@armadra/agent 0.5.1 → 0.6.0

package/dist/permissions/pipeline.d.ts

@@ -57,7 +57,7 @@ export declare function planDecision(input: Pick<PermissionCheckInput, "toolName
     message?: string;
 };
 export declare const UNATTENDED_MESSAGE = "This tool call requires approval, but no one is available to approve it (unattended mode).";
-export declare const ALLOWLIST_MESSAGE = "Not in the allowlist (\u4E0D\u5728\u5141\u8BB8\u540D\u5355): permission mode \"allowlist\" only runs read-only tools and calls matched by an allow rule, and never asks.";
+export declare const ALLOWLIST_MESSAGE = "Not in the allowlist: permission mode \"allowlist\" only runs read-only tools and calls matched by an allow rule, and never asks.";
 interface SessionGrant {
     toolName: string;
     kind: "command" | "dir" | "any";

package/dist/permissions/pipeline.js

@@ -35,6 +35,7 @@
  */
 import { dirname, sep } from "node:path";
 import { isBackgroundJobQuery } from "../tools/background-jobs.js";
+import { memoryEffectivePermission } from "./memory-class.js";
 import { findAllowRule, findDenyRule, inputCommand, inputPath, normalizeCommand, splitShellSegments, } from "./rules.js";
 import { collectNestedCommands, matchDangerous } from "./dangerous.js";
 import { analyzeBashForAuto, secretReferenceReason } from "./auto-safe.js";
@@ -103,7 +104,7 @@ export function planDecision(input, planBash, cwd, projectRoot = cwd) {
     return { decision: "deny", message: PLAN_MODE_MESSAGE };
 }
 export const UNATTENDED_MESSAGE = "This tool call requires approval, but no one is available to approve it (unattended mode).";
-export const ALLOWLIST_MESSAGE = 'Not in the allowlist (不在允许名单): permission mode "allowlist" only runs read-only tools and calls matched by an allow rule, and never asks.';
+export const ALLOWLIST_MESSAGE = 'Not in the allowlist: permission mode "allowlist" only runs read-only tools and calls matched by an allow rule, and never asks.';
 /** 审计摘要：bash 取命令，带 path 的取路径，其它取工具名；单行、截断。 */
 function auditSummary(toolName, input) {
     const command = inputCommand(input);
@@ -115,6 +116,8 @@ function auditSummary(toolName, input) {
     return text.length > 80 ? `${text.slice(0, 79)}…` : text;
 }
 export function sessionGrantFor(toolName, input, cwd) {
+    if (toolName === "memory")
+        return { toolName, kind: "any", prefix: "" }; // [W6-M] 本会话允许全部写命令
     const command = inputCommand(input);
     if (command !== undefined) {
         const words = normalizeCommand(command).split(" ").slice(0, 2);
@@ -213,7 +216,11 @@ export class PermissionPipeline {
         }
         return verdict;
     }
-    evaluate(input) {
+    evaluate(raw) {
+        // [W6-C0] 权限类 memory 按命令折成 read / execute（memory-class.ts）
+        const input = raw.permission === "memory"
+            ? { ...raw, permission: memoryEffectivePermission(raw.input) }
+            : raw;
         const { toolName, permission } = input;
         // ① deny
         const layers = layeredInputs(toolName, input.input);

