@epoch-agent/cli 0.1.0 → 0.3.1

package/dist/index.js

@@ -1,59 +1,24 @@
 #!/usr/bin/env node
 import {
-  writeProviderKey
-} from "./chunk-3SCZQI5W.js";
-
+  writeProviderSecret
+} from "./chunk-4SOT24BS.js";
 // src/index.ts
 import { Command } from "commander";
-
+import { t as t39 } from "@epoch-agent/infra";
 // src/commands/agents.ts
-import { findRole, roleSourceLabel } from "@epoch-agent/core";
-
+import { AGENT_ROLE_DIAG_MODULE, findRole, roleSourceLabel } from "@epoch-agent/core";
+import { t as t2 } from "@epoch-agent/infra";
+// src/errors.ts
+import { t } from "@epoch-agent/infra";
 // src/exit-codes.ts
 var EXIT_CODES = {
-  /** 任务完成 */
   SUCCESS: 0,
-  /** 通用失败（provider 起不来、运行时报错……） */
   FAILURE: 1,
-  /**
-   * 非交互下有操作因**缺少预授权**被拒。
-   *
-   * 只在非交互路径出现：交互模式下用户亲手点的「拒绝」是他的决定，
-   * 不算 agent 被卡住，仍然退 0。
-   */
   PERMISSION_DENIED: 3,
-  /**
-   * 企业托管设置挡下了这次启动（方案 22）。
-   *
-   * 和 FAILURE 分开的理由同上：这不是「epoch 坏了」，是**策略生效了**。
-   * 管理员按机器批量铺开一条 `disableBypassPermissionsMode` 之后，
-   * 要能从退出码上一眼看出哪些机器是被自己的策略拦下的，
-   * 而不是去每台机器上读 stderr 猜。
-   */
   MANAGED_POLICY: 4,
-  /**
-   * `--max-turns` / `--max-budget-usd` 触顶，任务**没做完**就停了（方案 28）。
-   *
-   * 和 FAILURE 分开：CI 里这不是「epoch 坏了」，是**限额生效了** ——
-   * 该做的是看一眼输出决定要不要加额重跑，而不是去查日志。
-   * 跨会话预算（`budget.maxCostUsd`）触顶**不走这个码**，仍然退 0：
-   * 那是长期配置，每次都退非 0 会让流水线天天红。
-   *
-   * ⚠️ 方案 28 立项时写的是 `4`，那是 2026-08-08 的现状（当时只有 0/1/3）。
-   * `4` 后来被企业托管策略（方案 22）占了，而那个码已经在根 README 和
-   * MDM 文档里对外承诺过，不能挪。所以这里往后排。
-   */
   LIMIT_EXCEEDED: 5,
-  /**
-   * `--input-format stream-json` 的输入有坏行（方案 28）。
-   *
-   * **不是**用法错误（那是 1）：命令敲对了，是宿主写进 stdin 的那一行不合协议。
-   * 坏行会被报到 stderr 并**跳过**（NDJSON 是按行分帧的，跳一行不会失步），
-   * 进程接着跑；这个码在收尾时才落。
-   */
   INPUT_ERROR: 6
 };
-
 // src/errors.ts
 var CliError = class extends Error {
   constructor(message, exitCode = EXIT_CODES.FAILURE, hint) {
@@ -67,15 +32,12 @@ var CliError = class extends Error {
 };
 function isCancellation(err2) {
   if (!(err2 instanceof Error)) return false;
-  return err2.name === "ExitPromptError" || err2.name === "AbortError" || // AbortController.abort() 默认抛的就是这个
+  return err2.name === "ExitPromptError" || err2.name === "AbortError" ||
   err2.name === "Error" && err2.message === "The operation was aborted.";
 }
 var EXPECTED_FAILURES = {
-  /** 企业托管策略挡下的启动（方案 22 §2.6）。不是故障，是策略生效了 */
   ManagedPolicyError: EXIT_CODES.MANAGED_POLICY,
-  /** `--agent` 给了不认识的角色名（方案 29 验收 #13）。可用角色都在 message 里 */
   AgentRoleError: EXIT_CODES.FAILURE,
-  /** `--settings` 指的文件不是合法 JSON（方案 29 验收 #16）。hint 里带行号 */
   SettingsFileError: EXIT_CODES.FAILURE
 };
 function expectedFailureExitCode(err2) {
@@ -88,12 +50,14 @@ function hintOf(err2) {
 }
 function reportFatal(err2) {
   if (isCancellation(err2)) {
-    process.stderr.write("\n\u5DF2\u53D6\u6D88\n");
+    process.stderr.write(`
+${t("errors.cancelled")}
+`);
     process.exit(130);
   }
   const exitCode = err2 instanceof CliError ? err2.exitCode : expectedFailureExitCode(err2);
   if (exitCode !== void 0 && err2 instanceof Error) {
-    process.stderr.write(`\u9519\u8BEF: ${err2.message}
+    process.stderr.write(`${t("errors.fatal", { message: err2.message })}
 `);
     const hint = hintOf(err2);
     if (hint) process.stderr.write(`${hint}
@@ -104,7 +68,6 @@ function reportFatal(err2) {
 `);
   process.exit(EXIT_CODES.FAILURE);
 }
-
 // src/commands/agents.ts
 var log = (msg) => {
   process.stdout.write(msg + "\n");
@@ -122,65 +85,65 @@ function renderRole(role) {
   const lines = [];
   lines.push(`  ${role.name}  [${roleSourceLabel(role.source)}]`);
   lines.push(`    ${role.description}`);
-  if (role.tools) {
-    lines.push(`    \u5DE5\u5177\uFF08\u58F0\u660E\uFF09: ${role.tools.join(", ")}`);
-  } else {
-    lines.push("    \u5DE5\u5177\uFF08\u58F0\u660E\uFF09: \u7EE7\u627F\u4E3B agent \u7684\u5168\u90E8\u53EF\u7528\u5DE5\u5177");
+  lines.push(
+    `    ${role.tools ? t2("agents.tools_declared", { tools: role.tools.join(", ") }) : t2("agents.tools_inherited")}`
+  );
+  if (role.maxTurns !== void 0) {
+    lines.push(`    ${t2("agents.max_turns", { n: role.maxTurns })}`);
   }
-  if (role.maxTurns !== void 0) lines.push(`    \u8F6E\u6B21\u4E0A\u9650: ${role.maxTurns}`);
   return lines;
 }
 function renderRoleDetail(role) {
   const lines = [...renderRole(role), ""];
   if (role.prompt) {
-    lines.push("  \u89D2\u8272 prompt:");
+    lines.push(`  ${t2("agents.prompt_head")}`);
     for (const line of role.prompt.split("\n")) lines.push(`    ${line}`);
   } else {
-    lines.push("  \u89D2\u8272 prompt: \u65E0\uFF08\u53EA\u6362\u6389\u5B50 agent \u7684\u8EAB\u4EFD\u884C\uFF0C\u5176\u4F59\u6CBF\u7528\u901A\u7528 prompt\uFF09");
+    lines.push(`  ${t2("agents.prompt_none")}`);
   }
   return lines;
 }
 function registerAgentsCommand(program2) {
-  const agents = program2.command("agents").description("\u5217\u51FA\u53EF\u6D3E\u7ED9\u5B50 agent \u7684\u89D2\u8272\uFF08delegate_task \u7684 role \u53D6\u503C\uFF09").action(async () => {
+  const agents = program2.command("agents").description(t2("agents.cmd_root")).action(async () => {
     await withRuntime((rt) => {
       if (rt.agentRoles.length === 0) {
-        log("\u6CA1\u6709\u53EF\u7528\u89D2\u8272\uFF08provider \u8D77\u4E0D\u6765\u65F6 delegate_task \u4E0D\u4F1A\u6CE8\u518C\uFF09");
-        log("\u8FD0\u884C epoch doctor \u770B\u5177\u4F53\u662F\u54EA\u4E2A\u6A21\u5757\u7684\u95EE\u9898\u3002");
+        log(t2("agents.empty"));
+        log(t2("agents.empty_hint"));
         return;
       }
-      log(`\u53EF\u6D3E\u89D2\u8272\uFF08${rt.agentRoles.length} \u4E2A\uFF09:
+      log(`${t2("agents.list_head", { count: rt.agentRoles.length })}
 `);
       for (const role of rt.agentRoles) {
         for (const line of renderRole(role)) log(line);
         log("");
       }
-      const notes = rt.diagnosticList.filter((d) => d.module === "Agent \u89D2\u8272");
+      const notes = rt.diagnosticList.filter((d) => d.module === AGENT_ROLE_DIAG_MODULE);
       if (notes.length > 0) {
-        log("\u52A0\u8F7D\u8BF4\u660E:");
+        log(t2("agents.load_notes"));
         for (const d of notes) log(`  ${d.detail}`);
         log("");
       }
-      log("\u5B9A\u4E49\u81EA\u5DF1\u7684\u89D2\u8272\uFF1A~/.epoch/agents/<\u540D\u5B57>.md\uFF08\u9879\u76EE\u7EA7\u653E .epoch/agents/\uFF0C\u9700\u4FE1\u4EFB\u5DE5\u4F5C\u533A\uFF09");
-      log("\u26A0 \u5DE5\u5177\u767D\u540D\u5355\u5BF9\u542B terminal \u7684\u89D2\u8272\u4E0D\u662F\u5B89\u5168\u8FB9\u754C \u2014\u2014 \u6709 shell \u5C31\u80FD\u7ED5\u5F00\u300C\u6CA1\u6709\u5199\u5DE5\u5177\u300D\u3002");
+      log(t2("agents.define_hint"));
+      log(t2("agents.tools_not_a_boundary"));
     });
   });
-  agents.command("show <name>").description("\u770B\u67D0\u4E2A\u89D2\u8272\u7684\u5B8C\u6574\u5B9A\u4E49\uFF08\u542B\u89D2\u8272 prompt\uFF09").action(async (name) => {
+  agents.command("show <name>").description(t2("agents.cmd_show")).action(async (name) => {
     await withRuntime((rt) => {
       const role = findRole(rt.agentRoles, name);
       if (!role) {
         const available = rt.agentRoles.map((r) => r.name).join(", ");
         throw new CliError(
-          `\u6CA1\u6709\u540D\u4E3A "${name}" \u7684 agent \u89D2\u8272`,
+          t2("agents.err_not_found", { name }),
           EXIT_CODES.FAILURE,
-          available ? `\u53EF\u7528\uFF1A${available}` : "\u4E00\u4E2A\u89D2\u8272\u90FD\u6CA1\u52A0\u8F7D\u51FA\u6765\uFF0C\u8FD0\u884C epoch doctor \u770B\u539F\u56E0"
+          available ? t2("agents.err_available", { names: available }) : t2("agents.err_none_loaded")
         );
       }
       for (const line of renderRoleDetail(role)) log(line);
     });
   });
 }
-
 // src/commands/completion.ts
+import { t as t3 } from "@epoch-agent/infra";
 var SHELLS = ["bash", "zsh", "fish", "powershell"];
 function longFlags(cmd) {
   return cmd.options.map((o) => o.long).filter((l) => !!l);
@@ -192,11 +155,6 @@ function toSpec(cmd) {
   return {
     name: cmd.name(),
     description: cmd.description(),
-    // `--help` 要手工补：commander 把它存在 `_helpOption` 里单独处理，**不进**
-    // `cmd.options`，所以 longFlags 拿不到。`--version` 反过来是真选项
-    // （run.ts 注册的，或者 `program.version()` 注册的），已经在里面了。
-    // 过一次 Set 是防有人又显式声明了同名 flag —— 重复项在 bash 里表现为
-    // 同一个候选出现两遍
     options: [.../* @__PURE__ */ new Set([...longFlags(cmd), "--help"])],
     subcommands: visibleSubcommands(cmd).map((sub) => toSpec(sub))
   };
@@ -226,9 +184,7 @@ function bashBranch(cmd) {
   ].join("\n");
 }
 function bashScript(root) {
-  return `# epoch bash \u8865\u5168\u3002\u88C5\u6CD5\uFF1A
-#   epoch completion bash > /usr/local/etc/bash_completion.d/epoch
-# \u6216\u76F4\u63A5 eval "$(epoch completion bash)"
+  return `${t3("completion.head_bash")}
 _epoch_completion() {
   local cur words
   cur="\${COMP_WORDS[COMP_CWORD]}"
@@ -243,7 +199,6 @@ ${root.subcommands.map(bashBranch).join("\n")}
     *) words='' ;;
   esac
 
-  # \u6CA1\u6709\u5019\u9009\u65F6\u4EA4\u8FD8\u7ED9\u9ED8\u8BA4\u7684\u6587\u4EF6\u540D\u8865\u5168\uFF1A\`epoch "\u5206\u6790 <\u6587\u4EF6>"\` \u8981\u80FD\u8865\u8DEF\u5F84
   if [[ -z "$words" ]]; then
     COMPREPLY=($(compgen -f -- "$cur"))
   else
@@ -271,8 +226,7 @@ function zshBranch(cmd) {
 function zshScript(root) {
   const cmds = root.subcommands.map((c) => `    '${c.name}:${q(c.description)}'`).join("\n");
   return `#compdef epoch
-# epoch zsh \u8865\u5168\u3002\u88C5\u6CD5\uFF1A\u628A\u672C\u6587\u4EF6\u5B58\u6210 fpath \u91CC\u7684 _epoch\uFF0C
-# \u6216\u5728 .zshrc \u91CC eval "$(epoch completion zsh)"
+${t3("completion.head_zsh")}
 _epoch_completion() {
   local -a cmds opts
   cmds=(
@@ -280,7 +234,7 @@ ${cmds}
   )
 
   if (( CURRENT == 2 )); then
-    _describe -t commands '\u547D\u4EE4' cmds
+    _describe -t commands '${t3("completion.zsh_group_commands")}' cmds
     compadd -- ${root.options.join(" ")}
     return
   fi
@@ -312,11 +266,7 @@ function fishLines(cmd, seen) {
   return lines;
 }
 function fishScript(root) {
-  return [
-    "# epoch fish \u8865\u5168\u3002\u88C5\u6CD5\uFF1A",
-    "#   epoch completion fish > ~/.config/fish/completions/epoch.fish",
-    ...fishLines(root, "__fish_use_subcommand")
-  ].join("\n");
+  return [t3("completion.head_fish"), ...fishLines(root, "__fish_use_subcommand")].join("\n");
 }
 function powershellEntries(cmd, prefix) {
   const lines = [`    '${prefix}' = '${words(cmd)}'`];
@@ -370,17 +320,133 @@ function isShellName(value) {
   return SHELLS.includes(value);
 }
 function registerCompletionCommand(program2) {
-  program2.command("completion").description(`\u751F\u6210 shell \u8865\u5168\u811A\u672C\uFF08${SHELLS.join(" / ")}\uFF09`).argument("<shell>", SHELLS.join(" / ")).action((shell) => {
+  program2.command("completion").description(t3("completion.cmd_root", { shells: SHELLS.join(" / ") })).argument("<shell>", SHELLS.join(" / ")).action((shell) => {
     if (!isShellName(shell)) {
-      throw new CliError(`\u4E0D\u652F\u6301\u7684 shell: ${shell}`, 1, `\u53EF\u9009: ${SHELLS.join(" / ")}`);
+      throw new CliError(
+        t3("completion.err_unsupported", { shell }),
+        1,
+        t3("completion.err_choices", { choices: SHELLS.join(" / ") })
+      );
     }
     process.stdout.write(renderCompletion(program2, shell));
   });
 }
-
+// src/commands/compliance.ts
+import {
+  ComplianceEngine,
+  DEFAULT_COMPLIANCE_SETTINGS,
+  loadConfig,
+  loadLexiconFiles,
+  resolveComplianceDir,
+  resolveComplianceDirs
+} from "@epoch-agent/core";
+import { t as t4 } from "@epoch-agent/infra";
+// src/paths.ts
+import { existsSync, mkdirSync } from "fs";
+import { hasProviderCredentials } from "@epoch-agent/core";
+import { configPath, envPath, resolveHomeDir } from "@epoch-agent/infra";
+var EPOCH_HOME = resolveHomeDir();
+var CONFIG_PATH = configPath(EPOCH_HOME);
+var ENV_PATH = envPath(EPOCH_HOME);
+function ensureEpochHome() {
+  if (!existsSync(EPOCH_HOME)) mkdirSync(EPOCH_HOME, { recursive: true });
+}
+function hasCredentials() {
+  return hasProviderCredentials(EPOCH_HOME);
+}
+// src/commands/compliance.ts
+var log2 = (msg) => process.stdout.write(msg + "\n");
+function buildEngine() {
+  const config = loadConfig(void 0, { homeDir: EPOCH_HOME });
+  const settings = {
+    enabled: config.compliance?.enabled ?? DEFAULT_COMPLIANCE_SETTINGS.enabled,
+    scope: { ...DEFAULT_COMPLIANCE_SETTINGS.scope, ...config.compliance?.scope },
+    skipCodeBlocks: config.compliance?.skipCodeBlocks ?? DEFAULT_COMPLIANCE_SETTINGS.skipCodeBlocks,
+    maxHoldChars: config.compliance?.maxHoldChars ?? DEFAULT_COMPLIANCE_SETTINGS.maxHoldChars,
+    actions: { ...DEFAULT_COMPLIANCE_SETTINGS.actions, ...config.compliance?.actions }
+  };
+  const userDir = resolveComplianceDir(config.homeDir);
+  const dirs = resolveComplianceDirs({ userDir, trusted: false });
+  const rules = [];
+  const exempt = [];
+  for (const spec of dirs.dirs) {
+    const loaded = loadLexiconFiles(spec.dir, spec.source);
+    rules.push(...loaded.rules);
+    exempt.push(...loaded.exempt);
+  }
+  return { engine: new ComplianceEngine({ settings, rules, exempt }), settings, dir: userDir };
+}
+async function readStdin() {
+  const chunks = [];
+  for await (const chunk of process.stdin) chunks.push(Buffer.from(chunk));
+  return Buffer.concat(chunks).toString("utf-8");
+}
+function checkText(text) {
+  const { engine, settings } = buildEngine();
+  if (!settings.enabled) {
+    log2(t4("compliance_cmd.disabled"));
+    return 0;
+  }
+  const gate = engine.inspect(text);
+  if (!gate) {
+    log2(t4("compliance_cmd.clean"));
+    return 0;
+  }
+  const { text: released, verdict } = gate;
+  log2(t4("compliance_cmd.verdict", { action: verdict.action, count: verdict.hits.length }));
+  for (const hit of verdict.hits) {
+    log2(
+      t4("compliance_cmd.hit", {
+        category: hit.category,
+        action: hit.action,
+        rule: hit.ruleId,
+        excerpt: text.slice(hit.start, hit.end)
+      })
+    );
+  }
+  if (verdict.action === "block") log2(t4("compliance_cmd.blocked"));
+  else log2(t4("compliance_cmd.released", { text: released }));
+  return verdict.action === "warn" ? 0 : 1;
+}
+function printStatus() {
+  const { engine, settings, dir } = buildEngine();
+  log2(t4("compliance_cmd.status_enabled", { enabled: String(settings.enabled) }));
+  log2(
+    t4("compliance_cmd.status_rules", {
+      active: engine.activeRuleCount,
+      builtin: engine.counts.builtin,
+      user: engine.counts.user
+    })
+  );
+  log2(t4("compliance_cmd.status_dir", { dir }));
+  log2(
+    t4("compliance_cmd.status_scope", {
+      output: String(settings.scope.output),
+      input: String(settings.scope.input),
+      code: String(settings.skipCodeBlocks)
+    })
+  );
+  for (const [category, action] of Object.entries(settings.actions)) {
+    log2(t4("compliance_cmd.status_action", { category, action }));
+  }
+  log2(t4("compliance_cmd.status_project_note"));
+}
+function registerComplianceCommand(program2) {
+  const cmd = program2.command("compliance").description(t4("compliance_cmd.cmd_root"));
+  cmd.command("check", { isDefault: true }).description(t4("compliance_cmd.cmd_check")).argument("[text]", t4("compliance_cmd.arg_text")).option("--stdin", t4("compliance_cmd.opt_stdin")).action(async (text, opts) => {
+    const input2 = opts.stdin ? await readStdin() : text;
+    if (!input2) {
+      log2(t4("compliance_cmd.need_text"));
+      process.exitCode = 2;
+      return;
+    }
+    process.exitCode = checkText(input2);
+  });
+  cmd.command("status").description(t4("compliance_cmd.cmd_status")).action(() => printStatus());
+}
 // src/commands/config.ts
 import { existsSync as existsSync2, readFileSync } from "fs";
-import { maskApiKey, t } from "@epoch-agent/infra";
+import { maskApiKey, t as t5 } from "@epoch-agent/infra";
 import {
   API_KEY_ENV_VARS,
   isPermissionLevel,
@@ -390,7 +456,6 @@ import {
   PROVIDER_TYPES,
   SHELL_KINDS
 } from "@epoch-agent/protocol";
-
 // src/files/config-yaml.ts
 import {
   DEFAULT_YAML,
@@ -402,37 +467,48 @@ import {
   unsetSectionField,
   writeConfigYaml
 } from "@epoch-agent/infra";
-
-// src/paths.ts
-import { existsSync, mkdirSync } from "fs";
-import { hasProviderCredentials } from "@epoch-agent/core";
-import { configPath, envPath, resolveHomeDir } from "@epoch-agent/infra";
-var EPOCH_HOME = resolveHomeDir();
-var CONFIG_PATH = configPath(EPOCH_HOME);
-var ENV_PATH = envPath(EPOCH_HOME);
-function ensureEpochHome() {
-  if (!existsSync(EPOCH_HOME)) mkdirSync(EPOCH_HOME, { recursive: true });
-}
-function hasCredentials() {
-  return hasProviderCredentials(EPOCH_HOME);
-}
-
 // src/commands/config.ts
-var log2 = (msg) => {
+var log3 = (msg) => {
   process.stdout.write(msg + "\n");
 };
 function isPositiveNumber(v) {
   const n = Number(v);
   return Number.isFinite(n) && n > 0;
 }
+function isPositiveInt(v) {
+  return isPositiveNumber(v) && Number.isInteger(Number(v));
+}
 var BUDGET_FIELDS = {
   maxCostUsd: isPositiveNumber,
   maxTokens: isPositiveNumber,
   warnAtPercent: (v) => isPositiveNumber(v) && Number(v) <= 100,
   onUnknownPricing: (v) => v === "block" || v === "warn"
 };
+var SCALAR_FIELDS = {
+  maxTurns: isPositiveInt,
+  contextLength: isPositiveInt
+};
+var SECTION_FIELDS = {
+  budget: BUDGET_FIELDS,
+  compression: {
+    enabled: (v) => v === "true" || v === "false",
+    threshold: (v) => Number.isFinite(Number(v)) && Number(v) > 0 && Number(v) <= 1
+  }
+};
 function knownKeys() {
-  return `provider, model, models.utility, permission, shell, ` + Object.keys(BUDGET_FIELDS).map((f) => `budget.${f}`).join(", ");
+  const nested = Object.entries(SECTION_FIELDS).flatMap(
+    ([section, fields]) => Object.keys(fields).map((field) => `${section}.${field}`)
+  );
+  return [
+    "provider",
+    "model",
+    "models.utility",
+    "fallback.model",
+    "permission",
+    "shell",
+    ...Object.keys(SCALAR_FIELDS),
+    ...nested
+  ].join(", ");
 }
 function maskSecrets(yaml) {
   return yaml.replace(/^(\s*(?:apiKey|api_key|token|secret)\s*:\s*)(.+)$/gim, (_m, head, raw) => {
@@ -442,270 +518,303 @@ function maskSecrets(yaml) {
   });
 }
 function registerConfigCommand(program2) {
-  const cmd = program2.command("config").description(t("cli.config.summary"));
-  cmd.command("show").description(t("cli.config.show")).option("--raw", t("cli.config.opt_raw")).action((opts) => {
+  const cmd = program2.command("config").description(t5("cli.config.summary"));
+  cmd.command("show").description(t5("cli.config.show")).option("--raw", t5("cli.config.opt_raw")).action((opts) => {
     if (!existsSync2(CONFIG_PATH)) {
-      log2("\u5C1A\u672A\u914D\u7F6E\u3002\u8FD0\u884C epoch model \u521D\u59CB\u5316\u3002");
+      log3(t5("cli.config.not_configured"));
     } else {
       const yaml = readFileSync(CONFIG_PATH, "utf-8").trim();
-      log2(opts.raw ? yaml : maskSecrets(yaml));
+      log3(opts.raw ? yaml : maskSecrets(yaml));
     }
   });
-  cmd.command("path").description(t("cli.config.path")).action(() => log2(CONFIG_PATH));
-  cmd.command("get").description(t("cli.config.get")).argument("<key>", t("cli.config.keys")).action((key) => {
+  cmd.command("path").description(t5("cli.config.path")).action(() => log3(CONFIG_PATH));
+  cmd.command("get").description(t5("cli.config.get")).argument("<key>", t5("cli.config.keys")).action((key) => {
     const value = readKey(
       readConfigYaml(CONFIG_PATH),
       key === "provider" ? "provider.type" : key
     );
-    if (value === void 0) throw new CliError(`${key} \u672A\u8BBE\u7F6E`);
-    log2(value);
+    if (value === void 0) throw new CliError(t5("cli.config.unset_key", { key }));
+    log3(value);
   });
-  cmd.command("set").description(t("cli.config.set")).argument("<key>", t("cli.config.keys")).argument("<value>", t("cli.config.value")).action((key, value) => {
+  cmd.command("set").description(t5("cli.config.set")).argument("<key>", t5("cli.config.keys")).argument("<value>", t5("cli.config.value")).action((key, value) => {
     ensureEpochHome();
     writeConfigYaml(CONFIG_PATH, applySet(readConfigYaml(CONFIG_PATH), key, value));
-    log2(`\u2705 ${key} = ${value}`);
+    log3(`\u2705 ${key} = ${value}`);
   });
-  cmd.command("unset").description(t("cli.config.unset")).argument("<key>", t("cli.config.keys_unset")).action((key) => {
+  cmd.command("unset").description(t5("cli.config.unset")).argument("<key>", t5("cli.config.keys_unset")).action((key) => {
     ensureEpochHome();
     writeConfigYaml(CONFIG_PATH, applyUnset(readConfigYaml(CONFIG_PATH), key));
-    log2(`\u2705 \u5DF2\u5220\u9664 ${key}`);
+    log3(`\u2705 ${t5("cli.config.removed", { key })}`);
   });
   registerSchemaCommand(cmd);
   registerSecretCommand(cmd);
 }
 function registerSchemaCommand(cmd) {
-  cmd.command("schema").description(t("cli.config.schema")).action(async () => {
+  cmd.command("schema").description(t5("cli.config.schema")).action(async () => {
     const { resolveProjectRoot: resolveProjectRoot4 } = await import("@epoch-agent/core");
     const root = resolveProjectRoot4(process.cwd());
     const { writeProjectSchemas } = await import("./schema-file-DH6X4N4K.js");
     const written = await writeProjectSchemas(root);
-    for (const entry of written) log2(`\u2705 ${entry.path}`);
-    log2("");
-    log2(t("cli.config.schema_paste_hint"));
-    log2(`  { "$schema": "${written[0]?.reference ?? ""}", \u2026 }`);
+    for (const entry of written) log3(`\u2705 ${entry.path}`);
+    log3("");
+    log3(t5("cli.config.schema_paste_hint"));
+    log3(`  { "$schema": "${written[0]?.reference ?? ""}", \u2026 }`);
   });
 }
 function registerSecretCommand(cmd) {
-  cmd.command("secret").description(t("cli.config.secret")).option("--export", t("cli.config.opt_export")).action(async (opts) => {
+  cmd.command("secret").description(t5("cli.config.secret")).option("--export", t5("cli.config.opt_export")).action(async (opts) => {
     const { ensureSecretsReady } = await import("@epoch-agent/runtime");
     await ensureSecretsReady();
     const { getSecretStore } = await import("@epoch-agent/infra");
     const store = getSecretStore();
-    if (!store) throw new CliError("\u51ED\u636E\u5B58\u50A8\u672A\u5C31\u7EEA");
+    if (!store) throw new CliError(t5("cli.config.secret_not_ready"));
     if (opts.export) await exportSecrets(store);
     else await printSecretStatus(store);
   });
 }
 async function printSecretStatus(store) {
-  log2(`${store.encrypted ? "\u2713" : "\u26A0"} \u540E\u7AEF: ${store.backend} \u2014\u2014 ${store.detail}`);
+  log3(
+    `${store.encrypted ? "\u2713" : "\u26A0"} ${t5("cli.config.secret_backend", {
+      backend: store.backend,
+      detail: store.detail
+    })}`
+  );
   const names = (await store.list()).filter((n) => API_KEY_ENV_VARS.includes(n));
   if (names.length === 0) {
-    log2("  (\u8FD8\u6CA1\u5B58\u8FC7 provider \u51ED\u636E\uFF0C\u8DD1 epoch model \u914D\u4E00\u4E2A)");
+    log3(t5("cli.config.secret_empty"));
     return;
   }
-  for (const name of names) log2(`  ${name}`);
+  for (const name of names) log3(`  ${name}`);
 }
 async function exportSecrets(store) {
   const { isNonInteractive: isNonInteractive9 } = await import("@epoch-agent/core");
   if (isNonInteractive9()) {
-    throw new CliError(
-      "epoch config secret --export \u9700\u8981\u4EA4\u4E92\u5F0F\u7EC8\u7AEF",
-      1,
-      "\u5B83\u4F1A\u628A\u51ED\u636E\u5199\u6210\u660E\u6587\uFF0C\u5FC5\u987B\u7531\u4EBA\u786E\u8BA4\u4E24\u6B21\u3002CI / \u5BB9\u5668\u91CC\u8BF7\u6539\u7528\u73AF\u5883\u53D8\u91CF\uFF08\u4F18\u5148\u7EA7\u6700\u9AD8\uFF09\u3002"
-    );
+    throw new CliError(t5("cli.config.export_needs_tty"), 1, t5("cli.config.export_needs_tty_hint"));
   }
   const { confirm } = await import("@inquirer/prompts");
-  log2(`\u5373\u5C06\u628A\u51ED\u636E\u4EE5\u660E\u6587\u5199\u5165 ${ENV_PATH}\uFF08\u6743\u9650 0600\uFF09\u3002`);
-  if (!await confirm({ message: "\u786E\u8BA4\u8981\u628A\u51ED\u636E\u5012\u6210\u660E\u6587\u5417\uFF1F", default: false })) {
-    log2("\u5DF2\u53D6\u6D88");
+  log3(t5("cli.config.export_about_to", { path: ENV_PATH }));
+  if (!await confirm({ message: t5("cli.config.export_confirm"), default: false })) {
+    log3(t5("cli.config.cancelled"));
     return;
   }
   const again = await confirm({
-    message: `\u518D\u786E\u8BA4\u4E00\u6B21\uFF1A${ENV_PATH} \u5C06\u5305\u542B\u53EF\u76F4\u63A5\u4F7F\u7528\u7684 API key`,
+    message: t5("cli.config.export_confirm_again", { path: ENV_PATH }),
     default: false
   });
   if (!again) {
-    log2("\u5DF2\u53D6\u6D88");
+    log3(t5("cli.config.cancelled"));
     return;
   }
   ensureEpochHome();
-  const { exportSecretsToEnv } = await import("./env-file-JUOFDESY.js");
+  const { exportSecretsToEnv } = await import("./env-file-ERS45V7K.js");
   const written = await exportSecretsToEnv(store, ENV_PATH, API_KEY_ENV_VARS);
   if (written.length === 0) {
-    log2("\u6CA1\u6709\u53EF\u5012\u51FA\u7684\u51ED\u636E");
+    log3(t5("cli.config.export_nothing"));
     return;
   }
-  log2(`\u2705 \u5DF2\u5199\u51FA ${written.length} \u4E2A\u51ED\u636E\u5230 ${ENV_PATH}\uFF080600\uFF09`);
-  log2("   \u94A5\u5319\u4E32\u91CC\u90A3\u4EFD\u6CA1\u6709\u5220 \u2014\u2014 \u89E3\u6790\u94FE\u91CC .env \u538B\u5728\u94A5\u5319\u4E32\u4E4B\u4E0A\uFF0C\u8FD9\u4EFD\u4F1A\u751F\u6548\u3002");
+  log3(`\u2705 ${t5("cli.config.export_done", { count: written.length, path: ENV_PATH })}`);
+  log3(t5("cli.config.export_done_note"));
 }
 function applySet(yaml, key, value) {
   switch (key) {
     case "provider":
       if (!isProviderType(value)) {
-        throw new CliError(`\u672A\u77E5 provider: ${value}`, 1, `\u652F\u6301: ${PROVIDER_TYPES.join(", ")}`);
+        throw new CliError(
+          t5("cli.config.unknown_provider", { value }),
+          1,
+          t5("cli.config.supported", { list: PROVIDER_TYPES.join(", ") })
+        );
       }
       return yaml.replace(/^(\s*)type:.*$/m, `$1type: ${value}`);
     case "model":
       return setScalar(yaml, "model", value);
     case "permission":
       if (!isPermissionLevel(value)) {
-        throw new CliError(`\u672A\u77E5\u6743\u9650\u7EA7\u522B: ${value}`, 1, `\u652F\u6301: ${PERMISSION_LEVELS.join(", ")}`);
+        throw new CliError(
+          t5("cli.config.unknown_permission", { value }),
+          1,
+          t5("cli.config.supported", { list: PERMISSION_LEVELS.join(", ") })
+        );
       }
       return setScalar(yaml, "permission", value);
     case "shell": {
       if (!SHELL_KINDS.includes(value)) {
-        throw new CliError(`\u672A\u77E5 shell: ${value}`, 1, `\u652F\u6301: ${SHELL_KINDS.join(", ")}`);
+        throw new CliError(
+          t5("cli.config.unknown_shell", { value }),
+          1,
+          t5("cli.config.supported", { list: SHELL_KINDS.join(", ") })
+        );
       }
       return setScalar(yaml, "shell", value);
     }
-    case "models.utility": {
+    case "models.utility":
+    case "fallback.model": {
       if (!parseModelRef(value)) {
-        throw new CliError(
-          `models.utility \u4E0D\u80FD\u4E3A\u7A7A`,
-          1,
-          "\u5F62\u5982 gpt-4o-mini \u6216 deepseek/deepseek-chat"
-        );
+        throw new CliError(t5("cli.config.utility_empty"), 1, t5("cli.config.utility_hint"));
       }
-      return setSectionField(yaml, "models", "utility", value);
