes.new_page(browser, url)
+    try:
+        routes.show_ssh(page)
+        set_available(page, True)
+        page.fill('#host', 'target.test'); page.fill('#username', 'operator')
+        page.select_option('#ssh-network-origin', 'windows')
+        page.evaluate('''() => {
+            window.terminalTest.captureSshStartsForTest();
+            window.terminalTest.clearEmitted();
+            document.getElementById('connectBtn').click();
+        }''')
+        page.wait_for_function("() => window.terminalTest.getEmitted().some(item => item.event === 'start_ssh')")
+        start = page.evaluate("() => window.terminalTest.getEmitted().find(item => item.event === 'start_ssh').args[0]")
+        assert start['network_origin'] == 'windows'
+        failure = {'terminal_id': start['terminal_id'], 'message_type': 'connection_error',
+                   'attempt_id': start['attempt_id'], 'action_type': 'confirm_ssh_host_key',
+                   'action_id': 'trust-origin', 'message': 'Host key is unknown',
+                   'action_message': 'Fingerprint fixture', 'action_question': 'Trust this key?'}
+        page.evaluate('data => window.terminalTest.handleSshOutput(data)', failure)
+        page.click('#actionYesBtn')
+        response = {'terminal_id': start['terminal_id'], 'message_type': 'host_key_result',
+                    'attempt_id': start['attempt_id'], 'action_type': 'confirm_ssh_host_key',
+                    'action_id': 'trust-origin', 'operation': 'confirm', 'status': 'success'}
+        page.evaluate('data => window.terminalTest.handleSshOutput(data)', response)
+        page.wait_for_function("() => window.terminalTest.getEmitted().filter(item => item.event === 'start_ssh').length === 2")
+        starts = page.evaluate("() => window.terminalTest.getEmitted().filter(item => item.event === 'start_ssh').map(item => item.args[0])")
+        assert [item['network_origin'] for item in starts] == ['windows', 'windows']
+        assert starts[0]['route'] == starts[1]['route']
+        page.evaluate('data => window.terminalTest.handleSshOutput(data)',
+                      {**failure, 'attempt_id': starts[1]['attempt_id'], 'action_id': 'trust-second'})
+        page.click('#actionYesBtn')
+        # The synthetic retry hides the form; still exercise its change handler
+        # before delivering the deliberately delayed trust result.
+        page.select_option('#ssh-network-origin', 'core', force=True)
+        page.evaluate('data => window.terminalTest.handleSshOutput(data)',
+                      {**response, 'attempt_id': starts[1]['attempt_id'], 'action_id': 'trust-second'})
+        page.wait_for_timeout(200)
+        assert page.evaluate("() => window.terminalTest.getEmitted().filter(item => item.event === 'start_ssh').length") == 2
+    finally:
+        fixture.close_context(context)
+
+
+def main():
+    process, url = fixture.start_server()
+    try:
+        with fixture.load_playwright()[0]() as playwright:
+            browser = playwright.chromium.launch(headless=True)
+            try:
+                for locale in ['en', 'zh-TW']:
+                    test_selection_and_route_scope(browser, url, locale)
+                test_trust_retry_keeps_the_selected_network(browser, url)
+            finally:
+                browser.close()
+    finally:
+        fixture.stop_server(process)
+    print('SSH network browser smoke passed: bilingual selector, route scope, unavailable capability and trust retry.')
+
+
+if __name__ == '__main__':
+    main()
diff --git a/tests/ssh_network_origin_smoke.py b/tests/ssh_network_origin_smoke.py
new file mode 100644
index 0000000..9cdc653
--- /dev/null
+++ b/tests/ssh_network_origin_smoke.py
@@ -0,0 +1,201 @@
+"""Check SSH network-origin routing without Windows or network connections."""
+import base64
+from contextlib import ExitStack
+from pathlib import Path
+import sys
+import unittest
+from unittest.mock import Mock, patch
+
+sys.path.insert(0, str(Path(__file__).resolve().parent))
+arguments = sys.argv[1:]
+sys.argv[1:] = []
+import agent_backend_smoke as fixture
+sys.argv[1:] = arguments
+
+import paramiko
+from terminal_backends import ssh
+
+standterm = fixture.standterm
+
+
+class SSHNetworkOriginTests(unittest.TestCase):
+    def setUp(self):
+        fixture.reset_state()
+        self.plugin = standterm.TERMINAL_BACKEND_REGISTRY.get('ssh')
+        self.direct = {'connection_type': 'ssh', 'terminal_id': 'main',
+                       'host': 'localhost', 'port': 22, 'username': 'fixture', 'password': ''}
+        self.node = {'node_id': 'first', 'host': 'localhost', 'port': 22,
+                     'username': 'fixture', 'password': '', 'browser_key': None}
+
+    def validate(self, data):
+        return standterm.validate_start_ssh_payload(data, '127.0.0.1')
+
+    def bridge(self):
+        bridge = ssh.SSHBridge('fixture-session', get_paramiko=lambda: paramiko,
+                               ssh_term='xterm', local_public_key_types=[])
+        bridge.emit_output = Mock()
+        self.addCleanup(bridge.close)
+        return bridge
+
+    def test_default_and_explicit_core_preserve_existing_payload(self):
+        route = {**self.direct, 'attempt_id': 'fixture-attempt', 'route': [self.node]}
+        with patch.object(ssh, 'windows_network_executable', return_value=None):
+            for data in (self.direct, route):
+                with self.subTest(route='route' in data):
+                    original, error = self.validate(data)
+                    self.assertIsNone(error)
+                    explicit, error = self.validate({**data, 'network_origin': 'core'})
+                    self.assertIsNone(error)
+                    self.assertEqual(explicit, original)
+                    self.assertNotIn('network_origin', original)
+
+    def test_windows_capability_controls_schema_and_validation(self):
+        for executable in (None, '/fixture/powershell.exe'):
+            with self.subTest(available=bool(executable)), patch.object(
+                    ssh, 'windows_network_executable', return_value=executable):
+                fields = {field.name: field for field in self.plugin.get_start_form_schema()}
+                self.assertEqual('network_origin' in fields, bool(executable))
+                if executable:
+                    self.assertEqual(fields['network_origin'].default_value, 'core')
+                    self.assertEqual([item['value'] for item in fields['network_origin'].options], ['core', 'windows'])
+                for data in (self.direct, {**self.direct, 'attempt_id': 'fixture-attempt', 'route': [self.node]}):
+                    payload, error = self.validate({**data, 'network_origin': 'windows'})
+                    if executable:
+                        self.assertIsNone(error)
+                        self.assertEqual(payload['network_origin'], 'windows')
+                        for node in payload.get('route', []):
+                            self.assertNotIn('network_origin', node)
+                    else:
+                        self.assertIsNone(payload)
+                        self.assertEqual(error['error_code'], 'ssh_windows_network_unavailable')
+
+    def test_unknown_origins_and_per_node_origins_are_rejected(self):
+        with patch.object(ssh, 'windows_network_executable', return_value='/fixture/powershell.exe'):
+            for origin in ('Windows', 'other', '', None, False, {}, []):
+                with self.subTest(origin=origin):
+                    payload, error = self.validate({**self.direct, 'network_origin': origin})
+                    self.assertIsNone(payload)
+                    self.assertTrue(error)
+            for origin in ('core', 'windows'):
+                payload, error = self.validate({**self.direct, 'network_origin': 'windows',
+                    'attempt_id': 'fixture-attempt', 'route': [{**self.node, 'network_origin': origin}]})
+                self.assertIsNone(payload)
+                self.assertTrue(error)
+
+    def test_connect_bridge_forwards_origin_without_changing_core_calls(self):
+        for origin in ('core', 'windows'):
+            bridge = Mock()
+            payload = {**self.direct, 'browser_key': None}
+            if origin == 'windows':
+                payload['network_origin'] = origin
+            self.plugin.connect_bridge(bridge, payload, 90, 30)
+            options = {'browser_key': None, 'cols': 90, 'rows': 30}
+            if origin == 'windows':
+                options['network_origin'] = origin