package/dist/permissions/preview.js

@@ -21,6 +21,7 @@ import { normalizeToLF, splitBom } from "../tools/edit-fuzzy.js";
 import { displayPath, resolvePath } from "../tools/paths.js";
 import { collectNestedCommands, commandWords, matchDangerous, shellWords } from "./dangerous.js";
 import { splitShellSegments } from "./rules.js";
+import { msg } from "../i18n/index.js";
 export const PREVIEW_MAX_ENTRIES = 2000;
 export const PREVIEW_BUDGET_MS = 200;
 /** 超过它的文件不读内容，只报大小。 */
@@ -91,9 +92,9 @@ class Collector {
     }
     finish(kind) {
         if (this.hidden > 0)
-            this.lines.push(`… 另 ${this.hidden} 处未列出`);
+            this.lines.push(msg().permissions.preview.moreHidden(this.hidden));
         if (this.timedOut) {
-            this.lines.push(`统计超时（> ${this.options.budgetMs ?? PREVIEW_BUDGET_MS} ms），实际范围可能更大`);
+            this.lines.push(msg().permissions.preview.timedOut(this.options.budgetMs ?? PREVIEW_BUDGET_MS));
             this.raise("warn");
         }
         const preview = { kind, lines: this.lines, severity: this.severity };
@@ -142,37 +143,38 @@ function tally(root, c) {
 }
 /** 统计一个路径：返回目标与「：」之后的说明。 */
 function inspect(abs, c) {
+    const m = msg().permissions.preview;
     const shown = displayPath(abs, c.root);
     const info = tryStat(abs);
     if (info === undefined)
-        return { target: { path: shown, exists: false }, text: "不存在" };
+        return { target: { path: shown, exists: false }, text: m.missing };
     if (info.isSymbolicLink())
-        return { target: { path: shown, exists: true }, text: "符号链接" };
+        return { target: { path: shown, exists: true }, text: m.symlink };
     if (!info.isDirectory()) {
         return {
             target: { path: shown, exists: true, bytes: info.size },
-            text: `文件，${formatBytes(info.size)}`,
+            text: m.file(formatBytes(info.size)),
         };
     }
     const t = tally(abs, c);
     const target = { path: `${shown}/`, exists: true, files: t.files };
     if (t.capped)
-        return { target, text: `目录，> ${c.maxEntries} 项` };
+        return { target, text: m.dirCapped(c.maxEntries) };
     target.bytes = t.bytes;
-    const partial = c.timedOut ? "（统计未完成）" : "";
-    return { target, text: `目录，${t.files} 个文件，${formatBytes(t.bytes)}${partial}` };
+    return { target, text: m.dir(t.files, formatBytes(t.bytes), c.timedOut) };
 }
 /** 一个路径参数一行；含通配 / 变量的原样显示不展开。 */
-function pathLine(verb, word, c, note = "") {
+function pathLine(verb, word, c, note) {
+    const m = msg().permissions.preview;
     if (UNEXPANDED.test(word)) {
-        c.target(`${verb} ${word}：含通配符或变量，未展开，实际范围可能更大`);
+        c.target(m.pathUnexpanded(verb, word));
         c.raise("warn");
         return;
     }
     const { target, text } = inspect(resolvePath(word, c.cwd), c);
     if (target.exists)
         c.raise("warn");
-    c.target(`${verb} ${target.path}：${text}${note}`, target);
+    c.target(m.pathTarget(verb, target.path, text, note), target);
 }
 /** 段里的 `>` / `>>` 重定向：返回目标与去掉重定向后的文本。 */
 export function splitRedirects(segment) {
@@ -250,7 +252,7 @@ function previewSegment(segment, c) {
     for (const { word, append } of targets) {
         if (NULL_DEVICES.has(word.toLowerCase()))
             continue;
-        pathLine(append ? "追加写入" : "覆盖写入", word, c);
+        pathLine(append ? "append" : "overwrite", word, c);
     }
     const argv = commandWords(rest);
     const name = basename(argv[0] ?? "");
@@ -261,20 +263,20 @@ function previewSegment(segment, c) {
     if (name === "rm" || name === "rmdir" || name === "unlink") {
         const paths = operands(argv);
         if (paths.length === 0)
-            c.target(`${name}：路径来自管道或展开，范围未知`);
+            c.target(msg().permissions.preview.rmUnknown(name));
         for (const p of paths)
-            pathLine("删除", p, c);
+            pathLine("delete", p, c);
     }
     else if (name === "mv") {
         const paths = operands(argv, ["-t", "-S", "--target-directory", "--suffix"]);
         const t = argv.indexOf("-t");
         const dest = t > 0 ? argv[t + 1] : paths.pop();
         for (const p of paths)
-            pathLine("移动", p, c);
+            pathLine("move", p, c);
         if (dest !== undefined && paths.length > 0) {
             const info = UNEXPANDED.test(dest) ? undefined : tryStat(resolvePath(dest, c.cwd));
-            const note = info?.isDirectory() ? "（已存在的目录，移入其中）" : "（已存在，将被覆盖）";
-            pathLine("移到", dest, c, info === undefined ? "" : note);
+            const note = info?.isDirectory() ? "intoDir" : "overwritten";
+            pathLine("moveTo", dest, c, info === undefined ? undefined : note);
         }
     }
     else if (name === "git") {
@@ -299,7 +301,7 @@ function previewGit(argv, c) {
             !args.some((a) => a === "-n" || a === "--dry-run" || /^-[a-z]*n/.test(a))) {
             const paths = operands(args, ["-e", "--exclude"]);
             for (const p of paths.length > 0 ? paths : ["."]) {
-                pathLine("git clean 范围", p, c, "（计数含已跟踪文件，实际只删未跟踪的）");
+                pathLine("gitClean", p, c, "gitCleanTracked");
             }
             // 与危险规则无关地标红：`git -C 目录 clean -f` 之类危险表认不出的写法也算
             if (args.some((a) => a === "--force" || /^-[A-Za-z]*f/.test(a)))
@@ -307,10 +309,10 @@ function previewGit(argv, c) {
         }
         else if (sub === "checkout" && args.includes("--")) {
             for (const p of args.slice(args.indexOf("--") + 1))
-                pathLine("丢弃改动", p, c);
+                pathLine("discard", p, c);
         }
         else if (sub === "reset" && args.includes("--hard")) {
-            c.lines.push("git reset --hard：丢弃工作区与暂存区的全部未提交改动");
+            c.lines.push(msg().permissions.preview.gitResetHard);
             c.raise("danger");
         }
     }
@@ -321,7 +323,7 @@ function previewGit(argv, c) {
 function previewBash(command, c, dangerous) {