+      const [section, field] = key.split(".");
+      return setSectionField(yaml, section, field, value);
     }
     default: {
-      const field = budgetField(key);
-      const validate = BUDGET_FIELDS[field];
-      if (!validate) throw new CliError(`\u672A\u77E5\u914D\u7F6E\u9879: ${key}`, 1, `\u652F\u6301: ${knownKeys()}`);
-      if (!validate(value)) throw new CliError(`${key} \u7684\u503C\u4E0D\u5408\u6CD5: ${value}`);
-      return setSectionField(yaml, "budget", field, value);
+      const scalar = SCALAR_FIELDS[key];
+      if (scalar) {
+        if (!scalar(value)) throw new CliError(t5("cli.config.bad_value", { key, value }));
+        return setScalar(yaml, key, value);
+      }
+      const [section, field] = splitSection(key);
+      const validate = field === void 0 ? void 0 : SECTION_FIELDS[section]?.[field];
+      if (!validate || field === void 0)
+        throw new CliError(
+          t5("cli.config.unknown_key", { key }),
+          1,
+          t5("cli.config.supported", { list: knownKeys() })
+        );
+      if (!validate(value)) throw new CliError(t5("cli.config.bad_value", { key, value }));
+      return setSectionField(yaml, section, field, value);
     }
   }
 }
 function applyUnset(yaml, key) {
   if (key === "model" || key === "permission" || key === "shell") return unsetScalar(yaml, key);
+  if (SCALAR_FIELDS[key]) return unsetScalar(yaml, key);
   if (key === "models.utility") return unsetSectionField(yaml, "models", "utility");
-  const field = budgetField(key);
-  if (BUDGET_FIELDS[field]) return unsetSectionField(yaml, "budget", field);
-  throw new CliError(
-    `\u4E0D\u652F\u6301\u5220\u9664: ${key}`,
-    1,
-    `\u53EF\u5220\u9664: model, permission, shell, models.utility, budget.<\u5B57\u6BB5>`
-  );
+  if (key === "fallback.model") return unsetSectionField(yaml, "fallback", "model");
+  const [section, field] = splitSection(key);
+  if (field !== void 0 && SECTION_FIELDS[section]?.[field]) {
+    return unsetSectionField(yaml, section, field);
+  }
+  throw new CliError(t5("cli.config.cannot_unset", { key }), 1, t5("cli.config.can_unset"));
 }
-function budgetField(key) {
-  return key.startsWith("budget.") ? key.slice("budget.".length) : "";
+function splitSection(key) {
+  const dot = key.indexOf(".");
+  return dot < 0 ? [key, void 0] : [key.slice(0, dot), key.slice(dot + 1)];
 }
-
 // src/commands/mcp.ts
+import { t as t6, uiDateLocale } from "@epoch-agent/infra";
 import {
   listMcpServers,
   mcpLogin,
   mcpLogout,
   probeMcpServer
 } from "@epoch-agent/runtime";
-var log3 = (msg) => process.stdout.write(msg + "\n");
+var log4 = (msg) => process.stdout.write(msg + "\n");
 var warn = (msg) => process.stderr.write(msg + "\n");
-var STATE_LABEL = {
-  "not-applicable": "\u4E0D\u9700\u8981\uFF08stdio\uFF09",
-  "bearer-header": "\u9759\u6001 Authorization header",
-  authorized: "\u5DF2\u767B\u5F55",
-  refreshable: "token \u8FC7\u671F\uFF0C\u4E0B\u6B21\u8FDE\u63A5\u81EA\u52A8\u7EED\u671F",
-  "logged-out": "\u672A\u767B\u5F55"
-};
+function stateLabel(state) {
+  switch (state) {
+    case "not-applicable":
+      return t6("mcp.state_not_applicable");
+    case "bearer-header":
+      return t6("mcp.state_bearer");
+    case "authorized":
+      return t6("mcp.state_authorized");
+    case "refreshable":
+      return t6("mcp.state_refreshable");
+    case "logged-out":
+      return t6("mcp.state_logged_out");
+  }
+}
 function registerMcpCommand(program2) {
-  const cmd = program2.command("mcp").description("\u7BA1\u7406 MCP server\uFF08\u5217\u8868 / \u63A2\u6D3B / OAuth \u767B\u5F55\uFF09");
-  cmd.command("list", { isDefault: true }).description("\u5217\u51FA\u5DF2\u914D\u7F6E\u7684 MCP server \u548C\u5404\u81EA\u7684\u767B\u5F55\u6001\uFF08\u4E0D\u8054\u7F51\uFF09").action(() => guardAsync(() => printList()));
-  cmd.command("status").description("\u8FDE\u4E00\u6B21\u6307\u5B9A server\uFF0C\u770B\u771F\u5B9E\u7684\u8FDE\u63A5\u7ED3\u679C\u548C\u5DE5\u5177\u8868").argument("<name>", "server \u540D").action(
+  const cmd = program2.command("mcp").description(t6("mcp.cmd_root"));
+  cmd.command("list", { isDefault: true }).description(t6("mcp.cmd_list")).action(() => guardAsync(() => printList()));
+  cmd.command("status").description(t6("mcp.cmd_status")).argument("<name>", t6("mcp.arg_name")).action(
     (name) => guardAsync(async () => {
-      log3(`\u6B63\u5728\u8FDE\u63A5 ${name} \u2026\u2026`);
+      log4(t6("mcp.connecting", { name }));
       const result = await probeMcpServer(name, { homeDir: EPOCH_HOME });
       if (!result.connected) {
-        warn(`\u2717 \u8FDE\u63A5\u5931\u8D25${result.error ? `\uFF1A${result.error}` : ""}`);
-        if (result.needsLogin) warn(`  \u2192 \u8DD1 epoch mcp login ${name}`);
+        warn(
+          result.error ? t6("mcp.connect_failed_reason", { reason: result.error }) : t6("mcp.connect_failed")
+        );
+        if (result.needsLogin) warn(t6("mcp.needs_login", { name }));
         process.exit(1);
       }
-      log3(`\u2713 \u5DF2\u8FDE\u63A5\uFF0C${result.toolNames.length} \u4E2A\u5DE5\u5177`);
-      for (const tool of result.toolNames) log3(`  ${tool}`);
+      log4(`\u2713 ${t6("mcp.connected", { count: result.toolNames.length })}`);
+      for (const tool of result.toolNames) log4(`  ${tool}`);
     })
   );
-  cmd.command("login").description("\u5BF9\u8FDC\u7A0B MCP server \u505A OAuth \u6388\u6743\uFF08\u4F1A\u6253\u5F00\u6D4F\u89C8\u5668\uFF09").argument("<name>", "server \u540D").option("--port <port>", "\u56FA\u5B9A\u56DE\u8C03\u7AEF\u53E3\uFF08\u6388\u6743\u670D\u52A1\u5668\u8981\u6C42\u767B\u8BB0 redirect_uri \u65F6\u7528\uFF09").option("--scope <scope>", "\u7533\u8BF7\u7684 scope\uFF0C\u7A7A\u683C\u5206\u9694").action(
+  cmd.command("login").description(t6("mcp.cmd_login")).argument("<name>", t6("mcp.arg_name")).option("--port <port>", t6("mcp.opt_port")).option("--scope <scope>", t6("mcp.opt_scope")).action(
     (name, opts) => guardAsync(async () => {
       const port = opts.port === void 0 ? void 0 : parsePort(opts.port);
       const { refreshedOnly } = await mcpLogin(name, {
         homeDir: EPOCH_HOME,
         ...port === void 0 ? {} : { port },
         ...opts.scope === void 0 ? {} : { scope: opts.scope },
-        print: log3
+        print: log4
       });
-      log3(refreshedOnly ? `\u2713 ${name} \u7684\u51ED\u636E\u5DF2\u7EED\u671F\uFF08\u65E0\u9700\u91CD\u65B0\u6388\u6743\uFF09` : `\u2713 ${name} \u6388\u6743\u5B8C\u6210`);
+      log4(
+        refreshedOnly ? `\u2713 ${t6("mcp.refreshed", { name })}` : `\u2713 ${t6("mcp.authorized", { name })}`
+      );
     })
   );
-  cmd.command("logout").description("\u5220\u6389\u672C\u5730\u4FDD\u5B58\u7684 OAuth \u51ED\u636E").argument("<name>", "server \u540D").action(
+  cmd.command("logout").description(t6("mcp.cmd_logout")).argument("<name>", t6("mcp.arg_name")).action(
     (name) => guardAsync(async () => {
       const removed = await mcpLogout(name, { homeDir: EPOCH_HOME });
-      log3(removed ? `\u2713 \u5DF2\u5220\u9664 ${name} \u7684\u672C\u5730\u51ED\u636E` : `${name} \u672C\u6765\u5C31\u6CA1\u6709\u4FDD\u5B58\u51ED\u636E`);
+      log4(removed ? `\u2713 ${t6("mcp.removed", { name })}` : t6("mcp.nothing_stored", { name }));
     })
   );
 }
 async function printList() {
   const { servers, issues, configPath: configPath2 } = await listMcpServers({ homeDir: EPOCH_HOME });
-  for (const issue of issues) warn(`\u26A0 \u914D\u7F6E\u95EE\u9898 ${issue.path}\uFF1A${issue.message}`);
-  log3(`MCP servers\uFF08${configPath2}\uFF09`);
+  for (const issue of issues)
+    warn(t6("mcp.config_issue", { path: issue.path, message: issue.message }));
+  log4(t6("mcp.list_head", { path: configPath2 }));
   if (servers.length === 0) {
-    log3("  (\u65E0)");
+    log4(t6("mcp.list_empty"));
     return;
   }
-  for (const s of servers) log3(`  ${describe(s)}`);
+  for (const s of servers) log4(`  ${describe(s)}`);
 }
 function describe(s) {
   const target = s.config.transport === "stdio" ? s.config.command : s.config.url;
   const parts = [
     `${s.config.name}  [${s.config.transport}]  ${target ?? ""}`,
-    `    \u8BA4\u8BC1\uFF1A${STATE_LABEL[s.auth.state]}`
+    t6("mcp.auth_line", { state: stateLabel(s.auth.state) })
   ];
   if (s.auth.expiresAt) {
-    parts[1] += `\uFF08\u5230\u671F ${new Date(s.auth.expiresAt).toLocaleString("zh-CN")}\uFF09`;
+    parts[1] += t6("mcp.expires_at", {
+      when: new Date(s.auth.expiresAt).toLocaleString(uiDateLocale())
+    });
   }
   return parts.join("\n");
 }
 function parsePort(raw) {
   const port = Number(raw);
   if (!Number.isInteger(port) || port < 1024 || port > 65535) {
-    throw new Error(`--port \u5FC5\u987B\u662F 1024\u201365535 \u7684\u6574\u6570\uFF0C\u6536\u5230 "${raw}"`);
+    throw new Error(t6("mcp.bad_port", { raw }));
   }
   return port;
 }
 function guardAsync(fn) {
   fn().catch((err2) => {
-    warn(`\u9519\u8BEF: ${err2 instanceof Error ? err2.message : String(err2)}`);
+    warn(t6("mcp.error", { message: err2 instanceof Error ? err2.message : String(err2) }));
     process.exit(1);
   });
 }
-
 // src/commands/model.ts
 import { input, password, select } from "@inquirer/prompts";
 import { isNonInteractive, readProviderKeyEnv } from "@epoch-agent/core";
+import { t as t7 } from "@epoch-agent/infra";
 import {
   apiKeyEnvVar,
   PROVIDER_INFOS,
   PROVIDER_TYPES as PROVIDER_TYPES2
 } from "@epoch-agent/protocol";
-var log4 = (msg) => process.stdout.write(msg + "\n");
+import { providerLabel } from "@epoch-agent/runtime";
+var log5 = (msg) => process.stdout.write(msg + "\n");
 var CUSTOM = "__custom__";
 function registerModelCommand(program2) {
-  program2.command("model").description("\u4EA4\u4E92\u5F0F\u9009\u62E9 provider \u548C\u6A21\u578B").option("-r, --refresh", "\u6E05\u9664\u6A21\u578B\u7F13\u5B58").action(async (opts) => {
+  program2.command("model").description(t7("model.cmd_root")).option("-r, --refresh", t7("model.opt_refresh")).action(async (opts) => {
     ensureEpochHome();
     if (opts.refresh) return refreshCache();
     if (isNonInteractive()) {
-      throw new CliError(
-        "epoch model \u9700\u8981\u4EA4\u4E92\u5F0F\u7EC8\u7AEF",
-        1,
-        "\u5728 CI / \u7BA1\u9053\u91CC\u8BF7\u6539\u7528 epoch config set provider <\u540D\u5B57> \u548C epoch config set model <\u540D\u5B57>\uFF0CAPI key \u8D70\u73AF\u5883\u53D8\u91CF\u3002"
-      );
+      throw new CliError(t7("model.needs_tty"), 1, t7("model.needs_tty_hint"));
     }
     await runWizard();
   });
 }
 async function refreshCache() {
   const { clearModelCache } = await import("@epoch-agent/core");
-  for (const t14 of PROVIDER_TYPES2) clearModelCache(EPOCH_HOME, t14);
-  log4("\u5DF2\u6E05\u9664\u5168\u90E8\u6A21\u578B\u7F13\u5B58");
+  for (const t40 of PROVIDER_TYPES2) clearModelCache(EPOCH_HOME, t40);
+  log5(t7("model.cache_cleared"));
 }
 function readCurrentSelection() {
   const yaml = readConfigYaml(CONFIG_PATH);
@@ -715,7 +824,7 @@ async function runWizard() {
   await ensureSecrets();
   const current = readCurrentSelection();
   const provider = await select({
-    message: "\u9009\u62E9 Provider:",
+    message: t7("model.pick_provider"),
     choices: providerChoices(current.provider),
     pageSize: listPageSize(PROVIDER_INFOS.filter((p) => p.interactive).length),
     ...isKnownProvider(current.provider) ? { default: current.provider } : {}
@@ -724,61 +833,61 @@ async function runWizard() {
   const keyForDiscover = await resolveApiKey(provider);
   const { discoverModels } = await import("@epoch-agent/core");
   const result = await discoverModels(EPOCH_HOME, provider, keyForDiscover, baseUrl);
-  log4(describeDiscovery(result.source, result.models.length, keyForDiscover !== ""));
+  log5(describeDiscovery(result.source, result.models.length, keyForDiscover !== ""));
   const model = await pickModel(result.models, result.source, carriedModel(provider, current));
   let yaml = readConfigYaml(CONFIG_PATH);
   yaml = setSectionField(yaml, "provider", "type", provider);
   if (baseUrl) yaml = setSectionField(yaml, "provider", "baseUrl", baseUrl);
   yaml = setScalar(yaml, "model", model);
   writeConfigYaml(CONFIG_PATH, yaml);
-  log4(`
+  log5(`
 \u2705 ${provider} / ${model}
-\u5DF2\u5C31\u7EEA\uFF0C\u8F93\u5165 epoch "\u4F60\u597D" \u8BD5\u8BD5`);
+${t7("model.ready")}`);
 }
 async function ensureSecrets() {
   try {
     const { ensureSecretsReady } = await import("@epoch-agent/runtime");
     await ensureSecretsReady();
   } catch (err2) {
-    log4(`  \u26A0 \u51ED\u636E\u5B58\u50A8\u521D\u59CB\u5316\u5931\u8D25\uFF0C\u5DF2\u914D\u7F6E\u7684 key \u53EF\u80FD\u8BFB\u4E0D\u5230\uFF08${describeError(err2)}\uFF09`);
+    log5(t7("model.secret_init_failed", { reason: describeError(err2) }));
   }
 }
 async function resolveApiKey(provider) {
   const envKey = apiKeyEnvVar(provider);
   if (!envKey) return "";
   const existing = readProviderKeyEnv(EPOCH_HOME)[envKey];
-  const message = existing ? `API key (${envKey})\uFF08\u5DF2\u914D\u7F6E\uFF0C\u56DE\u8F66\u6CBF\u7528\uFF09:` : `API key (${envKey}):`;
+  const message = existing ? t7("model.api_key_existing", { envKey }) : t7("model.api_key", { envKey });
   const typed = (await password({ message, mask: "*" })).trim();
   if (!typed) return existing ?? "";
   await saveApiKey(envKey, typed);
   return typed;
 }
 async function saveApiKey(envKey, apiKey) {
-  const result = await writeProviderKey(envKey, apiKey, ENV_PATH);
-  log4(result.encrypted ? `  \u5DF2\u5B58\u5165 ${result.detail}` : `  \u26A0 ${result.detail}`);
+  const result = await writeProviderSecret(envKey, apiKey, ENV_PATH);
+  log5(result.encrypted ? t7("model.key_stored", { detail: result.detail }) : `  \u26A0 ${result.detail}`);
 }
 async function askBaseUrl() {
   const answer = (await input({
-    message: "API base URL\uFF08\u5982 http://localhost:8080/v1\uFF09:",
+    message: t7("model.ask_base_url"),
     default: "http://localhost:8080/v1"
   })).trim();
   return answer || void 0;
 }
 async function pickModel(models, source, currentModel) {
-  const choices = modelChoices(models, source, currentModel);
-  if (choices.length === 0) {
+  const choices3 = modelChoices(models, source, currentModel);
+  if (choices3.length === 0) {
     const fallback2 = currentModel ?? "gpt-4o-mini";
-    return await input({ message: "\u8F93\u5165\u6A21\u578B\u540D:", default: fallback2 }) || fallback2;
+    return await input({ message: t7("model.type_model"), default: fallback2 }) || fallback2;
   }
   const picked = await select({
-    message: "\u9009\u62E9\u6A21\u578B:",
-    choices,
-    pageSize: listPageSize(choices.length),
+    message: t7("model.pick_model"),
+    choices: choices3,
+    pageSize: listPageSize(choices3.length),
     ...currentModel && models.includes(currentModel) ? { default: currentModel } : {}
   });
   if (picked !== CUSTOM) return picked;
   const fallback = currentModel ?? models[0] ?? "gpt-4o-mini";
-  return await input({ message: "\u8F93\u5165\u6A21\u578B\u540D:", default: fallback }) || fallback;
+  return await input({ message: t7("model.type_model"), default: fallback }) || fallback;
 }
 function isKnownProvider(value) {
   return PROVIDER_INFOS.some((p) => p.interactive && p.type === value);
@@ -787,37 +896,42 @@ function carriedModel(chosenProvider, current) {
   return chosenProvider === current.provider ? current.model : void 0;
 }
 function providerChoices(currentProvider) {
-  return PROVIDER_INFOS.filter((p) => p.interactive).map((p) => ({
-    name: p.type === currentProvider ? `${p.label}\uFF08\u5F53\u524D\uFF09` : p.label,
-    value: p.type
-  }));
+  return PROVIDER_INFOS.filter((p) => p.interactive).map((p) => {
+    const label = providerLabel(p);
+    return {
+      name: p.type === currentProvider ? t7("model.current", { label }) : label,
+      value: p.type
+    };
+  });
 }
 function modelChoices(models, source, currentModel) {
   if (models.length === 0) return [];
-  const choices = models.map((m) => ({
-    name: m === currentModel ? `${m}\uFF08\u5F53\u524D\uFF09` : m,
+  const choices3 = models.map((m) => ({
+    name: m === currentModel ? t7("model.current", { label: m }) : m,
     value: m
   }));
   if (currentModel && !models.includes(currentModel)) {
-    choices.unshift({ name: `${currentModel}\uFF08\u5F53\u524D\uFF0C\u4E0D\u5728\u6B64\u76EE\u5F55\u4E2D\uFF09`, value: currentModel });
+    choices3.unshift({
+      name: t7("model.current_not_listed", { label: currentModel }),
+      value: currentModel
+    });
   }
-  if (source !== "live") choices.push({ name: "\u2500\u2500 \u81EA\u5B9A\u4E49\u8F93\u5165 \u2500\u2500", value: CUSTOM });
-  return choices;
+  if (source !== "live") choices3.push({ name: t7("model.custom_entry"), value: CUSTOM });
+  return choices3;
 }
 function listPageSize(itemCount, rows = process.stdout.rows) {
   const height = rows && rows > 0 ? rows : 24;
   return Math.min(itemCount, Math.max(3, height - 3));
 }
 function describeDiscovery(source, count, hasKey) {
-  if (source === "live") return `  \u4ECE API \u62C9\u53D6\u5230 ${count} \u4E2A\u6A21\u578B`;
-  const why = hasKey ? "\u62C9\u53D6\u6A21\u578B\u5217\u8868\u5931\u8D25\uFF08\u7F51\u7EDC / key \u65E0\u6548 / \u8BE5 provider \u4E0D\u63D0\u4F9B\u5217\u8868\u63A5\u53E3\uFF09" : "\u6CA1\u6709\u53EF\u7528\u7684 API key";
-  const what = source === "cache" ? "\u4E0A\u6B21\u7F13\u5B58\u7684\u5217\u8868" : "\u5185\u7F6E\u7684\u9759\u6001\u76EE\u5F55\uFF08\u53EF\u80FD\u5DF2\u8FC7\u671F\uFF09";
-  return `  \u26A0 ${why}\uFF0C\u6539\u7528${what}\u3002\u5217\u8868\u91CC\u6CA1\u6709\u4F60\u8981\u7684\u6A21\u578B\u5C31\u9009\u300C\u81EA\u5B9A\u4E49\u8F93\u5165\u300D`;
+  if (source === "live") return t7("model.from_api", { count });
+  const why = hasKey ? t7("model.why_fetch_failed") : t7("model.why_no_key");
+  const what = source === "cache" ? t7("model.fallback_cache") : t7("model.fallback_static");
+  return t7("model.fallback_line", { why, what });
 }
 function describeError(err2) {
   return err2 instanceof Error ? err2.message : String(err2);
 }
-
 // src/commands/plugin.ts
 import {
   addMarketplace,
@@ -842,94 +956,98 @@ import {
   marketplacesPath,
   pluginsDir,
   pluginsStatePath,
-  t as t2
+  t as t8
 } from "@epoch-agent/infra";
-var log5 = (msg) => {
+var log6 = (msg) => {
   process.stdout.write(msg + "\n");
 };
 function locations() {
   return { pluginsDir: pluginsDir(EPOCH_HOME), statePath: pluginsStatePath(EPOCH_HOME) };
 }
 function registerPluginCommand(program2) {
-  const cmd = program2.command("plugin").description("\u7BA1\u7406\u63D2\u4EF6\uFF08\u4E00\u5305\u547D\u4EE4 / \u89D2\u8272 / \u6280\u80FD / hook / deny \u89C4\u5219 / MCP server\uFF09");
+  const cmd = program2.command("plugin").description(t8("plugin.cmd_root"));
   registerBasics(cmd);
   registerLifecycle(cmd);
   registerMarketplace(cmd);
 }
 function registerBasics(cmd) {
-  cmd.command("list", { isDefault: true }).alias("ls").description("\u5217\u51FA\u5DF2\u5B89\u88C5\u7684\u63D2\u4EF6").option("--verbose", "\u8FDE\u6BCF\u4E2A\u63D2\u4EF6\u5E26\u6765\u7684\u6269\u5C55\u7269\u4E00\u8D77\u5217\u51FA\u6765").action((opts) => {
+  cmd.command("list", { isDefault: true }).alias("ls").description(t8("plugin.cmd_list")).option("--verbose", t8("plugin.opt_verbose")).action((opts) => {
     printList2(opts.verbose === true);
   });
-  cmd.command("install").alias("add").description(
-    "\u88C5\u4E00\u4E2A\u63D2\u4EF6\uFF08./\u672C\u5730\u76EE\u5F55 | github:owner/repo | npm:\u5305\u540D | https://\u2026.zip | <\u5E02\u573A>/<\u63D2\u4EF6>\uFF09"
-  ).argument("<source>", "\u63D2\u4EF6\u6765\u6E90").option("-y, --yes", "\u8DF3\u8FC7\u5B89\u88C5\u524D\u786E\u8BA4").action(async (source, opts) => {
+  cmd.command("install").alias("add").description(t8("plugin.cmd_install")).argument("<source>", t8("plugin.arg_source")).option("-y, --yes", t8("plugin.opt_yes_install")).action(async (source, opts) => {
     await runInstall(source, opts.yes === true);
   });
-  cmd.command("validate").description("\u81EA\u67E5\u4E00\u4E2A\u63D2\u4EF6\u76EE\u5F55\uFF08\u5199\u63D2\u4EF6\u65F6\u7528\uFF0C\u4E0D\u5B89\u88C5\uFF09").argument("[path]", "\u63D2\u4EF6\u76EE\u5F55\uFF08\u9ED8\u8BA4\u5F53\u524D\u76EE\u5F55\uFF09").action((path) => {
+  cmd.command("validate").description(t8("plugin.cmd_validate")).argument("[path]", t8("plugin.arg_dir")).action((path) => {
     validateDir(path ?? process.cwd());
   });
 }
 function registerLifecycle(cmd) {
-  cmd.command("uninstall").alias("rm").description("\u5378\u8F7D\u4E00\u4E2A\u63D2\u4EF6\uFF08\u672C\u5730\u8F6F\u94FE\u53EA\u89E3\u94FE\uFF0C\u4E0D\u5220\u4F60\u7684\u6E90\u7801\u76EE\u5F55\uFF09").argument("<name>", "\u63D2\u4EF6\u540D").action(async (name) => {
+  cmd.command("uninstall").alias("rm").description(t8("plugin.cmd_uninstall")).argument("<name>", t8("plugin.arg_name")).action(async (name) => {
     const outcome = await uninstallPlugin(name, { statePath: pluginsStatePath(EPOCH_HOME) });
     if (!outcome.ok) throw new CliError(outcome.reason);
-    log5(`\u2713 ${outcome.message}`);
+    log6(`\u2713 ${outcome.message}`);
   });
-  cmd.command("disable").description("\u505C\u7528\u4E00\u4E2A\u63D2\u4EF6\uFF08\u53EA\u6539\u8BB0\u5F55\uFF0C\u6587\u4EF6\u4E00\u4E2A\u5B57\u8282\u90FD\u4E0D\u52A8\uFF09").argument("<name>", "\u63D2\u4EF6\u540D").action(async (name) => {
+  cmd.command("disable").description(t8("plugin.cmd_disable")).argument("<name>", t8("plugin.arg_name")).action(async (name) => {
     await toggle(name, false);
   });
-  cmd.command("enable").description("\u91CD\u65B0\u542F\u7528\u4E00\u4E2A\u63D2\u4EF6").argument("<name>", "\u63D2\u4EF6\u540D").action(async (name) => {
+  cmd.command("enable").description(t8("plugin.cmd_enable")).argument("<name>", t8("plugin.arg_name")).action(async (name) => {
     await toggle(name, true);
   });
-  cmd.command("update").description("\u6309\u8BB0\u5F55\u91CC\u7684\u6765\u6E90\u91CD\u88C5\u4E00\u904D\uFF08\u8F6F\u94FE\u88C5\u7684\u4E0D\u7528\u66F4\u65B0\uFF09").argument("<name>", "\u63D2\u4EF6\u540D").option("-y, --yes", "\u8DF3\u8FC7\u786E\u8BA4").action(async (name, opts) => {
+  cmd.command("update").description(t8("plugin.cmd_update")).argument("<name>", t8("plugin.arg_name")).option("-y, --yes", t8("plugin.opt_yes")).action(async (name, opts) => {
     await runUpdate(name, opts.yes === true);
   });
 }
 function registerMarketplace(cmd) {
-  const market = cmd.command("marketplace").alias("mp").description("\u7BA1\u7406\u63D2\u4EF6\u5E02\u573A");
-  market.command("add").description("\u52A0\u4E00\u4E2A\u5E02\u573A\uFF08github:owner/repo | https://\u2026/epoch-marketplace.json | \u672C\u5730\u76EE\u5F55\uFF09").argument("<source>", "\u5E02\u573A\u5730\u5740").action(async (source) => {
+  const market = cmd.command("marketplace").alias("mp").description(t8("plugin.cmd_market"));
+  market.command("add").description(t8("plugin.cmd_market_add")).argument("<source>", t8("plugin.arg_market_source")).action(async (source) => {
     const outcome = await addMarketplace(source, { statePath: marketplacesPath(EPOCH_HOME) });
     if (!outcome.ok) throw new CliError(outcome.reason);
     const count = outcome.record.catalog.plugins.length;
-    log5(`\u2713 \u5DF2\u52A0\u5E02\u573A ${outcome.record.name}\uFF08${count} \u4E2A\u63D2\u4EF6\uFF09`);
-    log5(`  \u641C\u4E00\u4E0B\uFF1Aepoch plugin search <\u5173\u952E\u8BCD>`);
+    log6(`\u2713 ${t8("plugin.market_added", { name: outcome.record.name, count })}`);
+    log6(t8("plugin.market_added_hint"));
   });
-  market.command("list", { isDefault: true }).alias("ls").description("\u5217\u51FA\u5DF2\u52A0\u7684\u5E02\u573A").action(printMarketplaces);
-  market.command("remove").alias("rm").description("\u5220\u6389\u4E00\u4E2A\u5E02\u573A\uFF08\u5DF2\u7ECF\u4ECE\u5B83\u88C5\u7684\u63D2\u4EF6\u4E0D\u53D7\u5F71\u54CD\uFF09").argument("<name>", "\u5E02\u573A\u540D").action(async (name) => {
+  market.command("list", { isDefault: true }).alias("ls").description(t8("plugin.cmd_market_list")).action(printMarketplaces);
+  market.command("remove").alias("rm").description(t8("plugin.cmd_market_remove")).argument("<name>", t8("plugin.arg_market_name")).action(async (name) => {
     const outcome = await removeMarketplace(name, { statePath: marketplacesPath(EPOCH_HOME) });
-    if (!outcome.ok) throw new CliError(outcome.reason ?? `\u5220\u4E0D\u6389 ${name}`);
-    log5(`\u2713 \u5DF2\u5220\u6389\u5E02\u573A ${name}`);
+    if (!outcome.ok)
+      throw new CliError(outcome.reason ?? t8("plugin.market_remove_failed", { name }));
+    log6(`\u2713 ${t8("plugin.market_removed", { name })}`);
   });
-  market.command("update").description("\u91CD\u62C9\u5E02\u573A\u76EE\u5F55\uFF08\u76EE\u5F55\u662F\u52A0\u8FDB\u6765\u90A3\u4E00\u523B\u7F13\u5B58\u7684\uFF0C\u641C\u7D22\u8D70\u7F13\u5B58\uFF09").argument("<name>", "\u5E02\u573A\u540D").action(async (name) => {
+  market.command("update").description(t8("plugin.cmd_market_update")).argument("<name>", t8("plugin.arg_market_name")).action(async (name) => {
     const outcome = await updateMarketplace(name, { statePath: marketplacesPath(EPOCH_HOME) });
     if (!outcome.ok) throw new CliError(outcome.reason);
-    log5(`\u2713 ${name} \u5DF2\u66F4\u65B0\uFF08${outcome.record.catalog.plugins.length} \u4E2A\u63D2\u4EF6\uFF09`);
+    log6(
+      `\u2713 ${t8("plugin.market_updated", {
+        name,
+        count: outcome.record.catalog.plugins.length
+      })}`
+    );
   });
-  cmd.command("search").description("\u5728\u5DF2\u52A0\u7684\u5E02\u573A\u91CC\u641C\u63D2\u4EF6\uFF08\u4E0D\u7ED9\u5173\u952E\u8BCD\u5C31\u5217\u5168\u90E8\uFF09").argument("[keyword]", "\u5173\u952E\u8BCD").action((keyword) => {
+  cmd.command("search").description(t8("plugin.cmd_search")).argument("[keyword]", t8("plugin.arg_keyword")).action((keyword) => {
     printSearch(keyword ?? "");
   });
 }
 function printList2(verbose) {
   const artifacts = loadPlugins({ statePath: pluginsStatePath(EPOCH_HOME) });
   if (artifacts.loaded.length === 0 && artifacts.skipped.length === 0) {
-    log5("\u6CA1\u6709\u5DF2\u5B89\u88C5\u7684\u63D2\u4EF6\u3002");
-    log5("\u88C5\u4E00\u4E2A\uFF1Aepoch plugin install ./my-plugin \u6216 epoch plugin install github:owner/repo");
+    log6(t8("plugin.none_installed"));
+    log6(t8("plugin.none_installed_hint"));
     return;
   }
-  log5(`\u5DF2\u5B89\u88C5\u63D2\u4EF6\uFF08${pluginsStatePath(EPOCH_HOME)}\uFF09
+  log6(`${t8("plugin.installed_head", { path: pluginsStatePath(EPOCH_HOME) })}
 `);
   for (const plugin of artifacts.loaded) {
-    log5(loadedLine(plugin));
+    log6(loadedLine(plugin));
     if (!verbose) continue;
     for (const line of renderInventory(scanPluginDir(plugin.dir, plugin.name))) {
-      log5(`    ${line}`);
+      log6(`    ${line}`);
     }
-    log5("");
+    log6("");
   }
-  for (const skipped of artifacts.skipped) log5(skippedLine(skipped));
-  if (artifacts.skipped.length > 0) log5(`
-${PLUGIN_MARK_LEGEND}`);
-  for (const detail of issueDetails(artifacts.issues)) log5(`
+  for (const skipped of artifacts.skipped) log6(skippedLine(skipped));
+  if (artifacts.skipped.length > 0) log6(`
+${markLegend()}`);
+  for (const detail of issueDetails(artifacts.issues)) log6(`
 \u26A0 ${detail}`);
 }
