@epoch-agent/infra 0.1.0 → 0.3.1

package/dist/index.js

@@ -1,12 +1,12 @@
 import { platform, homedir, tmpdir } from 'os';
-import { join, dirname, delimiter, resolve as resolve$1, isAbsolute, basename, win32, posix, relative } from 'path';
+import { join, dirname, basename, delimiter, resolve as resolve$1, isAbsolute, win32, posix, relative } from 'path';
 import { existsSync, readFileSync, writeFileSync, mkdirSync, openSync, closeSync, writeSync, renameSync, rmSync, chmodSync, lstatSync, realpathSync, accessSync, constants } from 'fs';
 import Database from 'better-sqlite3';
 import { execFileSync, execFile, spawn } from 'child_process';
 import { TextDecoder } from 'util';
-import { createRequire } from 'module';
 import { fileURLToPath } from 'url';
 import { load } from 'js-yaml';
+import { createRequire } from 'module';
 import { randomBytes, createCipheriv, createDecipheriv, createHash } from 'crypto';
 
 // src/paths.ts
@@ -38,6 +38,9 @@ function skillsDir(homeDir = resolveHomeDir()) {
 function policiesDir(homeDir = resolveHomeDir()) {
   return join(homeDir, "policies");
 }
+function complianceDir(homeDir = resolveHomeDir()) {
+  return join(homeDir, "compliance");
+}
 function hooksPath(homeDir = resolveHomeDir()) {
   return join(homeDir, "hooks.json");
 }
@@ -132,6 +135,19 @@ function projectHooksPath(projectRoot) {
 function projectPoliciesDir(projectRoot) {
   return join(projectRoot, PROJECT_DIR_NAME, "policies");
 }
+function projectComplianceDir(projectRoot) {
+  return join(projectRoot, PROJECT_DIR_NAME, "compliance");
+}
+var CLAUDE_DIR_NAME = ".claude";
+function claudeUserSettingsPath(home = homedir()) {
+  return join(home, CLAUDE_DIR_NAME, "settings.json");
+}
+function projectClaudeSettingsPath(projectRoot) {
+  return join(projectRoot, CLAUDE_DIR_NAME, "settings.json");
+}
+function projectClaudeLocalSettingsPath(projectRoot) {
+  return join(projectRoot, CLAUDE_DIR_NAME, "settings.local.json");
+}
 function managedSettingsPath(os = platform()) {
   const FILE = "managed-settings.json";
   if (os === "win32") {
@@ -152,8 +168,9 @@ function setSectionField(yaml, section, field, value) {
   const entry = `  ${field}: ${value}`;
   const header = new RegExp(`^${section}:[ \\t]*$`, "m");
   if (!header.test(yaml)) {
-    return `${yaml.trimEnd()}
-${section}:
+    const head = yaml.trimEnd();
+    return `${head === "" ? "" : `${head}
+`}${section}:
 ${entry}
 `;
   }
@@ -269,7 +286,6 @@ function writeArtifact(dir, name, extension, data, onExisting = "unique") {
   handle.close();
   return handle.path;
 }
-
 // src/text-slice.ts
 function isHighSurrogate(code) {
   return code >= 55296 && code <= 56319;
@@ -459,7 +475,6 @@ function schemaVersion(db, namespace) {
   const row = db.prepare("SELECT MAX(version) AS v FROM _epoch_migrations WHERE namespace = ?").get(namespace);
   return row?.v ?? 0;
 }
-
 // src/mask.ts
 function maskApiKey(key) {
   if (!key || key.length < 8) return "***";
@@ -491,7 +506,6 @@ function maskSensitive(data) {
   }
   return masked;
 }
-
 // src/logger.ts
 var currentLevel = "info";
 function setLogLevel(level) {
@@ -529,6 +543,177 @@ function createLogger(module) {
     }
   };
 }
+var LANGS = ["zh", "en"];
+var DEFAULT_LANG = "zh";
+function isLang(value) {
+  return LANGS.includes(value);
+}
+var catalogs = /* @__PURE__ */ new Map();
+var pending = [];
+var localesDirCache;
+var currentLangValue;
+function localesDir() {
+  if (localesDirCache !== void 0) return localesDirCache ?? void 0;
+  const override = process.env.EPOCH_LOCALES_DIR;
+  if (override) {
+    localesDirCache = existsSync(override) ? override : null;
+    return localesDirCache ?? void 0;
+  }
+  let dir = dirname(fileURLToPath(import.meta.url));
+  for (let depth = 0; depth < 8; depth += 1) {
+    if (basename(dir) === "node_modules") break;
+    const candidate = join(dir, "locales");
+    if (existsSync(join(candidate, `${DEFAULT_LANG}.yaml`))) {
+      localesDirCache = candidate;
+      return candidate;
+    }
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  localesDirCache = null;
+  return void 0;
+}
+function flatten(value, prefix, out) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return;
+  for (const [key, child] of Object.entries(value)) {