     const hit = matchDangerous(command);
     if (hit !== undefined)
-        c.lines.push(`危险：${hit.description}`);
+        c.lines.push(msg().permissions.preview.dangerous(hit.description));
     if (hit !== undefined || dangerous)
         c.raise("danger");
     const nested = collectNestedCommands(command);
@@ -336,7 +338,7 @@ function previewBash(command, c, dangerous) {
     }
     c.cwd = start;
     if (nested.tooDeep) {
-        c.lines.push("嵌套过深，内层命令未展开");
+        c.lines.push(msg().permissions.preview.tooDeep);
         c.raise("warn");
     }
 }
@@ -347,55 +349,58 @@ function unread(abs, request, c, tool) {
     const readFiles = request.context?.readFiles;
     if (readFiles === undefined || readFiles.has(abs))
         return;
-    c.lines.push(`本会话未 read 过此文件，${tool} 会被拒绝（先 read）`);
+    c.lines.push(msg().permissions.preview.unread(tool));
     c.raise("warn");
 }
 function previewWrite(input, request, c) {
     const abs = resolvePath(String(input["path"] ?? ""), c.cwd);
     const content = typeof input["content"] === "string" ? input["content"] : "";
-    const next = `${countLines(content)} 行，${formatBytes(Buffer.byteLength(content, "utf8"))}`;
+    const m = msg().permissions.preview;
+    const next = m.size(countLines(content), formatBytes(Buffer.byteLength(content, "utf8")));
     const shown = displayPath(abs, c.root);
     const info = tryStat(abs, true);
     if (info === undefined) {
-        c.target(`新建 ${shown}：${next}`, { path: shown, exists: false });
+        c.target(m.writeNew(shown, next), { path: shown, exists: false });
         return;
     }
     if (info.isDirectory()) {
-        c.target(`${shown} 是目录，write 会失败`, { path: `${shown}/`, exists: true });
+        c.target(m.writeIsDir(shown), { path: `${shown}/`, exists: true });
         c.raise("warn");
         return;
     }
     const old = readSmall(abs, info);
-    const before = old === undefined ? formatBytes(info.size) : `${countLines(old)} 行，${formatBytes(info.size)}`;
-    c.target(`覆盖 ${shown}：${before} → ${next}`, { path: shown, exists: true, bytes: info.size });
+    const before = old === undefined ? formatBytes(info.size) : m.size(countLines(old), formatBytes(info.size));
+    c.target(m.writeOverwrite(shown, before, next), { path: shown, exists: true, bytes: info.size });
     unread(abs, request, c, "write");
 }
 function editFailure(message) {
+    const m = msg().permissions.preview;
     const many = /^(\S+) matches (\d+) times/.exec(message);
     if (many)
-        return `${many[1]} 匹配不唯一（${many[2]} 处）`;
+        return m.editNotUnique(many[1], many[2]);
     const missing = /^Could not find (\S+)/.exec(message);
     if (missing)
-        return `未找到 ${missing[1]}`;
+        return m.editNotFound(missing[1]);
     if (message.includes("overlap"))
-        return "多处修改的区间重叠";
+        return m.editOverlap;
     if (message.includes("no change"))
-        return "修改前后内容相同";
+        return m.editNoChange;
     return message;
 }
 function previewEdit(input, request, c) {
+    const m = msg().permissions.preview;
     const abs = resolvePath(String(input["path"] ?? ""), c.cwd);
     const shown = displayPath(abs, c.root);
     const info = tryStat(abs, true);
     if (info === undefined || !info.isFile()) {
-        c.target(`${shown} 不存在或不是文件，edit 会失败`, { path: shown, exists: info !== undefined });
+        c.target(m.editMissing(shown), { path: shown, exists: info !== undefined });
         c.raise("warn");
         return;
     }
     const target = { path: shown, exists: true, bytes: info.size };
     const raw = readSmall(abs, info);
     if (raw === undefined) {
-        c.target(`修改 ${shown}：${formatBytes(info.size)}，文件过大，未干跑`, target);
+        c.target(m.editTooLarge(shown, formatBytes(info.size)), target);
         unread(abs, request, c, "edit");
         return;
     }
@@ -403,19 +408,18 @@ function previewEdit(input, request, c) {
     const edits = Array.isArray(input["edits"]) ? input["edits"] : [];
     try {
         const plan = planEdits(content, edits, input["replaceAll"] === true);
-        const fuzzy = plan.fuzzy ? "（空白 / 引号归一后匹配）" : "";
-        c.target(`修改 ${shown}：${plan.replacements} 处替换${fuzzy}`, target);
+        c.target(m.editPlan(shown, plan.replacements, plan.fuzzy === true), target);
         edits.slice(0, 5).forEach((e, i) => {
-            c.lines.push(`  #${i + 1} −${countLines(e.oldText)}/+${countLines(e.newText)} 行`);
+            c.lines.push(m.editOp(i + 1, countLines(e.oldText), countLines(e.newText)));
         });
         if (edits.length > 5)
-            c.lines.push(`  … 另 ${edits.length - 5} 处`);
-        c.lines.push(`  共 ${countLines(content)} → ${countLines(plan.result)} 行`);
+            c.lines.push(m.editMore(edits.length - 5));
+        c.lines.push(m.editTotal(countLines(content), countLines(plan.result)));
     }
     catch (err) {
         if (!(err instanceof EditError))
             throw err;
-        c.target(`修改 ${shown}：干跑失败——${editFailure(err.message)}`, target);
+        c.target(m.editDryRunFailed(shown, editFailure(err.message)), target);
         c.raise("warn");
     }
     unread(abs, request, c, "edit");
@@ -449,7 +453,7 @@ export function previewAction(request, options) {
         }
     }
     catch (err) {
-        c.lines.push(`预览失败：${err instanceof Error ? err.message : String(err)}`);
+        c.lines.push(msg().permissions.preview.failed(err instanceof Error ? err.message : String(err)));
     }
     return c.finish(kind);
 }
@@ -459,5 +463,8 @@ export function previewDisplayLines(preview, max = 10) {
         return [];
     if (preview.lines.length <= max)
         return preview.lines;
-    return [...preview.lines.slice(0, max - 1), `… 另 ${preview.lines.length - max + 1} 行`];
+    return [
+        ...preview.lines.slice(0, max - 1),
+        msg().permissions.preview.moreLines(preview.lines.length - max + 1),
+    ];
 }