+            bridge.connect.assert_called_once_with('localhost', 22, 'fixture', '', **options)
+            bridge.reset_mock()
+            payload.update(route=[self.node], attempt_id='fixture-attempt', interactive_login=True)
+            self.plugin.connect_bridge(bridge, payload, 90, 30)
+            options.update(route=[self.node], attempt_id='fixture-attempt', interactive_login=True)
+            bridge.connect.assert_called_once_with('localhost', 22, 'fixture', '', **options)
+
+    def test_windows_direct_interactive_and_browser_key_never_use_local_shortcuts(self):
+        browser_key = {'public_key': base64.b64encode(b'fixture-key').decode()}
+        for interactive in (False, True):
+            for key in (None, browser_key):
+                with self.subTest(interactive=interactive, browser_key=bool(key)):
+                    bridge = self.bridge()
+                    with patch.object(bridge, '_connect_route', return_value=(True, None)) as route, \
+                            patch.object(bridge, '_connect_with_local_keys') as local_keys, \
+                            patch.object(bridge, '_connect_with_browser_key') as local_browser_key:
+                        result = bridge.connect('localhost', 22, 'fixture', browser_key=key,
+                            network_origin='windows', interactive_login=interactive)
+                    self.assertEqual(result, (True, None))
+                    route.assert_called_once()
+                    self.assertEqual(route.call_args.args[0][0]['browser_key'], key)
+                    self.assertEqual(route.call_args.kwargs, {'interactive_login': interactive})
+                    local_keys.assert_not_called()
+                    local_browser_key.assert_not_called()
+
+    def test_bridge_rejects_unknown_origin_before_any_connection(self):
+        bridge = self.bridge()
+        with patch.object(bridge, '_connect_route') as route:
+            success, error = bridge.connect('localhost', 22, 'fixture', network_origin='other')
+        self.assertFalse(success)
+        self.assertEqual(error['error_code'], 'ssh_network_origin_invalid')
+        route.assert_not_called()
+
+    def test_windows_route_owns_first_hop_before_connect_and_preserves_remote_jumps(self):
+        for interactive in (False, True):
+            with self.subTest(interactive=interactive), ExitStack() as stack:
+                clients = []
+                def client():
+                    value = Mock()
+                    clients.append(value)
+                    return value
+                stack.enter_context(patch.object(paramiko, 'SSHClient', side_effect=client))
+                bridge = self.bridge()
+                stack.enter_context(patch.object(bridge._host_key_store, 'snapshot',
+                    return_value={'keys': [], 'host_key_name': 'localhost'}))
+                reset = stack.enter_context(patch.object(bridge, '_reset_ssh_client', wraps=bridge._reset_ssh_client))
+                stack.enter_context(patch.object(bridge, '_login_auth_strategy', return_value=object()))
+                relay = Mock()
+                relay.connect.side_effect = lambda *args, **kwargs: self.assertIn(relay, bridge._connection_resources)
+                factory = stack.enter_context(patch.object(ssh, 'WindowsNetworkSocket', return_value=relay))
+                direct = stack.enter_context(patch.object(ssh.socket, 'create_connection', side_effect=AssertionError('Core socket used')))
+                nodes = [self.node, {**self.node, 'node_id': 'target', 'host': 'target.test'}]
+                success, error = bridge.connect('target.test', 22, 'fixture', route=nodes,
+                    network_origin='windows', interactive_login=interactive)
+                self.assertTrue(success, error)
+                factory.assert_called_once_with()
+                relay.connect.assert_called_once_with(('localhost', 22), timeout=ssh.SSH_CONNECT_TIMEOUT_SECONDS)
+                direct.assert_not_called()
+                for call in reset.call_args_list:
+                    self.assertIs(call.kwargs['local_direct'], False)
+                    self.assertFalse(call.kwargs.get('trust_unknown_host', False))
+                first, target = clients[-2:]
+                first.get_transport().open_channel.assert_called_once_with('direct-tcpip',
+                    ('target.test', 22), ('127.0.0.1', 0), timeout=ssh.SSH_FORWARD_TIMEOUT_SECONDS)
+                self.assertIs(first.connect.call_args.kwargs['sock'], relay)
+                self.assertIs(target.connect.call_args.kwargs['sock'], first.get_transport().open_channel.return_value)
+                self.assertEqual(bridge.sftp_endpoint()['network_origin'], 'windows')
+                bridge.close()
+                self.assertTrue(relay.close.called)
+
+    def test_sftp_same_route_keeps_network_origins_distinct(self):
+        endpoints = []
+        for origin in ('core', 'windows'):
+            with ExitStack() as stack:
+                stack.enter_context(patch.object(paramiko, 'SSHClient', side_effect=Mock))
+                bridge = self.bridge()
+                stack.enter_context(patch.object(bridge._host_key_store, 'snapshot',
+                    return_value={'keys': [], 'host_key_name': 'localhost'}))
+                stack.enter_context(patch.object(ssh, 'WindowsNetworkSocket', return_value=Mock()))
+                stack.enter_context(patch.object(ssh.socket, 'create_connection', return_value=Mock()))
+                bridge.network_origin = origin
+                success, error = bridge._connect_route([self.node], 80, 24)
+                self.assertTrue(success, error)
+                endpoints.append(bridge.sftp_endpoint())
+        self.assertNotEqual(endpoints[0], endpoints[1])
+        self.assertNotIn('network_origin', endpoints[0])
+        self.assertEqual(endpoints[1].pop('network_origin'), 'windows')
+        self.assertEqual(endpoints[0], endpoints[1])
+
+    def test_windows_connect_failure_never_falls_back_to_core(self):
+        bridge = self.bridge()
+        relay = Mock()
+        relay.connect.side_effect = OSError('Fixture Windows connection failure')
+        with patch.object(bridge._host_key_store, 'snapshot', return_value={'keys': [], 'host_key_name': 'localhost'}), \
+                patch.object(ssh, 'WindowsNetworkSocket', return_value=relay), \
+                patch.object(ssh.socket, 'create_connection') as direct:
+            success, error = bridge.connect('localhost', 22, 'fixture', network_origin='windows')
+        self.assertFalse(success)
+        self.assertEqual(error['error_code'], 'ssh_route_failed')
+        self.assertIsNone(bridge.sftp_endpoint())
+        direct.assert_not_called()
+        bridge.close()
+        relay.close.assert_called_once_with()
+
+
+if __name__ == '__main__':
+    unittest.main()
diff --git a/tests/ssh_windows_network_smoke.py b/tests/ssh_windows_network_smoke.py
new file mode 100644
index 0000000..075fb1c
--- /dev/null
+++ b/tests/ssh_windows_network_smoke.py
@@ -0,0 +1,84 @@
+"""Exercise real SSH through Windows networking with disposable WSL OpenSSH servers."""
+
+import functools
+from pathlib import Path
+import sys
+import unittest
+from unittest.mock import patch
+
+sys.path.insert(0, str(Path(__file__).resolve().parent))
+import ssh_jump_smoke as fixture
+from terminal_backends.windows_network import windows_network_executable, WindowsNetworkSocket
+
+
+@unittest.skipUnless(windows_network_executable(), 'Requires WSL interoperability and Windows PowerShell')
+class WindowsSSHTests(fixture.SSHJumpTests):
+    def bridge(self, servers):
+        bridge = super().bridge(servers)
+        bridge.connect = functools.partial(bridge.connect, network_origin='windows')
+        return bridge
+
+    def test_windows_localhost_requires_trust_before_browser_key_or_local_authentication(self):
+        servers = [self.stack.enter_context(fixture.server())]
+        route = self.route(servers)
+        route[0]['host_key_alias'] = ''
+        bridge = self.bridge(servers)
+        with patch.object(bridge, '_connect_with_local_keys') as keys:
+            success, result = self.connect(bridge, route)
+        self.assertFalse(success)
+        self.assertEqual(result['error_code'], 'ssh_host_key_unknown')
+        self.assertEqual(self.signatures, [])
+        keys.assert_not_called()
+        bridge.close()
+
+        bridge = self.bridge(servers)
+        prompts = []
+        def reject_trust(value):