+    const path = prefix ? `${prefix}.${key}` : key;
+    if (typeof child === "string") out[path] = child;
+    else flatten(child, path, out);
+  }
+}
+function fallbackDetail(key, vars) {
+  const text = t(key, vars);
+  if (text !== key) return text;
+  switch (key) {
+    case "i18n.locales_missing":
+      return "locales directory not found; UI text will show as key paths";
+    case "i18n.catalog_missing":
+      return `locales/${vars["file"]} is missing; ${vars["lang"]} text falls back to the default language`;
+    case "i18n.catalog_invalid":
+      return `locales/${vars["file"]} is not valid YAML (${vars["reason"]}); fell back to the built-in default`;
+    default:
+      return key;
+  }
+}
+function loadCatalog(lang) {
+  const cached2 = catalogs.get(lang);
+  if (cached2) return cached2;
+  const result = readCatalog(lang);
+  catalogs.set(lang, result);
+  return result;
+}
+function readCatalog(lang) {
+  const dir = localesDir();
+  if (!dir) {
+    pending.push({
+      code: "locales-missing",
+      render: () => fallbackDetail("i18n.locales_missing", {})
+    });
+    return { entries: {}, error: "\u627E\u4E0D\u5230 locales \u76EE\u5F55" };
+  }
+  const file = `${lang}.yaml`;
+  const path = join(dir, file);
+  if (!existsSync(path)) {
+    pending.push({
+      code: "catalog-missing",
+      render: () => fallbackDetail("i18n.catalog_missing", { file, lang })
+    });
+    return { entries: {}, error: `${path} \u4E0D\u5B58\u5728` };
+  }
+  let parsed;
+  try {
+    parsed = load(readFileSync(path, "utf-8"));
+  } catch (err) {
+    const reason = (err instanceof Error ? err.message : String(err)).split("\n")[0] ?? "";
+    pending.push({
+      code: "catalog-invalid",
+      render: () => fallbackDetail("i18n.catalog_invalid", { file, reason })
+    });
+    return { entries: {}, error: reason };
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    const reason = "\u9876\u5C42\u4E0D\u662F\u952E\u503C\u5BF9";
+    pending.push({
+      code: "catalog-invalid",
+      render: () => fallbackDetail("i18n.catalog_invalid", { file, reason })
+    });
+    return { entries: {}, error: reason };
+  }
+  const entries = {};
+  flatten(parsed, "", entries);
+  return { entries };
+}
+function resetI18n() {
+  catalogs.clear();
+  pending = [];
+  localesDirCache = void 0;
+  currentLangValue = void 0;
+}
+var PLACEHOLDER = /\{(\w+)\}/g;
+function placeholdersOf(text) {
+  const found = [];
+  for (const match of text.matchAll(PLACEHOLDER)) {
+    const name = match[1];
+    if (name && !found.includes(name)) found.push(name);
+  }
+  return found;
+}
+function t(key, vars, lang) {
+  const target = lang ?? currentLang();
+  const text = loadCatalog(target).entries[key] ?? loadCatalog(DEFAULT_LANG).entries[key] ?? key;
+  if (!vars) return text;
+  return text.replace(PLACEHOLDER, (whole, name) => {
+    const value = vars[name];
+    return value === void 0 ? whole : String(value);
+  });
+}
+function currentLang() {
+  currentLangValue ??= resolveLang();
+  return currentLangValue;
+}
+function setLang(lang) {
+  currentLangValue = lang;
+}
+function uiDateLocale() {
+  switch (currentLang()) {
+    case "zh":
+      return "zh-CN";
+    case "en":
+      return "en-US";
+  }
+}
+function systemLocaleSignals() {
+  const env = process.env;
+  const signals = [env.LC_ALL, env.LC_MESSAGES, env.LANG, env.LANGUAGE].filter(
+    (v) => typeof v === "string" && v.length > 0
+  );
+  try {
+    signals.push(new Intl.DateTimeFormat().resolvedOptions().locale);
+  } catch {
+  }
+  return signals;
+}
+function langFromLocale(tag) {
+  const primary = tag.split(/[.@]/)[0]?.replace("_", "-").toLowerCase() ?? "";
+  if (!primary || primary === "c" || primary === "posix") return void 0;
+  if (primary === "zh" || primary.startsWith("zh-")) return "zh";
+  return "en";
+}
+function resolveLang(configured, signals) {
+  const fromEnv = process.env.EPOCH_LANGUAGE;
+  if (fromEnv && isLang(fromEnv)) return fromEnv;
+  if (configured && isLang(configured)) return configured;
+  for (const tag of signals ?? systemLocaleSignals()) {
+    const lang = langFromLocale(tag);
+    if (lang) return lang;
+  }
+  return DEFAULT_LANG;
+}
+function i18nDiagnostics() {