 function loadedLine(plugin) {
@@ -938,7 +1056,7 @@ function loadedLine(plugin) {
 function countsLine(counts) {
   const parts = [];
   const add = (n, key) => {
-    if (n > 0) parts.push(t2(key, { count: n }));
+    if (n > 0) parts.push(t8(key, { count: n }));
   };
   add(counts.commands, "plugin.n_commands");
   add(counts.roles, "plugin.n_roles");
@@ -946,78 +1064,84 @@ function countsLine(counts) {
   add(counts.hooks, "plugin.n_hooks");
   add(counts.denyRules, "plugin.n_deny");
   add(counts.mcpServers, "plugin.n_mcp");
-  return parts.length === 0 ? t2("plugin.brings_nothing") : parts.join(" \xB7 ");
+  return parts.length === 0 ? t8("plugin.brings_nothing") : parts.join(" \xB7 ");
+}
+function markLegend() {
+  return t8("plugin.mark_legend");
 }
-var PLUGIN_MARK_LEGEND = "\u2713 \u5DF2\u52A0\u8F7D \xB7 \u25CB \u5DF2\u505C\u7528 \xB7 \u2717 \u542F\u7528\u4E86\u4F46\u8FD9\u6B21\u6CA1\u52A0\u8F7D";
 function skippedLine(skipped) {
   return `  ${skipped.disabled ? "\u25CB" : "\u2717"} ${skipped.name}  ${skipped.reason}`;
 }
 async function runInstall(input2, yes) {
   if (!yes && isNonInteractive2()) {
-    throw new CliError(
-      "epoch plugin install \u9700\u8981\u4EA4\u4E92\u5F0F\u7EC8\u7AEF\u6765\u786E\u8BA4\u8FD9\u6B21\u5B89\u88C5",
-      1,
-      "\u63D2\u4EF6\u53EF\u4EE5\u5E26 hook\uFF08\u4F1A\u6267\u884C shell \u547D\u4EE4\uFF09\u3002CI / \u811A\u672C\u91CC\u8BF7\u663E\u5F0F\u52A0 --yes \u8868\u793A\u4F60\u5DF2\u7ECF\u77E5\u9053\u88C5\u8FDB\u6765\u7684\u662F\u4EC0\u4E48\u3002"
-    );
+    throw new CliError(t8("plugin.install_needs_tty"), 1, t8("plugin.install_needs_tty_hint"));
   }
   const ref = resolveMarketplaceRef(input2, marketplacesPath(EPOCH_HOME));
   if (ref && !ref.ok) throw new CliError(ref.reason);
   const source = ref?.ok ? ref.ref.source : input2;
-  if (ref?.ok) log5(`${input2} \u2192 ${source}`);
+  if (ref?.ok) log6(`${input2} \u2192 ${source}`);
   const outcome = await installPlugin(source, {
     ...locations(),
     epochVersion: currentEpochVersion(),
-    onProgress: log5,
+    onProgress: log6,
     ...ref?.ok ? { marketplace: ref.ref.marketplace } : {},
     ...yes ? {} : { confirm: askInstall }
   });
   if (!outcome.ok) {
-    if (outcome.reason === "\u5DF2\u53D6\u6D88") {
-      log5("\u5DF2\u53D6\u6D88\uFF0C\u4EC0\u4E48\u90FD\u6CA1\u88C5\u3002");
+    if (outcome.cancelled) {
+      log6(t8("plugin.nothing_installed"));
       return;
     }
-    throw new CliError(`\u88C5\u4E0D\u4E0A ${source}\uFF1A${outcome.reason}`);
+    throw new CliError(t8("plugin.install_failed", { source, reason: outcome.reason }));
   }
-  log5(`
-\u2713 \u5DF2\u5B89\u88C5 ${outcome.record.name}@${outcome.record.version} \u2192 ${outcome.record.path}`);
+  log6(
+    `
+\u2713 ${t8("plugin.installed", {
+      name: outcome.record.name,
+      version: outcome.record.version,
+      path: outcome.record.path
+    })}`
+  );
   if (outcome.record.linked) {
-    log5("  \u8FD9\u662F\u4E00\u6761\u8F6F\u94FE\uFF1A\u6539\u63D2\u4EF6\u6E90\u7801\u3001\u91CD\u542F epoch \u5C31\u751F\u6548\u3002");
+    log6(t8("plugin.installed_linked"));
   }
-  log5("  \u91CD\u542F epoch \u4E4B\u540E\u751F\u6548\uFF08\u6269\u5C55\u7269\u5728\u542F\u52A8\u65F6\u52A0\u8F7D\uFF09\u3002");
+  log6(t8("plugin.installed_restart"));
 }
 async function runUpdate(name, yes) {
   if (!yes && isNonInteractive2()) {
-    throw new CliError(
-      "epoch plugin update \u9700\u8981\u4EA4\u4E92\u5F0F\u7EC8\u7AEF\u6765\u786E\u8BA4\u65B0\u7248\u672C\u5E26\u6765\u7684\u4E1C\u897F",
-      1,
-      "\u65B0\u7248\u672C\u53EF\u80FD\u52A0\u4E86 hook\uFF08\u4F1A\u6267\u884C shell \u547D\u4EE4\uFF09\u3002CI / \u811A\u672C\u91CC\u8BF7\u663E\u5F0F\u52A0 --yes\u3002"
-    );
+    throw new CliError(t8("plugin.update_needs_tty"), 1, t8("plugin.update_needs_tty_hint"));
   }
   const outcome = await updatePlugin(name, {
     ...locations(),
     epochVersion: currentEpochVersion(),
-    onProgress: log5,
+    onProgress: log6,
     ...yes ? {} : { confirm: askInstall }
   });
   if (!outcome.ok) throw new CliError(outcome.reason);
-  log5(`\u2713 ${"message" in outcome ? outcome.message : `\u5DF2\u66F4\u65B0\u5230 ${outcome.record.version}`}`);
+  log6(
+    `\u2713 ${"message" in outcome ? outcome.message : t8("plugin.updated_to", { version: outcome.record.version })}`
+  );
 }
 async function askInstall(preview2) {
-  for (const line of renderPreview(preview2)) log5(line);
+  for (const line of renderPreview(preview2)) log6(line);
   const { confirm } = await import("@inquirer/prompts");
-  return confirm({ message: "\u786E\u8BA4\u5B89\u88C5\uFF1F", default: false });
+  return confirm({ message: t8("plugin.confirm_install"), default: false });
 }
 function renderPreview(preview2) {
   const { manifest, source, inventory } = preview2;
   const lines = [""];
-  lines.push(`\u5C06\u5B89\u88C5 ${manifest.name}@${manifest.version}`);
+  lines.push(t8("plugin.will_install", { name: manifest.name, version: manifest.version }));
   if (manifest.description) lines.push(`  ${manifest.description}`);
-  lines.push(`  \u6765\u6E90: ${source.raw}\uFF08${source.type}\uFF09`);
-  if (source.sha256) lines.push(`  \u6821\u9A8C\u548C: sha256:${source.sha256}\uFF08\u5DF2\u6838\u5BF9\uFF09`);
-  if (manifest.author) lines.push(`  \u4F5C\u8005: ${manifest.author.name}`);
-  if (manifest.homepage) lines.push(`  \u4E3B\u9875: ${manifest.homepage}`);
+  lines.push(t8("plugin.preview_source", { raw: source.raw, type: source.type }));
+  if (source.sha256) lines.push(t8("plugin.preview_sha", { sha: source.sha256 }));
+  if (manifest.author) lines.push(t8("plugin.preview_author", { name: manifest.author.name }));
+  if (manifest.homepage) lines.push(t8("plugin.preview_homepage", { url: manifest.homepage }));
+  if (preview2.versionUnmet) {
+    const { required, current } = preview2.versionUnmet;
+    lines.push(`  ${t8("plugin.preview_version_unmet", { required, current })}`);
+  }
   lines.push("");
-  lines.push("  \u5B83\u4F1A\u5E26\u6765:");
+  lines.push(t8("plugin.brings_head_indented"));
   for (const line of renderInventory(inventory)) lines.push(`  ${line}`);
   lines.push("");
   return lines;
@@ -1025,121 +1149,127 @@ function renderPreview(preview2) {
 function renderInventory(inv) {
   const lines = [];
   if (inventoryTotal(inv) === 0) {
-    lines.push("\uFF08\u6CA1\u6709\u4EFB\u4F55\u6269\u5C55\u7269 \u2014\u2014 \u88C5\u4E86\u7B49\u4E8E\u6CA1\u88C5\uFF0C\u786E\u8BA4\u4E00\u4E0B\u76EE\u5F55\u7ED3\u6784\u5BF9\u4E0D\u5BF9\uFF09");
-  }
-  if (inv.commands.length > 0) lines.push(`\u547D\u4EE4 ${inv.commands.length} \u6761: ${list(inv.commands)}`);
-  if (inv.roles.length > 0) lines.push(`\u89D2\u8272 ${inv.roles.length} \u4E2A: ${list(inv.roles)}`);
-  if (inv.skills.length > 0) lines.push(`\u6280\u80FD ${inv.skills.length} \u4E2A: ${list(inv.skills)}`);
+    lines.push(t8("plugin.inventory_empty"));
+  }
+  if (inv.commands.length > 0)
+    lines.push(t8("plugin.inv_commands", { count: inv.commands.length, names: list(inv.commands) }));
+  if (inv.roles.length > 0)
+    lines.push(t8("plugin.inv_roles", { count: inv.roles.length, names: list(inv.roles) }));
+  if (inv.skills.length > 0)
+    lines.push(t8("plugin.inv_skills", { count: inv.skills.length, names: list(inv.skills) }));
   if (inv.hooks.length > 0) {
-    const tally = inv.hooks.map((h) => `${h.type} \xD7 ${h.count}`).join("\uFF0C");
-    lines.push(`\u26A0 hook ${tally} \u2014\u2014 \u6BCF\u4E00\u6761\u90FD\u662F\u4F1A\u5728\u4F60\u673A\u5668\u4E0A\u6267\u884C\u7684 shell \u547D\u4EE4`);
+    const tally = inv.hooks.map((h) => `${h.type} \xD7 ${h.count}`).join(t8("plugin.inv_join"));
+    lines.push(t8("plugin.inv_hooks", { tally }));
   }
-  if (inv.denyRules > 0) lines.push(`deny \u89C4\u5219 ${inv.denyRules} \u6761\uFF08\u53EA\u4F1A\u8BA9 agent \u80FD\u505A\u7684\u66F4\u5C11\uFF09`);
+  if (inv.denyRules > 0) lines.push(t8("plugin.inv_deny", { count: inv.denyRules }));
   if (inv.mcpServers.length > 0) {
     lines.push(
-      t2("plugin.preview_mcp", {
+      t8("plugin.preview_mcp", {
         count: inv.mcpServers.length,
         names: list(inv.mcpServers)
       })
     );
   }
   if (inv.ignoredBuckets.length > 0) {
-    lines.push(
-      `settings.json \u91CC\u7684 ${inv.ignoredBuckets.join(" / ")} \u4F1A\u88AB\u5FFD\u7565 \u2014\u2014 \u63D2\u4EF6\u4E0D\u80FD\u66FF\u4F60\u653E\u5F00\u6743\u9650`
-    );
+    lines.push(t8("plugin.inv_ignored", { buckets: inv.ignoredBuckets.join(" / ") }));
   }
   if (inv.jsTools) {
-    lines.push("tools/ \u91CC\u7684 JS \u5DE5\u5177\u4E0D\u4F1A\u88AB\u52A0\u8F7D\uFF08\u7B2C\u4E00\u7248\u4E0D\u5728 epoch \u8FDB\u7A0B\u91CC\u8DD1\u7B2C\u4E09\u65B9\u4EE3\u7801\uFF09");
+    lines.push(t8("plugin.inv_js_tools"));
   }
   for (const detail of issueDetails(inv.issues)) lines.push(`\u26A0 ${detail}`);
   return lines;
 }
 function list(names) {
   const shown = names.slice(0, 8).join(", ");
-  return names.length > 8 ? `${shown} \u2026\uFF08\u8FD8\u6709 ${names.length - 8} \u4E2A\uFF09` : shown;
+  return names.length > 8 ? t8("plugin.list_more", { shown, n: names.length - 8 }) : shown;
 }
 function printMarketplaces() {
   const state = readMarketplaces(marketplacesPath(EPOCH_HOME));
-  for (const detail of issueDetails(state.issues)) log5(`\u26A0 ${detail}`);
+  for (const detail of issueDetails(state.issues)) log6(`\u26A0 ${detail}`);
   if (state.records.length === 0) {
-    log5("\u6CA1\u6709\u5DF2\u52A0\u7684\u5E02\u573A\u3002");
-    log5("\u52A0\u4E00\u4E2A\uFF1Aepoch plugin marketplace add github:owner/repo");
+    log6(t8("plugin.no_markets"));
+    log6(t8("plugin.no_markets_hint"));
     return;
   }
-  log5(`\u5DF2\u52A0\u5E02\u573A\uFF08${marketplacesPath(EPOCH_HOME)}\uFF09
+  log6(`${t8("plugin.markets_head", { path: marketplacesPath(EPOCH_HOME) })}
 `);
   for (const record of state.records) {
     const owner = record.catalog.owner ? `  by ${record.catalog.owner.name}` : "";
-    log5(`  ${record.name}  ${record.catalog.plugins.length} \u4E2A\u63D2\u4EF6  \u2190 ${record.source}${owner}`);
-    if (record.catalog.description) log5(`    ${record.catalog.description}`);
+    log6(
+      `  ${record.name}  ${t8("plugin.market_plugin_count", {
+        count: record.catalog.plugins.length
+      })}  \u2190 ${record.source}${owner}`
+    );
+    if (record.catalog.description) log6(`    ${record.catalog.description}`);
   }
 }
 function printSearch(keyword) {
   const statePath = marketplacesPath(EPOCH_HOME);
   if (readMarketplaces(statePath).records.length === 0) {
-    log5("\u8FD8\u6CA1\u6709\u52A0\u4EFB\u4F55\u5E02\u573A\uFF0C\u5148 epoch plugin marketplace add <\u5730\u5740>\u3002");
+    log6(t8("plugin.search_no_markets"));
     return;
   }
   const hits = searchMarketplaces(keyword, statePath);
   if (hits.length === 0) {
-    log5(keyword ? `\u6CA1\u6709\u5339\u914D "${keyword}" \u7684\u63D2\u4EF6\u3002` : "\u5DF2\u52A0\u7684\u5E02\u573A\u91CC\u4E00\u4E2A\u63D2\u4EF6\u90FD\u6CA1\u6709\u3002");
+    log6(keyword ? t8("plugin.search_no_hit", { keyword }) : t8("plugin.search_all_empty"));
     return;
   }
-  log5(`${hits.length} \u4E2A\u7ED3\u679C:
+  log6(`${t8("plugin.search_count", { n: hits.length })}
 `);
   for (const hit of hits) {
     const category = hit.entry.category ? `  [${hit.entry.category}]` : "";
-    log5(`  ${hit.ref}${category}`);
-    if (hit.entry.description) log5(`    ${hit.entry.description}`);
+    log6(`  ${hit.ref}${category}`);
+    if (hit.entry.description) log6(`    ${hit.entry.description}`);
   }
-  log5(`
-\u88C5\u4E00\u4E2A\uFF1Aepoch plugin install ${hits[0]?.ref ?? "<\u5E02\u573A>/<\u63D2\u4EF6>"}`);
+  log6(`
+${t8("plugin.search_install_hint", { ref: hits[0]?.ref ?? t8("plugin.ref_placeholder") })}`);
 }
 async function toggle(name, enabled) {
   const outcome = await setPluginEnabled(name, enabled, {
     statePath: pluginsStatePath(EPOCH_HOME)
   });
   if (!outcome.ok) throw new CliError(outcome.reason);
-  log5(`\u2713 ${outcome.message}`);
+  log6(`\u2713 ${outcome.message}`);
 }
 function validateDir(dir) {
   const read = readPluginManifest(dir);
   if (!read.manifest) {
     const detail = issueDetails(read.issues).map((d) => `  - ${d}`).join("\n");
-    throw new CliError(`${dir} \u4E0D\u662F\u4E00\u4E2A\u53EF\u7528\u7684\u63D2\u4EF6:
+    throw new CliError(`${t8("plugin.validate_bad", { dir })}
 ${detail}`);
   }
   const manifest = read.manifest;
-  log5(`\u2713 \u6E05\u5355\u53EF\u7528: ${manifest.name}@${manifest.version}`);
-  if (manifest.epochVersion) log5(`  epochVersion: ${manifest.epochVersion}`);
-  for (const detail of issueDetails(read.issues)) log5(`\u26A0 ${detail}`);
-  log5("\n\u5B83\u4F1A\u5E26\u6765:");
+  log6(`\u2713 ${t8("plugin.validate_ok", { name: manifest.name, version: manifest.version })}`);
+  if (manifest.epochVersion) log6(`  epochVersion: ${manifest.epochVersion}`);
+  for (const detail of issueDetails(read.issues)) log6(`\u26A0 ${detail}`);
+  log6(`
+${t8("plugin.brings_head")}`);
   const inventory = scanPluginDir(dir, manifest.name);
-  for (const line of renderInventory(inventory)) log5(`  ${line}`);
+  for (const line of renderInventory(inventory)) log6(`  ${line}`);
   if (inventory.issues.length > 0) {
-    throw new CliError(`\u6709 ${inventory.issues.length} \u5904\u95EE\u9898\uFF0C\u4FEE\u5B8C\u518D\u88C5`);
+    throw new CliError(t8("plugin.inv_issues", { count: inventory.issues.length }));
   }
 }
-
 // src/commands/run.ts
 import { existsSync as existsSync6 } from "fs";
 import { dirname as dirname3, join as join5 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 import { isNonInteractive as isNonInteractive8, OPERATION_TYPES as OPERATION_TYPES3, PERMISSION_LEVELS as PERMISSION_LEVELS3 } from "@epoch-agent/core";
+import { t as t25 } from "@epoch-agent/infra";
 import {
   HEADLESS_INPUT_FORMATS as HEADLESS_INPUT_FORMATS2,
   HEADLESS_OUTPUT_FORMATS as HEADLESS_OUTPUT_FORMATS2,
   PROVIDER_TYPES as PROVIDER_TYPES4
 } from "@epoch-agent/protocol";
-
 // src/headless/session.ts
 import { OPERATION_TYPES } from "@epoch-agent/core";
+import { t as t12 } from "@epoch-agent/infra";
 import { buildRuntime } from "@epoch-agent/runtime";
-
 // src/commands/run-flags.ts
 import { existsSync as existsSync3 } from "fs";
 import { delimiter, resolve } from "path";
 import { isOperationType, resolveWorkspace } from "@epoch-agent/core";
+import { t as t9 } from "@epoch-agent/infra";
 import {
   HEADLESS_INPUT_FORMATS,
   HEADLESS_OUTPUT_FORMATS,
@@ -1159,18 +1289,14 @@ function parseResumeArg(raw) {
 }
 function assertResumeFlagsExclusive(opts) {
   if (opts.continue === true && opts.resume !== void 0) {
-    throw new CliError(
-      "--continue \u548C --resume \u4E0D\u80FD\u4E00\u8D77\u7528",
-      1,
-      "--continue \u63A5\u672C\u9879\u76EE\u6700\u8FD1\u4E00\u4E2A\u4F1A\u8BDD\uFF1B--resume \u6307\u5B9A\u4E00\u4E2A\uFF08\u6216\u4EA4\u4E92\u5F0F\u9009\uFF09\u3002\u53EA\u7ED9\u4E00\u4E2A"
-    );
+    throw new CliError(t9("flags.resume_conflict"), 1, t9("flags.resume_conflict_hint"));
   }
 }
 function applySettingsPath(path) {
   if (!path) return;
   const abs = resolve(path);
   if (!existsSync3(abs)) {
-    throw new CliError(`--settings \u6307\u5411\u7684\u6587\u4EF6\u4E0D\u5B58\u5728: ${path}`, 1, `\u89E3\u6790\u6210: ${abs}`);
+    throw new CliError(t9("flags.settings_missing", { path }), 1, t9("flags.resolved_to", { abs }));
   }
   process.env.EPOCH_SETTINGS = abs;
 }
@@ -1181,9 +1307,9 @@ function applyAddDirs(dirs) {
   const fatal = issues.filter((i) => i.kind !== "redundant");
   if (fatal.length > 0) {
     throw new CliError(
-      `--add-dir \u6307\u5411\u7684\u76EE\u5F55\u4E0D\u53EF\u7528: ${fatal.map((i) => i.input).join(", ")}`,
+      t9("flags.add_dir_unusable", { inputs: fatal.map((i) => i.input).join(", ") }),
       1,
-      fatal.map((i) => i.detail).join("\uFF1B")
+      fatal.map((i) => i.detail).join(t9("flags.detail_sep"))
     );
   }
   process.env.EPOCH_ADD_DIR = abs.join(delimiter);
@@ -1215,17 +1341,17 @@ function resolveOutputFormat(opts) {
   const explicit = opts.outputFormat;
   if (explicit !== void 0 && !isHeadlessOutputFormat(explicit)) {
     throw new CliError(
-      `--output-format \u4E0D\u8BA4\u8BC6: ${explicit}`,
+      t9("flags.output_format_unknown", { value: explicit }),
       1,
-      `\u53EF\u9009: ${HEADLESS_OUTPUT_FORMATS.join(" / ")}`
+      t9("flags.choices", { choices: HEADLESS_OUTPUT_FORMATS.join(" / ") })
     );
   }
   if (explicit === void 0) return opts.json === true ? "json" : "text";
   if (opts.json === true && explicit !== "json") {
     throw new CliError(
-      `--json \u548C --output-format ${explicit} \u77DB\u76FE`,
+      t9("flags.json_conflict", { value: explicit }),
       1,
-      "--json \u5C31\u662F --output-format json \u7684\u522B\u540D\uFF0C\u53EA\u7ED9\u4E00\u4E2A"
+      t9("flags.json_conflict_hint")
     );
   }
   return explicit;
@@ -1234,9 +1360,9 @@ function resolveHeadlessFormats(opts) {
   const raw = opts.inputFormat;
   if (raw !== void 0 && !isHeadlessInputFormat(raw)) {
     throw new CliError(
-      `--input-format \u4E0D\u8BA4\u8BC6: ${raw}`,
+      t9("flags.input_format_unknown", { value: raw }),
       1,
-      `\u53EF\u9009: ${HEADLESS_INPUT_FORMATS.join(" / ")}`
+      t9("flags.choices", { choices: HEADLESS_INPUT_FORMATS.join(" / ") })
     );
   }
   const input2 = raw ?? "text";
@@ -1246,11 +1372,7 @@ function resolveHeadlessFormats(opts) {
   }
   const output = resolveOutputFormat(opts);
   if (output !== "stream-json") {
-    throw new CliError(
-      `--input-format stream-json \u53EA\u80FD\u914D --output-format stream-json\uFF08\u73B0\u5728\u662F ${output}\uFF09`,
-      1,
-      "\u957F\u9A7B\u6A21\u5F0F\u4E0B\u5BBF\u4E3B\u8981\u5728\u4E8B\u4EF6\u6D41\u91CC\u6536 approval-request \u5E76\u7B54\u590D\uFF0C\u53E6\u5916\u4E24\u79CD\u8F93\u51FA\u683C\u5F0F\u6CA1\u6709\u8FD9\u4E00\u5E27 \u2014\u2014 \u6536\u4E0D\u5230\u95EE\u9898\u5374\u8981\u56DE\u7B54\u3002\u4E0D\u7ED9 --output-format \u65F6\u4F1A\u81EA\u52A8\u8865\u4E0A"
-    );
+    throw new CliError(t9("flags.stream_pair", { output }), 1, t9("flags.stream_pair_hint"));
   }
   return { input: input2, output };
 }
@@ -1261,9 +1383,9 @@ function resolveApproverProgram(raw) {
   const abs = resolve(value);
   if (!existsSync3(abs)) {
     throw new CliError(
-      `--permission-prompt-tool \u6307\u5411\u7684\u7A0B\u5E8F\u4E0D\u5B58\u5728: ${value}`,
+      t9("flags.prompt_tool_missing", { value }),
       1,
-      `\u89E3\u6790\u6210: ${abs}\u3002\u8981\u8DD1\u4E00\u4E2A\u89E3\u91CA\u5668\u5C31\u8FDE\u7740\u5199\uFF0C\u4F8B\u5982 --permission-prompt-tool "node ./approver.js"`
+      t9("flags.prompt_tool_missing_hint", { abs })
     );
   }
   return `"${abs}"`;
@@ -1281,14 +1403,15 @@ function parsePositive(raw, flag, extra = () => true) {
   const n = Number(raw);
   if (!Number.isFinite(n) || n <= 0 || !extra(n)) {
     throw new CliError(
-      `${flag} \u4E0D\u662F\u5408\u6CD5\u7684\u503C: ${raw}`,
+      t9("flags.not_a_number", { flag, raw }),
       1,
-      flag === "--max-turns" ? "\u8981\u4E00\u4E2A\u6B63\u6574\u6570\uFF0C\u4F8B\u5982 --max-turns 5" : "\u8981\u4E00\u4E2A\u6B63\u6570\uFF0C\u4F8B\u5982 0.50"
+      flag === "--max-turns" ? t9("flags.want_positive_int") : t9("flags.want_positive")
     );
   }
   return n;
 }
-
+// src/headless/driver.ts
+import { t as t11 } from "@epoch-agent/infra";
 // src/headless/emit.ts
 import {
   HEADLESS_PROTOCOL_VERSION
@@ -1297,31 +1420,14 @@ import { ApprovalRelay, QuestionRelay, toSerializable } from "@epoch-agent/runti
 var HeadlessEmitter = class {
   write;
   clock;
-  /**
-   * 审批闭包的登记表。
-   *
-   * 复用 runtime 那一份而不是自己写个 Map：它把两个很容易写错的点封住了
-   * （答复一次就出账、**界面没了不等于用户拒绝**），而 headless 这边
-   * 「宿主把 stdin 关了」和 web 那边「浏览器断连」是同一件事。
-   */
   relay = new ApprovalRelay();
-  /**
-   * 提问闭包的登记表（方案 34）。同样复用 runtime 那一份 ——
-   * 它比 `ApprovalRelay` 少一个「替用户答一个」的方法，而 headless 这边
-   * 「宿主把 stdin 关了」正是最容易顺手编一个答案的地方。
-   */
   questions = new QuestionRelay();
-  /** 全局广播游标。0 是保留值（`init`），所以其余帧从 1 开始 */
   seq = 0;
   sessionId = "";
   constructor(opts = {}) {
     this.write = opts.write ?? ((line) => void process.stdout.write(line + "\n"));
     this.clock = opts.clock ?? Date.now;
   }
-  /**
-   * 第一帧。`seq: 0`、**不带 `sessionId`** —— 它描述的是这条流本身，
-   * 会话 id 在它自己的载荷里（同 hub 的 `connected`）。
-   */
   init(info) {
     this.sessionId = info.sessionId;
     const event = {
@@ -1331,12 +1437,6 @@ var HeadlessEmitter = class {
     };
     this.write(JSON.stringify({ seq: 0, ts: this.clock(), event }));
   }
-  /**
-   * 发一个引擎事件。
-   *
-   * 返回**摘出 `requestId` 之后**的那份视图 —— 调用方（长驻模式的驱动）要靠
-   * 它知道刚发出去的审批叫什么 id。非审批事件返回 undefined 那一格。
-   */
   agentEvent(ev) {
     const serialized = toSerializable(ev);
     this.relay.track(serialized);
@@ -1344,65 +1444,27 @@ var HeadlessEmitter = class {
     this.publish(stripArtifactData(serialized.event));
     return serialized.event;
   }
-  /** 一轮的收尾帧 */
   result(result) {
     this.publish({ type: "result", ...result });
   }
-  /**
-   * 把宿主的答复接回引擎。
-   *
-   * @returns `false` = 这个 requestId 不认识（重复答复 / 上一轮的 id）。
-   *          调用方该把它当成 stderr 上的一行日志而不是错误：宿主的用户
-   *          在按钮上双击一下就会走到这里。
-   */
   respondApproval(requestId, outcome, note) {
     return this.relay.respond(requestId, outcome, note);
   }
-  /**
-   * 把宿主的提问答复接回引擎（方案 34 验收 10）。
-   *
-   * @returns `false` = 这个 requestId 不认识。处置同 `respondApproval`：
-   *          stderr 上一行日志，不是错误。
-   */
   respondQuestion(requestId, answer) {
     return this.questions.respond(requestId, answer);
   }
-  /** 还挂着几条审批没答复 */
   get pendingApprovals() {
     return this.relay.pendingCount;
   }
-  /**
-   * 还挂着几条提问没答复。
-   *
-   * 和 `pendingApprovals` 分开数：驱动器要用它判「stdin 没了还有东西在等吗」，
-   * 而合成一个数之后，日志说不清放弃的是审批还是提问 —— 排查时那正是第一个问题。
-   */
   get pendingQuestions() {
     return this.questions.pendingCount;
   }
-  /**
-   * 宿主没了（stdin 关了 / 收到 `abort`）：把挂起的审批**放弃**，返回放弃的个数。
-   *
-   * **一个 promise 都不 resolve** —— 逐个 `deny` 会让模型收到一串「用户拒绝」，
-   * 于是它认为这是有意否决，换个方式再试一遍。正确做法是放弃 + 中止整轮，
-   * 让 `AgentSession` 的 finally 去兜底。这条规矩写死在
-   * [runtime/src/serialize.ts](../../../runtime/src/serialize.ts) 的类注释里，
-   * hub 那边也守着同一条。
-   */
   abandonApprovals() {
     return this.relay.abandon();
   }
-  /**
-   * 同上，提问那一半（方案 34 验收 8）。
-   *
-   * **一个 promise 都不 resolve。** 逐个塞一个 `skipped` 进去等于告诉模型
-   * 「用户看到了、选择不答」，而真相是宿主已经不在了 —— 那个问题从没被人看到过。
-   * 放弃 + 中止之后模型看到的是「这一轮被中止了」，那才是实话。
-   */
   abandonQuestions() {
     return this.questions.abandon();
   }
-  /** 广播一帧：占一个序号、带上 sessionId、写出去 */
   publish(event) {
     const frame = {
       seq: ++this.seq,
@@ -1423,7 +1485,6 @@ function withoutData(artifact) {
   delete copy.data;
   return copy;
 }
-
 // src/headless/outcome.ts
 function emptyOutcome(diagnostics) {
   return {
@@ -1467,14 +1528,14 @@ function initInfoOf(runtime, cwd) {
     model: runtime.config.model,
     ...provider ? { provider } : {},
     permissionLevel: runtime.permissions.level(),
-    tools: runtime.tools.map((t14) => t14.name),
+    tools: runtime.tools.map((t40) => t40.name),
     usageScope: runtime.usageScope,
     diagnostics: runtime.diagnostics
   };
 }
-
 // src/headless/read.ts
 import { createInterface } from "readline";
+import { t as t10 } from "@epoch-agent/infra";
 import {
   APPROVAL_OUTCOMES,
   HEADLESS_INPUT_EVENT_TYPES,
@@ -1488,14 +1549,22 @@ function parseInputLine(line) {
   try {
     raw = JSON.parse(text);
   } catch (err2) {
-    return { ok: false, message: `\u4E0D\u662F\u5408\u6CD5 JSON\uFF08${describe2(err2)}\uFF09\uFF1A${preview(text)}` };
+    return {
+      ok: false,
+      message: t10("headless_input.bad_json", { why: describe2(err2), preview: preview(text) })
+    };
+  }
+  if (!isRecord(raw)) {
+    return { ok: false, message: t10("headless_input.not_object", { preview: preview(text) }) };
   }
-  if (!isRecord(raw)) return { ok: false, message: `\u9876\u5C42\u5FC5\u987B\u662F\u5BF9\u8C61\uFF1A${preview(text)}` };
   const type = raw["type"];
   if (typeof type !== "string" || !HEADLESS_INPUT_EVENT_TYPES.has(type)) {
     return {
       ok: false,
-      message: `\u4E0D\u8BA4\u8BC6\u7684 type: ${JSON.stringify(type)}\uFF0C\u53EF\u9009 ${[...HEADLESS_INPUT_EVENT_TYPES].join(" / ")}`
+      message: t10("headless_input.bad_type", {
+        value: JSON.stringify(type),
+        choices: [...HEADLESS_INPUT_EVENT_TYPES].join(" / ")
+      })
     };
   }
   if (type === "abort" || type === "close") return { ok: true, event: { type } };
@@ -1506,15 +1575,15 @@ function parseInputLine(line) {
 function parseUserMessage(raw) {
   const content = raw["content"];
   if (typeof content === "string") {
-    if (!content.trim()) return { ok: false, message: "user-message \u7684 content \u662F\u7A7A\u7684" };
+    if (!content.trim()) return { ok: false, message: t10("headless_input.msg_empty") };
     return { ok: true, event: { type: "user-message", content } };
   }
   if (!Array.isArray(content) || content.length === 0) {
-    return { ok: false, message: "user-message \u7684 content \u8981\u4E48\u662F\u975E\u7A7A\u5B57\u7B26\u4E32\uFF0C\u8981\u4E48\u662F\u975E\u7A7A\u90E8\u4EF6\u6570\u7EC4" };
+    return { ok: false, message: t10("headless_input.msg_bad_content") };
   }
   const bad = content.findIndex((p) => !isRecord(p) || typeof p["type"] !== "string");
   if (bad >= 0) {
-    return { ok: false, message: `user-message \u7684 content[${bad}] \u4E0D\u662F\u5E26 type \u7684\u5BF9\u8C61` };
+    return { ok: false, message: t10("headless_input.msg_bad_part", { index: bad }) };
   }
   return {
     ok: true,
@@ -1524,18 +1593,21 @@ function parseUserMessage(raw) {
 function parseApprovalResponse(raw) {
   const requestId = raw["requestId"];
   if (typeof requestId !== "string" || !requestId) {
-    return { ok: false, message: "approval-response \u7F3A requestId\uFF08\u8981\u4E00\u4E2A\u975E\u7A7A\u5B57\u7B26\u4E32\uFF09" };
+    return { ok: false, message: t10("headless_input.approval_no_id") };
   }
   const outcome = raw["outcome"];
   if (typeof outcome !== "string" || !isApprovalOutcome(outcome)) {
     return {
       ok: false,
-      message: `approval-response \u7684 outcome \u4E0D\u8BA4\u8BC6: ${JSON.stringify(outcome)}\uFF0C\u53EF\u9009 ${APPROVAL_OUTCOMES.join(" / ")}`
+      message: t10("headless_input.approval_bad_outcome", {
+        value: JSON.stringify(outcome),
+        choices: APPROVAL_OUTCOMES.join(" / ")
+      })
     };
   }
   const note = raw["note"];
   if (note !== void 0 && typeof note !== "string") {
-    return { ok: false, message: "approval-response \u7684 note \u8981\u662F\u5B57\u7B26\u4E32" };
+    return { ok: false, message: t10("headless_input.approval_bad_note") };
   }
   return {
     ok: true,
@@ -1550,17 +1622,19 @@ function parseApprovalResponse(raw) {
 function parseQuestionResponse(raw) {
   const requestId = raw["requestId"];
   if (typeof requestId !== "string" || !requestId) {
-    return { ok: false, message: "question-response \u7F3A requestId\uFF08\u8981\u4E00\u4E2A\u975E\u7A7A\u5B57\u7B26\u4E32\uFF09" };
+    return { ok: false, message: t10("headless_input.question_no_id") };
   }
   if (!isQuestionAnswerMap(raw["answers"])) {
     return {
       ok: false,