+            if value['message_type'] == 'ssh_login_prompt':
+                prompts.append(value['kind'])
+                self.assertEqual(value['kind'], 'host_key')
+                reply = {key: value[key] for key in ('attempt_id', 'node_id', 'kind', 'request_id')}
+                bridge.resolve_login_input('test-sid', {**reply, 'terminal_id': 'main', 'accept': False})
+        bridge.emit_output = reject_trust
+        route[0]['browser_key'] = None
+        with patch.object(bridge, '_connect_with_local_keys') as keys:
+            success, result = bridge.connect('127.0.0.1', route[0]['port'], route[0]['username'],
+                                             route=route, attempt_id='test-attempt', interactive_login=True)
+        self.assertFalse(success)
+        self.assertEqual(prompts, ['host_key'])
+        keys.assert_not_called()
+
+    def test_large_sftp_round_trip_preserves_origin_and_failure_never_uses_core_network(self):
+        servers = [self.stack.enter_context(fixture.server())]
+        route = self.route(servers)
+        self.trust(route, servers)
+        bridge = self.bridge(servers)
+        success, result = self.connect(bridge, route)
+        self.assertTrue(success, result)
+        self.assertEqual(bridge.sftp_endpoint()['network_origin'], 'windows')
+        with patch.object(fixture.TerminalBridge, 'metadata', return_value={}):
+            self.assertEqual(bridge.metadata()['ssh_target']['network_origin'], 'windows')
+        data = bytes(range(256)) * 16384
+        file = servers[0]['root'] / 'binary-payload'
+        with bridge.ssh.open_sftp() as sftp:
+            with sftp.open(str(file), 'wb') as output:
+                output.write(data)
+            with sftp.open(str(file), 'rb') as source:
+                self.assertEqual(source.read(), data)
+        self.assertEqual(file.read_bytes(), data)
+        relay = next(item for item in bridge._connection_resources if isinstance(item, WindowsNetworkSocket))
+        bridge.close()
+        self.assertTrue(relay.closed)
+        self.assertIsNotNone(relay.process.poll())
+
+        bridge = self.bridge(servers)
+        with patch('terminal_backends.ssh.WindowsNetworkSocket.connect', side_effect=OSError('Windows unavailable')), \
+                patch('terminal_backends.ssh.socket.create_connection') as direct:
+            success, result = self.connect(bridge, route)
+        self.assertFalse(success)
+        self.assertEqual(result['error_code'], 'ssh_route_failed')
+        direct.assert_not_called()
+
+
+if __name__ == '__main__':
+    unittest.main()
diff --git a/tests/windows_network_smoke.py b/tests/windows_network_smoke.py
new file mode 100644
index 0000000..bf2c72c
--- /dev/null
+++ b/tests/windows_network_smoke.py
@@ -0,0 +1,140 @@
+"""Run on WSL with Windows PowerShell and Node available; no installed service is changed."""
+
+import json
+from pathlib import Path
+import shutil
+import socket
+import subprocess
+import sys
+import threading
+import time
+import unittest
+
+sys.path.insert(0, str(Path(__file__).resolve().parents[1]))
+from terminal_backends.windows_network import WindowsNetworkSocket, windows_network_executable
+
+
+NODE = shutil.which('node.exe')
+SERVER = '''
+const net = require('net'), sockets = new Set();
+const server = net.createServer(c => {
+  sockets.add(c); c.on('error', () => {}); c.on('close', () => sockets.delete(c));
+  if (process.argv[1] === 'sink') c.pause(); else c.pipe(c);
+});
+server.listen(0, '127.0.0.1', () => console.log(JSON.stringify({port: server.address().port})));
+process.stdin.on('data', () => { for (const c of sockets) c.end(); });
+process.stdin.on('end', () => { for (const c of sockets) c.destroy(); server.close(); });
+'''
+
+
+@unittest.skipUnless(windows_network_executable() and NODE, 'Requires WSL interop, Windows PowerShell and Windows Node')
+class WindowsNetworkTests(unittest.TestCase):
+    def server(self, mode='echo'):
+        process = subprocess.Popen([NODE, '-e', SERVER, mode], stdin=subprocess.PIPE,
+                                   stdout=subprocess.PIPE, stderr=subprocess.DEVNULL)
+        def close():
+            process.stdin.close()
+            process.wait(timeout=5)
+            process.stdout.close()
+        self.addCleanup(close)
+        return process, json.loads(process.stdout.readline())['port']
+
+    def transport(self, port):
+        sock = WindowsNetworkSocket()
+        self.addCleanup(sock.close)
+        sock.connect(('127.0.0.1', port), 15)
+        self.assertIsNotNone(sock.helper_pid)
+        return sock
+
+    def assert_helper_gone(self, sock):
+        sock.close()
+        self.assertIsNotNone(sock.process.poll())
+        # Check the actual Windows process, not just its WSL interop PID.
+        result = subprocess.run([windows_network_executable(), '-NoProfile', '-NonInteractive', '-Command',
+                                 f'if (Get-Process -Id {sock.helper_pid} -ErrorAction SilentlyContinue) {{ exit 1 }}'],
+                                stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL, timeout=10)
+        self.assertEqual(result.returncode, 0)
+
+    def test_binary_full_duplex_timeout_remote_eof_and_windows_process_exit(self):
+        server, port = self.server()
+        sock = self.transport(port)
+        sock.settimeout(0.1)
+        with self.assertRaises(socket.timeout):
+            sock.recv(1)
+        sock.settimeout(10)
+        data = bytes(range(256)) * 16384
+        errors = []
+        def send():
+            try:
+                remaining = memoryview(data)
+                while remaining:
+                    remaining = remaining[sock.send(remaining):]
+            except Exception as error:
+                errors.append(error)
+        writer = threading.Thread(target=send)
+        writer.start()
+        received = bytearray()
+        while len(received) < len(data):
+            chunk = sock.recv(65536)
+            self.assertTrue(chunk)
+            received.extend(chunk)
+        writer.join(5)
+        self.assertFalse(writer.is_alive())
+        self.assertEqual(errors, [])
+        self.assertEqual(received, data)
+        server.stdin.write(b'close\n'); server.stdin.flush()
+        self.assertEqual(sock.recv(1), b'')
+        self.assert_helper_gone(sock)
+
+    def test_backpressure_is_bounded_and_close_stops_the_windows_peer(self):
+        _, port = self.server('sink')
+        sock = self.transport(port)
+        sock.settimeout(0.2)
+        block = b'x' * 65536
+        sent = 0
+        with self.assertRaises(socket.timeout):
+            while sent < 64 * 1024 * 1024:
+                sent += sock.send(block)
+        self.assertGreater(sent, 0)
+        self.assertLess(sent, 64 * 1024 * 1024)
+        self.assert_helper_gone(sock)
+
+    def test_cancel_during_connect_does_not_leave_a_windows_process(self):
+        sock = WindowsNetworkSocket()
+        self.addCleanup(sock.close)
+        errors = []
+        def connect():
+            try:
+                sock.connect(('192.0.2.1', 22), 15)
+            except OSError as error:
+                errors.append(error)
+        worker = threading.Thread(target=connect)
+        worker.start()
+        deadline = time.monotonic() + 10
+        while sock.helper_pid is None and worker.is_alive() and time.monotonic() < deadline:
+            time.sleep(0.05)
+        self.assertIsNotNone(sock.helper_pid)
+        self.assert_helper_gone(sock)
+        worker.join(3)
+        self.assertFalse(worker.is_alive())
+        self.assertTrue(errors)
+
+    def test_parent_crash_closes_an_established_windows_connection(self):
+        _, port = self.server()
+        code = '''import os, sys
+from terminal_backends.windows_network import WindowsNetworkSocket
+s = WindowsNetworkSocket(); s.connect(('127.0.0.1', int(sys.argv[1])), 15)
+print(s.helper_pid, flush=True)
+os._exit(0)
+'''
+        worker = subprocess.Popen([sys.executable, '-c', code, str(port)], stdout=subprocess.PIPE)
+        pid = int(worker.stdout.readline())
+        worker.wait(timeout=5); worker.stdout.close()
+        result = subprocess.run([windows_network_executable(), '-NoProfile', '-NonInteractive', '-Command',
+                                 f'if (Get-Process -Id {pid} -ErrorAction SilentlyContinue) {{ exit 1 }}'],
+                                stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL, timeout=10)
+        self.assertEqual(result.returncode, 0)
+
+
+if __name__ == '__main__':
+    unittest.main()