+  return pending.map((item) => ({ code: item.code, detail: item.render() }));
+}
+// src/platform.ts
 var IS_WINDOWS = platform() === "win32";
 var WINDOWS_HIDE_FLAGS = IS_WINDOWS ? { windowsHide: true } : {};
 function getPythonCommand() {
@@ -538,9 +723,7 @@ function getPythonCommand() {
 var SHELL_KINDS = ["cmd", "powershell", "pwsh"];
 var SHELL_EXECUTABLES = {
   cmd: "cmd.exe",
-  // Windows PowerShell 5.1，随系统自带
   powershell: "powershell.exe",
-  // PowerShell 7+，要自己装
   pwsh: "pwsh.exe"
 };
 var configuredShell = null;
@@ -563,7 +746,7 @@ function probeShell(kind) {
   for (const dir of dirs) {
     if (existsSync(join(dir, exe))) return null;
   }
-  return `shell: \u914D\u7F6E\u7684 ${kind}\uFF08${exe}\uFF09\u4E0D\u5728 PATH \u4E0A\uFF0C\u5DF2\u56DE\u9000\u5230 cmd.exe`;
+  return t("infra_misc.shell_not_on_path", { kind, exe });
 }
 var PS_EXIT_TRAILER = [
   "$__epochOk = $?",
@@ -605,15 +788,10 @@ function encodingForCodePage(codePage) {
   const table = {
     65001: "utf-8",
     936: "gbk",
-    // 简体中文
     950: "big5",
-    // 繁体中文
     932: "shift_jis",
-    // 日文
     949: "euc-kr",
-    // 韩文
     866: "ibm866",
-    // 西里尔 OEM
     874: "windows-874",
     1250: "windows-1250",
     1251: "windows-1251",
@@ -695,7 +873,10 @@ function createStreamDecoder(fallbackEncoding = detectConsoleEncoding()) {
     }
   };
 }
-var RIPGREP_INSTALL_HINT = IS_WINDOWS ? "winget install BurntSushi.ripgrep.MSVC\uFF08\u6216 scoop install ripgrep\uFF09" : process.platform === "darwin" ? "brew install ripgrep" : "apt install ripgrep / dnf install ripgrep / pacman -S ripgrep";
+function ripgrepInstallHint() {
+  if (IS_WINDOWS) return t("infra_misc.ripgrep_install_windows");
+  return process.platform === "darwin" ? "brew install ripgrep" : "apt install ripgrep / dnf install ripgrep / pacman -S ripgrep";
+}
 function ensureExecutable(path) {
   try {
     accessSync(path, constants.X_OK);
@@ -745,6 +926,7 @@ function defaultResolveVendor(specifier) {
 function readVendorVersion(manifestPath) {
   try {
     const pkg = require_(manifestPath);
+    if (typeof pkg.ripgrepVersion === "string") return pkg.ripgrepVersion;
     return typeof pkg.version === "string" ? pkg.version : void 0;
   } catch {
     return void 0;
@@ -771,13 +953,20 @@ function resolve(options) {
     if (manifest) {
       const api = platform10 === "win32" ? win32 : posix;
       const binary = api.join(api.dirname(manifest), "bin", platform10 === "win32" ? "rg.exe" : "rg");
-      if (exists(binary) && (platform10 === "win32" || makeExecutable(binary))) {
-        const version = readVendorVersion(manifest);
-        return { mode: "builtin", command: binary, ...version ? { version } : {} };
+      if (exists(binary)) {
+        if (platform10 === "win32" || makeExecutable(binary)) {
+          const version = readVendorVersion(manifest);
+          return { mode: "builtin", command: binary, ...version ? { version } : {} };
+        }
+        return {
+          mode: "not-executable",
+          command: "rg",
+          hint: t("infra_misc.ripgrep_chmod_hint", { path: binary })
+        };
       }
     }
   }
-  return { mode: "missing", command: "rg", hint: RIPGREP_INSTALL_HINT };
+  return { mode: "missing", command: "rg", hint: ripgrepInstallHint() };
 }
 var cached = null;
 function resolveRipgrep(options) {
@@ -812,24 +1001,55 @@ async function killProcessTree(options) {
   const { pid, pty, detached = false, platform: platform10 = platform() } = options;
   if (!isRealChildPid(pid)) return;
   if (platform10 === "win32") {
-    const descendants2 = await collectProcessTree(pid, platform10);
+    const snapshot = await windowsSnapshot();
+    if (snapshot.pids.size > 0 && !snapshot.pids.has(pid)) {
+      tryPtyKill(pty);
+      return;
+    }
+    const descendants2 = walkTree(pid, (parent) => snapshot.childrenOf.get(parent) ?? []);
+    await killPids(descendants2, { signal: "SIGKILL" });
+    const swept = isAlive(pid) ? await runProbe("taskkill", ["/pid", String(pid), "/f", "/t"]) : "";
     tryPtyKill(pty);
-    await killPids([...descendants2, pid], { signal: "SIGKILL" });
-    await runProbe("taskkill", ["/pid", String(pid), "/f", "/t"]);
+    if (!swept && isAlive(pid)) await killPids([pid], { signal: "SIGKILL" });