package/dist/permissions/rules.js

@@ -18,6 +18,7 @@ import { AmaError } from "../errors.js";
 import { PERMISSION_MODES_STRICT_FIRST } from "./types.js";
 import { globBody } from "../tools/glob.js";
 import { expandHome, resolvePath, toPosix } from "../tools/paths.js";
+import { memoryRuleMatches } from "./memory-class.js";
 /** 内置缺省 deny 表（用户可经 `builtinDeny` 选项移除）。 */
 export const BUILTIN_DENY_RULES = [
     "write(**/.git/**)",
@@ -147,6 +148,8 @@ function matchesSubject(rule, toolName, input, cwd, command) {
         return false;
     if (rule.pattern === undefined)
         return true;
+    if (toolName === "memory")
+        return memoryRuleMatches(rule.pattern, input); // [W6-M] 逻辑路径 / 命令名
     if (command !== undefined)
         return wildcardToRegExp(rule.pattern).test(command);
     const abs = inputPath(toolName, input, cwd);
@@ -154,7 +157,7 @@ function matchesSubject(rule, toolName, input, cwd, command) {
 }
 /** 第一条命中的 deny 规则。 */
 export function findDenyRule(rules, toolName, input, cwd) {
-    const command = inputCommand(input);
+    const command = toolName === "memory" ? undefined : inputCommand(input);
     for (const rule of rules) {
         if (rule.effect !== "deny")
             continue;
@@ -172,7 +175,7 @@ export function findDenyRule(rules, toolName, input, cwd) {
 /** 覆盖本次调用的 allow 规则（复合命令返回第一段的覆盖者）；不覆盖返回 undefined。 */
 export function findAllowRule(rules, toolName, input, cwd) {
     const allows = rules.filter((r) => r.effect === "allow");
-    const command = inputCommand(input);
+    const command = toolName === "memory" ? undefined : inputCommand(input);
     if (command === undefined)
         return allows.find((r) => matchesSubject(r, toolName, input, cwd));
     const unconditional = allows.find((r) => r.pattern === undefined && toolNameMatches(r.tool, toolName));