From 2117c8d36a8a3c88e01df071495da158b2c05670 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Wed, 23 Sep 2026 23:14:30 +0800
Subject: [PATCH 41/43] Collapse Windows SSH networking under Advanced

---
 desktop/README.md                         |  5 ++--
 docs/ui_copy_review.tsv                   |  5 ++--
 static/js/standterm-messages.js           | 10 +++----
 templates/index.html                      | 28 +++++++++++--------
 tests/ssh_network_origin_browser_smoke.py | 34 +++++++++++++++++++----
 5 files changed, 54 insertions(+), 28 deletions(-)

diff --git a/desktop/README.md b/desktop/README.md
index 8369b5c..c9da219 100644
--- a/desktop/README.md
+++ b/desktop/README.md
@@ -29,8 +29,9 @@ It uses the cached Desktop language and closes when the main window is ready or
 startup fails. Launching the same mode again focuses startup or its setup window
 while Core is still starting.
 
-WSL Core offers **SSH network source (this connection)** when WSL interoperability
-and `powershell.exe` on its PATH are available. **Windows (preview)** opens the
+WSL Core offers **Advanced → Use Windows networking (preview)** when WSL interoperability
+and `powershell.exe` on its PATH are available. Advanced is collapsed by default;
+leaving the checkbox unchecked uses Core networking. Enabling it opens the
 first SSH hop through a temporary Windows PowerShell TCP helper. It needs Windows
 PowerShell policy to allow that helper and Windows DNS/routing/firewall to permit
 the target connection. No Windows SSH server, Python, administrator access, new
diff --git a/docs/ui_copy_review.tsv b/docs/ui_copy_review.tsv
index ba4be8a..cdb244d 100644
--- a/docs/ui_copy_review.tsv
+++ b/docs/ui_copy_review.tsv
@@ -798,7 +798,6 @@ browser.files.copy_unknown_detail	{detail} Inspect the destination before retryi
 browser.chrome.key_unavailable	The browser SSH key is unavailable.	The browser SSH key is unavailable.	無法使用瀏覽器 SSH 金鑰。	Browser-owned display fallback only.		Preserve raw labels and identifiers.	translation-reviewed	templates/index.html
 browser.chrome.terminal	Terminal	Terminal	終端	Browser-owned display fallback only.		Preserve raw labels and identifiers.	translation-reviewed	templates/index.html
 browser.chrome.file_transfer	File transfer	File transfer	檔案傳輸	Browser-owned display fallback only.		Preserve raw labels and identifiers.	translation-reviewed	templates/index.html
-connection.network_origin	SSH network source (this connection)	SSH network source (this connection)	SSH 網路來源（本次連線）	WSL SSH first-hop network source preview.		Display only. Keep core/windows payload values literal; preserve Core, WSL, Windows and localhost.	translation-reviewed	templates/index.html
-connection.network_core	Core (WSL)	Core (WSL)	Core（WSL）	WSL SSH first-hop network source preview.		Display only. Keep core/windows payload values literal; preserve Core, WSL, Windows and localhost.	translation-reviewed	templates/index.html
-connection.network_windows	Windows (preview)	Windows (preview)	Windows（試用）	WSL SSH first-hop network source preview.		Display only. Keep core/windows payload values literal; preserve Core, WSL, Windows and localhost.	translation-reviewed	templates/index.html
 connection.network_hint	First hop only; not saved in profiles. With Windows selected, localhost means the Windows host.	First hop only; not saved in profiles. With Windows selected, localhost means the Windows host.	僅影響第一站，不隨設定檔儲存。選 Windows 時，localhost 指 Windows 本機。	WSL SSH first-hop network source preview.		Display only. Keep core/windows payload values literal; preserve Core, WSL, Windows and localhost.	translation-reviewed	templates/index.html
+connection.advanced	Advanced	Advanced	進階	Collapsed SSH network settings for this connection.		Display only. Preserve the typed core/windows payload values.	translation-reviewed	templates/index.html
+connection.use_windows_network	Use Windows networking (preview)	Use Windows networking (preview)	使用 Windows 網路（試用）	Collapsed SSH network settings for this connection.		Display only. Preserve the typed core/windows payload values.	translation-reviewed	templates/index.html
diff --git a/static/js/standterm-messages.js b/static/js/standterm-messages.js
index 1a8fddc..dc73e11 100644
--- a/static/js/standterm-messages.js
+++ b/static/js/standterm-messages.js
@@ -432,6 +432,7 @@
         "common.or": "or",
         "common.refresh": "Refresh Status",
         "common.yes": "Yes",
+        "connection.advanced": "Advanced",
         "connection.baud": "Baud rate",
         "connection.cancelled": "Connection cancelled.",
         "connection.choose_route": "Choose a saved route...",
@@ -462,10 +463,7 @@
         "connection.local_shell": "Local Shell",
         "connection.local_shell_hint": "Runs on the StandTerm host.",
         "connection.manual_port": "Manual port\u2026",
-        "connection.network_core": "Core (WSL)",
         "connection.network_hint": "First hop only; not saved in profiles. With Windows selected, localhost means the Windows host.",
-        "connection.network_origin": "SSH network source (this connection)",
-        "connection.network_windows": "Windows (preview)",
         "connection.no_routes": "No saved routes",
         "connection.none_selected": "None selected",
         "connection.password": "Password (optional)",
@@ -488,6 +486,7 @@
         "connection.trust_key": "Trust key",
         "connection.uart_example": "COM3 or /dev/ttyUSB0",
         "connection.uart_port": "UART port",
+        "connection.use_windows_network": "Use Windows networking (preview)",
         "connection.username": "Username",
         "connection.verify_authenticate": "Verifying host and authenticating",
         "connection.will_save": "Will save on Connect.",
@@ -1236,6 +1235,7 @@
         "common.or": "\u6216",
         "common.refresh": "\u66f4\u65b0\u72c0\u614b",
         "common.yes": "\u662f",
+        "connection.advanced": "\u9032\u968e",
         "connection.baud": "\u9b91\u7387",
         "connection.cancelled": "\u5df2\u53d6\u6d88\u9023\u7dda\u3002",
         "connection.choose_route": "\u9078\u64c7\u5df2\u5132\u5b58\u8def\u5f91\u2026",
@@ -1266,10 +1266,7 @@
         "connection.local_shell": "\u672c\u6a5f Shell",
         "connection.local_shell_hint": "\u5728 StandTerm \u4e3b\u6a5f\u4e0a\u57f7\u884c\u3002",
         "connection.manual_port": "\u624b\u52d5\u8f38\u5165\u5e8f\u5217\u57e0\u2026",
-        "connection.network_core": "Core\uff08WSL\uff09",