-      message: 'question-response \u7684 answers \u8981\u662F\u300C\u95EE\u53E5 \u2192 \u5B57\u7B26\u4E32\u6216\u5B57\u7B26\u4E32\u6570\u7EC4\u300D\u7684\u5BF9\u8C61\uFF08\u7B54\u4E0D\u4E0A\u6765\u5C31\u53D1 {"answers":{},"skipped":true}\uFF09'
+      message: t10("headless_input.question_bad_answers", {
+        json: '{"answers":{},"skipped":true}'
+      })
     };
   }
   const skipped = raw["skipped"];
   if (skipped !== void 0 && typeof skipped !== "boolean") {
-    return { ok: false, message: "question-response \u7684 skipped \u8981\u662F\u5E03\u5C14" };
+    return { ok: false, message: t10("headless_input.question_bad_skipped") };
   }
   return {
     ok: true,
@@ -1589,7 +1663,6 @@ function describe2(err2) {
 function preview(text) {
   return text.length > 80 ? `${text.slice(0, 80)}\u2026` : text;
 }
-
 // src/headless/driver.ts
 async function driveStreamJson(opts) {
   const { limits } = opts;
@@ -1604,7 +1677,7 @@ async function driveStreamJson(opts) {
     const parsed = parseInputLine(line);
     if (parsed === void 0) continue;
     if (!parsed.ok) {
-      warn4(`[\u8F93\u5165\u9519\u8BEF] ${parsed.message}`);
+      warn4(t11("headless_driver.bad_input", { message: parsed.message }));
       state.sawBadInput = true;
       continue;
     }
@@ -1624,45 +1697,12 @@ var DriverState = class {
   emitter;
   limits;
   warn;
-  /** 当前这一轮，idle 时为 null —— 于是「空转时收到 abort」不会毒掉下一轮 */
   turn = null;
   controller = null;
-  /**
-   * 还没轮到的用户消息，先进先出。
-   *
-   * **排队而不是拒绝**：stdin 是一条有序的单写者通道，宿主完全可能一口气写完
-   * 三条就不管了（`printf '…\n…\n' | epoch --input-format stream-json` 正是
-   * 最容易上手的用法）。拒绝的话第二条起全部无声消失。
-   *
-   * 排队**不等于交织**：下一轮要等上一轮的 `result` 之后才开，历史累积的顺序
-   * 仍然是确定的 —— hub 那边用 409 挡的是「两个标签页同时发」，
-   * 那是并发，这里是排队，两回事。
-   */
   queue = [];
-  /**
-   * stdin 已经没了（EOF 或宿主发了 `close`）。
-   *
-   * 之后再出现的审批请求没人答得了，得当场放弃 —— 否则那一轮会一直挂着。
-   */
   inputClosed = false;
-  /**
-   * 累计的退出码，取**最先出现的非 0** 那个。
-   *
-   * 显式标 `number` 而不是让它推成 `0`：`EXIT_CODES` 是 `as const`，
-   * 不标的话这个字段的类型就是字面量 `0`，`raise()` 一行都赋不进来。
-   */
   code = EXIT_CODES.SUCCESS;
-  /** 有过坏行。收尾时落 INPUT_ERROR，但不覆盖更主要的失败原因 */
   sawBadInput = false;
-  /**
-   * 处理一条入站事件。
-   *
-   * **同步返回，绝不 await 那一轮** —— 这是整个文件最容易写错的一行：
-   * 在这里 await 就等于「跑的时候不读 stdin」，而审批答复正是从 stdin 来的，
-   * 于是第一次需要确认的操作就把双方锁死。开轮之后立刻回去读下一行。
-   *
-   * @returns 是否该停止读 stdin（收到 `close`）
-   */
   handle(event) {
     if (event.type === "close") return true;
     if (event.type === "abort") {
@@ -1672,7 +1712,7 @@ var DriverState = class {
     }
     if (event.type === "approval-response") {
       if (!this.emitter.respondApproval(event.requestId, event.outcome, event.note)) {
-        this.warn(`[\u5FFD\u7565] \u4E0D\u8BA4\u8BC6\u7684 requestId: ${event.requestId}\uFF08\u91CD\u590D\u7B54\u590D\uFF1F\u4E0A\u4E00\u8F6E\u7684\uFF1F\uFF09`);
+        this.warn(t11("headless_driver.unknown_request", { id: event.requestId }));
       }
       return false;
     }
@@ -1682,7 +1722,7 @@ var DriverState = class {
         ...event.skipped ? { skipped: true } : {}
       };
       if (!this.emitter.respondQuestion(event.requestId, answer)) {
-        this.warn(`[\u5FFD\u7565] \u4E0D\u8BA4\u8BC6\u7684 requestId: ${event.requestId}\uFF08\u91CD\u590D\u7B54\u590D\uFF1F\u4E0A\u4E00\u8F6E\u7684\uFF1F\uFF09`);
+        this.warn(t11("headless_driver.unknown_request", { id: event.requestId }));
       }
       return false;
     }
@@ -1690,13 +1730,6 @@ var DriverState = class {
     this.pump();
     return false;
   }
-  /**
-   * 队首那条开跑。已经有一轮在跑就什么都不做 —— 它收尾时会回来再叫一次。
-   *
-   * **同步返回，绝不 await 那一轮**：这是整个文件最容易写错的一行。在这里 await
-   * 就等于「跑的时候不读 stdin」，而审批答复正是从 stdin 来的，于是第一次需要
-   * 确认的操作就把双方锁死。
-   */
   pump() {
     if (this.turn) return;
     const next = this.queue.shift();
@@ -1709,7 +1742,6 @@ var DriverState = class {
       this.pump();
     });
   }
-  /** 跑一轮，把事件逐个上线，收尾发 result */
   async runTurn(content, controller) {
     const out2 = emptyOutcome([]);
     try {
@@ -1742,17 +1774,6 @@ var DriverState = class {
     const limited = limitExitCode(out2, this.limits);
     if (limited !== void 0) this.raise(limited);
   }
-  /**
-   * 收摊：stdin 关了，或者宿主发了 `close`。
-   *
-   * **默认让在跑的那一轮跑完**，不是一关就杀。EOF 的含义是「没有更多输入」，
-   * 不是「把已经交代的活扔掉」—— 而 `echo '{"type":"user-message",…}' | epoch`
-   * 这种一次性用法里，stdin 恰好在消息发出的下一刻就 EOF 了，杀掉的话
-   * 这条命令永远只会吐一个 `aborted`。
-   *
-   * 唯一的例外是**有审批挂着**：那种情况下等下去是等一个永远不会来的答复。
-   * 见 `reapLostHost()`。
-   */
   async shutdown() {
     this.inputClosed = true;
     if (this.emitter.pendingApprovals > 0 || this.emitter.pendingQuestions > 0) {
@@ -1760,35 +1781,18 @@ var DriverState = class {
     }
     await this.drain();
   }
-  /**
-   * 宿主没了但还有审批 / 提问挂着：**放弃**它们 + 丢掉排队的 + 中止本轮。
-   *
-   * 逐个 `deny` 会让模型收到一串「用户拒绝」，于是它认为这是有意否决，
-   * 换个方式再试一遍。提问那边逐个塞 `skipped` 是同一类错误的另一种形态：
-   * 那等于说「用户看到了、选择不答」，而真相是宿主已经不在了。
-   * 放弃 + 中止之后模型看到的是「这一轮被中止了」。
-   * 这条规矩在 serialize.ts / hub.ts / 这里各守一遍，三处都不许改回去。
-   *
-   * 两个数分开报：排查「进程为什么退不掉」时，第一个问题就是「卡在哪种请求上」。
-   */
   reapLostHost() {
     const approvals = this.emitter.abandonApprovals();
     if (approvals > 0) {
-      this.warn(`[\u6536\u5C3E] \u653E\u5F03\u4E86 ${approvals} \u6761\u6CA1\u7B54\u590D\u7684\u5BA1\u6279\uFF0C\u672C\u8F6E\u4E2D\u6B62\uFF08\u4E0D\u6309\u62D2\u7EDD\u5904\u7406\uFF09`);
+      this.warn(t11("headless_driver.abandoned_approvals", { count: approvals }));
     }
     const questions = this.emitter.abandonQuestions();
     if (questions > 0) {
-      this.warn(`[\u6536\u5C3E] \u653E\u5F03\u4E86 ${questions} \u6761\u6CA1\u7B54\u590D\u7684\u63D0\u95EE\uFF0C\u672C\u8F6E\u4E2D\u6B62\uFF08\u4E0D\u4F2A\u9020\u7B54\u6848\uFF09`);
+      this.warn(t11("headless_driver.abandoned_questions", { count: questions }));
     }
     this.queue.length = 0;
     this.controller?.abort();
   }
-  /**
-   * 等到一轮都不剩。
-   *
-   * 必须是循环：`pump()` 挂在上一轮的 `finally` 里，所以 `await this.turn` 回来时
-   * 队列里的下一条可能已经开跑了。只 await 一次会漏掉后面全部。
-   */
   async drain() {
     while (this.turn) await this.turn.catch(() => {
     });
@@ -1797,7 +1801,6 @@ var DriverState = class {
     if (this.sawBadInput) this.raise(EXIT_CODES.INPUT_ERROR);
     return this.code;
   }
-  /** 记一个失败码。**先到先得** —— 后面那个通常是前面那个的后果 */
   raise(code) {
     if (this.code === EXIT_CODES.SUCCESS) this.code = code;
   }
@@ -1805,25 +1808,20 @@ var DriverState = class {
 function describe3(err2) {
   return err2 instanceof Error ? err2.message : String(err2);
 }
-
 // src/headless/session.ts
 async function runStreamJsonSession(opts) {
   const { policy: headless, invalid } = parseHeadlessFlags(opts);
   if (invalid.length > 0) {
     throw new CliError(
-      `--allow-operation \u4E0D\u8BA4\u8BC6: ${invalid.join(", ")}`,
+      t12("run_once.err_bad_operation", { values: invalid.join(", ") }),
       EXIT_CODES.FAILURE,
-      `\u53EF\u9009\u503C: ${OPERATION_TYPES.join(" / ")}`
+      t12("run_once.err_bad_operation_hint", { choices: OPERATION_TYPES.join(" / ") })
     );
   }
   const limits = parseCallLimits(opts);
   warnInertFlags(opts);
   const runtime = await buildRuntime({
-    // 和 CLI 的其它入口一样显式传：Ctrl+C 要走 dispose() 关掉 SQLite 连接和
-    // MCP 子进程，不能因为库的默认值是 false 就退回「硬杀进程」。
-    // 守卫用例：cli/__tests__/signal-handlers.test.ts
     installSignalHandlers: true,
-    // 见文件头第 3 条。**不传 onApprovalRequest** —— 让 runtime 用事件桥
     interactive: true,
     ...headless ? { headless } : {}
   });
@@ -1846,49 +1844,46 @@ function reportDeadRuntime(runtime) {
   const detail = runtime.diagnostics.join("; ");
   emitter.agentEvent({
     type: "error",
-    message: `provider \u4E0D\u53EF\u7528\uFF0Cagent \u65E0\u6CD5\u542F\u52A8${detail ? `\uFF1A${detail}` : ""}`
+    message: detail ? t12("headless_session.no_provider_detail", {
+      message: t12("run_once.err_no_provider"),
+      detail
+    }) : t12("run_once.err_no_provider")
   });
   emitter.result({ ok: false, reason: "error", text: "", turns: 0 });
   return EXIT_CODES.FAILURE;
 }
 function warnInertFlags(opts) {
   if ((opts.allowTool ?? []).length > 0 || (opts.allowOperation ?? []).length > 0) {
-    process.stderr.write(
-      '\xB7 --allow-tool / --allow-operation \u5728 --input-format stream-json \u4E0B\u4E0D\u53C2\u4E0E\u5224\u5B9A\uFF1A\u5BBF\u4E3B\u80FD\u7B54\u5BA1\u6279\uFF0C\u6240\u4EE5\u6BCF\u4E00\u6B21\u90FD\u4F1A\u95EE\u5B83\u3002\u8981\u7528\u9884\u6388\u6743\u5C31\u8D70 epoch "<\u4EFB\u52A1>" \u5355\u6B21\u95EE\u7B54\u90A3\u6761\u8DEF\n'
-    );
+    process.stderr.write(`${t12("headless_session.inert_allow")}
+`);
   }
   if ((opts.image ?? []).length > 0) {
-    process.stderr.write(
-      "\xB7 -i/--image \u5728 --input-format stream-json \u4E0B\u88AB\u5FFD\u7565\uFF1A\u56FE\u7247\u8D70 user-message \u7684 content \u90E8\u4EF6\u6570\u7EC4\n"
-    );
+    process.stderr.write(`${t12("headless_session.inert_image")}
+`);
   }
 }
-
 // src/update-check.ts
 import { spawn } from "child_process";
 import { existsSync as existsSync5, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync } from "fs";
 import { get } from "https";
 import { dirname as dirname2, join as join3 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
-
+import { t as t15 } from "@epoch-agent/infra";
 // src/version.ts
 import { readFileSync as readFileSync2 } from "fs";
 import { dirname, join as join2 } from "path";
 import { fileURLToPath } from "url";
-
+import { t as t14 } from "@epoch-agent/infra";
 // src/installation.ts
 import { execFileSync } from "child_process";
 import { existsSync as existsSync4, realpathSync } from "fs";
 import { join } from "path";
-import { normalizeForMatch } from "@epoch-agent/infra";
+import { normalizeForMatch, t as t13 } from "@epoch-agent/infra";
 var PATH_RULES = [
   {
     patterns: [
       "/.npm/_npx",
       "/npm/_npx",
-      // Windows：npm 的 cache 默认在 `%LocalAppData%\npm-cache`（老文档写
-      // `%AppData%\npm-cache`，两者都命中这一条），`_npx` 是它的子目录。
-      // 缺了它，Windows 上 npx 临时运行会被兜底成「npm 全局安装」。
       "/npm-cache/_npx",
       "/.cache/pnpm/dlx",
       "/.pnpm/_pnpx",
@@ -1897,17 +1892,16 @@ var PATH_RULES = [
     build: () => ({
       packageManager: "npx",
       isGlobal: false,
-      note: "\u901A\u8FC7 npx / pnpm dlx \u4E34\u65F6\u8FD0\u884C\uFF0C\u6BCF\u6B21\u90FD\u662F\u6700\u65B0\u7248\uFF0C\u65E0\u9700\u5347\u7EA7\u3002"
+      note: t13("installation.npx")
     })
   },
   {
-    // Windows 上是 `%LocalAppData%\Volta`，小写化之后和 POSIX 的 `.volta` 同形
     patterns: ["/.volta/", "/volta/"],
     build: (pkg) => ({
       packageManager: "volta",
       isGlobal: true,
       updateCommand: `volta install ${pkg}@latest`,
-      note: "\u901A\u8FC7 Volta \u5B89\u88C5\u3002"
+      note: t13("installation.volta")
     })
   },
   {
@@ -1921,16 +1915,13 @@ var PATH_RULES = [
       packageManager: "pnpm",
       isGlobal: true,
       updateCommand: `pnpm add -g ${pkg}@latest`,
-      note: "\u901A\u8FC7 pnpm \u5168\u5C40\u5B89\u88C5\u3002"
+      note: t13("installation.pnpm")
     })
   },
   {
     patterns: [
       "/.yarn/global",
       "/yarn/global",
-      // Windows：yarn 1.5.1 起全局目录多了一层，变成 `Yarn\Data\global`；
-      // 更早的版本是 `Yarn\config\global`。两条都收，否则 yarn 全局装的用户
-      // 会被告知去跑 `npm install -g`。
       "/yarn/data/global",
       "/yarn/config/global"
     ],
@@ -1938,7 +1929,7 @@ var PATH_RULES = [
       packageManager: "yarn",
       isGlobal: true,
       updateCommand: `yarn global add ${pkg}@latest`,
-      note: "\u901A\u8FC7 yarn \u5168\u5C40\u5B89\u88C5\u3002"
+      note: t13("installation.yarn")
     })
   },
   {
@@ -1947,7 +1938,7 @@ var PATH_RULES = [
       packageManager: "bun",
       isGlobal: true,
       updateCommand: `bun add -g ${pkg}@latest`,
-      note: "\u901A\u8FC7 bun \u5168\u5C40\u5B89\u88C5\u3002"
+      note: t13("installation.bun")
     })
   }
 ];
@@ -1967,7 +1958,7 @@ function detectHomebrew(realPath, formula) {
         packageManager: "homebrew",
         isGlobal: true,
         updateCommand: `brew upgrade ${formula}`,
-        note: "\u901A\u8FC7 Homebrew \u5B89\u88C5\u3002"
+        note: t13("installation.homebrew")
       };
     }
   } catch {
@@ -1992,11 +1983,13 @@ function detectLocalInstall(matchPath, cwd) {
   return {
     packageManager: manager,
     isGlobal: false,
-    note: "\u4F5C\u4E3A\u9879\u76EE\u4F9D\u8D56\u5B89\u88C5\uFF0C\u8BF7\u5728\u9879\u76EE\u7684 package.json \u91CC\u5347\u7EA7\u7248\u672C\u3002"
+    note: t13("installation.local")
   };
 }
 function getInstallationInfo(packageName, cliPath = process.argv[1]) {
-  if (!cliPath) return { packageManager: "unknown", isGlobal: false, note: "\u8BC6\u522B\u4E0D\u51FA\u5B89\u88C5\u65B9\u5F0F\u3002" };
+  if (!cliPath) {
+    return { packageManager: "unknown", isGlobal: false, note: t13("installation.unknown") };
+  }
   try {
     const realPath = realpathSync(cliPath).replace(/\\/g, "/");
     const matchPath = normalizeForMatch(realPath);
@@ -2008,7 +2001,7 @@ function getInstallationInfo(packageName, cliPath = process.argv[1]) {
       return {
         packageManager: "source",
         isGlobal: false,
-        note: "\u76F4\u63A5\u4ECE\u4ED3\u5E93\u6E90\u7801\u8FD0\u884C\uFF0C\u7528 git pull \u66F4\u65B0\u3002"
+        note: t13("installation.source")
       };
     }
     const brew = detectHomebrew(realPath, packageName.replace(/^@[^/]+\//, ""));
@@ -2019,13 +2012,12 @@ function getInstallationInfo(packageName, cliPath = process.argv[1]) {
       packageManager: "npm",
       isGlobal: true,
       updateCommand: `npm install -g ${packageName}@latest`,
-      note: "\u901A\u8FC7 npm \u5168\u5C40\u5B89\u88C5\u3002"
+      note: t13("installation.npm")
     };
   } catch {
-    return { packageManager: "unknown", isGlobal: false, note: "\u8BC6\u522B\u4E0D\u51FA\u5B89\u88C5\u65B9\u5F0F\u3002" };
+    return { packageManager: "unknown", isGlobal: false, note: t13("installation.unknown") };
   }
 }
-
 // src/version.ts
 function readVersion() {
   const here = dirname(fileURLToPath(import.meta.url));
@@ -2047,10 +2039,13 @@ function describeVersion(packageName) {
   return [
     VERSION,
     `Node: ${process.version} (${process.platform}/${process.arch})`,
-    `\u5B89\u88C5: ${info.packageManager}${info.isGlobal ? "\uFF08\u5168\u5C40\uFF09" : ""} \u2014\u2014 ${info.note}`
+    t14("version.install", {
+      manager: info.packageManager,
+      global: info.isGlobal ? t14("installation.global_suffix") : "",
+      note: info.note
+    })
   ].join("\n");
 }
-
 // src/update-check.ts
 var UPDATE_CHECK_SUBCOMMAND = "__update-check";
 var UPDATE_CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
@@ -2190,7 +2185,7 @@ function readUpdateNotice(options = {}) {
     name,
     current: version,
     latest: cache.latest,
-    message: `${name} \u6709\u65B0\u7248\u672C\uFF1A${version} \u2192 ${cache.latest}\uFF08\u8FD0\u884C epoch upgrade \u67E5\u770B\u5347\u7EA7\u65B9\u5F0F\uFF09`
+    message: t15("update_check.available", { name, current: version, latest: cache.latest })
   };
 }
 async function refreshUpdateCache(options = {}) {
@@ -2219,7 +2214,7 @@ async function refreshUpdateCache(options = {}) {
     name,
     current: version,
     latest,
-    message: `${name} \u6709\u65B0\u7248\u672C\uFF1A${version} \u2192 ${latest}\uFF08\u8FD0\u884C epoch upgrade \u67E5\u770B\u5347\u7EA7\u65B9\u5F0F\uFF09`
+    message: t15("update_check.available", { name, current: version, latest })
   };
 }
 function scheduleUpdateCheck(options = {}) {
@@ -2252,13 +2247,12 @@ ${notice.message}
     }
   });
 }
-
 // src/worktree.ts
 import { execFile } from "child_process";
 import { randomBytes } from "crypto";
 import { mkdirSync as mkdirSync3 } from "fs";
 import { basename, join as join4, resolve as resolve2 } from "path";
-import { worktreesDir } from "@epoch-agent/infra";
+import { t as t16, worktreesDir } from "@epoch-agent/infra";
 var TIMEOUT_MS = 6e4;
 function git(args, cwd) {
   return new Promise((done) => {
@@ -2279,17 +2273,13 @@ function git(args, cwd) {
   });
 }
 function firstLine(text) {
-  return text.trim().split("\n")[0]?.trim() ?? "\u672A\u77E5\u539F\u56E0";
+  return text.trim().split("\n")[0]?.trim() ?? t16("git.unknown_reason");
 }
 async function createWorktree(cwd = process.cwd(), container = worktreesDir()) {
   const repoRoot = await resolveRepoRoot(cwd);
   const head = await git(["rev-parse", "HEAD"], repoRoot);
   if (!head.ok) {
-    throw new CliError(
-      "\u8FD9\u4E2A\u4ED3\u5E93\u8FD8\u6CA1\u6709\u4EFB\u4F55\u63D0\u4EA4\uFF0C\u5EFA\u4E0D\u51FA worktree",
-      1,
-      "worktree \u5FC5\u987B\u4ECE\u67D0\u4E2A commit \u957F\u51FA\u6765\u3002\u5148 git commit \u4E00\u6B21\uFF0C\u6216\u8005\u53BB\u6389 --worktree"
-    );
+    throw new CliError(t16("worktree.err_no_commit"), 1, t16("worktree.err_no_commit_hint"));
   }
   const baseRef = head.stdout.trim();
   const shortId = randomBytes(3).toString("hex");
@@ -2298,24 +2288,20 @@ async function createWorktree(cwd = process.cwd(), container = worktreesDir()) {
   mkdirSync3(container, { recursive: true });
   const added = await git(["worktree", "add", "-b", branch, path, baseRef], repoRoot);
   if (!added.ok) {
-    throw new CliError(`\u5EFA worktree \u5931\u8D25\uFF1A${path}`, 1, firstLine(added.stderr));
+    throw new CliError(t16("worktree.err_add_failed", { path }), 1, firstLine(added.stderr));
   }
   return { repoRoot, path, branch, baseRef };
 }
 async function resolveRepoRoot(cwd) {
   const root = await git(["rev-parse", "--show-toplevel"], cwd);
   if (root.missing) {
-    throw new CliError(
-      "--worktree \u8981\u7528 git\uFF0C\u4F46\u5B83\u4E0D\u5728 PATH \u91CC",
-      1,
-      "\u88C5\u4E00\u4E2A git\uFF0C\u6216\u8005\u53BB\u6389 --worktree"
-    );
+    throw new CliError(t16("worktree.err_git_missing"), 1, t16("worktree.err_git_missing_hint"));
   }
   if (!root.ok) {
     throw new CliError(
-      "--worktree \u53EA\u80FD\u5728 git \u4ED3\u5E93\u91CC\u7528",
+      t16("worktree.err_not_a_repo"),
       1,
-      `\u5F53\u524D\u76EE\u5F55 ${cwd} \u4E0D\u5728\u4EFB\u4F55 git \u4ED3\u5E93\u91CC\uFF08${firstLine(root.stderr)}\uFF09`
+      t16("worktree.err_not_a_repo_hint", { cwd, why: firstLine(root.stderr) })
     );
   }
   return resolve2(root.stdout.trim());
@@ -2333,16 +2319,18 @@ async function inspectWorktree(session) {
   };
 }
 function worktreeKeepReason(state) {
-  if (state.dirty === null || state.ahead === null) return "\u67E5\u4E0D\u51FA\u5B83\u5E72\u51C0\u4E0D\u5E72\u51C0";
-  if (state.dirty > 0) return `\u8FD8\u6709 ${state.dirty} \u5904\u672A\u63D0\u4EA4\u6539\u52A8`;
-  if (state.ahead > 0) return `\u6709 ${state.ahead} \u4E2A\u63D0\u4EA4\u8FD8\u6CA1\u5408\u56DE\u53BB`;
+  if (state.dirty === null || state.ahead === null) return t16("worktree.keep_unknown");
+  if (state.dirty > 0) return t16("worktree.keep_dirty", { count: state.dirty });
+  if (state.ahead > 0) return t16("worktree.keep_ahead", { count: state.ahead });
   return null;
 }
 function worktreeBanner(session) {
+  const dir = t16("worktree.banner_dir", { path: session.path });
+  const branch = t16("worktree.banner_branch", { branch: session.branch });
   return `
-\u{1F33F} \u5728\u9694\u79BB\u7684 worktree \u91CC\u8DD1\u8FD9\u4E00\u6B21
-   \u76EE\u5F55 ${session.path}
-   \u5206\u652F ${session.branch}
+${t16("worktree.banner")}
+   ${dir}
+   ${branch}
 `;
 }
 async function finishWorktree(session, opts) {
@@ -2350,23 +2338,25 @@ async function finishWorktree(session, opts) {
   const state = await inspectWorktree(session);
   const forced = worktreeKeepReason(state);
   if (forced !== null) {
-    print(`
-\u{1F33F} worktree \u4FDD\u7559\uFF08${forced}\uFF09\uFF1A
+    print(
+      `
+${t16("worktree.kept_forced", { reason: forced })}
    ${session.path}
-   \u5206\u652F ${session.branch}`);
+   ${t16("worktree.banner_branch", { branch: session.branch })}`
+    );
     return;
   }
   const remove = opts.interactive ? await (opts.ask ?? askRemove)(session) : false;
   if (!remove) {
     print(`
-\u{1F33F} worktree \u4FDD\u7559\u5728 ${session.path}\uFF08\u5206\u652F ${session.branch}\uFF09`);
+${t16("worktree.kept", { path: session.path, branch: session.branch })}`);
     return;
   }
   const failure = await removeWorktree(session);
   print(
     failure === null ? `
-\u{1F33F} \u5DF2\u5220\u9664 worktree ${session.path}\uFF08\u5206\u652F ${session.branch}\uFF09` : `
-\u26A0 worktree \u6CA1\u5220\u5E72\u51C0\uFF0C\u7559\u7740\u4E86\uFF1A${session.path}
+${t16("worktree.removed", { path: session.path, branch: session.branch })}` : `
+${t16("worktree.remove_failed", { path: session.path })}
    ${failure}`
   );
 }
@@ -2374,56 +2364,65 @@ async function removeWorktree(session) {
   const removed = await git(["worktree", "remove", session.path], session.repoRoot);
   if (!removed.ok) return firstLine(removed.stderr);
   const branch = await git(["branch", "-D", session.branch], session.repoRoot);
-  return branch.ok ? null : `\u76EE\u5F55\u5220\u4E86\uFF0C\u5206\u652F ${session.branch} \u6CA1\u5220\u6389\uFF1A${firstLine(branch.stderr)}`;
+  return branch.ok ? null : t16("worktree.branch_remove_failed", {
+    branch: session.branch,
+    why: firstLine(branch.stderr)
+  });
 }
 async function askRemove(session) {
   const { confirm } = await import("@inquirer/prompts");
   try {
     return await confirm({
-      message: `worktree ${session.path} \u6CA1\u6709\u4EFB\u4F55\u6539\u52A8\uFF0C\u5220\u6389\u5B83\u5417\uFF1F`,
+      message: t16("worktree.ask_remove", { path: session.path }),
       default: false
     });
   } catch {
     return false;
   }
 }
-
 // src/commands/run-once.ts
 import { formatUsd, imageFromPath, OPERATION_TYPES as OPERATION_TYPES2 } from "@epoch-agent/core";
+import { t as t22 } from "@epoch-agent/infra";
 import {
   promptTokens
 } from "@epoch-agent/protocol";
 import { buildRuntime as buildRuntime2, listBackgroundTasks } from "@epoch-agent/runtime";
-
 // src/approval.ts
 import {
-  isNonInteractive as isNonInteractive3,
-  PLAN_OUTCOME_LABELS
+  isNonInteractive as isNonInteractive3
 } from "@epoch-agent/core";
-var TYPE_LABEL = {
-  file_read: "\u8BFB\u6587\u4EF6",
-  file_write: "\u5199\u6587\u4EF6",
-  command: "\u6267\u884C\u547D\u4EE4",
-  network: "\u7F51\u7EDC\u8BF7\u6C42",
-  code_exec: "\u5728\u6C99\u7BB1\u5185\u6267\u884C\u4EE3\u7801"
-};
+import { t as t17 } from "@epoch-agent/infra";
+function typeLabel(type) {
+  switch (type) {
+    case "file_read":
+      return t17("tui.approval.type_file_read");
+    case "file_write":
+      return t17("tui.approval.type_file_write");
+    case "command":
+      return t17("tui.approval.type_command");
+    case "network":
+      return t17("tui.approval.type_network");
+    case "code_exec":
+      return t17("tui.approval.type_code_exec");
+  }
+}
 function formatApprovalRequest(req) {
   if (req.plan) {
     return [
-      "\u25A3 \u6A21\u578B\u4EA4\u4E86\u4E00\u4EFD\u8BA1\u5212\uFF0C\u7B49\u4F60\u6279",
-      `   \u8FDB\u5165 plan \u6A21\u5F0F\u524D\u7684\u6743\u9650\u7EA7\u522B: ${req.plan.previousLevel}`,
+      t17("approval.plan_head"),
+      t17("approval.plan_previous_level", { level: req.plan.previousLevel }),
       "",
       ...req.plan.markdown.split("\n").map((l) => `   ${l}`)
     ];
   }
   const lines = [
-    `\u26A0\uFE0F  ${req.toolName} \u8BF7\u6C42${TYPE_LABEL[req.type]}`,
-    `   \u76EE\u6807: ${req.target || "(\u65E0)"}`
+    t17("approval.asks", { tool: req.toolName, what: typeLabel(req.type) }),
+    t17("approval.target", { target: req.target || t17("approval.target_none") })
   ];
   if (req.detail && req.detail !== req.target) {
-    lines.push(`   \u8BE6\u60C5: ${req.detail.slice(0, 300)}`);
+    lines.push(t17("approval.detail", { detail: req.detail.slice(0, 300) }));
   }
-  if (req.reason) lines.push(`   \u539F\u56E0: ${req.reason}`);
+  if (req.reason) lines.push(t17("approval.reason", { reason: req.reason }));
   return lines;
 }
 function createInteractiveApproval(opts = {}) {
@@ -2431,12 +2430,15 @@ function createInteractiveApproval(opts = {}) {
   return async (req) => {
     if (!interactive()) {
       if (opts.permission?.()?.isPreauthorized(req.toolName, req.type)) {
-        console.error(`[\u5DF2\u653E\u884C] headless \u9884\u6388\u6743: ${req.toolName} ${req.target}`);
+        console.error(t17("approval.headless_allowed", { tool: req.toolName, target: req.target }));
         return "allow-once";
       }
       console.error(
-        `[\u5DF2\u62D2\u7EDD] \u975E\u4EA4\u4E92\u73AF\u5883\u65E0\u6CD5\u786E\u8BA4: ${req.toolName} ${req.target}
-\u5982\u9700\u653E\u884C\uFF0C\u52A0 --allow-tool ${req.toolName}\u3001\u5728 config.yaml \u91CC\u914D headless.allowTools\uFF0C\u6216\u5728 ~/.epoch/policies/ \u52A0\u7B56\u7565\u89C4\u5219\u3002`
+        `${t17("approval.headless_denied", {
+          tool: req.toolName,
+          target: req.target
+        })}
+${t17("approval.headless_denied_hint", { tool: req.toolName })}`
       );
       return "deny";
     }
@@ -2445,12 +2447,12 @@ function createInteractiveApproval(opts = {}) {
     const { select: select2 } = await import("@inquirer/prompts");
     try {
       return await select2({
-        message: "\u662F\u5426\u5141\u8BB8\uFF1F",
+        message: t17("approval.ask"),
         choices: [
-          { name: "\u5141\u8BB8\u4E00\u6B21", value: "allow-once" },
-          { name: "\u672C\u4F1A\u8BDD\u5185\u59CB\u7EC8\u5141\u8BB8", value: "allow-session" },
-          { name: "\u6C38\u4E45\u5141\u8BB8\uFF08\u5199\u5165 approvals.json\uFF09", value: "allow-always" },
-          { name: "\u62D2\u7EDD", value: "deny" }
+          { name: t17("tui.approval.allow_once"), value: "allow-once" },
+          { name: t17("tui.approval.allow_session"), value: "allow-session" },
+          { name: t17("approval.allow_always_cli"), value: "allow-always" },
+          { name: t17("tui.approval.deny"), value: "deny" }
         ],
         default: "allow-once"
       });
@@ -2461,27 +2463,29 @@ function createInteractiveApproval(opts = {}) {
 }
 async function askPlan(proposal) {
   const { input: input2, select: select2 } = await import("@inquirer/prompts");
-  const choices = [
+  const choices3 = [
     ...proposal.canExecute ? [
       {
-        name: `${PLAN_OUTCOME_LABELS["plan-execute"]}\uFF08\u6743\u9650\u56DE\u5230 ${proposal.previousLevel}\uFF09`,
+        name: t17("approval.plan_execute_back", {
+          label: t17("approval.plan_execute"),
+          level: proposal.previousLevel
+        }),
         value: "plan-execute"
       }
     ] : [],
-    { name: PLAN_OUTCOME_LABELS["plan-readonly"], value: "plan-readonly" },
-    { name: PLAN_OUTCOME_LABELS["plan-revise"], value: "plan-revise" },
-    { name: PLAN_OUTCOME_LABELS.deny, value: "deny" }
+    { name: t17("approval.plan_readonly"), value: "plan-readonly" },
+    { name: t17("approval.plan_revise"), value: "plan-revise" },
+    { name: t17("approval.deny"), value: "deny" }
   ];
   try {
-    const outcome = await select2({ message: "\u8FD9\u4EFD\u8BA1\u5212\uFF1F", choices });
+    const outcome = await select2({ message: t17("approval.plan_ask"), choices: choices3 });
     if (outcome !== "plan-revise") return outcome;
-    const note = (await input2({ message: "\u8981\u6539\u4EC0\u4E48\uFF1F" })).trim();
+    const note = (await input2({ message: t17("approval.plan_revise_ask") })).trim();
     return note ? { outcome, note } : outcome;
   } catch {
     return "deny";
   }
 }
-
 // src/headless/approver.ts
