@codexhost/cli-win32-arm64 0.13.2 → 0.13.3

package/app/plugins/workbuddy/plugin.mjs

@@ -14604,6 +14604,15 @@ var harnessDisplaySetSchema = external_exports.strictObject({
   initializeOnly: external_exports.boolean().optional()
 });
 
+// ../../shared-contracts/dist/harness-presentation.js
+var localeSchema = external_exports.string().max(64).regex(/^[a-z]{2,3}(?:-[A-Za-z0-9]{2,8})*$/u);
+var displayText = (maximum) => external_exports.string().min(1).max(maximum).refine((text2) => text2.trim().length > 0);
+var harnessLocalizationsSchema = external_exports.record(localeSchema, external_exports.object({
+  label: displayText(256).optional(),
+  description: displayText(1024).optional()
+}).strict()).refine((entries) => Object.keys(entries).length <= 16, "Too many locales");
+var harnessLocalizedTextSchema = external_exports.record(localeSchema, displayText(4096)).refine((entries) => typeof entries.en === "string", "English fallback is required").refine((entries) => Object.keys(entries).length <= 16, "Too many locales");
+
 // ../../shared-contracts/dist/model-price-overrides.js
 var usdPerMillionTokens = external_exports.number().finite().nonnegative();
 var modelPriceOverrideSchema = external_exports.strictObject({
@@ -14940,8 +14949,24 @@ var threadUsageSnapshotSchema = external_exports.object({
   }
 });
 var usagePercentSchema = external_exports.number().finite().min(0).max(100);
+var accountCreditsPeriodSchema = external_exports.enum([
+  "weekly",
+  "monthly",
+  "five_hour",
+  "seven_day",
+  "unknown"
+]);
+var accountCreditsScopeSchema = external_exports.object({
+  id: external_exports.string().min(1).max(256),
+  label: external_exports.string().min(1).max(256),
+  localizations: harnessLocalizationsSchema.optional()
+}).strict();
 var accountCreditsProductUsageSchema = external_exports.object({
   product: external_exports.string().min(1),
+  /** Native period and scope, never inferred from the display name. */
+  periodType: accountCreditsPeriodSchema.optional(),
+  scope: accountCreditsScopeSchema.optional(),
+  localizations: harnessLocalizationsSchema.optional(),
   used: external_exports.number().finite().nonnegative().optional(),
   // Zero is a real empty cap, not an absent field.
   limit: external_exports.number().finite().nonnegative().optional(),
@@ -14961,9 +14986,11 @@ var accountCreditsSnapshotSchema = external_exports.object({
   unit: external_exports.string().min(1).max(32).optional(),
   /** Native label when the primary limit is scoped to a model or product group. */
   label: external_exports.string().min(1).optional(),
+  scope: accountCreditsScopeSchema.optional(),
+  localizations: harnessLocalizationsSchema.optional(),
   usedPercent: usagePercentSchema,
   resetsAt: external_exports.string().min(1).optional(),
-  periodType: external_exports.enum(["weekly", "monthly", "five_hour", "seven_day", "unknown"]),
+  periodType: accountCreditsPeriodSchema,
   productUsage: external_exports.array(accountCreditsProductUsageSchema).min(1).optional(),
   resetCredits: accountResetCreditsSchema.optional()
 }).strict();
@@ -14974,7 +15001,9 @@ var threadUsageInspectionParamsSchema = external_exports.object({
 var threadUsageInspectionSchema = external_exports.object({
   threadId: hostThreadIdSchema,
   usage: threadUsageSnapshotSchema.nullable(),
-  accountCredits: accountCreditsSnapshotSchema.optional()
+  accountCredits: accountCreditsSnapshotSchema.optional(),
+  /** Whether this source can provide cached account quota independently of usage. */
+  accountCreditsSupported: external_exports.boolean().optional()
 }).strict();
 
 // ../../shared-contracts/dist/harness-accounts.js
@@ -15101,7 +15130,8 @@ var harnessPermissionModeSchema = external_exports.object({
   id: harnessPermissionModeIdSchema,
   label: nonBlankTextSchema.max(HARNESS_PERMISSION_MODE_LABEL_MAX_LENGTH),
   description: nonBlankTextSchema.max(HARNESS_PERMISSION_MODE_DESCRIPTION_MAX_LENGTH).optional(),
-  dangerous: external_exports.boolean().optional()
+  dangerous: external_exports.boolean().optional(),
+  localizations: harnessLocalizationsSchema.optional()
 }).strict();
 var harnessPermissionModeCatalogSchema = external_exports.object({
   modes: external_exports.array(harnessPermissionModeSchema).min(1).max(HARNESS_PERMISSION_MODE_CATALOG_MAX_LENGTH),
@@ -15488,6 +15518,8 @@ var harnessInstallationStateSchema = external_exports.object({
   // Adapter-owned diagnostic text; UI uses messageCode rather than displaying it verbatim.
