优化: 对话执行轨迹聚合与工具卡交互

前端聚合当前轮次工具调用数,替代每轮清零的完成计数,进度文案改轮次+累计口径
完成聚合语义由执行轨迹卡承接,工具卡复读修复与默认折叠收敛
流式与工具事件配套调整,新增轮次轨迹收集 composable

src/i18n/en/ai.ts

@@ -52,10 +52,25 @@ export default {
     unarchiveAction: 'unarchive',
     pinAction: 'pin',
     unpinAction: 'unpin',
-    // Agentic loop progress bar copy
-    // Note: max round / completed tool count are not surfaced by backend this round;
-    // template conditionally omits them. Add *WithMax keys once backend exposes them.
-    agenticProgress: '🔄 Round {round} · ⏳{pending} pending',
-    agenticProgressNoPending: '🔄 Round {round} · ✅{completed} tools done',
+    // Agentic loop progress bar copy (status semantics: round N · M calls total · running/pending)
+    // total is aggregated on the frontend from current-turn toolCalls (useTurnTrace), not a backend field
+    // Note: max round is not surfaced by backend; template conditionally omits it.
+    agenticProgress: 'Round {round} · {total} calls total · ⏳{pending} pending',
+    agenticProgressNoPending: 'Round {round} · {total} calls total · running',
+    // Shared semantics for execution trace card / live step summary (A) and aggregate group row (B)
+    trace: {
+      title: 'Execution Trace',
+      calls: '{n} calls',
+      ok: '{n} ok',
+      fail: '{n} failed',
+      rejected: '{n} rejected',
+      duration: 'total {time}',
+      expand: 'Expand trace',
+      collapse: 'Collapse trace',
+      processOnly: 'Process log',
+      stepDone: '✓ {n} calls done',
+      stepRunning: 'running {name}',
+      stepPending: '⏳ {n} pending approval',
+    },
   },
 }

src/i18n/en/aiChat.ts

@@ -190,7 +190,7 @@ export default {
     // M5:path deny second confirmation (deny is irreversible — tool returns Err, loop continues without retry; asymmetry with approve, prevents mis-clicks)
     dirAuthDenyConfirm: 'Deny authorization? The tool will fail immediately and will not be retried this round.',
     // Persistent bypass banner shown at the top of the chat area while "trust all directories" is on
-    pathAuthBypassBanner: 'Authorization bypassed: AI can access files directly',
+    pathAuthBypassBanner: 'Authorization fully bypassed (including sensitive directories): AI can access any file directly',
 
     // ── Input Augmentation layer: mention/skill injection feedback ──
     // search_files blind search denied by whitelist fallback (no auth dialog; prompt user to use @mention or absolute path)