     return;
   }
   const descendants = await collectProcessTree(pid, platform10);
   await killPids([...descendants, pid], options, {
-    // 只有 detached 才允许碰 -pid —— 这一行就是文件头那条约束的落点
     ...detached ? { groupLeaderPid: pid } : {},
     ...pty ? { pty } : {}
   });
 }
+async function collectProcessTreeStamped(rootPid, platform10 = platform()) {
+  if (!isRealChildPid(rootPid)) return [];
+  if (platform10 !== "win32") {
+    const pids = await collectProcessTree(rootPid, platform10);
+    return pids.map((pid) => ({ pid, born: "" }));
+  }
+  const snapshot = await windowsSnapshot();
+  return walkTree(rootPid, (parent) => snapshot.childrenOf.get(parent) ?? []).map((pid) => ({
+    pid,
+    born: snapshot.bornOf.get(pid) ?? ""
+  }));
+}
+async function killStampedPids(stamped, options = {}, platform10 = platform()) {
+  if (stamped.length === 0) return;
+  if (platform10 !== "win32") {
+    await killPids(
+      stamped.map((s) => s.pid),
+      options
+    );
+    return;
+  }
+  const snapshot = await windowsSnapshot();
+  const targets = snapshot.pids.size === 0 ? stamped.map((s) => s.pid) : stamped.filter((s) => s.born === "" || snapshot.bornOf.get(s.pid) === s.born).map((s) => s.pid);
+  if (targets.length > 0) await killPids(targets, options);
+}
 async function killPids(pids, options = {}, extra = {}) {
   const { escalate = false, isExited = () => false, killTimeoutMs = SIGKILL_TIMEOUT_MS } = options;
   const targets = pids.filter(isRealChildPid);
   const first = options.signal ?? (escalate ? "SIGTERM" : "SIGKILL");
   sweep(targets, first, extra);
+  tryPtyKill(extra.pty, first);
   if (!escalate || isExited()) return;
   await delay(killTimeoutMs);
   if (isExited()) return;
@@ -838,7 +1058,14 @@ async function killPids(pids, options = {}, extra = {}) {
 function sweep(targets, signal, extra) {
   if (extra.groupLeaderPid !== void 0) sendSignal(-extra.groupLeaderPid, signal);
   for (const target of targets) sendSignal(target, signal);
-  tryPtyKill(extra.pty, signal);
+}
+function isAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err) {
+    return err.code === "EPERM";
+  }
 }
 function sendSignal(target, signal) {
   try {
@@ -855,14 +1082,35 @@ function tryPtyKill(pty, signal) {
 }
 async function collectProcessTree(rootPid, platform10 = platform()) {
   if (!isRealChildPid(rootPid)) return [];
-  const listChildren = platform10 === "win32" ? await snapshotLister() : listChildrenViaPgrep;
+  if (platform10 === "win32") {
+    const snapshot = await windowsSnapshot();
+    return walkTree(rootPid, (parent) => snapshot.childrenOf.get(parent) ?? []);
+  }
   const found = [];
   const seen = /* @__PURE__ */ new Set([rootPid]);
   let frontier = [rootPid];
   for (let depth = 0; depth < MAX_TREE_DEPTH && frontier.length > 0; depth++) {
     const next = [];
     for (const parent of frontier) {
-      for (const child of await listChildren(parent)) {
+      for (const child of await listChildrenViaPgrep(parent)) {
+        if (seen.has(child) || found.length >= MAX_TREE_SIZE) continue;
+        seen.add(child);
+        found.push(child);
+        next.push(child);
+      }
+    }
+    frontier = next;
+  }
+  return found.reverse();
+}
+function walkTree(rootPid, childrenOf) {
+  const found = [];
+  const seen = /* @__PURE__ */ new Set([rootPid]);
+  let frontier = [rootPid];
+  for (let depth = 0; depth < MAX_TREE_DEPTH && frontier.length > 0; depth++) {
+    const next = [];
+    for (const parent of frontier) {
+      for (const child of childrenOf(parent)) {
         if (seen.has(child) || found.length >= MAX_TREE_SIZE) continue;
         seen.add(child);
         found.push(child);
@@ -877,9 +1125,13 @@ var listChildrenViaPgrep = async (parentPid) => {
   const stdout = await runProbe("pgrep", ["-P", String(parentPid)]);
   return stdout.split("\n").map((line) => Number.parseInt(line.trim(), 10)).filter(isRealChildPid);
 };
-async function snapshotLister() {
-  const childrenOf = buildChildrenMap(await readWindowsSnapshot());
-  return (parentPid) => Promise.resolve(childrenOf.get(parentPid) ?? []);
+async function windowsSnapshot() {
+  const records = await readWindowsSnapshot();
+  return {
