From b83038fde0ae86b040caa186e49dde2843d7d140 Mon Sep 17 00:00:00 2001
From: BIackFIame <77388790+BIackFIame@users.noreply.github.com>
Date: Sun, 25 Oct 2026 07:23:20 +0000
Subject: [PATCH 1/4] fix(ui): say what is used and what is left in HOME limit
 rows
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The HOME limit row showed the used share as a bare "9%" with a bar and a
reset countdown; "used" was only in the hover/screen-reader text. Codex's own
status line shows "% left", so 9 % used read as 9 % left. The row now says
"9% used · 91% left" (ru «9% использовано · осталось 91%»), and the
hover/screen-reader line "9% used · 91% left" («использовано 9% · осталось
91%»). Usage history's latest observation says the same instead of a bare
percent.

The normalizers were right: Codex app-server usedPercent and Claude
utilization are the used share; a test pins both with fixture payloads.
---
 src/renderer/src/features/home/HomeZone.tsx   |  15 ++-
 .../src/features/usage/UsageHistoryView.tsx   |   5 +-
 src/renderer/src/features/usage/usageText.ts  |  16 ++-
 src/renderer/src/lib/i18n.ts                  |   8 +-
 src/renderer/src/styles/app.css               |   4 +
 tests/quota-used-left-labels.test.mjs         | 100 ++++++++++++++++++
 6 files changed, 137 insertions(+), 11 deletions(-)
 create mode 100644 tests/quota-used-left-labels.test.mjs

diff --git a/src/renderer/src/features/home/HomeZone.tsx b/src/renderer/src/features/home/HomeZone.tsx
index 4792d6cb8..1f6e03f4e 100644
--- a/src/renderer/src/features/home/HomeZone.tsx
+++ b/src/renderer/src/features/home/HomeZone.tsx
@@ -537,8 +537,11 @@ function LimitRow({ row, locale, now, onOpenSettings }: { row: HomeLimitRow; loc
       {row.window ? (
         <span className="limit-row__metric">
           <span className="limit-row__summary">
-            <strong>{formatPercent(row.window.usedPercent, locale)}</strong>
-            <span>{formatResetCountdown(row.window.resetsAt, now, locale)}</span>
+            <span className="limit-row__share">
+              <strong>{formatPercent(row.window.usedPercent, locale)}</strong>
+              <span>{t(locale, "limitUsed")} · {limitLeft(row.window.usedPercent, locale)}</span>
+            </span>
+            <span className="limit-row__countdown">{formatResetCountdown(row.window.resetsAt, now, locale)}</span>
           </span>
           <span className="limit-row__track" aria-hidden="true">
             <i className="limit-row__fill" style={{ width: `${row.window.usedPercent}%` }} />
@@ -561,7 +564,8 @@ function limitMeta(row: HomeLimitRow, locale: LocaleId): string {
 
   const details = [
     formatLimitDuration(row.window.windowMinutes, locale),
-    `${formatPercent(row.window.usedPercent, locale)} ${t(locale, "limitUsed")}`,
+    t(locale, "limitUsedPercent").replace("{percent}", formatPercent(row.window.usedPercent, locale)),
+    limitLeft(row.window.usedPercent, locale),
     formatReset(row.window.resetsAt, locale)
   ];
   if (row.state === "stale") {
@@ -581,6 +585,11 @@ function formatReset(resetsAt: number, locale: LocaleId): string {
   return `${t(locale, "limitResetsAt")} ${formatted}`;
 }
 
+/** What is left of a window whose used share is `usedPercent` (both are always shown, never a bare percent). */
+function limitLeft(usedPercent: number, locale: LocaleId): string {
+  return t(locale, "limitLeftPercent").replace("{percent}", formatPercent(Math.max(0, 100 - usedPercent), locale));
+}
+
 function formatPercent(value: number, locale: LocaleId): string {
   return new Intl.NumberFormat(locale === "ru" ? "ru-RU" : "en-GB", {
     maximumFractionDigits: 1
diff --git a/src/renderer/src/features/usage/UsageHistoryView.tsx b/src/renderer/src/features/usage/UsageHistoryView.tsx
index a5e06e05d..83847feba 100644
--- a/src/renderer/src/features/usage/UsageHistoryView.tsx
+++ b/src/renderer/src/features/usage/UsageHistoryView.tsx
@@ -23,6 +23,7 @@ import {
   formatTimeZone,
   formatTokens,
   providerName,
+  quotaShareText,
   shortScope,
   usageText
 } from "./usageText.ts";
@@ -264,7 +265,7 @@ function QuotaWindow({ quota, format }: { quota: WindowReport; format: Format })
       {quota.accounts.length === 0 && quota.latest !== null && (
         <p className="usage-history__note">
           {fill(text.noObservationsInPeriod, {
-            percent: format.points(quota.latest.percent),
+            share: quotaShareText(format.locale, quota.latest.percent),
             time: format.time(quota.latest.at),
             account: quota.latest.scope ? shortScope(quota.latest.scope) : text.accountUnknown
           })}
@@ -305,7 +306,7 @@ function AccountQuota({ account, format }: { account: AccountSeries; format: For
         </div>
         <div>
           <dt>{text.latest}</dt>
-          <dd>{account.latest ? fill(text.latestValue, { percent: format.points(account.latest.percent), time: format.time(account.latest.at) }) : "—"}</dd>
+          <dd>{account.latest ? fill(text.latestValue, { share: quotaShareText(format.locale, account.latest.percent), time: format.time(account.latest.at) }) : "—"}</dd>
         </div>
         <div>
           <dt>{text.reset}</dt>
diff --git a/src/renderer/src/features/usage/usageText.ts b/src/renderer/src/features/usage/usageText.ts
index 8b96bb9ed..1470a0380 100644
--- a/src/renderer/src/features/usage/usageText.ts
+++ b/src/renderer/src/features/usage/usageText.ts
@@ -45,14 +45,15 @@ const RU = {
   account: "Аккаунт (хеш)",
   accountUnknown: "аккаунт неизвестен",
   latest: "Последнее наблюдение",
-  latestValue: "{percent}% · {time}",
+  latestValue: "{share} · {time}",
+  quotaShare: "использовано {used}% · осталось {left}%",
   reset: "Сброс окна",
   resetUnknown: "неизвестен",
   resetsInPeriod: "Сбросов окна за период: {count}",
   resetPassed: "Сброс уже наступил после последнего наблюдения — текущее значение неизвестно.",
   windowStale: "Последнее наблюдение {age} назад — ряд устарел, новые изменения не измеряются.",
   windowNeverObserved: "Нет наблюдений до конца периода.",
-  noObservationsInPeriod: "За период наблюдений нет. Последнее до него: {percent}% · {time} · {account}.",
+  noObservationsInPeriod: "За период наблюдений нет. Последнее до него: {share} · {time} · {account}.",
   unknownProviderName: "Провайдер не определён",
   measured: "Измерено",
   measuredValue: "+{points} п. п.",
@@ -206,14 +207,15 @@ const EN: UsageText = {
   account: "Account (hash)",
   accountUnknown: "account unknown",
   latest: "Latest observation",
-  latestValue: "{percent}% · {time}",
+  latestValue: "{share} · {time}",
+  quotaShare: "{used}% used · {left}% left",
   reset: "Window reset",
   resetUnknown: "unknown",
   resetsInPeriod: "Window resets in period: {count}",
   resetPassed: "The reset has passed since the latest observation — the current value is unknown.",
   windowStale: "Latest observation {age} ago — the series is stale and new changes are not measured.",
   windowNeverObserved: "No observations up to the end of the period.",
-  noObservationsInPeriod: "No observations in this period. Latest before it: {percent}% · {time} · {account}.",
+  noObservationsInPeriod: "No observations in this period. Latest before it: {share} · {time} · {account}.",
   unknownProviderName: "Provider not identified",
   measured: "Measured",
   measuredValue: "+{points} pp",
@@ -329,6 +331,12 @@ export function fill(template: string, values: Record<string, string | number>):
   return template.replace(/\{(\w+)\}/g, (match, key: string) => (key in values ? String(values[key]) : match));
 }
 