package/dist/permissions/types.d.ts

@@ -79,6 +79,8 @@ export interface ApprovalRequestContext {
      * 无人值守拒绝），auto 分类器与模型都不参与；RPC `permission_request` 原样带出。
      */
     origin?: ExternalPermissionOrigin;
+    /** [W6-C0] 触发审批的工具调用 id（`gateToolCall` 填；轨迹据此算 `approvalMs`）。 */
+    toolCallId?: string;
 }
 /** [W5-C0] 外部 Agent 权限选项的种类（ACP 词汇）。 */
 export type ExternalPermissionOptionKind = "allow_once" | "allow_always" | "reject_once" | "reject_always";
@@ -109,6 +111,8 @@ export interface PermissionRequestContext {
     taskId?: string;
     /** 外部 Agent 的权限请求（对话框标 `[claude · 会话 abc1]`）。 */
     origin?: ExternalPermissionOrigin;
+    /** [W6-C0] 触发审批的工具调用 id（本会话的 toolCallId；外部 Agent 的请求不带）。 */
+    toolCallId?: string;
 }
 /** [W3-C0] 预览涉及的路径（bash 的 rm / mv / 重定向目标，write / edit 的目标文件）。 */
 export interface ActionPreviewTarget {

package/dist/plan/store.js

@@ -9,6 +9,7 @@
 import { mkdirSync, writeFileSync } from "node:fs";
 import { isAbsolute, join, relative, resolve } from "node:path";
 import { TODO_CUSTOM_TYPE, parseTodoState } from "../tools/todo.js";
+import { msg } from "../i18n/index.js";
 export const PLAN_CUSTOM_TYPE = "ama.plan";
 export const PLAN_STATE_CUSTOM_TYPE = "ama.plan_state";
 function customData(entry, customType) {
@@ -76,7 +77,7 @@ export function resolvePlanDirectory(configured, projectRoot, dataDir) {
     if (rel.startsWith("..") || isAbsolute(rel)) {
         return {
             dir: fallback,
-            warning: `plan.directory ${configured} 不在项目根 ${projectRoot} 之内，计划文件改写到 ${fallback}`,
+            warning: msg().session.plan.directoryOutside(configured, projectRoot, fallback),
         };
     }
     return { dir };