         "connection.network_hint": "\u50c5\u5f71\u97ff\u7b2c\u4e00\u7ad9\uff0c\u4e0d\u96a8\u8a2d\u5b9a\u6a94\u5132\u5b58\u3002\u9078 Windows \u6642\uff0clocalhost \u6307 Windows \u672c\u6a5f\u3002",
-        "connection.network_origin": "SSH \u7db2\u8def\u4f86\u6e90\uff08\u672c\u6b21\u9023\u7dda\uff09",
-        "connection.network_windows": "Windows\uff08\u8a66\u7528\uff09",
         "connection.no_routes": "\u6c92\u6709\u5df2\u5132\u5b58\u8def\u5f91",
         "connection.none_selected": "\u5c1a\u672a\u9078\u64c7",
         "connection.password": "\u5bc6\u78bc\uff08\u9078\u586b\uff09",
@@ -1292,6 +1289,7 @@
         "connection.trust_key": "\u4fe1\u4efb\u91d1\u9470",
         "connection.uart_example": "COM3 \u6216 /dev/ttyUSB0",
         "connection.uart_port": "\u5e8f\u5217\u57e0",
+        "connection.use_windows_network": "\u4f7f\u7528 Windows \u7db2\u8def\uff08\u8a66\u7528\uff09",
         "connection.username": "\u4f7f\u7528\u8005\u540d\u7a31",
         "connection.verify_authenticate": "\u6b63\u5728\u9a57\u8b49\u4e3b\u6a5f\u8207\u8eab\u5206",
         "connection.will_save": "\u5c07\u65bc\u6309\u4e0b\u9023\u7dda\u6642\u5132\u5b58\u3002",
diff --git a/templates/index.html b/templates/index.html
index 3b5394d..db02817 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -553,6 +553,11 @@
         .ssh-save-options label { display: flex; align-items: center; gap: 8px; cursor: pointer; user-select: none; }
         .ssh-save-options label[hidden] { display: none; }
         #controls .ssh-save-options input { display: inline-block; width: auto; margin: 0; padding: 0; }
+        #ssh-network-origin-field { margin: 10px 0; color: #bbb; font-size: 12px; }
+        #ssh-network-origin-field summary { cursor: pointer; }
+        #ssh-network-origin-field label { display: flex; align-items: center; gap: 8px; margin-top: 10px; cursor: pointer; }
+        #controls #ssh-network-origin { width: auto; margin: 0; padding: 0; }
+        #ssh-network-origin-hint { margin: 8px 0 0; line-height: 1.5; }
         .ssh-session-picker { position: relative; margin-bottom: 15px; }
         #controls #ssh-session-picker-toggle { width: 100%; padding: 9px 10px; background: #333; border: 1px solid #555; color: #ddd; border-radius: 4px; font-weight: normal; text-align: left; }
         #controls #ssh-session-picker-toggle::after { content: "\25BE"; float: right; color: #888; }
@@ -1378,14 +1383,6 @@ <h2>StandTerm</h2>
                 <label data-mode="uart"><input type="radio" name="connection_type" value="uart">UART</label>
             </div>
             <div id="ssh-fields">
-                <div id="ssh-network-origin-field" hidden>
-                    <label for="ssh-network-origin" data-i18n="connection.network_origin">SSH network source (this connection)</label>
-                    <select id="ssh-network-origin" aria-describedby="ssh-network-origin-hint">
-                        <option value="core" data-i18n="connection.network_core">Core (WSL)</option>
-                        <option value="windows" data-i18n="connection.network_windows">Windows (preview)</option>
-                    </select>
-                    <p id="ssh-network-origin-hint" data-i18n="connection.network_hint">First hop only; not saved in profiles. With Windows selected, localhost means the Windows host.</p>
-                </div>
                 <section class="ssh-preparation-pane" id="ssh-direct-pane">
                     <button type="button" id="ssh-direct-heading" class="ssh-preparation-heading" aria-expanded="true" aria-controls="ssh-direct-body"><span class="ssh-pane-selection">●</span><span data-i18n="connection.direct">Direct connect</span><small id="ssh-direct-summary"></small></button>
                     <div class="ssh-preparation-body" id="ssh-direct-body">
@@ -1418,6 +1415,11 @@ <h2>StandTerm</h2>
                         <button type="button" id="ssh-edit-route" data-i18n="connection.edit_route">Edit route...</button>
                     </div>
                 </section>
+                <details id="ssh-network-origin-field" hidden>
+                    <summary data-i18n="connection.advanced">Advanced</summary>
+                    <label for="ssh-network-origin"><input type="checkbox" id="ssh-network-origin" aria-describedby="ssh-network-origin-hint"><span data-i18n="connection.use_windows_network">Use Windows networking (preview)</span></label>
+                    <p id="ssh-network-origin-hint" data-i18n="connection.network_hint">First hop only; not saved in profiles. With Windows selected, localhost means the Windows host.</p>
+                </details>
                 <div class="ssh-save-options">
                     <label><input type="checkbox" id="ssh-save-history" checked><span data-i18n="connection.save_history">Save history</span></label>
                     <label><input type="checkbox" id="ssh-save-session"><span data-i18n="connection.save_profile">Save connection profile</span></label>
@@ -5795,7 +5797,10 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     .some(option => option.value === 'windows');
                 document.getElementById('ssh-network-origin-field').hidden = !windowsNetworkAvailable;
                 sshNetworkOrigin.disabled = !windowsNetworkAvailable;
-                if (!windowsNetworkAvailable) sshNetworkOrigin.value = 'core';
+                if (!windowsNetworkAvailable) {
+                    sshNetworkOrigin.checked = false;
+                    document.getElementById('ssh-network-origin-field').open = false;
+                }
                 localShellFields.style.display = (
                     normalized === 'local_shell' && localShellKindSelect.options.length > 0
                 ) ? 'block' : 'none';
@@ -8306,7 +8311,7 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
                     terminal_id: activeTerminalId
                 };
                 if (connectionType === 'ssh') {
-                    if (!sshNetworkOrigin.disabled && sshNetworkOrigin.value === 'windows') formData.network_origin = 'windows';
+                    if (!sshNetworkOrigin.disabled && sshNetworkOrigin.checked) formData.network_origin = 'windows';
                     if (sshPreparationMode === 'route') {
                         const entry = currentSshRouteEntry();
                         if (!entry) throw new Error(t('browser.chrome.choose_route'));
@@ -8343,7 +8348,8 @@ <h3 data-i18n="browser.recovery.title">Restore StandTerm access</h3>
             }
 