+/** A quota observation (the share of the window already used) with what is left of it: never a bare percent. */
+export function quotaShareText(locale: LocaleId, usedPercent: number): string {
+  const used = Math.min(100, Math.max(0, usedPercent));
+  return fill(usageText(locale).quotaShare, { used: formatPoints(locale, used), left: formatPoints(locale, 100 - used) });
+}
+
 export function formatPoints(locale: LocaleId, value: number): string {
   return new Intl.NumberFormat(locale, { maximumFractionDigits: 2, minimumFractionDigits: 0 }).format(value);
 }
diff --git a/src/renderer/src/lib/i18n.ts b/src/renderer/src/lib/i18n.ts
index fb3b47fbd..8b9e55d5e 100644
--- a/src/renderer/src/lib/i18n.ts
+++ b/src/renderer/src/lib/i18n.ts
@@ -35,7 +35,9 @@ const ru = {
   clock: "Часы",
   launcher: "Панель запуска",
   modelLimits: "Лимиты моделей",
-  limitUsed: "Использовано",
+  limitUsed: "использовано",
+  limitUsedPercent: "использовано {percent}",
+  limitLeftPercent: "осталось {percent}",
   limitStale: "Устарело",
   limitLoading: "Получаем лимит…",
   limitUnavailable: "Данные недоступны",
@@ -1108,7 +1110,9 @@ const en: Record<keyof typeof ru, string> = {
   clock: "Clock",
   launcher: "Launcher",
   modelLimits: "Model limits",
-  limitUsed: "Used",
+  limitUsed: "used",
+  limitUsedPercent: "{percent} used",
+  limitLeftPercent: "{percent} left",
   limitStale: "Stale",
   limitLoading: "Checking limit…",
   limitUnavailable: "Data unavailable",
diff --git a/src/renderer/src/styles/app.css b/src/renderer/src/styles/app.css
index c8e049fdb..f7e69a2b0 100644
--- a/src/renderer/src/styles/app.css
+++ b/src/renderer/src/styles/app.css
@@ -219,6 +219,9 @@ button { border: 0; }
 .limit-row__summary { min-width: 0; display: flex; align-items: baseline; justify-content: space-between; gap: 10px; }
 .limit-row__summary strong { flex: 0 0 auto; overflow: hidden; color: var(--text); font: 900 27px/1 var(--font-mono); letter-spacing: -.045em; text-overflow: ellipsis; white-space: nowrap; }
 .limit-row__summary > span { min-width: 0; overflow: hidden; color: var(--text-muted-on-dark); font: 800 14px/1 var(--font-mono); text-overflow: ellipsis; white-space: nowrap; }
+.limit-row__summary > .limit-row__share { flex: 1 1 auto; display: flex; align-items: baseline; gap: 8px; }
+.limit-row__share > span { min-width: 0; overflow: hidden; font-size: 12px; font-weight: 700; text-overflow: ellipsis; white-space: nowrap; }
+.limit-row__summary > .limit-row__countdown { flex: 0 0 auto; }
 .limit-row__track { position: relative; width: 100%; height: 6px; overflow: hidden; border-radius: 999px; background: rgba(255,255,255,.12); }
 .limit-row__fill { position: absolute; inset: 0 auto 0 0; max-width: 100%; border-radius: inherit; background: rgba(248,247,241,.78); }
 .limit-row__empty { overflow: hidden; color: var(--text-muted-on-dark); font-size: 13px; font-weight: 800; text-overflow: ellipsis; white-space: nowrap; }
@@ -232,6 +235,7 @@ button { border: 0; }
   .limit-row__summary { gap: 7px; }
   .limit-row__summary strong { font-size: 22px; }
   .limit-row__summary > span { font-size: 11px; }
+  .limit-row__share > span { font-size: 10px; }
   .limit-row__track { height: 4px; }
   .limit-row__empty { font-size: 11px; }
 }
diff --git a/tests/quota-used-left-labels.test.mjs b/tests/quota-used-left-labels.test.mjs
new file mode 100644
index 000000000..acf4f57ac
--- /dev/null
+++ b/tests/quota-used-left-labels.test.mjs
@@ -0,0 +1,100 @@
+import assert from "node:assert/strict";
+import { readFile } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+import test from "node:test";
+import { build } from "esbuild";
+import { normalizeClaudeLimits, normalizeCodexLimits } from "../src/main/services/LimitsService.ts";
+import { selectHomeModel } from "../src/renderer/src/features/home/homeModel.ts";
+import { fill, quotaShareText, usageText } from "../src/renderer/src/features/usage/usageText.ts";
+
+// The real HOME row, rendered without Electron (same harness as codex-api-limits-ui.test.mjs).
+const bundle = await build({
+  stdin: {
+    contents: 'export { LimitRow } from "./src/renderer/src/features/home/HomeZone.tsx"; export { createElement } from "react"; export { renderToStaticMarkup } from "react-dom/server";',
+    resolveDir: fileURLToPath(new URL("..", import.meta.url)), loader: "ts"
+  },
+  plugins: [{ name: "test-limit-row", setup(build) {
+    build.onLoad({ filter: /[/\\]HomeZone\.tsx$/ }, async ({ path }) => ({
+      contents: await readFile(path, "utf8") + "\nexport { LimitRow };", loader: "tsx"
+    }));
+  } }],
+  bundle: true, platform: "node", format: "esm", jsx: "automatic", write: false,
+  loader: { ".svg": "dataurl", ".png": "dataurl", ".ico": "dataurl", ".css": "empty" }, logLevel: "silent",
+  banner: { js: `import { createRequire } from "node:module"; const require = createRequire(${JSON.stringify(import.meta.url)});` }
+});
+const { LimitRow, createElement, renderToStaticMarkup } = await import(
+  "data:text/javascript;base64," + Buffer.from(bundle.outputFiles[0].text).toString("base64")
+);
+
+const now = 1_786_100_000_000;
+const seconds = (ms) => Math.floor(ms / 1_000);
+
+// `account/rateLimits/read` of `codex app-server`: usedPercent is the share already spent.
+const codexPayload = {
+  rateLimits: {
+    limitId: "codex",
+    limitName: null,
+    primary: { usedPercent: 9, windowDurationMins: 300, resetsAt: seconds(now + 2 * 3_600_000) },
+    secondary: { usedPercent: 9, windowDurationMins: 10_080, resetsAt: seconds(now + 5 * 86_400_000) }
+  },
+  rateLimitsByLimitId: {}
+};
+// The Claude OAuth usage endpoint: utilization is the share already spent, too.
+const claudePayload = {
+  five_hour: { utilization: 9, resets_at: new Date(now + 2 * 3_600_000).toISOString() },
+  seven_day: { utilization: 9, resets_at: new Date(now + 5 * 86_400_000).toISOString() }
+};
+
+/** What a person reads: text nodes only, not title/aria-label attributes. */
+const visibleText = (html) => html.replace(/<[^>]*>/g, " ").replace(/&nbsp;/g, " ").replace(/\s+/g, " ").trim();
+const attribute = (html, name) => html.match(new RegExp(`${name}="([^"]*)"`))?.[1] ?? "";
+
+const render = (provider, windows, locale) => {
+  const snapshot = { fetchedAt: now, providers: [
+    { provider, source: provider === "codex" ? "codex-app-server" : "claude-usage-api", state: "available", checkedAt: now, windows }
+  ] };
+  const row = selectHomeModel([], snapshot, "ready", now, [provider]).limitRows[0];
+  return renderToStaticMarkup(createElement(LimitRow, { row, locale, now, onOpenSettings() {} }));
+};
+
+test("the Codex and Claude normalizers keep 9 % spent as usedPercent 9 (not 91)", () => {
+  assert.deepEqual(normalizeCodexLimits(codexPayload).map((window) => window.usedPercent), [9, 9]);
+  assert.deepEqual(normalizeClaudeLimits(claudePayload).map((window) => window.usedPercent), [9, 9]);
+});
+
+for (const [locale, used, left] of [
+  ["en", /9% used/, /91% left/],
+  ["ru", /использовано/, /осталось 91%/]
+]) {
+  for (const [provider, windows] of [["codex", normalizeCodexLimits(codexPayload)], ["claude", normalizeClaudeLimits(claudePayload)]]) {
+    test(`HOME ${provider} row in ${locale} says on screen that 9 % is used and 91 % is left`, () => {
+      const html = render(provider, windows, locale);
+      const text = visibleText(html);
+      assert.match(text, /9\s?%/u, text);
+      assert.match(text, used, `the visible row must say the share is used: ${text}`);
+      assert.match(text, left, `the visible row must say what is left: ${text}`);
+      assert.doesNotMatch(text, locale === "en" ? /\b9% left/ : /осталось 9%/u, text);
+      // The hover/screen-reader line says both too.
+      const label = attribute(html, "aria-label");
+      assert.match(label, locale === "en" ? /9% used/ : /использовано 9%/u, label);
+      assert.match(label, locale === "en" ? /91% left/ : /осталось 91%/u, label);
+      // The bar is the used share.
+      assert.match(html, /limit-row__fill" style="width:9%"/);
+    });
+  }
+}
+
+test("usage history says the latest quota observation is used, with what is left, in both languages", () => {
+  assert.equal(quotaShareText("en", 9), "9% used · 91% left");
+  assert.equal(quotaShareText("ru", 9), "использовано 9% · осталось 91%");
+  assert.equal(quotaShareText("ru", 12.5), "использовано 12,5% · осталось 87,5%");
+  assert.equal(quotaShareText("en", 140), "100% used · 0% left");
+  for (const locale of ["en", "ru"]) {
+    const text = usageText(locale);
+    const latest = fill(text.latestValue, { share: quotaShareText(locale, 9), time: "T" });
+    assert.ok(latest.includes(quotaShareText(locale, 9)), latest);
+    const none = fill(text.noObservationsInPeriod, { share: quotaShareText(locale, 9), time: "T", account: "A" });
+    assert.ok(none.includes(quotaShareText(locale, 9)), none);
+    assert.ok(!/\{percent\}/u.test(text.latestValue + text.noObservationsInPeriod), "no bare percent template left");
+  }
+});

From 27890e4d3b298754372b502608af068dce430884 Mon Sep 17 00:00:00 2001
From: BIackFIame <77388790+BIackFIame@users.noreply.github.com>
Date: Sun, 25 Oct 2026 07:24:37 +0000
Subject: [PATCH 2/4] fix(plugins): say when a plugin's native code or module
 is off, with a way to the setting

