@eddyskywalker/dsh-chatgpt-subscription 0.54.0 → 0.56.0

package/lib/index.js

@@ -1,4 +1,4 @@
-import { a as resolveProgressUpdatesSettings, n as attachProgressSettings } from "./entry-progress-updates-BEkdyDZU.js";
+import { a as resolveProgressUpdatesSettings, n as attachProgressSettings } from "./entry-progress-updates-CxQewio9.js";
 import { attachPlanModePipelineSettings, resolvePlanModePipelineEnabled } from "./plan-mode-pipeline.js";
 import { DEFAULT_SKIP_PROVIDERS, PRUNER_SERVICE_NAME, resolveSkipProviders, shouldSkipPruningForSession } from "./tool-result-pruner.js";
 import { PLAN_PROJECTION_KEY, createPlanNotice } from "./plan-mode.js";
@@ -26,6 +26,662 @@ import { URL as URL$1, URLSearchParams as URLSearchParams$1, fileURLToPath } fro
 import { ProxyAgent, fetch as fetch$1 } from "undici";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { gzipSync } from "node:zlib";
+//#region src/shared/i18n-contracts.ts
+/**
+* Language ids this plugin speaks, and the one parser that decides which one a
+* tag means.
+*
+* The Host has no locale service of its own: the browser decides the active
+* language and the Host only learns it because the client mirrors it back. So
+* both halves must agree on one normalization rule, and this module is it —
+* shared, dependency-free and identical on both sides of the wire.
+* @module dsh-chatgpt-subscription/i18n-contracts
+*/
+/** Every language this plugin can answer in, in the order a picker shows them. */
+const SUPPORTED_LOCALES = [
+	"zh",
+	"en",
+	"ru"
+];
+/**
+* Reduce a BCP 47 tag (or anything a caller offers) to one supported language.
+*
+* `zh-CN`, `zh_TW` and `ZH` are all `zh`; `ru-RU` is `ru`; an unsupported
+* language (`fr`, `ja`) and a missing value both fall back to
+* {@link DEFAULT_LOCALE} rather than throwing — a language hint is never worth
+* failing a request over.
+*
+* @param tag - Candidate tag from a URL, a header, a settings document or an event.
+* @returns The supported language to answer in.
+*/
+function normalizeLocale(tag) {
+	if (typeof tag !== "string") return "zh";
+	const base = tag.trim().toLowerCase().split(/[-_]/)[0];
+	return SUPPORTED_LOCALES.find((id) => id === base) ?? "zh";
+}
+//#endregion
+//#region src/host/common/i18n/runtime.ts
+/**
+* The one place the Host remembers which language it is answering in.
+*
+* The Host has no locale service: the browser resolves the active language
+* (explicit preference, else the browser's own), and this plugin's client
+* mirrors that resolved value back over its own route. Everything the Host
+* says on its own — a provider name, a quota failure, a progress update —
+* reads the language from here at the moment it speaks, so a switch reaches
+* text that was composed long after the page loaded.
+*
+* Nothing is persisted: the client re-mirrors on every page load, and the
+* default keeps a Host that has never been mirrored on the wording it shipped
+* with. A second client with a different language wins the race described by
+* 'last write wins'; that is a documented limitation, not a bug to scale into
+* a per-session registry.
+* @module dsh-chatgpt-subscription/host/i18n/runtime
+*/
+/** In-memory current language plus its change notification. */
+var HostLocaleRuntime = class {
+	current = "zh";
+	listeners = /* @__PURE__ */ new Set();
+	/** The language every Host-side composer should answer in right now. */
+	get() {
+		return this.current;
+	}
+	/**
+	* Adopt a language hint; unsupported values collapse to the default.
+	*
+	* @param tag - Any tag a caller offers (a route body, a settings value).
+	* @returns The language now in force after normalization.
+	*/
+	set(tag) {
+		const next = normalizeLocale(tag);
+		if (next === this.current) return next;
+		this.current = next;
+		for (const listener of [...this.listeners]) listener();
+		return next;
+	}
+	/**
+	* Observe later language changes.
+	*
+	* @param listener - Called after {@link set} actually changed the language.
+	* @returns Unsubscribe.
+	*/
+	subscribe(listener) {
+		this.listeners.add(listener);
+		return () => {
+			this.listeners.delete(listener);
+		};
+	}
+};
+let installed;
+/**
+* Hand the runtime to this module.
+*
+* Adapters and routes read the language through {@link currentLocale} instead
+* of threading a runtime through thirteen constructors, and a test that never
+* installs one keeps the plugin's original Chinese wording.
+*
+* @param runtime - The runtime the plugin entry owns, or `undefined` to detach.
+*/
+function installHostLocale(runtime) {
+	installed = runtime;
+}
+/** The language in force, or {@link DEFAULT_LOCALE} when nothing is installed. */
+function currentLocale() {
+	return installed?.get() ?? "zh";
+}
+/** The installed runtime, when the plugin entry has wired one. */
+function hostLocaleRuntime() {
+	return installed;
+}
+//#endregion
+//#region src/host/common/i18n/en.ts
+const en = {
+	"provider.codex-chatgpt": "ChatGPT Subscription",
+	"provider.claude": "Claude Subscription",
+	"provider.workbuddy": "WorkBuddy (CodeBuddy Subscription)",
+	"provider.glm-coding-plan": "GLM (ZCode Account)",
+	"provider.minimax-code": "MiniMax Code (Coding Subscription)",
+	"provider.qoder": "Qoder Subscription",
+	"provider.step-code": "Step Code (Step Plan Subscription)",
+	"pool.maxAccounts": "The {provider} account pool holds at most {max} accounts; delete one that is no longer used first.",
+	"pool.notSignedIn": "No {provider} account is signed in; add one on the settings page first.",
+	"pool.allNeedSignIn": "All {count} {provider} accounts have to sign in again.",
+	"pool.credentialRejected": "The credential of the {provider} account was rejected; sign in again.",
+	"pool.allUnavailable": "All {count} {provider} accounts are unavailable right now, and none is cooling down.",
+	"pool.allCoolingDown": "All {count} {provider} accounts are rate limited or cooling down (429). The earliest clears in about {minutes} minutes.",
+	"codex.refresherNotReady": "The ChatGPT credential refresh service is not ready yet",
+	"codex.notSignedIn": "No ChatGPT account is signed in; add and sign in to one under Settings → Subscription services → ChatGPT.",
+	"codex.accountGone": "That ChatGPT account is no longer in the pool",
+	"antigravity.quotaExhausted": "The Antigravity account quota is exhausted or the request is rate limited (429 RESOURCE_EXHAUSTED). Check the remaining quota and the reset countdown on the plugin settings page. Raw response: {body}",
+	"antigravity.rateLimitedNoReset": "Antigravity returned 429 (RESOURCE_EXHAUSTED) without a reset time, so this is treated as an immediate rate limit: the account quota is not considered exhausted and the account is not cooled down. Raw response: {body}",
+	"wb.oauth.loginInitFailed": "{provider} sign-in could not start (HTTP {status}): {detail}",
+	"wb.oauth.loginMissingState": "{provider} sign-in response is missing state or authUrl",
+	"wb.oauth.loginPollInvalid": "{provider} sign-in poll returned an invalid payload",
+	"wb.oauth.loginFailed": "{provider} sign-in failed: {detail}",
+	"wb.oauth.loginMissingToken": "{provider} sign-in response is missing the access token",
+	"wb.oauth.loginPollFailed": "{provider} sign-in poll failed (HTTP {status}): {detail}",
+	"wb.oauth.loginPollNotJson": "{provider} sign-in poll returned a non-JSON response",
+	"wb.oauth.waitingBrowser": "Waiting for the browser authorization…",
+	"wb.oauth.waitingBrowserElapsed": "Waiting for the browser authorization… ({seconds}s)",
+	"wb.oauth.authorized": "Authorization complete",
+	"wb.oauth.loginTimeout": "The sign-in timed out; add the account again.",
+	"wb.pool.pausedDefault": "The account pool is paused.",
+	"wb.pool.accountLabel": "Account {position}",
+	"wb.pool.paused": "The {provider} account pool is paused: {reason}. It resumes automatically in about {minutes} minutes; an account restricted upstream has to sign in again before it rejoins the rotation.",
+	"wb.pool.notAccountScoped": "The {provider} pool only records account-scoped restrictions ({expected}), but received business code {code}; 11128 and 11158 are not account-level refusals and must be handled by the protocol layer.",
+	"wb.pool.upstreamRefused": "Upstream refused {count} different accounts with {code} within {minutes} minutes",
+	"wb.pool.desktopAccountUndeletable": "A desktop account belongs to the CodeBuddy client: it can be hidden, never deleted.",
+	"qo.modelResolveAborted": "{provider} model resolution was cancelled",
+	"qo.requestAborted": "{provider} request was cancelled",
+	"qo.requestFailed": "{provider} request failed: {detail}",
+	"qo.emptyBody": "{provider} returned an empty response body",
+	"qo.noBrowserOutsideGlobal": "{provider} does not offer browser sign-in outside the global deployment",
+	"qo.devicePollFailed": "{provider} device poll failed (HTTP {status}){detail}",
+	"qo.devicePollNotJson": "{provider} device poll did not return a JSON object",
+	"qo.devicePollNoToken": "{provider} device poll returned 200 without a token",
+	"qo.patEmpty": "The {provider} PAT is empty.",
+	"qo.noRefreshToken": "This {provider} credential carries no refresh token; only signing in again renews it.",
+	"qo.cnNoBrowserLogin": "The {provider} China site does not support browser sign-in; use a PAT ({patPage}) or import the local qodercli sign-in.",
+	"qo.waitingBrowserPoll": "Waiting for the browser authorization… (polled every {seconds}s)",
+	"qo.loginTimeout": "{provider} sign-in timed out: the browser authorization did not complete in time.",
+	"qo.authorized": "Authorization complete",
+	"qo.cancelled": "The operation was cancelled",
+	"qo.poolPayloadInvalid": "The {provider} pool payload is invalid",
+	"qo.poolEmpty": "The {provider} account pool has no accounts.",
+	"qo.userinfoFailed": "{provider} userinfo request failed (HTTP {status}){detail}",
+	"qo.userinfoNotJson": "{provider} userinfo response is not a JSON object",
+	"qo.patExchangeNotJson": "{provider} PAT exchange response is not a JSON object",
+	"qo.patExchangeNoToken": "{provider} PAT exchange response carries no token",
+	"qo.refreshFailed": "{provider} token refresh failed (HTTP {status})",
+	"qo.refreshNotJson": "{provider} token refresh response is not a JSON object",
+	"qo.refreshNoToken": "{provider} token refresh response carries no token",
+	"qo.quotaHttp": "The quota endpoint answered HTTP {status}{detail}",
+	"qo.quotaNoBucket": "The quota response carried no bucket this build recognises (upstream may have changed).",
+	"qo.poolNotInstalled": "The account pool is not installed.",
+	"qo.unknownStrategy": "Unknown rotation strategy.",
+	"qo.unknownAccountAction": "Unknown account action: {action}",
+	"qo.pastePat": "Paste a Personal Access Token (pt-...).",
+	"qo.notSignedIn": "No {provider} account is signed in yet.",
+	"qo.catalogHttp": "The catalog endpoint answered HTTP {status}",
+	"qo.credentialFieldInvalid": "{provider} credential field is invalid: {key}",
+	"qo.credentialPayloadInvalid": "The {provider} credential payload is invalid",
+	"qo.credentialNoToken": "The {provider} credential has no accessToken",
+	"qo.credentialRegionInvalid": "The {provider} credential region is invalid",
+	"qo.storeUnsupportedPlatform": "{label} credential storage supports Windows, macOS and Linux only.",
+	"qo.encryptedWriteVerifyFailed": "Writing the encrypted {provider} credential failed verification",
+	"qo.modelSettingsWriteFailed": "Writing the {provider} model settings failed: the stored choice differs from what was just written",
+	"sc.poolAccountFieldInvalid": "{provider} pool account field is invalid: {key}",
+	"sc.poolCredentialInvalid": "The {provider} pool credential is invalid",
+	"sc.poolCredentialNoAccess": "The {provider} pool credential has no access field",
+	"sc.poolCredentialProfileInvalid": "The {provider} pool credential profile is invalid",
+	"sc.poolPayloadInvalid": "The {provider} pool payload is invalid",
+	"sc.poolEmpty": "The {provider} account pool has no accounts.",
+	"sc.modelResolveAborted": "{provider} model resolution was cancelled",
+	"sc.requestAborted": "{provider} request was cancelled",
+	"sc.requestFailed": "{provider} request failed: {detail}",
+	"sc.noResponse": "{provider} returned no response at all",
+	"sc.emptyBody": "{provider} returned an empty response body",
+	"sc.poolNotInstalled": "The account pool is not installed.",
+	"sc.unknownStrategy": "Unknown rotation strategy.",
+	"sc.unknownAccountAction": "Unknown account action: {action}",
+	"sc.pastePlatformKey": "Paste a Platform API Key.",
+	"sc.missingAccount": "Fill in the account.",
+	"sc.missingPassword": "Fill in the password.",
+	"sc.unknownQuotaCredentialMode": "Unknown quota-credential submission mode: {mode}",
+	"sc.notSignedIn": "No {provider} account is signed in yet.",
+	"sc.catalogHttp": "The catalog endpoint answered HTTP {status}",
+	"sc.loginPhaseFailed": "{provider} sign-in {phase} {detail}",
+	"sc.loginRequestTimeout": "{provider} sign-in request timed out",
+	"sc.authorizeUrlInvalid": "The {provider} authorization URL is not a valid URL: {value}",
+	"sc.authorizeUrlNotHttps": "The {provider} authorization URL must use https",
+	"sc.authorizeUrlHasCredentials": "The {provider} authorization URL must not carry a user name or password",
+	"sc.cancelled": "The operation was cancelled",
+	"sc.loginTimeout": "{provider} sign-in timed out: the browser authorization did not complete in time.",
+	"sc.pollTokenEmpty": "The {provider} sign-in poll_token must not be empty",
+	"sc.loginNoApiKey": "{provider} signed in but returned no api_key",
+	"sc.apiKeyEmpty": "The {provider} API key is empty.",
+	"sc.waitingBrowserPoll": "Waiting for the browser authorization… (polled every {seconds}s)",
+	"sc.authorized": "Authorization complete",
+	"sc.credentialFieldInvalid": "{provider} credential field is invalid: {key}",
+	"sc.credentialPayloadInvalid": "The {provider} credential payload is invalid",
+	"sc.credentialNoApiKey": "The {provider} credential has no apiKey",
+	"sc.credentialProfileInvalid": "The {provider} credential profile is invalid",
+	"sc.storeUnsupportedPlatform": "{label} credential storage supports Windows, macOS and Linux only.",
+	"sc.encryptedWriteVerifyFailed": "Writing the encrypted {provider} credential failed verification",
+	"sc.quotaCredentialPayloadInvalid": "The {provider} quota credential payload is invalid",
+	"sc.quotaCredentialNoToken": "The {provider} quota credential has no Oasis-Token",
+	"sc.quotaCredentialNoDeviceId": "The {provider} quota credential has no Oasis-Webid",
+	"sc.quotaCredentialWriteVerifyFailed": "Writing the {provider} quota credential failed verification",
+	"sc.modelSettingsWriteFailed": "Writing the {provider} model settings failed: the stored choice differs from what was just written",
+	"glm.quotaNeedsKey": "The {provider} quota endpoint needs a Coding Plan Key (the bare value, no Bearer); an empty credential never becomes an authenticated request.",
+	"glm.catalogNotJson": "The model catalog {provider} returned is not readable JSON: {url}",
+	"glm.quotaNeedsKeyShort": "Reading the {provider} quota needs a Coding Plan Key (the bare value, no Bearer).",
+	"glm.quotaUnreachable": "The quota endpoint is unreachable: {detail}",
+	"glm.quotaHttp": "The quota query failed (HTTP {status})",
+	"glm.quotaNotJson": "The quota query did not return JSON.",
+	"glm.quotaNoWindow": "Upstream returned no quota window this build can show.",
+	"glm.cooldownUntilReset": "{provider} 429: the usage window resets at {at}",
+	"glm.cooldownRetryAfter": "{provider} 429: upstream asks to retry in {seconds} seconds",
+	"glm.cooldownNoReset": "{provider} 429: upstream gave no reset time, so this cools down for 5 minutes",
+	"glm.modelResolveAborted": "{provider} model resolution was cancelled",
+	"glm.requestAborted": "{provider} request was cancelled",
+	"glm.requestFailed": "{provider} request failed: {detail}",
+	"glm.noResponse": "{provider} returned no response at all",
+	"glm.emptyBody": "{provider} returned an empty response body",
+	"glm.anthropicEmpty": "The Anthropic surface of {provider} returned nothing",
+	"glm.waitingBrowser": "Waiting for you to finish the authorization in the browser…",
+	"glm.connectingUpstream": "Could not reach upstream; retrying…",
+	"glm.upstreamUnavailable": "Upstream is temporarily unavailable (HTTP {status}); retrying…",
+	"glm.upstreamRetryLater": "Upstream asks to retry later (HTTP {status}); retrying…",
+	"glm.pollRejected": "ZCode sign-in poll was rejected (HTTP {status}): {url}",
+	"glm.unparsableRetry": "Upstream returned a response this build cannot parse; retrying…",
+	"glm.pollBusinessCode": "ZCode sign-in poll returned business error code {code}{detail}",
+	"glm.readyNoToken": "The ready response carries no access_token; retrying…",
+	"glm.sessionCancelled": "This sign-in was cancelled or has expired; start it again.",
+	"glm.loginTimeout": "Sign-in timed out: upstream did not complete the authorization before {at}.",
+	"glm.noSession": "There is no GLM sign-in in progress to complete.",
+	"glm.authorizationDenied": "Authorization was denied: {denial}",
+	"glm.notAuthorizationCode": "This is neither an authorization code nor a complete callback link (it carries no code parameter).",
+	"glm.callbackReceived": "Callback received; confirming with upstream…",
+	"glm.poolNotInstalled": "The account pool is not installed.",
+	"glm.unknownStrategy": "Unknown rotation strategy.",
+	"glm.unknownAccountAction": "Unknown account action: {action}",
+	"glm.pasteCallback": "Paste the callback link or the authorization code.",
+	"glm.noLoginInProgress": "No sign-in is in progress; start one first.",
+	"glm.notSignedIn": "No {provider} account is signed in yet."
+};
+//#endregion
+//#region src/host/common/i18n/ru.ts
+const ru = {
+	"provider.codex-chatgpt": "Codex (подписка ChatGPT)",
+	"provider.claude": "Claude (подписка)",
+	"provider.workbuddy": "WorkBuddy (подписка CodeBuddy)",
+	"provider.glm-coding-plan": "GLM (аккаунт ZCode)",
+	"provider.minimax-code": "MiniMax Code (подписка для кода)",
+	"provider.qoder": "Qoder (подписка)",
+	"provider.step-code": "Step Code (подписка Step Plan)",
+	"pool.maxAccounts": "Пул аккаунтов {provider} вмещает не больше {max}; сначала удалите неиспользуемый аккаунт.",
+	"pool.notSignedIn": "Вход в аккаунт {provider} не выполнен; сначала добавьте его на странице настроек.",
+	"pool.allNeedSignIn": "Всем аккаунтам {provider} ({count}) нужно войти заново.",
+	"pool.credentialRejected": "Учётные данные аккаунта {provider} отклонены; войдите заново.",
+	"pool.allUnavailable": "Все аккаунты {provider} ({count}) сейчас недоступны, и ни один не в режиме ожидания.",
+	"pool.allCoolingDown": "Все аккаунты {provider} ({count}) ограничены по квоте или в режиме ожидания (429). Ближайший освободится примерно через {minutes} мин.",
+	"codex.refresherNotReady": "Служба обновления учётных данных ChatGPT ещё не готова",
+	"codex.notSignedIn": "Вход в аккаунт ChatGPT не выполнен; добавьте и войдите в аккаунт в разделе «Настройки → Подписки → ChatGPT».",
+	"codex.accountGone": "Этого аккаунта ChatGPT больше нет в пуле",
+	"antigravity.quotaExhausted": "Квота аккаунта Antigravity исчерпана или запрос ограничен (429 RESOURCE_EXHAUSTED). Проверьте остаток квоты и таймер сброса на странице настроек плагина. Исходный ответ: {body}",
+	"antigravity.rateLimitedNoReset": "Antigravity вернул 429 (RESOURCE_EXHAUSTED) без времени сброса, поэтому это считается мгновенным ограничением: квота аккаунта не исчерпана, и аккаунт не переводится в ожидание. Исходный ответ: {body}",
+	"wb.oauth.loginInitFailed": "{provider}: не удалось начать вход (HTTP {status}): {detail}",
+	"wb.oauth.loginMissingState": "{provider}: в ответе на вход нет state или authUrl",
+	"wb.oauth.loginPollInvalid": "{provider}: недопустимый ответ опроса входа",
+	"wb.oauth.loginFailed": "{provider}: вход не выполнен: {detail}",
+	"wb.oauth.loginMissingToken": "{provider}: в ответе на вход нет access token",
+	"wb.oauth.loginPollFailed": "{provider}: опрос входа завершился ошибкой (HTTP {status}): {detail}",
+	"wb.oauth.loginPollNotJson": "{provider}: опрос входа вернул ответ не в формате JSON",
+	"wb.oauth.waitingBrowser": "Ожидаем авторизацию в браузере…",
+	"wb.oauth.waitingBrowserElapsed": "Ожидаем авторизацию в браузере… ({seconds} с)",
+	"wb.oauth.authorized": "Авторизация завершена",
+	"wb.oauth.loginTimeout": "Вход не выполнен вовремя; добавьте аккаунт заново.",
+	"wb.pool.pausedDefault": "Пул аккаунтов приостановлен.",
+	"wb.pool.accountLabel": "Аккаунт {position}",
+	"wb.pool.paused": "Пул аккаунтов {provider} приостановлен: {reason}. Он возобновится примерно через {minutes} мин; аккаунту, ограниченному на стороне сервиса, нужно войти заново, прежде чем он вернётся в ротацию.",
+	"wb.pool.notAccountScoped": "Пул {provider} фиксирует только ограничения уровня аккаунта ({expected}), но получен бизнес-код {code}; 11128 и 11158 не являются отказами уровня аккаунта и должны обрабатываться на уровне протокола.",
+	"wb.pool.upstreamRefused": "Сервис отказал {count} разным аккаунтам с кодом {code} за {minutes} мин",
+	"wb.pool.desktopAccountUndeletable": "Настольный аккаунт принадлежит клиенту CodeBuddy: его можно скрыть, но нельзя удалить.",
+	"qo.modelResolveAborted": "{provider}: разрешение модели отменено",
+	"qo.requestAborted": "{provider}: запрос отменён",
+	"qo.requestFailed": "{provider}: запрос не выполнен: {detail}",
+	"qo.emptyBody": "{provider} вернул пустое тело ответа",
+	"qo.noBrowserOutsideGlobal": "{provider}: вход через браузер доступен только в глобальном развёртывании",
+	"qo.devicePollFailed": "{provider}: опрос устройства не удался (HTTP {status}){detail}",
+	"qo.devicePollNotJson": "{provider}: опрос устройства вернул не объект JSON",
+	"qo.devicePollNoToken": "{provider}: опрос устройства вернул 200 без токена",
+	"qo.patEmpty": "PAT {provider} пуст.",
+	"qo.noRefreshToken": "В этих учётных данных {provider} нет токена обновления; продлить их можно только повторным входом.",
+	"qo.cnNoBrowserLogin": "Китайский сайт {provider} не поддерживает вход через браузер; используйте PAT ({patPage}) или импортируйте локальный вход qodercli.",
+	"qo.waitingBrowserPoll": "Ожидаем авторизацию в браузере… (опрос каждые {seconds} с)",
+	"qo.loginTimeout": "{provider}: время входа истекло — авторизацию в браузере не завершили вовремя.",
+	"qo.authorized": "Авторизация завершена",
+	"qo.cancelled": "Операция отменена",
+	"qo.poolPayloadInvalid": "Недопустимые данные пула {provider}",
+	"qo.poolEmpty": "В пуле аккаунтов {provider} нет аккаунтов.",
+	"qo.userinfoFailed": "{provider}: запрос userinfo не удался (HTTP {status}){detail}",
+	"qo.userinfoNotJson": "{provider}: ответ userinfo не является объектом JSON",
+	"qo.patExchangeNotJson": "{provider}: ответ обмена PAT не является объектом JSON",
+	"qo.patExchangeNoToken": "{provider}: в ответе обмена PAT нет токена",
+	"qo.refreshFailed": "{provider}: обновление токена не удалось (HTTP {status})",
+	"qo.refreshNotJson": "{provider}: ответ обновления токена не является объектом JSON",
+	"qo.refreshNoToken": "{provider}: в ответе обновления токена нет токена",
+	"qo.quotaHttp": "Эндпоинт квоты ответил HTTP {status}{detail}",
+	"qo.quotaNoBucket": "В ответе о квоте нет известного этой сборке сегмента (возможно, сервис изменился).",
+	"qo.poolNotInstalled": "Пул аккаунтов не установлен.",
+	"qo.unknownStrategy": "Неизвестная стратегия ротации.",
+	"qo.unknownAccountAction": "Неизвестное действие с аккаунтом: {action}",
+	"qo.pastePat": "Вставьте Personal Access Token (pt-...).",
+	"qo.notSignedIn": "Вход в аккаунт {provider} ещё не выполнен.",
+	"qo.catalogHttp": "Эндпоинт каталога ответил HTTP {status}",
+	"qo.credentialFieldInvalid": "{provider}: недопустимое поле учётных данных: {key}",
+	"qo.credentialPayloadInvalid": "Недопустимые данные учётных данных {provider}",
+	"qo.credentialNoToken": "В учётных данных {provider} нет accessToken",
+	"qo.credentialRegionInvalid": "Недопустимый регион в учётных данных {provider}",
+	"qo.storeUnsupportedPlatform": "Хранилище учётных данных {label} поддерживает только Windows, macOS и Linux.",
+	"qo.encryptedWriteVerifyFailed": "Запись зашифрованных учётных данных {provider} не прошла проверку",
+	"qo.modelSettingsWriteFailed": "Запись настроек моделей {provider} не удалась: сохранённый выбор отличается от только что записанного",
+	"sc.poolAccountFieldInvalid": "{provider}: недопустимое поле аккаунта пула: {key}",
+	"sc.poolCredentialInvalid": "Недопустимые учётные данные пула {provider}",
+	"sc.poolCredentialNoAccess": "В учётных данных пула {provider} нет поля access",
+	"sc.poolCredentialProfileInvalid": "Недопустимый профиль учётных данных пула {provider}",
+	"sc.poolPayloadInvalid": "Недопустимые данные пула {provider}",
+	"sc.poolEmpty": "В пуле аккаунтов {provider} нет аккаунтов.",
+	"sc.modelResolveAborted": "{provider}: разрешение модели отменено",
+	"sc.requestAborted": "{provider}: запрос отменён",
+	"sc.requestFailed": "{provider}: запрос не выполнен: {detail}",
+	"sc.noResponse": "{provider} не вернул ответ",
+	"sc.emptyBody": "{provider} вернул пустое тело ответа",
+	"sc.poolNotInstalled": "Пул аккаунтов не установлен.",
+	"sc.unknownStrategy": "Неизвестная стратегия ротации.",
+	"sc.unknownAccountAction": "Неизвестное действие с аккаунтом: {action}",
+	"sc.pastePlatformKey": "Вставьте Platform API Key.",
+	"sc.missingAccount": "Укажите аккаунт.",
+	"sc.missingPassword": "Укажите пароль.",
+	"sc.unknownQuotaCredentialMode": "Неизвестный способ передачи учётных данных квоты: {mode}",
+	"sc.notSignedIn": "Вход в аккаунт {provider} ещё не выполнен.",
+	"sc.catalogHttp": "Эндпоинт каталога ответил HTTP {status}",
+	"sc.loginPhaseFailed": "{provider}: вход {phase} {detail}",
+	"sc.loginRequestTimeout": "{provider}: запрос входа не выполнен вовремя",
+	"sc.authorizeUrlInvalid": "URL авторизации {provider} не является допустимым URL: {value}",
+	"sc.authorizeUrlNotHttps": "URL авторизации {provider} должен использовать https",
+	"sc.authorizeUrlHasCredentials": "URL авторизации {provider} не должен содержать имя пользователя или пароль",
+	"sc.cancelled": "Операция отменена",
+	"sc.loginTimeout": "{provider}: время входа истекло — авторизацию в браузере не завершили вовремя.",
+	"sc.pollTokenEmpty": "poll_token входа {provider} не может быть пустым",
+	"sc.loginNoApiKey": "{provider} выполнил вход, но не вернул api_key",
+	"sc.apiKeyEmpty": "API-ключ {provider} пуст.",
+	"sc.waitingBrowserPoll": "Ожидаем авторизацию в браузере… (опрос каждые {seconds} с)",
+	"sc.authorized": "Авторизация завершена",
+	"sc.credentialFieldInvalid": "{provider}: недопустимое поле учётных данных: {key}",
+	"sc.credentialPayloadInvalid": "Недопустимые данные учётных данных {provider}",
+	"sc.credentialNoApiKey": "В учётных данных {provider} нет apiKey",
+	"sc.credentialProfileInvalid": "Недопустимый профиль учётных данных {provider}",
+	"sc.storeUnsupportedPlatform": "Хранилище учётных данных {label} поддерживает только Windows, macOS и Linux.",
+	"sc.encryptedWriteVerifyFailed": "Запись зашифрованных учётных данных {provider} не прошла проверку",
+	"sc.quotaCredentialPayloadInvalid": "Недопустимые данные учётных данных квоты {provider}",
+	"sc.quotaCredentialNoToken": "В учётных данных квоты {provider} нет Oasis-Token",
+	"sc.quotaCredentialNoDeviceId": "В учётных данных квоты {provider} нет Oasis-Webid",
+	"sc.quotaCredentialWriteVerifyFailed": "Запись учётных данных квоты {provider} не прошла проверку",
+	"sc.modelSettingsWriteFailed": "Запись настроек моделей {provider} не удалась: сохранённый выбор отличается от только что записанного",
+	"glm.quotaNeedsKey": "Эндпоинту квоты {provider} нужен Coding Plan Key (само значение, без Bearer); пустые учётные данные не станут аутентифицированным запросом.",
+	"glm.catalogNotJson": "Каталог моделей, который вернул {provider}, не является читаемым JSON: {url}",
+	"glm.quotaNeedsKeyShort": "Для чтения квоты {provider} нужен Coding Plan Key (само значение, без Bearer).",
+	"glm.quotaUnreachable": "Эндпоинт квоты недоступен: {detail}",
+	"glm.quotaHttp": "Запрос квоты не выполнен (HTTP {status})",
+	"glm.quotaNotJson": "Запрос квоты вернул не JSON.",
+	"glm.quotaNoWindow": "Сервис не вернул окно квоты, которое эта сборка умеет показывать.",
+	"glm.cooldownUntilReset": "{provider} 429: окно использования сбрасывается в {at}",
+	"glm.cooldownRetryAfter": "{provider} 429: сервис просит повторить через {seconds} с",
+	"glm.cooldownNoReset": "{provider} 429: сервис не указал время сброса, поэтому ожидание 5 минут",
+	"glm.modelResolveAborted": "{provider}: разрешение модели отменено",
+	"glm.requestAborted": "{provider}: запрос отменён",
+	"glm.requestFailed": "{provider}: запрос не выполнен: {detail}",
+	"glm.noResponse": "{provider} не вернул ответ",
+	"glm.emptyBody": "{provider} вернул пустое тело ответа",
+	"glm.anthropicEmpty": "Anthropic-интерфейс {provider} ничего не вернул",
+	"glm.waitingBrowser": "Ждём завершения авторизации в браузере…",
+	"glm.connectingUpstream": "Не удалось подключиться к сервису; повторяем…",
+	"glm.upstreamUnavailable": "Сервис временно недоступен (HTTP {status}); повторяем…",
+	"glm.upstreamRetryLater": "Сервис просит повторить позже (HTTP {status}); повторяем…",
+	"glm.pollRejected": "Опрос входа ZCode отклонён (HTTP {status}): {url}",
+	"glm.unparsableRetry": "Сервис вернул ответ, который эта сборка не может разобрать; повторяем…",
+	"glm.pollBusinessCode": "Опрос входа ZCode вернул бизнес-код ошибки {code}{detail}",
+	"glm.readyNoToken": "В ответе готовности нет access_token; повторяем…",
+	"glm.sessionCancelled": "Этот вход отменён или истёк; начните его заново.",
+	"glm.loginTimeout": "Время входа истекло: сервис не завершил авторизацию до {at}.",
+	"glm.noSession": "Сейчас нет незавершённого входа GLM.",
+	"glm.authorizationDenied": "В авторизации отказано: {denial}",
+	"glm.notAuthorizationCode": "Это не код авторизации и не полная ссылка обратного вызова (в ней нет параметра code).",
+	"glm.callbackReceived": "Обратный вызов получен; подтверждаем у сервиса…",
+	"glm.poolNotInstalled": "Пул аккаунтов не установлен.",
+	"glm.unknownStrategy": "Неизвестная стратегия ротации.",
+	"glm.unknownAccountAction": "Неизвестное действие с аккаунтом: {action}",
+	"glm.pasteCallback": "Вставьте ссылку обратного вызова или код авторизации.",
+	"glm.noLoginInProgress": "Сейчас нет входа в процессе; сначала начните его.",
+	"glm.notSignedIn": "Вход в аккаунт {provider} ещё не выполнен."