             function resetSshFormFields() {
-                sshNetworkOrigin.value = 'core';
+                sshNetworkOrigin.checked = false;
+                document.getElementById('ssh-network-origin-field').open = false;
                 Object.entries(CONNECTION_FIELD_IDS.ssh).forEach(([fieldName, id]) => {
                     clearConnectionFieldEdited('ssh', fieldName);
                     const input = document.getElementById(id);
diff --git a/tests/ssh_network_origin_browser_smoke.py b/tests/ssh_network_origin_browser_smoke.py
index 4ba519d..e8cb59d 100644
--- a/tests/ssh_network_origin_browser_smoke.py
+++ b/tests/ssh_network_origin_browser_smoke.py
@@ -27,13 +27,23 @@ def test_selection_and_route_scope(browser, url, locale):
         routes.show_ssh(page)
         set_available(page, True)
         assert page.locator('#ssh-network-origin-field').is_visible()
-        assert page.input_value('#ssh-network-origin') == 'core'
+        assert page.locator('#ssh-network-origin').is_hidden()
+        assert not page.is_checked('#ssh-network-origin')
+        assert page.locator('#ssh-network-origin-field summary').inner_text() == (
+            '進階' if locale == 'zh-TW' else 'Advanced')
+        collapsed_height = page.locator('#controls').bounding_box()['height']
+        page.locator('#ssh-network-origin-field summary').click()
+        assert page.locator('#ssh-network-origin').is_visible()
+        assert page.locator('#controls').bounding_box()['height'] > collapsed_height
         assert page.locator('label[for="ssh-network-origin"]').inner_text() == (
-            'SSH 網路來源（本次連線）' if locale == 'zh-TW' else 'SSH network source (this connection)')
+            '使用 Windows 網路（試用）' if locale == 'zh-TW' else 'Use Windows networking (preview)')
         page.fill('#host', 'target.test'); page.fill('#username', 'operator')
         direct = page.evaluate('() => window.terminalTest.prepareSshConnectionForTest()')
         assert 'network_origin' not in direct
-        page.select_option('#ssh-network-origin', 'windows')
+        page.check('#ssh-network-origin')
+        page.locator('#ssh-network-origin-field summary').click()
+        assert page.locator('#ssh-network-origin').is_hidden()
+        assert page.is_checked('#ssh-network-origin')
         direct = page.evaluate('() => window.terminalTest.prepareSshConnectionForTest()')
         assert direct['network_origin'] == 'windows'
         page.evaluate('''() => window.terminalTest.setSshSessionState({version:2, revision:0,
@@ -53,7 +63,14 @@ def test_selection_and_route_scope(browser, url, locale):
         set_available(page, False)
         assert page.locator('#ssh-network-origin-field').is_hidden()
         assert page.locator('#ssh-network-origin').is_disabled()
-        assert page.input_value('#ssh-network-origin') == 'core'
+        assert not page.is_checked('#ssh-network-origin')
+        route = page.evaluate('() => window.terminalTest.prepareSshConnectionForTest()')
+        assert 'network_origin' not in route
+        set_available(page, True)
+        assert page.locator('#ssh-network-origin').is_hidden()
+        page.locator('#ssh-network-origin-field summary').click()
+        page.check('#ssh-network-origin')
+        page.uncheck('#ssh-network-origin')
         route = page.evaluate('() => window.terminalTest.prepareSshConnectionForTest()')
         assert 'network_origin' not in route
     finally:
@@ -66,7 +83,8 @@ def test_trust_retry_keeps_the_selected_network(browser, url):
         routes.show_ssh(page)
         set_available(page, True)
         page.fill('#host', 'target.test'); page.fill('#username', 'operator')
-        page.select_option('#ssh-network-origin', 'windows')
+        page.locator('#ssh-network-origin-field summary').click()
+        page.check('#ssh-network-origin')
         page.evaluate('''() => {
             window.terminalTest.captureSshStartsForTest();
             window.terminalTest.clearEmitted();
@@ -94,7 +112,11 @@ def test_trust_retry_keeps_the_selected_network(browser, url):
         page.click('#actionYesBtn')
         # The synthetic retry hides the form; still exercise its change handler
         # before delivering the deliberately delayed trust result.
-        page.select_option('#ssh-network-origin', 'core', force=True)
+        page.evaluate('''() => {
+            const input = document.getElementById('ssh-network-origin');
+            input.checked = false;
+            input.dispatchEvent(new Event('change', {bubbles: true}));
+        }''')
         page.evaluate('data => window.terminalTest.handleSshOutput(data)',
                       {**response, 'attempt_id': starts[1]['attempt_id'], 'action_id': 'trust-second'})
         page.wait_for_timeout(200)