A plugin page whose service could not run because the person had not trusted
its native code (or had its module turned off) only got "Plugin service is not
running.". The host now refuses those requests with a fixed text; frames show
it localized (ru/en), and the host notice carries an Open settings button that
opens Settings -> Agents -> Extension native code (or Settings -> Plugins for a
module). A trusted service that crashed or failed keeps the generic text, now
followed by its last error.
---
 src/main/services/PluginManager.ts            |  13 +-
 src/main/services/PluginServiceSupervisor.ts  |   3 +-
 src/renderer/src/App.tsx                      |  39 +++-
 src/renderer/src/components/Toast.tsx         |  11 +-
 .../src/features/plugins/PluginFrame.tsx      |   8 +-
 .../settings/PluginServicesSettings.tsx       |   2 +-
 src/renderer/src/styles/app.css               |   2 +
 src/shared/pluginServiceNotice.ts             |  48 ++++
 tests/plugin-service-notice.test.mjs          | 206 ++++++++++++++++++
 9 files changed, 320 insertions(+), 12 deletions(-)
 create mode 100644 src/shared/pluginServiceNotice.ts
 create mode 100644 tests/plugin-service-notice.test.mjs

diff --git a/src/main/services/PluginManager.ts b/src/main/services/PluginManager.ts
index a6ccaa39c..329750c4f 100644
--- a/src/main/services/PluginManager.ts
+++ b/src/main/services/PluginManager.ts
@@ -48,6 +48,7 @@ import {
 } from "../../shared/contracts.ts";
 import { isValidSemver } from "../../shared/hostVersion.ts";
 import { PLUGIN_VISIBILITY_BRIDGE_SOURCE } from "../../shared/pluginVisibility.ts";
+import { PLUGIN_NATIVE_CODE_OFF_ERROR, PLUGIN_SERVICE_MODULE_OFF_ERROR } from "../../shared/pluginServiceNotice.ts";
 import type { PluginServiceSpec } from "./PluginServiceSupervisor.ts";
 import type { LaunchContributor } from "./LaunchPipeline.ts";
 import type { EnvironmentProvider } from "./EnvironmentRegistry.ts";
@@ -1223,11 +1224,21 @@ export class PluginManager {
     return structuredClone(contribution);
   }
 
+  /**
+   * The plugin's own UI may ask `serviceId` now: it is in the active manifest and its native code is trusted. A
+   * service whose module is off or whose native code is not trusted gets a fixed text the renderer turns into a
+   * localized notice with a way to the right settings section (pluginServiceNotice).
+   */
   assertService(pluginId: string, serviceId: string): void {
-    const plugin = activePlugin(this.requireEnabledPlugin(pluginId));
+    const installed = this.requireEnabledPlugin(pluginId);
+    const plugin = activePlugin(installed);
     if (!plugin.manifest.services?.some((service) => service.id === serviceId)) {
+      if (installed.manifest.services?.some((service) => service.id === serviceId)) throw new Error(PLUGIN_SERVICE_MODULE_OFF_ERROR);
       throw new Error("Plugin service does not exist.");
     }
+    if (!installed.nativeCodeTrusted || !this.serviceTrust.get(pluginId)?.[serviceId]) {
+      throw new Error(PLUGIN_NATIVE_CODE_OFF_ERROR);
+    }
   }
 
   hasPermission(pluginId: string, permission: PluginPermission): boolean {
diff --git a/src/main/services/PluginServiceSupervisor.ts b/src/main/services/PluginServiceSupervisor.ts
index baf8939f0..282e737e4 100644
--- a/src/main/services/PluginServiceSupervisor.ts
+++ b/src/main/services/PluginServiceSupervisor.ts
@@ -288,7 +288,8 @@ export class PluginServiceSupervisor {
   private send(pluginId: string, serviceId: string, method: string, params: unknown, timeoutMs: number): Promise<unknown> {
     const record = this.services.get(serviceKey(pluginId, serviceId));
     if (!record || !record.child || (record.state !== "running" && record.state !== "starting")) {
-      return Promise.reject(new Error("Plugin service is not running."));
+      // A trusted service that crashed, failed to start or is waiting to restart says why.
+      return Promise.reject(new Error(`Plugin service is not running.${record?.lastError ? ` Last error: ${record.lastError}` : ""}`));
     }
     if (record.pending.size >= MAX_PENDING_REQUESTS) {
       return Promise.reject(new Error("Plugin service is busy."));
diff --git a/src/renderer/src/App.tsx b/src/renderer/src/App.tsx
index bb11550ab..af061256e 100644
--- a/src/renderer/src/App.tsx
+++ b/src/renderer/src/App.tsx
@@ -59,6 +59,7 @@ import {
 } from "./lib/skinStyles";
 import { TitleBar } from "./components/TitleBar";
 import { Toast } from "./components/Toast";
+import { pluginServiceNoticeKind, pluginServiceNoticeSection, pluginServiceNoticeText } from "../../shared/pluginServiceNotice.ts";
 import { environmentOptions } from "./features/launcher/LaunchOptionsSection";
 import { UpdateNotice } from "./components/UpdateNotice";
 import { resolveAppearanceSettings, resolveDisplaySettings } from "./features/settings/appearanceSettings";
@@ -400,6 +401,7 @@ export function App(): React.JSX.Element {
   const [fullscreenSessionId, setFullscreenSessionId] = useState<string | null>(null);
   const [pendingTerminalUrl, setPendingTerminalUrl] = useState<string | null>(null);
   const [toast, setToast] = useState<string | null>(null);
+  const [toastAction, setToastAction] = useState<{ label: string; run(): void } | null>(null);
   const [updateStatus, setUpdateStatus] = useState<UpdateStatus>({ type: "idle" });
   const [dismissedUpdateNotice, setDismissedUpdateNotice] = useState<string | null>(null);
   const [updateNoticePending, setUpdateNoticePending] = useState(false);
@@ -418,7 +420,30 @@ export function App(): React.JSX.Element {
     fullscreen: false
   });
 
-  const showToast = useCallback((message: string): void => setToast(message), []);
+  const showToast = useCallback((message: string): void => {
+    setToastAction(null);
+    setToast(message);
+  }, []);
+  // A plugin page could not reach its service because its native code or module is off: say so with the way there.
+  const showPluginError = useCallback((message: string): void => {
+    const notice = pluginServiceNoticeKind(message);
+    if (!notice) {
+      showToast(message);
+      return;
+    }
+    const section = pluginServiceNoticeSection(notice);
+    setToast(pluginServiceNoticeText(notice, settings.locale));
+    setToastAction({
+      label: pluginServiceNoticeText("open", settings.locale),
+      run: () => {
+        setToast(null);
+        setToastAction(null);
+        // Agents: reveal Extension native code (the same destination mechanism the HOME links use).
+        setSettingsTarget(section === "agents" ? { section, label: "pluginNativeCode" } : { section });
+        setSettingsOpen(true);
+      }
+    });
+  }, [settings.locale, showToast]);
   const fileSessionOptions = useMemo<FileSessionOption[]>(
     () => sessions.map((session) => ({ sessionId: session.id, label: session.title })),
     [sessions]
@@ -495,9 +520,13 @@ export function App(): React.JSX.Element {
 
   useEffect(() => {
     if (!toast) return;
-    const timer = window.setTimeout(() => setToast(null), 2_600);
+    // A toast with a button stays long enough to reach it.
+    const timer = window.setTimeout(() => {
+      setToast(null);
+      setToastAction(null);
+    }, toastAction ? 8_000 : 2_600);
     return () => window.clearTimeout(timer);
-  }, [toast]);
+  }, [toast, toastAction]);
 
   useEffect(() => {
     const unsubscribe = window.canvasTTY.window.onState(setWindowState);
@@ -2120,7 +2149,7 @@ export function App(): React.JSX.Element {
           onHomeGridSizeChange={changeHomeGridSize}
           onFinishHomeEdit={() => void finishHomeEditor()}
           onResetHomeLayout={resetHomeLayout}
-          onPluginError={showToast}
+          onPluginError={showPluginError}
           onPluginCanvasBoundsChange={changePluginCanvasBounds}
           onDisposePluginCanvas={disposePluginCanvas}
           onFocusPluginCanvas={focusPluginCanvas}
@@ -2301,7 +2330,7 @@ export function App(): React.JSX.Element {
       {materials.snapshot.loadError && (
         <div className="materials-load-error" role="alert">{t(settings.locale, "materialsLoadFailed")}</div>
       )}
-      <Toast message={toast} />
+      <Toast message={toast} action={toastAction} />
     </div>
   );
 }
diff --git a/src/renderer/src/components/Toast.tsx b/src/renderer/src/components/Toast.tsx
index 190760921..f25700112 100644
--- a/src/renderer/src/components/Toast.tsx
+++ b/src/renderer/src/components/Toast.tsx
@@ -1,7 +1,14 @@
 interface ToastProps {
   message: string | null;
+  /** One button next to the text (for example "Open settings"); the toast takes clicks only while it has one. */
+  action?: { label: string; run(): void } | null;
 }
 