   message: external_exports.string().max(2048).optional(),
   messageCode: external_exports.string().min(1).max(128).optional(),
+  /** Safe plugin-owned explanation, distinct from raw diagnostic message. */
+  notice: harnessLocalizedTextSchema.optional(),
   latestVersionKind: external_exports.enum(["unknown", "tracking-branch"]).optional()
 }).strict();
 
@@ -15614,6 +15646,7 @@ var harnessCommandDescriptorSchema = external_exports.object({
   invocation: commandInvocationSchema,
   label: commandLabelSchema,
   description: commandDescriptionSchema.optional(),
+  localizations: harnessLocalizationsSchema.optional(),
   argumentMode: external_exports.enum(["none", "text"]),
   /**
    * Native distinction reported by the Harness. Omitted when the Harness does
@@ -17135,6 +17168,8 @@ var BrokeredHarnessAdapter = class {
   commandCatalog;
   liveCommandCatalog;
   harnessId;
+  credits;
+  refreshCredits;
   #descriptorPath;
   #forwardEnvironment;
   #isInstalled;
@@ -17155,6 +17190,10 @@ var BrokeredHarnessAdapter = class {
   };
   constructor(input = {}) {
     this.harnessId = harnessPluginIdSchema.parse(input.harnessId ?? "claude-code");
+    if (input.accountCredits !== false) {
+      this.credits = () => this.#credits;
+      this.refreshCredits = () => this.#refreshAccountCredits();
+    }
     this.#forwardEnvironment = input.forwardDelegationEnvironment === true;
     if (input.commandCatalog)
       this.commandCatalog = input.commandCatalog;
@@ -17166,10 +17205,7 @@ var BrokeredHarnessAdapter = class {
     this.#startBroker = input.startBroker === false ? void 0 : input.startBroker ?? (process.platform === "darwin" && !input.descriptorPath ? () => startBrokerLaunchAgent(this.harnessId, environment) : void 0);
     this.#startTimeoutMs = input.startTimeoutMs ?? BROKER_START_TIMEOUT_MS;
   }
-  credits() {
-    return this.#credits;
-  }
-  refreshCredits() {
+  #refreshAccountCredits() {
     if (this.#closed)
       return Promise.resolve(null);
     if (this.#creditsRefresh)
@@ -17487,6 +17523,27 @@ function nativeError(error51, profile = CODEBUDDY_RUNTIME_PROFILE) {
 function failure(code, message, profile = CODEBUDDY_RUNTIME_PROFILE) {
   return { ok: false, error: nativeError(new CodeBuddyError(code, message), profile) };
 }
+function nativeTurnError(stopReason, meta3, profile) {
+  const fallback = `Native Turn stopped: ${text(stopReason) || "unknown"} (${text(meta3["codebuddy.ai/outcome"]) || "no native outcome"})`;
+  const raw = text(meta3["codebuddy.ai/errorMessage"]).trim();
+  let diagnostic = "";
+  let category;
+  if (raw) {
+    try {
+      const error51 = record2(JSON.parse(raw));
+      const data = record2(error51.data);
+      diagnostic = text(data.details).trim() || text(error51.message).trim();
+      category = data.category;
+    } catch {
+      diagnostic = raw;
+    }
+  }
+  return nativeError(new CodeBuddyError(
+    // -32000 is shared by native refusals; the category identifies authentication failures.