+};
+//#endregion
+//#region src/host/common/i18n/zh.ts
+/**
+* Chinese copy for everything the Host says on its own.
+*
+* The key set here is the source of truth: `en` and `ru` are typed against
+* `keyof typeof zh`, so a key added here fails to compile until both other
+* languages carry it too. Values keep the exact wording the plugin shipped
+* before it spoke three languages — `zh` is the default locale, and a
+* regression in Chinese is a regression for every existing install.
+*/
+const zh = {
+	"provider.codex-chatgpt": "Codex（ChatGPT 订阅）",
+	"provider.claude": "Claude（订阅）",
+	"provider.workbuddy": "WorkBuddy（CodeBuddy 订阅）",
+	"provider.glm-coding-plan": "GLM（ZCode 账号）",
+	"provider.minimax-code": "MiniMax Code（编程订阅）",
+	"provider.qoder": "Qoder（订阅）",
+	"provider.step-code": "Step Code（Step Plan 订阅）",
+	"pool.maxAccounts": "{provider} 号池最多支持 {max} 个账号，请先删除不再使用的账号。",
+	"pool.notSignedIn": "未登录 {provider} 账号，请先在设置页添加账号。",
+	"pool.allNeedSignIn": "全部 {count} 个 {provider} 账号均需要重新登录。",
+	"pool.credentialRejected": "{provider} 账号的凭据已被拒绝，需要重新登录。",
+	"pool.allUnavailable": "全部 {count} 个 {provider} 账号当前都不可用，且没有处于冷却中的账号。",
+	"pool.allCoolingDown": "全部 {count} 个 {provider} 账号均处于配额限制或冷却中 (429)。最短预计在 {minutes} 分钟后解除冷却。",
+	"codex.refresherNotReady": "ChatGPT 凭据刷新服务尚未就绪",
+	"codex.notSignedIn": "未登录 ChatGPT 账号，请在「设置 → 订阅服务 → ChatGPT」中添加并登录账号。",
+	"codex.accountGone": "ChatGPT 账号已不在号池中",
+	"antigravity.quotaExhausted": "Antigravity 账号配额已耗尽或请求受限 (429 RESOURCE_EXHAUSTED)。请在插件设置页查看配额剩余百分比及重置倒计时。原始响应: {body}",
+	"antigravity.rateLimitedNoReset": "Antigravity 上游返回 429 (RESOURCE_EXHAUSTED) 但未给出重置时间，因此按瞬时限流处理，不视为账号配额耗尽，也不会冷却该账号。原始响应: {body}",
+	"wb.oauth.loginInitFailed": "{provider} 登录初始化失败（HTTP {status}）：{detail}",
+	"wb.oauth.loginMissingState": "{provider} 登录响应缺少 state 或 authUrl",
+	"wb.oauth.loginPollInvalid": "{provider} 登录轮询响应无效",
+	"wb.oauth.loginFailed": "{provider} 登录失败：{detail}",
+	"wb.oauth.loginMissingToken": "{provider} 登录成功响应缺少 access token",
+	"wb.oauth.loginPollFailed": "{provider} 登录轮询失败（HTTP {status}）：{detail}",
+	"wb.oauth.loginPollNotJson": "{provider} 登录轮询返回了非 JSON 响应",
+	"wb.oauth.waitingBrowser": "等待浏览器授权…",
+	"wb.oauth.waitingBrowserElapsed": "等待浏览器授权…（{seconds} 秒）",
+	"wb.oauth.authorized": "授权完成",
+	"wb.oauth.loginTimeout": "登录超时，请重新添加账号。",
+	"wb.pool.pausedDefault": "号池已暂停。",
+	"wb.pool.accountLabel": "账号 {position}",
+	"wb.pool.paused": "{provider} 号池已暂停：{reason} 预计 {minutes} 分钟后自动恢复；被上游限制的账号需要重新登录后才能回到轮换。",
+	"wb.pool.notAccountScoped": "{provider} 号池只记录账号级限制（{expected}），收到业务码 {code}；11128 与 11158 不是账号级拒绝，必须由协议层分别处理。",
+	"wb.pool.upstreamRefused": "上游以 {code} 在 {minutes} 分钟内拒绝了 {count} 个不同账号",
+	"wb.pool.desktopAccountUndeletable": "桌面账号由 CodeBuddy 客户端所有，只能隐藏，不能删除。",
+	"qo.modelResolveAborted": "{provider} 模型解析已取消",
+	"qo.requestAborted": "{provider} 请求已取消",
+	"qo.requestFailed": "{provider} 请求失败：{detail}",
+	"qo.emptyBody": "{provider} 返回了空响应体",
+	"qo.noBrowserOutsideGlobal": "{provider} 全球区以外的部署不支持浏览器登录",
+	"qo.devicePollFailed": "{provider} 设备轮询失败（HTTP {status}）{detail}",
+	"qo.devicePollNotJson": "{provider} 设备轮询响应不是 JSON 对象",
+	"qo.devicePollNoToken": "{provider} 设备轮询的 200 响应里没有 token",
+	"qo.patEmpty": "{provider} 的 PAT 是空的。",
+	"qo.noRefreshToken": "{provider} 的这份凭据没有刷新令牌，只有重新登录才能续期。",
+	"qo.cnNoBrowserLogin": "{provider} 中国站不支持浏览器登录，请改用 PAT（{patPage}）或导入本机 qodercli 登录态。",
+	"qo.waitingBrowserPoll": "等待浏览器授权…（每 {seconds} 秒查询一次）",
+	"qo.loginTimeout": "{provider} 登录超时：没有在有效期内完成浏览器授权。",
+	"qo.authorized": "授权完成",
+	"qo.cancelled": "操作已取消",
+	"qo.poolPayloadInvalid": "{provider} 号池载荷无效",
+	"qo.poolEmpty": "{provider} 号池中没有账号。",
+	"qo.userinfoFailed": "{provider} userinfo 请求失败（HTTP {status}）{detail}",
+	"qo.userinfoNotJson": "{provider} userinfo 响应不是 JSON 对象",
+	"qo.patExchangeNotJson": "{provider} PAT 兑换响应不是 JSON 对象",
+	"qo.patExchangeNoToken": "{provider} PAT 兑换响应里没有 token",
+	"qo.refreshFailed": "{provider} 令牌刷新失败（HTTP {status}）",
+	"qo.refreshNotJson": "{provider} 令牌刷新响应不是 JSON 对象",
+	"qo.refreshNoToken": "{provider} 令牌刷新响应里没有 token",
+	"qo.quotaHttp": "额度接口返回 HTTP {status}{detail}",
+	"qo.quotaNoBucket": "额度响应里没有认识的额度桶（上游可能改版）。",
+	"qo.poolNotInstalled": "账号池未安装。",
+	"qo.unknownStrategy": "未知的轮转策略。",
+	"qo.unknownAccountAction": "未知的账号操作：{action}",
+	"qo.pastePat": "请粘贴一个 Personal Access Token（pt-...）。",
+	"qo.notSignedIn": "还没有登录 {provider} 账号。",
+	"qo.catalogHttp": "目录接口返回 HTTP {status}",
+	"qo.credentialFieldInvalid": "{provider} 凭据字段无效：{key}",
+	"qo.credentialPayloadInvalid": "{provider} 凭据载荷无效",
+	"qo.credentialNoToken": "{provider} 凭据缺少 accessToken",
+	"qo.credentialRegionInvalid": "{provider} 凭据的 region 无效",
+	"qo.storeUnsupportedPlatform": "{label} 凭据存储只支持 Windows、macOS 或 Linux。",
+	"qo.encryptedWriteVerifyFailed": "{provider} 加密凭据写入校验失败",
+	"qo.modelSettingsWriteFailed": "{provider} 模型设置写入失败：落盘的选择与刚写入的不一致",
+	"sc.poolAccountFieldInvalid": "{provider} 号池账号字段无效：{key}",
+	"sc.poolCredentialInvalid": "{provider} 号池凭据无效",
+	"sc.poolCredentialNoAccess": "{provider} 号池凭据缺少 access",
+	"sc.poolCredentialProfileInvalid": "{provider} 号池凭据的 profile 无效",
+	"sc.poolPayloadInvalid": "{provider} 号池载荷无效",
+	"sc.poolEmpty": "{provider} 号池中没有账号。",
+	"sc.modelResolveAborted": "{provider} 模型解析已取消",
+	"sc.requestAborted": "{provider} 请求已取消",
+	"sc.requestFailed": "{provider} 请求失败：{detail}",
+	"sc.noResponse": "{provider} 没有返回任何响应",
+	"sc.emptyBody": "{provider} 返回了空响应体",
+	"sc.poolNotInstalled": "账号池未安装。",
+	"sc.unknownStrategy": "未知的轮转策略。",
+	"sc.unknownAccountAction": "未知的账号操作：{action}",
+	"sc.pastePlatformKey": "请粘贴一个 Platform API Key。",
+	"sc.missingAccount": "请填写账号。",
+	"sc.missingPassword": "请填写密码。",
+	"sc.unknownQuotaCredentialMode": "未知的额度凭据提交方式：{mode}",
+	"sc.notSignedIn": "还没有登录 {provider} 账号。",
+	"sc.catalogHttp": "目录接口返回 HTTP {status}",
+	"sc.loginPhaseFailed": "{provider} 登录 {phase} {detail}",
+	"sc.loginRequestTimeout": "{provider} 登录请求超时",
+	"sc.authorizeUrlInvalid": "{provider} 的授权地址不是合法 URL：{value}",
+	"sc.authorizeUrlNotHttps": "{provider} 的授权地址必须使用 https",
+	"sc.authorizeUrlHasCredentials": "{provider} 的授权地址不得包含用户名或密码",
+	"sc.cancelled": "操作已取消",
+	"sc.loginTimeout": "{provider} 登录超时：没有在有效期内完成浏览器授权。",
+	"sc.pollTokenEmpty": "{provider} 登录的 poll_token 不能为空",
+	"sc.loginNoApiKey": "{provider} 登录成功但没有拿到 api_key",
+	"sc.apiKeyEmpty": "{provider} API Key 是空的。",
+	"sc.waitingBrowserPoll": "等待浏览器授权…（每 {seconds} 秒查询一次）",
+	"sc.authorized": "授权完成",
+	"sc.credentialFieldInvalid": "{provider} 凭据字段无效：{key}",
+	"sc.credentialPayloadInvalid": "{provider} 凭据载荷无效",
+	"sc.credentialNoApiKey": "{provider} 凭据缺少 apiKey",
+	"sc.credentialProfileInvalid": "{provider} 凭据的 profile 无效",
+	"sc.storeUnsupportedPlatform": "{label} 凭据存储只支持 Windows、macOS 或 Linux。",
+	"sc.encryptedWriteVerifyFailed": "{provider} 加密凭据写入校验失败",
+	"sc.quotaCredentialPayloadInvalid": "{provider} 额度凭据载荷无效",
+	"sc.quotaCredentialNoToken": "{provider} 额度凭据缺少 Oasis-Token",
+	"sc.quotaCredentialNoDeviceId": "{provider} 额度凭据缺少 Oasis-Webid",
+	"sc.quotaCredentialWriteVerifyFailed": "{provider} 额度凭据写入校验失败",
+	"sc.modelSettingsWriteFailed": "{provider} 模型设置写入失败：落盘的选择与刚写入的不一致",
+	"glm.quotaNeedsKey": "{provider} 的配额接口需要一把 Coding Plan Key（裸值，不加 Bearer）；空凭据不会变成一个能通过鉴权的请求。",
+	"glm.catalogNotJson": "{provider} 返回的模型目录不是可读的 JSON：{url}",
+	"glm.quotaNeedsKeyShort": "{provider} 的配额读取需要一把 Coding Plan Key（裸值，不加 Bearer）。",
+	"glm.quotaUnreachable": "配额接口不可达：{detail}",
+	"glm.quotaHttp": "配额查询失败（HTTP {status}）",
+	"glm.quotaNotJson": "配额查询返回的不是 JSON。",
+	"glm.quotaNoWindow": "上游没有返回可显示的额度窗口。",
+	"glm.cooldownUntilReset": "{provider} 429：用量窗口将于 {at} 重置",
+	"glm.cooldownRetryAfter": "{provider} 429：上游要求 {seconds} 秒后再试",
+	"glm.cooldownNoReset": "{provider} 429：上游未给重置时刻，按 5 分钟冷却",
+	"glm.modelResolveAborted": "{provider} 模型解析已取消",
+	"glm.requestAborted": "{provider} 请求已取消",
+	"glm.requestFailed": "{provider} 请求失败：{detail}",
+	"glm.noResponse": "{provider} 没有返回任何响应",
+	"glm.emptyBody": "{provider} 返回了空响应体",
+	"glm.anthropicEmpty": "{provider} 的 Anthropic 面没有返回任何内容",
+	"glm.waitingBrowser": "等待你在浏览器里完成授权…",
+	"glm.connectingUpstream": "连接上游失败，正在重试…",
+	"glm.upstreamUnavailable": "上游暂时不可用（HTTP {status}），正在重试…",
+	"glm.upstreamRetryLater": "上游要求稍后再试（HTTP {status}），正在重试…",
+	"glm.pollRejected": "ZCode 登录轮询被拒绝（HTTP {status}）：{url}",
+	"glm.unparsableRetry": "上游返回了无法解析的响应，正在重试…",
+	"glm.pollBusinessCode": "ZCode 登录轮询返回业务错误码 {code}{detail}",
+	"glm.readyNoToken": "就绪响应缺少 access_token，正在重试…",
+	"glm.sessionCancelled": "这次登录已经取消或已经过期，请重新发起登录。",
+	"glm.loginTimeout": "登录超时：上游在 {at} 之前没有完成授权。",
+	"glm.noSession": "当前没有进行中的 GLM 登录流程可供补全。",
+	"glm.authorizationDenied": "授权被拒绝：{denial}",
+	"glm.notAuthorizationCode": "这看起来不是授权码，也不是完整的回调链接（里面没有 code 参数）。",
+	"glm.callbackReceived": "已收到回调，正在向上游确认…",
+	"glm.poolNotInstalled": "账号池未安装。",
+	"glm.unknownStrategy": "未知的轮转策略。",
+	"glm.unknownAccountAction": "未知的账号操作：{action}",
+	"glm.pasteCallback": "请粘贴回调链接或授权码。",
+	"glm.noLoginInProgress": "当前没有进行中的登录流程，请先点击登录。",
+	"glm.notSignedIn": "还没有登录 {provider} 账号。"
+};
+//#endregion
+//#region src/host/common/i18n/t.ts
+const DICTIONARIES = {
+	zh,
+	en,
+	ru
+};
+/**
+* Copy for one key in one language, with `{name}` placeholders filled.
+*
+* @param locale - Language to answer in.
+* @param key - Key from the Chinese source dictionary.
+* @param params - Values for the placeholders the template declares.
+* @returns The rendered copy; a key missing from a language falls back to Chinese.
+*/
+function translate$2(locale, key, params) {
+	return interpolate((DICTIONARIES[locale] ?? zh)[key] ?? zh[key] ?? key, params);
+}
+/**
+* Copy for one key in the language currently in force.
+*
+* @param key - Key from the Chinese source dictionary.
+* @param params - Values for the placeholders the template declares.
+* @returns The rendered copy.
+*/
+function t(key, params) {
+	return translate$2(currentLocale(), key, params);
+}
+/**
+* Fill `{name}` placeholders; an absent parameter leaves its placeholder alone
+* so a mis-wired call is visible rather than silently blank.
+*
+* @param template - Copy carrying placeholders.
+* @param params - Values by placeholder name.
+* @returns The rendered copy.
+*/
+function interpolate(template, params) {
+	if (params === void 0) return template;
+	return template.replace(/\{([A-Za-z0-9_.-]+)\}/g, (whole, name) => {
+		const value = params[name];
+		if (value === void 0 || value === null) return whole;
+		return String(value);
+	});
+}
+//#endregion
+//#region src/host/common/i18n/provider-name.ts
+/** Provider id to the key that names it. */
+const NAME_KEYS = /* @__PURE__ */ new Map([
+	["codex-chatgpt", "provider.codex-chatgpt"],
+	["claude-subscription", "provider.claude"],
+	["workbuddy-subscription", "provider.workbuddy"],
+	["glm-coding-plan", "provider.glm-coding-plan"],
+	["minimax-code", "provider.minimax-code"],
+	["qoder", "provider.qoder"],
+	["step-code", "provider.step-code"]
+]);
+/**
+* The name one provider registers under, in the language in force.
+*
+* @param providerId - Id the harness asked about.
+* @param fallback - The adapter's own neutral name, used when this build has no
+* translation for the id (a provider this table does not know).
+* @returns Localized display name, or `fallback`.
+*/
+function localizedProviderName(providerId, fallback) {
+	const key = NAME_KEYS.get(providerId);
+	return key === void 0 ? fallback : t(key);
+}
+//#endregion
 //#region src/host/common/output-reservation.ts
 /**
 * Keep fixed defaults only when they fit DSH compaction-basic's default policy.
@@ -151,7 +807,7 @@ const ROUTE_PREFIX$5 = "/api/dsh-chatgpt-subscription";
 * `test/responses-client.test.ts` asserts the two agree, so a release that
 * forgets this constant fails the suite instead of shipping quietly.