package/dist/rpc.d.ts

@@ -16,6 +16,9 @@
  *   get_tasks / get_agents`（返回形状见 `RpcW5Results`），客户端能力 `plans`（声明后计划审批交客户端）；
  *   新事件由 `SessionEvent` 派生自动包含。命令实现归 W5-F（C0 时返回 `not_implemented`），
  *   `RPC_PROTOCOL_VERSION` 不变。
+ * - [W6-C0] 第六波（docs/wave6-plan.md §2.6、§4.4）：命令 `get_trace`（参数 `RpcGetTraceParams`、返回
+ *   `RpcW6Results`，W6-T2 实现，之前回 `not_implemented`）；事件 `quota_update`；`permission_request.context`
+ *   可带 `toolCallId`；`keySource` 可为 `oauth`。`RPC_PROTOCOL_VERSION` 不变。
  */
 import type { AssistantEvent, ImageBlock, ModelThinkingLevel, Usage } from "./ai/types.js";
 import type { PlanData, PlanDecisionKind, QueueMode, SessionEvent, TodoItemView } from "./agent/types.js";
@@ -23,6 +26,8 @@ import type { AgentInfo } from "./agents/types.js";
 import type { TaskInfo } from "./tools/types.js";
 import type { RewindRequest } from "./checkpoints/types.js";
 import type { ApprovalDecision, PermissionMode } from "./permissions/types.js";
+import type { TracePreview } from "./trace/preview.js";
+import type { Trace, TraceSubagentNode } from "./trace/types.js";
 export type { SessionEvent } from "./agent/types.js";
 export declare const RPC_PROTOCOL_VERSION: 1;
 /** `plans`（W5-C0）：客户端声明后计划审批交给客户端（`plan_proposed` → `plan_response`）。 */
@@ -133,6 +138,38 @@ export interface RpcCommandMap {
     get_todos: NoParams;
     get_tasks: NoParams;
     get_agents: NoParams;
+    get_trace: RpcGetTraceParams;
+}
+/** [W6-C0] `get_trace` 的参数。 */
+export interface RpcGetTraceParams {
+    /** 缺省 leaf。 */
+    branch?: "leaf" | "all";
+    /** 尾部优先的回合数，缺省 50，上限 500。 */
+    turnLimit?: number;
+    /** 回合游标（turn id），向前翻页。 */
+    before?: string;
+    /** 条目游标（同 `get_entries.since`）：只返回从包含该条目的回合起的回合。 */
+    since?: string;
+    /** 该任务的子轨迹（ama 子会话或外部骨架）。 */
+    taskId?: string;
+    /** 缺省 none（只有结构与数字）。 */
+    content?: "none" | "preview";
+}
+/** [W6-C0] 第六波命令成功时的 `data` 形状；错误 `task_not_found` / `invalid_arguments`。 */
+export interface RpcW6Results {
+    get_trace: {
+        trace: Trace;
+        hasMoreBefore: boolean;
+        cursor: {
+            before?: string;
+            since: string;
+        };
+        leafId: string | null;
+        /** [W6-T2] `taskId` 时：子 Agent 节点本身（不含 `child`；外部 Agent 的骨架在 `external`）。 */
+        task?: TraceSubagentNode;
+        /** [W6-T2] `content:"preview"` 时：`<kind>:<id>` → 已脱敏、已截断的正文预览（只含窗口内节点）。 */
+        previews?: Record<string, TracePreview>;
+    };
 }
 /** [W5-C0] 计划审批的回答（与 `permission_response` 同构）。 */
 export interface RpcPlanResponse {
@@ -179,7 +216,8 @@ export interface RpcModelInfo {
     name: string;
     /** 只报有无，不回密钥。 */
     hasKey: boolean;
-    keySource: "cli" | "auth-file" | "config" | "env" | "none";
+    /** [W6-C0] 加 `oauth`（ChatGPT 登录，W6-O）。 */
+    keySource: "cli" | "auth-file" | "config" | "env" | "oauth" | "none";
     contextWindow?: number;
     maxTokens: number;
     reasoning: boolean;

package/dist/rpc.js

@@ -16,5 +16,8 @@
  *   get_tasks / get_agents`（返回形状见 `RpcW5Results`），客户端能力 `plans`（声明后计划审批交客户端）；
  *   新事件由 `SessionEvent` 派生自动包含。命令实现归 W5-F（C0 时返回 `not_implemented`），
  *   `RPC_PROTOCOL_VERSION` 不变。
+ * - [W6-C0] 第六波（docs/wave6-plan.md §2.6、§4.4）：命令 `get_trace`（参数 `RpcGetTraceParams`、返回
+ *   `RpcW6Results`，W6-T2 实现，之前回 `not_implemented`）；事件 `quota_update`；`permission_request.context`
+ *   可带 `toolCallId`；`keySource` 可为 `oauth`。`RPC_PROTOCOL_VERSION` 不变。
  */
 export const RPC_PROTOCOL_VERSION = 1;