+    pids: new Set(records.map((record) => record.pid)),
+    childrenOf: buildChildrenMap(records),
+    bornOf: new Map(records.map((record) => [record.pid, record.born]))
+  };
 }
 async function readWindowsSnapshot() {
   const fast = parseWmicCsv(await runProbe("wmic", WMIC_SNAPSHOT_ARGS, SNAPSHOT_MAX_BUFFER));
@@ -917,7 +1169,6 @@ function parseWmicCsv(stdout) {
     return {
       pid: Number.parseInt(cells[atPid] ?? "", 10),
       ppid: Number.parseInt(cells[atPpid] ?? "", 10),
-      // `20260807071417.130820+480` → 留到秒的那 14 位就够比大小了
       born: normalizeBorn((cells[atBorn] ?? "").slice(0, 14))
     };
   });
@@ -958,7 +1209,6 @@ function runProbe(file, args2, maxBuffer) {
 function delay(ms) {
   return new Promise((resolve5) => setTimeout(resolve5, ms));
 }
-
 // src/shell-parse.ts
 function defaultFlavor() {
   return IS_WINDOWS ? "windows" : "posix";
@@ -1111,7 +1361,7 @@ function parseShellCommand(command, flavor) {
   const hasSubstitution = kind === "windows" ? detectWindowsSubstitution(stripped) : detectPosixSubstitution(stripped);
   const tokens = tokenize(stripped, kind);
   if (tokens === null) {
-    return { segments: [], hasSubstitution, parseError: "\u5F15\u53F7\u4E0D\u95ED\u5408", stripped };
+    return { segments: [], hasSubstitution, parseError: t("infra_misc.unclosed_quote"), stripped };
   }
   const segments = [];
   let words = [];
@@ -1156,7 +1406,6 @@ function hasSideEffectChannel(parsed) {
   if (parsed.segments.length > 1) return true;
   return parsed.segments.some((s) => s.redirects.length > 0);
 }
-
 // src/command-safety.ts
 function rootMatches(rule, root) {
   if (typeof rule === "string") return root === rule;
@@ -1206,7 +1455,6 @@ function inlineCodeExecOf(seg) {
   return args(seg).some((a) => entry.flags.includes(a)) ? seg.root : null;
 }
 var CODE_EXEC_ROOTS = [
-  // 解释器
   "python",
   "python2",
   "python3",
@@ -1218,25 +1466,21 @@ var CODE_EXEC_ROOTS = [
   "perl",
   "php",
   "lua",
-  // 包运行器 —— 后面跟什么都能跑
   "npx",
   "bunx",
   "npm run",
   "yarn run",
   "pnpm run",
   "bun run",
-  // shell 与远程执行
   ...SHELLS,
   "ssh",
   "eval",
   "exec",
   "env",
   "xargs",
-  // 提权
   "sudo",
   "doas",
   "su",
-  // PowerShell
   "powershell",
   "pwsh"
 ];
@@ -1279,69 +1523,70 @@ var ENCODED_COMMAND_RULE = {
     const got = m[1].toLowerCase();
     return got.length > 0 && got.startsWith("e") && "encodedcommand".startsWith(got);
   }),
-  desc: "PowerShell \u7F16\u7801\u547D\u4EE4\uFF08-EncodedCommand\uFF09\uFF0C\u5185\u5BB9\u4E0D\u53EF\u8BFB"
+  desc: () => t("danger.ps_encoded_command")
 };
 var POSIX_RULES = [
   {
     root: "rm",
     when: (s) => hasRecursiveForce(s) && args(s).some(isDangerousRmTarget),
-    desc: "\u9012\u5F52\u5220\u9664\u6839\u76EE\u5F55\u6216\u7CFB\u7EDF\u76EE\u5F55"
+    desc: () => t("danger.rm_system_root")
   },
   {
     root: "rm",
     when: (s) => hasRecursiveForce(s) && args(s).some(isEmptyVarSlash),
-    desc: "rm -rf $VAR/ \u2014\u2014 \u53D8\u91CF\u4E3A\u7A7A\u65F6\u7B49\u4E8E\u5220\u6839"
+    desc: () => t("danger.rm_empty_var")
   },
   {
-    // `find / -delete` / `find / -exec rm` —— 老实现整条漏了
     root: "find",
     when: (s) => args(s).some(isDangerousRmTarget) && args(s).some((a) => a === "-delete" || a === "-exec" || a === "-execdir"),
-    desc: "\u5728\u7CFB\u7EDF\u76EE\u5F55\u4E0A\u6279\u91CF\u5220\u9664\uFF08find -delete / -exec\uFF09"
+    desc: () => t("danger.find_delete_system")
   },
-  { root: /^mkfs(\.\w+)?$/, desc: "\u683C\u5F0F\u5316\u6587\u4EF6\u7CFB\u7EDF" },
+  { root: /^mkfs(\.\w+)?$/, desc: () => t("danger.mkfs") },
   {
     root: "dd",
     when: (s) => args(s).some((a) => a.startsWith("of=/dev/")),
-    desc: "\u76F4\u63A5\u5199\u88F8\u8BBE\u5907"
+    desc: () => t("danger.dd_raw_device")
+  },
+  {
+    root: "dd",
+    when: (s) => args(s).some((a) => a.startsWith("if=")),
+    desc: () => t("danger.dd_disk_io")
   },
-  { root: "dd", when: (s) => args(s).some((a) => a.startsWith("if=")), desc: "\u78C1\u76D8\u7EA7\u8BFB\u5199" },
-  { root: "shred", desc: "\u4E0D\u53EF\u6062\u590D\u5730\u64E6\u9664\u6587\u4EF6" },
-  { root: ["fdisk", "parted"], desc: "\u78C1\u76D8\u5206\u533A\u64CD\u4F5C" },
+  { root: "shred", desc: () => t("danger.shred") },