-export function Toast({ message }: ToastProps): React.JSX.Element {
-  return <div className={`toast ${message ? "toast--visible" : ""}`}>{message}</div>;
+export function Toast({ message, action }: ToastProps): React.JSX.Element {
+  return (
+    <div className={`toast ${message ? "toast--visible" : ""}${message && action ? " toast--action" : ""}`} role={message && action ? "alert" : undefined}>
+      {message}
+      {message && action && <button className="toast__action" type="button" onClick={action.run}>{action.label}</button>}
+    </div>
+  );
 }
diff --git a/src/renderer/src/features/plugins/PluginFrame.tsx b/src/renderer/src/features/plugins/PluginFrame.tsx
index e921385e1..2e0a6384d 100644
--- a/src/renderer/src/features/plugins/PluginFrame.tsx
+++ b/src/renderer/src/features/plugins/PluginFrame.tsx
@@ -19,6 +19,7 @@ import { pluginVisibilityMessage } from "../../../../shared/pluginVisibility";
 import { isProviderId } from "../../../../shared/providerCatalog.ts";
 import { useDesktopWindow } from "./useDesktopWindow";
 import type { LinuxDesktopCanvasPolicy } from "./linuxDesktopViewport";
+import { pluginServiceNoticeKind, pluginServiceNoticeText } from "../../../../shared/pluginServiceNotice.ts";
 
 const storageListeners = new Map<string, Set<(key: string, value: unknown) => void>>();
 
@@ -185,7 +186,10 @@ export function PluginFrame({
           value
         });
       }).catch((error: unknown) => {
-        const description = safeError(error);
+        // Native code off / module off: the page and the host notice get the localized text with its way out.
+        const raw = safeError(error);
+        const notice = pluginServiceNoticeKind(raw);
+        const description = notice ? pluginServiceNoticeText(notice, locale) : raw;
         onError(description);
         if (!mayReply(frame.current?.contentWindow, servedPlugin.current)) return;
         postToFrame(frame.current, {
@@ -199,7 +203,7 @@ export function PluginFrame({
     };
     window.addEventListener("message", receive);
     return () => window.removeEventListener("message", receive);
-  }, [canvasInstanceId, captureCanvasWheelOverWidgets, context, desktopRequest, limits, onCanvasWheel, onError, onFocus, onHoverChange, onOpenLauncher, onMascotDrag, plugin, replies, sessions]);
+  }, [canvasInstanceId, captureCanvasWheelOverWidgets, context, desktopRequest, limits, locale, onCanvasWheel, onError, onFocus, onHoverChange, onOpenLauncher, onMascotDrag, plugin, replies, sessions]);
 
   useEffect(() => {
     postToFrame(frame.current, { source: "canvastty-host", type: "context", value: context });
diff --git a/src/renderer/src/features/settings/PluginServicesSettings.tsx b/src/renderer/src/features/settings/PluginServicesSettings.tsx
index eae96eee5..7559b782b 100644
--- a/src/renderer/src/features/settings/PluginServicesSettings.tsx
+++ b/src/renderer/src/features/settings/PluginServicesSettings.tsx
@@ -79,7 +79,7 @@ export function PluginServicesSettings({
   };
 