 */
-const PLUGIN_VERSION = "0.54.0";
+const PLUGIN_VERSION = "0.56.0";
 const CODEX_CHATGPT_PROVIDER_ID = "codex-chatgpt";
 const CODEX_API_BASE = "https://chatgpt.com/backend-api/codex";
 const CODEX_RESPONSES_URL = `${CODEX_API_BASE}/responses`;
@@ -997,7 +1653,7 @@ var CodexChatGptAdapter = class extends LlmAdapter {
 	providerInfo(provider) {
 		return {
 			id: provider,
-			name: PROVIDER_NAME$12
+			name: localizedProviderName(provider, PROVIDER_NAME$12)
 		};
 	}
 	providerRetryPolicy() {
@@ -2420,7 +3076,10 @@ var AccountPoolCore = class {
 		const key = this.hooks.dedupeKey?.(credentials);
 		const existingIndex = key === void 0 ? -1 : data.accounts.findIndex((account) => this.hooks.dedupeKey?.(account.credentials) === key);
 		const maxAccounts = this.hooks.maxAccounts ?? 20;
-		if (existingIndex < 0 && data.accounts.length >= maxAccounts) throw new Error(`${this.hooks.displayName} 号池最多支持 ${maxAccounts} 个账号，请先删除不再使用的账号。`);
+		if (existingIndex < 0 && data.accounts.length >= maxAccounts) throw new Error(t("pool.maxAccounts", {
+			provider: this.hooks.displayName,
+			max: maxAccounts
+		}));
 		const existing = existingIndex >= 0 ? data.accounts[existingIndex] : void 0;
 		const id = existing === void 0 ? this.hooks.accountId?.(credentials) ?? `acc_${randomBytes(6).toString("hex")}` : existing.id;
 		const isPrimary = data.accounts.length === 0 || existing?.isPrimary === true;
@@ -2580,9 +3239,12 @@ var AccountPoolCore = class {
 	*/
 	async getCredentialAccount(fetchFn = fetch, forceRefresh = false) {
 		const data = await this.read();
-		if (data.accounts.length === 0) throw new Error(this.hooks.emptyMessage ?? `未登录 ${this.hooks.displayName} 账号，请先在设置页添加账号。`);
+		if (data.accounts.length === 0) throw new Error(this.hooks.emptyMessage ?? t("pool.notSignedIn", { provider: this.hooks.displayName }));
 		const usable = data.accounts.filter((account) => this.isCredentialUsable(account));
-		if (usable.length === 0) throw new LlmError(`全部 ${data.accounts.length} 个 ${this.hooks.displayName} 账号均需要重新登录。`, "AUTH", { status: 401 });
+		if (usable.length === 0) throw new LlmError(t("pool.allNeedSignIn", {
+			count: data.accounts.length,
+			provider: this.hooks.displayName
+		}), "AUTH", { status: 401 });
 		const selected = this.selectAccount(usable, data);
 		const account = await this.freshAccount(selected, fetchFn, forceRefresh);
 		return {
@@ -2636,8 +3298,8 @@ var AccountPoolCore = class {
 	async credentialFor(accountId, fetchFn, force, expected) {
 		const data = await this.read();
 		const target = accountId === void 0 ? data.accounts.find((account) => account.id === data.activeAccountId) ?? data.accounts.find((account) => account.isPrimary) ?? data.accounts[0] : data.accounts.find((account) => account.id === accountId);
-		if (target === void 0) throw new LlmError(this.hooks.emptyMessage ?? `未登录 ${this.hooks.displayName} 账号，请先在设置页添加账号。`, "AUTH");
-		if (!this.isCredentialUsable(target)) throw new LlmError(`${this.hooks.displayName} 账号的凭据已被拒绝，需要重新登录。`, "AUTH", { status: 401 });
+		if (target === void 0) throw new LlmError(this.hooks.emptyMessage ?? t("pool.notSignedIn", { provider: this.hooks.displayName }), "AUTH");
+		if (!this.isCredentialUsable(target)) throw new LlmError(t("pool.credentialRejected", { provider: this.hooks.displayName }), "AUTH", { status: 401 });
 		if (expected !== void 0 && !isDeepStrictEqual(expected, target.credentials)) return target.credentials;
 		return (await this.freshAccount(target, fetchFn, force)).credentials;
 	}
@@ -2659,7 +3321,7 @@ var AccountPoolCore = class {
 		let launch;
 		const plan = await this.serialize(async () => {
 			const current = (await this.loadPoolData()).accounts.find((account) => account.id === target.id);
-			if (current === void 0 || !this.isCredentialUsable(current)) throw new PoolAccountUnavailableError(this.hooks.emptyMessage ?? "未登录 " + this.hooks.displayName + " 账号，请先在设置页添加账号。", "AUTH");
+			if (current === void 0 || !this.isCredentialUsable(current)) throw new PoolAccountUnavailableError(this.hooks.emptyMessage ?? t("pool.notSignedIn", { provider: this.hooks.displayName }), "AUTH");
 			if (!isDeepStrictEqual(current.credentials, target.credentials)) return { account: current };
 			if (!this.hooks.refresh || !force && !this.shouldRefreshCredential(current, Date.now())) return { account: current };
 			const key = JSON.stringify([this.operationKey, current.id]);
@@ -2731,8 +3393,8 @@ var AccountPoolCore = class {
 		return account;
 	}
 	assertUsableAccount(account) {
-		if (account === void 0) throw new PoolAccountUnavailableError(this.hooks.emptyMessage ?? "未登录 " + this.hooks.displayName + " 账号，请先在设置页添加账号。", "AUTH");
-		if (!this.isCredentialUsable(account)) throw new PoolAccountUnavailableError(this.hooks.displayName + " 账号的凭据已被拒绝，需要重新登录。", "AUTH", { status: 401 });
+		if (account === void 0) throw new PoolAccountUnavailableError(this.hooks.emptyMessage ?? t("pool.notSignedIn", { provider: this.hooks.displayName }), "AUTH");
+		if (!this.isCredentialUsable(account)) throw new PoolAccountUnavailableError(t("pool.credentialRejected", { provider: this.hooks.displayName }), "AUTH", { status: 401 });
 	}
 	/** Whether one account's credential must be refreshed before it is handed out. */
 	shouldRefreshCredential(account, now) {
@@ -2784,9 +3446,19 @@ var AccountPoolCore = class {
 	allUnavailableError(data, now) {
 		let shortest = Infinity;
 		for (const account of data.accounts) if (account.cooldownUntil !== void 0 && account.cooldownUntil > now) shortest = Math.min(shortest, account.cooldownUntil - now);
-		if (!data.accounts.some((account) => this.isCredentialUsable(account))) return new LlmError(this.hooks.allAuthFailedMessage?.(data.accounts.length) ?? `全部 ${data.accounts.length} 个 ${this.hooks.displayName} 账号均需要重新登录。`, "AUTH", { status: 401 });
+		if (!data.accounts.some((account) => this.isCredentialUsable(account))) return new LlmError(this.hooks.allAuthFailedMessage?.(data.accounts.length) ?? t("pool.allNeedSignIn", {
+			count: data.accounts.length,
+			provider: this.hooks.displayName
+		}), "AUTH", { status: 401 });
 		const waitMinutes = Number.isFinite(shortest) ? Math.ceil(shortest / 6e4) : null;
-		return new LlmError(this.hooks.allUnavailableMessage?.(data.accounts.length, waitMinutes) ?? (waitMinutes === null ? `全部 ${data.accounts.length} 个 ${this.hooks.displayName} 账号当前都不可用，且没有处于冷却中的账号。` : `全部 ${data.accounts.length} 个 ${this.hooks.displayName} 账号均处于配额限制或冷却中 (429)。最短预计在 ${waitMinutes} 分钟后解除冷却。`), "RATE_LIMIT", { status: 429 });
+		return new LlmError(this.hooks.allUnavailableMessage?.(data.accounts.length, waitMinutes) ?? (waitMinutes === null ? t("pool.allUnavailable", {
+			count: data.accounts.length,
+			provider: this.hooks.displayName
+		}) : t("pool.allCoolingDown", {
+			count: data.accounts.length,
+			provider: this.hooks.displayName,
+			minutes: waitMinutes
+		})), "RATE_LIMIT", { status: 429 });
 	}
 	/**
 	* Pick the account for the next request, refreshing its credential when it is
@@ -2802,7 +3474,7 @@ var AccountPoolCore = class {
 	*/
 	async getEffectiveAccount(excludeIds, fetchFn = fetch, forceRefresh = false, options) {
 		const data = await this.read();
-		if (data.accounts.length === 0) throw new Error(this.hooks.emptyMessage ?? `未登录 ${this.hooks.displayName} 账号，请先在设置页添加账号。`);
+		if (data.accounts.length === 0) throw new Error(this.hooks.emptyMessage ?? t("pool.notSignedIn", { provider: this.hooks.displayName }));
 		const now = Date.now();
 		const eligible = data.accounts.filter((account) => this.isEligible(account, now, excludeIds));
 		if (eligible.length === 0) throw this.allUnavailableError(data, now);
@@ -4607,7 +5279,7 @@ var CodexAccountPool = class extends AccountPoolCore {
 			refresh: async (credentials) => {
 				if (isAdoptedCodexPoolCredential(credentials)) throw new CodexAdoptedCredentialError(isAdoptedCodexCredentialExpired(credentials) ? ADOPTED_CODEX_CREDENTIAL_EXPIRED_HINT : ADOPTED_NEVER_REFRESHED_MESSAGE$1);
 				const refresher = ref.current;
-				if (refresher === void 0) throw new Error("ChatGPT 凭据刷新服务尚未就绪");
+				if (refresher === void 0) throw new Error(t("codex.refresherNotReady"));
 				return refresher.refreshAccount(credentials);
 			},
 			authRejectedReason: (credentials) => codexAuthRejectedReason(credentials),
@@ -4657,7 +5329,7 @@ var CodexAccountPool = class extends AccountPoolCore {
 					} : {}
 				};
 			},
-			emptyMessage: "未登录 ChatGPT 账号，请在「设置 → 订阅服务 → ChatGPT」中添加并登录账号。",
+			emptyMessage: t("codex.notSignedIn"),
 			...options.backend === void 0 ? {} : { backend: options.backend },
 			...options.keyring === void 0 ? {} : { keyring: options.keyring },
 			...options.maxAccounts === void 0 ? {} : { maxAccounts: options.maxAccounts }
@@ -4707,8 +5379,8 @@ var CodexAccountPool = class extends AccountPoolCore {
 	*/
 	async refreshAccountNow(accountId) {
 		const account = (await this.read()).accounts.find((entry) => entry.id === accountId);
-		if (account === void 0) throw new Error("ChatGPT 账号已不在号池中");
-		if (this.refresherRef.current === void 0) throw new Error("ChatGPT 凭据刷新服务尚未就绪");
+		if (account === void 0) throw new Error(t("codex.accountGone"));
+		if (this.refresherRef.current === void 0) throw new Error(t("codex.refresherNotReady"));
 		return this.renewCredential(accountId, fetch, account.credentials);
 	}
 	/**
@@ -9315,7 +9987,7 @@ var AntigravityAdapter = class extends LlmAdapter {
 	providerInfo(provider) {
 		return {
 			id: provider,
-			name: PROVIDER_NAME$11
+			name: localizedProviderName(provider, PROVIDER_NAME$11)
 		};
 	}
 	providerRetryPolicy() {}
@@ -9550,8 +10222,8 @@ var AntigravityAdapter = class extends LlmAdapter {
 			if (response === void 0) throw new LlmError(`Antigravity request failed before any endpoint answered: ${(transportError instanceof Error ? transportError.message : transportError === void 0 ? "" : String(transportError)) || "No response"}`, "TRANSPORT", transportError === void 0 ? {} : { cause: transportError });
 			const status = response.status;
 			if (status === 429) {
-				if (retryDelayMs(response.headers, errText) !== void 0) throw new LlmError(`Antigravity 账号配额已耗尽或请求受限 (429 RESOURCE_EXHAUSTED)。请在插件设置页查看配额剩余百分比及重置倒计时。原始响应: ${errText || "No response"}`, "RATE_LIMIT", { status: 429 });
-				throw new LlmError(`Antigravity 上游返回 429 (RESOURCE_EXHAUSTED) 但未给出重置时间，因此按瞬时限流处理，不视为账号配额耗尽，也不会冷却该账号。原始响应: ${upstreamBodyExcerpt(errText) || "No response"}`, "SERVER", { status: 429 });
+				if (retryDelayMs(response.headers, errText) !== void 0) throw new LlmError(t("antigravity.quotaExhausted", { body: errText || "No response" }), "RATE_LIMIT", { status: 429 });
+				throw new LlmError(t("antigravity.rateLimitedNoReset", { body: upstreamBodyExcerpt(errText) || "No response" }), "SERVER", { status: 429 });
 			}
 			if (status >= 500) throw new LlmError(`Antigravity upstream server error (${status}): ${errText || "No response"}`, "SERVER", { status });
 			throw new LlmError(`Antigravity API error (${status}): ${errText || "No response"}`, isHttpContextOverflow(status, errText) ? CONTEXT_OVERFLOW_CODE : "PROVIDER_ERROR", { status });
@@ -11436,7 +12108,9 @@ const DEFAULT_PREFERENCES = {
 	customProxyUrl: null,
 	compactionRoute: null,
 	subagentDefaultModels: [],
-	subagentModelsByMainModel: {}
+	subagentModelsByMainModel: {},
+	subagentDefaultAllowParentFork: false,
+	subagentAllowParentForkByMainModel: {}
 };
 const SEARCH_PROVIDER_CODEX = "codex";
 function isSearchProviderPreference(value) {
@@ -11550,6 +12224,36 @@ function mergeSubagentModelsByMainModel(current, patch) {
 	}
 	return merged;
 }
+/**
+* Merge one `subagentAllowParentForkByMainModel` patch into the stored map.
+*
+* `null` clears one key so that main model falls back to
+* `subagentDefaultAllowParentFork`; a boolean sets an explicit per-main-model
+* override (`true` OR `false`, since overriding a `true` global default back to
+* `false` for one main model is legitimate).
+* @param current - Map already stored in the preferences document.
+* @param patch - Incoming patch from a settings card or a route body.
+* @returns the merged map, or null when any key or value is malformed.
+*/
+function mergeSubagentAllowParentForkByMainModel(current, patch) {
+	const patchRecord = asRecord$19(patch);
+	if (patchRecord === void 0) return null;
+	const merged = {};
+	if (current !== void 0) {
+		for (const [k, v] of Object.entries(current)) if (typeof v === "boolean" && isValidMainModelKey(k)) merged[k.trim()] = v;
+	}
+	for (const [rawKey, rawValue] of Object.entries(patchRecord)) {
+		const key = rawKey.trim();
+		if (!isValidMainModelKey(key)) return null;
+		if (rawValue === null) {
+			delete merged[key];
+			continue;
+		}
+		if (typeof rawValue !== "boolean") return null;
+		merged[key] = rawValue;
+	}
+	return merged;
+}
 //#endregion
 //#region src/host/common/legacy-preferences.ts
 /**
@@ -11751,7 +12455,9 @@ function registerPreferenceStore(settings) {
 			model: z$1.string()
 		}), z$1.const(null)]).default(DEFAULT_PREFERENCES.compactionRoute ?? null),
 		subagentDefaultModels: subagentModelRoutes.default([]),
-		subagentModelsByMainModel: z$1.dict(subagentModelRoutes).default({})
+		subagentModelsByMainModel: z$1.dict(subagentModelRoutes).default({}),
+		subagentDefaultAllowParentFork: z$1.boolean().default(DEFAULT_PREFERENCES.subagentDefaultAllowParentFork ?? false),
+		subagentAllowParentForkByMainModel: z$1.dict(z$1.boolean()).default({})
 	});
 	if (!hasRegister(settings)) {
 		const fileStore = new FilePreferencesStore(schema, preferencesPath(), readLegacyPreferences);
@@ -11819,6 +12525,15 @@ var SettingsPreferenceStore = class {
 			if (merged === null) throw new PreferenceError("Unsupported subagentModelsByMainModel preference.");
 			normalized.subagentModelsByMainModel = merged;
 		}
+		if (patch.subagentDefaultAllowParentFork !== void 0) {
+			if (typeof patch.subagentDefaultAllowParentFork !== "boolean") throw new PreferenceError("Unsupported subagentDefaultAllowParentFork preference.");
+			normalized.subagentDefaultAllowParentFork = patch.subagentDefaultAllowParentFork;
+		}
+		if (patch.subagentAllowParentForkByMainModel !== void 0) {
+			const merged = mergeSubagentAllowParentForkByMainModel(this.scope.get().subagentAllowParentForkByMainModel, patch.subagentAllowParentForkByMainModel);
+			if (merged === null) throw new PreferenceError("Unsupported subagentAllowParentForkByMainModel preference.");
+			normalized.subagentAllowParentForkByMainModel = merged;
+		}
 		if (patch.customProxyUrl !== void 0) if (patch.customProxyUrl !== null) {
 			const trimmed = patch.customProxyUrl.trim();
 			if (trimmed.length > 0 && !/^https?:\/\//i.test(trimmed) && !/^socks5?:\/\//i.test(trimmed)) normalized.customProxyUrl = `http://${trimmed}`;
@@ -14521,6 +15236,15 @@ function registerRoutes(ctx, oauth, usage, preferences, proxyManager, searchSwit
 		};
 		try {
 			switch (url.pathname) {
+				case `${ROUTE_PREFIX$5}/i18n/locale`: {
+					const runtime = hostLocaleRuntime();
+					const tag = field(body, "locale");
+					json(response, {
+						ok: true,
+						value: { locale: runtime === void 0 ? currentLocale() : runtime.set(tag ?? void 0) }
+					});
+					return;
+				}
 				case `${ROUTE_PREFIX$5}/login/start`:
 					json(response, {
 						ok: true,
@@ -14849,6 +15573,14 @@ function readPreferencesUpdate(value, current) {
 		if (mergeSubagentModelsByMainModel(current.subagentModelsByMainModel, value.subagentModelsByMainModel) === null) throw new PreferenceError("subagentModelsByMainModel must map \"provider/model\" keys to arrays of { provider, model } routes, or null to clear one.");
 		patch.subagentModelsByMainModel = value.subagentModelsByMainModel;
 	}
+	if ("subagentDefaultAllowParentFork" in value) {
+		if (typeof value.subagentDefaultAllowParentFork !== "boolean") throw new PreferenceError("subagentDefaultAllowParentFork must be a boolean.");
+		patch.subagentDefaultAllowParentFork = value.subagentDefaultAllowParentFork;
+	}
+	if ("subagentAllowParentForkByMainModel" in value) {
+		if (mergeSubagentAllowParentForkByMainModel(current.subagentAllowParentForkByMainModel, value.subagentAllowParentForkByMainModel) === null) throw new PreferenceError("subagentAllowParentForkByMainModel must map \"provider/model\" keys to booleans, or null to clear one.");
+		patch.subagentAllowParentForkByMainModel = value.subagentAllowParentForkByMainModel;
+	}
 	if ("contextWindowOverrides" in value) {
 		if (!isRecord$62(value.contextWindowOverrides)) throw new PreferenceError("contextWindowOverrides must be an object.");
 		const overrides = {};
@@ -22471,7 +23203,7 @@ var CommandCodeAdapter = class extends LlmAdapter {
 	providerInfo(provider) {
 		return {
 			id: provider,
-			name: PROVIDER_NAME$10
+			name: localizedProviderName(provider, PROVIDER_NAME$10)
 		};
 	}
 	providerRetryPolicy() {
@@ -25083,7 +25815,7 @@ var OllamaAdapter = class extends LlmAdapter {
 	providerInfo(provider) {
 		return {
 			id: provider,
-			name: PROVIDER_NAME$9
+			name: localizedProviderName(provider, PROVIDER_NAME$9)
 		};
 	}
 	providerRetryPolicy() {
@@ -35947,7 +36679,7 @@ var KimiCodeAdapter = class extends LlmAdapter {
 	providerInfo(provider) {
 		return {
 			id: provider,
-			name: PROVIDER_NAME$8
+			name: localizedProviderName(provider, PROVIDER_NAME$8)
 		};
 	}
 	providerRetryPolicy() {
@@ -43289,7 +44021,7 @@ var MinimaxCodeAdapter = class extends LlmAdapter {
 	providerInfo(provider) {
 		return {
 			id: provider,
-			name: PROVIDER_NAME$7
+			name: localizedProviderName(provider, PROVIDER_NAME$7)
 		};
 	}
 	providerRetryPolicy() {
@@ -54289,7 +55021,7 @@ var ClaudeAdapter = class ClaudeAdapter extends LlmAdapter {
 	providerInfo(provider) {
 		return {
 			id: provider,
-			name: PROVIDER_NAME
+			name: localizedProviderName(provider, PROVIDER_NAME)
 		};
 	}
 	providerRetryPolicy() {
@@ -60091,7 +60823,7 @@ function glmOpenAiProbeHeaders(codingPlanKey) {
 */
 function quotaRequestHeaders$1(codingPlanKey) {
 	const key = codingPlanKey.trim();
-	if (key === "") throw new Error(failure$1("的配额接口需要一把 Coding Plan Key（裸值，不加 Bearer）；空凭据不会变成一个能通过鉴权的请求。"));
+	if (key === "") throw new Error(failure$1(t("glm.quotaNeedsKey", { provider: PROVIDER_NAME$1 })));
 	return {
 		"content-type": "application/json",
 		accept: "application/json",
@@ -60179,7 +60911,10 @@ async function fetchCatalog(region, codingPlanKey, options = {}) {
 	try {
 		payload = JSON.parse(text);
 	} catch {
-		throw new Error(failure$1("返回的模型目录不是可读的 JSON：" + url));
+		throw new Error(failure$1(t("glm.catalogNotJson", {
+			provider: PROVIDER_NAME$1,
+			url
+		})));
 	}
 	return parseCatalogListing(payload, region);
 }
@@ -60434,7 +61169,7 @@ async function fetchSubscriptionPlan(region, codingPlanKey, options = {}) {
 *   所以它同步抛出，与「上游读失败返回 `error`」那条路径分开。
 */
 async function fetchGlmQuota(region, codingPlanKey, options = {}) {
-	if (codingPlanKey.trim() === "") throw new Error(failure$1("的配额读取需要一把 Coding Plan Key（裸值，不加 Bearer）。"));
+	if (codingPlanKey.trim() === "") throw new Error(failure$1(t("glm.quotaNeedsKeyShort", { provider: PROVIDER_NAME$1 })));
 	const accountId = options.accountId;
 	const cached = quotaEntryFor(accountId);
 	if (options.force !== true && cached !== null && Date.now() - cached.at < 12e4) return {
@@ -60460,7 +61195,7 @@ async function fetchGlmQuota(region, codingPlanKey, options = {}) {
 		} catch (error) {
 			return {
 				snapshot: null,
-				error: failure$1("配额接口不可达：" + (error instanceof Error ? error.message : String(error))),
+				error: failure$1(t("glm.quotaUnreachable", { detail: error instanceof Error ? error.message : String(error) })),
 				fromCache: false
 			};
 		}
@@ -60469,7 +61204,7 @@ async function fetchGlmQuota(region, codingPlanKey, options = {}) {
 			const detail = summarize(text);
 			return {
 				snapshot: null,
-				error: failure$1("配额查询失败（HTTP " + response.status + "）") + (detail === "" ? "" : "：" + detail),
+				error: failure$1(t("glm.quotaHttp", { status: response.status })) + (detail === "" ? "" : "：" + detail),
 				fromCache: false
 			};
 		}
@@ -60479,7 +61214,7 @@ async function fetchGlmQuota(region, codingPlanKey, options = {}) {
 		} catch {
 			return {
 				snapshot: null,
-				error: failure$1("配额查询返回的不是 JSON。"),
+				error: failure$1(t("glm.quotaNotJson")),
 				fromCache: false
 			};
 		}
@@ -60492,7 +61227,7 @@ async function fetchGlmQuota(region, codingPlanKey, options = {}) {
 		});
 		if (snapshot === null) return {
 			snapshot: null,
-			error: failure$1("上游没有返回可显示的额度窗口。"),
+			error: failure$1(t("glm.quotaNoWindow")),
 			fromCache: false
 		};
 		return {
@@ -61482,18 +62217,24 @@ function glmCooldownDecision(input) {
 	if (resetsAt !== void 0) return {
 		cooldown: true,
 		durationMs: Math.max(3e4, resetsAt - Date.now()),
-		reason: "GLM（ZCode 账号） 429：用量窗口将于 " + new Date(resetsAt).toISOString() + " 重置"
+		reason: t("glm.cooldownUntilReset", {
+			provider: PROVIDER_NAME$1,
+			at: new Date(resetsAt).toISOString()
+		})
 	};
 	const after = input.headers === void 0 ? void 0 : retryAfterMs$1(input.headers);
 	if (after !== void 0 && after > 0) return {
 		cooldown: true,
 		durationMs: after,
-		reason: "GLM（ZCode 账号） 429：上游要求 " + Math.ceil(after / 1e3) + " 秒后再试"
+		reason: t("glm.cooldownRetryAfter", {
+			provider: PROVIDER_NAME$1,
+			seconds: Math.ceil(after / 1e3)
+		})
 	};
 	return {
 		cooldown: true,
 		durationMs: GLM_POOL_COOLDOWN_MS,
-		reason: "GLM（ZCode 账号） 429：上游未给重置时刻，按 5 分钟冷却"
+		reason: t("glm.cooldownNoReset", { provider: PROVIDER_NAME$1 })
 	};
 }
 /**
@@ -61560,7 +62301,7 @@ var GlmCodingPlanAdapter = class extends LlmAdapter {
 	providerInfo(provider) {
 		return {
 			id: provider,
-			name: PROVIDER_NAME$1
+			name: localizedProviderName(provider, PROVIDER_NAME$1)
 		};
 	}
 	providerRetryPolicy() {
@@ -61619,7 +62360,7 @@ var GlmCodingPlanAdapter = class extends LlmAdapter {
 		}));
 	}
 	async resolveModel(provider, model, signal) {
-		if (signal?.aborted) throw new LlmError("GLM（ZCode 账号） 模型解析已取消", "ABORTED");
+		if (signal?.aborted) throw new LlmError(t("glm.modelResolveAborted", { provider: PROVIDER_NAME$1 }), "ABORTED");
 		const settings = await this.settings();
 		const region = (await this.credentialFor().catch(() => null))?.credentials.codingPlan.region ?? "intl";
 		const entry = resolveGlmModel(model, this.catalog(region));
@@ -61688,8 +62429,11 @@ var GlmCodingPlanAdapter = class extends LlmAdapter {
 				});
 				activity?.pulse();
 			} catch (error) {
-				if (signal.aborted) throw new LlmError("GLM（ZCode 账号） 请求已取消", "ABORTED", { cause: error });
-				throw new LlmError("GLM（ZCode 账号） 请求失败：" + (error instanceof Error ? error.message : String(error)), "TRANSPORT", { cause: error });
+				if (signal.aborted) throw new LlmError(t("glm.requestAborted", { provider: PROVIDER_NAME$1 }), "ABORTED", { cause: error });
+				throw new LlmError(t("glm.requestFailed", {
+					provider: PROVIDER_NAME$1,
+					detail: error instanceof Error ? error.message : String(error)
+				}), "TRANSPORT", { cause: error });
 			}
 			if (response.ok) break;
 			const detail = await response.text().catch(() => "");
@@ -61726,8 +62470,8 @@ var GlmCodingPlanAdapter = class extends LlmAdapter {
 			throw failure;
 		}
 		const settled = plan;
-		if (response === void 0) throw new LlmError("GLM（ZCode 账号） 没有返回任何响应", "PROVIDER_ERROR");
-		if (response.body === null) throw new LlmError("GLM（ZCode 账号） 返回了空响应体", "PROVIDER_ERROR");
+		if (response === void 0) throw new LlmError(t("glm.noResponse", { provider: PROVIDER_NAME$1 }), "PROVIDER_ERROR");
+		if (response.body === null) throw new LlmError(t("glm.emptyBody", { provider: PROVIDER_NAME$1 }), "PROVIDER_ERROR");
 		const reader = response.body.getReader();
 		const decoder = new TextDecoder();
 		let buffer = "";
@@ -61750,7 +62494,7 @@ var GlmCodingPlanAdapter = class extends LlmAdapter {
 				buffer += decoder.decode();
 				if (buffer.trim() !== "") for (const line of buffer.split("\n")) for (const chunk of processGlmAnthropicStreamLine(line, state)) yield chunk;
 				if (state.finished) return;
-				if (!glmStreamHasContent(state)) throw new LlmError("GLM（ZCode 账号） 的 Anthropic 面没有返回任何内容", "PROVIDER_ERROR");
+				if (!glmStreamHasContent(state)) throw new LlmError(t("glm.anthropicEmpty", { provider: PROVIDER_NAME$1 }), "PROVIDER_ERROR");
 				assertGlmStreamComplete(state);
 				for (const chunk of closeGlmAnthropicStream(state)) yield chunk;
 			} finally {
@@ -62308,42 +63052,48 @@ async function pollCliFlow(flow, options = {}) {
 		if (options.signal?.aborted === true) throw error;
 		return {
 			kind: "pending",