From 0c8e7f44409bf0d6a32d8c24efce5cba407742df Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Wed, 23 Sep 2026 23:41:17 +0800
Subject: [PATCH 42/43] Release Desktop 0.5.3 with Core 2.14.0

---
 README.md                    |  5 +++++
 core_version.py              |  2 +-
 desktop/README.md            | 12 +++++++++---
 desktop/package-lock.json    |  4 ++--
 desktop/package.json         |  2 +-
 tests/agent_backend_smoke.py |  5 ++++-
 6 files changed, 22 insertions(+), 8 deletions(-)

diff --git a/README.md b/README.md
index 745a241..3ced0c5 100644
--- a/README.md
+++ b/README.md
@@ -9,6 +9,11 @@ to the StandTerm server process across page reloads.
 [Download and install StandTerm Desktop](#desktop-downloads-evaluation), or use
 the [browser-based Core quick start](#quick-start).
 
+The current source is **Core 2.14.0**, paired with Desktop 0.5.3. It adds English
+and Traditional Chinese interface text, simplified Agent connection controls,
+and optional Windows networking for SSH from WSL. The published downloads below
+retain their original versions until new packages are uploaded.
+
 **Core 2.13.0** is a [source release](https://github.com/askac/standterm/releases/tag/v2.13.0).
 It adds SSH routes with up to three jump hosts, ordered node editing and per-site
 login cards. Direct connections and route nodes share browser-key controls;
diff --git a/core_version.py b/core_version.py
index 317acc8..8eb4d62 100644
--- a/core_version.py
+++ b/core_version.py
@@ -1,3 +1,3 @@
 """Core release identity, shared by source and packaged launchers."""
 
-CORE_VERSION = '2.13.1-dev'
+CORE_VERSION = '2.14.0'
diff --git a/desktop/README.md b/desktop/README.md
index c9da219..5b451b0 100644
--- a/desktop/README.md
+++ b/desktop/README.md
@@ -6,6 +6,10 @@ source-run workflow, an unsigned Windows x64 evaluation installer and a native
 Apple Silicon macOS evaluation app/DMG. It is not
 a production release or a replacement for `run.sh` / `run.bat`.
 
+The 0.5.3 evaluation bundles Core 2.14.0, adds startup feedback and window
+state restoration, and includes the optional Windows SSH network source for WSL
+under the collapsed Advanced connection settings.
+
 Desktop copy and localization are planned in the
 [review plan](../docs/desktop_ui_review_plan.md), with a separate
 [translation review table](../docs/desktop_ui_copy_review.tsv).
@@ -100,7 +104,7 @@ The published [Windows **0.5.1 / Core 2.13.0-dev** evaluation](https://github.co
 includes ordered SSH jump routes, per-site login cards, shared Direct/node key
 controls and opt-in
 profile/route saving on Connect. It retains its original development identity.
-The current source declares Core **2.13.0**; matching installers require a fresh
+The current source declares Core **2.14.0**; matching installers require a fresh
 build and validation. A new Mac installer remains separate; the 0.5.0 candidates
 remain local.
 
@@ -156,13 +160,15 @@ Build on an Apple Silicon Mac with Node 22.12+ and the checkout's macOS venv:
 ```sh
 cd desktop
 npm ci
-npm run stage:mac -- --core-ref v2.13.0
+npm run stage:mac -- --core-ref HEAD
 # Change to the absolute stage directory printed above, then:
 npm ci
 npm run make:mac
 ```
 
-Staging shares the tracked-file allowlist used by Windows, excludes internal
+Use a clean checkout of the intended release commit: `HEAD` selects that Core
+revision, while the Desktop shell comes from the working tree. Staging shares
+the tracked-file allowlist used by Windows, excludes internal
 documents and Git state, and generates the native icon with macOS `sips` and
 `iconutil`. macOS outputs are in the stage's `out.noindex/` directory so local
 development app copies stay out of Spotlight results. The current build uses
diff --git a/desktop/package-lock.json b/desktop/package-lock.json
index eae2c3e..318d752 100644
--- a/desktop/package-lock.json
+++ b/desktop/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "standterm-desktop-evaluation",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "standterm-desktop-evaluation",
-      "version": "0.5.2",
+      "version": "0.5.3",
       "license": "MIT",
       "devDependencies": {
         "electron": "44.2.0",
diff --git a/desktop/package.json b/desktop/package.json
index a0c90cf..7c2378b 100644
--- a/desktop/package.json
+++ b/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "standterm-desktop-evaluation",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "private": true,
   "productName": "StandTerm Desktop",
   "author": "ASKA C.",
diff --git a/tests/agent_backend_smoke.py b/tests/agent_backend_smoke.py
index 491bc8b..882a91d 100644
--- a/tests/agent_backend_smoke.py
+++ b/tests/agent_backend_smoke.py
@@ -4538,6 +4538,7 @@ def test_browser_ssh_sign_request_store_uses_monotonic_deadlines():
 def make_sftp_test_bridge(session_token, terminal_id=standterm.TERMINAL_ID_MAIN):
     bridge = object.__new__(standterm.SSHBridge)
     standterm.TerminalBridge.__init__(bridge, session_token, terminal_id)
+    bridge.network_origin = 'core'
     bridge._sftp_endpoint = {
         'user': 'tester',
         'host': 'host.example',
@@ -6858,7 +6859,9 @@ def test_backend_start_form_schema_is_declared_and_typed():
                 standterm.SETTING_UART_DEFAULT_BAUD_RATE: 230400,
             },
         )
-        options = standterm.TERMINAL_BACKEND_REGISTRY.build_policy_options(context=context)
+        # Keep the base schema deterministic; optional Windows fields have dedicated coverage.
+        with patch('terminal_backends.ssh.windows_network_executable', return_value=None):
+            options = standterm.TERMINAL_BACKEND_REGISTRY.build_policy_options(context=context)
     finally:
         standterm.is_wsl = original_is_wsl
 