 import { spawn as spawn2 } from "child_process";
 import {
@@ -2489,6 +2493,7 @@ import {
   matchPreauthorization,
   mergeHeadlessPolicy
 } from "@epoch-agent/core";
+import { t as t18 } from "@epoch-agent/infra";
 import { APPROVAL_OUTCOMES as APPROVAL_OUTCOMES2, isApprovalOutcome as isApprovalOutcome2 } from "@epoch-agent/protocol";
 var APPROVER_TIMEOUT_MS = 6e4;
 var MAX_STDOUT_BYTES = 64 * 1024;
@@ -2498,22 +2503,25 @@ function clip(s) {
 }
 function parseApproverVerdict(stdout) {
   const text = stdout.trim();
-  if (!text) return { ok: false, why: "\u5BA1\u6279\u7A0B\u5E8F\u6CA1\u6709\u8F93\u51FA" };
+  if (!text) return { ok: false, why: t18("approver.no_output") };
   let raw;
   try {
     raw = JSON.parse(text);
   } catch {
-    return { ok: false, why: `\u5BA1\u6279\u7A0B\u5E8F\u7684\u8F93\u51FA\u4E0D\u662F JSON: ${clip(text)}` };
+    return { ok: false, why: t18("approver.not_json", { text: clip(text) }) };
   }
   if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
-    return { ok: false, why: `\u5BA1\u6279\u7A0B\u5E8F\u7684\u8F93\u51FA\u4E0D\u662F\u4E00\u4E2A JSON \u5BF9\u8C61: ${clip(text)}` };
+    return { ok: false, why: t18("approver.not_object", { text: clip(text) }) };
   }
   const rec = raw;
   const outcome = rec["outcome"];
   if (typeof outcome !== "string" || !isApprovalOutcome2(outcome)) {
     return {
       ok: false,
-      why: `\u5BA1\u6279\u7A0B\u5E8F\u7ED9\u7684 outcome \u4E0D\u8BA4\u8BC6: ${clip(String(outcome))}\uFF08\u53EF\u9009: ${APPROVAL_OUTCOMES2.join(" / ")}\uFF09`
+      why: t18("approver.bad_outcome", {
+        value: clip(String(outcome)),
+        choices: APPROVAL_OUTCOMES2.join(" / ")
+      })
     };
   }
   const note = rec["note"];
@@ -2542,12 +2550,11 @@ function askExternalApprover(program2, payload, opts = {}) {
     const child = spawn2(program2, {
       shell: true,
       ...opts.cwd ? { cwd: opts.cwd } : {},
-      // stdin/stdout 是这条问答的通道，stderr 让给它自己打日志
       stdio: ["pipe", "pipe", "inherit"]
     });
     const timer = setTimeout(() => {
       child.kill("SIGKILL");
-      settle({ ok: false, why: `\u5BA1\u6279\u7A0B\u5E8F ${timeoutMs}ms \u5185\u6CA1\u6709\u7B54\u590D` });
+      settle({ ok: false, why: t18("approver.timeout", { ms: timeoutMs }) });
     }, timeoutMs);
     const done = (v) => {
       clearTimeout(timer);
@@ -2557,15 +2564,15 @@ function askExternalApprover(program2, payload, opts = {}) {
       out2 += d.toString("utf-8");
       if (out2.length > MAX_STDOUT_BYTES) {
         child.kill("SIGKILL");
-        done({ ok: false, why: `\u5BA1\u6279\u7A0B\u5E8F\u8F93\u51FA\u8D85\u8FC7 ${MAX_STDOUT_BYTES} \u5B57\u8282\u8FD8\u6CA1\u6536\u5C3E` });
+        done({ ok: false, why: t18("approver.too_much_output", { bytes: MAX_STDOUT_BYTES }) });
       }
     });
     child.on("error", (err2) => {
-      done({ ok: false, why: `\u5BA1\u6279\u7A0B\u5E8F\u8D77\u4E0D\u6765: ${err2.message}` });
+      done({ ok: false, why: t18("approver.spawn_failed", { message: err2.message }) });
     });
     child.on("close", (code) => {
       if (code !== 0) {
-        done({ ok: false, why: `\u5BA1\u6279\u7A0B\u5E8F\u9000\u51FA\u7801 ${code ?? -1}` });
+        done({ ok: false, why: t18("approver.bad_exit", { code: code ?? -1 }) });
         return;
       }
       done(parseApproverVerdict(out2));
@@ -2598,55 +2605,68 @@ function createExternalApproval(opts) {
   return async (req) => {
     const hit = req.plan ? null : opts.preauth?.(req) ?? null;
     if (hit) {
-      write(`[\u9884\u6388\u6743\u653E\u884C] ${req.toolName} ${req.target} \u2014\u2014 ${hit}\uFF08\u6CA1\u8D77\u5BA1\u6279\u7A0B\u5E8F\uFF09
-`);
+      write(
+        `${t18("approver.audit_preauth", {
+          tool: req.toolName,
+          target: req.target,
+          reason: hit
+        })}
+`
+      );
       return "allow-once";
     }
     const verdict = await ask(payloadOf(req, cwd, opts.sessionId?.()));
     if (!verdict.ok) {
-      write(`[\u5916\u90E8\u5BA1\u6279\u62D2\u7EDD] ${req.toolName} ${req.target} \u2014\u2014 ${verdict.why}\uFF0C\u6309\u62D2\u7EDD\u5904\u7406
-`);
+      write(
+        `${t18("approver.audit_rejected", {
+          tool: req.toolName,
+          target: req.target,
+          why: verdict.why
+        })}
+`
+      );
       return "deny";
     }
     const { outcome } = verdict.answer;
-    const verb = outcome === "deny" ? "\u62D2\u7EDD" : "\u653E\u884C";
-    write(`[\u5916\u90E8\u5BA1\u6279${verb}] ${req.toolName} ${req.target} \u2014\u2014 ${outcome}
-`);
+    const vars = { tool: req.toolName, target: req.target, outcome };
+    write(
+      `${outcome === "deny" ? t18("approver.audit_denied", vars) : t18("approver.audit_allowed", vars)}
+`
+    );
     return verdict.answer;
   };
 }
-
 // src/headless/tasks.ts
 import { describeBackgroundTask } from "@epoch-agent/core";
-function backgroundTaskSummary(tasks) {
+import { t as t19 } from "@epoch-agent/infra";
+function backgroundTaskSummary(all) {
+  const tasks = all.filter((t40) => t40.kind === "command");
   if (tasks.length === 0) return "";
-  const running = tasks.filter((t14) => t14.status === "running").length;
-  const head = running > 0 ? `\u2699 \u540E\u53F0\u4EFB\u52A1 ${tasks.length} \u4E2A\uFF0C\u5176\u4E2D ${running} \u4E2A\u8FD8\u5728\u8DD1 \u2014\u2014 epoch \u9000\u51FA\u65F6\u4F1A\u4E00\u5E76\u7EC8\u6B62` : `\u2699 \u540E\u53F0\u4EFB\u52A1 ${tasks.length} \u4E2A\uFF0C\u90FD\u5DF2\u7ECF\u7ED3\u675F`;
-  return [head, ...tasks.map((t14) => `  ${describeBackgroundTask(t14)}`)].join("\n");
+  const running = tasks.filter((t40) => t40.status === "running").length;
+  const head = running > 0 ? t19("background_tasks.head_running", { total: tasks.length, running }) : t19("background_tasks.head_done", { total: tasks.length });
+  return [head, ...tasks.map((t40) => `  ${describeBackgroundTask(t40)}`)].join("\n");
 }
-
 // src/import-prompt.ts
 import {
   createImportGate,
   ImportTrustStore,
   isNonInteractive as isNonInteractive6,
-  loadConfig as loadConfig2,
+  loadConfig as loadConfig3,
   resolveProjectRoot as resolveProjectRoot2,
   scanInstructions,
   setImportGate,
   TrustManager as TrustManager2
 } from "@epoch-agent/core";
-import { trustedImportsPath, trustPath as trustPath2 } from "@epoch-agent/infra";
-
+import { t as t21, trustedImportsPath, trustPath as trustPath2 } from "@epoch-agent/infra";
 // src/trust-prompt.ts
 import {
   findProjectInstructions,
   isNonInteractive as isNonInteractive5,
-  loadConfig,
+  loadConfig as loadConfig2,
   resolveProjectRoot,
   TrustManager
 } from "@epoch-agent/core";
-import { trustPath } from "@epoch-agent/infra";
+import { t as t20, trustPath } from "@epoch-agent/infra";
 function trustPromptTarget(deps) {
   if (!deps.gateEnabled) return null;
   if (!deps.interactive) return null;
@@ -2659,37 +2679,38 @@ function trustPromptTarget(deps) {
 function applyTrustChoice(store, root, choice) {
   if (choice.kind === "trust") {
     store.record(root, "trusted", choice.scope);
-    const suffix = choice.scope === "directory-tree" ? "\uFF08\u542B\u5B50\u76EE\u5F55\uFF09" : "";
-    return `\u2713 \u5DF2\u4FE1\u4EFB ${root}${suffix}\uFF0C\u672C\u76EE\u5F55\u7684\u9879\u76EE\u6307\u4EE4\u4F1A\u52A0\u8F7D`;
+    const suffix = choice.scope === "directory-tree" ? t20("trust_prompt.granted_tree_suffix") : "";
+    return t20("trust_prompt.granted", { root, suffix });
   }
   if (choice.kind === "never") {
     store.record(root, "untrusted", "directory");
-    return `\u2717 \u5DF2\u8BB0\u4E3A\u4E0D\u4FE1\u4EFB ${root}\uFF0C\u4E4B\u540E\u4E0D\u518D\u8BE2\u95EE\uFF08epoch trust rm ${root} \u53EF\u64A4\u9500\uFF09`;
+    return t20("trust_prompt.denied", { root });
   }
-  return "\u672C\u6B21\u4E0D\u52A0\u8F7D\u9879\u76EE\u6307\u4EE4\u3002\u60F3\u8BA9\u5B83\u751F\u6548\u8FD0\u884C epoch trust add";
+  return t20("trust_prompt.skipped");
 }
 function trustPromptMessage(target) {
   return [
     `
-\u26A0 \u68C0\u6D4B\u5230\u9879\u76EE\u6307\u4EE4\u6587\u4EF6\uFF1A${target.instructionsPath}`,
-    "  \u5B83\u7531\u4ED3\u5E93\u4F5C\u8005\u7F16\u5199\uFF0C\u4E00\u65E6\u52A0\u8F7D\u5C31\u4F1A\u76F4\u63A5\u8FDB\u5165 system prompt\uFF0C\u7B49\u4E8E\u8BA9\u8FD9\u4E2A\u4ED3\u5E93",
-    "  \u6307\u6325\u4F60\u7684 agent\u3002\u6240\u4EE5\u672A\u7ECF\u786E\u8BA4\u4E0D\u4F1A\u52A0\u8F7D\u3002",
+${t20("trust_prompt.head", { path: target.instructionsPath })}`,
+    `  ${t20("trust_prompt.why")}`,
     ""
   ].join("\n");
 }
-var CHOICES = [
-  { name: "\u672C\u6B21\u4E0D\u52A0\u8F7D\uFF08\u4E0B\u6B21\u8FD8\u4F1A\u95EE\uFF09", value: { kind: "skip" } },
-  { name: `\u4FE1\u4EFB\u672C\u76EE\u5F55`, value: { kind: "trust", scope: "directory" } },
-  { name: "\u4FE1\u4EFB\u672C\u76EE\u5F55\u53CA\u5176\u6240\u6709\u5B50\u76EE\u5F55", value: { kind: "trust", scope: "directory-tree" } },
-  { name: "\u6C38\u4E0D\u4FE1\u4EFB\u672C\u76EE\u5F55\uFF08\u4E0D\u518D\u8BE2\u95EE\uFF09", value: { kind: "never" } }
-];
+function choices() {
+  return [
+    { name: t20("trust_prompt.choice_skip"), value: { kind: "skip" } },
+    { name: t20("trust_prompt.choice_dir"), value: { kind: "trust", scope: "directory" } },
+    { name: t20("trust_prompt.choice_tree"), value: { kind: "trust", scope: "directory-tree" } },
+    { name: t20("trust_prompt.choice_never"), value: { kind: "never" } }
+  ];
+}
 function restoreStdinDefault() {
   const stdin = process.stdin;
   if (stdin.isTTY) stdin.setRawMode?.(false);
   stdin.resume();
 }
 async function maybePromptForTrust(opts = {}) {
-  const config = opts.config ?? loadConfig();
+  const config = opts.config ?? loadConfig2();
   const store = opts.store ?? new TrustManager(trustPath(config.homeDir));
   const print = opts.print ?? ((msg) => process.stdout.write(msg + "\n"));
   const target = trustPromptTarget({
@@ -2710,23 +2731,27 @@ async function maybePromptForTrust(opts = {}) {
   try {
     print(applyTrustChoice(store, target.root, choice));
   } catch (err2) {
-    print(`\u26A0 \u4FE1\u4EFB\u8BB0\u5F55\u5199\u5165\u5931\u8D25\uFF0C\u672C\u6B21\u4ECD\u6309\u4E0D\u4FE1\u4EFB\u5904\u7406\uFF1A${err2 instanceof Error ? err2.message : err2}`);
+    print(
+      t20("trust_prompt.write_failed", {
+        message: err2 instanceof Error ? err2.message : String(err2)
+      })
+    );
   }
   return true;
 }
 async function askTrustChoice(_target) {
   const { select: select2 } = await import("@inquirer/prompts");
   try {
+    const options = choices();
     return await select2({
-      message: "\u662F\u5426\u4FE1\u4EFB\u672C\u76EE\u5F55\uFF1F",
-      choices: [...CHOICES],
-      default: CHOICES[0]?.value
+      message: t20("trust_prompt.ask"),
+      choices: [...options],
+      default: options[0]?.value
     });
   } catch {
     return null;
   }
 }
-
 // src/import-prompt.ts
 function externalImportTargets(deps) {
   if (!deps.gateEnabled) return [];
@@ -2752,37 +2777,38 @@ function externalImportTargets(deps) {
 function importPromptMessage(target) {
   return [
     `
-\u26A0 ${target.from} \u5F15\u7528\u4E86\u9879\u76EE\u4E4B\u5916\u7684\u6587\u4EF6\uFF1A`,
+${t21("import_prompt.head", { from: target.from })}`,
     `    ${target.path}`,
-    `  \uFF08\u6587\u4EF6\u91CC\u5199\u7684\u662F @${target.spec}\uFF09`,
-    "  \u5B83\u4E0D\u5728\u8FD9\u4E2A\u4ED3\u5E93\u91CC\uFF0C\u4E5F\u6CA1\u6709\u88AB\u300C\u4FE1\u4EFB\u8FD9\u4E2A\u76EE\u5F55\u300D\u90A3\u6B21\u5224\u5B9A\u8986\u76D6\u8FC7\u3002",
-    "  \u52A0\u8F7D\u5B83\u7B49\u4E8E\u628A\u4E00\u4EFD\u6CA1\u88AB\u5BA1\u8FC7\u7684\u5185\u5BB9\u62FC\u8FDB system prompt\u3002",
+    `  ${t21("import_prompt.spec", { spec: target.spec })}`,
+    `  ${t21("import_prompt.why")}`,
     ""
   ].join("\n");
 }
 function applyImportChoice(store, target, choice) {
   if (choice.kind === "once") {
     store.allowOnce(target.path);
-    return `\u2713 \u672C\u6B21\u52A0\u8F7D ${target.path}\uFF08\u4E0B\u6B21\u8FD8\u4F1A\u95EE\uFF09`;
+    return t21("import_prompt.once", { path: target.path });
   }
   if (choice.kind === "remember") {
     store.remember(target.path);
-    return `\u2713 \u5DF2\u8BB0\u4F4F ${target.path}\uFF0C\u4E4B\u540E\u4E0D\u518D\u8BE2\u95EE`;
+    return t21("import_prompt.remembered", { path: target.path });
   }
   if (choice.kind === "never") {
     store.denyAll();
-    return "\u2717 \u4E4B\u540E\u4E00\u5F8B\u4E0D\u52A0\u8F7D\u9879\u76EE\u5916\u7684 import\uFF08\u6539\u8FD9\u4E2A\u51B3\u5B9A\uFF1A\u5220\u6389 ~/.epoch/trusted-imports.json\uFF09";
+    return t21("import_prompt.never");
   }
-  return `\u672C\u6B21\u4E0D\u52A0\u8F7D ${target.path}`;
+  return t21("import_prompt.skipped", { path: target.path });
+}
+function choices2() {
+  return [
+    { name: t21("import_prompt.choice_skip"), value: { kind: "skip" } },
+    { name: t21("import_prompt.choice_once"), value: { kind: "once" } },
+    { name: t21("import_prompt.choice_remember"), value: { kind: "remember" } },
+    { name: t21("import_prompt.choice_never"), value: { kind: "never" } }
+  ];
 }
-var CHOICES2 = [
-  { name: "\u672C\u6B21\u4E0D\u52A0\u8F7D\uFF08\u4E0B\u6B21\u8FD8\u4F1A\u95EE\uFF09", value: { kind: "skip" } },
-  { name: "\u52A0\u8F7D\u8FD9\u4E00\u4E2A\u6587\u4EF6", value: { kind: "once" } },
-  { name: "\u52A0\u8F7D\uFF0C\u5E76\u8BB0\u4F4F\u8FD9\u4E2A\u8DEF\u5F84\uFF08\u4E0B\u6B21\u4E0D\u95EE\uFF09", value: { kind: "remember" } },
-  { name: "\u6C38\u4E0D\u52A0\u8F7D\u9879\u76EE\u5916\u7684 import", value: { kind: "never" } }
-];
 async function maybePromptForExternalImports(opts = {}) {
-  const config = opts.config ?? loadConfig2();
+  const config = opts.config ?? loadConfig3();
   const store = opts.store ?? new ImportTrustStore(trustedImportsPath(config.homeDir));
   const print = opts.print ?? ((msg) => process.stdout.write(msg + "\n"));
   const targets = externalImportTargets({
@@ -2805,7 +2831,9 @@ async function maybePromptForExternalImports(opts = {}) {
         print(applyImportChoice(store, target, choice));
       } catch (err2) {
         print(
-          `\u26A0 import \u653E\u884C\u8BB0\u5F55\u5199\u5165\u5931\u8D25\uFF0C\u672C\u6B21\u4ECD\u6309\u4E0D\u52A0\u8F7D\u5904\u7406\uFF1A${err2 instanceof Error ? err2.message : err2}`
+          t21("import_prompt.write_failed", {
+            message: err2 instanceof Error ? err2.message : String(err2)
+          })
         );
       }
       if (choice.kind === "never") break;
@@ -2819,16 +2847,16 @@ async function maybePromptForExternalImports(opts = {}) {
 async function askImportChoice(_target) {
   const { select: select2 } = await import("@inquirer/prompts");
   try {
+    const options = choices2();
     return await select2({
-      message: "\u662F\u5426\u52A0\u8F7D\u5B83\uFF1F",
-      choices: [...CHOICES2],
-      default: CHOICES2[0]?.value
+      message: t21("import_prompt.ask"),
+      choices: [...options],
+      default: options[0]?.value
     });
   } catch {
     return null;
   }
 }
-
 // src/commands/run-stream.ts
 var LIVE_PREFIX = "\u2502 ";
 function createStreamWriter(enabled, sink) {
@@ -2871,9 +2899,8 @@ function createStreamWriter(enabled, sink) {
     }
   };
 }
-
 // src/commands/run-once.ts
-async function readStdin() {
+async function readStdin2() {
   if (process.stdin.isTTY) return "";
   const chunks = [];
   for await (const chunk of process.stdin) chunks.push(Buffer.from(chunk));
@@ -2899,7 +2926,7 @@ function composeContent(query, images) {
     throw new CliError(
       err2 instanceof Error ? err2.message : String(err2),
       EXIT_CODES.FAILURE,
-      "\u652F\u6301 png / jpeg / gif / webp\uFF0C\u4E5F\u53EF\u4EE5\u76F4\u63A5\u7ED9 http(s) \u56FE\u7247 URL"
+      t22("run_once.err_image")
     );
   }
 }
@@ -2908,9 +2935,9 @@ async function runOnce(query, opts, resumeId) {
   const { policy: headless, invalid } = parseHeadlessFlags(opts);
   if (invalid.length > 0) {
     throw new CliError(
-      `--allow-operation \u4E0D\u8BA4\u8BC6: ${invalid.join(", ")}`,
+      t22("run_once.err_bad_operation", { values: invalid.join(", ") }),
       EXIT_CODES.FAILURE,
-      `\u53EF\u9009\u503C: ${OPERATION_TYPES2.join(" / ")}`
+      t22("run_once.err_bad_operation_hint", { choices: OPERATION_TYPES2.join(" / ") })
     );
   }
   const format = resolveOutputFormat(opts);
@@ -2930,26 +2957,7 @@ async function runOnce(query, opts, resumeId) {
       sessionId: () => rt?.sessionId,
       preauth: (req) => preauthorizedBy(rt?.config.headless, headless, req)
     }) : createInteractiveApproval({ permission: () => rt?.permission }),
-    // 必须显式传：`buildRuntime` 的默认值是 false（库不替宿主决定进程怎么退），
-    // 而 CLI **就是**那个该被决定的宿主 —— Ctrl+C 要走 dispose() 关掉 SQLite
-    // 连接和 MCP 子进程，不能因为默认值翻转就悄悄退回「硬杀进程」。
-    // 守卫用例：cli/__tests__/signal-handlers.test.ts
     installSignalHandlers: true,
-    // 有外部审批器 = **有人能答**，所以告诉权限层按交互处理（方案 28）。
-    //
-    // 不这么做的话这个参数压根不会被调到：非交互下权限层的第 3 层会把每一次
-    // `ask_user` 直接收敛成 deny（见 manager.ts 的 applyPreauthorization），
-    // 审批回调连请求都收不到。这和长驻模式那条路是同一个决定、同一个理由
-    // （见 headless/session.ts 的文件头第 3 条）。
-    //
-    // 连带的三个后果，都是刻意的：
-    //   1. `--allow-tool` 那套预授权不再由权限层判 —— 所以下面 `preauth` 把
-    //      「预授权先命中就不起子进程」补在了审批回调里（验收 #18）
-    //   2. 混淆构造（`$(echo rm) -rf /`）从「非交互无人确认，拒绝」变成「问审批
-    //      程序」。那正是「有人能答」的含义，也是文档里要写明「等同于信任它」的
-    //      原因之一
-    //   3. 这条路上**不会出现退出码 3** —— 那个码的语义是「没人可问所以被卡住」，
-    //      而这里每一次都真的问过了。审批程序答 deny 是它自己的决定，退 0
     ...approver ? { interactive: true } : {},
     ...headless ? { headless } : {},
     ...resumeId ? { resumeId } : {}
@@ -2959,10 +2967,10 @@ async function runOnce(query, opts, resumeId) {
     const detail = runtime.diagnostics.join("\n  ");
     await runtime.dispose();
     throw new CliError(
-      "provider \u4E0D\u53EF\u7528\uFF0Cagent \u65E0\u6CD5\u542F\u52A8",
+      t22("run_once.err_no_provider"),
       EXIT_CODES.FAILURE,
-      detail ? `\u8BCA\u65AD:
-  ${detail}` : "\u8FD0\u884C epoch model \u914D\u7F6E"
+      detail ? `${t22("run_once.err_no_provider_diag")}
+  ${detail}` : t22("run_once.err_no_provider_hint")
     );
   }
   try {
@@ -2970,7 +2978,10 @@ async function runOnce(query, opts, resumeId) {
     if (resumeId) {
       const restored = runtime.session.getHistory().length;
       process.stderr.write(
-        `\u21BB \u5DF2\u6062\u590D ${resumeId.slice(0, SHORT_ID_LEN)}\uFF08${restored} \u6761\u5386\u53F2\u6D88\u606F\uFF09
+        `${t22("run_once.resumed", {
+          id: resumeId.slice(0, SHORT_ID_LEN),
+          count: restored
+        })}
 `
       );
     }
@@ -3030,7 +3041,7 @@ function collect2(out2, ev, w) {
   } else if (ev.type === "usage") {
     out2.usage = ev.cumulative;
   } else if (ev.type === "error") {
-    out2.text = `\u9519\u8BEF: ${ev.message}`;
+    out2.text = t22("run_once.error_prefix", { message: ev.message });
     process.exitCode = EXIT_CODES.FAILURE;
   } else if (ev.type === "finish") {
     out2.finishReason = ev.reason;
@@ -3056,8 +3067,6 @@ function emitOutcome(out2, opts, format, emitter, tasks = []) {
           budgetExceeded: out2.budgetExceeded,
           aborted: out2.aborted,
           diagnostics: out2.diagnostics,
-          // 一个后台任务都没起时**整个字段都不出现** —— 绝大多数调用是这样，
-          // 而验收 4.1 第 1 条要求 `--json` 的输出与改造前逐字节相同
           ...tasks.length > 0 ? { backgroundTasks: tasks } : {}
         },
         null,
@@ -3066,12 +3075,16 @@ function emitOutcome(out2, opts, format, emitter, tasks = []) {
     );
     return;
   }
-  if (out2.reasoning) process.stderr.write(`\u23FA \u601D\u8003\u8FC7\u7A0B:
+  if (out2.reasoning) {
+    process.stderr.write(`${t22("run_once.reasoning_head")}
 ${out2.reasoning}
 
 `);
+  }
   if (opts.stream === false && out2.text) process.stdout.write(out2.text + "\n");
-  if (out2.aborted) process.stderr.write("\n\u5DF2\u4E2D\u6B62\n");
+  if (out2.aborted) process.stderr.write(`
+${t22("run_once.aborted")}
+`);
   if (taskLines) process.stderr.write(taskLines + "\n");
   const summary = formatSummary(out2.usage, out2.budgetExceeded);
   if (summary) process.stderr.write(summary + "\n");
@@ -3087,19 +3100,19 @@ function noteworthy(diagnostics, verbose) {
 }
 function formatSummary(usage, budgetExceeded) {
   if (!usage) return "";
-  const cached = usage.cacheHitTokens ? `\uFF08\u7F13\u5B58\u547D\u4E2D ${usage.cacheHitTokens}\uFF09` : "";
+  const cached = usage.cacheHitTokens ? t22("run_once.cache_hit", { count: usage.cacheHitTokens }) : "";
   const tokens = `${promptTokens(usage)} in${cached} / ${usage.outputTokens} out`;
-  const cost = usage.costUsd === void 0 ? "\u6210\u672C\u672A\u77E5\uFF08\u65E0\u5B9A\u4EF7\u6570\u636E\uFF09" : formatUsd(usage.costUsd);
-  const stopped = budgetExceeded ? "  \u26A0 \u5DF2\u89E6\u8FBE\u9884\u7B97\u4E0A\u9650" : "";
+  const cost = usage.costUsd === void 0 ? t22("run_once.cost_unknown") : formatUsd(usage.costUsd);
+  const stopped = budgetExceeded ? t22("run_once.budget_reached") : "";
   return `\u2500 ${tokens}  \xB7  ${cost}${stopped}`;
 }
 function reportHeadlessAudit(permission) {
   const audit = permission?.getAudit("headless").entries ?? [];
   if (audit.length === 0) return;
   for (const e of audit) {
+    const vars = { tool: e.toolName, target: e.target, reason: e.reason };
     process.stderr.write(
-      e.outcome === "granted" ? `[\u9884\u6388\u6743\u653E\u884C] ${e.toolName} ${e.target} \u2014\u2014 ${e.reason}
-` : `[\u672A\u9884\u6388\u6743\u62D2\u7EDD] ${e.toolName} ${e.target} \u2014\u2014 ${e.reason}
+      `${e.outcome === "granted" ? t22("run_once.audit_granted", vars) : t22("run_once.audit_denied", vars)}
 `
     );
   }
@@ -3107,10 +3120,9 @@ function reportHeadlessAudit(permission) {
     process.exitCode = EXIT_CODES.PERMISSION_DENIED;
   }
 }
-
 // src/commands/run-overrides.ts
 import { isPermissionLevel as isPermissionLevel2, PERMISSION_LEVELS as PERMISSION_LEVELS2 } from "@epoch-agent/core";
-import { t as t3 } from "@epoch-agent/infra";
+import { t as t23 } from "@epoch-agent/infra";
 import { isProviderType as isProviderType2, PROVIDER_TYPES as PROVIDER_TYPES3 } from "@epoch-agent/protocol";
 function applyRunFlags(opts) {
   applySettingsPath(opts.settings);
@@ -3129,9 +3141,9 @@ function applyOverrides(opts) {
   if (opts.provider) {
     if (!isProviderType2(opts.provider)) {
       throw new CliError(
-        t3("flags.provider_unknown", { value: opts.provider }),
+        t23("flags.provider_unknown", { value: opts.provider }),
         1,
-        t3("flags.choices", { choices: PROVIDER_TYPES3.join(", ") })
+        t23("flags.choices", { choices: PROVIDER_TYPES3.join(", ") })
       );
     }
     process.env.EPOCH_PROVIDER = opts.provider;
@@ -3139,9 +3151,9 @@ function applyOverrides(opts) {
   if (opts.permission) {
     if (!isPermissionLevel2(opts.permission)) {
       throw new CliError(
-        t3("flags.permission_unknown", { value: opts.permission }),
+        t23("flags.permission_unknown", { value: opts.permission }),
         1,
-        t3("flags.choices", { choices: PERMISSION_LEVELS2.join(", ") })
+        t23("flags.choices", { choices: PERMISSION_LEVELS2.join(", ") })
       );
     }
     process.env.EPOCH_PERMISSION = opts.permission;
@@ -3152,9 +3164,9 @@ function assertModelName(value, flag) {
   const spec = value.trim();
   if (MODEL_ID.test(spec)) return value;
   throw new CliError(
-    t3("flags.model_not_a_name", { flag, value }),
+    t23("flags.model_not_a_name", { flag, value }),
     1,
-    t3("flags.model_not_a_name_hint", { value: spec })
+    t23("flags.model_not_a_name_hint", { value: spec })
   );
 }
 function assertHttpUrl(value) {
@@ -3164,56 +3176,60 @@ function assertHttpUrl(value) {
   } catch {
   }
   throw new CliError(
-    t3("flags.base_url_invalid", { value }),
+    t23("flags.base_url_invalid", { value }),
     1,
-    t3("flags.base_url_invalid_hint", { value: value.trim() })
+    t23("flags.base_url_invalid_hint", { value: value.trim() })
   );
 }
-
 // src/commands/sessions.ts
 import { isNonInteractive as isNonInteractive7, resolveProjectRoot as resolveProjectRoot3, SessionManager } from "@epoch-agent/core";
-import { dbPath } from "@epoch-agent/infra";
-var log6 = (msg) => process.stdout.write(msg + "\n");
+import { dbPath, t as t24, uiDateLocale as uiDateLocale2 } from "@epoch-agent/infra";
+var log7 = (msg) => process.stdout.write(msg + "\n");
 var SHORT_ID_LEN2 = 8;
 var PICK_LIMIT = 20;
+function whenOf(startedAt) {
+  return startedAt ? new Date(startedAt).toLocaleString(uiDateLocale2()) : t24("sessions.when_unknown");
+}
+function titleOf(s) {
+  return s.title || s.preview || t24("sessions.untitled");
+}
 function registerSessionsCommand(program2) {
-  const cmd = program2.command("sessions").alias("session").description("\u7BA1\u7406\u5386\u53F2\u4F1A\u8BDD");
-  cmd.command("list").description("\u5217\u51FA\u6700\u8FD1\u7684\u4F1A\u8BDD").option("-n, --limit <n>", "\u6570\u91CF", "10").action((opts) => {
+  const cmd = program2.command("sessions").alias("session").description(t24("sessions.cmd_root"));
+  cmd.command("list").description(t24("sessions.cmd_list")).option("-n, --limit <n>", t24("sessions.opt_limit"), "10").action((opts) => {
     withSessions((sm) => {
       const r = sm.list({ limit: parseInt(opts.limit, 10) });
       if (r.sessions.length === 0) {
-        log6("  (\u65E0)");
+        log7(`  ${t24("sessions.list_empty")}`);
         return;
       }
       for (const s of r.sessions) {
-        const when = s.startedAt ? new Date(s.startedAt).toLocaleString("zh-CN") : "\u672A\u77E5";
-        log6(`  ${s.id.slice(0, SHORT_ID_LEN2)}  ${when}  ${s.title || s.preview || "(\u65E0)"}`);
+        log7(`  ${s.id.slice(0, SHORT_ID_LEN2)}  ${whenOf(s.startedAt)}  ${titleOf(s)}`);
       }
     });
   });
-  cmd.command("resume").description("\u6062\u590D\u4F1A\u8BDD\u7EE7\u7EED\u5BF9\u8BDD\uFF08id \u53EF\u4EE5\u53EA\u5199 list \u91CC\u663E\u793A\u7684\u524D 8 \u4F4D\uFF09").argument("[id]", "\u4F1A\u8BDD ID \u6216\u5176\u524D\u7F00\uFF08\u4E0D\u6307\u5B9A\u5219\u6062\u590D\u6700\u65B0\uFF09").argument("[query]", "\u8981\u53D1\u9001\u7684\u6D88\u606F\uFF08\u53EF\u9009\uFF09").action(async (id, query) => {
+  cmd.command("resume").description(t24("sessions.cmd_resume")).argument("[id]", t24("sessions.arg_id")).argument("[query]", t24("sessions.arg_query")).action(async (id, query) => {
     const resolved = resolveSessionId(id);
     if (!resolved.ok) {
       throw new CliError(resolved.error, EXIT_CODES.FAILURE);
     }
-    await runOnce(query || "\u7EE7\u7EED", {}, resolved.id);
+    await runOnce(query || t24("sessions.default_query"), {}, resolved.id);
   });
 }
 function resolveSessionId(input2) {
   return withSessions((sm) => {
     if (!input2) {
       const latest = sm.getLatest()?.meta.id;
-      return latest ? { ok: true, id: latest } : { ok: false, error: "\u65E0\u53EF\u6062\u590D\u7684\u4F1A\u8BDD" };
+      return latest ? { ok: true, id: latest } : { ok: false, error: t24("sessions.err_none") };
     }
     if (sm.get(input2)) return { ok: true, id: input2 };
     const candidates = sm.list({ limit: 200 }).sessions.filter((s) => s.id.startsWith(input2)).map((s) => s.id);
     if (candidates.length === 1) return { ok: true, id: candidates[0] };
     if (candidates.length === 0) {
-      return { ok: false, error: `\u627E\u4E0D\u5230\u4F1A\u8BDD: ${input2}\uFF08\u7528 epoch sessions list \u67E5\u770B\uFF09` };