   return (
-    <section className="setting-group agent-hooks plugin-services">
+    <section data-setting-label={t(locale, "pluginNativeCode")} tabIndex={-1} className="setting-group agent-hooks plugin-services">
       <h3>{t(locale, "pluginNativeCode")}</h3>
       <p className="setting-group__description">{t(locale, "pluginNativeCodeDescription")}</p>
       <div className="agent-hooks__list">
diff --git a/src/renderer/src/styles/app.css b/src/renderer/src/styles/app.css
index f7e69a2b0..ed499a878 100644
--- a/src/renderer/src/styles/app.css
+++ b/src/renderer/src/styles/app.css
@@ -1368,6 +1368,8 @@ button { border: 0; }
 .update-notice__dismiss:hover, .update-notice__dismiss:focus-visible { color: var(--text); background: var(--surface-soft); }
 .toast { position: fixed; z-index: 9999; left: 50%; bottom: 24px; max-width: min(540px, calc(100% - 40px)); padding: 12px 17px; border-radius: 11px; color: white; background: rgba(37,38,48,.94); box-shadow: var(--shadow-md); opacity: 0; transform: translate(-50%, 18px); pointer-events: none; transition: all .2s ease; }
 .toast--visible { opacity: 1; transform: translate(-50%, 0); }
+.toast--action { display: flex; align-items: center; gap: 12px; pointer-events: auto; }
+.toast__action { flex: 0 0 auto; padding: 6px 8px; border-radius: 6px; color: var(--text-dark); background: var(--primary); cursor: pointer; font-size: 11px; font-weight: 700; }
 .materials-load-error { position: fixed; z-index: 9998; left: 50%; bottom: 76px; width: max-content; max-width: min(540px, calc(100% - 40px)); padding: 12px 17px; border-radius: 11px; color: var(--text); background: var(--surface); box-shadow: inset 3px 0 0 var(--danger), var(--shadow-md); transform: translateX(-50%); }
 /* Shown until the critical snapshot is in, usually for a few frames only. It keeps the window's own native
    background (main/index.ts backgroundColor) so startup does not flash a dark panel between the empty window and
diff --git a/src/shared/pluginServiceNotice.ts b/src/shared/pluginServiceNotice.ts
new file mode 100644
index 000000000..4bbf9d570
--- /dev/null
+++ b/src/shared/pluginServiceNotice.ts
@@ -0,0 +1,48 @@
+import type { LocaleId } from "./contracts.ts";
+
+/**
+ * Why a plugin's own UI cannot reach its service although the service exists. The main process refuses with one of
+ * these fixed texts (plugins see them as the request's error); the renderer shows the localized text with a button
+ * that opens the settings section where the person can change it. A service that is trusted but not running keeps the
+ * supervisor's own error ("Plugin service is not running." with the last error, if any).
+ */
+export const PLUGIN_NATIVE_CODE_OFF_ERROR =
+  "This plugin's native code is turned off. Turn it on in Settings → Agents → Extension native code.";
+export const PLUGIN_SERVICE_MODULE_OFF_ERROR =
+  "The plugin module that runs this service is turned off. Turn it on in Settings → Plugins.";
+
+export type PluginServiceNoticeKind = "native-code-off" | "module-off";
+
+const NOTICE_TEXT: Record<LocaleId, Record<PluginServiceNoticeKind | "open", string>> = {
+  ru: {
+    "native-code-off": "Нативный код этого плагина выключен — включите его в Настройки → Агенты → Нативный код расширений.",
+    "module-off": "Модуль этого плагина с нативным кодом выключен — включите его в Настройки → Плагины.",
+    open: "Открыть настройки"
+  },
+  en: {
+    "native-code-off": "This plugin's native code is turned off — turn it on in Settings → Agents → Extension native code.",
+    "module-off": "The plugin module that runs this service is turned off — turn it on in Settings → Plugins.",
+    open: "Open settings"
+  }
+};
+
+/** The notice an error text stands for (the main process's fixed text or an already localized one), or null. */
+export function pluginServiceNoticeKind(message: string): PluginServiceNoticeKind | null {
+  const text = message.trim();
+  if (text === PLUGIN_NATIVE_CODE_OFF_ERROR || text === NOTICE_TEXT.ru["native-code-off"] || text === NOTICE_TEXT.en["native-code-off"]) {
+    return "native-code-off";
+  }
+  if (text === PLUGIN_SERVICE_MODULE_OFF_ERROR || text === NOTICE_TEXT.ru["module-off"] || text === NOTICE_TEXT.en["module-off"]) {
+    return "module-off";
+  }
+  return null;
+}
+
+export function pluginServiceNoticeText(kind: PluginServiceNoticeKind | "open", locale: LocaleId): string {
+  return (NOTICE_TEXT[locale] ?? NOTICE_TEXT.en)[kind];
+}
+
+/** The settings section that holds the switch for this notice. */
+export function pluginServiceNoticeSection(kind: PluginServiceNoticeKind): "agents" | "plugins" {
+  return kind === "module-off" ? "plugins" : "agents";
+}
diff --git a/tests/plugin-service-notice.test.mjs b/tests/plugin-service-notice.test.mjs
new file mode 100644
index 000000000..439171e00
--- /dev/null
+++ b/tests/plugin-service-notice.test.mjs
@@ -0,0 +1,206 @@
+import assert from "node:assert/strict";
+import { createHash } from "node:crypto";
+import { cp, mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { createRequire } from "node:module";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import test from "node:test";
+import { fileURLToPath } from "node:url";
+import { build } from "esbuild";
+import { PluginManager } from "../src/main/services/PluginManager.ts";
+import { PluginServiceSupervisor } from "../src/main/services/PluginServiceSupervisor.ts";
+import {
+  PLUGIN_NATIVE_CODE_OFF_ERROR,
+  PLUGIN_SERVICE_MODULE_OFF_ERROR,
+  pluginServiceNoticeKind,
+  pluginServiceNoticeSection,
+  pluginServiceNoticeText
+} from "../src/shared/pluginServiceNotice.ts";
+
+// A plugin page whose service cannot run because the person has not turned its native code (or its module) on gets
+// an actionable notice instead of "Plugin service is not running."; a trusted service that crashed keeps the generic
+// text, now with its last error.
+const root = fileURLToPath(new URL("..", import.meta.url));
+const example = new URL("../examples/plugins/service-echo/", import.meta.url);
+const exampleManifest = JSON.parse(await readFile(new URL("canvastty.plugin.json", example), "utf8"));
+const sha256 = (content) => createHash("sha256").update(content).digest("hex");
+const source = (path) => readFile(new URL(`../${path}`, import.meta.url), "utf8");
+
+function supervisor(manager, options = {}) {
+  return new PluginServiceSupervisor({
+    command: process.execPath,
+    hostVersion: "9.9.9",
+    locale: () => "en",
+    requestTimeoutMs: 2_000,
+    stopGraceMs: 300,
+    restartDelaysMs: [30],
+    host: {
+      storageGet: (pluginId, key) => manager.storageGet(pluginId, key),
+      storageSet: (pluginId, key, value) => manager.storageSet(pluginId, key, value),
+      emit: () => undefined
+    },
+    ...options
+  });
+}
+
+/** What registerIpc's requestPluginService does: the manager's check, then the supervisor. */
+async function pageRequest(manager, instance, pluginId, serviceId, method, params) {
+  manager.assertService(pluginId, serviceId);
+  return instance.request(pluginId, serviceId, method, params);
+}
+
+test("native code off: the page's request names the switch, and the notice is localized with a way to Agents", async (t) => {
+  const userData = await mkdtemp(join(tmpdir(), "canvastty-service-notice-"));
+  const manager = new PluginManager(userData, async (_url, destination) => { await cp(example, destination, { recursive: true }); });
+  const instance = supervisor(manager);
+  manager.setServiceObserver((specs) => instance.sync(specs));
+  t.after(async () => {
+    await instance.dispose();
+    await manager.dispose();
+    await rm(userData, { recursive: true, force: true });
+  });
+  await manager.load();
+  const { manifest } = await manager.install((await manager.previewInstall("https://github.com/example/service-echo")).token);
+
+  await assert.rejects(pageRequest(manager, instance, manifest.id, "echo", "echo", { text: "x" }), (error) => {
+    assert.equal(error.message, PLUGIN_NATIVE_CODE_OFF_ERROR);
+    return true;
+  });
+  const kind = pluginServiceNoticeKind(PLUGIN_NATIVE_CODE_OFF_ERROR);
+  assert.equal(kind, "native-code-off");
+  assert.equal(pluginServiceNoticeSection(kind), "agents");
+  assert.equal(
+    pluginServiceNoticeText(kind, "ru"),
+    "Нативный код этого плагина выключен — включите его в Настройки → Агенты → Нативный код расширений."
+  );
+  assert.match(pluginServiceNoticeText(kind, "en"), /native code is turned off — turn it on in Settings → Agents → Extension native code/u);
+  assert.equal(pluginServiceNoticeText("open", "ru"), "Открыть настройки");
+  assert.equal(pluginServiceNoticeText("open", "en"), "Open settings");
+  // The renderer recognizes its own localized text again (the page reports it, the host shows the notice).
+  assert.equal(pluginServiceNoticeKind(pluginServiceNoticeText(kind, "ru")), "native-code-off");
+  assert.equal(pluginServiceNoticeKind(pluginServiceNoticeText(kind, "en")), "native-code-off");
+
+  // Trusted: the same request reaches the service.
+  await manager.setNativeCodeTrusted(manifest.id, true);
+  assert.equal((await pageRequest(manager, instance, manifest.id, "echo", "echo", { text: "x" })).count, 1);
+  // Disabling revokes the trust; the disabled plugin itself is refused as before.
+  await manager.setEnabled(manifest.id, false);
+  await manager.setEnabled(manifest.id, true);
+  assert.throws(() => manager.assertService(manifest.id, "echo"), (error) => error.message === PLUGIN_NATIVE_CODE_OFF_ERROR);
+  assert.throws(() => manager.assertService(manifest.id, "other"), /does not exist/u);
+});
+
+test("a service whose module is off says so and points to Plugins", async (t) => {
+  const userData = await mkdtemp(join(tmpdir(), "canvastty-service-notice-modules-"));
+  const files = {
+    "apps/echo.html": await readFile(new URL("apps/echo.html", example)),
+    "services/echo.mjs": await readFile(new URL("services/echo.mjs", example)),
+    "services/extra.mjs": Buffer.from("process.stdin.resume();\n")
+  };
+  const asset = (path) => ({ path, bytes: files[path].length, sha256: sha256(files[path]) });
+  const manifest = {
+    ...exampleManifest,
+    coreFiles: [asset("apps/echo.html"), asset("services/echo.mjs")],
+    modules: [{ id: "extra", title: "Extra", defaultSelected: false, permissions: [], files: [asset("services/extra.mjs")] }],
+    services: [...exampleManifest.services, { id: "extra", title: "Extra", entry: "services/extra.mjs", module: "extra" }]
+  };
+  const manager = new PluginManager(
+    userData,
+    async (_url, destination) => {
+      await mkdir(destination, { recursive: true });
+      await writeFile(join(destination, "canvastty.plugin.json"), JSON.stringify(manifest));
+    },
+    async (_url, destination, requested) => {
+      for (const file of requested) {
+        await mkdir(join(destination, file.path, ".."), { recursive: true });
+        await writeFile(join(destination, file.path), files[file.path]);
+      }
+    }
+  );
+  t.after(async () => {
+    await manager.dispose();
+    await rm(userData, { recursive: true, force: true });
+  });
+  await manager.load();
+  const installed = await manager.install((await manager.previewInstall("https://github.com/example/service-echo")).token, []);
+  await manager.setNativeCodeTrusted(installed.manifest.id, true);
+  manager.assertService(installed.manifest.id, "echo");
+  assert.throws(() => manager.assertService(installed.manifest.id, "extra"), (error) => error.message === PLUGIN_SERVICE_MODULE_OFF_ERROR);
+  const kind = pluginServiceNoticeKind(PLUGIN_SERVICE_MODULE_OFF_ERROR);
+  assert.equal(kind, "module-off");
+  assert.equal(pluginServiceNoticeSection(kind), "plugins");
+  assert.match(pluginServiceNoticeText(kind, "ru"), /Модуль этого плагина с нативным кодом выключен — включите его в Настройки → Плагины/u);
+});
+
+test("a trusted service that crashed keeps the generic text, with its last error, and no settings notice", async (t) => {
+  const dir = await mkdtemp(join(tmpdir(), "canvastty-service-notice-crash-"));
+  const instance = supervisor({ storageGet: async () => null, storageSet: async () => undefined }, { maxRestarts: 0 });
+  t.after(async () => { await instance.dispose(); await rm(dir, { recursive: true, force: true }); });
+  const entry = [
+    'import { createInterface } from "node:readline";',
+    'createInterface({ input: process.stdin }).on("line", (line) => {',
+    '  const m = JSON.parse(line);',
+    '  if (m.method === "crash") process.exit(3);',
+    '  if (m.method === "ping") process.stdout.write(JSON.stringify({ jsonrpc: "2.0", id: m.id, result: "pong" }) + "\\n");',
+    "});"
+  ].join("\n");
+  const entryPath = join(dir, "probe.mjs");
+  await writeFile(entryPath, entry);
+  await instance.sync([{ pluginId: "com.example.a", serviceId: "probe", root: dir, entryPath, sha256: sha256(entry), dataDir: join(dir, "data"), permissions: [] }]);
+  assert.equal(await instance.request("com.example.a", "probe", "ping", null), "pong");
+  await assert.rejects(instance.request("com.example.a", "probe", "crash", null), /stopped/u);
+  assert.equal(instance.report("com.example.a").services[0].state, "failed");
+  await assert.rejects(instance.request("com.example.a", "probe", "ping", null), (error) => {
+    assert.match(error.message, /^Plugin service is not running\. Last error: The service stopped unexpectedly \(exit code 3\) too often/u);
+    assert.equal(pluginServiceNoticeKind(error.message), null, "a real crash is not a settings notice");
+    return true;
+  });
+  // A service the supervisor never ran (no record) keeps the plain text.
+  await assert.rejects(instance.request("com.example.b", "probe", "ping", null), (error) => error.message === "Plugin service is not running.");
+});
+
+test("the toast shows the notice's button only when it has one", async (t) => {
+  const outdir = await mkdtemp(join(tmpdir(), "canvastty-toast-"));
+  t.after(() => rm(outdir, { recursive: true, force: true }));
+  await build({
+    stdin: {
+      contents: [
+        'export { Toast } from "./src/renderer/src/components/Toast";',
+        'export { createElement } from "react";',
+        'export { renderToStaticMarkup } from "react-dom/server";'
+      ].join("\n"),
+      resolveDir: root,
+      loader: "ts"
+    },
+    jsx: "automatic", bundle: true, platform: "node", format: "cjs", outfile: join(outdir, "toast.cjs"), logLevel: "silent",
+    define: { "process.env.NODE_ENV": '"production"' }
+  });
+  const { Toast, createElement, renderToStaticMarkup } = createRequire(import.meta.url)(join(outdir, "toast.cjs"));
+  const plain = renderToStaticMarkup(createElement(Toast, { message: "Saved" }));
+  assert.match(plain, /class="toast toast--visible"/u);
+  assert.doesNotMatch(plain, /<button/u);
+  const text = pluginServiceNoticeText("native-code-off", "ru");
+  const actionable = renderToStaticMarkup(createElement(Toast, { message: text, action: { label: pluginServiceNoticeText("open", "ru"), run: () => undefined } }));
+  assert.match(actionable, /toast--action/u);
+  assert.match(actionable, /<button class="toast__action" type="button">Открыть настройки<\/button>/u);
+  assert.ok(actionable.includes(text));
+});
+
+test("the notice is wired: frames localize it, App shows it with Open settings, Settings opens Extension native code", async () => {
+  const [frame, app, settings, ipc] = await Promise.all([
+    source("src/renderer/src/features/plugins/PluginFrame.tsx"),
+    source("src/renderer/src/App.tsx"),
+    source("src/renderer/src/features/settings/PluginServicesSettings.tsx"),
+    source("src/main/ipc/registerIpc.ts")
+  ]);
+  assert.match(frame, /pluginServiceNoticeKind\(raw\)/u);
+  assert.match(frame, /pluginServiceNoticeText\(notice, locale\)/u);
+  assert.match(app, /onPluginError=\{showPluginError\}/u);
+  assert.doesNotMatch(app, /onPluginError=\{showToast\}/u);
+  // Open settings uses the same destination as the HOME links: Agents scrolls to Extension native code.
+  assert.match(app, /setSettingsTarget\(section === "agents" \? \{ section, label: "pluginNativeCode" \} : \{ section \}\)/u);
+  assert.match(app, /<Toast message=\{toast\} action=\{toastAction\} \/>/u);
+  assert.match(settings, /<section data-setting-label=\{t\(locale, "pluginNativeCode"\)\} tabIndex=\{-1\} className="setting-group agent-hooks plugin-services">/u);
+  // The service request path still checks the manager before the supervisor.
+  assert.match(ipc, /plugins\.assertService\(pluginId, serviceId\);\n\s+return pluginServices\.request/u);
+});