From 5939a1f2de511694707a198ca07a455b1712beb7 Mon Sep 17 00:00:00 2001
From: "ASKA C." <aska.coretronic@gmail.com>
Date: Thu, 24 Sep 2026 09:44:52 +0800
Subject: [PATCH 43/43] Update downloads for Core 2.14.0 and Desktop 0.5.3

---
 README.md | 36 +++++++++++++++++++-----------------
 1 file changed, 19 insertions(+), 17 deletions(-)

diff --git a/README.md b/README.md
index 3ced0c5..7ed0985 100644
--- a/README.md
+++ b/README.md
@@ -9,10 +9,11 @@ to the StandTerm server process across page reloads.
 [Download and install StandTerm Desktop](#desktop-downloads-evaluation), or use
 the [browser-based Core quick start](#quick-start).
 
-The current source is **Core 2.14.0**, paired with Desktop 0.5.3. It adds English
+The current source is **[Core 2.14.0](https://github.com/askac/standterm/releases/tag/v2.14.0)**,
+paired with Desktop 0.5.3. It adds English
 and Traditional Chinese interface text, simplified Agent connection controls,
-and optional Windows networking for SSH from WSL. The published downloads below
-retain their original versions until new packages are uploaded.
+and optional Windows networking for SSH from WSL. Both Desktop packages below
+contain Core 2.14.0 and use the same reviewed source.
 
 **Core 2.13.0** is a [source release](https://github.com/askac/standterm/releases/tag/v2.13.0).
 It adds SSH routes with up to three jump hosts, ordered node editing and per-site
@@ -20,35 +21,36 @@ login cards. Direct connections and route nodes share browser-key controls;
 new keys stay temporary unless saving is selected when connecting. Existing
 SSH Agent Tunnel, current-tab Agent Info and host fingerprint controls remain available.
 IME input-line anchoring remains an [experimental PoC](docs/ime_anchor_poc.md).
-The Windows Desktop 0.5.1 evaluation below contains Core 2.13.0-dev with these
-features. The macOS Desktop 0.4.3 evaluation predates them.
+These features are included in both current Desktop packages.
 
 ![StandTerm Desktop with terminal rendering tests, local and SSH tabs, and a floating PowerShell terminal](standterm_desktop.png)
 
-*Desktop preview. The controls shown are available in the Windows 0.5.1
-evaluation; the macOS 0.4.3 evaluation predates them.*
+*Desktop preview from the Windows 0.5.1 evaluation; current interface text and
+controls may differ.*
 
 ## Desktop Downloads (Evaluation)
 
-[Windows Desktop 0.5.1 / Core 2.13.0-dev](https://github.com/askac/standterm/releases/tag/desktop-v0.5.1-2.13.0-dev)
-and [macOS Desktop 0.4.3](https://github.com/askac/standterm/releases/tag/desktop-v0.4.3)
-are evaluation pre-releases. The Windows package retains its tested development
-Core identity; it was built before the formal Core 2.13.0 source release.
+[Desktop 0.5.3 / Core 2.14.0](https://github.com/askac/standterm/releases/tag/desktop-v0.5.3-2.14.0)
+is an evaluation pre-release for Windows x64 and macOS Apple Silicon.
+
+**Known issue:** repeated maximize, restore and reopen cycles can accumulate
+window position and size drift on macOS. A shared-code fix and Windows regression
+checks are pending; window-restoration acceptance is incomplete. The packages
+retain the tested source rather than including an unverified fix.
 
 | Platform | Download | Required before installation |
 | --- | --- | --- |
-| Windows x64, including Windows + WSL | [Desktop 0.5.1 / Core 2.13.0-dev (.exe)](https://github.com/askac/standterm/releases/download/desktop-v0.5.1-2.13.0-dev/StandTerm-Desktop-0.5.1-2.13.0-dev-win32-x64-Setup.exe) | Python 3.10+ with venv/ensurepip in each selected environment; WSL mode also needs an existing WSL distribution. |
-| macOS Apple Silicon | [macOS installer (.dmg)](https://github.com/askac/standterm/releases/download/desktop-v0.4.3/StandTerm-Desktop-0.4.3-mac-arm64.dmg) | Native arm64 Python 3.10+ with venv/ensurepip. Intel/Rosetta is not qualified. |
+| Windows x64, including Windows + WSL | [Desktop 0.5.3 / Core 2.14.0 (.exe)](https://github.com/askac/standterm/releases/download/desktop-v0.5.3-2.14.0/StandTerm-Desktop-0.5.3-2.14.0-win32-x64-Setup.exe) | Python 3.10+ with venv/ensurepip in each selected environment; WSL mode also needs an existing WSL distribution. |
+| macOS Apple Silicon | [Desktop 0.5.3 / Core 2.14.0 (.dmg)](https://github.com/askac/standterm/releases/download/desktop-v0.5.3-2.14.0/StandTerm-Desktop-0.5.3-2.14.0-mac-arm64.dmg) | Native arm64 Python 3.10+ with venv/ensurepip. Intel/Rosetta is not qualified. |
 
 Packages include Electron and Core. **Git, Node.js and npm are not required**;
 Python and its virtual environment are not bundled.
-Windows Desktop 0.5.1 includes an optional advanced Git Core source, which
+Desktop includes an optional advanced Git Core source, which
 requires Git in the selected backend environment, plus bundled Core recovery
-without Git. Those controls are not included in the macOS 0.4.3 installer.
+without Git.
 
 1. Download the package for your platform and verify its checksum:
-   [Windows SHA256SUMS](https://github.com/askac/standterm/releases/download/desktop-v0.5.1-2.13.0-dev/SHA256SUMS)
-   or [macOS SHA256SUMS](https://github.com/askac/standterm/releases/download/desktop-v0.4.3/SHA256SUMS).
+   [SHA256SUMS for both platforms](https://github.com/askac/standterm/releases/download/desktop-v0.5.3-2.14.0/SHA256SUMS).
 2. On Windows, run the installer and choose **Windows only**, **Windows + WSL**
    or **WSL only**. Native Windows mode needs 64-bit Windows Python; installing
    Windows Python does not satisfy WSL mode. On macOS, copy the app to a