+      return { ok: false, error: t24("sessions.err_not_found", { input: input2 }) };
     }
     return {
       ok: false,
-      error: `\u4F1A\u8BDD\u524D\u7F00 ${input2} \u5339\u914D\u5230 ${candidates.length} \u4E2A\uFF0C\u8BF7\u5199\u66F4\u957F\u7684\u524D\u7F00`
+      error: t24("sessions.err_ambiguous", { input: input2, count: candidates.length })
     };
   });
 }
@@ -3224,33 +3240,32 @@ function latestSessionIdForProject(cwd = process.cwd()) {
 async function pickSessionId() {
   if (isNonInteractive7()) {
     throw new CliError(
-      "\u975E\u4EA4\u4E92\u73AF\u5883\u4E0B --resume \u5FC5\u987B\u5E26\u4F1A\u8BDD id",
+      t24("sessions.err_needs_id"),
       EXIT_CODES.FAILURE,
-      "\u7528 epoch sessions list \u67E5 id\uFF0C\u6216\u7528 --continue \u63A5\u672C\u9879\u76EE\u6700\u8FD1\u4E00\u4E2A"
+      t24("sessions.err_needs_id_hint")
     );
   }
   const rows = withSessions(
     (sm) => sm.list({ limit: PICK_LIMIT }).sessions.map((s) => ({
       id: s.id,
-      title: s.title || s.preview || "(\u65E0\u6807\u9898)",
-      when: s.startedAt ? new Date(s.startedAt).toLocaleString("zh-CN") : "\u672A\u77E5",
-      // 老会话的 cwd 是 NULL（方案 29 之前没人写它），如实显示成「未记录」
-      where: s.cwd ?? "\u672A\u8BB0\u5F55",
+      title: titleOf(s),
+      when: whenOf(s.startedAt),
+      where: s.cwd ?? t24("sessions.cwd_unrecorded"),
       messageCount: s.messageCount
     }))
   );
   if (rows.length === 0) {
-    log6("\u6CA1\u6709\u5386\u53F2\u4F1A\u8BDD\uFF0C\u5C06\u5F00\u59CB\u4E00\u6BB5\u65B0\u5BF9\u8BDD\u3002");
+    log7(t24("sessions.pick_empty"));
     return void 0;
   }
   const { select: select2 } = await import("@inquirer/prompts");
   try {
     return await select2({
-      message: "\u6062\u590D\u54EA\u4E00\u6BB5\u4F1A\u8BDD\uFF1F",
+      message: t24("sessions.pick_prompt"),
       choices: rows.map((r) => ({
         name: `${r.id.slice(0, SHORT_ID_LEN2)}  ${r.when}  ${r.title}`,
         value: r.id,
-        description: `${r.messageCount} \u6761\u6D88\u606F \xB7 ${r.where}`
+        description: `${t24("tui.resume.message_count", { n: r.messageCount })} \xB7 ${r.where}`
       })),
       pageSize: 12
     });
@@ -3266,39 +3281,28 @@ function withSessions(fn) {
     sm.close();
   }
 }
-
 // src/commands/run.ts
-var log7 = (msg) => {
+var log8 = (msg) => {
   process.stdout.write(msg + "\n");
 };
 function registerRunCommand(program2) {
-  program2.argument("[query]", "\u8981\u6267\u884C\u7684\u4EFB\u52A1\uFF1B\u4E0D\u7ED9\u4E14 stdin \u6709\u5185\u5BB9\u65F6\u8BFB stdin").option("--allow-tool <name>", "\u975E\u4EA4\u4E92\uFF08CI / \u7BA1\u9053\uFF09\u4E0B\u9884\u6388\u6743\u7684\u5DE5\u5177\u540D\uFF0C\u53EF\u91CD\u590D", collect, []).option(
+  program2.argument("[query]", t25("run.arg_query")).option("--allow-tool <name>", t25("run.opt_allow_tool"), collect, []).option(
     "--allow-operation <type>",
-    `\u975E\u4EA4\u4E92\u4E0B\u9884\u6388\u6743\u7684\u64CD\u4F5C\u7C7B\u578B\uFF08${OPERATION_TYPES3.join(" / ")}\uFF09\uFF0C\u53EF\u91CD\u590D`,
-    collect,
-    []
-  ).option(
-    "-i, --image <path>",
-    "\u9644\u52A0\u56FE\u7247\uFF08\u8DEF\u5F84\u6216 http(s) URL\uFF09\uFF0C\u53EF\u91CD\u590D\u3002\u9700\u8981\u6A21\u578B\u652F\u6301\u89C6\u89C9",
-    collect,
-    []
-  ).option("-c, --continue", "\u63A5\u4E0A\u672C\u9879\u76EE\u6700\u8FD1\u4E00\u4E2A\u4F1A\u8BDD\u7EE7\u7EED").option("-r, --resume [id]", "\u6062\u590D\u67D0\u4E2A\u4F1A\u8BDD\uFF1B\u4E0D\u5E26 id \u5219\u4EA4\u4E92\u5F0F\u9009").option("-m, --model <name>", "\u672C\u6B21\u4F7F\u7528\u7684\u6A21\u578B\uFF0C\u8986\u76D6\u914D\u7F6E\u6587\u4EF6").option("--fallback-model <name>", "\u4E3B\u6A21\u578B\u4E0D\u53EF\u7528\u65F6\uFF0C\u540C\u4E00\u4E2A provider \u5185\u5148\u964D\u7EA7\u5230\u5B83").option("-p, --provider <type>", `\u672C\u6B21\u4F7F\u7528\u7684 provider\uFF08${PROVIDER_TYPES4.join(" / ")}\uFF09`).option("--base-url <url>", "\u672C\u6B21\u4F7F\u7528\u7684 API base URL").option("--permission <level>", `\u672C\u6B21\u7684\u6743\u9650\u7EA7\u522B\uFF08${PERMISSION_LEVELS3.join(" / ")}\uFF09`).option("--settings <file>", "\u989D\u5916\u7684\u8BBE\u7F6E\u6587\u4EF6\uFF0C\u538B\u8FC7\u9879\u76EE\u7EA7\u548C\u7528\u6237\u7EA7\uFF08CI \u7528\uFF09").option(
-    "--add-dir <dir>",
-    "\u628A\u989D\u5916\u76EE\u5F55\u52A0\u8FDB\u5DE5\u4F5C\u533A\uFF08\u6587\u4EF6\u5DE5\u5177\u548C\u6743\u9650\u5224\u5B9A\u90FD\u653E\u884C\u5B83\uFF09\uFF0C\u53EF\u91CD\u590D",
+    t25("run.opt_allow_operation", { types: OPERATION_TYPES3.join(" / ") }),
     collect,
     []
-  ).option("--agent <role>", "\u7528\u67D0\u4E2A\u89D2\u8272\u8DD1\u4E3B agent\uFF08\u5B83\u7684\u5DE5\u5177\u767D\u540D\u5355\u548C maxTurns \u751F\u6548\uFF09").option("--worktree", "\u5728\u4E00\u4E2A\u65B0\u5EFA\u7684 git worktree\uFF08\u65B0\u5206\u652F\uFF09\u91CC\u8DD1\u8FD9\u4E00\u6B21\uFF0C\u9000\u51FA\u65F6\u95EE\u662F\u5426\u5220\u9664").option("--json", "\u4EE5 JSON \u8F93\u51FA\uFF08stdout \u6070\u597D\u4E00\u4E2A\u6587\u6863\uFF09\uFF0C\u7ED9 CI \u7528").option(
+  ).option("-i, --image <path>", t25("run.opt_image"), collect, []).option("-c, --continue", t25("run.opt_continue")).option("-r, --resume [id]", t25("run.opt_resume")).option("-m, --model <name>", t25("run.opt_model")).option("--fallback-model <name>", t25("run.opt_fallback_model")).option("-p, --provider <type>", t25("run.opt_provider", { types: PROVIDER_TYPES4.join(" / ") })).option("--base-url <url>", t25("run.opt_base_url")).option(
+    "--permission <level>",
+    t25("run.opt_permission", { levels: PERMISSION_LEVELS3.join(" / ") })
+  ).option("--settings <file>", t25("run.opt_settings")).option("--add-dir <dir>", t25("run.opt_add_dir"), collect, []).option("--agent <role>", t25("run.opt_agent")).option("--worktree", t25("run.opt_worktree")).option("--json", t25("run.opt_json")).option(
     "--output-format <fmt>",
-    `stdout \u7684\u683C\u5F0F\uFF08${HEADLESS_OUTPUT_FORMATS2.join(" / ")}\uFF09\u3002--json \u662F json \u7684\u522B\u540D`
+    t25("run.opt_output_format", { formats: HEADLESS_OUTPUT_FORMATS2.join(" / ") })
   ).option(
     "--input-format <fmt>",
-    `stdin \u7684\u683C\u5F0F\uFF08${HEADLESS_INPUT_FORMATS2.join(" / ")}\uFF09\u3002stream-json \u8FDB\u957F\u9A7B\u6A21\u5F0F`
-  ).option(
-    "--permission-prompt-tool <program>",
-    "\u628A\u6BCF\u4E00\u6B21\u9700\u8981\u786E\u8BA4\u7684\u64CD\u4F5C\u4EA4\u7ED9\u8FD9\u4E2A\u5916\u90E8\u7A0B\u5E8F\u88C1\u51B3\uFF08\u7B49\u540C\u4E8E\u5B8C\u5168\u4FE1\u4EFB\u5B83\uFF09"
-  ).option("--max-turns <n>", "\u672C\u6B21\u8C03\u7528\u6700\u591A\u51E0\u8F6E\u5DE5\u5177\u5FAA\u73AF\uFF0C\u538B\u8FC7\u914D\u7F6E\u91CC\u7684 maxTurns").option("--max-budget-usd <x>", "\u672C\u6B21\u8C03\u7528\u82B1\u8D85\u8FD9\u4E2A\u91D1\u989D\u5C31\u505C\uFF08\u4E0E\u8DE8\u4F1A\u8BDD\u9884\u7B97\u53E0\u52A0\uFF09").option("--no-stream", "\u4E0D\u6D41\u5F0F\u8F93\u51FA\uFF0C\u7B49\u8DD1\u5B8C\u4E00\u6B21\u6027\u6253\u5370").option("-v, --verbose", "\u6253\u5370\u5168\u90E8\u542F\u52A8\u8BCA\u65AD\uFF08\u9ED8\u8BA4\u53EA\u6253\u975E OK \u7684\uFF09").option("-V, --version", "\u6253\u5370\u7248\u672C\u3001Node\u3001\u5E73\u53F0\u4E0E\u5B89\u88C5\u65B9\u5F0F").action(async (query, opts) => {
+    t25("run.opt_input_format", { formats: HEADLESS_INPUT_FORMATS2.join(" / ") })
+  ).option("--permission-prompt-tool <program>", t25("run.opt_permission_prompt_tool")).option("--max-turns <n>", t25("run.opt_max_turns")).option("--max-budget-usd <x>", t25("run.opt_max_budget")).option("--no-stream", t25("run.opt_no_stream")).option("-v, --verbose", t25("run.opt_verbose")).option("-V, --version", t25("run.opt_version")).action(async (query, opts) => {
     if (opts.version === true) {
-      log7(describeVersion(selfPackage().name));
+      log8(describeVersion(selfPackage().name));
       return;
     }
     applyRunFlags(opts);
@@ -3308,39 +3312,39 @@ function registerRunCommand(program2) {
     if (formats.input === "stream-json") {
       if (opts.continue === true || resumeArg.kind !== "off") {
         throw new CliError(
-          "--continue / --resume \u4E0D\u80FD\u548C --input-format stream-json \u4E00\u8D77\u7528",
+          t25("run.conflict_resume"),
           EXIT_CODES.FAILURE,
-          "\u957F\u9A7B\u6A21\u5F0F\u4E0B\u8981\u6062\u590D\u54EA\u6BB5\u4F1A\u8BDD\u7531\u5BBF\u4E3B\u5728 init \u5E27\u7684 sessionId \u91CC\u6307\u5B9A"
+          t25("run.conflict_resume_hint")
         );
       }
       if (opts.worktree === true) {
         throw new CliError(
-          "--worktree \u4E0D\u80FD\u548C --input-format stream-json \u4E00\u8D77\u7528",
+          t25("run.conflict_worktree"),
           EXIT_CODES.FAILURE,
-          "\u957F\u9A7B\u6A21\u5F0F\u4E0B stdout \u662F\u534F\u8BAE\u901A\u9053\uFF0Cworktree \u7684\u63D0\u793A\u548C\u8BE2\u95EE\u6CA1\u6709\u843D\u70B9\uFF1B\u5BBF\u4E3B\u53EF\u4EE5\u81EA\u5DF1 git worktree add \u518D\u7528\u90A3\u4E2A\u76EE\u5F55\u5F53 cwd \u542F\u52A8"
+          t25("run.conflict_worktree_hint")
         );
       }
       if (opts.permissionPromptTool !== void 0) {
         throw new CliError(
-          "--permission-prompt-tool \u4E0D\u80FD\u548C --input-format stream-json \u4E00\u8D77\u7528",
+          t25("run.conflict_prompt_tool"),
           EXIT_CODES.FAILURE,
-          "\u957F\u9A7B\u6A21\u5F0F\u4E0B\u5BA1\u6279\u5DF2\u7ECF\u662F\u6D41\u91CC\u7684 approval-request \u5E27\uFF0C\u4F60\u76F4\u63A5\u7B54\u5C31\u884C \u2014\u2014 \u90A3\u6761\u8DEF\u66F4\u5E72\u51C0\uFF08\u4E0D\u7528\u4E3A\u6BCF\u6B21\u5BA1\u6279\u8D77\u4E00\u4E2A\u5B50\u8FDB\u7A0B\uFF0C\u4E5F\u4E0D\u7528\u7F16\u89E3\u7801\uFF09"
+          t25("run.conflict_prompt_tool_hint")
         );
       }
       if (!hasCredentials()) {
         throw new CliError(
-          "\u6CA1\u6709\u914D\u7F6E\u6A21\u578B\u51ED\u636E\uFF0C\u957F\u9A7B\u6A21\u5F0F\u8D77\u4E0D\u6765",
+          t25("run.no_credentials_stream"),
           EXIT_CODES.FAILURE,
-          "\u5148\u8FD0\u884C epoch model \u914D\u7F6E provider \u548C API key"
+          t25("run.no_credentials_hint")
         );
       }
       process.exitCode = await runStreamJsonSession(opts);
       return;
     }
     const carried = resumeArg.kind === "pick" ? resumeArg.query : void 0;
-    const prompt = composePrompt(query ?? carried, await readStdin());
+    const prompt = composePrompt(query ?? carried, await readStdin2());
     if (!hasCredentials()) {
-      log7("\u{1F44B} \u6B22\u8FCE\u4F7F\u7528 epoch-agent\uFF01\n\n\u8FD0\u884C epoch model \u914D\u7F6E\u6A21\u578B\u548C API key \u5373\u53EF\u5F00\u59CB\u5BF9\u8BDD\u3002");
+      log8(t25("run.welcome"));
       return;
     }
     const resumeId = await resolveResumeTarget(opts, resumeArg);
@@ -3366,7 +3370,8 @@ async function resolveResumeTarget(opts, resumeArg) {
   if (opts.continue === true) {
     const latest = latestSessionIdForProject();
     if (!latest) {
-      process.stderr.write("\u672C\u9879\u76EE\u8FD8\u6CA1\u6709\u5386\u53F2\u4F1A\u8BDD\uFF0C\u5F00\u59CB\u4E00\u6BB5\u65B0\u7684\u3002\n");
+      process.stderr.write(`${t25("run.no_history")}
+`);
     }
     return latest;
   }
@@ -3376,8 +3381,7 @@ async function resolveResumeTarget(opts, resumeArg) {
       throw new CliError(
         resolved.error,
         EXIT_CODES.FAILURE,
-        // `-r` 的值是纯十六进制的一句话时会走到这儿（见 looksLikeSessionId）
-        '\u5982\u679C\u90A3\u4E0D\u662F id \u800C\u662F\u8981\u53D1\u7684\u6D88\u606F\uFF0C\u5199\u6210 epoch --resume "\u6D88\u606F" \u4E4B\u5916\u7684\u5F62\u5F0F\uFF1Aepoch -r -- "\u6D88\u606F" \u4F1A\u628A\u5B83\u5F53\u4F4D\u7F6E\u53C2\u6570\uFF0C\u6216\u5148 epoch sessions list \u67E5 id'
+        t25("run.resume_not_id_hint")
       );
     }
     return resolved.id;
@@ -3396,7 +3400,8 @@ function resolveTuiEntry(baseDir, exists = existsSync6) {
 async function launchTui(resumeId) {
   const target = resolveTuiEntry(dirname3(fileURLToPath3(import.meta.url)));
   if (!target) {
-    process.stderr.write("\u542F\u52A8\u5931\u8D25\uFF1A\u627E\u4E0D\u5230 TUI \u5165\u53E3 tui-entry\uFF0C\u8BF7\u5148\u8FD0\u884C pnpm build\n");
+    process.stderr.write(`${t25("run.tui_entry_missing")}
+`);
     process.exitCode = EXIT_CODES.FAILURE;
     return;
   }
@@ -3410,7 +3415,7 @@ async function launchTui(resumeId) {
   });
   await new Promise((done) => {
     child.on("error", (err2) => {
-      process.stderr.write(`TUI \u542F\u52A8\u5931\u8D25: ${err2.message}
+      process.stderr.write(`${t25("run.tui_spawn_failed", { message: err2.message })}
 `);
       process.exitCode = EXIT_CODES.FAILURE;
       done();
@@ -3421,16 +3426,14 @@ async function launchTui(resumeId) {
     });
   });
 }
-
 // src/commands/schedule.ts
-import { t as t11 } from "@epoch-agent/infra";
-
+import { t as t33 } from "@epoch-agent/infra";
 // src/schedule/add.ts
 import {
   SCHEDULE_DEFAULTS,
   validateSchedule
 } from "@epoch-agent/core";
-import { automationWorkDir, t as t6 } from "@epoch-agent/infra";
+import { automationWorkDir, t as t28 } from "@epoch-agent/infra";
 import {
   isOperationType as isOperationType2,
   isPermissionLevel as isPermissionLevel3,
@@ -3438,9 +3441,11 @@ import {
   PERMISSION_LEVELS as PERMISSION_LEVELS4,
   SCHEDULE_INTERVAL_MINUTES
 } from "@epoch-agent/protocol";
-
 // src/schedule/labels.ts
-import { t as t4 } from "@epoch-agent/infra";
+import { t as t26 } from "@epoch-agent/infra";
+import {
+  collectPendingApprovals
+} from "@epoch-agent/protocol";
 var ISSUE_KEYS = {
   "name-empty": "schedule.issue.name_empty",
   "prompt-empty": "schedule.issue.prompt_empty",
@@ -3489,37 +3494,36 @@ var DRIFT_KEYS = {
   "never-registered": "schedule.drift.never_registered"
 };
 function renderIssues(issues) {
-  return issues.map((i) => `  \xB7 ${t4(ISSUE_KEYS[i.code], { detail: i.detail ?? "" })}`).join("\n");
+  return issues.map((i) => `  \xB7 ${t26(ISSUE_KEYS[i.code], { detail: i.detail ?? "" })}`).join("\n");
 }
 function statusLabel(status) {
   const mark = status === "ok" ? "\u2705" : status === "failed" || status === "denied" ? "\u274C" : "\u26A0\uFE0F";
-  return `${mark} ${t4(STATUS_KEYS[status])}`;
+  return `${mark} ${t26(STATUS_KEYS[status])}`;
 }
 function driftLabel(kind) {
-  return t4(DRIFT_KEYS[kind]);
+  return t26(DRIFT_KEYS[kind]);
 }
 function describeTrigger(trigger) {
   if (trigger.kind === "interval") {
-    return trigger.everyMinutes < 60 ? t4("schedule.trigger.every_minutes", { n: trigger.everyMinutes }) : t4("schedule.trigger.every_hours", { n: trigger.everyMinutes / 60 });
+    return trigger.everyMinutes < 60 ? t26("schedule.trigger.every_minutes", { n: trigger.everyMinutes }) : t26("schedule.trigger.every_hours", { n: trigger.everyMinutes / 60 });
   }
   if (trigger.kind === "once") {
-    return t4("schedule.trigger.once", { date: trigger.date, at: trigger.at });
+    return t26("schedule.trigger.once", { date: trigger.date, at: trigger.at });
   }
-  if (trigger.cycle === "daily") return t4("schedule.trigger.daily", { at: trigger.at });
+  if (trigger.cycle === "daily") return t26("schedule.trigger.daily", { at: trigger.at });
   if (trigger.cycle === "weekly") {
-    const days = trigger.weekdays.map((d) => t4(WEEKDAY_KEYS[d])).join("/");
-    return t4("schedule.trigger.weekly", { days, at: trigger.at });
+    const days = trigger.weekdays.map((d) => t26(WEEKDAY_KEYS[d])).join("/");
+    return t26("schedule.trigger.weekly", { days, at: trigger.at });
   }
-  return t4("schedule.trigger.monthly", { days: trigger.days.join("/"), at: trigger.at });
+  return t26("schedule.trigger.monthly", { days: trigger.days.join("/"), at: trigger.at });
 }
 function permissionLabel(level) {
-  if (level === "plan") return t4("schedule.permission.plan");
-  if (level === "acceptEdits") return t4("schedule.permission.accept_edits");
-  if (level === "bypass") return t4("schedule.permission.bypass");
-  if (level === "auto") return t4("schedule.permission.auto");
-  return t4("schedule.permission.default");
+  if (level === "plan") return t26("schedule.permission.plan");
+  if (level === "acceptEdits") return t26("schedule.permission.accept_edits");
+  if (level === "bypass") return t26("schedule.permission.bypass");
+  if (level === "auto") return t26("schedule.permission.auto");
+  return t26("schedule.permission.default");
 }
-
 // src/schedule/shared.ts
 import { realpathSync as realpathSync2 } from "fs";
 import {
@@ -3527,8 +3531,8 @@ import {
   ScheduleRegistrar,
   ScheduleStore
 } from "@epoch-agent/core";
-import { dbPath as dbPath2, t as t5 } from "@epoch-agent/infra";
-var log8 = (msg) => void process.stdout.write(`${msg}
+import { dbPath as dbPath2, t as t27, uiDateLocale as uiDateLocale3 } from "@epoch-agent/infra";
+var log9 = (msg) => void process.stdout.write(`${msg}
 `);
 var warn2 = (msg) => void process.stderr.write(`${msg}
 `);
@@ -3556,24 +3560,24 @@ function mustFind(store, idOrPrefix) {
   if (hits.length === 1) return hits[0];
   if (hits.length === 0) {
     throw new CliError(
-      t5("schedule.err_not_found", { id: idOrPrefix }),
+      t27("schedule.err_not_found", { id: idOrPrefix }),
       EXIT_CODES.FAILURE,
-      t5("schedule.err_not_found_hint")
+      t27("schedule.err_not_found_hint")
     );
   }
   throw new CliError(
-    t5("schedule.err_ambiguous", { id: idOrPrefix }),
+    t27("schedule.err_ambiguous", { id: idOrPrefix }),
     EXIT_CODES.FAILURE,
     hits.map((h) => `  ${h.id}  ${h.name}`).join("\n")
   );
 }
 function reportRegistration(outcome, fatal) {
   if (outcome.ok) {
-    if (outcome.warnings.includes("source")) warn2(t5("schedule.warn_source_entry"));
+    if (outcome.warnings.includes("source")) warn2(t27("schedule.warn_source_entry"));
     return;
   }
-  const message = outcome.reason === "unsupported-platform" ? t5("schedule.err_platform_unsupported") : outcome.reason === "backend-error" ? t5("schedule.err_backend", { detail: outcome.detail }) : outcome.refusal === "npx" ? t5("schedule.err_npx") : t5("schedule.err_no_host_runner");
-  const hint = outcome.reason === "refused" && outcome.refusal === "npx" ? t5("schedule.err_npx_hint") : outcome.reason === "refused" ? t5("schedule.err_no_host_runner_hint") : void 0;
+  const message = outcome.reason === "unsupported-platform" ? t27("schedule.err_platform_unsupported") : outcome.reason === "backend-error" ? t27("schedule.err_backend", { detail: outcome.detail }) : outcome.refusal === "npx" ? t27("schedule.err_npx") : t27("schedule.err_no_host_runner");
+  const hint = outcome.reason === "refused" && outcome.refusal === "npx" ? t27("schedule.err_npx_hint") : outcome.reason === "refused" ? t27("schedule.err_no_host_runner_hint") : void 0;
   if (!fatal) {
     warn2(message);
     if (hint) warn2(hint);
@@ -3583,9 +3587,8 @@ function reportRegistration(outcome, fatal) {
 }
 function formatWhen(ms) {
   if (ms === void 0) return "\u2014";
-  return new Date(ms).toLocaleString();
+  return new Date(ms).toLocaleString(uiDateLocale3());
 }
-
 // src/schedule/add.ts
 var WEEKDAY_CODES = ["SUN", "MON", "TUE", "WED", "THU", "FRI", "SAT"];
 async function runAdd(opts) {
@@ -3599,10 +3602,6 @@ async function runAdd(opts) {
       name: input2.name,
       prompt: input2.prompt,
       permission,
-      // 工作区留空时它会落到 `~/.epoch/automation/<id>/`，而那个目录要等 id
-      // 才算得出来 —— 校验这一步先用一个必然存在的替身（数据目录本身）。
-      // ⚠️ `bypass` 那一档下**不许**这么替：它的第 1 条硬约束就是「必须绑一个
-      // 工作区」，拿数据目录顶上等于把那条约束绕过去
       workDir: input2.workDir ?? (permission === "bypass" ? "" : ctx.homeDir),
       maxTurns: input2.maxTurns ?? SCHEDULE_DEFAULTS.maxTurns,
       maxBudgetUsd: input2.maxBudgetUsd,
@@ -3616,7 +3615,7 @@ async function runAdd(opts) {
     });
     if (validation.issues.length > 0) {
       throw new CliError(
-        t6("schedule.err_invalid"),
+        t28("schedule.err_invalid"),
         EXIT_CODES.FAILURE,
         renderIssues(validation.issues)
       );
@@ -3646,26 +3645,26 @@ async function fillInteractively(opts) {
   if (!missing) return opts;
   if (!process.stdin.isTTY || !process.stdout.isTTY) {
     throw new CliError(
-      t6("schedule.err_missing_flags"),
+      t28("schedule.err_missing_flags"),
       EXIT_CODES.FAILURE,
-      t6("schedule.err_missing_flags_hint")
+      t28("schedule.err_missing_flags_hint")
     );
   }
   const { input: input2, select: select2 } = await import("@inquirer/prompts");
   const next = { ...opts };
-  next.name ||= await input2({ message: t6("schedule.ask_name") });
-  next.prompt ||= await input2({ message: t6("schedule.ask_prompt") });
+  next.name ||= await input2({ message: t28("schedule.ask_name") });
+  next.prompt ||= await input2({ message: t28("schedule.ask_prompt") });
   if (!hasTrigger) {
-    const at = await input2({ message: t6("schedule.ask_at"), default: "09:00" });
+    const at = await input2({ message: t28("schedule.ask_at"), default: "09:00" });
     next.daily = at;
   }
-  next.budget ||= await input2({ message: t6("schedule.ask_budget"), default: "0.50" });
+  next.budget ||= await input2({ message: t28("schedule.ask_budget"), default: "0.50" });
   next.permission ||= await select2({
-    message: t6("schedule.ask_permission"),
+    message: t28("schedule.ask_permission"),
     choices: [
-      { name: t6("schedule.permission.default"), value: "default" },
-      { name: t6("schedule.permission.plan"), value: "plan" },
-      { name: t6("schedule.permission.accept_edits"), value: "acceptEdits" }
+      { name: t28("schedule.permission.default"), value: "default" },
+      { name: t28("schedule.permission.plan"), value: "plan" },
+      { name: t28("schedule.permission.accept_edits"), value: "acceptEdits" }
     ]
   });
   return next;
@@ -3674,8 +3673,8 @@ function parseTrigger(opts) {
   const given = [opts.daily, opts.weekly, opts.monthly, opts.every, opts.once].filter(
     (v) => v !== void 0
   );
-  if (given.length === 0) throw new CliError(t6("schedule.err_no_trigger"), EXIT_CODES.FAILURE);
-  if (given.length > 1) throw new CliError(t6("schedule.err_many_triggers"), EXIT_CODES.FAILURE);
+  if (given.length === 0) throw new CliError(t28("schedule.err_no_trigger"), EXIT_CODES.FAILURE);
+  if (given.length > 1) throw new CliError(t28("schedule.err_many_triggers"), EXIT_CODES.FAILURE);
   if (opts.daily !== void 0) return { kind: "cron", cycle: "daily", at: opts.daily };
   if (opts.weekly !== void 0) {
     return {
@@ -3699,14 +3698,14 @@ function parseTrigger(opts) {
   return { kind: "interval", everyMinutes: parseEvery(opts.every) };
 }
 function requireAt(opts) {
-  if (!opts.at) throw new CliError(t6("schedule.err_at_required"), EXIT_CODES.FAILURE);
+  if (!opts.at) throw new CliError(t28("schedule.err_at_required"), EXIT_CODES.FAILURE);
   return opts.at;
 }
 function parseWeekday(raw) {
   const idx = WEEKDAY_CODES.indexOf(raw.trim().toUpperCase());
   if (idx < 0) {
     throw new CliError(
-      t6("schedule.err_weekday", { value: raw }),
+      t28("schedule.err_weekday", { value: raw }),
       EXIT_CODES.FAILURE,
       WEEKDAY_CODES.join(",")
     );
@@ -3718,9 +3717,9 @@ function parseEvery(raw) {
   const minutes = m ? Number(m[1]) * (m[2]?.toLowerCase() === "h" ? 60 : 1) : Number.NaN;
   if (!SCHEDULE_INTERVAL_MINUTES.includes(minutes)) {
     throw new CliError(
-      t6("schedule.err_every", { value: raw }),
+      t28("schedule.err_every", { value: raw }),
       EXIT_CODES.FAILURE,
-      t6("schedule.err_every_hint", {
+      t28("schedule.err_every_hint", {
         values: SCHEDULE_INTERVAL_MINUTES.map((n) => n < 60 ? `${n}m` : `${n / 60}h`).join(" / ")
       })
     );
@@ -3731,7 +3730,7 @@ function parsePermission(raw) {
   if (raw === void 0) return "default";
   if (!isPermissionLevel3(raw)) {
     throw new CliError(
-      t6("schedule.err_permission", { value: raw }),
+      t28("schedule.err_permission", { value: raw }),
       EXIT_CODES.FAILURE,
       PERMISSION_LEVELS4.join(" / ")
     );
@@ -3743,7 +3742,7 @@ function parseOperations(raw) {
   for (const value of raw ?? []) {
     if (!isOperationType2(value)) {
       throw new CliError(
-        t6("schedule.err_operation", { value }),
+        t28("schedule.err_operation", { value }),
         EXIT_CODES.FAILURE,
         OPERATION_TYPES4.join(" / ")
       );
@@ -3756,9 +3755,9 @@ function buildInput(opts, trigger, permission) {
   const budget = Number(opts.budget);
   if (!Number.isFinite(budget) || budget <= 0) {
     throw new CliError(
-      t6("schedule.err_budget", { value: opts.budget ?? "" }),
+      t28("schedule.err_budget", { value: opts.budget ?? "" }),
       EXIT_CODES.FAILURE,
-      t6("schedule.err_budget_hint")
+      t28("schedule.err_budget_hint")
     );
   }
   return {
@@ -3794,53 +3793,52 @@ function applyDefaultAllowlist(store, def, opts) {
   }) ?? def;
 }
 function printSummary(def) {
-  log8(t6("schedule.created", { id: def.id, name: def.name }));
-  log8("");
-  log8(t6("schedule.created_next", { id: def.id.slice(0, 12) }));
+  log9(t28("schedule.created", { id: def.id, name: def.name }));
+  log9("");
+  log9(t28("schedule.created_next", { id: def.id.slice(0, 12) }));
 }
-
 // src/schedule/doctor.ts
 import { diagnoseSchedules, pruneSchedules, repairSchedules } from "@epoch-agent/core";
-import { t as t7 } from "@epoch-agent/infra";
+import { t as t29 } from "@epoch-agent/infra";
 async function runDoctor(opts) {
   const ctx = await openSchedule();
   try {
     const deps = { store: ctx.store, backend: ctx.backend, registrar: ctx.registrar };
     const report = await diagnoseSchedules(deps);
     if (report.unsupported) {
-      warn2(t7("schedule.doctor_unsupported"));
+      warn2(t29("schedule.doctor_unsupported"));
       return;
     }
     if (report.drifts.length === 0) {
-      log8(t7("schedule.doctor_clean", { n: report.checked }));
+      log9(t29("schedule.doctor_clean", { n: report.checked }));
       return;
     }
-    log8(t7("schedule.doctor_found", { n: report.drifts.length }));
+    log9(t29("schedule.doctor_found", { n: report.drifts.length }));
     for (const drift of report.drifts) {
-      log8(
+      log9(
         `  \xB7 ${driftLabel(drift.kind)}  ${drift.name ?? drift.scheduleId ?? ""} [${drift.osTaskId || "\u2014"}]${drift.detail ? `
       ${drift.detail}` : ""}`
       );
     }
     if (opts.repair !== true && opts.prune !== true) {
-      log8("");
-      log8(t7("schedule.doctor_hint"));
+      log9("");
+      log9(t29("schedule.doctor_hint"));
       return;
     }
     if (opts.repair === true) {
       for (const outcome of await repairSchedules(report.drifts, deps)) {
         const label = outcome.drift.name ?? outcome.drift.scheduleId ?? "";
-        if (outcome.ok) log8(t7("schedule.doctor_repaired", { name: label }));
+        if (outcome.ok) log9(t29("schedule.doctor_repaired", { name: label }));
         else
-          warn2(t7("schedule.doctor_repair_failed", { name: label, detail: outcome.detail ?? "" }));
+          warn2(t29("schedule.doctor_repair_failed", { name: label, detail: outcome.detail ?? "" }));
       }
     }
     if (opts.prune === true) {
       for (const outcome of await pruneSchedules(report.drifts, deps)) {
-        if (outcome.ok) log8(t7("schedule.doctor_pruned", { id: outcome.drift.osTaskId }));
+        if (outcome.ok) log9(t29("schedule.doctor_pruned", { id: outcome.drift.osTaskId }));
         else {
           warn2(
-            t7("schedule.doctor_prune_failed", {