-			progress: "连接上游失败，正在重试…"
+			progress: t("glm.connectingUpstream")
 		};
 	}
 	const payload = await response.json().catch(() => void 0);
 	if (response.status >= 500) return {
 		kind: "pending",
-		progress: "上游暂时不可用（HTTP " + response.status + "），正在重试…"
+		progress: t("glm.upstreamUnavailable", { status: response.status })
 	};
 	if (!response.ok) {
 		if (response.status === 408 || response.status === 429) return {
 			kind: "pending",
-			progress: "上游要求稍后再试（HTTP " + response.status + "），正在重试…"
+			progress: t("glm.upstreamRetryLater", { status: response.status })
 		};
-		throw new GlmLoginFatalError("ZCode 登录轮询被拒绝（HTTP " + response.status + "）：" + url);
+		throw new GlmLoginFatalError(t("glm.pollRejected", {
+			status: response.status,
+			url
+		}));
 	}
 	const root = asRecord$4(payload);
 	if (root === void 0) return {
 		kind: "pending",
-		progress: "上游返回了无法解析的响应，正在重试…"
+		progress: t("glm.unparsableRetry")
 	};
 	const code = readEnvelopeCode(root);
 	if (code !== void 0 && code !== 0 && code !== "0") {
 		const message = asString$11(root.msg) ?? asString$11(root.message);
-		throw new GlmLoginFatalError("ZCode 登录轮询返回业务错误码 " + String(code) + (message === void 0 ? "" : "：" + message));
+		throw new GlmLoginFatalError(t("glm.pollBusinessCode", {
+			code: String(code),
+			detail: message === void 0 ? "" : "：" + message
+		}));
 	}
 	const body = unwrapBody(root, [CLI_READY_FIELDS$1.status, CLI_READY_FIELDS$1.user]);
 	const status = body === void 0 ? void 0 : asString$11(body[CLI_READY_FIELDS$1.status]);
 	if (status === CLI_PENDING_STATUS) return {
 		kind: "pending",
-		progress: "等待你在浏览器里完成授权…"
+		progress: t("glm.waitingBrowser")
 	};
 	if (status === "ready") {
 		const credentials = parseReadyCredentials(root, flow.region, Date.now());
 		if (credentials === null) return {
 			kind: "pending",
-			progress: "就绪响应缺少 access_token，正在重试…"
+			progress: t("glm.readyNoToken")
 		};
 		return {
 			kind: "ready",
@@ -62415,7 +63165,7 @@ async function beginWebLogin$5(options = {}) {
 				startedAt: now,
 				expiresAt: init.expiresAt,
 				pollIntervalSec: init.pollIntervalSec,
-				progress: "等待你在浏览器里完成授权…"
+				progress: t("glm.waitingBrowser")
 			}
 		};
 		loginSessions.set(loginId, session);
@@ -62459,7 +63209,7 @@ async function pollWebLogin$1(loginId, options = {}) {
 		loginId,
 		credentials: null,
 		status: "error",
-		error: "这次登录已经取消或已经过期，请重新发起登录。",
+		error: t("glm.sessionCancelled"),
 		retryable: false
 	};
 	if (now >= session.deadline) {
@@ -62469,7 +63219,7 @@ async function pollWebLogin$1(loginId, options = {}) {
 			...session.status,
 			status: "error",
 			progress: void 0,
-			error: "登录超时：上游在 " + new Date(session.deadline).toISOString() + " 之前没有完成授权。",
+			error: t("glm.loginTimeout", { at: new Date(session.deadline).toISOString() }),
 			retryable: false
 		};
 		return snapshot(session);
@@ -62583,7 +63333,7 @@ function extractAuthorizationError(raw) {
 function submitLoginCode(raw, options = {}) {
 	const id = options.loginId ?? latestLoginId;
 	const session = id === null || id === void 0 ? void 0 : loginSessions.get(id);
-	if (session === void 0 || session.status.status !== "pending") throw new Error("当前没有进行中的 GLM 登录流程可供补全。");
+	if (session === void 0 || session.status.status !== "pending") throw new Error(t("glm.noSession"));
 	const denial = extractAuthorizationError(raw);
 	if (denial !== "") {
 		loginSessions.delete(session.loginId);
@@ -62592,18 +63342,18 @@ function submitLoginCode(raw, options = {}) {
 			...session.status,
 			status: "error",
 			progress: void 0,
-			error: "授权被拒绝：" + denial,
+			error: t("glm.authorizationDenied", { denial }),
 			retryable: false
 		};
 		return snapshot(session);
 	}
 	const code = extractAuthorizationCode(raw);
-	if (code === "") throw new Error("这看起来不是授权码，也不是完整的回调链接（里面没有 code 参数）。");
+	if (code === "") throw new Error(t("glm.notAuthorizationCode"));
 	session.manualCode = code;
 	session.nextPollAt = 0;
 	session.status = {
 		...session.status,
-		progress: "已收到回调，正在向上游确认…"
+		progress: t("glm.callbackReceived")
 	};
 	return snapshot(session);
 }
@@ -62913,7 +63663,7 @@ function registerGlmCodingPlanRoutes(ctx, settings, options = {}) {
 				if (!isSameOriginMutation(request)) return sendCrossOrigin$2(response);
 				if (accountPool === void 0) return sendJson$5(response, 400, {
 					ok: false,
-					error: "账号池未安装。"
+					error: t("glm.poolNotInstalled")
 				});
 				const body = await readRequestJson$5(request);
 				const action = typeof body.action === "string" ? body.action : "";
@@ -62921,7 +63671,7 @@ function registerGlmCodingPlanRoutes(ctx, settings, options = {}) {
 					const strategy = body.strategy;
 					if (strategy !== "sequential" && strategy !== "round-robin" && strategy !== "sticky") return sendJson$5(response, 400, {
 						ok: false,
-						error: "未知的轮转策略。"
+						error: t("glm.unknownStrategy")
 					});
 					await accountPool.setStrategy(strategy);
 					return sendJson$5(response, 200, {
@@ -62950,7 +63700,7 @@ function registerGlmCodingPlanRoutes(ctx, settings, options = {}) {
 						break;
 					default: return sendJson$5(response, 400, {
 						ok: false,
-						error: "未知的账号操作：" + action
+						error: t("glm.unknownAccountAction", { action })
 					});
 				}
 				return sendJson$5(response, 200, {
@@ -63040,12 +63790,12 @@ function registerGlmCodingPlanRoutes(ctx, settings, options = {}) {
 				const raw = typeof body.code === "string" ? body.code : "";
 				if (raw.trim() === "") return sendJson$5(response, 400, {
 					ok: false,
-					error: "请粘贴回调链接或授权码。"
+					error: t("glm.pasteCallback")
 				});
 				const current = latestLogin ?? getWebLoginStatus$3();
 				if (current === null) return sendJson$5(response, 400, {
 					ok: false,
-					error: "当前没有进行中的登录流程，请先点击登录。"
+					error: t("glm.noLoginInProgress")
 				});
 				let submitted;
 				try {
@@ -63119,7 +63869,7 @@ async function probeConnection$3(accountPool, fetchFn) {
 		account: null,
 		model: null,
 		checkedAt,
-		error: "还没有登录 GLM（ZCode 账号） 账号。"
+		error: t("glm.notSignedIn", { provider: PROVIDER_NAME$1 })
 	};
 	const region = target.credentials.codingPlan.region;
 	const started = Date.now();
@@ -65607,7 +66357,10 @@ function asFiniteNumber$1(value) {
 function optionalString$7(record, key) {
 	const value = record[key];
 	if (value === void 0 || value === null) return void 0;
-	if (typeof value !== "string") throw new Error("Step Code 凭据字段无效：" + key);
+	if (typeof value !== "string") throw new Error(t("sc.credentialFieldInvalid", {
+		provider: "Step Code",
+		key
+	}));
 	return value;
 }
 function isOrigin$1(value) {
@@ -65625,11 +66378,11 @@ function isOrigin$1(value) {
 * 猜错的代价是一次拿国区凭据去打国际区端点的明确鉴权失败，排查成本远高于让它重新登录。
 */
 function parseStepCodeCredentials$1(value) {
-	if (!isRecord$30(value)) throw new Error("Step Code 凭据载荷无效");
+	if (!isRecord$30(value)) throw new Error(t("sc.credentialPayloadInvalid", { provider: "Step Code" }));
 	const apiKey = asString$9(value.apiKey);
-	if (apiKey === void 0) throw new Error("Step Code 凭据缺少 apiKey");
+	if (apiKey === void 0) throw new Error(t("sc.credentialNoApiKey", { provider: "Step Code" }));
 	const profile = normalizeProfile(value.profile);
-	if (profile === void 0) throw new Error("Step Code 凭据的 profile 无效");
+	if (profile === void 0) throw new Error(t("sc.credentialProfileInvalid", { provider: "Step Code" }));
 	const origin = isOrigin$1(value.origin) ? value.origin : isAdoptedSnapshot$1(value) ? "adopt" : "browser";
 	const credentials = {
 		apiKey,
@@ -65720,7 +66473,7 @@ function createCredentialBackend$3(filePath, parse, label) {
 	if (process.platform === "win32") return new WindowsDpapiCredentialStore(filePath + ".dpapi", parse);
 	if (process.platform === "darwin") return new MacKeychainCredentialStore(PROVIDER_ID$6, credentialAccount$3(filePath), parse);
 	if (process.platform === "linux") return new SecretServiceCredentialStore(PROVIDER_ID$6, credentialAccount$3(filePath), parse);
-	throw new Error(label + " 凭据存储只支持 Windows、macOS 或 Linux。");
+	throw new Error(t("sc.storeUnsupportedPlatform", { label }));
 }
 const credentialOperations$1 = /* @__PURE__ */ new Map();
 function serialize$1(key, operation) {
@@ -65763,7 +66516,7 @@ var StepCodeCredentialStore = class {
 		return serialize$1(this.filePath, async () => {
 			const normalized = parseStepCodeCredentials$1(credentials);
 			await this.backend.save(normalized);
-			if (!isDeepStrictEqual(await this.backend.load(), normalized)) throw new Error("Step Code 加密凭据写入校验失败");
+			if (!isDeepStrictEqual(await this.backend.load(), normalized)) throw new Error(t("sc.encryptedWriteVerifyFailed", { provider: "Step Code" }));
 		});
 	}
 	delete() {
@@ -65772,11 +66525,11 @@ var StepCodeCredentialStore = class {
 };
 /** 校验并归一化一份落盘的额度凭据。缺 token 或 deviceId 一律拒绝——少一个就是一次必然的鉴权失败。 */
 function parseStepCodeQuotaCredential(value) {
-	if (!isRecord$30(value)) throw new Error("Step Code 额度凭据载荷无效");
+	if (!isRecord$30(value)) throw new Error(t("sc.quotaCredentialPayloadInvalid", { provider: "Step Code" }));
 	const token = asString$9(value.token);
-	if (token === void 0) throw new Error("Step Code 额度凭据缺少 Oasis-Token");
+	if (token === void 0) throw new Error(t("sc.quotaCredentialNoToken", { provider: "Step Code" }));
 	const deviceId = asString$9(value.deviceId);
-	if (deviceId === void 0) throw new Error("Step Code 额度凭据缺少 Oasis-Webid");
+	if (deviceId === void 0) throw new Error(t("sc.quotaCredentialNoDeviceId", { provider: "Step Code" }));
 	return {
 		token,
 		deviceId,
@@ -65809,7 +66562,7 @@ var StepCodeQuotaCredentialStore = class {
 		return serialize$1(this.filePath, async () => {
 			const normalized = parseStepCodeQuotaCredential(credential);
 			await this.backend.save(normalized);
-			if (!isDeepStrictEqual(await this.backend.load(), normalized)) throw new Error("Step Code 额度凭据写入校验失败");
+			if (!isDeepStrictEqual(await this.backend.load(), normalized)) throw new Error(t("sc.quotaCredentialWriteVerifyFailed", { provider: "Step Code" }));
 		});
 	}
 	delete() {
@@ -65892,7 +66645,7 @@ var StepCodeModelSettingsStore = class {
 		const temporary = this.filePath + ".tmp." + Date.now();
 		await fs.writeFile(temporary, JSON.stringify(settings, null, 2) + "\n", "utf8");
 		await fs.rename(temporary, this.filePath);
-		if (!isDeepStrictEqual(parseStepCodeModelSettings(JSON.parse(await fs.readFile(this.filePath, "utf8"))), settings)) throw new Error("Step Code 模型设置写入失败：落盘的选择与刚写入的不一致");
+		if (!isDeepStrictEqual(parseStepCodeModelSettings(JSON.parse(await fs.readFile(this.filePath, "utf8"))), settings)) throw new Error(t("sc.modelSettingsWriteFailed", { provider: "Step Code" }));
 	}
 	/**
 	* 在与凭据写入同一条按路径排队的锁里做「读-改-写」。
@@ -66137,7 +66890,7 @@ var StepCodeAdapter = class extends LlmAdapter {
 	providerInfo(provider) {
 		return {
 			id: provider,
-			name: PROVIDER_NAME$6
+			name: localizedProviderName(provider, PROVIDER_NAME$6)
 		};
 	}
 	providerRetryPolicy() {
@@ -66203,7 +66956,7 @@ var StepCodeAdapter = class extends LlmAdapter {
 		}));
 	}
 	async resolveModel(provider, model, signal) {
-		if (signal?.aborted) throw new LlmError("Step Code（Step Plan 订阅） 模型解析已取消", "ABORTED");
+		if (signal?.aborted) throw new LlmError(t("sc.modelResolveAborted", { provider: PROVIDER_NAME$6 }), "ABORTED");
 		const settings = await this.settings();
 		const picked = await this.credentialFor().catch(() => null);
 		const catalog = this.catalog(picked?.credentials.profile);
@@ -66270,8 +67023,11 @@ var StepCodeAdapter = class extends LlmAdapter {
 				});
 				activity?.pulse();
 			} catch (error) {
-				if (signal.aborted) throw new LlmError("Step Code（Step Plan 订阅） 请求已取消", "ABORTED", { cause: error });
-				throw new LlmError("Step Code（Step Plan 订阅） 请求失败：" + (error instanceof Error ? error.message : String(error)), "TRANSPORT", { cause: error });
+				if (signal.aborted) throw new LlmError(t("sc.requestAborted", { provider: PROVIDER_NAME$6 }), "ABORTED", { cause: error });
+				throw new LlmError(t("sc.requestFailed", {
+					provider: PROVIDER_NAME$6,
+					detail: error instanceof Error ? error.message : String(error)
+				}), "TRANSPORT", { cause: error });
 			}
 			if (response.ok) break;
 			const detail = await response.text().catch(() => "");
@@ -66294,8 +67050,8 @@ var StepCodeAdapter = class extends LlmAdapter {
 			}
 			throw failure;
 		}
-		if (response === void 0) throw new LlmError("Step Code（Step Plan 订阅） 没有返回任何响应", "PROVIDER_ERROR");
-		if (response.body === null) throw new LlmError("Step Code（Step Plan 订阅） 返回了空响应体", "PROVIDER_ERROR");
+		if (response === void 0) throw new LlmError(t("sc.noResponse", { provider: PROVIDER_NAME$6 }), "PROVIDER_ERROR");
+		if (response.body === null) throw new LlmError(t("sc.emptyBody", { provider: PROVIDER_NAME$6 }), "PROVIDER_ERROR");
 		const reader = response.body.getReader();
 		const decoder = new TextDecoder();
 		const state = createStreamState$2();
@@ -66404,7 +67160,11 @@ function isRetryableStepCodeLoginError(error) {
 }
 /** protocol 类错误：形状/字段值不合协议，不重试。 */
 function protocolError(phase, detail, cause) {
-	return new StepCodeLoginRequestError("protocol", "Step Code（Step Plan 订阅） 登录 " + phase + " " + detail, { ...cause === void 0 ? {} : { cause } });
+	return new StepCodeLoginRequestError("protocol", t("sc.loginPhaseFailed", {
+		provider: PROVIDER_NAME$6,
+		phase,
+		detail
+	}), { ...cause === void 0 ? {} : { cause } });
 }
 /** 成功体里的 `desc` 去控制字符后截断到 MAX_ERROR_DETAIL_LENGTH（逐字 login-client.ts:342-346）。 */
 function envelopeDetail(payload) {
@@ -66442,10 +67202,13 @@ function parseAuthBase(value) {
 	try {
 		url = new URL(value);
 	} catch {
-		throw new Error("Step Code（Step Plan 订阅） 的授权地址不是合法 URL：" + value);
+		throw new Error(t("sc.authorizeUrlInvalid", {
+			provider: PROVIDER_NAME$6,
+			value
+		}));
 	}
-	if (url.protocol !== "https:") throw new Error("Step Code（Step Plan 订阅） 的授权地址必须使用 https");
-	if (url.username !== "" || url.password !== "") throw new Error("Step Code（Step Plan 订阅） 的授权地址不得包含用户名或密码");
+	if (url.protocol !== "https:") throw new Error(t("sc.authorizeUrlNotHttps", { provider: PROVIDER_NAME$6 }));
+	if (url.username !== "" || url.password !== "") throw new Error(t("sc.authorizeUrlHasCredentials", { provider: PROVIDER_NAME$6 }));
 	return url;
 }
 /**
@@ -66506,7 +67269,7 @@ async function withLoginTimeout(timeoutMs, signal, timeoutError, run) {
 }
 function abortReasonOf(signal) {
 	const reason = signal.reason;
-	return reason instanceof Error ? reason : /* @__PURE__ */ new Error("操作已取消");
+	return reason instanceof Error ? reason : new Error(t("sc.cancelled"));
 }
 /** 可被取消的 sleep（逐字 utils/sleep.ts 的语义）。 */
 function sleep$1(ms, signal) {
@@ -66543,9 +67306,9 @@ function sleep$1(ms, signal) {
 *    服务端会用 200 携带业务错误）。
 */
 async function request(input) {
-	return withLoginTimeout(LOGIN_REQUEST_TIMEOUT_MS$1, input.signal, () => new StepCodeLoginRequestError("transport", "Step Code（Step Plan 订阅） 登录请求超时"), async (signal) => {
+	return withLoginTimeout(LOGIN_REQUEST_TIMEOUT_MS$1, input.signal, () => new StepCodeLoginRequestError("transport", t("sc.loginRequestTimeout", { provider: PROVIDER_NAME$6 })), async (signal) => {
 		const pollToken = input.pollToken.trim();
-		if (pollToken === "") throw new Error("Step Code（Step Plan 订阅） 登录的 poll_token 不能为空");
+		if (pollToken === "") throw new Error(t("sc.pollTokenEmpty", { provider: PROVIDER_NAME$6 }));
 		const fetchFn = input.fetchFn ?? fetch;
 		let response;
 		try {
@@ -66689,7 +67452,7 @@ async function pollStepCodeCliLogin(input) {
 * 不可重试的直接抛出。
 */
 async function waitForStepCodeLogin(input) {
-	const timeoutError = () => /* @__PURE__ */ new Error("Step Code（Step Plan 订阅） 登录超时：没有在有效期内完成浏览器授权。");
+	const timeoutError = () => new Error(t("sc.loginTimeout", { provider: PROVIDER_NAME$6 }));
 	const serverRemaining = input.init.expiresAt * 1e3 - Date.now();
 	const localRemaining = input.localDeadline === void 0 ? Infinity : input.localDeadline - Date.now();
 	const remaining = Math.min(serverRemaining, localRemaining);
@@ -66724,7 +67487,7 @@ async function waitForStepCodeLogin(input) {
 /** 从一次成功登录的结果造出凭据（uid 不合格时已经被丢掉，这里只做装配）。 */
 function stepCodeCredentialFromLogin(profile, ready) {
 	const apiKey = ready.apiKey.trim();
-	if (apiKey === "") throw new Error("Step Code（Step Plan 订阅） 登录成功但没有拿到 api_key");
+	if (apiKey === "") throw new Error(t("sc.loginNoApiKey", { provider: PROVIDER_NAME$6 }));
 	const uid = readBoundedUid$1(ready.uid);
 	return {
 		type: "oauth",
@@ -66743,7 +67506,7 @@ function stepCodeCredentialFromLogin(profile, ready) {
 */
 function stepCodeCredentialFromApiKey(profile, apiKey, uid) {
 	const trimmed = apiKey.trim();
-	if (trimmed === "") throw new Error("Step Code（Step Plan 订阅） API Key 是空的。");
+	if (trimmed === "") throw new Error(t("sc.apiKeyEmpty", { provider: PROVIDER_NAME$6 }));
 	const bounded = readBoundedUid$1(uid);
 	return {
 		type: "oauth",
@@ -66815,7 +67578,7 @@ async function beginStepCodeLogin(profile, options = {}) {
 		startedAt,
 		expiresAt,
 		pollIntervalSec: init.pollIntervalSec,
-		progress: "等待浏览器授权…（每 " + init.pollIntervalSec + " 秒查询一次）"
+		progress: t("sc.waitingBrowserPoll", { seconds: init.pollIntervalSec })
 	};
 	(async () => {
 		try {
@@ -66839,7 +67602,7 @@ async function beginStepCodeLogin(profile, options = {}) {
 				completedAt: Date.now(),
 				expiresAt,
 				pollIntervalSec: init.pollIntervalSec,
-				progress: "授权完成",
+				progress: t("sc.authorized"),
 				...ready.uid === void 0 ? {} : { uid: ready.uid }
 			};
 		} catch (error) {
@@ -66939,7 +67702,10 @@ function projectAccount$1(input) {
 function optionalString$6(record, key) {
 	const value = record[key];
 	if (value === void 0 || value === null) return void 0;
-	if (typeof value !== "string") throw new Error("Step Code（Step Plan 订阅） 号池账号字段无效：" + key);
+	if (typeof value !== "string") throw new Error(t("sc.poolAccountFieldInvalid", {
+		provider: PROVIDER_NAME$6,
+		key
+	}));
 	return value;
 }
 /**
@@ -66950,11 +67716,11 @@ function optionalString$6(record, key) {
 * 当成可路由的账号打出去。
 */
 function parseStepCodeCredentials(value) {
-	if (!isRecord$28(value)) throw new Error("Step Code（Step Plan 订阅） 号池凭据无效");
+	if (!isRecord$28(value)) throw new Error(t("sc.poolCredentialInvalid", { provider: PROVIDER_NAME$6 }));
 	const access = typeof value.access === "string" ? value.access.trim() : "";
-	if (access === "") throw new Error("Step Code（Step Plan 订阅） 号池凭据缺少 access");
+	if (access === "") throw new Error(t("sc.poolCredentialNoAccess", { provider: PROVIDER_NAME$6 }));
 	const profile = normalizeProfile(value.profile);
-	if (profile === void 0) throw new Error("Step Code（Step Plan 订阅） 号池凭据的 profile 无效");
+	if (profile === void 0) throw new Error(t("sc.poolCredentialProfileInvalid", { provider: PROVIDER_NAME$6 }));
 	const uidRaw = typeof value.uid === "string" ? value.uid.trim() : "";
 	const uid = uidRaw.length > 64 || !UID_PATTERN.test(uidRaw) ? "" : uidRaw;
 	return {
@@ -66977,7 +67743,7 @@ function parseStepCodeCredentials(value) {
 * 抛错等于让一行坏数据带走整个池。
 */
 function parseStepCodePoolData(value) {
-	if (!isRecord$28(value)) throw new Error("Step Code（Step Plan 订阅） 号池载荷无效");
+	if (!isRecord$28(value)) throw new Error(t("sc.poolPayloadInvalid", { provider: PROVIDER_NAME$6 }));
 	const accounts = [];
 	for (const item of Array.isArray(value.accounts) ? value.accounts : []) {
 		if (!isRecord$28(item) || typeof item.id !== "string") continue;
@@ -67127,7 +67893,7 @@ var StepCodeAccountPool = class extends AccountPoolCore {
 		const target = data.accounts.find((account) => account.id === data.activeAccountId) ?? data.accounts.find((account) => account.isPrimary) ?? data.accounts[0];
 		if (target === void 0) {
 			await this.getFreshCredential(void 0, fetchFn);
-			throw new Error("Step Code（Step Plan 订阅） 号池中没有账号。");
+			throw new Error(t("sc.poolEmpty", { provider: PROVIDER_NAME$6 }));
 		}
 		return {
 			accountId: target.id,
@@ -67858,7 +68624,7 @@ function registerStepCodeRoutes(ctx, settings, options = {}) {
 				if (!isSameOriginMutation(request)) return sendCrossOrigin$1(response);
 				if (accountPool === void 0) return sendJson$4(response, 400, {
 					ok: false,
-					error: "账号池未安装。"
+					error: t("sc.poolNotInstalled")
 				});
 				const body = await readRequestJson$4(request);
 				const action = typeof body.action === "string" ? body.action : "";
@@ -67866,7 +68632,7 @@ function registerStepCodeRoutes(ctx, settings, options = {}) {
 					const strategy = body.strategy;
 					if (strategy !== "sequential" && strategy !== "round-robin" && strategy !== "sticky") return sendJson$4(response, 400, {
 						ok: false,
-						error: "未知的轮转策略。"
+						error: t("sc.unknownStrategy")
 					});
 					await accountPool.setStrategy(strategy);
 					return sendJson$4(response, 200, {
@@ -67895,7 +68661,7 @@ function registerStepCodeRoutes(ctx, settings, options = {}) {
 						break;
 					default: return sendJson$4(response, 400, {
 						ok: false,
-						error: "未知的账号操作：" + action
+						error: t("sc.unknownAccountAction", { action })
 					});
 				}
 				return sendJson$4(response, 200, {
@@ -67942,7 +68708,7 @@ function registerStepCodeRoutes(ctx, settings, options = {}) {
 				const apiKey = typeof body.apiKey === "string" ? body.apiKey : "";
 				if (apiKey.trim() === "") return sendJson$4(response, 400, {
 					ok: false,
-					error: "请粘贴一个 Platform API Key。"
+					error: t("sc.pastePlatformKey")
 				});
 				const credentials = stepCodeCredentialFromApiKey(profileFromBody(body), apiKey);
 				await savePastedCredential(credentials);
@@ -68000,11 +68766,11 @@ function registerStepCodeRoutes(ctx, settings, options = {}) {
 					const password = typeof body.password === "string" ? body.password : "";
 					if (account === "") return sendJson$4(response, 400, {
 						ok: false,
-						error: "请填写账号。"
+						error: t("sc.missingAccount")
 					});
 					if (password === "") return sendJson$4(response, 400, {
 						ok: false,
-						error: "请填写密码。"
+						error: t("sc.missingPassword")
 					});
 					const signed = await attempt(() => signInOasisQuotaCredential({
 						profile,
@@ -68047,7 +68813,7 @@ function registerStepCodeRoutes(ctx, settings, options = {}) {
 					quotaCredential = stored;
 				} else return sendJson$4(response, 400, {
 					ok: false,
-					error: "未知的额度凭据提交方式：" + mode
+					error: t("sc.unknownQuotaCredentialMode", { mode })
 				});
 				await quotaRefresh.run(() => refreshQuota(true));
 				return sendJson$4(response, 200, {
@@ -68093,7 +68859,7 @@ async function probeConnection$2(accountPool, fetchFn, env) {
 		account: null,
 		model: null,
 		checkedAt,
-		error: "还没有登录 Step Code（Step Plan 订阅） 账号。"
+		error: t("sc.notSignedIn", { provider: PROVIDER_NAME$6 })
 	};
 	const credentials = upstreamCredentialOf$2(target.credentials);
 	const started = Date.now();
@@ -68111,7 +68877,7 @@ async function probeConnection$2(accountPool, fetchFn, env) {
 				account: null,
 				model: null,
 				checkedAt,
-				error: "目录接口返回 HTTP " + response.status + (detail === "" ? "" : "：" + stepCodeErrorDetail(detail, 160))
+				error: t("sc.catalogHttp", { status: response.status }) + (detail === "" ? "" : "：" + stepCodeErrorDetail(detail, 160))
 			};
 		}
 		const entries = parseStepModelCatalog(await response.json().catch(() => void 0));
@@ -70640,7 +71406,7 @@ var ClinePassAdapter = class extends LlmAdapter {
 	providerInfo(provider) {
 		return {
 			id: provider,
-			name: PROVIDER_NAME$5
+			name: localizedProviderName(provider, PROVIDER_NAME$5)
 		};
 	}
 	providerRetryPolicy() {
@@ -75407,7 +76173,10 @@ function asFiniteNumber(value) {
 function optionalString$3(record, key) {
 	const value = record[key];
 	if (value === void 0 || value === null) return void 0;
-	if (typeof value !== "string") throw new Error("Qoder 凭据字段无效：" + key);
+	if (typeof value !== "string") throw new Error(t("qo.credentialFieldInvalid", {
+		provider: "Qoder",
+		key
+	}));
 	return value;
 }
 function isOrigin(value) {
@@ -75424,10 +76193,10 @@ function isOrigin(value) {
 * 拿一区的凭据去打另一区的端点，一次明确的鉴权失败，排查成本远高于重新登录。
 */
 function parseQoderCredentials(value) {
-	if (!isRecord$23(value)) throw new Error("Qoder 凭据载荷无效");
+	if (!isRecord$23(value)) throw new Error(t("qo.credentialPayloadInvalid", { provider: "Qoder" }));
 	const accessToken = asString$8(value.accessToken);
-	if (accessToken === void 0) throw new Error("Qoder 凭据缺少 accessToken");
-	if (!isQoderRegion(value.region)) throw new Error("Qoder 凭据的 region 无效");
+	if (accessToken === void 0) throw new Error(t("qo.credentialNoToken", { provider: "Qoder" }));