From ccb45042af429d379b7a81ee42b9f7c74b9bb19b Mon Sep 17 00:00:00 2001
From: BIackFIame <77388790+BIackFIame@users.noreply.github.com>
Date: Mon, 2 Nov 2026 10:45:15 +0000
Subject: [PATCH 3/4] test(plugins): check the service notice wiring the same
 way on a CRLF checkout

The wiring test matched registerIpc's source with a literal LF between the
manager's check and the supervisor request, so it failed on a Windows checkout
(core.autocrlf=true). It now matches any whitespace there, and the same checks
also run on CRLF copies of the four files.
---
 tests/plugin-service-notice.test.mjs | 25 +++++++++++++++++--------
 1 file changed, 17 insertions(+), 8 deletions(-)

diff --git a/tests/plugin-service-notice.test.mjs b/tests/plugin-service-notice.test.mjs
index 439171e00..624a83b1f 100644
--- a/tests/plugin-service-notice.test.mjs
+++ b/tests/plugin-service-notice.test.mjs
@@ -186,13 +186,8 @@ test("the toast shows the notice's button only when it has one", async (t) => {
   assert.ok(actionable.includes(text));
 });
 
-test("the notice is wired: frames localize it, App shows it with Open settings, Settings opens Extension native code", async () => {
-  const [frame, app, settings, ipc] = await Promise.all([
-    source("src/renderer/src/features/plugins/PluginFrame.tsx"),
-    source("src/renderer/src/App.tsx"),
-    source("src/renderer/src/features/settings/PluginServicesSettings.tsx"),
-    source("src/main/ipc/registerIpc.ts")
-  ]);
+/** The wiring checks read source text, so they must hold for an LF and a CRLF (Windows autocrlf) checkout alike. */
+function assertNoticeWired({ frame, app, settings, ipc }) {
   assert.match(frame, /pluginServiceNoticeKind\(raw\)/u);
   assert.match(frame, /pluginServiceNoticeText\(notice, locale\)/u);
   assert.match(app, /onPluginError=\{showPluginError\}/u);
@@ -202,5 +197,19 @@ test("the notice is wired: frames localize it, App shows it with Open settings,
   assert.match(app, /<Toast message=\{toast\} action=\{toastAction\} \/>/u);
   assert.match(settings, /<section data-setting-label=\{t\(locale, "pluginNativeCode"\)\} tabIndex=\{-1\} className="setting-group agent-hooks plugin-services">/u);
   // The service request path still checks the manager before the supervisor.
-  assert.match(ipc, /plugins\.assertService\(pluginId, serviceId\);\n\s+return pluginServices\.request/u);
+  assert.match(ipc, /plugins\.assertService\(pluginId, serviceId\);\s+return pluginServices\.request/u);
+}
+
+test("the notice is wired: frames localize it, App shows it with Open settings, Settings opens Extension native code", async () => {
+  const [frame, app, settings, ipc] = await Promise.all([
+    source("src/renderer/src/features/plugins/PluginFrame.tsx"),
+    source("src/renderer/src/App.tsx"),
+    source("src/renderer/src/features/settings/PluginServicesSettings.tsx"),
+    source("src/main/ipc/registerIpc.ts")
+  ]);
+  const sources = { frame, app, settings, ipc };
+  assertNoticeWired(sources);
+  // The same files as a Windows checkout with core.autocrlf=true has them.
+  const crlf = (text) => text.replace(/\r?\n/gu, "\r\n");
+  assertNoticeWired(Object.fromEntries(Object.entries(sources).map(([name, text]) => [name, crlf(text)])));
 });

From 3f91f7f2f03210980554de1be28f05989bc22161 Mon Sep 17 00:00:00 2001
From: BIackFIame <77388790+BIackFIame@users.noreply.github.com>
Date: Mon, 2 Nov 2026 10:53:45 +0000
Subject: [PATCH 4/4] fix(ui): keep limit labels readable in a compact widget
 and announce service notices politely
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Presentation only; it can be dropped on its own without touching the fixes
before it.

- A limits tile up to four grid columns wide put the percentage, the
  used/left text and the countdown on one line, so "used · 91% left" (and
  the longer Russian text) was cut off at two to four columns. In such a
  tile the countdown stays beside the percentage and the used/left text
  gets its own line below them, wrapping at its spaces; the icon and
  padding are smaller. Only a row too short for two lines (a two-row tile
  with three providers) shortens the text as before, with the full text on
  hover. The rail can no longer be pushed out of the row.
- The toast is a polite status region that stays mounted, instead of an
  alert added only when it has an "Open settings" button.

UI contract (en/ru/zh-CN) says how a narrow limits tile reads.
---
 docs/UI_CONTRACT.md                   |  2 +-
 docs/UI_CONTRACT.ru.md                |  2 +-
 docs/UI_CONTRACT.zh-CN.md             |  2 +-
 src/renderer/src/components/Toast.tsx |  5 +++--
 src/renderer/src/styles/app.css       | 28 ++++++++++++++++++++++++++-
 tests/plugin-service-notice.test.mjs  |  5 +++++
 tests/quota-used-left-labels.test.mjs | 13 +++++++++++++
 7 files changed, 51 insertions(+), 6 deletions(-)

diff --git a/docs/UI_CONTRACT.md b/docs/UI_CONTRACT.md
index 29df04f2f..889f3c0bb 100644
--- a/docs/UI_CONTRACT.md
+++ b/docs/UI_CONTRACT.md
@@ -17,7 +17,7 @@ This contract preserves the approved MVP concept and prevents feature ownership
 ## Home zone
 
 - HOME uses fixed-size `82 × 72` logical cells with `18px` gaps so enlarging the page never makes existing widgets smaller. Fresh profiles start at `16 × 12`, while the original arrangement remains in the upper-left `12 × 8` area and leaves explicit spare space for plugins. Its persisted boundary and cell grid are shown only in Edit HOME, where the bottom-right corner resizes the area up to the generous `48 × 36` safety ceiling.
-- The wide left tile contains the user-selected subset of the Codex, Claude, Qwen Code, Kimi, OpenCode Go, and Grok Build limit rows; only providers with a detected CLI are selected by default. Visible rows divide the tile height equally, while four or more rows switch to a compact density that keeps every icon, countdown, and usage rail inside the default tile. An empty selection shows an explicit empty state. Display selection does not disable background limit reads. Every offered row has a source-backed adapter: Qwen reports explicit `cli-not-found` or `unsupported-protocol` because its multi-provider CLI exposes no universal quota API. Rows with readable quotas prefer the provider's longest real default quota window (the weekly window when exposed), and fall back to another real window only when needed. Each available row shows the countdown to that window's `resetsAt` and the matching usage rail. Values below one day use `HH:MM`; longer values use `Nд HHч`/`Nd HHh`. Window length stays in accessible metadata; unavailable data is labeled and has no fake reset or percentage. A short yellow rail means the last valid snapshot is shown because its latest refresh failed; it is not selection or usage progress.
+- The wide left tile contains the user-selected subset of the Codex, Claude, Qwen Code, Kimi, OpenCode Go, and Grok Build limit rows; only providers with a detected CLI are selected by default. Visible rows divide the tile height equally, while four or more rows switch to a compact density that keeps every icon, countdown, and usage rail inside the default tile. An empty selection shows an explicit empty state. Display selection does not disable background limit reads. Every offered row has a source-backed adapter: Qwen reports explicit `cli-not-found` or `unsupported-protocol` because its multi-provider CLI exposes no universal quota API. Rows with readable quotas prefer the provider's longest real default quota window (the weekly window when exposed), and fall back to another real window only when needed. Each available row shows the countdown to that window's `resetsAt` and the matching usage rail. Its share reads as used and left (for example "9% used · 91% left"); in a tile up to four grid columns wide the countdown stays beside the percentage and that text wraps on its own line below them, and only a row too short for two lines shortens it, with the full text on hover. Values below one day use `HH:MM`; longer values use `Nд HHч`/`Nd HHh`. Window length stays in accessible metadata; unavailable data is labeled and has no fake reset or percentage. A short yellow rail means the last valid snapshot is shown because its latest refresh failed; it is not selection or usage progress.
 - The right tile is the only session list. Its viewport shows three rows and scrolls when more real sessions exist; it never discards rows. Ordinary wheel input over this list stays local without requiring a prior focus click, while explicit On/Key/full-navigation capture still belongs to the canvas. Each row shows provider mark, localized semantic state, and identity. Appearance can keep every row monochrome or color the whole row by status: idle/unavailable/finished states are gray, working is sage green, and waiting for input is yellow. Hovering a failed row's error mark exposes its bounded, terminal-control-free final PTY output, including a supplied traceback, in an accessible panel; its Copy action copies that displayed output only. When the PTY emitted no visible output, the panel instead states that fact with the actual exit code. It never invents a reason or derives the state from terminal text. Session duration and limit-style progress rails never appear here.
 - The clock is the dominant middle tile and renders only `HH:MM`. The adjacent media tile is an autonomous widget: click to pick or replace an image/GIF; remove from the widget itself.
 - The bottom dock always contains Terminal and Browser, plus the agent providers enabled in Settings. Its equal-width columns are derived from the buttons that are actually visible, so disabling an agent never leaves an empty slot. Fresh and migrated profiles select only agents with a detected CLI. Missing agents are removed from saved launcher and limit selections; hiding a launcher never stops or removes an existing session. Settings is a separate tile. Browser opens or focuses the one built-in browser card and never launches an external browser. Agent badges never overlay the Browser launcher icon.
diff --git a/docs/UI_CONTRACT.ru.md b/docs/UI_CONTRACT.ru.md
index 51998905a..2eb303786 100644
--- a/docs/UI_CONTRACT.ru.md
+++ b/docs/UI_CONTRACT.ru.md
@@ -17,7 +17,7 @@
 ## Зона Home
 