+    category === "auth" ? "authenticationRequired" : "nativeFailure",
+    diagnostic ? `${fallback}: ${diagnostic}` : fallback
+  ), profile);
+}
 async function bounded(operation, milliseconds, label, onTimeout) {
   let timer;
   try {
@@ -17508,6 +17565,40 @@ async function bounded(operation, milliseconds, label, onTimeout) {
   }
 }
 
+// ../codebuddy/dist/permission-presentation.js
+var labels = {
+  "Always Ask": "始终询问",
+  "Accept Edits": "接受编辑",
+  Plan: "规划模式",
+  Auto: "自动",
+  "Auto mode": "自动模式",
+  "Don't Ask": "不询问",
+  "Bypass Permissions": "绕过权限",
+  "Full Access": "完全访问",
+  Delegate: "由父会话管理",
+  Default: "默认"
+};
+var descriptions = {
+  "Prompts for permission on first use of each tool": "首次使用每种工具时请求权限。",
+  "Automatically accepts file edit permissions for the session": "自动接受本会话中的文件编辑权限。",
+  "Agent can analyze but not modify files or execute commands": "Agent 可以分析，但不能修改文件或执行命令。",
+  "An AI classifier reviews actions that would normally prompt: safe ones are auto-approved, risky ones are denied. If the classifier is unavailable, the action falls back to a prompt (or is denied when prompts cannot be shown)": "由 AI 分类器评估原本需要询问的操作：安全操作自动批准，风险操作拒绝。分类器不可用时改为询问；无法显示询问时拒绝。",
+  "Does not show permission prompts; pre-approved and safe read-only actions run, everything else that would prompt is denied": "不显示权限询问；已获批准和安全的只读操作可以执行，其余原本需要询问的操作会被拒绝。",
+  "Skips all permission prompts": "跳过常规权限询问。",
+  "Skips ALL permission checks including dangerous commands for all agents": "为所有 Agent 跳过全部权限检查，包括危险命令。",
+  "Permissions managed by parent session": "由父会话管理权限。"
+};
+function permissionLocalizations(label, description) {
+  const localizedLabel = Object.hasOwn(labels, label) ? labels[label] : void 0;
+  const localizedDescription = Object.hasOwn(descriptions, description) ? descriptions[description] : void 0;
+  return {
+    "zh-CN": {
+      ...localizedLabel ? { label: localizedLabel } : {},
+      ...localizedDescription ? { description: localizedDescription } : {}
+    }
+  };
+}
+
 // ../codebuddy/dist/configuration.js
 var CODEBUDDY_CAPABILITIES = {
   configuration: {
@@ -17565,6 +17656,7 @@ function configuration(value, profile = CODEBUDDY_RUNTIME_PROFILE) {
     modes: rows(mode.options).map((option) => ({
       id: option.value,
       label: option.name,
+      localizations: permissionLocalizations(text(option.name), text(option.description)),
       ...option.description ? { description: option.description } : {},
       ...["bypassPermissions", "fullAccess"].includes(text(option.value)) ? { dangerous: true } : {}
     })),
@@ -18051,6 +18143,11 @@ function commandCatalog(value, profile = CODEBUDDY_RUNTIME_PROFILE) {
             id: `${profile.harnessId}.${name}`,
             invocation: `/${name}`,
             label: name,
+            ...name === "compact" && !skill ? {
+              localizations: {
+                "zh-CN": { label: "压缩上下文", description: "压缩当前对话上下文" }
+              }
+            } : {},
             ...text(entry.description).trim() ? { description: text(entry.description).trim().slice(0, 512) } : {},
             argumentMode: name === "compact" || record2(entry.input).hint || record2(entry._meta).type === "skill" ? "text" : "none",
             ...record2(entry._meta).type === "skill" ? { kind: "skill" } : {}
@@ -25606,7 +25703,7 @@ var CodeBuddySession = class {
       // Those remain visible on individual Items; they do not fail the completed Turn.