+            t29("schedule.doctor_prune_failed", {
               id: outcome.drift.osTaskId,
               detail: outcome.detail ?? ""
             })
@@ -3853,17 +3851,16 @@ async function runDoctor(opts) {
     ctx.close();
   }
 }
-
 // src/schedule/manage.ts
-import { automationLogsDir, t as t8 } from "@epoch-agent/infra";
+import { automationLogsDir, t as t30 } from "@epoch-agent/infra";
 async function runSetEnabled(idOrPrefix, enabled) {
   const ctx = await openSchedule();
   try {
     const def = mustFind(ctx.store, idOrPrefix);
     const outcome = await ctx.registrar.setEnabled(def, enabled);
     reportRegistration(outcome, false);
-    log8(
-      enabled ? t8("schedule.enabled_done", { name: def.name }) : t8("schedule.disabled_done", { name: def.name })
+    log9(
+      enabled ? t30("schedule.enabled_done", { name: def.name }) : t30("schedule.disabled_done", { name: def.name })
     );
   } finally {
     ctx.close();
@@ -3875,15 +3872,15 @@ async function runRemove(idOrPrefix) {
     const def = mustFind(ctx.store, idOrPrefix);
     if (def.osTaskId) reportRegistration(await ctx.registrar.unregister(def), false);
     ctx.store.remove(def.id);
-    log8(t8("schedule.removed", { name: def.name }));
-    log8(t8("schedule.removed_logs_kept", { dir: automationLogsDir(def.id, ctx.homeDir) }));
+    log9(t30("schedule.removed", { name: def.name }));
+    log9(t30("schedule.removed_logs_kept", { dir: automationLogsDir(def.id, ctx.homeDir) }));
   } finally {
     ctx.close();
   }
 }
-
 // src/schedule/run.ts
-import { t as t9 } from "@epoch-agent/infra";
+import { t as t31 } from "@epoch-agent/infra";
+import { unfixedRules } from "@epoch-agent/protocol";
 import { fireSchedule } from "@epoch-agent/runtime";
 async function runFire(scheduleId, homeDir) {
   const home = homeDir ?? EPOCH_HOME;
@@ -3895,9 +3892,9 @@ async function runFire(scheduleId, homeDir) {
     ctx.close();
   }
   if (result.missing) {
-    warn2(t9("schedule.fire_missing", { id: scheduleId }));
+    warn2(t31("schedule.fire_missing", { id: scheduleId }));
   } else if (result.disabled) {
-    warn2(t9("schedule.fire_disabled", { id: scheduleId }));
+    warn2(t31("schedule.fire_disabled", { id: scheduleId }));
   } else {
     warn2(`${statusLabel(result.status)}${result.detail ? `  ${result.detail}` : ""}`);
   }
@@ -3907,14 +3904,14 @@ async function runManual(idOrPrefix, opts) {
   const ctx = await openSchedule();
   try {
     const def = mustFind(ctx.store, idOrPrefix);
-    log8(t9("schedule.run_start", { name: def.name }));
+    log9(t31("schedule.run_start", { name: def.name }));
     const result = await fireSchedule({
       scheduleId: def.id,
       homeDir: ctx.homeDir,
       manual: true,
       registrar: ctx.registrar
     });
-    log8(`${statusLabel(result.status)}${result.detail ? `  ${result.detail}` : ""}`);
+    log9(`${statusLabel(result.status)}${result.detail ? `  ${result.detail}` : ""}`);
     const pending = result.run?.pendingApprovals ?? [];
     if (pending.length === 0) {
       process.exitCode = result.exitCode;
@@ -3923,56 +3920,49 @@ async function runManual(idOrPrefix, opts) {
     printPending(pending);
     if (opts.fix === true) {
       const added = applyFix(ctx.store, def.id, pending);
-      log8(added.length > 0 ? t9("schedule.fix_done", { n: added.length }) : t9("schedule.fix_none"));
+      log9(added.length > 0 ? t31("schedule.fix_done", { n: added.length }) : t31("schedule.fix_none"));
       return;
     }
-    log8(t9("schedule.fix_hint", { id: def.id.slice(0, 12) }));
+    log9(t31("schedule.fix_hint", { id: def.id.slice(0, 12) }));
     process.exitCode = result.exitCode;
   } finally {
     ctx.close();
   }
 }
 function printPending(pending) {
-  log8("");
-  log8(t9("schedule.pending_header", { n: pending.length }));
+  log9("");
+  log9(t31("schedule.pending_header", { n: pending.length }));
   for (const item of pending) {
-    log8(`  \xB7 ${t9("schedule.pending_line", { tool: item.toolName, target: item.target })}`);
-    if (item.suggestedRule) log8(`    \u2192 ${item.suggestedRule}`);
+    log9(`  \xB7 ${t31("schedule.pending_line", { tool: item.toolName, target: item.target })}`);
+    if (item.suggestedRule) log9(`    \u2192 ${item.suggestedRule}`);
   }
 }
 function applyFix(store, scheduleId, pending) {
   const def = store.get(scheduleId);
   if (!def) return [];
-  const existing = new Set(def.allowRules);
-  const added = [];
-  for (const item of pending) {
-    if (!item.suggestedRule || existing.has(item.suggestedRule)) continue;
-    existing.add(item.suggestedRule);
-    added.push(item.suggestedRule);
-  }
-  if (added.length > 0) store.update(scheduleId, { allowRules: [...existing] });
+  const added = unfixedRules(def.allowRules, pending);
+  if (added.length > 0) store.update(scheduleId, { allowRules: [...def.allowRules, ...added] });
   return added;
 }
-
 // src/schedule/view.ts
 import { nextRunAt, readRecording } from "@epoch-agent/core";
-import { t as t10 } from "@epoch-agent/infra";
+import { t as t32 } from "@epoch-agent/infra";
 async function runList() {
   const ctx = await openSchedule();
   try {
     const defs = ctx.store.list();
     if (defs.length === 0) {
-      log8(t10("schedule.list_empty"));
-      log8(t10("schedule.list_empty_hint"));
+      log9(t32("schedule.list_empty"));
+      log9(t32("schedule.list_empty_hint"));
       return;
     }
-    log8(t10("schedule.list_header"));
+    log9(t32("schedule.list_header"));
     for (const def of defs) {
-      const next = def.enabled ? formatWhen(nextRunAt(def.trigger, Date.now(), def.startDate, def.endDate) ?? void 0) : t10("schedule.disabled_mark");
+      const next = def.enabled ? formatWhen(nextRunAt(def.trigger, Date.now(), def.startDate, def.endDate) ?? void 0) : t32("schedule.disabled_mark");
       const danger = def.permission === "bypass" ? " \u{1F534}" : "";
-      log8(
+      log9(
         `  ${def.id.slice(0, 12)}  ${def.name}${danger}
-      ${describeTrigger(def.trigger)}  \xB7  ${t10("schedule.col_next")} ${next}  \xB7  ${t10("schedule.col_last")} ${def.lastStatus ? statusLabel(def.lastStatus) : "\u2014"}  \xB7  ${permissionLabel(def.permission)}`
+      ${describeTrigger(def.trigger)}  \xB7  ${t32("schedule.col_next")} ${next}  \xB7  ${t32("schedule.col_last")} ${def.lastStatus ? statusLabel(def.lastStatus) : "\u2014"}  \xB7  ${permissionLabel(def.permission)}`
       );
     }
   } finally {
@@ -3983,45 +3973,45 @@ async function runShow(idOrPrefix) {
   const ctx = await openSchedule();
   try {
     const def = mustFind(ctx.store, idOrPrefix);
-    log8(`${def.name}  (${def.id})`);
-    log8(`  ${t10("schedule.field_enabled")}: ${def.enabled ? t10("schedule.yes") : t10("schedule.no")}`);
-    log8(`  ${t10("schedule.field_trigger")}: ${describeTrigger(def.trigger)}`);
+    log9(`${def.name}  (${def.id})`);
+    log9(`  ${t32("schedule.field_enabled")}: ${def.enabled ? t32("schedule.yes") : t32("schedule.no")}`);
+    log9(`  ${t32("schedule.field_trigger")}: ${describeTrigger(def.trigger)}`);
     if (def.startDate ?? def.endDate) {
-      log8(`  ${t10("schedule.field_window")}: ${def.startDate ?? "\u2014"} .. ${def.endDate ?? "\u2014"}`);
+      log9(`  ${t32("schedule.field_window")}: ${def.startDate ?? "\u2014"} .. ${def.endDate ?? "\u2014"}`);
     }
-    log8(
-      `  ${t10("schedule.field_next")}: ${formatWhen(
+    log9(
+      `  ${t32("schedule.field_next")}: ${formatWhen(
         nextRunAt(def.trigger, Date.now(), def.startDate, def.endDate) ?? void 0
       )}`
     );
-    log8(`  ${t10("schedule.field_workdir")}: ${def.workDir}`);
-    if (def.model) log8(`  ${t10("schedule.field_model")}: ${def.model}`);
-    log8(`  ${t10("schedule.field_permission")}: ${permissionLabel(def.permission)}`);
-    log8(
-      `  ${t10("schedule.field_limits")}: ` + t10("schedule.limits_value", {
+    log9(`  ${t32("schedule.field_workdir")}: ${def.workDir}`);
+    if (def.model) log9(`  ${t32("schedule.field_model")}: ${def.model}`);
+    log9(`  ${t32("schedule.field_permission")}: ${permissionLabel(def.permission)}`);
+    log9(
+      `  ${t32("schedule.field_limits")}: ` + t32("schedule.limits_value", {
         turns: def.maxTurns,
         budget: def.maxBudgetUsd.toFixed(2),
         minutes: Math.round(def.timeoutMs / 6e4)
       })
     );
-    log8(`  ${t10("schedule.field_backend")}: ${def.osBackend}  ${def.osTaskId || "\u2014"}`);
-    log8(`  ${t10("schedule.field_prompt")}:`);
-    for (const line of def.prompt.split("\n")) log8(`    ${line}`);
-    log8("");
+    log9(`  ${t32("schedule.field_backend")}: ${def.osBackend}  ${def.osTaskId || "\u2014"}`);
+    log9(`  ${t32("schedule.field_prompt")}:`);
+    for (const line of def.prompt.split("\n")) log9(`    ${line}`);
+    log9("");
     printAllowlist(def);
-    log8("");
-    log8(t10("schedule.field_last_run", { when: formatWhen(def.lastRunAt) }));
+    log9("");
+    log9(t32("schedule.field_last_run", { when: formatWhen(def.lastRunAt) }));
   } finally {
     ctx.close();
   }
 }
 function printAllowlist(def) {
   if (def.permission === "bypass") {
-    log8(t10("schedule.allowlist_bypass"));
+    log9(t32("schedule.allowlist_bypass"));
     return;
   }
   if (def.permission === "plan") {
-    log8(t10("schedule.allowlist_readonly"));
+    log9(t32("schedule.allowlist_readonly"));
     return;
   }
   const lines = [
@@ -4029,9 +4019,9 @@ function printAllowlist(def) {
     ...def.allowOperations.map((v) => `    ${v}`),
     ...def.allowRules.map((v) => `    ${v}`)
   ];
-  log8(t10("schedule.allowlist_header"));
-  log8(lines.length > 0 ? lines.join("\n") : `    ${t10("schedule.allowlist_empty")}`);
-  log8(t10("schedule.allowlist_scope_note"));
+  log9(t32("schedule.allowlist_header"));
+  log9(lines.length > 0 ? lines.join("\n") : `    ${t32("schedule.allowlist_empty")}`);
+  log9(t32("schedule.allowlist_scope_note"));
 }
 async function runLogs(idOrPrefix, limit, tail) {
   const ctx = await openSchedule();
@@ -4039,7 +4029,7 @@ async function runLogs(idOrPrefix, limit, tail) {
     const def = mustFind(ctx.store, idOrPrefix);
     const runs = ctx.store.listRuns(def.id, limit);
     if (runs.length === 0) {
-      log8(t10("schedule.logs_empty"));
+      log9(t32("schedule.logs_empty"));
       return;
     }
     for (const run of runs) printRun(run);
@@ -4049,74 +4039,76 @@ async function runLogs(idOrPrefix, limit, tail) {
   }
 }
 function printRun(run) {
-  log8(
-    `  ${formatWhen(run.startedAt)}  ${statusLabel(run.status)}  ` + t10("schedule.run_meta", {
+  log9(
+    `  ${formatWhen(run.startedAt)}  ${statusLabel(run.status)}  ` + t32("schedule.run_meta", {
       turns: run.turns,
       cost: run.costUsd.toFixed(4),
-      manual: run.manual ? t10("schedule.run_manual") : ""
+      manual: run.manual ? t32("schedule.run_manual") : ""
     })
   );
-  if (run.reason) log8(`      ${run.reason}`);
+  if (run.reason) log9(`      ${run.reason}`);
   for (const pending of run.pendingApprovals) {
-    log8(
-      `      \u26A0 ${t10("schedule.pending_line", { tool: pending.toolName, target: pending.target })}`
+    log9(
+      `      \u26A0 ${t32("schedule.pending_line", { tool: pending.toolName, target: pending.target })}`
     );
     if (pending.suggestedRule) {
-      log8(`        ${t10("schedule.pending_fix", { rule: pending.suggestedRule })}`);
+      log9(`        ${t32("schedule.pending_fix", { rule: pending.suggestedRule })}`);
     }
   }
 }
 function printRecording(run) {
   if (!run.logPath) return;
-  log8("");
-  log8(t10("schedule.logs_recording", { path: run.logPath }));
+  log9("");
+  log9(t32("schedule.logs_recording", { path: run.logPath }));
   for (const envelope of readRecording(run.logPath)) {
     const event = envelope.event;
     if (event.type === "text-delta" && event.text) process.stdout.write(event.text);
-    else if (event.type === "error" && event.message) log8(`
+    else if (event.type === "error" && event.message) log9(`
 [error] ${event.message}`);
   }
   process.stdout.write("\n");
 }
-
 // src/commands/schedule.ts
 var DEFAULT_LOG_LIMIT = 10;
 function registerScheduleCommand(program2) {
-  const cmd = program2.command("schedule").description(t11("cli.schedule.summary"));
-  cmd.command("add").description(t11("cli.schedule.add")).option("--name <name>", t11("cli.schedule.opt_name")).option("--prompt <text>", t11("cli.schedule.opt_prompt")).option("--daily <HH:mm>", t11("cli.schedule.opt_daily")).option("--weekly <days>", t11("cli.schedule.opt_weekly")).option("--monthly <days>", t11("cli.schedule.opt_monthly")).option("--every <interval>", t11("cli.schedule.opt_every")).option("--once <YYYY-MM-DD>", t11("cli.schedule.opt_once")).option("--at <HH:mm>", t11("cli.schedule.opt_at")).option("--start <YYYY-MM-DD>", t11("cli.schedule.opt_start")).option("--end <YYYY-MM-DD>", t11("cli.schedule.opt_end")).option("--workdir <dir>", t11("cli.schedule.opt_workdir")).option("--model <model>", t11("cli.schedule.opt_model")).option("--permission <level>", t11("cli.schedule.opt_permission")).option("--allow-tool <name>", t11("cli.schedule.opt_allow_tool"), collect3, []).option("--allow-operation <type>", t11("cli.schedule.opt_allow_operation"), collect3, []).option("--allow-rule <rule>", t11("cli.schedule.opt_allow_rule"), collect3, []).option("--max-turns <n>", t11("cli.schedule.opt_max_turns")).option("--budget <usd>", t11("cli.schedule.opt_budget")).option("--timeout <minutes>", t11("cli.schedule.opt_timeout")).option("--disabled", t11("cli.schedule.opt_disabled")).option("--i-understand-bypass", t11("cli.schedule.opt_bypass_ack")).action((opts) => runAdd(opts));
-  cmd.command("list", { isDefault: true }).description(t11("cli.schedule.list")).action(() => runList());
-  cmd.command("show").description(t11("cli.schedule.show")).argument("<id>", t11("cli.schedule.arg_id")).action((id) => runShow(id));
-  cmd.command("enable").description(t11("cli.schedule.enable")).argument("<id>", t11("cli.schedule.arg_id")).action((id) => runSetEnabled(id, true));
-  cmd.command("disable").description(t11("cli.schedule.disable")).argument("<id>", t11("cli.schedule.arg_id")).action((id) => runSetEnabled(id, false));
-  cmd.command("rm").alias("remove").description(t11("cli.schedule.rm")).argument("<id>", t11("cli.schedule.arg_id")).action((id) => runRemove(id));
-  cmd.command("run").description(t11("cli.schedule.run")).argument("<id>", t11("cli.schedule.arg_id")).option("--fix", t11("cli.schedule.opt_fix")).action((id, opts) => runManual(id, opts));
-  cmd.command("logs").description(t11("cli.schedule.logs")).argument("<id>", t11("cli.schedule.arg_id")).option("-n, --limit <n>", t11("cli.schedule.opt_limit"), String(DEFAULT_LOG_LIMIT)).option("--tail", t11("cli.schedule.opt_tail")).action(
+  const cmd = program2.command("schedule").description(t33("cli.schedule.summary"));
+  cmd.command("add").description(t33("cli.schedule.add")).option("--name <name>", t33("cli.schedule.opt_name")).option("--prompt <text>", t33("cli.schedule.opt_prompt")).option("--daily <HH:mm>", t33("cli.schedule.opt_daily")).option("--weekly <days>", t33("cli.schedule.opt_weekly")).option("--monthly <days>", t33("cli.schedule.opt_monthly")).option("--every <interval>", t33("cli.schedule.opt_every")).option("--once <YYYY-MM-DD>", t33("cli.schedule.opt_once")).option("--at <HH:mm>", t33("cli.schedule.opt_at")).option("--start <YYYY-MM-DD>", t33("cli.schedule.opt_start")).option("--end <YYYY-MM-DD>", t33("cli.schedule.opt_end")).option("--workdir <dir>", t33("cli.schedule.opt_workdir")).option("--model <model>", t33("cli.schedule.opt_model")).option("--permission <level>", t33("cli.schedule.opt_permission")).option("--allow-tool <name>", t33("cli.schedule.opt_allow_tool"), collect3, []).option("--allow-operation <type>", t33("cli.schedule.opt_allow_operation"), collect3, []).option("--allow-rule <rule>", t33("cli.schedule.opt_allow_rule"), collect3, []).option("--max-turns <n>", t33("cli.schedule.opt_max_turns")).option("--budget <usd>", t33("cli.schedule.opt_budget")).option("--timeout <minutes>", t33("cli.schedule.opt_timeout")).option("--disabled", t33("cli.schedule.opt_disabled")).option("--i-understand-bypass", t33("cli.schedule.opt_bypass_ack")).action((opts) => runAdd(opts));
+  cmd.command("list", { isDefault: true }).description(t33("cli.schedule.list")).action(() => runList());
+  cmd.command("show").description(t33("cli.schedule.show")).argument("<id>", t33("cli.schedule.arg_id")).action((id) => runShow(id));
+  cmd.command("enable").description(t33("cli.schedule.enable")).argument("<id>", t33("cli.schedule.arg_id")).action((id) => runSetEnabled(id, true));
+  cmd.command("disable").description(t33("cli.schedule.disable")).argument("<id>", t33("cli.schedule.arg_id")).action((id) => runSetEnabled(id, false));
+  cmd.command("rm").alias("remove").description(t33("cli.schedule.rm")).argument("<id>", t33("cli.schedule.arg_id")).action((id) => runRemove(id));
+  cmd.command("run").description(t33("cli.schedule.run")).argument("<id>", t33("cli.schedule.arg_id")).option("--fix", t33("cli.schedule.opt_fix")).action((id, opts) => runManual(id, opts));
+  cmd.command("logs").description(t33("cli.schedule.logs")).argument("<id>", t33("cli.schedule.arg_id")).option("-n, --limit <n>", t33("cli.schedule.opt_limit"), String(DEFAULT_LOG_LIMIT)).option("--tail", t33("cli.schedule.opt_tail")).action(
     (id, opts) => runLogs(id, Number(opts.limit ?? DEFAULT_LOG_LIMIT), opts.tail === true)
   );
-  cmd.command("fire").description(t11("cli.schedule.fire")).argument("<id>", t11("cli.schedule.arg_id")).option("--home <dir>", t11("cli.schedule.opt_home")).action((id, opts) => runFire(id, opts.home));
-  cmd.command("doctor").description(t11("cli.schedule.doctor")).option("--repair", t11("cli.schedule.opt_repair")).option("--prune", t11("cli.schedule.opt_prune")).action((opts) => runDoctor(opts));
+  cmd.command("fire").description(t33("cli.schedule.fire")).argument("<id>", t33("cli.schedule.arg_id")).option("--home <dir>", t33("cli.schedule.opt_home")).action((id, opts) => runFire(id, opts.home));
+  cmd.command("doctor").description(t33("cli.schedule.doctor")).option("--repair", t33("cli.schedule.opt_repair")).option("--prune", t33("cli.schedule.opt_prune")).action((opts) => runDoctor(opts));
 }
 function collect3(value, previous) {
   return [...previous, value];
 }
-
 // src/commands/status.ts
 import { existsSync as existsSync7 } from "fs";
 import { statfs } from "fs/promises";
 import {
   describeIsolation,
   getConfigIssues,
-  loadConfig as loadConfig3,
+  loadConfig as loadConfig4,
   SANDBOX_COVERS,
   SANDBOX_EXCLUDES
 } from "@epoch-agent/core";
-import { confine, resolveProfile, t as t12 } from "@epoch-agent/infra";
+import {
+  allJobs,
+  confine,
+  resolveProfile,
+  t as t35
+} from "@epoch-agent/infra";
 import { hasFailure } from "@epoch-agent/protocol";
-
 // src/statusline.ts
 import { execFile as execFile2 } from "child_process";
 import { sanitizeToolOutput } from "@epoch-agent/core";
-import { shellSpawnArgs } from "@epoch-agent/infra";
+import { shellSpawnArgs, t as t34 } from "@epoch-agent/infra";
 var TIMEOUT_MS2 = 2e3;
 var MAX_WIDTH = 60;
 var MAX_BUFFER = 64 * 1024;
@@ -4137,7 +4129,6 @@ function runStatusLineCommand(command, cwd) {
         timeout: TIMEOUT_MS2,
         maxBuffer: MAX_BUFFER,
         encoding: "utf-8",
-        // 不弹黑框：Windows 上每 5 秒闪一个控制台窗口是没法用的
         windowsHide: true
       },
       (err2, stdout) => {
@@ -4145,7 +4136,7 @@ function runStatusLineCommand(command, cwd) {
           const killed = err2.killed === true;
           settle({
             text: null,
-            error: killed ? `\u8D85\u8FC7 ${TIMEOUT_MS2}ms \u6CA1\u8FD4\u56DE` : err2.message.trim()
+            error: killed ? t34("statusline.timeout", { ms: TIMEOUT_MS2 }) : err2.message.trim()
           });
           return;
         }
@@ -4159,13 +4150,12 @@ async function probeStatusLine(config, cwd) {
   if (!command) return null;
   const result = await runStatusLineCommand(command, cwd);
   if (result.text === null) {
-    return { command, ok: false, detail: result.error ?? "\u6CA1\u6709\u8F93\u51FA" };
+    return { command, ok: false, detail: result.error ?? t34("statusline.no_output") };
   }
   return { command, ok: true, detail: result.text };
 }
-
 // src/commands/status.ts
-var log9 = (msg) => {
+var log10 = (msg) => {
   process.stdout.write(msg + "\n");
 };
 var STATUS_MARK = {
@@ -4193,10 +4183,10 @@ async function describeDisk(path = ".") {
   }
 }
 function describeConfig() {
-  if (!existsSync7(CONFIG_PATH)) return "\u4E0D\u5B58\u5728";
-  loadConfig3();
+  if (!existsSync7(CONFIG_PATH)) return t35("cli.status.config_absent");
+  loadConfig4();
   const n = getConfigIssues().length;
-  return n === 0 ? "\u5B58\u5728" : `\u5B58\u5728\uFF0C\u4F46\u6709 ${n} \u5904\u95EE\u9898\uFF08\u8DD1 epoch doctor \u770B\u662F\u54EA\u4E9B\u5B57\u6BB5\uFF09`;
+  return n === 0 ? t35("cli.status.config_present") : t35("cli.status.config_present_with_issues", { count: n });
 }
 async function describeSecretBackend() {
   try {
@@ -4204,126 +4194,361 @@ async function describeSecretBackend() {
     const store = await createSecretStore();
     return store.encrypted ? store.detail : `\u26A0 ${store.detail}`;
   } catch (err2) {
-    return `\u63A2\u6D4B\u5931\u8D25\uFF08${err2 instanceof Error ? err2.message : String(err2)}\uFF09`;
+    return t35("cli.status.secret_probe_failed", {
+      message: err2 instanceof Error ? err2.message : String(err2)
+    });
   }
 }
 function workspaceLines(rt) {
-  const lines = [`  \u9879\u76EE\u6839: ${rt.workspace.root}`];
+  const lines = [`  ${t35("cli.doctor.workspace_root", { root: rt.workspace.root })}`];
   lines.push(
-    rt.trusted ? "  \u4FE1\u4EFB\u72B6\u6001: \u5DF2\u4FE1\u4EFB\uFF08\u9879\u76EE\u6307\u4EE4\u6587\u4EF6\u4F1A\u52A0\u8F7D\uFF09" : "  \u4FE1\u4EFB\u72B6\u6001: \u672A\u4FE1\u4EFB\uFF08EPOCH.md / AGENTS.md / CLAUDE.md \u4E0D\u4F1A\u52A0\u8F7D\uFF0Cepoch trust add \u53EF\u6388\u6743\uFF09"
+    `  ${rt.trusted ? t35("cli.doctor.workspace_trusted") : t35("cli.doctor.workspace_untrusted")}`
   );
   lines.push(
-    rt.workspace.extra.length === 0 ? "  \u989D\u5916\u76EE\u5F55: \u65E0\uFF08--add-dir \u53EF\u52A0\uFF09" : `  \u989D\u5916\u76EE\u5F55: ${rt.workspace.extra.length} \u4E2A`
+    `  ${rt.workspace.extra.length === 0 ? t35("cli.doctor.workspace_no_extra") : t35("cli.doctor.workspace_extra", { count: rt.workspace.extra.length })}`
   );
   for (const dir of rt.workspace.extra) lines.push(`    \xB7 ${dir}`);
   return lines;
 }
-function sandboxLines(cwd) {
+function sandboxLines(cwd, sandbox) {
   const iso = describeIsolation();
   const lines = [`
-${t12("cli.doctor.sandbox_head")}`];
+${t35("cli.doctor.sandbox_head")}`];
   if (iso.backend === "none") {
     lines.push(`  ${STATUS_MARK.skipped} ${iso.detail}`);
-    lines.push(`  ${STATUS_MARK.warn} ${t12("cli.doctor.sandbox_absent_tools")}`);
+    lines.push(
+      `  ${STATUS_MARK.warn} ${t35(
+        iso.reason === "platform-unsupported" ? "cli.doctor.sandbox_absent_by_design" : "cli.doctor.sandbox_absent_tools"
+      )}`
+    );
     return lines;
   }
   lines.push(
-    `  ${STATUS_MARK.ok} ${t12("cli.doctor.sandbox_backend", { backend: iso.backend, platform: iso.platform })}`
+    `  ${STATUS_MARK.ok} ${t35("cli.doctor.sandbox_backend", { backend: iso.backend, platform: iso.platform })}`
   );
-  lines.push(`  \xB7 ${t12("cli.doctor.sandbox_code_exec", { detail: iso.detail })}`);
+  lines.push(`  \xB7 ${t35("cli.doctor.sandbox_code_exec", { detail: iso.detail })}`);
   const probe = (mode) => confine("/bin/sh", ["-c", "true"], { mode, workspaceRoot: cwd, allowNetwork: true });
   for (const mode of ["workspace-write", "read-only"]) {
     const c = probe(mode);
     if (!c.confined) continue;
-    lines.push(`  \xB7 ${t12("cli.doctor.sandbox_terminal", { mode, enforcement: c.enforcement })}`);
-    if (c.enforcement === "partial") lines.push(`    ${t12("cli.doctor.sandbox_partial_devnull")}`);
+    lines.push(`  \xB7 ${t35("cli.doctor.sandbox_terminal", { mode, enforcement: c.enforcement })}`);
+    if (c.enforcement === "partial") lines.push(`    ${t35("cli.doctor.sandbox_partial_devnull")}`);
   }
   const writable = probe("workspace-write");
   if (writable.confined) {
-    lines.push(`  \xB7 ${t12("cli.doctor.sandbox_writable")}`);
+    lines.push(`  \xB7 ${t35("cli.doctor.sandbox_writable")}`);
     for (const dir of writable.writableDirs) lines.push(`    \xB7 ${dir}`);
   }
-  lines.push(`  \xB7 ${t12("cli.doctor.sandbox_covers", { tools: SANDBOX_COVERS.join(", ") })}`);
   lines.push(
-    SANDBOX_EXCLUDES.length === 0 ? `  ${STATUS_MARK.ok} ${t12("cli.doctor.sandbox_excludes_none")}` : `  ${STATUS_MARK.warn} ${t12("cli.doctor.sandbox_excludes", { tools: SANDBOX_EXCLUDES.join(", ") })}`
+    sandbox?.terminal === false ? `  ${STATUS_MARK.warn} ${t35("cli.doctor.sandbox_switch_off")}` : `  ${STATUS_MARK.ok} ${t35("cli.doctor.sandbox_switch_on")}`
+  );
+  lines.push(`  \xB7 ${t35("cli.doctor.sandbox_covers", { tools: SANDBOX_COVERS.join(", ") })}`);
+  lines.push(
+    SANDBOX_EXCLUDES.length === 0 ? `  ${STATUS_MARK.ok} ${t35("cli.doctor.sandbox_excludes_none")}` : `  ${STATUS_MARK.warn} ${t35("cli.doctor.sandbox_excludes", { tools: SANDBOX_EXCLUDES.join(", ") })}`
+  );
+  return lines;
+}
+function ftsLines(health) {
+  const lines = [`
+${t35("cli.doctor.fts_head")}`];
+  const indexed = health.tables.map((tb) => `${tb.table} ${tb.rows}`).join(" \xB7 ");
+  lines.push(`  \xB7 ${t35("cli.doctor.fts_rows", { messages: health.messages, indexed })}`);
+  const behind = health.tables.filter((tb) => tb.rows !== health.messages);
+  lines.push(
+    behind.length === 0 ? `  ${STATUS_MARK.ok} ${t35("cli.doctor.fts_in_sync")}` : (
+      `  ${STATUS_MARK.warn} ${t35("cli.doctor.fts_out_of_sync", {
+        tables: behind.map((tb) => `${tb.table} (${tb.rows - health.messages})`).join(", ")
+      })}`
+    )
+  );
+  lines.push(
+    health.missingTriggers.length === 0 ? `  ${STATUS_MARK.ok} ${t35("cli.doctor.fts_triggers_ok")}` : `  ${STATUS_MARK.failed} ${t35("cli.doctor.fts_triggers_missing", {
+      triggers: health.missingTriggers.join(", ")
+    })}`
+  );
+  for (const tb of health.tables) {
+    if (tb.error !== null) {
+      lines.push(
+        `  ${STATUS_MARK.failed} ${t35("cli.doctor.fts_corrupt", { table: tb.table, detail: tb.error })}`
+      );
+    }
+    if (tb.drift !== null) {
+      lines.push(
+        `  ${STATUS_MARK.warn} ${t35("cli.doctor.fts_drift", { table: tb.table, detail: tb.drift })}`
+      );
+    }
+  }
+  if (health.tables.some((tb) => !tb.external)) {
+    lines.push(`  ${STATUS_MARK.warn} ${t35("cli.doctor.fts_legacy_schema")}`);
+  }
+  if (health.indexBytes !== void 0) {
+    lines.push(`  \xB7 ${t35("cli.doctor.fts_size", { size: formatBytes(health.indexBytes) })}`);
+  }
+  if (health.space?.fileBytes !== void 0) {
+    lines.push(
+      `  \xB7 ${t35("cli.doctor.fts_space", {
+        file: formatBytes(health.space.fileBytes),
+        free: formatBytes(health.space.freeBytes)
+      })}`
+    );
+    lines.push(`  \xB7 ${t35("cli.doctor.fts_reclaim_hint")}`);
+  }
+  return lines;
+}
+function reclaimLines(report) {
+  const lines = [`