 - HOME использует фиксированные логические ячейки `82 × 72` с промежутками `18px`, поэтому увеличение страницы не уменьшает существующие виджеты. Новый профиль начинает с `16 × 12`; исходная композиция остаётся в верхней левой области `12 × 8`, оставляя явный запас для плагинов. Сохраняемые граница и сетка видны только в Edit HOME, где правый нижний угол меняет область до безопасного потолка `48 × 36`.
-- Широкая левая плитка содержит выбранное пользователем подмножество строк лимитов Codex, Claude, Qwen Code, Kimi, OpenCode Go и Grok Build; по умолчанию выбраны только провайдеры с найденным CLI. Видимые строки делят высоту плитки поровну, а при четырёх и более строках переходят в компактную плотность, чтобы каждая иконка, countdown и usage rail оставались внутри дефолтной плитки. Пустой выбор показывает явное пустое состояние. Настройка отображения не отключает фоновые запросы лимитов. У каждой строки есть source-backed adapter: Qwen честно показывает `cli-not-found` или `unsupported-protocol`, потому что его мультипровайдерный CLI не имеет универсального quota API. Строки с читаемыми квотами предпочитают самое длинное настоящее default quota window провайдера (weekly, если доступно) и только при необходимости переключаются на другое реальное окно. Каждая доступная строка показывает countdown до `resetsAt` этого окна и соответствующий usage rail. Значения короче суток используют `HH:MM`, длиннее — `Nд HHч`/`Nd HHh`. Длина окна остаётся в accessible metadata; недоступные данные подписаны и не получают выдуманный reset или percentage. Короткая жёлтая полоска означает, что после неудачного свежего обновления показан последний валидный snapshot; это не выбор строки и не progress использования.
+- Широкая левая плитка содержит выбранное пользователем подмножество строк лимитов Codex, Claude, Qwen Code, Kimi, OpenCode Go и Grok Build; по умолчанию выбраны только провайдеры с найденным CLI. Видимые строки делят высоту плитки поровну, а при четырёх и более строках переходят в компактную плотность, чтобы каждая иконка, countdown и usage rail оставались внутри дефолтной плитки. Пустой выбор показывает явное пустое состояние. Настройка отображения не отключает фоновые запросы лимитов. У каждой строки есть source-backed adapter: Qwen честно показывает `cli-not-found` или `unsupported-protocol`, потому что его мультипровайдерный CLI не имеет универсального quota API. Строки с читаемыми квотами предпочитают самое длинное настоящее default quota window провайдера (weekly, если доступно) и только при необходимости переключаются на другое реальное окно. Каждая доступная строка показывает countdown до `resetsAt` этого окна и соответствующий usage rail. Её доля читается как использованное и оставшееся (например «9% использовано · осталось 91%»); в плитке шириной до четырёх колонок сетки countdown остаётся рядом с процентом, а этот текст переносится отдельной строкой под ними, и только строка, в которой нет места для двух строк текста, сокращает его, с полным текстом при наведении. Значения короче суток используют `HH:MM`, длиннее — `Nд HHч`/`Nd HHh`. Длина окна остаётся в accessible metadata; недоступные данные подписаны и не получают выдуманный reset или percentage. Короткая жёлтая полоска означает, что после неудачного свежего обновления показан последний валидный snapshot; это не выбор строки и не progress использования.
 - Правая плитка — единственный список сессий. Viewport показывает три строки и прокручивается при большем числе реальных сессий, не отбрасывая их. Каждая строка показывает mark провайдера, локализованный semantic state и identity. Hover на error mark неудачной сессии открывает доступную панель с ограниченным финальным выводом PTY без terminal-control последовательностей, включая переданный traceback; действие Copy копирует только этот показанный вывод. Если PTY не передал видимого вывода, панель сообщает этот факт с фактическим кодом завершения. UI не выдумывает причину и не определяет state по тексту терминала. Session duration и progress rails в стиле лимитов здесь не появляются.
 - Часы — доминирующая средняя плитка и показывают только `HH:MM`. Соседняя media tile автономна: нажмите, чтобы выбрать/заменить image/GIF; удаление находится в самом виджете.
 - Нижний dock всегда содержит Terminal и Browser, а также включённых в Settings агентских провайдеров. Его равные по ширине колонки вычисляются из реально видимых кнопок, поэтому отключённый агент не оставляет пустую ячейку. В новых и мигрированных профилях выбраны только агенты с найденным CLI. Отсутствующие агенты удаляются из сохранённых списков запуска и лимитов; скрытие launcher-кнопки не останавливает и не удаляет существующую сессию. Settings — отдельная плитка. Browser открывает или фокусирует единственную встроенную карточку браузера и никогда не запускает внешний браузер. Agent badges не накладываются на launcher-иконку Browser.
diff --git a/docs/UI_CONTRACT.zh-CN.md b/docs/UI_CONTRACT.zh-CN.md
index a42d6c30c..273849e0a 100644
--- a/docs/UI_CONTRACT.zh-CN.md
+++ b/docs/UI_CONTRACT.zh-CN.md
@@ -17,7 +17,7 @@
 ## Home 区域
 
 - HOME 使用固定的 `82 × 72` 逻辑 cell 与 `18px` 间距，因此扩大页面不会让已有 widget 变小。新 profile 从 `16 × 12` 开始；原布局保留在左上角 `12 × 8` 区域，并为插件留下明确空间。持久化边界与 cell grid 只在 Edit HOME 中显示；右下角可将区域调整到 `48 × 36` 的安全上限。
-- 左侧宽 tile 只包含用户选择的 Codex、Claude、Qwen Code、Kimi、OpenCode Go 与 Grok Build 限额行；默认只选择已检测到 CLI 的服务商。可见行等分 tile 高度；四行或更多时切换为紧凑密度，确保每个图标、倒计时和 usage rail 都留在默认 tile 内。空选择显示明确的空状态。显示设置不会停止后台读取限额。每行都有 source-backed adapter；Qwen 因多服务商 CLI 没有通用 quota API 而明确显示 `cli-not-found` 或 `unsupported-protocol`。可读取配额的行优先显示服务商最长的真实默认配额窗口（若提供则为 weekly），仅在必要时 fallback 到另一个真实窗口。它显示该窗口 `resetsAt` 的倒计时及对应 usage rail。短于一天使用 `HH:MM`，更长时间使用 `Nд HHч`/`Nd HHh`。窗口长度保留在 accessible metadata 中；不可用数据必须明确标记，不得伪造 reset 或 percentage。短黄色竖线表示最新刷新失败、当前显示的是最后一个有效 snapshot；它不是选择状态或 usage progress。
+- 左侧宽 tile 只包含用户选择的 Codex、Claude、Qwen Code、Kimi、OpenCode Go 与 Grok Build 限额行；默认只选择已检测到 CLI 的服务商。可见行等分 tile 高度；四行或更多时切换为紧凑密度，确保每个图标、倒计时和 usage rail 都留在默认 tile 内。空选择显示明确的空状态。显示设置不会停止后台读取限额。每行都有 source-backed adapter；Qwen 因多服务商 CLI 没有通用 quota API 而明确显示 `cli-not-found` 或 `unsupported-protocol`。可读取配额的行优先显示服务商最长的真实默认配额窗口（若提供则为 weekly），仅在必要时 fallback 到另一个真实窗口。它显示该窗口 `resetsAt` 的倒计时及对应 usage rail。其份额以已用和剩余表示（例如 “9% used · 91% left”）；在不超过四个网格列宽的 tile 中，倒计时保持在百分比旁边，该文字在其下方单独换行显示；只有高度不足以容纳两行文字的行才会缩短它，悬停时显示完整文字。短于一天使用 `HH:MM`，更长时间使用 `Nд HHч`/`Nd HHh`。窗口长度保留在 accessible metadata 中；不可用数据必须明确标记，不得伪造 reset 或 percentage。短黄色竖线表示最新刷新失败、当前显示的是最后一个有效 snapshot；它不是选择状态或 usage progress。
 - 右侧 tile 是唯一的 session list。Viewport 显示三行，真实会话更多时滚动，并且不丢弃任何行。每行显示 provider mark、本地化 semantic state 与 identity。Hover 失败行的 error mark 会打开 accessible panel，显示经过长度限制、去除 terminal-control 序列的最终 PTY 输出（包括提供的 traceback）；Copy action 只复制该显示输出。若 PTY 没有可见输出，面板会如实显示这一点及实际退出码。UI 不会编造原因，也不会从 terminal text 推断 state。这里不显示 session duration 或 limit-style progress rail。
 - Clock 是主导的中间 tile，只渲染 `HH:MM`。旁边的 media tile 是自治 widget：点击选择或替换 image/GIF；删除操作留在 widget 内。
 - 底部 dock 始终包含 Terminal 与 Browser，以及 Settings 中启用的 agent provider。等宽列数由实际可见按钮计算，因此禁用 agent 不会留下空白单元格。新建和迁移后的 profile 只选择已检测到 CLI 的 agent。缺失的 agent 会从已保存的启动器与限额列表中移除；隐藏 launcher 按钮不会停止或删除现有 session。Settings 是独立 tile。Browser 打开或聚焦唯一的内置浏览器卡片，绝不启动外部浏览器。Agent badge 不会覆盖 Browser launcher 图标。
diff --git a/src/renderer/src/components/Toast.tsx b/src/renderer/src/components/Toast.tsx
index f25700112..4a69cf00e 100644
--- a/src/renderer/src/components/Toast.tsx
+++ b/src/renderer/src/components/Toast.tsx
@@ -1,12 +1,13 @@
 interface ToastProps {
   message: string | null;
-  /** One button next to the text (for example "Open settings"); the toast takes clicks only while it has one. */
+  /** One button next to the text (for example "Open settings"); the toast takes clicks only while it has one. The toast is
+   *  a polite live region that stays mounted, so a notice is read out without interrupting what is being spoken. */
   action?: { label: string; run(): void } | null;
 }
 