+	if (!isQoderRegion(value.region)) throw new Error(t("qo.credentialRegionInvalid", { provider: "Qoder" }));
 	const origin = isOrigin(value.origin) ? value.origin : isAdoptedSnapshot(value) ? "adopt" : "device";
 	const credentials = {
 		accessToken,
@@ -75521,7 +76290,7 @@ function createCredentialBackend$1(filePath, parse, label) {
 	if (process.platform === "win32") return new WindowsDpapiCredentialStore(filePath + ".dpapi", parse);
 	if (process.platform === "darwin") return new MacKeychainCredentialStore(PROVIDER_ID$4, credentialAccount$1(filePath), parse);
 	if (process.platform === "linux") return new SecretServiceCredentialStore(PROVIDER_ID$4, credentialAccount$1(filePath), parse);
-	throw new Error(label + " 凭据存储只支持 Windows、macOS 或 Linux。");
+	throw new Error(t("qo.storeUnsupportedPlatform", { label }));
 }
 const credentialOperations = /* @__PURE__ */ new Map();
 function serialize(key, operation) {
@@ -75559,7 +76328,7 @@ var QoderCredentialStore = class {
 		return serialize(this.filePath, async () => {
 			const normalized = parseQoderCredentials(credentials);
 			await this.backend.save(normalized);
-			if (!isDeepStrictEqual(await this.backend.load(), normalized)) throw new Error("Qoder 加密凭据写入校验失败");
+			if (!isDeepStrictEqual(await this.backend.load(), normalized)) throw new Error(t("qo.encryptedWriteVerifyFailed", { provider: "Qoder" }));
 		});
 	}
 	delete() {
@@ -75670,7 +76439,7 @@ var QoderModelSettingsStore = class {
 		const temporary = this.filePath + ".tmp." + Date.now();
 		await fs.writeFile(temporary, JSON.stringify(document, null, 2) + "\n", "utf8");
 		await fs.rename(temporary, this.filePath);
-		if (!isDeepStrictEqual(parseQoderModelSettings(JSON.parse(await fs.readFile(this.filePath, "utf8"))), document)) throw new Error("Qoder 模型设置写入失败：落盘的选择与刚写入的不一致");
+		if (!isDeepStrictEqual(parseQoderModelSettings(JSON.parse(await fs.readFile(this.filePath, "utf8"))), document)) throw new Error(t("qo.modelSettingsWriteFailed", { provider: "Qoder" }));
 	}
 	/** 在与凭据写入同一条按路径排队的锁里做「读-改-写」。 */
 	updateSettings(patch) {
@@ -76409,10 +77178,14 @@ async function fetchQoderUserInfo(accessToken, region, options = {}) {
 	});
 	if (!response.ok) {
 		const detail = qoderErrorDetail(await response.text().catch(() => ""), 160);
-		throw new Error("Qoder（订阅） userinfo 请求失败（HTTP " + response.status + "）" + (detail === "" ? "" : "：" + detail));
+		throw new Error(t("qo.userinfoFailed", {
+			provider: PROVIDER_NAME$4,
+			status: response.status,
+			detail: detail === "" ? "" : "：" + detail
+		}));
 	}
 	const payload = await response.json().catch(() => void 0);
-	if (!isRecord$22(payload)) throw new Error("Qoder（订阅） userinfo 响应不是 JSON 对象");
+	if (!isRecord$22(payload)) throw new Error(t("qo.userinfoNotJson", { provider: PROVIDER_NAME$4 }));
 	const tags = Array.isArray(payload.organization_tags) ? payload.organization_tags.filter((tag) => typeof tag === "string" && tag !== "") : void 0;
 	return {
 		userID: asText$1(payload.id) ?? asText$1(payload.uid) ?? "",
@@ -76481,9 +77254,9 @@ async function exchangeQoderJobToken(personalToken, region, options = {}) {
 		throw new QoderPatExchangeError("Qoder（订阅） PAT 兑换失败（HTTP " + response.status + "）" + (detail === "" ? "" : "：" + detail), response.status, region);
 	}
 	const payload = await response.json().catch(() => void 0);
-	if (!isRecord$22(payload)) throw new Error("Qoder（订阅） PAT 兑换响应不是 JSON 对象");
+	if (!isRecord$22(payload)) throw new Error(t("qo.patExchangeNotJson", { provider: PROVIDER_NAME$4 }));
 	const token = asText$1(payload.token);
-	if (token === void 0) throw new Error("Qoder（订阅） PAT 兑换响应里没有 token");
+	if (token === void 0) throw new Error(t("qo.patExchangeNoToken", { provider: PROVIDER_NAME$4 }));
 	return {
 		token,
 		refreshToken: asText$1(payload.refresh_token) ?? null,
@@ -76509,14 +77282,17 @@ async function refreshQoderAccessToken(credentials, region, options = {}) {
 		signal: timeoutSignal$1(options.signal, DISCOVERY_TIMEOUT_MS$1)
 	});
 	if (!response.ok) {
-		const error = /* @__PURE__ */ new Error("Qoder（订阅） 令牌刷新失败（HTTP " + response.status + "）");
+		const error = new Error(t("qo.refreshFailed", {
+			provider: PROVIDER_NAME$4,
+			status: response.status
+		}));
 		error.status = response.status;
 		throw error;
 	}
 	const payload = await response.json().catch(() => void 0);
-	if (!isRecord$22(payload)) throw new Error("Qoder（订阅） 令牌刷新响应不是 JSON 对象");
+	if (!isRecord$22(payload)) throw new Error(t("qo.refreshNotJson", { provider: PROVIDER_NAME$4 }));
 	const token = asText$1(payload.token);
-	if (token === void 0) throw new Error("Qoder（订阅） 令牌刷新响应里没有 token");
+	if (token === void 0) throw new Error(t("qo.refreshNoToken", { provider: PROVIDER_NAME$4 }));
 	return {
 		token,
 		refreshToken: asText$1(payload.refresh_token) ?? credentials.refreshToken,
@@ -76609,13 +77385,16 @@ async function loadQoderQuota(credentials, options = {}) {
 				const detail = qoderErrorDetail(await response.text().catch(() => ""), 160);
 				return {
 					ok: false,
-					error: "额度接口返回 HTTP " + response.status + (detail === "" ? "" : "：" + detail)
+					error: t("qo.quotaHttp", {
+						status: response.status,
+						detail: detail === "" ? "" : "：" + detail
+					})
 				};
 			}
 			const snapshot = normalizeQoderQuotaSnapshot(await response.json().catch(() => void 0), credentials.region);
 			if (snapshot === void 0) return {
 				ok: false,
-				error: "额度响应里没有认识的额度桶（上游可能改版）。"
+				error: t("qo.quotaNoBucket")
 			};
 			quotaCacheByAccount.set(cacheKey, {
 				snapshot,
@@ -77849,7 +78628,7 @@ var QoderAdapter = class extends LlmAdapter {
 	providerInfo(provider) {
 		return {
 			id: provider,
-			name: PROVIDER_NAME$4
+			name: localizedProviderName(provider, PROVIDER_NAME$4)
 		};
 	}
 	providerRetryPolicy() {
@@ -77905,7 +78684,7 @@ var QoderAdapter = class extends LlmAdapter {
 		}));
 	}
 	async resolveModel(provider, model, signal) {
-		if (signal?.aborted) throw new LlmError("Qoder（订阅） 模型解析已取消", "ABORTED");
+		if (signal?.aborted) throw new LlmError(t("qo.modelResolveAborted", { provider: PROVIDER_NAME$4 }), "ABORTED");
 		const settings = await this.settings();
 		const region = (await this.credentialFor().catch(() => null))?.credentials.region ?? "global";
 		const catalog = this.catalog(region);
@@ -78052,8 +78831,11 @@ var QoderAdapter = class extends LlmAdapter {
 				});
 				activity?.pulse();
 			} catch (error) {
-				if (signal.aborted) throw new LlmError("Qoder（订阅） 请求已取消", "ABORTED", { cause: error });
-				throw new LlmError("Qoder（订阅） 请求失败：" + (error instanceof Error ? error.message : String(error)), "TRANSPORT", { cause: error });
+				if (signal.aborted) throw new LlmError(t("qo.requestAborted", { provider: PROVIDER_NAME$4 }), "ABORTED", { cause: error });
+				throw new LlmError(t("qo.requestFailed", {
+					provider: PROVIDER_NAME$4,
+					detail: error instanceof Error ? error.message : String(error)
+				}), "TRANSPORT", { cause: error });
 			}
 			if (!response.ok) {
 				const detail = await response.text().catch(() => "");
@@ -78061,7 +78843,7 @@ var QoderAdapter = class extends LlmAdapter {
 				if (await handlePreContentFailure(failure, response.headers)) continue;
 				throw failure;
 			}
-			if (response.body === null) throw new LlmError("Qoder（订阅） 返回了空响应体", "PROVIDER_ERROR");
+			if (response.body === null) throw new LlmError(t("qo.emptyBody", { provider: PROVIDER_NAME$4 }), "PROVIDER_ERROR");
 			const reader = response.body.getReader();
 			const decoder = new TextDecoder();
 			const state = createQoderStreamState();
@@ -78159,7 +78941,7 @@ function createQoderDeviceParams(env = process.env) {
 */
 function qoderDeviceAuthorizeUrl(params) {
 	const page = REGION_HOSTS$1.global.deviceAuthorizePage;
-	if (page === null) throw new Error("Qoder（订阅） 全球区以外的部署不支持浏览器登录");
+	if (page === null) throw new Error(t("qo.noBrowserOutsideGlobal", { provider: PROVIDER_NAME$4 }));
 	const url = new URL(page);
 	url.searchParams.set("challenge", params.challenge);
 	url.searchParams.set("challenge_method", "S256");
@@ -78201,18 +78983,22 @@ async function pollQoderDeviceToken(params, options = {}) {
 		const detail = qoderErrorDetail(await response.text().catch(() => ""), 160);
 		return {
 			state: "failed",
-			reason: "Qoder（订阅） 设备轮询失败（HTTP " + response.status + "）" + (detail === "" ? "" : "：" + detail)
+			reason: t("qo.devicePollFailed", {
+				provider: PROVIDER_NAME$4,
+				status: response.status,
+				detail: detail === "" ? "" : "：" + detail
+			})
 		};
 	}
 	const payload = await response.json().catch(() => void 0);
 	if (!isRecord$20(payload)) return {
 		state: "failed",
-		reason: "Qoder（订阅） 设备轮询响应不是 JSON 对象"
+		reason: t("qo.devicePollNotJson", { provider: PROVIDER_NAME$4 })
 	};
 	const token = asText(payload.token);
 	if (token === void 0) return {
 		state: "failed",
-		reason: "Qoder（订阅） 设备轮询的 200 响应里没有 token"
+		reason: t("qo.devicePollNoToken", { provider: PROVIDER_NAME$4 })
 	};
 	return {
 		state: "ready",
@@ -78279,7 +79065,7 @@ async function qoderCredentialsFromDevicePoll(ready, machineId, options = {}) {
 */
 async function qoderCredentialsFromPat(personalToken, region, options = {}) {
 	const pat = personalToken.trim();
-	if (pat === "") throw new Error("Qoder（订阅） 的 PAT 是空的。");
+	if (pat === "") throw new Error(t("qo.patEmpty", { provider: PROVIDER_NAME$4 }));
 	if (!pat.startsWith("pt-")) throw new Error("Qoder（订阅） 的 PAT 格式不对：它必须以 `pt-` 开头，粘贴时不要带引号或多余空白。令牌在 https://qoder.com/account/integrations（中国站是 https://qoder.com.cn/account/integrations）生成。");
 	const candidates = [region, ...QODER_REGIONS.filter((other) => other !== region)];
 	let resolved = region;
@@ -78363,7 +79149,7 @@ async function refreshQoderCredential(credentials, fetchFn = fetch) {
 		} : {}
 	};
 	if (credentials.refreshToken === null || credentials.refreshToken === "") {
-		const error = /* @__PURE__ */ new Error("Qoder（订阅） 的这份凭据没有刷新令牌，只有重新登录才能续期。");
+		const error = new Error(t("qo.noRefreshToken", { provider: PROVIDER_NAME$4 }));
 		error.status = 401;
 		throw error;
 	}
@@ -78404,7 +79190,7 @@ function sleep(ms, signal) {
 			clearTimeout(timer);
 			cleanup();
 			const reason = signal.reason;
-			reject(reason instanceof Error ? reason : /* @__PURE__ */ new Error("操作已取消"));
+			reject(reason instanceof Error ? reason : new Error(t("qo.cancelled")));
 		}
 		if (signal.aborted) {
 			onAbort();
@@ -78429,7 +79215,10 @@ async function beginQoderLogin(region, options = {}) {
 			region,
 			startedAt,
 			completedAt: Date.now(),
-			error: "Qoder（订阅） 中国站不支持浏览器登录，请改用 PAT（" + REGION_HOSTS$1.cn.patPage + "）或导入本机 qodercli 登录态。",
+			error: t("qo.cnNoBrowserLogin", {
+				provider: PROVIDER_NAME$4,
+				patPage: REGION_HOSTS$1.cn.patPage
+			}),
 			retryable: false
 		};
 		return getQoderLoginStatus();
@@ -78447,13 +79236,13 @@ async function beginQoderLogin(region, options = {}) {
 		startedAt,
 		expiresAt: deadline,
 		pollIntervalSec: DEVICE_POLL_INTERVAL_MS / 1e3,
-		progress: "等待浏览器授权…（每 2 秒查询一次）"
+		progress: t("qo.waitingBrowserPoll", { seconds: DEVICE_POLL_INTERVAL_MS / 1e3 })
 	};
 	(async () => {
 		try {
 			for (;;) {
 				active.signal.throwIfAborted();
-				if (Date.now() >= deadline) throw new Error("Qoder（订阅） 登录超时：没有在有效期内完成浏览器授权。");
+				if (Date.now() >= deadline) throw new Error(t("qo.loginTimeout", { provider: PROVIDER_NAME$4 }));
 				const result = await pollQoderDeviceToken({
 					nonce: params.nonce,
 					verifier: params.verifier
@@ -78476,7 +79265,7 @@ async function beginQoderLogin(region, options = {}) {
 						completedAt: Date.now(),
 						expiresAt: deadline,
 						pollIntervalSec: DEVICE_POLL_INTERVAL_MS / 1e3,
-						progress: "授权完成",
+						progress: t("qo.authorized"),
 						...credentials.uid === null ? {} : { uid: credentials.uid }
 					};
 					return;
@@ -78579,7 +79368,7 @@ function projectAccount(input) {
 * 抛错等于让一行坏数据带走整个池。
 */
 function parseQoderPoolData(value) {
-	if (!isRecord$19(value)) throw new Error("Qoder（订阅） 号池载荷无效");
+	if (!isRecord$19(value)) throw new Error(t("qo.poolPayloadInvalid", { provider: PROVIDER_NAME$4 }));
 	const accounts = [];
 	for (const item of Array.isArray(value.accounts) ? value.accounts : []) {
 		if (!isRecord$19(item) || typeof item.id !== "string") continue;
@@ -78724,7 +79513,7 @@ var QoderAccountPool = class extends AccountPoolCore {
 		const target = data.accounts.find((account) => account.id === data.activeAccountId) ?? data.accounts.find((account) => account.isPrimary) ?? data.accounts[0];
 		if (target === void 0) {
 			await this.getFreshCredential(void 0, fetchFn);
-			throw new Error("Qoder（订阅） 号池中没有账号。");
+			throw new Error(t("qo.poolEmpty", { provider: PROVIDER_NAME$4 }));
 		}
 		return {
 			accountId: target.id,
@@ -79352,7 +80141,7 @@ function registerQoderRoutes(ctx, settings, options = {}) {
 				if (!isSameOriginMutation(request)) return sendCrossOrigin(response);
 				if (accountPool === void 0) return sendJson$2(response, 400, {
 					ok: false,
-					error: "账号池未安装。"
+					error: t("qo.poolNotInstalled")
 				});
 				const body = await readRequestJson$2(request);
 				const action = typeof body.action === "string" ? body.action : "";
@@ -79360,7 +80149,7 @@ function registerQoderRoutes(ctx, settings, options = {}) {
 					const strategy = body.strategy;
 					if (strategy !== "sequential" && strategy !== "round-robin" && strategy !== "sticky") return sendJson$2(response, 400, {
 						ok: false,
-						error: "未知的轮转策略。"
+						error: t("qo.unknownStrategy")
 					});
 					await accountPool.setStrategy(strategy);
 					return sendJson$2(response, 200, {
@@ -79389,7 +80178,7 @@ function registerQoderRoutes(ctx, settings, options = {}) {
 						break;
 					default: return sendJson$2(response, 400, {
 						ok: false,
-						error: "未知的账号操作：" + action
+						error: t("qo.unknownAccountAction", { action })
 					});
 				}
 				return sendJson$2(response, 200, {
@@ -79432,7 +80221,7 @@ function registerQoderRoutes(ctx, settings, options = {}) {
 				const token = typeof body.token === "string" ? body.token : "";
 				if (token.trim() === "") return sendJson$2(response, 400, {
 					ok: false,
-					error: "请粘贴一个 Personal Access Token（pt-...）。"
+					error: t("qo.pastePat")
 				});
 				const credentials = await qoderCredentialsFromPat(token, regionFromBody(body), {
 					fetchFn,
@@ -79578,7 +80367,7 @@ async function probeConnection$1(accountPool, fetchFn, env) {
 		account: null,
 		model: null,
 		checkedAt,
-		error: "还没有登录 Qoder（订阅） 账号。"
+		error: t("qo.notSignedIn", { provider: PROVIDER_NAME$4 })
 	};
 	const credentials = upstreamCredentialOf(target.credentials);
 	const started = Date.now();
@@ -79602,7 +80391,7 @@ async function probeConnection$1(accountPool, fetchFn, env) {
 				account: null,
 				model: null,
 				checkedAt,
-				error: "目录接口返回 HTTP " + response.status + (detail === "" ? "" : "：" + detail.replace(/[\p{Cc}\p{Cf}]/gu, "").trim().slice(0, 160))
+				error: t("qo.catalogHttp", { status: response.status }) + (detail === "" ? "" : "：" + detail.replace(/[\p{Cc}\p{Cf}]/gu, "").trim().slice(0, 160))
 			};
 		}
 		const entries = parseQoderModelListing(await response.json().catch(() => void 0), credentials.region);
@@ -82579,7 +83368,7 @@ var OpenDesignAdapter = class extends LlmAdapter {
 	providerInfo(provider) {
 		return {
 			id: provider,
-			name: PROVIDER_NAME$2
+			name: localizedProviderName(provider, PROVIDER_NAME$2)
 		};
 	}
 	providerRetryPolicy() {
@@ -84825,6 +85614,12 @@ const DEFAULT_DELEGATION_TOOLS = ["subagent"];
 */
 const DEFAULT_SUBAGENT_INHERIT_TOOLS = ["subagent_fork", "spawn_teammate"];
 /**
+* Inherit-mode tools that fork the caller's own conversation context on the
+* caller's own route (as opposed to multi-agent team spawning such as
+* `spawn_teammate`). Only these tools are unlocked by `allowParentFork`.
+*/
+const DEFAULT_PARENT_FORK_TOOLS = ["subagent_fork"];
+/**
 * Read one deployment event field as a string.
 * @param value - Candidate field value from a durable event.
 * @returns the string value, or undefined for any other type.
@@ -84966,6 +85761,11 @@ const lockedRootMainRoutes = /* @__PURE__ */ new WeakMap();
 */
 const lockedRootAllowedRoutes = /* @__PURE__ */ new WeakMap();
 /**
+* Authorized `allowParentFork` posture per root Session, locked on first evaluation
+* alongside {@link lockedRootAllowedRoutes} so one Session is governed by one policy.
+*/
+const lockedRootAllowParentFork = /* @__PURE__ */ new WeakMap();
+/**
 * Narrow one candidate route pair into an exact route.
 * @param provider - Candidate provider id.
 * @param model - Candidate model id.
@@ -85300,6 +86100,30 @@ function mainModelRoutesFor(agent, sessions, preference, baseRoutes, lockSnapsho
 	return resolved;
 }
 /**
+* Resolve whether `subagent_fork` is authorized to inherit the root main model's
+* own route even when that route is absent from the cold-spawn allowlist.
+* @param agent - Calling agent.
+* @param preference - Current Host preference, when composed.
+* @param sessions - Session registry used for ancestor lookup.
+* @param lockSnapshot - Freeze the resolved posture for this Session now.
+* @returns whether same-route parent forking is authorized for the Session's main model.
+*/
+function effectiveAllowParentFork(agent, preference, sessions, lockSnapshot = false) {
+	if (preference !== void 0 && !preference.enabled) return true;
+	const inherited = inheritedRouteOf(agent);
+	const { rootSession, mainRoute } = resolveRootSessionAndMainRoute(agent, sessions, inherited, lockSnapshot);
+	const lockable = typeof rootSession === "object" && rootSession !== null;
+	const locked = lockable ? lockedRootAllowParentFork.get(rootSession) : void 0;
+	if (!(locked !== void 0 ? locked : (() => {
+		const specific = mainRoute === void 0 ? void 0 : preference?.allowParentForkByMainModel?.[`${mainRoute.provider}/${mainRoute.model}`];
+		const resolved = typeof specific === "boolean" ? specific : preference?.defaultAllowParentFork === true;
+		if (lockable && (lockSnapshot || headerRouteOf(rootSession) !== void 0)) lockedRootAllowParentFork.set(rootSession, resolved);
+		return resolved;
+	})())) return false;
+	if (inherited.provider === void 0 || inherited.model === void 0 || mainRoute === void 0) return false;
+	return inherited.provider === mainRoute.provider && inherited.model === mainRoute.model;
+}
+/**
 * State a Session's routing posture in the `list_subagent_models` result.
 *
 * Calling `list_subagent_models({})` upstream returns only provider names
@@ -85310,20 +86134,17 @@ function mainModelRoutesFor(agent, sessions, preference, baseRoutes, lockSnapsho
 * authorized route in the form `subagent` expects, eliminating any reason to
 * search local config files or source code for the allowlist.
 *
-* The empty case states the opposite fact rather than staying silent, because
-* silence is what makes a model infer that a mounted tool implies enforcement.
-* It does not: the tool row and the route parameters are static, while whether
-* anything is enforced is decided by the allowlist the Session recorded. The
-* two facts differ, so the model has to be able to read the second one instead
-* of deriving it from the first.
+* The empty case distinguishes an absent Session allowlist from the host's own
+* delegation policy. On 0.2.2 the latter still limits explicit selection to the
+* parent route, so calling this posture "unrestricted" would be false.
 * @param output - Original text returned by `list_subagent_models`.
 * @param allowed - Routes the calling Session authorizes, empty when none is in force.
 * @returns the output with the Session routing posture appended.
 */
 function enrichListSubagentModelsOutput(output, allowed) {
 	if (allowed.length === 0) {
-		if (output.includes("No allowlist is in force for this Session: subagent routing is unrestricted, no route is validated against any list, and omitting provider/model is legitimate rather than a rule breach.")) return output;
-		return output.trim().length === 0 ? UNRESTRICTED_ROUTING_NOTICE : `${output}\n\n${UNRESTRICTED_ROUTING_NOTICE}`;
+		if (output.includes("No allowlist is in force for this Session. Omitting provider/model follows the delegation tool's normal inheritance/default behavior; explicit selection may still be limited to the parent route by the host.")) return output;
+		return output.trim().length === 0 ? NO_ALLOWLIST_ROUTING_NOTICE : `${output}\n\n${NO_ALLOWLIST_ROUTING_NOTICE}`;
 	}
 	const header = "Authorized child routes for this Session (already filtered by the Session allowlist; only these routes are accepted, and `provider` and `model` must be passed as separate fields):";
 	if (output.includes(header)) return output;
@@ -85402,44 +86223,47 @@ function filterListSubagentModelsOutput(output, allowed) {
 function mergePreferenceOverrides(base, overrides) {
 	const hasDefault = overrides?.defaultAllowedModels !== void 0;
 	const hasByMain = overrides?.byMainModel !== void 0;
+	const hasDefaultFork = overrides?.defaultAllowParentFork !== void 0;
+	const hasForkByMain = overrides?.allowParentForkByMainModel !== void 0;
 	if (base === void 0) {
-		if (!hasDefault && !hasByMain) return void 0;
+		if (!hasDefault && !hasByMain && !hasDefaultFork && !hasForkByMain) return void 0;
 		return {
 			enabled: true,
 			allowedModels: overrides?.defaultAllowedModels ?? [],
 			...hasDefault ? { defaultAllowedModels: overrides?.defaultAllowedModels } : {},
-			...hasByMain ? { byMainModel: overrides?.byMainModel } : {}
+			...hasByMain ? { byMainModel: overrides?.byMainModel } : {},
+			...hasDefaultFork ? { defaultAllowParentFork: overrides?.defaultAllowParentFork } : {},
+			...hasForkByMain ? { allowParentForkByMainModel: overrides?.allowParentForkByMainModel } : {}
 		};
 	}
-	if (!hasDefault && !hasByMain) return base;
+	if (!hasDefault && !hasByMain && !hasDefaultFork && !hasForkByMain) return base;
 	return {
 		...base,
 		...hasDefault ? { defaultAllowedModels: overrides?.defaultAllowedModels } : {},
-		...hasByMain ? { byMainModel: overrides?.byMainModel } : {}
+		...hasByMain ? { byMainModel: overrides?.byMainModel } : {},
+		...hasDefaultFork ? { defaultAllowParentFork: overrides?.defaultAllowParentFork } : {},
+		...hasForkByMain ? { allowParentForkByMainModel: overrides?.allowParentForkByMainModel } : {}
 	};
 }
 /**
 * The statement appended to `list_subagent_models` when no allowlist governs the
 * calling Session.
 *
-* Two facts, and nothing more: nothing is enforced, and omitting the route is
-* legitimate here. It deliberately does not recommend a setting. This notice is
+* It distinguishes an absent Session allowlist from the host's own inheritance
+* or parent-route rules, and deliberately does not recommend a setting. This notice is
 * attached for every Session the plugin's authorization listener reaches—which
 * includes sessions with no interest in the dispatch preset—so a sentence telling
 * the reader to go enable model selection would be noise in most of them, and a
 * model that reads it as an instruction will repeat it in an unrelated summary.
 */
-const UNRESTRICTED_ROUTING_NOTICE = "No allowlist is in force for this Session: subagent routing is unrestricted, no route is validated against any list, and omitting provider/model is legitimate rather than a rule breach.";
+const NO_ALLOWLIST_ROUTING_NOTICE = "No allowlist is in force for this Session. Omitting provider/model follows the delegation tool's normal inheritance/default behavior; explicit selection may still be limited to the parent route by the host.";
 /**
 * Rewrite the upstream `list_subagent_models` and `subagent` tool/parameter
 * descriptions when the calling Session enforces an allowlist.
 *
-* Upstream `dsh-tool-subagent` ships static descriptions stating that
-* `"Catalog membership is advisory: an adapter may accept an unlisted model id."`
-* and `"Child LLM selection is optional. Omit provider, model, and reasoning_effort..."`.
-* In an allowlist-governed Session both statements are false and actively
-* mislead the dispatcher into either omitting `provider`/`model` or distrusting
-* `list_subagent_models` and hunting through local files for the "real" allowlist.
+* Upstream releases before 0.2.2 call selection optional and catalog membership
+* advisory; 0.2.2 instead says omitted values use child defaults. In an
+* allowlist-governed Session those statements would contradict execution.
 * @param text - Tool description, parameter description, or rendered `tools:sdk` section text.
 * @param allowed - Routes the calling Session authorizes.
 * @returns the text with the misleading upstream sentences replaced by the Session's exact policy.