       (!meta3["codebuddy.ai/outcome"] || meta3["codebuddy.ai/outcome"] === "SUCCESS" || meta3["codebuddy.ai/outcome"] === "PARTIAL_SUCCESS") ? { status: "succeeded" } : {
         status: "failed",
-        error: nativeError(new CodeBuddyError("nativeFailure", `Native Turn stopped: ${text(stop) || "unknown"} (${text(meta3["codebuddy.ai/outcome"]) || "no native outcome"})`), this.profile)
+        error: nativeTurnError(stop, meta3, this.profile)
       };
       const snapshot = await this.#snapshot();
       const added = snapshot.turns.filter((turn) => !active.before.has(turn.nativeTurnRef.nativeTurnKey));
@@ -25913,6 +26010,121 @@ function workBuddyDelegationArguments(environment, ephemeral) {
   return ["--append-system-prompt", WORKBUDDY_DELEGATION_INSTRUCTIONS];
 }
 
+// dist/credential-bootstrap.js
+var WORKBUDDY_CREDENTIAL_PRELOAD = String.raw`
+(() => {
+  const env = process.env;
+  const bootstrapEnvironment = [
+    "CODEBUDDY_SIDECAR_CREDENTIAL_BOOTSTRAP_SOCKET",
+    "CODEBUDDY_SIDECAR_READY_SOCKET",
+    "CODEBUDDY_SIDECAR_READY_TOKEN",
+    "CODEBUDDY_SIDECAR_READY_SESSION_ID",
+  ];
+  if (bootstrapEnvironment.some(name => env[name] !== undefined)) {
+    if (!["WORKBUDDY_AT_REST_ENCRYPTION", ...bootstrapEnvironment].every(name => env[name]?.trim())) {
+      throw Error("WorkBuddy credential bootstrap environment is incomplete");
+    }
+    return;
+  }
+  const policy = env.WORKBUDDY_AT_REST_ENCRYPTION?.trim();
+  // Other explicit policies remain owned by the native CLI.
+  if (policy && policy !== "fields") return;
+
+  let provider;
+  try {
+    provider = process._linkedBinding("electron_browser_workbuddy_storage");
+  } catch {
+    // Older app runtimes predate encrypted credential fields.
+    return;
+  }
+  const crypto = require("node:crypto");
+  const net = require("node:net");
+  const fs = require("node:fs");
+  const path = require("node:path");
+  let payload;
+  try { payload = JSON.parse(provider.loggerGet()); }
+  catch { throw Error("WorkBuddy credential key provider is unavailable"); }
+  let secret = payload && payload.atRestSecretKey;
+  const decoded = typeof secret === "string" ? Buffer.from(secret, "base64") : Buffer.alloc(0);
+  const valid = payload && payload.version === 1 && decoded.length === 32 &&
+    decoded.toString("base64") === secret && !decoded.every(byte => byte === 0);
+  decoded.fill(0);
+  if (!valid) throw Error("WorkBuddy credential key payload is unsupported");
+  // Match the native normalizeAtRestKeyPayload; the base64 text is hashed, not its decoded bytes.