package/dist/sandbox/bash.js

@@ -13,6 +13,7 @@
 import { homedir, tmpdir } from "node:os";
 import { isAbsolute, join, resolve } from "node:path";
 import { wrapCommand } from "./wrap.js";
+import { msg } from "../i18n/index.js";
 export const DEFAULT_BASH_SANDBOX_MODE = "off";
 export const DEFAULT_SANDBOX_NETWORK = "deny";
 export const NO_BASH_SANDBOX = Object.freeze({
@@ -21,12 +22,16 @@ export const NO_BASH_SANDBOX = Object.freeze({
         kind: "none",
         isolatesNetwork: false,
         restrictsWrites: false,
-        detail: "未配置",
+        get detail() {
+            return msg().session.sandbox.notConfigured;
+        },
     }),
     network: DEFAULT_SANDBOX_NETWORK,
     writable: [],
     hidden: [],
-    detail: "未配置",
+    get detail() {
+        return msg().session.sandbox.notConfigured;
+    },
 });
 /** 用户主目录下的凭据路径（与 permissions/protected.ts 的机密路径同一批）。 */
 export const HIDDEN_HOME_PATHS = [
@@ -66,16 +71,14 @@ export function resolveBashSandbox(config, deps) {
     const active = mode === "auto" && usable && status.restrictsWrites;
     let detail;
     if (mode === "off")
-        detail = "关闭（sandbox.bash: off）";
+        detail = msg().session.sandbox.bashOff;
     else if (!active)
         detail =
             status.kind === "unshare"
-                ? "不可用：unshare 只隔离网络、不能限制写入"
-                : `不可用：${status.detail}`;
+                ? msg().session.sandbox.bashUnshareOnly
+                : msg().session.sandbox.bashUnavailable(status.detail);
     else
-        detail =
-            `${status.kind}，网络 ${network}，可写：工作区、临时目录、输出目录` +
-                (writable.length > 0 ? `、${writable.join("、")}` : "");
+        detail = msg().session.sandbox.bashActive(status.kind, network, writable);
     return { active, status, network, writable, hidden, detail };
 }
 /** 一次 bash 调用的沙箱策略（路径未 realpath，wrapCommand 再解析）。 */

package/dist/sandbox/detect.js

@@ -13,11 +13,14 @@ import { spawnSync } from "node:child_process";
 import { accessSync, constants } from "node:fs";
 import { posix, win32 } from "node:path";
 import { buildBwrapArgs, buildSbplProfile, buildUnshareArgs, } from "./profile.js";
+import { msg } from "../i18n/index.js";
 export const NO_OS_SANDBOX = Object.freeze({
     kind: "none",
     isolatesNetwork: false,
     restrictsWrites: false,
-    detail: "没有可用的操作系统沙箱",
+    get detail() {
+        return msg().session.sandbox.noOsSandbox;
+    },
 });
 export const SANDBOX_EXEC_PATH = "/usr/bin/sandbox-exec";
 export const PROBE_TIMEOUT_MS = 5000;
@@ -67,10 +70,10 @@ export function resolveSandboxEnabled(configured, env = process.env) {
 /** 不缓存的探测（测试注入 deps）。 */
 export function probeOsSandbox(enabled, deps = REAL_PROBE_DEPS) {
     if (enabled === "off")
-        return { ...NO_OS_SANDBOX, detail: "已关闭（sandbox.enabled: off 或 AMA_SANDBOX=off）" };
+        return { ...NO_OS_SANDBOX, detail: msg().session.sandbox.disabled };
     if (deps.platform === "darwin") {
         if (!deps.isExecutable(SANDBOX_EXEC_PATH))
-            return { ...NO_OS_SANDBOX, detail: `没有 ${SANDBOX_EXEC_PATH}` };
+            return { ...NO_OS_SANDBOX, detail: msg().session.sandbox.missing(SANDBOX_EXEC_PATH) };
         const code = deps.run(SANDBOX_EXEC_PATH, [
             "-p",
             buildSbplProfile(PROBE_POLICY),
@@ -86,7 +89,7 @@ export function probeOsSandbox(enabled, deps = REAL_PROBE_DEPS) {
             };
         return {
             ...NO_OS_SANDBOX,
-            detail: `sandbox-exec 探针失败（${code === null ? "无法启动" : `退出码 ${code}`}；可能已在别的沙箱里）`,
+            detail: msg().session.sandbox.sandboxExecFailed(code),
         };
     }
     if (deps.platform === "linux") {
@@ -102,10 +105,10 @@ export function probeOsSandbox(enabled, deps = REAL_PROBE_DEPS) {
                     restrictsWrites: true,
                     detail: "Linux bubblewrap",
                 };
-            failures.push(`bwrap 探针失败（${code === null ? "无法启动" : `退出码 ${code}`}）`);
+            failures.push(msg().session.sandbox.bwrapFailed(code));
         }
         else
-            failures.push("没有 bwrap");
+            failures.push(msg().session.sandbox.noBwrap);
         const unshare = findExecutable("unshare", deps.env, deps.isExecutable, deps.platform);
         if (unshare !== undefined) {
             const code = deps.run(unshare, [...buildUnshareArgs(), "true"]);
@@ -115,15 +118,15 @@ export function probeOsSandbox(enabled, deps = REAL_PROBE_DEPS) {
                     path: unshare,
                     isolatesNetwork: true,
                     restrictsWrites: false,
-                    detail: `Linux unshare -r -n（只隔离网络；${failures.join("，")}）`,
+                    detail: msg().session.sandbox.unshareOnly(failures),
                 };
-            failures.push(`unshare 探针失败（${code === null ? "无法启动" : `退出码 ${code}`}；可能不允许非特权用户命名空间）`);
+            failures.push(msg().session.sandbox.unshareFailed(code));
         }
         else
-            failures.push("没有 unshare");
-        return { ...NO_OS_SANDBOX, detail: failures.join("，") };
+            failures.push(msg().session.sandbox.noUnshare);
+        return { ...NO_OS_SANDBOX, detail: msg().session.sandbox.failures(failures) };
     }
-    return { ...NO_OS_SANDBOX, detail: `${deps.platform} 上没有操作系统沙箱实现` };
+    return { ...NO_OS_SANDBOX, detail: msg().session.sandbox.unsupportedPlatform(deps.platform) };
 }
 const cache = new Map();
 let configured;