@@ -85447,7 +86271,8 @@ const UNRESTRICTED_ROUTING_NOTICE = "No allowlist is in force for this Session:
 function rewriteAuthorizedToolDescriptions(text, allowed) {
 	if (allowed.length === 0 || text.length === 0) return text;
 	const routes = authorizedRoutesText(allowed);
-	return text.replaceAll("Catalog membership is advisory: an adapter may accept an unlisted model id.", `Output is already filtered to this Session's allowlist (${routes}); only these authorized provider/model routes are accepted.`).replace(/Child LLM selection is optional\.\s*Omit `?provider`?, `?model`?, and `?reasoning_effort`? to use configured child defaults and (?:inherit compatible missing values from the parent Agent|this provider's route defaults)\./g, `Child LLM selection is required in this Session: pass an authorized \`provider\` and \`model\` from \`list_subagent_models\` (${routes}) as separate fields; omitting either field is rejected.`).replace(/Supply together with model; omit both to use configured child defaults or (?:inherit the parent route|this provider's route defaults)\.|Omit to use the configured child default or inherit from the parent Agent\./g, `Required in this Session: pass an authorized provider id from list_subagent_models (${routes}).`).replace(/Supply together with provider; omit both to use configured child defaults or (?:inherit the parent route|this provider's route defaults)\.|Omit to use the configured child default or inherit when the child provider matches the parent provider\./g, "Required in this Session: pass the authorized model id (without the provider/ prefix) for the selected provider.");
+	const required = `Child LLM selection is required in this Session: pass an authorized \`provider\` and \`model\` from \`list_subagent_models\` (${routes}) as separate fields; omitting either field is rejected.`;
+	return text.replaceAll("Catalog membership is advisory: an adapter may accept an unlisted model id.", `Output is already filtered to this Session's allowlist (${routes}); only these authorized provider/model routes are accepted.`).replace(/Child LLM selection is optional\.\s*Omit `?provider`?, `?model`?, and `?reasoning_effort`? to use configured child defaults and (?:inherit compatible missing values from the parent Agent|this provider's route defaults)\./g, required).replace(/Supply `provider` and `model` together\. Omitted values use child defaults, falling back to (?:this backend's route defaults|compatible parent values)\./g, required).replace(/Supply together with model; omit both to use configured child defaults or (?:inherit the parent route|this provider's route defaults)\.|Omit to use the configured child default or inherit from the parent Agent\./g, `Required in this Session: pass an authorized provider id from list_subagent_models (${routes}).`).replace(/Supply together with provider; omit both to use configured child defaults or (?:inherit the parent route|this provider's route defaults)\.|Omit to use the configured child default or inherit when the child provider matches the parent provider\./g, "Required in this Session: pass the authorized model id (without the provider/ prefix) for the selected provider.").replaceAll("Child LLM provider id.", `Required in this Session: pass an authorized provider id from list_subagent_models (${routes}).`).replaceAll("Model id within that provider.", "Required in this Session: pass the authorized model id (without the provider/ prefix) for the selected provider.");
 }
 /**
 * Rewrite one assembled prompt's `tools:sdk` section and native tool schemas
@@ -85527,7 +86352,7 @@ function rewriteAuthorizedPromptAssembly(assembly, allowed, toolNames = DEFAULT_
 * @param inheritToolNames - Delegation tools that start a child on the caller's own route.
 * @returns a denial reason, or undefined to leave the call untouched.
 */
-function delegationDenialReason(agent, toolName, args, preference, sessions, toolNames = DEFAULT_DELEGATION_TOOLS, scope = "session", inheritToolNames = [], declaresRouteParameters, lockSnapshot = true) {
+function delegationDenialReason(agent, toolName, args, preference, sessions, toolNames = DEFAULT_DELEGATION_TOOLS, scope = "session", inheritToolNames = [], declaresRouteParameters, lockSnapshot = true, parentForkToolNames = DEFAULT_PARENT_FORK_TOOLS) {
 	const mode = delegationModeOf([...toolNames.map((name) => ({
 		name,
 		mode: "explicit"
@@ -85542,7 +86367,8 @@ function delegationDenialReason(agent, toolName, args, preference, sessions, too
 	const requestedProvider = asString$6(request["provider"]);
 	const requestedModel = asString$6(request["model"]);
 	if (mode === "inherit") {
-		if (requestedProvider !== void 0 && requestedModel !== void 0) return inheritOverrideReason(toolName, requestedProvider, requestedModel);
+		if (requestedProvider !== void 0 || requestedModel !== void 0) return inheritOverrideReason(toolName, requestedProvider ?? "", requestedModel ?? "");
+		if (parentForkToolNames.includes(toolName) && effectiveAllowParentFork(agent, preference, sessions, lockSnapshot)) return;
 		return inheritedRouteDenial(agent, toolName, allowed);
 	}
 	if (declaresRouteParameters?.(agent, toolName) === false) {
@@ -89580,14 +90406,16 @@ function routeAllowed(allowed, route) {
 * @param parent - the parent session to audit.
 * @param sessions - registry used to resolve children and parents.
 * @param allowed - routes the parent Session authorized, when it recorded any.
+* @param options - optional parent-fork exemption matching the live guard.
 * @returns violations, ordered as the children were discovered.
 */
-function auditChildRoutes(parent, sessions, allowed) {
+function auditChildRoutes(parent, sessions, allowed, options) {
 	if (allowed === void 0 || allowed.length === 0) return [];
 	const violations = [];
 	for (const finding of childRoutesOf(parent, sessions)) {
 		const effective = effectiveRouteOf(finding, sessions);
 		if (routeAllowed(allowed, effective)) continue;
+		if (options?.allowParentFork === true && finding.provider === "fork" && effective.sameAsParent) continue;
 		violations.push({
 			finding,
 			route: {
@@ -91287,6 +92115,8 @@ const PRESET_REGISTRY_PACKAGE = "@deepseek-ai/dsh-agent-preset";
 * registers `{{cwd}}` as a `systemPrompt` variable.
 */
 const WORKING_DIRECTORY_PACKAGE = "@deepseek-ai/dsh-working-directory";
+/** The standalone PTC executor introduced when tool presentation split into executor plugins. */
+const PTC_EXECUTOR_PACKAGE = "@deepseek-ai/dsh-tool-executor-ptc";
 /** The id the `dispatch` preset is selectable under. */
 const DISPATCH_PRESET_ID = "dispatch";
 /**
@@ -91313,11 +92143,11 @@ const DISPATCH_PRESET = {
 				prefix: `[Role Identification] If your first user message is a task brief (rather than a direct request from the human user), you are a subagent: the coordinator-facing rules in R0, R0.5, R-G, R1, R2, R4, R5, and R-W do not apply to you. You are the executor—plan, execute, and self-verify strictly within your task boundary, and report concrete evidence back to the dispatcher; R3 remains in effect.
 - [Standing Subagent Contract] Unless overridden by the brief, every subagent inherits these standing limits: retry attempts at most 3 total per brief; file edits bounded strictly to the declared Boundary module or files; read, search, verification, and test commands unlimited within that boundary; no per-cycle banking (all limits are single-run task totals, and unused allowance is not banked).
 - [Subagent Report Protocol] Every subagent completion report states status: ready | hand_back | blocked | failed | dropped, a summary, and evidence (diffs, test commands and outputs, before/after captures for UI). A status: hand_back report adds a one-sentence hand_back_reason naming the out-of-boundary file/interface or broken premise, and mutates no file outside Boundary.
-- [Coordinator-Only Tools] ask_user_question, enter_plan_mode, leave_plan_mode, exit_plan_mode, create_goal, update_goal, and present are coordinator-only: a subagent call is hard-blocked at execution time (DELEGATED_CALLER), while declarations remain visible to preserve the provider’s content-prefix cache (notably Kimi Code’s). Never call them as a subagent; escalate via status: hand_back or status: blocked. The bridge’s enforcement is generation-graded (see R9), so never rely on the rejection.
+- [Coordinator-Only Tools] ask_user_question, enter_plan_mode, leave_plan_mode, exit_plan_mode, create_goal, update_goal, and present are coordinator-only: a subagent call is hard-blocked at execution time (DELEGATED_CALLER), while declarations remain visible to preserve the provider’s content-prefix cache. Never call them as a subagent; escalate via status: hand_back or status: blocked. The bridge’s enforcement is generation-graded (see R9), so never rely on the rejection.
 - [Dispatch Ledger] Call dispatch_ledger {action:"self"} once before your first delegation — it prints the v2 mandate protocol at the tail of its result — and follow that protocol verbatim for every dispatch, report, and steer.
 
-[Coordinator Identity] You are the Dispatch Agent for this session. Your deliverables are plans, task briefs, review verdicts, and delivery summaries—not code written on someone else's behalf.
-[Execution Pipeline] R0.5 Compatibility Gate (once per new session) -> R0 Complexity Triage -> (L2) R-G Clarification Interview -> Planning -> R2 Model Routing -> R5 Task Brief Dispatch -> R-W Turn Boundary Wait -> R6 Review & Acceptance.
+[Coordinator Identity] You are the Lead & Dispatch Agent: converge requirements, plan architecture, select R1 topology (Lead-Core / Hybrid / Fan-out), orchestrate subagents where ROI is positive, and own final acceptance.
+[Execution Pipeline] R0.5 Gate -> R0 Triage -> (L2) R-G Interview -> R9 Plan -> R1 Topology -> (if delegating: R2 Routing -> R5 Brief -> R-W Wait) -> R6 Acceptance.
 
 ## R0.5 · Compatibility Gate (Once per New Session, Before R0)
 Dispatch Mode is **incompatible** with Agent Teams and deliberately provides no fallback path: Agent Teams replaces send_message, list_agents, and interrupt_agent with team-scoped registrations, leaving spawned subagents invisible and unreachable.
@@ -91332,7 +92162,7 @@ Criterion: whether spawn_teammate and wait_agent exist (in PTC mode: tools.spawn
 Upon receiving a task, determine its tier by semantic impact and uncertainty first, write one line stating "Tier + Rationale", and run the matching workflow:
 - L0 Simple / Single-point: single-file or single-point edit; unambiguous; reversible; no parallelism value. -> Execute directly and report; no interview or subagents.
 - L1 Moderate: unambiguous module-local work; edits at most 5 files (5 is a cap, not a range and not a target) with no cross-module contract break; at most 2 open points; limited parallelism gain. -> Ask at most 2 key questions (no full interview; 2 is the cap) -> brief plan -> execute yourself or dispatch 1 subagent.
-- L2 Complex / Multi-step: cross-module or interface-contract changes, unsettled product/UI decisions, or independent subtasks suitable for parallel execution. -> Run full workflow: Clarification Interview -> Full Plan -> Parallel Subagents -> Layered Acceptance.
+- L2 Complex / Multi-step: cross-module/contract changes, unsettled product/UI decisions, or multi-part work. -> Full governance: R-G Interview -> R9 Plan & Approval -> execute via R1 topology -> R6 Acceptance.
 - [Stop by Impact, Not by Effort] Within an assigned module or interface boundary, a subagent fixes all affected call sites, types, and tests needed for a self-contained result. It pauses and reports status: hand_back immediately when a change would break an external caller’s contract, alter cross-module responsibilities, or require an unsettled product or UI design decision—even when that change is a single line.
 When in doubt, clarify before escalating; if complexity grows mid-task, stop, re-triage, and inform the user.
 
@@ -91344,8 +92174,11 @@ When in doubt, clarify before escalating; if complexity grows mid-task, stop, re
 - G5 Convergence: End the interview only when the frontier is empty and the user explicitly confirms shared understanding.
 - G6 Prohibited: Answering your own questions, making product/design decisions for the user, skipping the interview, or treating a casual remark as full sign-off.
 
-## R1 · Responsibility Boundary (Layered by Tier)
-For L2 tasks, execute work yourself only in these seven categories: (1) Planning & decomposition; (2) Dispatching tasks; (3) Review; (4) Acceptance verification; (5) Documentation & delivery summary; (6) Tasks subagents cannot perform; (7) Independent parallel-module implementation sharing no files, unfinished interfaces, or acceptance dependencies with active subagents. For L0/L1 tasks, execute directly.
+## R1 · Execution Topology & Boundary (Coupling × Fan-out ROI)
+L0/L1: execute directly (or 1 subagent for L1). L2: R-G, R9, and R6 are mandatory; pick topology in the plan by coupling vs. parallel ROI (tightly coupled code is never barred from direct execution):
+- Lead-Core: tightly coupled cross-module/contract changes or sequential chains where splitting duplicates reads or causes hand_back loops. -> Implement directly in continuous steps (track in todo_write, no self-briefs) and run R6 verification.
+- Hybrid: unsettled shared contracts/seams plus orthogonal downstream work. -> Implement & freeze core seams yourself first, then delegate orthogonal adapters/tests/noisy exploration per R2/R5 (or subagent_fork for warm-context isolation).
+- Fan-out: >=3 orthogonal subtasks with disjoint files, settled interfaces, and clear parallel/routing gain. -> Coordinate (plan, R2/R5 dispatch, R6 review/acceptance, docs, non-delegable or disjoint parallel modules); never edit an active child's Boundary.
 
 ## R2 · Model Routing (Check Availability First, Then Decide How to Dispatch)
 Check whether list_subagent_models exists (in PTC mode: tools.list_subagent_models). The tool row and provider/model/reasoning_effort parameters are mounted statically, so they are present even in a session that authorized no route at all. Read that fact instead of inferring it from the tool's output:
@@ -91353,9 +92186,9 @@ Check whether list_subagent_models exists (in PTC mode: tools.list_subagent_mode
 - [State: Listed] Output ends with "Authorized child routes for this Session": enforcement is active.
   - The sole source of truth for the allowlist is list_subagent_models: call list_subagent_models({}) to list authorized providers, and call list_subagent_models({ provider }) to list authorized models under that provider; trust its output directly without cross-checking local config files or workspace code (even if upstream tool text says "Catalog membership is advisory", the runtime output is already filtered to this session's allowlist).
   - Before every dispatch, write route: <provider>/<model> (+ reasoning_effort when applicable) and pass split provider and model (model without the <provider>/ prefix).
-- [State: Unlisted] Output states no allowlist is in force: routing is unrestricted; omitting provider/model is legitimate. State once in your delivery summary that routing is unrestricted because no allowlist was recorded. Never claim per-task routing is in force here.
+- [State: Unlisted] Output states no allowlist is in force: no Session allowlist is recorded; omitting provider/model follows the tool's normal inheritance/default behavior. On Harness >=0.2.2, explicit selection may still be limited to the parent route; follow the tool result rather than claiming routing is unrestricted. State once in your delivery summary that no Session allowlist was recorded. Never claim per-task routing is in force here.
 - [State: Unmounted] list_subagent_models is absent and subagent exposes no route fields: subagents inherit your route; omit the route: line.
-- subagent_fork shares the parent route and KV cache; its admission is decided by the route the calling session is actually running, so it still works when list_subagent_models is absent: try subagent_fork once and read the denial if rejected. Keep model selection consistent across tasks of the same kind within a batch.
+- subagent_fork shares the parent route and KV cache; its admission is decided by the route the calling session is actually running (including same-model fork authorization), so it still works when list_subagent_models is absent: try subagent_fork once and read the denial if rejected. Keep model selection consistent across tasks of the same kind within a batch.
 
 ## R3 · Subagent Autonomy & R4 · Subagent Role
 A subagent has full authority to plan, execute, and self-verify within its assigned module; do not edit its files while it works. Subagents use DSH's default subagent role; model selection belongs solely to the Dispatch Agent.
@@ -91369,8 +92202,8 @@ Every task brief covers six elements: Goal / Boundary (which files or modules ma
 ## R6 · Review & Acceptance
 Two layers: subagent self-check -> your independent review (reading diffs, running tests, checking each criterion). The completion notification is a post-hoc signal: it tells you a child stopped, not that the work passed.
 - Re-dispatch budget per brief: 1 first attempt + at most 2 re-dispatches = at most 3 runs total. Count runs, not failures; the number belongs in the task list item for that brief (R7), not in your memory. Only after the third run fails, transition to R8 Fallback.
-- [Non-Penalized hand_back] A subagent that stops cleanly before mutating any out-of-boundary file and reports status: hand_back with a valid hand_back_reason is a scope routing event, not an execution failure, and does not increment the brief’s 3-run failure counter. When re-scoping or answering a child’s hand_back or blocked report, prefer continuing the existing child with send_message({ agent_id }) over spawning a fresh subagent to preserve its warm prefix cache—especially on kimi-code.
-- [Noticed but not handled] Every defect found in review: the defect goes back out on a re-dispatch with evidence or go to the user via ask_user_question (R-W). Writing it into the delivery summary and shipping anyway is not an available outcome.
+- [Non-Penalized hand_back] A subagent that stops cleanly before mutating any out-of-boundary file and reports status: hand_back with a valid hand_back_reason is a scope routing event, not an execution failure, and does not increment the brief’s 3-run failure counter. When re-scoping or answering a child’s hand_back or blocked report, prefer continuing the existing child with send_message({ agent_id }) over spawning a fresh subagent to preserve its warm prefix cache.
+- [Noticed but not handled] Every defect found in review: the defect goes back out on a re-dispatch with evidence or go to the user via ask_user_question (R-W); on Lead-Core/Hybrid core, fix and re-verify before delivery. Writing it into the delivery summary and shipping anyway is not an available outcome.
 - [UI Visual Evidence Gate] For any task or subtask that changes visible UI or GUI layout, styling, or components, acceptance requires both Before and After visual evidence—screenshots or live DOM/rendered captures—taken under the same scenario, viewport, and theme. After-only evidence fails R6 review.
 
 ## R-W · Turn Boundary (Waiting / Goals / Questions)
@@ -91384,7 +92217,7 @@ Maintain the task list (in todo_write, not create_goal; see R-W), decision log,
 - [Clause Deletion Test] Keep complete engineering evidence in internal review verification, but before sending the final user-facing delivery summary, ask of each clause whether deleting it would prevent the user from understanding the outcome, risk, or required action—if not, omit it.
 
 ## R8 · Fallback
-Fallback is a task-scoped, non-session-wide exception: it covers only the single task that triggered it. Execute a task yourself only on evidence of: L0/L1 task; subagent tools unmounted (R2 [State: Unmounted]—An unmounted tool is the only routing condition that permits fallback); non-delegable task; or the same task brief has still not passed review after its third run under R6. Fix trigger conditions on hard rejections (on active child limit -> wait and re-dispatch; on subagent model selection -> pass an explicit authorized route). When the next task begins, always return to R0 to triage anew.
+Fallback is a task-scoped, non-session-wide exception for delegated briefs: it covers only the single task that triggered it. Outside planned direct execution (L0/L1, R1 Lead-Core, or Hybrid core), execute a task yourself only on evidence of: subagent tools unmounted (R2 [State: Unmounted]—An unmounted tool is the only routing condition that permits fallback); non-delegable task; or the same task brief has still not passed review after its third run under R6. Fix trigger conditions on hard rejections (on active child limit -> wait and re-dispatch; on subagent model selection -> pass an explicit authorized route). When the next task begins, always return to R0 to triage anew.
 
 ## R9 · Plan Pipeline (Converged Interview -> Plan Mode -> Plan -> Approval)
 - Trigger: only for L2 once R-G has converged. Call enter_plan_mode immediately once that holds, as the sole action of that step. Read-only exploration and the decision-complete plan belong to the next turn, and exit_plan_mode must be the sole and final tool call of the turn that submits the plan.
@@ -91459,7 +92292,7 @@ Fallback is a task-scoped, non-session-wide exception: it covers only the single
 
 [Read-Only Exploration & Clarification Interview] Inspect the repository first using non-mutating reads, searches, and static checks, preferring existing functions, utilities, and patterns; never edit or write files, mutate config, run formatters/codegen that rewrite tracked files, commit, or otherwise enact the plan. To verify repository facts (such as where code lives or how current behavior works), explore read-only yourself or dispatch read-only subagents per R2 (using the routes returned directly by list_subagent_models) without blocking unrelated frontier questions. Before drafting the plan, settle requirements with the user per R0 and R-G: for L2 tasks, work the R-G design tree in rounds—ask the entire current frontier in one ask_user_question call (numbered, titled, with your recommended answer marked first), wait for the answers, and recompute the frontier until it is empty (every branch visited, nothing left silently assumed) and the user explicitly confirms shared understanding; for L0/L1 tasks, keep the interview to at most 2 questions, the ones that actually change the outcome. When a technical, naming, layout, or styling choice can be derived from an established reference in the repository or in AGENTS.md (target_basis: existing-standard), treat it as a repository fact: follow the existing standard and do not ask the user; reserve ask_user_question for unsettled product or design decisions with no established precedent.
 
-[Plan Completeness] Make the plan decision-complete: state the goal and success criteria; group implementation changes by subsystem; specify public API, schema, and data-flow changes; and cover edge cases, failure modes, test strategy, acceptance criteria, and explicit assumptions. Keep it concise enough to scan quickly while detailed enough that an executor or subagent can implement it without making further design decisions. When the plan changes visible UI or GUI layout, styling, or components, it names the Before and After visual evidence acceptance will require (same scenario, viewport, and theme); After-only evidence does not pass review.
+[Plan Completeness] Make the plan decision-complete: state the goal, success criteria, and R1 execution topology (Lead-Core, Hybrid, or Fan-out with subtask boundaries); group implementation changes by subsystem; specify public API, schema, and data-flow changes; and cover edge cases, failure modes, test strategy, acceptance criteria, and explicit assumptions. Keep it concise enough to scan quickly while detailed enough that an executor or subagent can implement it without making further design decisions. When the plan changes visible UI or GUI layout, styling, or components, it names the Before and After visual evidence acceptance will require (same scenario, viewport, and theme); After-only evidence does not pass review.
 
 [Plan Approval] When ready, call exit_plan_mode with the complete plan Markdown starting with a # Title heading, making exit_plan_mode the sole and final tool call of that turn: implementation or dispatch happens only in subsequent turns after approval. Never paste the final plan into a normal chat response or ask "Should I proceed?" in prose or via ask_user_question. If the user rejects the plan, fold in their feedback and resubmit via exit_plan_mode; if the approval channel is unavailable or aborted, stay in Plan Mode and ask the user to switch modes manually—never start implementing on your own.` }
 			}, {
@@ -91615,13 +92448,17 @@ Fallback is a task-scoped, non-session-wide exception: it covers only the single
 * and remove its standalone `./list-agents` export. That row is omitted only when
 * the export is absent; older harnesses keep it because their main entry does not
 * register the tool.
+*
+* When the standalone PTC executor exists, it replaces the deprecated
+* agent-tool-presentation compatibility row and its `{ mode: 'ptc' }` config.
 * @param resolves - whether a bare specifier resolves in this installation.
 * @returns the preset definition for the running harness generation.
 */
 function resolveDispatchPreset(resolves = resolvesFromHere) {
 	const hasWorkingDirectory = resolves(WORKING_DIRECTORY_PACKAGE);
 	const hasLegacyListAgents = resolves("@deepseek-ai/dsh-tool-subagent-control/list-agents");
-	if (!hasWorkingDirectory && hasLegacyListAgents) return DISPATCH_PRESET;
+	const hasPtcExecutor = resolves(PTC_EXECUTOR_PACKAGE);
+	if (!hasWorkingDirectory && hasLegacyListAgents && !hasPtcExecutor) return DISPATCH_PRESET;
 	return {
 		...DISPATCH_PRESET,
 		plugins: DISPATCH_PRESET.plugins.map((row) => {
@@ -91629,6 +92466,14 @@ function resolveDispatchPreset(resolves = resolvesFromHere) {
 				...row,
 				config: row.config.filter((nested) => nested.id !== "tool-subagent-list-agents")
 			};
+			if (row.id === "tool-presentation" && hasPtcExecutor) {
+				const { config: _omitted, ...rest } = row;
+				return {
+					...rest,
+					id: "tool-executor-ptc",
+					name: PTC_EXECUTOR_PACKAGE
+				};
+			}
 			if (row.id !== "persona" || !hasWorkingDirectory || typeof row.config !== "object" || row.config === null) return row;
 			const { suffix: _omitted, ...rest } = row.config;
 			return {
@@ -99531,7 +100376,7 @@ var WorkBuddyAdapter = class extends LlmAdapter {
 	providerInfo(provider) {
 		return {
 			id: provider,
-			name: PROVIDER_NAME$3
+			name: localizedProviderName(provider, PROVIDER_NAME$3)
 		};
 	}
 	providerRetryPolicy() {
@@ -100171,7 +101016,7 @@ function parseWorkBuddyPoolState(value) {
 	if (typeof raw.pause === "object" && raw.pause !== null && !Array.isArray(raw.pause)) {
 		const record = raw.pause;
 		if (typeof record.pausedSince === "number" && Number.isFinite(record.pausedSince) && typeof record.pausedUntil === "number" && Number.isFinite(record.pausedUntil)) pause = {
-			reason: typeof record.reason === "string" ? record.reason : "号池已暂停。",
+			reason: typeof record.reason === "string" ? record.reason : t("wb.pool.pausedDefault"),
 			pausedSince: record.pausedSince,
 			pausedUntil: record.pausedUntil,
 			triggeredBy: Array.isArray(record.triggeredBy) ? record.triggeredBy.filter((id) => typeof id === "string") : []
@@ -100303,7 +101148,7 @@ function backendFromDomain(domain) {
 * which is the case that used to be reported as "the account shows 账号 1".
 */
 function defaultAliasFor(credentials, position) {
-	return credentials.nickname || credentials.uin || credentials.uid || `账号 ${position}`;
+	return credentials.nickname || credentials.uin || credentials.uid || t("wb.pool.accountLabel", { position });
 }
 /**
 * A meter's consumed share, from whichever fraction this line measured.
@@ -100493,7 +101338,11 @@ var WorkBuddyAccountPool = class extends AccountPoolCore {
 	/** The error every selection raises while the pool is paused. */
 	pausedError(pause, now = Date.now()) {
 		const minutes = Math.max(1, Math.ceil((pause.pausedUntil - now) / 6e4));
-		return new WorkBuddyPoolPausedError(`${PROVIDER_NAME$3} 号池已暂停：${pause.reason} 预计 ${minutes} 分钟后自动恢复；被上游限制的账号需要重新登录后才能回到轮换。`, pause.pausedUntil);
+		return new WorkBuddyPoolPausedError(t("wb.pool.paused", {
+			provider: PROVIDER_NAME$3,
+			reason: pause.reason,
+			minutes
+		}), pause.pausedUntil);
 	}
 	/**
 	* Record an account-scoped refusal reported by the protocol worker.
@@ -100520,7 +101369,11 @@ var WorkBuddyAccountPool = class extends AccountPoolCore {
 	* log instead of silently barring a healthy account.
 	*/
 	async markAccountRestriction(accountId, restriction) {
-		if (restriction.code !== 11140) throw new Error(`${PROVIDER_NAME$3} 号池只记录账号级限制（${WORKBUDDY_RESTRICTED_ACCOUNT_CODE}），收到业务码 ${restriction.code}；11128 与 11158 不是账号级拒绝，必须由协议层分别处理。`);
+		if (restriction.code !== 11140) throw new Error(t("wb.pool.notAccountScoped", {
+			provider: PROVIDER_NAME$3,
+			expected: WORKBUDDY_RESTRICTED_ACCOUNT_CODE,
+			code: restriction.code
+		}));
 		const now = Date.now();
 		const record = {
 			code: restriction.code,
@@ -100537,7 +101390,11 @@ var WorkBuddyAccountPool = class extends AccountPoolCore {
 				if (others.length > 0) {
 					const windowMinutes = Math.round(WORKBUDDY_RESTRICTION_ESCALATION_WINDOW_MS / 6e4);
 					state.pause = {
-						reason: `上游以 ${restriction.code} 在 ${windowMinutes} 分钟内拒绝了 ${others.length + 1} 个不同账号`,
+						reason: t("wb.pool.upstreamRefused", {
+							code: restriction.code,
+							minutes: windowMinutes,
+							count: others.length + 1
+						}),
 						pausedSince: now,
 						pausedUntil: now + WORKBUDDY_POOL_PAUSE_MS,
 						triggeredBy: Object.keys(state.restrictions)
@@ -100853,7 +101710,7 @@ var WorkBuddyAccountPool = class extends AccountPoolCore {
 	* the user their account was deleted. Hiding is the supported action there.