+  const key = crypto.createHash("sha256").update(secret, "utf8").digest();
+  secret = undefined;
+  payload = undefined;
+  const token = crypto.randomBytes(24).toString("hex");
+  const sessionId = crypto.randomUUID();
+  let directory;
+  let socketPath;
+  if (process.platform === "win32") {
+    socketPath = "\\\\.\\pipe\\codexhost-wb-" + process.pid + "-" + token;
+  } else {
+    let root = require("node:os").tmpdir();
+    if (Buffer.byteLength(root) > 65) root = "/tmp";
+    directory = fs.mkdtempSync(path.join(root, "ch-wb-"));
+    fs.chmodSync(directory, 0o700);
+    socketPath = path.join(directory, "c");
+  }
+  const cleanup = () => {
+    if (directory) try { fs.rmSync(directory, {recursive:true,force:true}); } catch {}
+  };
+  process.once("exit", cleanup);
+  Object.assign(env, {
+    WORKBUDDY_AT_REST_ENCRYPTION: "fields",
+    CODEBUDDY_SIDECAR_CREDENTIAL_BOOTSTRAP_SOCKET: socketPath,
+    CODEBUDDY_SIDECAR_READY_SOCKET: socketPath + "-ready",
+    CODEBUDDY_SIDECAR_READY_TOKEN: token,
+    CODEBUDDY_SIDECAR_READY_SESSION_ID: sessionId,
+  });
+  let message = JSON.stringify({version:1,sessionId,token,pid:process.pid,bootstrap:{
+    version:1,policy:"fields",
+    symmetricKey:{keyId:crypto.createHash("sha256").update(key).digest("hex").slice(0,16),keyBase64:key.toString("base64")},
+    asymmetricUnavailable:"missing-key",
+  }}) + "\n";
+  key.fill(0);
+  let done = false;
+  let socket;
+  const finish = success => {
+    if (done) return;
+    done = true;
+    clearTimeout(timer);
+    socket && socket.destroy();
+    message = "";
+    cleanup();
+    process.removeListener("exit", cleanup);
+    if (!success) {
+      process.stderr.write("WorkBuddy credential bootstrap failed\n");
+      process.exit(1);
+    }
+  };
+  const timer = setTimeout(() => finish(false), 4500);
+  const connect = () => {
+    if (done) return;
+    socket = net.createConnection(socketPath);
+    let reply = "";
+    socket.once("connect", () => socket.end(message, () => { message = ""; }));
+    socket.on("data", chunk => {
+      reply += chunk;
+      if (reply.length > 1024) return finish(false);
+      if (!reply.includes("\n")) return;
+      try {
+        const result = JSON.parse(reply.slice(0, reply.indexOf("\n")));
+        finish(result.ok === true && result.policy === "fields");
+      } catch { finish(false); }
+    });
+    socket.once("end", () => { if (!done) finish(false); });
+    socket.once("error", error => {
+      socket.destroy();
+      if (error.code === "ENOENT" || error.code === "ECONNREFUSED") setTimeout(connect, 20);
+      else finish(false);
+    });
+  };
+  setImmediate(connect);
+})();
+`;
+
 // dist/discovery.js
 var WORKBUDDY_MACOS_ELECTRON = "/Applications/WorkBuddy AI.app/Contents/MacOS/Electron";
 var windowsRoots = [
@@ -26057,7 +26269,8 @@ function workBuddyInvocation(environment, ephemeral, dependenciesOrArguments = {
   } : configuredEnvironment;
   return {
     ...commandInvocation(executable, [
-      ...bundle ? [bundle.cli] : [],
+      ...bundle ? ["--eval", `${WORKBUDDY_CREDENTIAL_PRELOAD}
+require(process.argv[1]);`, bundle.cli] : [],
       ...nativeArguments ?? [
         "--acp",
         ...ephemeral ? ["--no-session-persistence"] : [],
@@ -26075,6 +26288,7 @@ var WORKBUDDY_COMMAND_CATALOG = harnessCommandCatalogSchema.parse({
     {
       id: "workbuddy.compact",
       invocation: "/compact",
+      localizations: { "zh-CN": { label: "压缩上下文", description: "压缩当前对话上下文" } },
       label: "Compact context",
       description: "Compact the current WorkBuddy Session context",