 export function Toast({ message, action }: ToastProps): React.JSX.Element {
   return (
-    <div className={`toast ${message ? "toast--visible" : ""}${message && action ? " toast--action" : ""}`} role={message && action ? "alert" : undefined}>
+    <div className={`toast ${message ? "toast--visible" : ""}${message && action ? " toast--action" : ""}`} role="status">
       {message}
       {message && action && <button className="toast__action" type="button" onClick={action.run}>{action.label}</button>}
     </div>
diff --git a/src/renderer/src/styles/app.css b/src/renderer/src/styles/app.css
index ed499a878..0ab5310c1 100644
--- a/src/renderer/src/styles/app.css
+++ b/src/renderer/src/styles/app.css
@@ -210,7 +210,7 @@ button { border: 0; }
 @container clock-tile (max-height: 170px) { .clock-tile__date { display: none; } }
 
 .agent-overview { padding: 13px; display: grid; align-content: start; gap: 9px; background: var(--surface); }
-.limits-list { grid-template-rows: repeat(var(--limit-rows, 3), minmax(0, 1fr)); }
+.limits-list { grid-template-rows: repeat(var(--limit-rows, 3), minmax(0, 1fr)); container: limits-list / inline-size; }
 .limits-list--dense { padding: 10px; gap: 6px; }
 .limits-list__empty { display: grid; place-items: center; padding: 22px; border-radius: 12px; color: var(--text-muted-on-dark); background: var(--surface-soft); text-align: center; font-size: 13px; font-weight: 800; line-height: 1.45; }
 .limit-row { position: relative; min-width: 0; min-height: 0; padding: 3px 14px; overflow: hidden; display: grid; grid-template-columns: 42px minmax(0, 1fr); align-items: center; column-gap: 14px; border-radius: 12px; color: var(--text); background: var(--surface-soft); container: limit-row / size; }
@@ -239,6 +239,32 @@ button { border: 0; }
   .limit-row__track { height: 4px; }
   .limit-row__empty { font-size: 11px; }
 }
+/* A narrow limits tile (up to four grid columns): the countdown stays beside the percentage and the used/left text
+   gets its own line below them, wrapping at its spaces instead of being cut off. The rail always stays in the row. */
+@container limits-list (max-width: 440px) {
+  .limit-row { padding: 2px 8px; grid-template-columns: 30px minmax(0, 1fr); grid-template-rows: minmax(0, 1fr); column-gap: 8px; }
+  .limit-row > .provider-icon--medium { --provider-icon-art-size: 22px; width: 30px; height: 30px; }
+  .limit-row__metric { max-height: 100%; grid-template-rows: minmax(0, 1fr) 4px; gap: 4px; }
+  .limit-row__summary { display: grid; grid-template-columns: minmax(0, 1fr) auto; align-content: end; align-items: baseline; gap: 2px 6px; }
+  .limit-row__summary > .limit-row__share { display: contents; }
+  .limit-row__summary strong { grid-area: 1 / 1; font-size: 20px; }
+  .limit-row__summary > .limit-row__countdown { grid-area: 1 / 2; font-size: 11px; }
+  .limit-row__share > span { grid-area: 2 / 1 / 3 / 3; font-size: 10px; line-height: 1.15; white-space: normal; }
+  .limit-row__track { height: 4px; }
+}
+@container limits-list (max-width: 440px) {
+  @container limit-row (max-height: 52px) {
+    .limit-row__metric { gap: 2px; }
+    .limit-row__summary { row-gap: 1px; }
+    .limit-row__summary strong { font-size: 14px; }
+    .limit-row__summary > .limit-row__countdown { font-size: 10px; }
+    .limit-row__share > span { font-size: 9px; line-height: 1.05; }
+  }
+  /* Too short for two text lines (a two-row tile with three providers): one line, shortened as in a wide row. */
+  @container limit-row (max-height: 44px) {
+    .limit-row__share > span { white-space: nowrap; }
+  }
+}
 @keyframes spin { to { transform: rotate(360deg); } }
 
 .usage-list { padding: 13px 9px 13px 13px; display: grid; grid-auto-rows: 68px; align-content: start; gap: 9px; overflow-y: auto; overscroll-behavior: contain; scrollbar-gutter: stable; scrollbar-width: thin; scrollbar-color: rgba(255,255,255,.28) transparent; background: var(--surface); }
diff --git a/tests/plugin-service-notice.test.mjs b/tests/plugin-service-notice.test.mjs
index 624a83b1f..dcbd14973 100644
--- a/tests/plugin-service-notice.test.mjs
+++ b/tests/plugin-service-notice.test.mjs
@@ -179,9 +179,14 @@ test("the toast shows the notice's button only when it has one", async (t) => {
   const plain = renderToStaticMarkup(createElement(Toast, { message: "Saved" }));
   assert.match(plain, /class="toast toast--visible"/u);
   assert.doesNotMatch(plain, /<button/u);
+  // A routine notice is announced politely, never as an alert, and the live region exists while the toast is hidden.
+  assert.match(renderToStaticMarkup(createElement(Toast, { message: null })), /^<div class="toast [^"]*" role="status">/u);
+  assert.match(plain, /role="status"/u);
   const text = pluginServiceNoticeText("native-code-off", "ru");
   const actionable = renderToStaticMarkup(createElement(Toast, { message: text, action: { label: pluginServiceNoticeText("open", "ru"), run: () => undefined } }));
   assert.match(actionable, /toast--action/u);
+  assert.match(actionable, /role="status"/u);
+  assert.doesNotMatch(actionable, /role="alert"/u);
   assert.match(actionable, /<button class="toast__action" type="button">Открыть настройки<\/button>/u);
   assert.ok(actionable.includes(text));
 });
diff --git a/tests/quota-used-left-labels.test.mjs b/tests/quota-used-left-labels.test.mjs
index acf4f57ac..b58b1bcfd 100644
--- a/tests/quota-used-left-labels.test.mjs
+++ b/tests/quota-used-left-labels.test.mjs
@@ -98,3 +98,16 @@ test("usage history says the latest quota observation is used, with what is left
     assert.ok(!/\{percent\}/u.test(text.latestValue + text.noObservationsInPeriod), "no bare percent template left");
   }
 });
+
+test("a narrow limits tile keeps the used and left text readable instead of cutting it off", async () => {
+  // Measured in a headless browser at two to four grid columns: one line clips "used · 91% left" (and the Russian
+  // text) behind the countdown. The narrow layout gives the text its own wrapping line and keeps the rail in the row.
+  const css = (await readFile(new URL("../src/renderer/src/styles/app.css", import.meta.url), "utf8")).replace(/\r\n/gu, "\n");
+  assert.match(css, /\.limits-list \{[^}]*container: limits-list \/ inline-size;/u);
+  const start = css.indexOf("@container limits-list (max-width: 440px) {");
+  assert.ok(start >= 0, "the limits tile has a narrow layout");
+  const narrow = css.slice(start, css.indexOf("\n}\n", start));
+  assert.match(narrow, /\.limit-row__summary > \.limit-row__share \{ display: contents; \}/u);
+  assert.match(narrow, /\.limit-row__share > span \{ grid-area: 2 \/ 1 \/ 3 \/ 3;[^}]*white-space: normal;/u);
+  assert.match(narrow, /\.limit-row \{[^}]*grid-template-rows: minmax\(0, 1fr\);/u, "the rail cannot be pushed out of the row");
+});