feat(hermes): add execution limits config form

src/locales/modules/engine.js

@@ -516,6 +516,28 @@ export default {
   hermesStreamingConfigFreshFinalAfterSeconds: _('长回复完成新消息时间（秒）', 'Fresh final message after (s)', '長回覆完成新訊息時間（秒）'),
   hermesStreamingConfigCursor: _('生成中标记', 'In-progress marker', '生成中標記'),
   hermesStreamingConfigFootnote: _('这里写入顶层 streaming 配置；旧版 gateway.streaming、display.streaming 和其他高级字段会保留在 raw YAML 中。将“长回复完成新消息时间”设为 0 可关闭完成后新消息。', 'This writes the top-level streaming settings. Legacy gateway.streaming, display.streaming, and other advanced fields are preserved in raw YAML. Set fresh final message time to 0 to disable the final follow-up message.', '這裡寫入頂層 streaming 設定；舊版 gateway.streaming、display.streaming 和其他進階欄位會保留在 raw YAML 中。將「長回覆完成新訊息時間」設為 0 可關閉完成後新訊息。'),
+  hermesExecutionLimitsTitle: _('执行与委派限制', 'Execution and delegation limits', '執行與委派限制'),
+  hermesExecutionLimitsDesc: _('控制 execute_code 沙箱和 delegate_task 子 Agent 的超时、并发、深度与自动批准策略，降低长跑任务失控和成本放大的风险。', 'Control execute_code sandbox and delegate_task child-agent timeouts, concurrency, depth, and auto-approval policy to reduce runaway long-run tasks and cost amplification.', '控制 execute_code 沙箱和 delegate_task 子 Agent 的逾時、並發、深度與自動批准策略，降低長跑任務失控和成本放大的風險。'),
+  hermesExecutionLimitsStatusReady: _('结构化配置', 'structured settings', '結構化設定'),
+  hermesExecutionLimitsSave: _('保存执行限制', 'Save execution limits', '儲存執行限制'),
+  hermesExecutionLimitsSaveSuccess: _('执行与委派限制已保存，建议重启 Hermes Gateway 生效', 'Execution and delegation limits saved. Restart Hermes Gateway to take effect.', '執行與委派限制已儲存，建議重啟 Hermes Gateway 生效'),
+  hermesExecutionLimitsLoadFailed: _('加载执行与委派限制失败', 'Load execution and delegation limits failed', '載入執行與委派限制失敗'),
+  hermesExecutionLimitsSaveFailed: _('保存执行与委派限制失败', 'Save execution and delegation limits failed', '儲存執行與委派限制失敗'),
+  hermesExecutionLimitsCodeTitle: _('代码执行沙箱', 'Code execution sandbox', '程式碼執行沙箱'),
+  hermesExecutionLimitsCodeMode: _('执行模式', 'Execution mode', '執行模式'),
+  hermesExecutionLimitsCodeMode_project: _('项目环境', 'Project environment', '專案環境'),
+  hermesExecutionLimitsCodeMode_strict: _('严格隔离', 'Strict isolation', '嚴格隔離'),
+  hermesExecutionLimitsCodeTimeout: _('脚本超时（秒）', 'Script timeout (s)', '腳本逾時（秒）'),
+  hermesExecutionLimitsCodeMaxToolCalls: _('最大工具调用数', 'Max tool calls', '最大工具呼叫數'),
+  hermesExecutionLimitsDelegationTitle: _('子 Agent 委派', 'Child-agent delegation', '子 Agent 委派'),
+  hermesExecutionLimitsDelegationMaxIterations: _('每个子任务最大轮数', 'Max turns per child', '每個子任務最大輪數'),
+  hermesExecutionLimitsDelegationChildTimeout: _('每个子任务超时（秒）', 'Child timeout (s)', '每個子任務逾時（秒）'),
+  hermesExecutionLimitsDelegationMaxConcurrent: _('最大并发子任务', 'Max concurrent children', '最大並發子任務'),
+  hermesExecutionLimitsDelegationMaxSpawnDepth: _('委派深度上限', 'Spawn depth limit', '委派深度上限'),
+  hermesExecutionLimitsDelegationOrchestratorEnabled: _('允许中间协调 Agent', 'Allow orchestrator children', '允許中間協調 Agent'),
+  hermesExecutionLimitsDelegationInheritMcp: _('保留父任务 MCP 工具集', 'Inherit parent MCP toolsets', '保留父任務 MCP 工具集'),
+  hermesExecutionLimitsDelegationAutoApprove: _('自动批准子任务危险命令', 'Auto-approve child dangerous commands', '自動批准子任務危險命令'),
+  hermesExecutionLimitsFootnote: _('默认会拒绝子任务危险命令审批，适合交互式和长跑任务。只有在完全信任无人值守环境时才开启自动批准。', 'By default, dangerous-command approvals from child agents are auto-denied, which fits interactive and long-running tasks. Enable auto-approval only in fully trusted unattended environments.', '預設會拒絕子任務危險命令審批，適合互動式和長跑任務。只有在完全信任無人值守環境時才啟用自動批准。'),
   hermesCompressionTitle: _('上下文压缩', 'Context compression', '上下文壓縮'),
   hermesCompressionDesc: _('控制长对话何时触发压缩、压缩目标和保留范围，降低上下文过长导致的失败与费用浪费。', 'Control when long conversations are compressed, the target size, and protected message ranges to reduce failures and wasted cost from oversized context.', '控制長對話何時觸發壓縮、壓縮目標和保留範圍，降低上下文過長導致的失敗與費用浪費。'),
   hermesCompressionStatusReady: _('结构化配置', 'structured settings', '結構化設定'),