       argumentMode: "text"
@@ -26202,15 +26416,15 @@ function normalizedLabel(value) {
 }
 function mergeWorkBuddyProductModels(catalog, productModels) {
   const refs = new Set(catalog.models.map((model2) => model2.ref.id));
-  const labels = new Set(catalog.models.map((model2) => normalizedLabel(model2.label)));
+  const labels2 = new Set(catalog.models.map((model2) => normalizedLabel(model2.label)));
   const models = [...catalog.models];
   for (const productModel of productModels) {
     const ref = modelRef(productModel.id);
     const labelKey = normalizedLabel(productModel.name);
-    if (refs.has(ref.id) || labels.has(labelKey))
+    if (refs.has(ref.id) || labels2.has(labelKey))
       continue;
     refs.add(ref.id);
-    labels.add(labelKey);
+    labels2.add(labelKey);
     const creditLabel = productModel.credits?.replace(/^x/iu, "").replace(/\s*credits$/iu, "x");
     const annotatedLabel = creditLabel ? `${productModel.name} · ${creditLabel}` : productModel.name;
     models.push({
@@ -26274,6 +26488,7 @@ function createHarnessAdapter(context) {
       ...context.launchCommand ? { CODEXHOST_WORKBUDDY_COMMAND: context.launchCommand } : {}
     };
     return new BrokeredHarnessAdapter({
+      accountCredits: false,
       harnessId: "workbuddy",
       commandCatalog: WORKBUDDY_COMMAND_CATALOG,
       forwardDelegationEnvironment: true,

package/app/plugins/zcode/plugin.mjs

@@ -14787,6 +14787,15 @@ var harnessDisplaySetSchema = external_exports.strictObject({
   initializeOnly: external_exports.boolean().optional()
 });
 
+// ../../shared-contracts/dist/harness-presentation.js
+var localeSchema = external_exports.string().max(64).regex(/^[a-z]{2,3}(?:-[A-Za-z0-9]{2,8})*$/u);
+var displayText = (maximum) => external_exports.string().min(1).max(maximum).refine((text2) => text2.trim().length > 0);
+var harnessLocalizationsSchema = external_exports.record(localeSchema, external_exports.object({
+  label: displayText(256).optional(),
+  description: displayText(1024).optional()
+}).strict()).refine((entries) => Object.keys(entries).length <= 16, "Too many locales");
+var harnessLocalizedTextSchema = external_exports.record(localeSchema, displayText(4096)).refine((entries) => typeof entries.en === "string", "English fallback is required").refine((entries) => Object.keys(entries).length <= 16, "Too many locales");
+
 // ../../shared-contracts/dist/model-price-overrides.js
 var usdPerMillionTokens = external_exports.number().finite().nonnegative();
 var modelPriceOverrideSchema = external_exports.strictObject({
@@ -15123,8 +15132,24 @@ var threadUsageSnapshotSchema = external_exports.object({
   }
 });
 var usagePercentSchema = external_exports.number().finite().min(0).max(100);
+var accountCreditsPeriodSchema = external_exports.enum([
+  "weekly",
+  "monthly",
+  "five_hour",
+  "seven_day",
+  "unknown"
+]);
+var accountCreditsScopeSchema = external_exports.object({
+  id: external_exports.string().min(1).max(256),
+  label: external_exports.string().min(1).max(256),
+  localizations: harnessLocalizationsSchema.optional()
+}).strict();
 var accountCreditsProductUsageSchema = external_exports.object({
   product: external_exports.string().min(1),
+  /** Native period and scope, never inferred from the display name. */
+  periodType: accountCreditsPeriodSchema.optional(),
+  scope: accountCreditsScopeSchema.optional(),
+  localizations: harnessLocalizationsSchema.optional(),
   used: external_exports.number().finite().nonnegative().optional(),
   // Zero is a real empty cap, not an absent field.