+${t35("cli.doctor.reclaim_head")}`];
+  const secs = (ms) => `${(ms / 1e3).toFixed(1)}s`;
+  lines.push(
+    `  ${STATUS_MARK.ok} ${t35("cli.doctor.reclaim_optimize", {
+      before: formatBytes(report.before.freeBytes),
+      after: formatBytes(report.afterOptimize.freeBytes),
+      ms: secs(report.optimizeMs)
+    })}`
   );
+  if (report.vacuumed) {
+    lines.push(
+      `  ${STATUS_MARK.ok} ${t35("cli.doctor.reclaim_vacuum", {
+        before: formatBytes(report.before.pageBytes),
+        after: formatBytes(report.after.pageBytes),
+        ms: secs(report.vacuumMs)
+      })}`
+    );
+    const saved = report.before.pageBytes - report.after.pageBytes;
+    lines.push(
+      `  ${STATUS_MARK.ok} ${t35("cli.doctor.reclaim_total", {
+        saved: formatBytes(saved),
+        pct: `${(saved / Math.max(1, report.before.pageBytes) * 100).toFixed(1)}%`
+      })}`
+    );
+  } else if (report.vacuumError !== null) {
+    lines.push(
+      `  ${STATUS_MARK.warn} ${t35("cli.doctor.reclaim_vacuum_skipped", {
+        detail: report.vacuumError
+      })}`
+    );
+  }
+  return lines;
+}
+var HOOK_SOURCE_LABEL = {
+  plugin: "cli.doctor.hook_source_plugin",
+  legacy: "cli.doctor.hook_source_legacy",
+  user: "cli.doctor.hook_source_user",
+  "claude-user": "cli.doctor.hook_source_claude_user",
+  project: "cli.doctor.hook_source_project",
+  "claude-project": "cli.doctor.hook_source_claude_project",
+  "claude-project-local": "cli.doctor.hook_source_claude_project_local"
+};
+function hookLines(rt) {
+  const { sources } = rt.hook;
+  if (sources.length === 0) return [];
+  const lines = [`
+${t35("cli.doctor.hook_head")}`];
+  for (const source of sources) {
+    const label = t35(HOOK_SOURCE_LABEL[source.kind]);
+    if (source.skipped) {
+      lines.push(`  ${STATUS_MARK.skipped} ${label}: ${source.path}`);
+      lines.push(`      ${t35("cli.doctor.hook_skipped")}`);
+      continue;
+    }
+    const name = source.plugin === void 0 ? label : `${label} ${source.plugin}`;
+    lines.push(
+      `  ${STATUS_MARK.ok} ${name}: ${source.path}${t35("cli.doctor.hook_count", {
+        n: source.count
+      })}`
+    );
+  }
+  return lines;
+}
+var JOB_KIND_LABEL = {
+  command: "cli.doctor.jobs_kind_command",
+  shell: "cli.doctor.jobs_kind_shell",
+  agent: "cli.doctor.jobs_kind_agent"
+};
+function jobLines(jobs) {
+  const lines = [`
+${t35("cli.doctor.jobs_head")}`];
+  const running = jobs.filter((job) => job.status === "running");
+  if (running.length === 0) {
+    lines.push(`  ${STATUS_MARK.ok} ${t35("cli.doctor.jobs_none")}`);
+    return lines;
+  }
+  lines.push(`  ${STATUS_MARK.warn} ${t35("cli.doctor.jobs_running", { n: running.length })}`);
+  for (const job of running) {
+    lines.push(
+      `    \xB7 ${t35("cli.doctor.jobs_line", {
+        kind: t35(JOB_KIND_LABEL[job.kind]),
+        id: job.id,
+        label: job.label
+      })}`
+    );
+  }
+  lines.push(`  \xB7 ${t35("cli.doctor.jobs_lifetime")}`);
   return lines;
 }
+function terminalLines(result, terminal) {
+  const head = `
+${t35("cli.doctor.terminal_head")}`;
+  if (!result.ok) {
+    if (result.failure.kind === "no-tty") {
+      return [
+        head,
+        `  ${STATUS_MARK.warn} ${t35("cli.doctor.terminal_no_tty")}`,
+        `  \xB7 ${t35("cli.doctor.terminal_alternatives")}`
+      ];
+    }
+    return [
+      head,
+      `  ${STATUS_MARK.warn} ${t35("cli.doctor.terminal_timeout", { n: result.failure.timeoutMs / 1e3 })}`
+    ];
+  }
+  switch (result.sample.kind) {
+    case "shift-enter":
+      return [head, `  ${STATUS_MARK.ok} ${t35("cli.doctor.terminal_shift_enter")}`];
+    case "enter-only":
+      if (terminal?.kind === "apple-terminal") {
+        return [
+          head,
+          `  ${STATUS_MARK.warn} ${t35("cli.doctor.terminal_apple")}`,
+          `  \xB7 ${t35("cli.doctor.terminal_alternatives")}`
+        ];
+      }
+      return [
+        head,
+        `  ${STATUS_MARK.warn} ${t35("cli.doctor.terminal_enter_only")}`,
+        `  \xB7 ${t35("cli.doctor.terminal_alternatives")}`,
+        `  \xB7 ${t35("cli.doctor.terminal_setup_hint")}`
+      ];
+    case "other":
+      return [
+        head,
+        `  ${STATUS_MARK.warn} ${t35("cli.doctor.terminal_other", { hex: result.sample.hex })}`
+      ];
+    case "interrupted":
+      return [head, `  \xB7 ${t35("cli.doctor.terminal_interrupted")}`];
+  }
+}
 async function statusLineLines(config, cwd) {
   const probe = await probeStatusLine(config, cwd);
   if (!probe) return [];
   return [
-    "\n\u81EA\u5B9A\u4E49\u72B6\u6001\u680F:",
-    `  \u547D\u4EE4: ${probe.command}`,
-    probe.ok ? `  \u2713 \u663E\u793A: ${probe.detail}` : `  \u26A0 \u8DD1\u4E0D\u8D77\u6765\uFF08\u72B6\u6001\u680F\u4F1A\u7559\u7A7A\uFF09: ${probe.detail}`
+    `
+${t35("cli.doctor.status_line_head")}`,
+    `  ${t35("cli.doctor.status_line_command", { command: probe.command })}`,
+    `  ${probe.ok ? t35("cli.doctor.status_line_ok", { detail: probe.detail }) : t35("cli.doctor.status_line_broken", { detail: probe.detail })}`
   ];
 }
 function registerStatusCommands(program2) {
-  program2.command("status").description("\u663E\u793A\u7CFB\u7EDF\u72B6\u6001").action(async () => {
-    log9(
+  program2.command("status").description(t35("cli.status.cmd_root")).action(async () => {
+    log10(
       [
-        `\u7248\u672C: ${VERSION}`,
+        t35("cli.status.version", { version: VERSION }),
         `Node: ${process.version} (${process.platform}/${process.arch})`,
-        `\u914D\u7F6E\u76EE\u5F55: ${EPOCH_HOME}`,
+        t35("cli.status.home", { path: EPOCH_HOME }),
         `Profile: ${resolveProfile()}`,
-        `\u51ED\u8BC1: ${hasCredentials() ? "\u5DF2\u914D\u7F6E" : "\u672A\u914D\u7F6E"}`,
-        `\u51ED\u636E\u5B58\u50A8: ${await describeSecretBackend()}`,
+        t35("cli.status.credentials", {
+          state: hasCredentials() ? t35("cli.status.credentials_set") : t35("cli.status.credentials_unset")
+        }),
+        t35("cli.status.secret_backend", { detail: await describeSecretBackend() }),
         `config.yaml: ${describeConfig()}`,
-        `.env: ${existsSync7(ENV_PATH) ? "\u5B58\u5728" : "\u4E0D\u5B58\u5728"}`
+        `.env: ${existsSync7(ENV_PATH) ? t35("cli.status.env_present") : t35("cli.status.env_absent")}`
       ].join("\n")
     );
   });
-  program2.command("doctor").description("\u8BCA\u65AD\u7CFB\u7EDF\u73AF\u5883").action(async () => {
-    log9(`\u2713 Node.js: ${process.version}`);
+  program2.command("doctor").description(t35("cli.doctor.cmd_root")).option("--reclaim", t35("cli.doctor.reclaim_opt")).action(async (opts) => {
+    log10(t35("cli.doctor.node", { version: process.version }));
     const avail = await describeDisk();
-    if (avail) log9(`\u2713 \u78C1\u76D8: ${avail} \u53EF\u7528`);
-    log9(`${hasCredentials() ? "\u2713" : "\u25CB"} \u51ED\u8BC1`);
-    const configIssues = existsSync7(CONFIG_PATH) ? (loadConfig3(), getConfigIssues()) : [];
+    if (avail) log10(t35("cli.doctor.disk", { avail }));
+    log10(`${hasCredentials() ? "\u2713" : "\u25CB"} ${t35("cli.doctor.credentials")}`);
+    const configIssues = existsSync7(CONFIG_PATH) ? (loadConfig4(), getConfigIssues()) : [];
     const configMark = !existsSync7(CONFIG_PATH) ? "\u25CB" : configIssues.length > 0 ? "\u26A0" : "\u2713";
-    log9(`${configMark} config: ${CONFIG_PATH}`);
+    log10(`${configMark} config: ${CONFIG_PATH}`);
     try {
       const { buildRuntime: buildRuntime4 } = await import("@epoch-agent/runtime");
       const rt = await buildRuntime4({ installSignalHandlers: true });
-      log9("\n\u5DE5\u4F5C\u533A:");
-      for (const line of workspaceLines(rt)) log9(line);
-      for (const line of sandboxLines(rt.workspace.root)) log9(line);
-      for (const line of await statusLineLines(rt.config, process.cwd())) log9(line);
-      log9("\n\u6A21\u5757\u81EA\u68C0:");
+      log10(`
+${t35("cli.doctor.workspace_head")}`);
+      for (const line of workspaceLines(rt)) log10(line);
+      for (const line of sandboxLines(rt.workspace.root, rt.config.sandbox)) log10(line);
+      for (const line of hookLines(rt)) log10(line);
+      for (const line of jobLines(allJobs().map((j) => j.info))) log10(line);
+      const { classifyTerminal, probeShiftEnter } = await import("@epoch-agent/tui");
+      for (const line of terminalLines(
+        await probeShiftEnter({ prompt: t35("cli.doctor.terminal_prompt"), timeoutMs: 8e3 }),
+        classifyTerminal(process.env)
+      ))
+        log10(line);
+      for (const line of await statusLineLines(rt.config, process.cwd())) log10(line);
+      if (rt.sessionStore) {
+        try {
+          for (const line of ftsLines(rt.sessionStore.ftsHealth())) log10(line);
+        } catch (err2) {
+          log10(`
+${t35("cli.doctor.fts_head")}`);
+          log10(
+            `  ${STATUS_MARK.warn} ${t35("cli.doctor.fts_probe_failed", {
+              detail: err2 instanceof Error ? err2.message : String(err2)
+            })}`
+          );
+        }
+        if (opts.reclaim) {
+          try {
+            for (const line of reclaimLines(rt.sessionStore.reclaimFts())) log10(line);
+          } catch (err2) {
+            log10(`
+${t35("cli.doctor.reclaim_head")}`);
+            log10(
+              `  ${STATUS_MARK.failed} ${t35("cli.doctor.reclaim_failed", {
+                detail: err2 instanceof Error ? err2.message : String(err2)
+              })}`
+            );
+          }
+        }
+      }
+      log10(`
+${t35("cli.doctor.modules_head")}`);
       const order = { failed: 0, warn: 1, skipped: 2, ok: 3 };
       const sorted = [...rt.diagnosticList].sort(
         (a, b) => (order[a.status] ?? 9) - (order[b.status] ?? 9)
       );
-      for (const d of sorted) log9(`  ${STATUS_MARK[d.status]} ${d.module}: ${d.detail}`);
+      for (const d of sorted) log10(`  ${STATUS_MARK[d.status]} ${d.module}: ${d.detail}`);
       await rt.dispose();
       if (hasFailure(rt.diagnosticList)) {
         const bad = rt.diagnosticList.filter((d) => d.status === "failed").length;
-        log9(`
-\u2717 ${bad} \u4E2A\u6A21\u5757\u8D77\u4E0D\u6765`);
+        log10(`
+${t35("cli.doctor.modules_failed", { count: bad })}`);
         process.exitCode = EXIT_CODES.FAILURE;
       }
     } catch (err2) {
-      log9(`
-\u2717 \u88C5\u914D\u5931\u8D25: ${err2 instanceof Error ? err2.message : String(err2)}`);
+      log10(
+        `
+${t35("cli.doctor.build_failed", {
+          message: err2 instanceof Error ? err2.message : String(err2)
+        })}`
+      );
     }
   });
 }
-
 // src/commands/trust.ts
 import { existsSync as existsSync8, realpathSync as realpathSync3 } from "fs";
 import { resolve as resolve3 } from "path";
-import { loadConfig as loadConfig4, TrustManager as TrustManager3 } from "@epoch-agent/core";
-import { trustPath as trustPath3 } from "@epoch-agent/infra";
-var log10 = (msg) => process.stdout.write(msg + "\n");
+import { loadConfig as loadConfig5, TrustManager as TrustManager3 } from "@epoch-agent/core";
+import { t as t36, trustPath as trustPath3, uiDateLocale as uiDateLocale4 } from "@epoch-agent/infra";
+var log11 = (msg) => process.stdout.write(msg + "\n");
 var warn3 = (msg) => process.stderr.write(msg + "\n");
-var SCOPE_LABEL = {
-  directory: "\u4EC5\u6B64\u76EE\u5F55",
-  "directory-tree": "\u542B\u5B50\u76EE\u5F55"
-};
-var LEVEL_LABEL = {
-  trusted: "\u5DF2\u4FE1\u4EFB",
-  untrusted: "\u5DF2\u62D2\u7EDD",
-  unknown: "\u672A\u51B3\u5B9A"
-};
+function scopeLabel(scope) {
+  return scope === "directory-tree" ? t36("trust.scope_tree") : t36("trust.scope_dir");
+}
+function levelLabel(level) {
+  switch (level) {
+    case "trusted":
+      return t36("trust.level_trusted");
+    case "untrusted":
+      return t36("trust.level_untrusted");
+    case "unknown":
+      return t36("trust.level_unknown");
+  }
+}
 function physicalPath(input2) {
   const abs = resolve3(input2);
   if (!existsSync8(abs)) return abs;
@@ -4334,58 +4559,64 @@ function physicalPath(input2) {
   }
 }
 function registerTrustCommand(program2) {
-  const cmd = program2.command("trust").description("\u7BA1\u7406\u5DE5\u4F5C\u533A\u4FE1\u4EFB\uFF08\u54EA\u4E9B\u76EE\u5F55\u53EF\u4EE5\u628A\u81EA\u5DF1\u7684\u9879\u76EE\u6307\u4EE4\u52A0\u8FDB system prompt\uFF09");
-  cmd.command("list", { isDefault: true }).description("\u5217\u51FA\u6240\u6709\u4FE1\u4EFB\u8BB0\u5F55").action(() => withTrust((tm) => printList3(tm)));
-  cmd.command("add").description("\u4FE1\u4EFB\u4E00\u4E2A\u76EE\u5F55").argument("[path]", "\u76EE\u5F55\u8DEF\u5F84\uFF08\u9ED8\u8BA4\u5F53\u524D\u76EE\u5F55\uFF09").option("--tree", "\u8FDE\u540C\u6240\u6709\u5B50\u76EE\u5F55\u4E00\u8D77\u4FE1\u4EFB\uFF08\u542B\u4EE5\u540E\u65B0\u5EFA / clone \u8FDB\u6765\u7684\uFF09").action((path, opts) => {
+  const cmd = program2.command("trust").description(t36("trust.cmd_root"));
+  cmd.command("list", { isDefault: true }).description(t36("trust.cmd_list")).action(() => withTrust((tm) => printList3(tm)));
+  cmd.command("add").description(t36("trust.cmd_add")).argument("[path]", t36("trust.arg_path_default")).option("--tree", t36("trust.opt_tree_add")).action((path, opts) => {
     withTrust((tm) => {
       const dir = physicalPath(path ?? process.cwd());
       tm.record(dir, "trusted", opts.tree ? "directory-tree" : "directory");
-      log10(
-        `\u2713 \u5DF2\u4FE1\u4EFB ${dir}\uFF08${opts.tree ? SCOPE_LABEL["directory-tree"] : SCOPE_LABEL.directory}\uFF09`
+      log11(
+        `\u2713 ${t36("trust.added", {
+          dir,
+          scope: scopeLabel(opts.tree ? "directory-tree" : "directory")
+        })}`
       );
     });
   });
-  cmd.command("deny").description("\u660E\u786E\u62D2\u7EDD\u4E00\u4E2A\u76EE\u5F55\uFF08\u4E4B\u540E\u4E0D\u518D\u8BE2\u95EE\uFF0C\u4E5F\u4E0D\u52A0\u8F7D\u5B83\u7684\u9879\u76EE\u6307\u4EE4\uFF09").argument("[path]", "\u76EE\u5F55\u8DEF\u5F84\uFF08\u9ED8\u8BA4\u5F53\u524D\u76EE\u5F55\uFF09").option("--tree", "\u8FDE\u540C\u6240\u6709\u5B50\u76EE\u5F55\u4E00\u8D77\u62D2\u7EDD").action((path, opts) => {
+  cmd.command("deny").description(t36("trust.cmd_deny")).argument("[path]", t36("trust.arg_path_default")).option("--tree", t36("trust.opt_tree_deny")).action((path, opts) => {
     withTrust((tm) => {
       const dir = physicalPath(path ?? process.cwd());
       tm.record(dir, "untrusted", opts.tree ? "directory-tree" : "directory");
-      log10(
-        `\u2717 \u5DF2\u62D2\u7EDD ${dir}\uFF08${opts.tree ? SCOPE_LABEL["directory-tree"] : SCOPE_LABEL.directory}\uFF09`
+      log11(
+        `\u2717 ${t36("trust.denied", {
+          dir,
+          scope: scopeLabel(opts.tree ? "directory-tree" : "directory")
+        })}`
       );
     });
   });
-  cmd.command("remove").alias("rm").description("\u5220\u6389\u4E00\u6761\u8BB0\u5F55\uFF0C\u8BE5\u76EE\u5F55\u56DE\u5230\u300C\u672A\u51B3\u5B9A\u300D").argument("<path>", "\u76EE\u5F55\u8DEF\u5F84").action((path) => {
+  cmd.command("remove").alias("rm").description(t36("trust.cmd_remove")).argument("<path>", t36("trust.arg_path")).action((path) => {
     withTrust((tm) => {
       const dir = physicalPath(path);
       if (!tm.list().some((r) => resolve3(r.path) === dir)) {
-        warn3(`${dir} \u4E0A\u6CA1\u6709\u4FE1\u4EFB\u8BB0\u5F55\uFF08\u7528 epoch trust \u67E5\u770B\u73B0\u6709\u8BB0\u5F55\uFF09`);
+        warn3(t36("trust.no_record", { dir }));
         process.exit(1);
       }
       tm.revoke(dir);
-      log10(`\u5DF2\u5220\u9664 ${dir} \u7684\u8BB0\u5F55\uFF0C\u73B0\u5728\u5224\u5B9A\u4E3A\uFF1A${LEVEL_LABEL[tm.check(dir)]}`);
+      log11(t36("trust.removed", { dir, level: levelLabel(tm.check(dir)) }));
     });
   });
 }
 function printList3(tm) {
-  if (loadConfig4().trust?.enabled === false) {
-    warn3(
-      "\u26A0 config.trust.enabled = false\uFF1A\u95F8\u95E8\u5DF2\u5173\u95ED\uFF0C\u4E0B\u9762\u7684\u8BB0\u5F55\u4E0D\u751F\u6548\uFF0C\u4EFB\u4F55\u76EE\u5F55\u7684\u9879\u76EE\u6307\u4EE4\u90FD\u4F1A\u52A0\u8F7D"
-    );
+  if (loadConfig5().trust?.enabled === false) {
+    warn3(t36("trust.gate_off"));
   }
-  log10(`\u4FE1\u4EFB\u8BB0\u5F55\uFF08${trustPath3(EPOCH_HOME)}\uFF09`);
+  log11(t36("trust.list_head", { path: trustPath3(EPOCH_HOME) }));
   const records = [...tm.list()].sort((a, b) => a.path.localeCompare(b.path));
   if (records.length === 0) {
-    log10("  (\u65E0)");
+    log11(t36("trust.list_empty"));
   }
   for (const r of records) {
     const mark = r.level === "trusted" ? "\u2713" : "\u2717";
-    const when = r.decidedAt ? new Date(r.decidedAt).toLocaleString("zh-CN") : "\u672A\u77E5";
-    log10(`  ${mark} ${r.path}  [${SCOPE_LABEL[r.scope]}]  ${when}`);
+    const when = r.decidedAt ? new Date(r.decidedAt).toLocaleString(uiDateLocale4()) : t36("trust.when_unknown");
+    log11(`  ${mark} ${r.path}  [${scopeLabel(r.scope)}]  ${when}`);
   }
   const cwd = process.cwd();
-  log10(`
-\u5F53\u524D\u76EE\u5F55 ${cwd}
-  \u5224\u5B9A\uFF1A${LEVEL_LABEL[tm.check(cwd)]}`);
+  log11(
+    `
+${t36("trust.cwd_line", { cwd })}
+${t36("trust.cwd_verdict", { level: levelLabel(tm.check(cwd)) })}`
+  );
 }
 function withTrust(fn) {
   const tm = new TrustManager3(trustPath3(EPOCH_HOME));
@@ -4393,38 +4624,46 @@ function withTrust(fn) {
   try {
     fn(tm);
   } catch (err2) {
-    warn3(`\u9519\u8BEF: ${err2 instanceof Error ? err2.message : String(err2)}`);
+    warn3(t36("trust.error", { message: err2 instanceof Error ? err2.message : String(err2) }));
     process.exit(1);
   }
 }
-
 // src/commands/upgrade.ts
-var log11 = (msg) => process.stdout.write(`${msg}
+import { t as t37 } from "@epoch-agent/infra";
+var log12 = (msg) => process.stdout.write(`${msg}
 `);
 function registerUpgradeCommand(program2) {
-  program2.command("upgrade").description("\u68C0\u67E5\u65B0\u7248\u672C\u5E76\u7ED9\u51FA\u5347\u7EA7\u547D\u4EE4").action(async () => {
+  program2.command("upgrade").description(t37("upgrade.cmd_root")).action(async () => {
     const self = selfPackage();
     const info = getInstallationInfo(self.name);
-    log11(`\u5F53\u524D\u7248\u672C: ${self.version}`);
-    log11(`\u5B89\u88C5\u65B9\u5F0F: ${info.packageManager}${info.isGlobal ? "\uFF08\u5168\u5C40\uFF09" : ""} \u2014\u2014 ${info.note}`);
+    log12(t37("upgrade.current", { version: self.version }));
+    log12(
+      t37("upgrade.installed_via", {
+        manager: info.packageManager,
+        global: info.isGlobal ? t37("installation.global_suffix") : "",
+        note: info.note
+      })
+    );
     const notice = isUpdateCheckDisabled() ? readUpdateNotice() : await refreshUpdateCache({ ttlMs: 0 }).catch(() => null);
-    if (notice) log11(`
-\u6709\u65B0\u7248\u672C: ${notice.current} \u2192 ${notice.latest}`);
-    else log11("\n\u6CA1\u6709\u67E5\u5230\u66F4\u65B0\uFF08\u5DF2\u662F\u6700\u65B0\uFF0C\u6216 registry \u6682\u65F6\u4E0D\u53EF\u8FBE\uFF09");
+    if (notice) {
+      log12(`
+${t37("upgrade.available", { current: notice.current, latest: notice.latest })}`);
+    } else log12(`
+${t37("upgrade.none")}`);
     if (info.updateCommand) {
-      log11(`
-\u5347\u7EA7\u8BF7\u81EA\u5DF1\u6267\u884C:
+      log12(`
+${t37("upgrade.how")}
   ${info.updateCommand}`);
-      log11("\n\uFF08epoch \u4E0D\u4F1A\u81EA\u52A8\u66FF\u4F60\u5347\u7EA7\uFF1A\u5168\u5C40\u76EE\u5F55\u6743\u9650\u3001\u5305\u7BA1\u7406\u5668\u5DEE\u5F02\u3001\u8FDB\u7A0B\u81EA\u5DF1\u8986\u76D6\u81EA\u5DF1\u90FD\u662F\u5751\uFF09");
+      log12(`
+${t37("upgrade.why_manual")}`);
     }
   });
-  program2.command(UPDATE_CHECK_SUBCOMMAND, { hidden: true }).description("\u5185\u90E8\u547D\u4EE4\uFF1A\u540E\u53F0\u5237\u65B0\u7248\u672C\u7F13\u5B58").action(async () => {
+  program2.command(UPDATE_CHECK_SUBCOMMAND, { hidden: true }).description(t37("upgrade.cmd_refresh")).action(async () => {
     await refreshUpdateCache().catch(() => null);
   });
 }
-
 // src/commands/web.ts
-import { t as t13 } from "@epoch-agent/infra";
+import { t as t38 } from "@epoch-agent/infra";
 import { buildRuntime as buildRuntime3 } from "@epoch-agent/runtime";
 import {
   createWebServer,
@@ -4432,7 +4671,6 @@ import {
   DEFAULT_WEB_HOST,
   DEFAULT_WEB_PORT
 } from "@epoch-agent/server";
-
 // src/commands/web-open.ts
 import { execFile as execFile3 } from "child_process";
 function isBrowsableUrl(url) {
@@ -4462,7 +4700,6 @@ function openInBrowser(url) {
     return false;
   }
 }
-
 // src/commands/web.ts
 var out = (msg) => {
   process.stdout.write(`${msg}
@@ -4473,7 +4710,7 @@ var err = (msg) => {
 `);
 };
 function registerWebCommand(program2) {
-  program2.command("web").description(t13("cli.web.summary")).option("-p, --port <port>", t13("cli.web.opt_port", { port: DEFAULT_WEB_PORT })).option("--host <host>", t13("cli.web.opt_host", { host: DEFAULT_WEB_HOST })).option("--token <token>", t13("cli.web.opt_token")).option("--no-open", t13("cli.web.opt_no_open")).option("--json", t13("cli.web.opt_json")).action(async (opts, command) => {
+  program2.command("web").description(t38("cli.web.summary")).option("-p, --port <port>", t38("cli.web.opt_port", { port: DEFAULT_WEB_PORT })).option("--host <host>", t38("cli.web.opt_host", { host: DEFAULT_WEB_HOST })).option("--token <token>", t38("cli.web.opt_token")).option("--no-open", t38("cli.web.opt_no_open")).option("--json", t38("cli.web.opt_json")).option("--plugins", t38("cli.web.opt_plugins")).action(async (opts, command) => {
     await runWeb({ ...opts, json: jsonRequested(opts.json, command.parent?.opts()["json"]) });
   });
 }
@@ -4482,7 +4719,7 @@ function jsonRequested(own, fromProgram) {
 }
 async function runWeb(opts) {
   const port = parsePort2(opts.port);
-  if (port === null) return fail(`\u7AEF\u53E3\u5FC5\u987B\u662F\u6570\u5B57\uFF1A${String(opts.port)}`);
+  if (port === null) return fail(t38("cli.web.err_port", { value: String(opts.port) }));
   const binding = decideBinding({
     ...opts.host === void 0 ? {} : { host: opts.host },
     ...port === void 0 ? {} : { port },
@@ -4491,7 +4728,7 @@ async function runWeb(opts) {
   if (!binding.ok) return fail(binding.error);
   if (!await maybePromptForTrust()) process.exit(1);
   if (!await maybePromptForExternalImports()) process.exit(1);
-  const server = await boot(binding);
+  const server = await boot(binding, opts.plugins === true);
   if (!server) return;
   const json = opts.json === true;
   const say = json ? err : out;
@@ -4506,52 +4743,32 @@ async function runWeb(opts) {
   });
   if (lines.machine) out(lines.machine);
   for (const line of lines.human) say(line);
-  if (opts.open && !openInBrowser(server.url)) say(BROWSER_FAILED);
+  if (opts.open && !openInBrowser(server.url)) say(browserFailed());
   installShutdown(server, say);
 }
-var MISSING_WEB_ROOT = "\u524D\u7AEF\u4EA7\u7269\u6CA1\u627E\u5230\uFF0C\u672C\u6B21\u53EA\u63D0\u4F9B REST / SSE\uFF0C\u6253\u5F00\u662F\u5360\u4F4D\u9875\u3002\u8DD1\u4E00\u6B21 pnpm build \u518D\u8BD5";
-var BROWSER_FAILED = "  \uFF08\u6CA1\u80FD\u81EA\u52A8\u6253\u5F00\u6D4F\u89C8\u5668\uFF0C\u590D\u5236\u4E0A\u9762\u90A3\u6761\u5730\u5740\u5373\u53EF\uFF09";
-async function boot(binding) {
+var missingWebRoot = () => t38("cli.web.missing_root");
+var browserFailed = () => `  ${t38("cli.web.browser_failed")}`;
+function pluginsOption(plugins) {
+  return plugins ? { hostMarketplaces: { sources: [] } } : {};
+}
+async function boot(binding, plugins) {
   const runtime = await buildRuntime3({
-    // **显式 false，且不许改成 true。** runtime 装的那个处理器是
-    // `dispose(); process.exit(0)`，它注册得比下面 installShutdown() 早，
-    // 于是 Ctrl+C 会在 HTTP 服务关闭、挂起审批 abandon 之前就把进程打死。
-    // web 的收尾顺序是 §4.3 定的：abandon + abort → 断连接 → dispose
     installSignalHandlers: false,
-    // 浏览器**能**弹审批框，所以这里是交互式的。不显式给的话
-    // `isNonInteractive()` 会去猜 TTY —— 从桌面启动器拉起时没有 TTY，
-    // 于是 `config.headless.allowTools` 这份只该在 CI 里生效的预授权白名单
-    // 会在一个完全能弹框的界面下悄悄生效，审批被跳过而没人知道
-    interactive: true
+    interactive: true,
+    ...pluginsOption(plugins)
   });
   if (!runtime.session) {
     await runtime.dispose();
-    fail(`\u542F\u52A8\u5931\u8D25\uFF1Aprovider \u4E0D\u53EF\u7528\uFF0C\u8FD0\u884C epoch model \u914D\u7F6E
+    fail(`${t38("cli.web.no_provider")}
 ${runtime.diagnostics.join("\n")}`);
     return null;
   }
   const created = await createWebServer({
     runtime,
     version: VERSION,
-    // **不再传 `artifactsRoot`**（方案 54 §二）：缺省就是 `runtime.artifactsRoot`，
-    // 也就是引擎这次真的往里写产物的那个目录。以前这里是
-    // `artifactsDir(undefined, runtime.config.homeDir)` —— 算得对，但它是**第二处**
-    // 在算同一个路径，而第二处存在本身就是那个 bug 的形状：嵌入宿主照抄这一行、
-    // 少传一个 homeDir，就是产物 404 而全链路 200。
-    // CLI 自己也走缺省，是为了让宿主走的那条路每天被跑到。
-    //
-    // **不再传 workDir**（决定 18）：工作区变成逐会话绑定之后，「这个服务的工作
-    // 目录」不再是一个能回答问题的事实。服务端问的是 `runtime.workspaces`，
-    // 而引导会话那份绑定就是 `buildRuntime()` 里的 workDir（默认 `process.cwd()`）——
-    // 同一个值，但只有一个真源
     host: binding.host,
     port: binding.port,
-    // 用上面那一次判定产出的 token，不让 server 再生成一个 ——
-    // 两个 token 里只有一个会被写进 URL，另一个就是纯粹的困惑来源
     token: binding.token
-    // **不传 webRoot**：前端产物 2026-08-14 起随 server 一起发，由它自己定位
-    // （`server/src/web-root.ts`）。cli 原来那份探测是同一段逻辑的第二个副本，
-    // 而副本只有 cli 这一条路走得到 —— 嵌入宿主照样是占位页
   });
   if (!created.ok) {
     await runtime.dispose();
@@ -4564,13 +4781,13 @@ function announceLines(input2) {
   const human = [];
   if (!input2.json) {
     human.push(`  Epoch Web  http://${input2.host}:${input2.port}`);
-    human.push(`  \u6253\u5F00\u8FD9\u6761\uFF08\u542B\u4E00\u6B21\u6027 token\uFF09\uFF1A
+    human.push(`  ${t38("cli.web.open_this")}
   ${input2.url}`);
   }
   if (input2.lanExposed) {
-    human.push("  \u26A0 \u5DF2\u66B4\u9732\u5230\u56DE\u73AF\u4E4B\u5916\uFF1A\u540C\u7F51\u6BB5\u7684\u4EFB\u4F55\u4EBA\u62FF\u5230\u8FD9\u6761 URL \u90FD\u80FD\u64CD\u4F5C\u4F60\u7684 agent");
+    human.push(`  ${t38("cli.web.lan_exposed")}`);
   }
-  if (input2.placeholder) human.push(`  \u26A0 ${MISSING_WEB_ROOT}`);
+  if (input2.placeholder) human.push(`  \u26A0 ${missingWebRoot()}`);
   if (!input2.json) return { human };
   const machine = JSON.stringify({
     url: input2.url,
@@ -4585,7 +4802,8 @@ function installShutdown(server, say) {
   const onSignal = () => {
     if (shuttingDown) process.exit(1);
     shuttingDown = true;
-    say("\n  \u6536\u5C3E\u4E2D\u2026");
+    say(`
+  ${t38("cli.web.shutting_down")}`);
     server.close().then(
       () => process.exit(0),
       () => process.exit(1)
@@ -4603,10 +4821,19 @@ function fail(message) {
   err(message);
   process.exit(1);
 }
-
+// src/language.ts
+import { loadConfig as loadConfig6 } from "@epoch-agent/core";
+import { resolveLang, setLang } from "@epoch-agent/infra";
+function applyConfiguredLanguage() {
+  try {
+    setLang(resolveLang(loadConfig6().display?.language));
+  } catch {
+  }
+}
 // src/index.ts
+applyConfiguredLanguage();
 var program = new Command();
-program.name("epoch").description("Epoch Agent CLI \u667A\u80FD\u4F53");
+program.name("epoch").description(t39("cli.program_description"));
 registerConfigCommand(program);
 registerMcpCommand(program);
 registerModelCommand(program);
@@ -4615,6 +4842,7 @@ registerSessionsCommand(program);
 registerAgentsCommand(program);
 registerPluginCommand(program);
 registerTrustCommand(program);
+registerComplianceCommand(program);
 registerScheduleCommand(program);
 registerUpgradeCommand(program);
 registerWebCommand(program);