 	*/
 	deleteAccountFromPool(data, accountId) {
-		if (data.accounts.find((account) => account.id === accountId)?.source === "desktop") throw new Error("桌面账号由 CodeBuddy 客户端所有，只能隐藏，不能删除。");
+		if (data.accounts.find((account) => account.id === accountId)?.source === "desktop") throw new Error(t("wb.pool.desktopAccountUndeletable"));
 		super.deleteAccountFromPool(data, accountId);
 	}
 };
@@ -100930,10 +101787,14 @@ async function requestLoginState(region, fetchFn = fetch, signal) {
 	} catch {
 		root = void 0;
 	}
-	if (!response.ok || root?.code !== 0 || !isRecord$1(root.data)) throw new Error(`${PROVIDER_NAME$3} 登录初始化失败（HTTP ${response.status}）：${stringOf(root ?? {}, "msg") ?? text.slice(0, 160)}`);
+	if (!response.ok || root?.code !== 0 || !isRecord$1(root.data)) throw new Error(t("wb.oauth.loginInitFailed", {
+		provider: PROVIDER_NAME$3,
+		status: response.status,
+		detail: stringOf(root ?? {}, "msg") ?? text.slice(0, 160)
+	}));
 	const state = stringOf(root.data, "state");
 	const authUrl = stringOf(root.data, "authUrl");
-	if (!state || !authUrl) throw new Error(`${PROVIDER_NAME$3} 登录响应缺少 state 或 authUrl`);
+	if (!state || !authUrl) throw new Error(t("wb.oauth.loginMissingState", { provider: PROVIDER_NAME$3 }));
 	return {
 		state,
 		authUrl,
@@ -100943,15 +101804,18 @@ async function requestLoginState(region, fetchFn = fetch, signal) {
 }
 /** Parse the successful token-poll shape while accepting the two observed wrappers. */
 function parseLoginCredential(payload, attempt) {
-	if (!isRecord$1(payload)) throw new Error(`${PROVIDER_NAME$3} 登录轮询响应无效`);
+	if (!isRecord$1(payload)) throw new Error(t("wb.oauth.loginPollInvalid", { provider: PROVIDER_NAME$3 }));
 	const code = numberOf(payload, "code");
 	if (code === 11217) return null;
-	if (code !== 0) throw new Error(`${PROVIDER_NAME$3} 登录失败：${stringOf(payload, "msg") ?? `code ${String(code)}`}`);
+	if (code !== 0) throw new Error(t("wb.oauth.loginFailed", {
+		provider: PROVIDER_NAME$3,
+		detail: stringOf(payload, "msg") ?? `code ${String(code)}`
+	}));
 	const data = isRecord$1(payload.data) ? payload.data : payload;
 	const auth = isRecord$1(data.auth) ? data.auth : data;
 	const account = isRecord$1(data.account) ? data.account : isRecord$1(auth.account) ? auth.account : isRecord$1(data.user) ? data.user : isRecord$1(auth.user) ? auth.user : {};
 	const accessToken = stringOf(auth, "accessToken") ?? stringOf(auth, "access_token") ?? stringOf(data, "token");
-	if (!accessToken) throw new Error(`${PROVIDER_NAME$3} 登录成功响应缺少 access token`);
+	if (!accessToken) throw new Error(t("wb.oauth.loginMissingToken", { provider: PROVIDER_NAME$3 }));
 	const domain = stringOf(auth, "domain") ?? attempt.domain;
 	const expiresIn = numberOf(auth, "expiresIn") ?? numberOf(auth, "expires_in");
 	const expiresAt = numberOf(auth, "expiresAt") ?? numberOf(auth, "expires_at") ?? (expiresIn === void 0 ? Date.now() + 3600 * 1e3 : Date.now() + expiresIn * 1e3);
@@ -100978,12 +101842,16 @@ async function pollLogin(attempt, fetchFn = fetch, signal) {
 		signal: signal ? AbortSignal.any([signal, AbortSignal.timeout(2e4)]) : AbortSignal.timeout(2e4)
 	});
 	const text = await response.text().catch(() => "");
-	if (!response.ok) throw new Error(`${PROVIDER_NAME$3} 登录轮询失败（HTTP ${response.status}）：${text.slice(0, 160)}`);
+	if (!response.ok) throw new Error(t("wb.oauth.loginPollFailed", {
+		provider: PROVIDER_NAME$3,
+		status: response.status,
+		detail: text.slice(0, 160)
+	}));
 	let payload;
 	try {
 		payload = JSON.parse(text);
 	} catch {
-		throw new Error(`${PROVIDER_NAME$3} 登录轮询返回了非 JSON 响应`);
+		throw new Error(t("wb.oauth.loginPollNotJson", { provider: PROVIDER_NAME$3 }));
 	}
 	return parseLoginCredential(payload, attempt);
 }
@@ -101021,7 +101889,7 @@ async function beginWebLogin$4(store, region, fetchFn = fetch, options = {}) {
 		status: "pending",
 		region,
 		authUrl: attempt.authUrl,
-		progress: "等待浏览器授权…",
+		progress: t("wb.oauth.waitingBrowser"),
 		startedAt
 	};
 	(async () => {
@@ -101034,7 +101902,7 @@ async function beginWebLogin$4(store, region, fetchFn = fetch, options = {}) {
 				if (credentials === null) {
 					flow = {
 						...flow,
-						progress: `等待浏览器授权…（${Math.floor((Date.now() - startedAt) / 1e3)} 秒）`
+						progress: t("wb.oauth.waitingBrowserElapsed", { seconds: Math.floor((Date.now() - startedAt) / 1e3) })
 					};
 					continue;
 				}
@@ -101047,7 +101915,7 @@ async function beginWebLogin$4(store, region, fetchFn = fetch, options = {}) {
 					accountId: workBuddyAccountId(resolved),
 					startedAt,
 					completedAt: Date.now(),
-					progress: "授权完成"
+					progress: t("wb.oauth.authorized")
 				};
 				return;
 			}
@@ -101056,7 +101924,7 @@ async function beginWebLogin$4(store, region, fetchFn = fetch, options = {}) {
 				region,
 				startedAt,
 				completedAt: Date.now(),
-				error: "登录超时，请重新添加账号。"
+				error: t("wb.oauth.loginTimeout")
 			};
 		} catch (error) {
 			if (active.signal.aborted) return;
@@ -102166,7 +103034,8 @@ const Config = z$1.object({
 	progressUpdatesLanguage: z$1.union([
 		z$1.const("auto"),
 		z$1.const("zh"),
-		z$1.const("en")
+		z$1.const("en"),
+		z$1.const("ru")
 	]).default("auto").volatile().description("进展更新的输出语言：auto 跟随对话语言，zh 中文，en 英文。"),
 	planModePipeline: z$1.boolean().default(true).volatile().description("启用计划模式管线：允许调度模式在澄清访谈收敛后用 enter_plan_mode 进入计划模式，放弃规划时用 leave_plan_mode 退出。"),
 	dispatchExecutionGuard: z$1.boolean().default(true).volatile().description("启用调度执行守卫：在执行期拦截子代理越权调用主控专用工具，并拦截等待子代理期间的纯 sleep 空等命令；不修改工具声明面，零损耗保护 Kimi 缓存。"),
@@ -102185,6 +103054,8 @@ const inject = [
 	"loader"
 ];
 function apply(ctx, pluginConfig = {}) {
+	installHostLocale(new HostLocaleRuntime());
+	ctx.effect(() => () => installHostLocale(void 0), "dsh-chatgpt-subscription: host locale");
 	const fetchConfiguration = resolveFetchConfiguration(pluginConfig);
 	const poolStorageSettings = new PoolStorageSettings();
 	poolStorageSettings.hydrate().catch(() => void 0);
@@ -102318,9 +103189,13 @@ function apply(ctx, pluginConfig = {}) {
 					const current = preferences.status();
 					const defaultAllowedModels = current.subagentDefaultModels ?? [];
 					const byMainModel = current.subagentModelsByMainModel ?? {};
+					const defaultAllowParentFork = current.subagentDefaultAllowParentFork;
+					const allowParentForkByMainModel = current.subagentAllowParentForkByMainModel ?? {};
 					return {
 						...defaultAllowedModels.length > 0 ? { defaultAllowedModels } : {},
-						...Object.keys(byMainModel).length > 0 ? { byMainModel } : {}
+						...Object.keys(byMainModel).length > 0 ? { byMainModel } : {},
+						...defaultAllowParentFork === true ? { defaultAllowParentFork: true } : {},
+						...Object.keys(allowParentForkByMainModel).length > 0 ? { allowParentForkByMainModel } : {}
 					};
 				}
 			});
@@ -102684,13 +103559,15 @@ function apply(ctx, pluginConfig = {}) {
 			const override = mainRoute === void 0 ? void 0 : (current.subagentModelsByMainModel ?? {})[`${mainRoute.provider}/${mainRoute.model}`];
 			const fallback = current.subagentDefaultModels ?? [];
 			const allowed = audited === void 0 ? audited : override !== void 0 && override.length > 0 ? override : fallback.length > 0 ? fallback : audited;
+			const forkOverride = mainRoute === void 0 ? void 0 : (current.subagentAllowParentForkByMainModel ?? {})[`${mainRoute.provider}/${mainRoute.model}`];
+			const allowParentFork = typeof forkOverride === "boolean" ? forkOverride : current.subagentDefaultAllowParentFork === true;
 			return Promise.resolve({
 				sessionId,
 				allowedModels: (allowed ?? []).map((route) => ({
 					provider: route.provider,
 					model: route.model
 				})),
-				violations: auditChildRoutes(target, sessions, allowed).map((violation) => ({
+				violations: auditChildRoutes(target, sessions, allowed, { allowParentFork }).map((violation) => ({
 					childId: violation.finding.childId,
 					parentId: violation.finding.parentId ?? null,
 					provider: violation.finding.provider ?? null,
@@ -102974,4 +103851,4 @@ function apply(ctx, pluginConfig = {}) {
 	}, "dsh-chatgpt-subscription: adapter, routes, and lifecycle");
 }
 //#endregion
-export { AccountPoolCore, AccountPoolStore, AntigravityAdapter, CHANNEL_ALIASES, ADOPTED_CREDENTIAL_EXPIRED_HINT as CLAUDE_ADOPTED_CREDENTIAL_EXPIRED_HINT, API_BASE as CLAUDE_API_BASE, DEFAULT_VISIBLE_MODEL_IDS as CLAUDE_DEFAULT_VISIBLE_MODELS, FALLBACK_MODELS as CLAUDE_FALLBACK_MODELS, MESSAGES_PATH as CLAUDE_MESSAGES_PATH, CLAUDE_MODELS, CLAUDE_MODEL_IDS, PROVIDER_ID as CLAUDE_PROVIDER_ID, PROVIDER_NAME as CLAUDE_PROVIDER_NAME, QUOTA_CACHE_TTL_MS as CLAUDE_QUOTA_CACHE_TTL_MS, CLAUDE_REASONING_EFFORTS, ROUTE_PREFIX as CLAUDE_ROUTE_PREFIX, CLINE_PASS_API_KEY_ENV, DEFAULT_BASE_URL as CLINE_PASS_DEFAULT_BASE_URL, DEFAULT_MODELS as CLINE_PASS_DEFAULT_MODELS, MAX_UPSTREAMS as CLINE_PASS_MAX_UPSTREAMS, MODEL_CATALOG as CLINE_PASS_MODEL_CATALOG, POOL_COOLDOWN_MS as CLINE_PASS_POOL_COOLDOWN_MS, REASONING_EFFORTS as CLINE_PASS_REASONING_EFFORTS, CLINE_PASS_ROUTES, CLINE_PASS_ROUTE_PREFIX, CLINE_PASS_PROVIDER_ID as CLINE_PASS_ROUTE_PROVIDER_ID, CLINE_PASS_PROVIDER_NAME as CLINE_PASS_ROUTE_PROVIDER_NAME, ClaudeAccountPool, ClaudeAdapter, FileCredentialStore as ClaudeCredentialStore, FileModelSettingsStore as ClaudeModelSettingsStore, ClinePassAccountPool, ClinePassAdapter, FileCredentialStore$1 as ClinePassCredentialStore, ClinePassEngine, ClinePassModelSettingsStore, CodexAccountPool, CodexChatGptAdapter, CommandCodeAccountPool, CommandCodeAdapter, FileCredentialStore$2 as CommandCodeCredentialStore, FileModelSettingsStore$1 as CommandCodeModelSettingsStore, Config, DEFAULT_GUARD_OPTIONS, DEFAULT_SUBAGENT_INHERIT_TOOLS, FileCredentialStore$3 as FileCredentialStore, FileModelSettingsStore$2 as FileModelSettingsStore, GLM_CODING_PLAN_PREFERENCES_NAMESPACE, QUOTA_WINDOW_MINUTES as GLM_CODING_PLAN_QUOTA_WINDOW_MINUTES, GLM_CODING_PLAN_RETRY_POLICY_CONFIG, PROVIDER_ID$1 as GLM_CODING_PLAN_ROUTE_PROVIDER_ID, PROVIDER_NAME$1 as GLM_CODING_PLAN_ROUTE_PROVIDER_NAME, GLM_MODEL_CATALOG, GLM_MODEL_IDS, GLM_POOL_COOLDOWN_MS, GlmAdoptedCredentialRefreshError, GlmCodingPlanAccountPool, GlmCodingPlanAdapter, GlmCodingPlanCredentialStore, GlmCodingPlanModelSettingsStore, KIMI_CODE_MODELS, KIMI_CODE_RETRY_POLICY_CONFIG, KimiCodeAccountPool, KimiCodeAdapter, FileCredentialStore$4 as KimiCodeCredentialStore, FileModelSettingsStore$3 as KimiCodeModelSettingsStore, LinuxFileTokenStore, AGENT_LLM_PREFIX as MINIMAX_CODE_AGENT_LLM_PREFIX, DEFAULT_MAX_MESSAGE_BODY_BYTES as MINIMAX_CODE_MAX_MESSAGE_BODY_BYTES, MESSAGES_PATH$1 as MINIMAX_CODE_MESSAGES_PATH, MINIMAX_CODE_MODELS, PROBE_MODEL as MINIMAX_CODE_PROBE_MODEL, MINIMAX_CODE_PROVIDER_ID, MINIMAX_CODE_PROVIDER_NAME, MINIMAX_CODE_REASONING_EFFORTS, REGION_HOSTS as MINIMAX_CODE_REGION_HOSTS, MINIMAX_CODE_RETRY_POLICY_CONFIG, MINIMAX_CODE_ROUTE_PREFIX, MacKeychainTokenStore, MinimaxCodeAccountPool, MinimaxCodeAdapter, MinimaxCodeCheckinService, MinimaxCodeCredentialStore, MinimaxCodeModelSettingsStore, OAuthService, OPENDESIGN_API_KEY_ENV, OPENDESIGN_CONSOLE_URL, DEFAULT_BASE_URL$1 as OPENDESIGN_DEFAULT_BASE_URL, DEFAULT_CONTEXT_WINDOW as OPENDESIGN_DEFAULT_CONTEXT_WINDOW, DEFAULT_MAX_CONCURRENT_REQUESTS as OPENDESIGN_DEFAULT_MAX_CONCURRENT_REQUESTS, DEFAULT_MAX_TOKENS as OPENDESIGN_DEFAULT_MAX_TOKENS, DEFAULT_MODELS$1 as OPENDESIGN_DEFAULT_MODELS, DEFAULT_STREAM_IDLE_TIMEOUT_MS as OPENDESIGN_DEFAULT_STREAM_IDLE_TIMEOUT_MS, PROVIDER_ID$2 as OPENDESIGN_HOST_PROVIDER_ID, PROVIDER_NAME$2 as OPENDESIGN_HOST_PROVIDER_NAME, MODEL_CATALOG$1 as OPENDESIGN_MODEL_CATALOG, MODEL_PRICES_URL as OPENDESIGN_MODEL_PRICES_URL, NO_ANSWER_PHRASE as OPENDESIGN_NO_ANSWER_PHRASE, POOL_COOLDOWN_MS$1 as OPENDESIGN_POOL_COOLDOWN_MS, OPENDESIGN_PROVIDER_ID, OPENDESIGN_PROVIDER_NAME, REASONING_EFFORT_IDS as OPENDESIGN_REASONING_EFFORT_IDS, OPENDESIGN_ROUTES, OPENDESIGN_ROUTE_PREFIX, OpenDesignAccountPool, OpenDesignAdapter, FileCredentialStore$5 as OpenDesignCredentialStore, OpenDesignModelSettingsStore, ProxyManager, QODER_POOL_COOLDOWN_MS, QODER_PROVIDER_ID, QODER_PROVIDER_NAME, QODER_REGIONS, QODER_RETRY_POLICY_CONFIG, QODER_ROUTE_PREFIX, QoderAccountPool, QoderAdapter, QoderCredentialStore, QoderModelSettingsStore, RELAY_PROBE_ENV, RELAY_PROBE_FILE_ENV, RELAY_PROBE_FILE_NAME, RELAY_PROBE_MAX_BYTES, RELAY_SOURCE_KINDS, RESUME_HINT, RESUME_HINT_STRICT, RelayProbe, ResponsesClient, STEP_CODE_POOL_COOLDOWN_MS, STEP_CODE_PROFILES, STEP_CODE_PROVIDER_ID, STEP_CODE_PROVIDER_NAME, STEP_CODE_RETRY_POLICY_CONFIG, STEP_CODE_ROUTE_PREFIX, SUBAGENT_MODEL_SELECTION_NAMESPACE, SUBAGENT_POLICY_EVENT, SearchProviderSwitcher, StepCodeAccountPool, StepCodeAdapter, StepCodeCredentialRefreshError, StepCodeCredentialStore, StepCodeModelSettingsStore, StepCodeQuotaCredentialStore, UsageService, FALLBACK_MODELS$1 as WORKBUDDY_MODELS, WORKBUDDY_MODEL_IDS, WindowsDpapiTokenStore, WorkBuddyAdapter, WorkBuddyCheckinService, FileCredentialStore$6 as WorkBuddyCredentialStore, FileModelSettingsStore$4 as WorkBuddyModelSettingsStore, adoptZcodeSignIn as adoptGlmZcodeSignIn, adoptedPoolAccountKey, apply, assertRequestBodyFits as assertMinimaxCodeBodyFits, assertStreamComplete as assertMinimaxCodeStreamComplete, auditChildRoutes, auditedRoutesOf, authorizedRoutesFor, beginLogin as beginClaudeLogin, beginWebLogin as beginKimiCodeLogin, beginWebLogin$1 as beginMinimaxCodeLogin, beginWebLogin$2 as beginWebLogin, buildAttempts, buildClaudeModelOptions, buildClinePassBody, buildGlmRequestPlan, buildMinimaxCodeModelOptions, buildMinimaxRequest, buildOpenDesignBody, cachedQoderModelCatalog, cachedStepCodeModelCatalog, cancelLogin as cancelClaudeLogin, cancelWebLogin as cancelMinimaxCodeLogin, catalogModelOptions, channelNameFor, childRoutesOf, clampOutputToContext as clampMinimaxCodeOutputToContext, classifyFailure as classifyClaudeFailure, classifyKimiFailure, classifyMinimaxFailure, classifyUpstreamError, classifyFailure$1 as classifyWorkBuddyFailure, claudeCliVersion, claudeCodeCredentialPaths, claudeCodeCredentialPresence, codeForFailure as claudeCodeForFailure, credentialPath as claudeCredentialPath, defaultContextWindowFor as claudeDefaultContextWindow, maxOutputTokensFor as claudeMaxOutputTokens, claudeModelCanDisableThinking, modelSettingsPath as claudeModelSettingsPath, claudeModelSupportsImage, claudeModelSupportsTemperature, claudePoolPath, claudeReasoningEfforts, claudeThinkingMode, toLlmError as claudeToLlmError, clearCachedQuota, clearCachedCatalog as clearClaudeCatalog, clearCachedQuota$1 as clearClaudeQuota, clearCachedQuota$2 as clearCommandCodeQuota, clearCachedQuota$3 as clearKimiCodeQuota, clearCachedQuota$4 as clearMinimaxCodeQuota, clearCachedCatalog$1 as clearWorkBuddyCatalog, clearCachedQuota$5 as clearWorkBuddyQuota, clinePassAccountKey, clinePassAccountQuota, catalogEntry as clinePassCatalogEntry, chatCompletion as clinePassChatCompletion, chatURL as clinePassChatURL, credentialPath$1 as clinePassCredentialPath, defaultPin as clinePassDefaultPin, clinePassKnownModelIds, modelSettingsPath$1 as clinePassModelSettingsPath, clinePassPoolPath, clinePassVisibleModelIds, clinePassWindowDurationMins, clinePassWindowLabel, closeMinimaxStream, codexPoolPath, collapseScore, commandCodeAccountKey, credentialPath$2 as commandCodeCredentialPath, modelSettingsPath$2 as commandCodeModelSettingsPath, commandCodePoolPath, contextWindowForModel, convergeGlmEffort, createAntigravityImageTool, createClinePassLine, createClinePassStore, createCodexFetchProvider, createCodexImageTool, createCodexSearchProvider, createFileRelayProbeSink, createMinimaxCodeAccountsHandler, createMessage as createMinimaxCodeMessage, createPkcePair as createMinimaxCodePkcePair, createStreamState as createMinimaxCodeStreamState, createOpenDesignLine, createPlatformTokenStore, createSubagentAuthorization, credentialPath$3 as credentialPath, credentialsFromAdopt, credentialsFromCliLogin, defaultOpenDesignModelSettings, delegationDenialReason, delegationModeOf, describeCredentials as describeMinimaxCodeCredentials, detectSystemProxy, dshHomeDir, effectiveRouteOf, ensureAccessToken as ensureClaudeAccessToken, ensureAccessToken$1 as ensureKimiCodeAccessToken, ensureAccessToken$2 as ensureMinimaxCodeAccessToken, extractAvailableProviders, fetchAccountQuota, fetchAccountQuota$1 as fetchClaudeQuota, fetchGatewayCatalog as fetchClinePassGatewayCatalog, fetchOfficialModels as fetchClinePassOfficialModels, fetchUsageLimits as fetchClinePassUsageLimits, fetchAccountQuota$2 as fetchCommandCodeQuota, fetchGlmQuota, fetchAccountQuota$3 as fetchKimiCodeQuota, fetchUserInfo as fetchKimiCodeUserInfo, fetchTokenPlanQuota as fetchMinimaxCodeQuota, fetchGatewayCatalog$1 as fetchOpenDesignGatewayCatalog, fetchAccountQuota$4 as fetchWorkBuddyQuota, getCachedQuota as getCachedGlmCodingPlanQuota, getCachedQuota$1 as getCachedQuota, getLoginStatus as getClaudeLoginStatus, getCachedQuota$2 as getClaudeQuota, getClaudeWebStatus, getClinePassWebStatus, getWebLoginStatus as getCommandCodeLoginStatus, getCachedQuota$3 as getCommandCodeQuota, getCommandCodeWebStatus, getGlmCodingPlanStatus, getWebLoginStatus$1 as getKimiCodeLoginStatus, getCachedQuota$4 as getKimiCodeQuota, getKimiCodeWebStatus, getWebLogin as getMinimaxCodeLogin, getCachedQuota$5 as getMinimaxCodeQuota, getMinimaxCodeWebStatus, getOpenDesignWebStatus, getQoderStatus, getStepCodeStatus, getCachedQuota$6 as getWorkBuddyQuota, getWorkBuddyWebStatus, glmCatalogSize, authorizeUrl as glmCodingPlanAuthorizeUrl, catalogSize as glmCodingPlanCatalogCount, credentialPath$4 as glmCodingPlanCredentialPath, modelSettingsPath$3 as glmCodingPlanModelSettingsPath, modelsForRegion as glmCodingPlanModelsForRegion, glmCodingPlanPoolIdentity, glmCodingPlanPoolPath, glmCodingPlanPoolQuota, glmCodingPlanPoolStatus, glmCodingPlanSettingsSource, glmCooldownDecision, glmSubPathOf, inheritOverrideReason, inheritRouteDenialReason, inheritedRouteOf, inject, injectPrefs, installReasoningCollapseGuard, installRelayProbe, installSubagentModelAuthorization, isAdherenceOk, isAdoptedClaudeCredential, isAdoptedCredentialExpired, isAdoptedCredential as isAdoptedGlmCodingPlanCredential, isAdoptedZcodeCredential as isAdoptedGlmZcodeCredential, isAdoptedPoolCredential, isClaudeReasoningEffort, isClinePassPinMode, isGlmReasoningEffort, isMinimaxCodeReasoningEffort, isRefreshTokenRejected as isMinimaxCodeRefreshTokenRejected, isAuthenticationError as isOpenDesignAuthenticationError, isThinkingDisabledEffort, credentialPath$5 as kimiCodeCredentialPath, kimiCodeModelDef, modelSettingsPath$4 as kimiCodeModelSettingsPath, kimiCodePoolPath, listModelIds as listMinimaxCodeModelIds, loadCatalog as loadClaudeCatalog, loadProviderModels as loadCommandCodeModels, loadCatalog$1 as loadGlmCodingPlanCatalog, loadProviderModels$1 as loadKimiCodeModels, loadConfigCatalog as loadWorkBuddyModels, loginAndSave, mapCodexUsage, mapFinishReason, mapFinishReason$1 as mapOpenDesignFinishReason, mapUsage as mapOpenDesignUsage, mapUsage$1 as mapUsage, mergeGlmCodingPlanSettings, mergeUpstreams, accountFromCredentials as minimaxCodeAccountFromCredentials, accountHost as minimaxCodeAccountHost, agentBaseUrl as minimaxCodeAgentBaseUrl, authJsonPath as minimaxCodeAuthJsonPath, authStateJsonPath as minimaxCodeAuthStateJsonPath, catalogSize$1 as minimaxCodeCatalogSize, credentialIsFresh as minimaxCodeCredentialIsFresh, effortForModel as minimaxCodeEffortForModel, minimaxHomeDir as minimaxCodeHomeDir, maxMessageBodyBytes as minimaxCodeMaxMessageBodyBytes, maxOutputTokensFor$1 as minimaxCodeMaxOutputTokens, messagesUrl as minimaxCodeMessagesUrl, minimaxCodeModelDef, minimaxCodeModelIds, minimaxCodeModelName, modelRequestHeaders as minimaxCodeModelRequestHeaders, modelSettingsPath$5 as minimaxCodeModelSettingsPath, outputConfigFor as minimaxCodeOutputConfig, pluginCredentialPath as minimaxCodePluginCredentialPath, minimaxCodePoolIdentity, minimaxCodePoolPath, minimaxCodePoolStatus, quotaHostCandidates as minimaxCodeQuotaHostCandidates, quotaRequestHeaders as minimaxCodeQuotaRequestHeaders, subPathOf as minimaxCodeSubPathOf, tokenPlanRemainsUrl as minimaxCodeTokenPlanRemainsUrl, modelSettingsPath$6 as modelSettingsPath, normalizeDelegationToolNames, normalizeRegion as normalizeGlmCodingPlanRegion, normalizeInheritToolNames, normalizePinMode, normalizeRotationStrategy, normalizeSort, openChatStream as openClinePassChatStream, bearerFor as openDesignBearerFor, catalogEntry$1 as openDesignCatalogEntry, chatURL$1 as openDesignChatURL, credentialPath$6 as openDesignCredentialPath, credentialsIdentity as openDesignCredentialsIdentity, firstMessage as openDesignFirstMessage, openDesignKnownModelIds, modelSettingsPath$7 as openDesignModelSettingsPath, modelsURL as openDesignModelsURL, reasoningOf as openDesignReasoningOf, streamErrorCode as openDesignStreamErrorCode, openDesignVisibleModelIds, openChatStream$1 as openOpenDesignChatStream, opendesignAccountKey, opendesignPoolPath, parseAllowedRoutes, parseClaudeCredentialDocument, parseClaudeCredentials, parseClaudePoolData, parseUsagePayload as parseClaudeUsagePayload, parseClinePassCredentials, parseClinePassModelSettings, parseClinePassPoolData, parseCodexPoolData, parseCodexUsage, parseCommandCodePoolData, parseGlmCodingPlanCredentials, parseGlmCodingPlanPoolData, parseKimiCodePoolData, parseMinimaxCodeCredentials, parseMinimaxCodePoolData, parseTokenPlanQuota