   limit: external_exports.number().finite().nonnegative().optional(),
@@ -15144,9 +15169,11 @@ var accountCreditsSnapshotSchema = external_exports.object({
   unit: external_exports.string().min(1).max(32).optional(),
   /** Native label when the primary limit is scoped to a model or product group. */
   label: external_exports.string().min(1).optional(),
+  scope: accountCreditsScopeSchema.optional(),
+  localizations: harnessLocalizationsSchema.optional(),
   usedPercent: usagePercentSchema,
   resetsAt: external_exports.string().min(1).optional(),
-  periodType: external_exports.enum(["weekly", "monthly", "five_hour", "seven_day", "unknown"]),
+  periodType: accountCreditsPeriodSchema,
   productUsage: external_exports.array(accountCreditsProductUsageSchema).min(1).optional(),
   resetCredits: accountResetCreditsSchema.optional()
 }).strict();
@@ -15157,7 +15184,9 @@ var threadUsageInspectionParamsSchema = external_exports.object({
 var threadUsageInspectionSchema = external_exports.object({
   threadId: hostThreadIdSchema,
   usage: threadUsageSnapshotSchema.nullable(),
-  accountCredits: accountCreditsSnapshotSchema.optional()
+  accountCredits: accountCreditsSnapshotSchema.optional(),
+  /** Whether this source can provide cached account quota independently of usage. */
+  accountCreditsSupported: external_exports.boolean().optional()
 }).strict();
 
 // ../../shared-contracts/dist/harness-accounts.js
@@ -15284,7 +15313,8 @@ var harnessPermissionModeSchema = external_exports.object({
   id: harnessPermissionModeIdSchema,
   label: nonBlankTextSchema.max(HARNESS_PERMISSION_MODE_LABEL_MAX_LENGTH),
   description: nonBlankTextSchema.max(HARNESS_PERMISSION_MODE_DESCRIPTION_MAX_LENGTH).optional(),
-  dangerous: external_exports.boolean().optional()
+  dangerous: external_exports.boolean().optional(),
+  localizations: harnessLocalizationsSchema.optional()
 }).strict();
 var harnessPermissionModeCatalogSchema = external_exports.object({
   modes: external_exports.array(harnessPermissionModeSchema).min(1).max(HARNESS_PERMISSION_MODE_CATALOG_MAX_LENGTH),
@@ -15671,6 +15701,8 @@ var harnessInstallationStateSchema = external_exports.object({
   // Adapter-owned diagnostic text; UI uses messageCode rather than displaying it verbatim.
   message: external_exports.string().max(2048).optional(),
   messageCode: external_exports.string().min(1).max(128).optional(),
+  /** Safe plugin-owned explanation, distinct from raw diagnostic message. */
+  notice: harnessLocalizedTextSchema.optional(),
   latestVersionKind: external_exports.enum(["unknown", "tracking-branch"]).optional()
 }).strict();
 
@@ -15797,6 +15829,7 @@ var harnessCommandDescriptorSchema = external_exports.object({
   invocation: commandInvocationSchema,
   label: commandLabelSchema,
   description: commandDescriptionSchema.optional(),
+  localizations: harnessLocalizationsSchema.optional(),
   argumentMode: external_exports.enum(["none", "text"]),
   /**
    * Native distinction reported by the Harness. Omitted when the Harness does
@@ -16716,6 +16749,10 @@ function createZcodeInstallation(environment, app) {
       updateAvailable: false,
       canUpdate: false,
       messageCode: "zcode-desktop-updater",
+      notice: {
+        en: "The CLI ships inside ZCode Desktop. Update ZCode Desktop itself to update it.",
+        "zh-CN": "CLI 随 ZCode Desktop 一起发布，请直接更新 ZCode Desktop。"
+      },
       message: "The CLI ships inside ZCode Desktop. Update ZCode Desktop itself to update it."
     };
   };
@@ -18180,11 +18217,19 @@ var modeLabels = {
   yolo: "Full access",
   auto: "Auto"
 };
+var chineseModeLabels = {
+  build: "确认变更",
+  edit: "自动编辑",
+  plan: "规划模式",
+  yolo: "完全访问",
+  auto: "自动"
+};
 function permissionModes(current = "build") {
   return harnessPermissionModeCatalogSchema.parse({
     modes: Object.entries(modeLabels).map(([id, label]) => ({
       id,
       label,
+      localizations: { "zh-CN": { label: chineseModeLabels[id] } },
       ...id === "yolo" ? { dangerous: true } : {}
     })),
     defaultModeId: current
@@ -19224,6 +19269,7 @@ var COMMAND_CATALOG = harnessCommandCatalogSchema.parse({
     {
       id: "compact",
       invocation: "/compact",
+      localizations: { "zh-CN": { label: "压缩上下文", description: "压缩当前对话上下文" } },
       label: "Compact",
       description: "Compact the native ZCode conversation.",
       argumentMode: "text"