package/dist/sdk.d.ts

@@ -13,6 +13,7 @@
  * - [W5-F] 计划（docs/plan.md）：`CreateSessionOptions.plan`（plan.* 配置 + `onProposed` 审批回调）；
  *   返回的会话带 `plan.current() / respond() / todos()`。没有 `onProposed` 时按 `plan.unattended`
  *   （缺省 stop：计划落盘后停下，不替人批准）。
+ * - [W6-C0] `language`（两个入口都有）：界面语言，跟随宿主界面（docs/i18n.md）；进程级，`AMA_LANG` 仍优先。
  */
 import type { ApiRegistry } from "./ai/apis/api.js";
 import type { ModelThinkingLevel, ProviderData } from "./ai/types.js";
@@ -23,7 +24,9 @@ import type { PlanConfig } from "./config/types-w5.js";
 import { type LogFn } from "./cli/compose-session.js";
 import { type ComposeOptions } from "./cli/compose.js";
 import type { Runtime } from "./cli/runtime.js";
-import { type AmaConfig, type ToolsPresetInput } from "./config/types.js";
+import { type AmaConfig, type ProfileMemoryOptions, type ToolsPresetInput } from "./config/types.js";
+import type { Trace, TraceOptions } from "./trace/types.js";
+import { type Locale } from "./i18n/index.js";
 import type { HookConfig } from "./hooks/types.js";
 import type { InstructionSource } from "./host/types.js";
 import type { ApprovalDecision, ApprovalRequest, PermissionMode } from "./permissions/types.js";
@@ -53,6 +56,10 @@ export interface RuntimeOptions {
     stderr?: (text: string) => void;
     /** 组装根选项：追加供应商 / 协议 / 工具 / 工具工厂。 */
     compose?: ComposeOptions;
+    /** [W6-C0] 界面语言（等价 `--lang`）；进程级。 */
+    language?: Locale;
+    /** [W6-C0] 记忆开关（等价 `--memory` / `--no-memory`；W6-M 实现）。 */
+    memory?: boolean;
 }
 export declare function createRuntime(options?: RuntimeOptions): Promise<Runtime>;
 /** [W5-F] 计划：类型与 RPC 同形（`plan_proposed` / `plan_response`）。 */
@@ -74,6 +81,8 @@ export interface SessionPlanApi {
 }
 export type SdkAgentSession = AgentSessionImpl & {
     readonly plan: SessionPlanApi;
+    /** [W6-C0] 本会话的轨迹（[W6-T2] 实现，见 trace/query-session.ts）。 */
+    trace?(options?: TraceOptions): Trace;
 };
 export type SessionAuth = {
     kind: "file";
@@ -131,5 +140,12 @@ export interface CreateSessionOptions {
     unattended?: boolean;
     onWarning?: (message: string) => void;
     log?: LogFn;
+    /** [W6-C0] 界面语言（跟随宿主界面）；进程级，`AMA_LANG` 仍优先。不影响发给模型的文本。 */
+    language?: Locale;
+    /**
+     * [W6-C0] 记忆（W6-M 实现，D11）：缺省禁用；`enabled: true` 时 `dir` 必填（按工作空间隔离的绝对路径），
+     * 作用域只有 workspace，不读用户级记忆。
+     */
+    memory?: ProfileMemoryOptions;
 }
 export declare function createAgentSession(options?: CreateSessionOptions): Promise<SdkAgentSession>;