+  { root: ["fdisk", "parted"], desc: () => t("danger.partition") },
   {
     root: "diskutil",
     when: (s) => (args(s)[0] ?? "").toLowerCase().startsWith("erase"),
-    desc: "\u78C1\u76D8\u5206\u533A\u64CD\u4F5C"
+    desc: () => t("danger.partition")
   },
-  { root: "chmod", when: (s) => args(s).includes("777"), desc: "\u5168\u6743\u9650\u5F00\u653E" },
+  { root: "chmod", when: (s) => args(s).includes("777"), desc: () => t("danger.chmod_777") },
   {
     root: "chown",
     when: (s) => args(s).some((a) => a === "root" || a.startsWith("root:")),
-    desc: "\u6539\u5F52\u5C5E\u4E3A root"
+    desc: () => t("danger.chown_root")
   },
   ENCODED_COMMAND_RULE,
-  { root: ["sudo", "doas"], desc: "\u63D0\u6743\u6267\u884C\uFF08sudo / doas / su -\uFF09" },
-  { root: "su", when: (s) => args(s).includes("-"), desc: "\u63D0\u6743\u6267\u884C\uFF08sudo / doas / su -\uFF09" },
+  { root: ["sudo", "doas"], desc: () => t("danger.privilege_posix") },
+  { root: "su", when: (s) => args(s).includes("-"), desc: () => t("danger.privilege_posix") },
   {
-    // 下载后直接执行：上一段是下载工具，这一段是被管道喂进来的 shell
     root: SHELLS,
     when: (s, prev) => s.pipedInto && prev !== void 0 && FETCHERS.includes(prev.root),
-    desc: "\u4E0B\u8F7D\u540E\u76F4\u63A5\u6267\u884C\uFF08curl | sh\uFF09"
+    desc: () => t("danger.curl_pipe_sh")
   },
   {
     root: INTERPRETERS,
     when: (s, prev) => s.pipedInto && prev !== void 0 && FETCHERS.includes(prev.root),
-    desc: "\u4E0B\u8F7D\u540E\u76F4\u63A5\u4EA4\u7ED9\u89E3\u91CA\u5668\u6267\u884C"
+    desc: () => t("danger.download_pipe_interpreter")
   },
   {
-    // 通用「管道进 shell」。放在上面两条之后，让来源明确的先给出更准确的描述
     root: SHELLS,
     when: (s) => s.pipedInto,
-    desc: "\u628A\u4EFB\u610F\u8F93\u51FA\u7BA1\u9053\u8FDB shell \u6267\u884C"
+    desc: () => t("danger.pipe_to_shell")
   },
   {
     root: "git",
     when: (s) => args(s)[0] === "push" && args(s).some((a) => a === "--force" || a === "-f" || a === "+"),
-    desc: "\u5F3A\u5236\u63A8\u9001"
+    desc: () => t("danger.force_push")
   },
   {
     root: "git",
@@ -1351,77 +1596,80 @@ var POSIX_RULES = [
       if (sub === "clean") return rest.some((a) => isShortCluster(a) && a.includes("f"));
       return false;
     },
-    desc: "\u4E22\u5F03\u672A\u63D0\u4EA4\u6539\u52A8"
+    desc: () => t("danger.discard_changes")
   },
-  { root: ["shutdown", "reboot", "halt", "poweroff"], desc: "\u5173\u673A / \u91CD\u542F" },
+  { root: ["shutdown", "reboot", "halt", "poweroff"], desc: () => t("danger.shutdown") },
   {
     root: ["kill", "killall"],
     when: (s) => args(s).includes("-9") && args(s).some((a) => a === "-1" || a === "1"),
-    desc: "\u6740\u6389\u5168\u90E8\u8FDB\u7A0B / init"
+    desc: () => t("danger.kill_all")
   },
   {
     root: ["iptables", "ip6tables", "nft", "pfctl"],
     when: (s) => args(s).some((a) => a === "-F" || a === "--flush"),
-    desc: "\u6E05\u7A7A\u9632\u706B\u5899\u89C4\u5219"
+    desc: () => t("danger.flush_firewall")
   },
   {
     root: ["launchctl", "systemctl"],
     when: (s) => ["disable", "unload"].includes(args(s)[0] ?? ""),
-    desc: "\u7981\u7528\u7CFB\u7EDF\u670D\u52A1"
+    desc: () => t("danger.disable_service")
   },
-  { root: "history", when: (s) => args(s).includes("-c"), desc: "\u6E05\u9664\u547D\u4EE4\u5386\u53F2\uFF08\u63A9\u76D6\u75D5\u8FF9\uFF09" },
+  { root: "history", when: (s) => args(s).includes("-c"), desc: () => t("danger.clear_history") },
   {
     root: "tee",
     when: (s) => args(s).some((a) => a.startsWith("/etc/")),
-    desc: "\u6539\u5199 /etc \u4E0B\u7684\u7CFB\u7EDF\u914D\u7F6E"
+    desc: () => t("danger.write_etc")
   },
   {
-    // 重定向到裸设备 / 历史文件。这条不看 root，任何命令都可能这么写
     root: /.*/,
     when: (s) => s.redirects.some((r) => isRawDevice(r) || /(^|\/)\.?\w*history$/.test(r)),
-    desc: "\u5199\u5165\u78C1\u76D8\u8BBE\u5907\u6216\u7BE1\u6539\u5386\u53F2\u6587\u4EF6"
+    desc: () => t("danger.write_device_or_history")
   }
 ];
 var WINDOWS_RULES = [
   {
     root: ["del", "erase", "rd", "rmdir"],
     when: hasDangerousWinTarget,
-    desc: "\u9012\u5F52\u5220\u9664\u76D8\u6839 / \u7CFB\u7EDF\u76EE\u5F55 / \u7528\u6237\u76EE\u5F55"
+    desc: () => t("danger.win_rm_system")
   },
   {
     root: "remove-item",