as parseMinimaxCodeQuota, parseAnthropicUsage as parseMinimaxCodeUsage, parseOpenDesignCredentials, parseOpenDesignModelSettings, parseOpenDesignPoolData, parseServerSentEvents as parseOpenDesignServerSentEvents, parseQoderCredentials, parseResponsesStream, parseRouting, parseServerSentEvents$1 as parseServerSentEvents, parseTier0, parseBilling as parseWorkBuddyBilling, parseConfigModels as parseWorkBuddyConfigModels, parseCredentialFile as parseWorkBuddyCredential, pinAdherence, pinWarnings, policyRoutesOf, pollWebLogin as pollMinimaxCodeLogin, probeConnection as probeClaudeConnection, processMinimaxStreamLine, qoderCatalogSize, credentialPath$7 as qoderCredentialPath, qoderCredentialsExpireAt, qoderCredentialsNeedRefresh, modelSettingsPath$8 as qoderModelSettingsPath, qoderPoolIdentity, qoderPoolPath, qoderPoolQuota, qoderPoolStatus, qoderPoolStatusSlice, qoderRefreshFailureStatus, qoderSettingsSource, qoderSubPathOf, readChildDescriptor, readClaudeCodeCredentials, readGlmResetAt, readQoderCacheStats, readStepCodeCacheStats, reasoningOf$1 as reasoningOf, redactToken as redactMinimaxCodeToken, refreshAntigravityToken, refreshAccessToken as refreshClaudeToken, refreshAccessToken$1 as refreshKimiCodeToken, refreshAccessToken$2 as refreshMinimaxCodeToken, refreshCredentials as refreshWorkBuddyCredentials, registerClaudePreferenceStore, registerClaudeRoutes, registerClinePassRoutes, registerCommandCodePreferenceStore, registerCommandCodeRoutes, registerGlmCodingPlanPreferenceStore, registerGlmCodingPlanRoutes, registerKimiCodePreferenceStore, registerKimiCodeRoutes, registerMinimaxCodePreferenceStore, registerMinimaxCodeRoutes, registerOpenDesignRoutes, registerQoderPreferenceStore, registerQoderRoutes, registerStepCodePreferenceStore, registerStepCodeRoutes, registerWorkBuddyPreferenceStore, registerWorkBuddyRoutes, relayProbeEnabled, relayProbeEnvFile, relayProbeEnvValue, relayProbeLogPath, rememberQoderCacheUsage, rememberStepCodeCacheUsage, requestDeviceAuthorization as requestKimiCodeDeviceAuthorization, requestDeviceAuthorization$1 as requestMinimaxCodeDeviceAuthorization, resetWebLogins as resetMinimaxCodeLogins, resolveEnabledModelIds as resolveClaudeEnabledModelIds, resolveLoginInput as resolveClaudeLoginInput, resolveClaudeModel, resolveGlmModel, resolveGuardOptions, resolveRegion as resolveKimiCodeRegion, resolveMinimaxCodeEnabledModelIds, resolveMinimaxCodeModelId, resolveQuotaCounts as resolveMinimaxCodeQuotaCounts, resolveModelInfo as resolveOpenDesignModelInfo, resolveOutputBudget as resolveOpenDesignOutputBudget, resolveWorkBuddyModel, revokeToken as revokeMinimaxCodeToken, saveApiKey as saveCommandCodeApiKey, scanCredentials as scanWorkBuddyCredentials, sendJSON as sendClinePassJSON, sendJSON$1 as sendOpenDesignJSON, serializeMessages, serializeMessages$1 as serializeOpenDesignMessages, setClaudeCliVersion, beginWebLogin$3 as startCommandCodeLogin, stepCodeCatalogSize, credentialPath$8 as stepCodeCredentialPath, stepCodeModelCatalogFrom, modelSettingsPath$9 as stepCodeModelSettingsPath, stepCodePoolIdentity, stepCodePoolPath, stepCodePoolQuota, stepCodePoolStatus, stepCodePoolStatusSlice, quotaCredentialPath as stepCodeQuotaCredentialPath, stepCodeSettingsSource, stepCodeSubPathOf, streamErrorCode$1 as streamErrorCode, subagentModelSelectionPreference, submitLoginInput as submitClaudeLoginInput, summarizeFailureBody as summarizeMinimaxCodeFailureBody, testConnection as testMinimaxCodeConnection, testApiKey as testOpenDesignApiKey, translate, translate$1 as translateOpenDesignStream, trimBase as trimClinePassBase, trimBase$1 as trimOpenDesignBase, unauthorizedRouteReason, validateAuthorizationScope, validateDelegationToolNames, validateInheritToolNames, verifyCodingPlanKey as verifyGlmCodingPlanKey, violationText, warmQoderCatalogOnStartup, withTimeout as withOpenDesignTimeout, modelSettingsPath$10 as workBuddyModelSettingsPath, modelsForRegion$1 as workBuddyModelsForRegion, zcodeCredentialsPath };
+export { AccountPoolCore, AccountPoolStore, AntigravityAdapter, CHANNEL_ALIASES, ADOPTED_CREDENTIAL_EXPIRED_HINT as CLAUDE_ADOPTED_CREDENTIAL_EXPIRED_HINT, API_BASE as CLAUDE_API_BASE, DEFAULT_VISIBLE_MODEL_IDS as CLAUDE_DEFAULT_VISIBLE_MODELS, FALLBACK_MODELS as CLAUDE_FALLBACK_MODELS, MESSAGES_PATH as CLAUDE_MESSAGES_PATH, CLAUDE_MODELS, CLAUDE_MODEL_IDS, PROVIDER_ID as CLAUDE_PROVIDER_ID, PROVIDER_NAME as CLAUDE_PROVIDER_NAME, QUOTA_CACHE_TTL_MS as CLAUDE_QUOTA_CACHE_TTL_MS, CLAUDE_REASONING_EFFORTS, ROUTE_PREFIX as CLAUDE_ROUTE_PREFIX, CLINE_PASS_API_KEY_ENV, DEFAULT_BASE_URL as CLINE_PASS_DEFAULT_BASE_URL, DEFAULT_MODELS as CLINE_PASS_DEFAULT_MODELS, MAX_UPSTREAMS as CLINE_PASS_MAX_UPSTREAMS, MODEL_CATALOG as CLINE_PASS_MODEL_CATALOG, POOL_COOLDOWN_MS as CLINE_PASS_POOL_COOLDOWN_MS, REASONING_EFFORTS as CLINE_PASS_REASONING_EFFORTS, CLINE_PASS_ROUTES, CLINE_PASS_ROUTE_PREFIX, CLINE_PASS_PROVIDER_ID as CLINE_PASS_ROUTE_PROVIDER_ID, CLINE_PASS_PROVIDER_NAME as CLINE_PASS_ROUTE_PROVIDER_NAME, ClaudeAccountPool, ClaudeAdapter, FileCredentialStore as ClaudeCredentialStore, FileModelSettingsStore as ClaudeModelSettingsStore, ClinePassAccountPool, ClinePassAdapter, FileCredentialStore$1 as ClinePassCredentialStore, ClinePassEngine, ClinePassModelSettingsStore, CodexAccountPool, CodexChatGptAdapter, CommandCodeAccountPool, CommandCodeAdapter, FileCredentialStore$2 as CommandCodeCredentialStore, FileModelSettingsStore$1 as CommandCodeModelSettingsStore, Config, DEFAULT_GUARD_OPTIONS, DEFAULT_PARENT_FORK_TOOLS, DEFAULT_SUBAGENT_INHERIT_TOOLS, FileCredentialStore$3 as FileCredentialStore, FileModelSettingsStore$2 as FileModelSettingsStore, GLM_CODING_PLAN_PREFERENCES_NAMESPACE, QUOTA_WINDOW_MINUTES as GLM_CODING_PLAN_QUOTA_WINDOW_MINUTES, GLM_CODING_PLAN_RETRY_POLICY_CONFIG, PROVIDER_ID$1 as GLM_CODING_PLAN_ROUTE_PROVIDER_ID, PROVIDER_NAME$1 as GLM_CODING_PLAN_ROUTE_PROVIDER_NAME, GLM_MODEL_CATALOG, GLM_MODEL_IDS, GLM_POOL_COOLDOWN_MS, GlmAdoptedCredentialRefreshError, GlmCodingPlanAccountPool, GlmCodingPlanAdapter, GlmCodingPlanCredentialStore, GlmCodingPlanModelSettingsStore, KIMI_CODE_MODELS, KIMI_CODE_RETRY_POLICY_CONFIG, KimiCodeAccountPool, KimiCodeAdapter, FileCredentialStore$4 as KimiCodeCredentialStore, FileModelSettingsStore$3 as KimiCodeModelSettingsStore, LinuxFileTokenStore, AGENT_LLM_PREFIX as MINIMAX_CODE_AGENT_LLM_PREFIX, DEFAULT_MAX_MESSAGE_BODY_BYTES as MINIMAX_CODE_MAX_MESSAGE_BODY_BYTES, MESSAGES_PATH$1 as MINIMAX_CODE_MESSAGES_PATH, MINIMAX_CODE_MODELS, PROBE_MODEL as MINIMAX_CODE_PROBE_MODEL, MINIMAX_CODE_PROVIDER_ID, MINIMAX_CODE_PROVIDER_NAME, MINIMAX_CODE_REASONING_EFFORTS, REGION_HOSTS as MINIMAX_CODE_REGION_HOSTS, MINIMAX_CODE_RETRY_POLICY_CONFIG, MINIMAX_CODE_ROUTE_PREFIX, MacKeychainTokenStore, MinimaxCodeAccountPool, MinimaxCodeAdapter, MinimaxCodeCheckinService, MinimaxCodeCredentialStore, MinimaxCodeModelSettingsStore, OAuthService, OPENDESIGN_API_KEY_ENV, OPENDESIGN_CONSOLE_URL, DEFAULT_BASE_URL$1 as OPENDESIGN_DEFAULT_BASE_URL, DEFAULT_CONTEXT_WINDOW as OPENDESIGN_DEFAULT_CONTEXT_WINDOW, DEFAULT_MAX_CONCURRENT_REQUESTS as OPENDESIGN_DEFAULT_MAX_CONCURRENT_REQUESTS, DEFAULT_MAX_TOKENS as OPENDESIGN_DEFAULT_MAX_TOKENS, DEFAULT_MODELS$1 as OPENDESIGN_DEFAULT_MODELS, DEFAULT_STREAM_IDLE_TIMEOUT_MS as OPENDESIGN_DEFAULT_STREAM_IDLE_TIMEOUT_MS, PROVIDER_ID$2 as OPENDESIGN_HOST_PROVIDER_ID, PROVIDER_NAME$2 as OPENDESIGN_HOST_PROVIDER_NAME, MODEL_CATALOG$1 as OPENDESIGN_MODEL_CATALOG, MODEL_PRICES_URL as OPENDESIGN_MODEL_PRICES_URL, NO_ANSWER_PHRASE as OPENDESIGN_NO_ANSWER_PHRASE, POOL_COOLDOWN_MS$1 as OPENDESIGN_POOL_COOLDOWN_MS, OPENDESIGN_PROVIDER_ID, OPENDESIGN_PROVIDER_NAME, REASONING_EFFORT_IDS as OPENDESIGN_REASONING_EFFORT_IDS, OPENDESIGN_ROUTES, OPENDESIGN_ROUTE_PREFIX, OpenDesignAccountPool, OpenDesignAdapter, FileCredentialStore$5 as OpenDesignCredentialStore, OpenDesignModelSettingsStore, ProxyManager, QODER_POOL_COOLDOWN_MS, QODER_PROVIDER_ID, QODER_PROVIDER_NAME, QODER_REGIONS, QODER_RETRY_POLICY_CONFIG, QODER_ROUTE_PREFIX, QoderAccountPool, QoderAdapter, QoderCredentialStore, QoderModelSettingsStore, RELAY_PROBE_ENV, RELAY_PROBE_FILE_ENV, RELAY_PROBE_FILE_NAME, RELAY_PROBE_MAX_BYTES, RELAY_SOURCE_KINDS, RESUME_HINT, RESUME_HINT_STRICT, RelayProbe, ResponsesClient, STEP_CODE_POOL_COOLDOWN_MS, STEP_CODE_PROFILES, STEP_CODE_PROVIDER_ID, STEP_CODE_PROVIDER_NAME, STEP_CODE_RETRY_POLICY_CONFIG, STEP_CODE_ROUTE_PREFIX, SUBAGENT_MODEL_SELECTION_NAMESPACE, SUBAGENT_POLICY_EVENT, SearchProviderSwitcher, StepCodeAccountPool, StepCodeAdapter, StepCodeCredentialRefreshError, StepCodeCredentialStore, StepCodeModelSettingsStore, StepCodeQuotaCredentialStore, UsageService, FALLBACK_MODELS$1 as WORKBUDDY_MODELS, WORKBUDDY_MODEL_IDS, WindowsDpapiTokenStore, WorkBuddyAdapter, WorkBuddyCheckinService, FileCredentialStore$6 as WorkBuddyCredentialStore, FileModelSettingsStore$4 as WorkBuddyModelSettingsStore, adoptZcodeSignIn as adoptGlmZcodeSignIn, adoptedPoolAccountKey, apply, assertRequestBodyFits as assertMinimaxCodeBodyFits, assertStreamComplete as assertMinimaxCodeStreamComplete, auditChildRoutes, auditedRoutesOf, authorizedRoutesFor, beginLogin as beginClaudeLogin, beginWebLogin as beginKimiCodeLogin, beginWebLogin$1 as beginMinimaxCodeLogin, beginWebLogin$2 as beginWebLogin, buildAttempts, buildClaudeModelOptions, buildClinePassBody, buildGlmRequestPlan, buildMinimaxCodeModelOptions, buildMinimaxRequest, buildOpenDesignBody, cachedQoderModelCatalog, cachedStepCodeModelCatalog, cancelLogin as cancelClaudeLogin, cancelWebLogin as cancelMinimaxCodeLogin, catalogModelOptions, channelNameFor, childRoutesOf, clampOutputToContext as clampMinimaxCodeOutputToContext, classifyFailure as classifyClaudeFailure, classifyKimiFailure, classifyMinimaxFailure, classifyUpstreamError, classifyFailure$1 as classifyWorkBuddyFailure, claudeCliVersion, claudeCodeCredentialPaths, claudeCodeCredentialPresence, codeForFailure as claudeCodeForFailure, credentialPath as claudeCredentialPath, defaultContextWindowFor as claudeDefaultContextWindow, maxOutputTokensFor as claudeMaxOutputTokens, claudeModelCanDisableThinking, modelSettingsPath as claudeModelSettingsPath, claudeModelSupportsImage, claudeModelSupportsTemperature, claudePoolPath, claudeReasoningEfforts, claudeThinkingMode, toLlmError as claudeToLlmError, clearCachedQuota, clearCachedCatalog as clearClaudeCatalog, clearCachedQuota$1 as clearClaudeQuota, clearCachedQuota$2 as clearCommandCodeQuota, clearCachedQuota$3 as clearKimiCodeQuota, clearCachedQuota$4 as clearMinimaxCodeQuota, clearCachedCatalog$1 as clearWorkBuddyCatalog, clearCachedQuota$5 as clearWorkBuddyQuota, clinePassAccountKey, clinePassAccountQuota, catalogEntry as clinePassCatalogEntry, chatCompletion as clinePassChatCompletion, chatURL as clinePassChatURL, credentialPath$1 as clinePassCredentialPath, defaultPin as clinePassDefaultPin, clinePassKnownModelIds, modelSettingsPath$1 as clinePassModelSettingsPath, clinePassPoolPath, clinePassVisibleModelIds, clinePassWindowDurationMins, clinePassWindowLabel, closeMinimaxStream, codexPoolPath, collapseScore, commandCodeAccountKey, credentialPath$2 as commandCodeCredentialPath, modelSettingsPath$2 as commandCodeModelSettingsPath, commandCodePoolPath, contextWindowForModel, convergeGlmEffort, createAntigravityImageTool, createClinePassLine, createClinePassStore, createCodexFetchProvider, createCodexImageTool, createCodexSearchProvider, createFileRelayProbeSink, createMinimaxCodeAccountsHandler, createMessage as createMinimaxCodeMessage, createPkcePair as createMinimaxCodePkcePair, createStreamState as createMinimaxCodeStreamState, createOpenDesignLine, createPlatformTokenStore, createSubagentAuthorization, credentialPath$3 as credentialPath, credentialsFromAdopt, credentialsFromCliLogin, defaultOpenDesignModelSettings, delegationDenialReason, delegationModeOf, describeCredentials as describeMinimaxCodeCredentials, detectSystemProxy, dshHomeDir, effectiveAllowParentFork, effectiveRouteOf, ensureAccessToken as ensureClaudeAccessToken, ensureAccessToken$1 as ensureKimiCodeAccessToken, ensureAccessToken$2 as ensureMinimaxCodeAccessToken, extractAvailableProviders, fetchAccountQuota, fetchAccountQuota$1 as fetchClaudeQuota, fetchGatewayCatalog as fetchClinePassGatewayCatalog, fetchOfficialModels as fetchClinePassOfficialModels, fetchUsageLimits as fetchClinePassUsageLimits, fetchAccountQuota$2 as fetchCommandCodeQuota, fetchGlmQuota, fetchAccountQuota$3 as fetchKimiCodeQuota, fetchUserInfo as fetchKimiCodeUserInfo, fetchTokenPlanQuota as fetchMinimaxCodeQuota, fetchGatewayCatalog$1 as fetchOpenDesignGatewayCatalog, fetchAccountQuota$4 as fetchWorkBuddyQuota, getCachedQuota as getCachedGlmCodingPlanQuota, getCachedQuota$1 as getCachedQuota, getLoginStatus as getClaudeLoginStatus, getCachedQuota$2 as getClaudeQuota, getClaudeWebStatus, getClinePassWebStatus, getWebLoginStatus as getCommandCodeLoginStatus, getCachedQuota$3 as getCommandCodeQuota, getCommandCodeWebStatus, getGlmCodingPlanStatus, getWebLoginStatus$1 as getKimiCodeLoginStatus, getCachedQuota$4 as getKimiCodeQuota, getKimiCodeWebStatus, getWebLogin as getMinimaxCodeLogin, getCachedQuota$5 as getMinimaxCodeQuota, getMinimaxCodeWebStatus, getOpenDesignWebStatus, getQoderStatus, getStepCodeStatus, getCachedQuota$6 as getWorkBuddyQuota, getWorkBuddyWebStatus, glmCatalogSize, authorizeUrl as glmCodingPlanAuthorizeUrl, catalogSize as glmCodingPlanCatalogCount, credentialPath$4 as glmCodingPlanCredentialPath, modelSettingsPath$3 as glmCodingPlanModelSettingsPath, modelsForRegion as glmCodingPlanModelsForRegion, glmCodingPlanPoolIdentity, glmCodingPlanPoolPath, glmCodingPlanPoolQuota, glmCodingPlanPoolStatus, glmCodingPlanSettingsSource, glmCooldownDecision, glmSubPathOf, inheritOverrideReason, inheritRouteDenialReason, inheritedRouteOf, inject, injectPrefs, installReasoningCollapseGuard, installRelayProbe, installSubagentModelAuthorization, isAdherenceOk, isAdoptedClaudeCredential, isAdoptedCredentialExpired, isAdoptedCredential as isAdoptedGlmCodingPlanCredential, isAdoptedZcodeCredential as isAdoptedGlmZcodeCredential, isAdoptedPoolCredential, isClaudeReasoningEffort, isClinePassPinMode, isGlmReasoningEffort, isMinimaxCodeReasoningEffort, isRefreshTokenRejected as isMinimaxCodeRefreshTokenRejected, isAuthenticationError as isOpenDesignAuthenticationError, isThinkingDisabledEffort, credentialPath$5 as kimiCodeCredentialPath, kimiCodeModelDef, modelSettingsPath$4 as kimiCodeModelSettingsPath, kimiCodePoolPath, listModelIds as listMinimaxCodeModelIds, loadCatalog as loadClaudeCatalog, loadProviderModels as loadCommandCodeModels, loadCatalog$1 as loadGlmCodingPlanCatalog, loadProviderModels$1 as loadKimiCodeModels, loadConfigCatalog as loadWorkBuddyModels, loginAndSave, mapCodexUsage, mapFinishReason, mapFinishReason$1 as mapOpenDesignFinishReason, mapUsage as mapOpenDesignUsage, mapUsage$1 as mapUsage, mergeGlmCodingPlanSettings, mergeUpstreams, accountFromCredentials as minimaxCodeAccountFromCredentials, accountHost as minimaxCodeAccountHost, agentBaseUrl as minimaxCodeAgentBaseUrl, authJsonPath as minimaxCodeAuthJsonPath, authStateJsonPath as minimaxCodeAuthStateJsonPath, catalogSize$1 as minimaxCodeCatalogSize, credentialIsFresh as minimaxCodeCredentialIsFresh, effortForModel as minimaxCodeEffortForModel, minimaxHomeDir as minimaxCodeHomeDir, maxMessageBodyBytes as minimaxCodeMaxMessageBodyBytes, maxOutputTokensFor$1 as minimaxCodeMaxOutputTokens, messagesUrl as minimaxCodeMessagesUrl, minimaxCodeModelDef, minimaxCodeModelIds, minimaxCodeModelName, modelRequestHeaders as minimaxCodeModelRequestHeaders, modelSettingsPath$5 as minimaxCodeModelSettingsPath, outputConfigFor as minimaxCodeOutputConfig, pluginCredentialPath as minimaxCodePluginCredentialPath, minimaxCodePoolIdentity, minimaxCodePoolPath, minimaxCodePoolStatus, quotaHostCandidates as minimaxCodeQuotaHostCandidates, quotaRequestHeaders as minimaxCodeQuotaRequestHeaders, subPathOf as minimaxCodeSubPathOf, tokenPlanRemainsUrl as minimaxCodeTokenPlanRemainsUrl, modelSettingsPath$6 as modelSettingsPath, normalizeDelegationToolNames, normalizeRegion as normalizeGlmCodingPlanRegion, normalizeInheritToolNames, normalizePinMode, normalizeRotationStrategy, normalizeSort, openChatStream as openClinePassChatStream, bearerFor as openDesignBearerFor, catalogEntry$1 as openDesignCatalogEntry, chatURL$1 as openDesignChatURL, credentialPath$6 as openDesignCredentialPath, credentialsIdentity as openDesignCredentialsIdentity, firstMessage as openDesignFirstMessage, openDesignKnownModelIds, modelSettingsPath$7 as openDesignModelSettingsPath, modelsURL as openDesignModelsURL, reasoningOf as openDesignReasoningOf, streamErrorCode as openDesignStreamErrorCode, openDesignVisibleModelIds, openChatStream$1 as openOpenDesignChatStream, opendesignAccountKey, opendesignPoolPath, parseAllowedRoutes, parseClaudeCredentialDocument, parseClaudeCredentials, parseClaudePoolData, parseUsagePayload as parseClaudeUsagePayload, parseClinePassCredentials, parseClinePassModelSettings, parseClinePassPoolData, parseCodexPoolData, parseCodexUsage, parseCommandCodePoolData, parseGlmCodingPlanCredentials, parseGlmCodingPlanPoolData, parseKimiCodePoolData, parseMinimaxCodeCredentials, parseMinimaxCodePoolData, parseTokenPlanQuota as parseMinimaxCodeQuota, parseAnthropicUsage as parseMinimaxCodeUsage, parseOpenDesignCredentials, parseOpenDesignModelSettings, parseOpenDesignPoolData, parseServerSentEvents as parseOpenDesignServerSentEvents, parseQoderCredentials, parseResponsesStream, parseRouting, parseServerSentEvents$1 as parseServerSentEvents, parseTier0, parseBilling as parseWorkBuddyBilling, parseConfigModels as parseWorkBuddyConfigModels, parseCredentialFile as parseWorkBuddyCredential, pinAdherence, pinWarnings, policyRoutesOf, pollWebLogin as pollMinimaxCodeLogin, probeConnection as probeClaudeConnection, processMinimaxStreamLine, qoderCatalogSize, credentialPath$7 as qoderCredentialPath, qoderCredentialsExpireAt, qoderCredentialsNeedRefresh, modelSettingsPath$8 as qoderModelSettingsPath, qoderPoolIdentity, qoderPoolPath, qoderPoolQuota, qoderPoolStatus, qoderPoolStatusSlice, qoderRefreshFailureStatus, qoderSettingsSource, qoderSubPathOf, readChildDescriptor, readClaudeCodeCredentials, readGlmResetAt, readQoderCacheStats, readStepCodeCacheStats, reasoningOf$1 as reasoningOf, redactToken as redactMinimaxCodeToken, refreshAntigravityToken, refreshAccessToken as refreshClaudeToken, refreshAccessToken$1 as refreshKimiCodeToken, refreshAccessToken$2 as refreshMinimaxCodeToken, refreshCredentials as refreshWorkBuddyCredentials, registerClaudePreferenceStore, registerClaudeRoutes, registerClinePassRoutes, registerCommandCodePreferenceStore, registerCommandCodeRoutes, registerGlmCodingPlanPreferenceStore, registerGlmCodingPlanRoutes, registerKimiCodePreferenceStore, registerKimiCodeRoutes, registerMinimaxCodePreferenceStore, registerMinimaxCodeRoutes, registerOpenDesignRoutes, registerQoderPreferenceStore, registerQoderRoutes, registerStepCodePreferenceStore, registerStepCodeRoutes, registerWorkBuddyPreferenceStore, registerWorkBuddyRoutes, relayProbeEnabled, relayProbeEnvFile, relayProbeEnvValue, relayProbeLogPath, rememberQoderCacheUsage, rememberStepCodeCacheUsage, requestDeviceAuthorization as requestKimiCodeDeviceAuthorization, requestDeviceAuthorization$1 as requestMinimaxCodeDeviceAuthorization, resetWebLogins as resetMinimaxCodeLogins, resolveEnabledModelIds as resolveClaudeEnabledModelIds, resolveLoginInput as resolveClaudeLoginInput, resolveClaudeModel, resolveGlmModel, resolveGuardOptions, resolveRegion as resolveKimiCodeRegion, resolveMinimaxCodeEnabledModelIds, resolveMinimaxCodeModelId, resolveQuotaCounts as resolveMinimaxCodeQuotaCounts, resolveModelInfo as resolveOpenDesignModelInfo, resolveOutputBudget as resolveOpenDesignOutputBudget, resolveWorkBuddyModel, revokeToken as revokeMinimaxCodeToken, saveApiKey as saveCommandCodeApiKey, scanCredentials as scanWorkBuddyCredentials, sendJSON as sendClinePassJSON, sendJSON$1 as sendOpenDesignJSON, serializeMessages, serializeMessages$1 as serializeOpenDesignMessages, setClaudeCliVersion, beginWebLogin$3 as startCommandCodeLogin, stepCodeCatalogSize, credentialPath$8 as stepCodeCredentialPath, stepCodeModelCatalogFrom, modelSettingsPath$9 as stepCodeModelSettingsPath, stepCodePoolIdentity, stepCodePoolPath, stepCodePoolQuota, stepCodePoolStatus, stepCodePoolStatusSlice, quotaCredentialPath as stepCodeQuotaCredentialPath, stepCodeSettingsSource, stepCodeSubPathOf, streamErrorCode$1 as streamErrorCode, subagentModelSelectionPreference, submitLoginInput as submitClaudeLoginInput, summarizeFailureBody as summarizeMinimaxCodeFailureBody, testConnection as testMinimaxCodeConnection, testApiKey as testOpenDesignApiKey, translate, translate$1 as translateOpenDesignStream, trimBase as trimClinePassBase, trimBase$1 as trimOpenDesignBase, unauthorizedRouteReason, validateAuthorizationScope, validateDelegationToolNames, validateInheritToolNames, verifyCodingPlanKey as verifyGlmCodingPlanKey, violationText, warmQoderCatalogOnStartup, withTimeout as withOpenDesignTimeout, modelSettingsPath$10 as workBuddyModelSettingsPath, modelsForRegion$1 as workBuddyModelsForRegion, zcodeCredentialsPath };