     when: (s) => hasWinSwitch(s, "recurse") && hasDangerousWinTarget(s),
-    desc: "PowerShell \u9012\u5F52\u5220\u9664\u76D8\u6839 / \u7CFB\u7EDF\u76EE\u5F55"
+    desc: () => t("danger.ps_rm_system")
   },
   {
     root: "format",
     when: (s) => args(s).some((a) => /^[a-z]:$/i.test(a)),
-    desc: "\u683C\u5F0F\u5316\u78C1\u76D8"
+    desc: () => t("danger.win_format")
   },
-  { root: "diskpart", desc: "\u78C1\u76D8\u5206\u533A\u64CD\u4F5C" },
-  { root: "cipher", when: (s) => hasWinSwitch(s, "w", true), desc: "\u64E6\u9664\u78C1\u76D8\u7A7A\u95F2\u7A7A\u95F4\uFF08\u4E0D\u53EF\u6062\u590D\uFF09" },
+  { root: "diskpart", desc: () => t("danger.partition") },
+  { root: "cipher", when: (s) => hasWinSwitch(s, "w", true), desc: () => t("danger.cipher_wipe") },
   {
     root: "vssadmin",
     when: (s) => (args(s)[0] ?? "").toLowerCase() === "delete",
-    desc: "\u5220\u9664\u5377\u5F71\u526F\u672C\uFF08\u52D2\u7D22\u8F6F\u4EF6\u6807\u51C6\u52A8\u4F5C\uFF0C\u5220\u5B8C\u65E0\u6CD5\u56DE\u6EDA\uFF09"
+    desc: () => t("danger.delete_shadow_copies")
   },
   {
     root: "wmic",
     when: (s) => args(s).map((a) => a.toLowerCase()).join(" ").includes("shadowcopy delete"),
-    desc: "\u5220\u9664\u5377\u5F71\u526F\u672C\uFF08\u52D2\u7D22\u8F6F\u4EF6\u6807\u51C6\u52A8\u4F5C\uFF0C\u5220\u5B8C\u65E0\u6CD5\u56DE\u6EDA\uFF09"
+    desc: () => t("danger.delete_shadow_copies")
   },
   {
     root: "reg",
     when: (s) => (args(s)[0] ?? "").toLowerCase() === "delete" && hasWinSwitch(s, "f", true),
-    desc: "\u5F3A\u5236\u5220\u9664\u6CE8\u518C\u8868\u9879"
+    desc: () => t("danger.reg_delete")
   },
-  { root: "bcdedit", desc: "\u6539\u542F\u52A8\u914D\u7F6E\uFF08\u53EF\u80FD\u5BFC\u81F4\u7CFB\u7EDF\u8D77\u4E0D\u6765\uFF09" },
-  { root: "sc", when: (s) => (args(s)[0] ?? "").toLowerCase() === "delete", desc: "\u5220\u9664\u7CFB\u7EDF\u670D\u52A1" },
-  { root: "takeown", when: (s) => hasWinSwitch(s, "r", true), desc: "\u9012\u5F52\u593A\u53D6\u6587\u4EF6\u6240\u6709\u6743" },
+  { root: "bcdedit", desc: () => t("danger.bcdedit") },
+  {
+    root: "sc",
+    when: (s) => (args(s)[0] ?? "").toLowerCase() === "delete",
+    desc: () => t("danger.sc_delete")
+  },
+  { root: "takeown", when: (s) => hasWinSwitch(s, "r", true), desc: () => t("danger.takeown") },
   {
     root: "icacls",
     when: (s) => hasWinSwitch(s, "grant") && args(s).some((a) => /^(everyone|users)(:|$)/i.test(a)),
-    desc: "\u7ED9 everyone / users \u6388\u6743"
+    desc: () => t("danger.icacls_everyone")
   },
   {
     root: "netsh",
@@ -1429,75 +1677,82 @@ var WINDOWS_RULES = [
       const lower = args(s).map((a) => a.toLowerCase());
       return (lower[0] === "advfirewall" || lower[0] === "firewall") && lower.some((a) => a === "off" || a === "disable");
     },
-    desc: "\u5173\u95ED\u9632\u706B\u5899"
+    desc: () => t("danger.disable_firewall")
   },
   {
     root: "set-mppreference",
     when: (s) => hasWinSwitch(s, "disablerealtimemonitoring"),
-    desc: "\u5173\u95ED Defender \u5B9E\u65F6\u9632\u62A4"
+    desc: () => t("danger.disable_defender")
   },
   {
     root: "net",
     when: (s) => ["user", "localgroup"].includes((args(s)[0] ?? "").toLowerCase()) && hasWinSwitch(s, "add", true),
-    desc: "\u65B0\u589E\u8D26\u6237 / \u52A0\u5165\u7BA1\u7406\u5458\u7EC4"
+    desc: () => t("danger.add_admin_user")
   },
-  { root: "runas", desc: "\u63D0\u6743\u6267\u884C\uFF08runas\uFF09" },
+  { root: "runas", desc: () => t("danger.privilege_runas") },
   {
     root: "start-process",
     when: (s) => (winSwitchValue(s, "verb") ?? "").toLowerCase() === "runas",
-    desc: "\u63D0\u6743\u6267\u884C\uFF08Start-Process -Verb RunAs\uFF09"
+    desc: () => t("danger.privilege_start_process")
   },
   {
     root: ["iex", "invoke-expression"],
     when: (s) => s.pipedInto,
-    desc: "\u4E0B\u8F7D\u540E\u76F4\u63A5\u6267\u884C\uFF08iwr | iex\uFF09"
+    desc: () => t("danger.iwr_iex")
   },
   {
     root: ["powershell", "pwsh", "cmd"],
     when: (s, prev) => s.pipedInto && prev !== void 0 && ["curl", "wget", "iwr", "irm", "invoke-webrequest", "invoke-restmethod"].includes(prev.root),
-    desc: "\u4E0B\u8F7D\u540E\u76F4\u63A5\u4EA4\u7ED9 shell \u6267\u884C"
+    desc: () => t("danger.download_pipe_shell")
   },
   {
     root: "certutil",
     when: (s) => hasWinSwitch(s, "urlcache"),
-    desc: "certutil \u4E0B\u8F7D\uFF08\u5E38\u89C1\u514D\u6740\u4E0B\u8F7D\u5668\uFF09"
+    desc: () => t("danger.certutil_download")
+  },
+  {
+    root: "bitsadmin",
+    when: (s) => hasWinSwitch(s, "transfer"),
+    desc: () => t("danger.bitsadmin")
   },
-  { root: "bitsadmin", when: (s) => hasWinSwitch(s, "transfer"), desc: "bitsadmin \u540E\u53F0\u4E0B\u8F7D" },
   ENCODED_COMMAND_RULE,
   {
     root: ["powershell", "pwsh"],
     when: (s) => hasWinSwitch(s, "noprofile") || (winSwitchValue(s, "windowstyle") ?? "").toLowerCase() === "hidden" || (winSwitchValue(s, "w") ?? "").toLowerCase() === "hidden",
-    desc: "PowerShell \u9690\u85CF\u7A97\u53E3 / \u8DF3\u8FC7\u914D\u7F6E\u6267\u884C"
+    desc: () => t("danger.ps_hidden_window")
   },
   {
     root: ["powershell", "pwsh"],
     when: (s) => ["bypass", "unrestricted"].includes(
       (winSwitchValue(s, "executionpolicy") ?? "").toLowerCase()
     ),
-    desc: "\u7ED5\u8FC7 PowerShell \u6267\u884C\u7B56\u7565"
+    desc: () => t("danger.ps_bypass_policy")
   },
-  { root: "mshta", desc: "mshta \u6267\u884C\u8FDC\u7A0B\u811A\u672C\uFF08LOLBin\uFF09" },
-  { root: "rundll32", desc: "rundll32 \u6267\u884C\u4EFB\u610F DLL \u5BFC\u51FA\uFF08LOLBin\uFF09" },
+  { root: "mshta", desc: () => t("danger.mshta") },
+  { root: "rundll32", desc: () => t("danger.rundll32") },
   {
     root: "regsvr32",
     when: (s) => args(s).some((a) => /^[/-]i:/i.test(a)),
-    desc: "regsvr32 \u8FDC\u7A0B scriptlet\uFF08LOLBin\uFF09"
+    desc: () => t("danger.regsvr32")
   },
   {
     root: "shutdown",
     when: (s) => hasWinSwitch(s, "s", true) || hasWinSwitch(s, "r", true),
-    desc: "\u5173\u673A / \u91CD\u542F"
+    desc: () => t("danger.shutdown")
   },
-  { root: ["restart-computer", "stop-computer"], desc: "\u5173\u673A / \u91CD\u542F" },
+  { root: ["restart-computer", "stop-computer"], desc: () => t("danger.shutdown") },
   {
     root: "schtasks",
     when: (s) => hasWinSwitch(s, "create", true),
-    desc: "\u521B\u5EFA\u8BA1\u5212\u4EFB\u52A1\uFF08\u6301\u4E45\u5316\uFF09"
+    desc: () => t("danger.schtasks_create")
   },
-  { root: ["new-scheduledtask", "register-scheduledtask"], desc: "\u6CE8\u518C\u8BA1\u5212\u4EFB\u52A1\uFF08\u6301\u4E45\u5316\uFF09" }
+  {
+    root: ["new-scheduledtask", "register-scheduledtask"],
+    desc: () => t("danger.register_scheduled_task")
+  }
 ];
 var WHOLE_STRING_RULES = [
-  { pattern: /:\s*\(\s*\)\s*\{.*\}\s*;?\s*:/, desc: "fork bomb" }
+  { pattern: /:\s*\(\s*\)\s*\{.*\}\s*;?\s*:/, desc: () => t("danger.fork_bomb") }
 ];
 var WINDOWS_TABLE = [...WINDOWS_RULES, ...POSIX_RULES];
 function parseForSafety(command, platform10) {
@@ -1511,7 +1766,7 @@ function checkDangerousCommand(command, opts) {
   const platform10 = opts?.platform ?? currentPlatform();
   const parsed = parseForSafety(command, platform10);
   for (const { pattern, desc } of WHOLE_STRING_RULES) {
-    if (pattern.test(parsed.stripped)) return { dangerous: true, desc };
+    if (pattern.test(parsed.stripped)) return { dangerous: true, desc: desc() };
   }
   const table = platform10 === "win32" ? WINDOWS_TABLE : POSIX_RULES;
   for (let i = 0; i < parsed.segments.length; i++) {
@@ -1520,7 +1775,7 @@ function checkDangerousCommand(command, opts) {
     for (const rule of table) {
       if (!rootMatches(rule.root, seg.root)) continue;
       if (rule.when && !rule.when(seg, prev)) continue;
-      return { dangerous: true, desc: rule.desc };
+      return { dangerous: true, desc: rule.desc() };
     }
   }
   return { dangerous: false };
@@ -1598,29 +1853,31 @@ function isReadOnlyCommand(command) {
   });
 }
 var OBFUSCATION_PATTERNS = [
-  { pattern: /\beval\b/, desc: "eval \u52A8\u6001\u6267\u884C" },
-  { pattern: /\bexec\s+\$/, desc: "exec \u6267\u884C\u53D8\u91CF" },
-  { pattern: /\bbase64\s+(-d|--decode)/, desc: "base64 \u89E3\u7801" },
-  { pattern: /\b(xxd|od)\s+-r/, desc: "\u5341\u516D\u8FDB\u5236\u8FD8\u539F" },
-  { pattern: /\|\s*(ba|z|k|da)?sh\b/, desc: "\u7BA1\u9053\u8FDB shell" },
-  { pattern: /\\x[0-9a-f]{2}/i, desc: "\u5341\u516D\u8FDB\u5236\u8F6C\u4E49\u5B57\u7B26" },
-  { pattern: /\$\{[^}]*[:#%/][^}]*\}/, desc: "\u53D8\u91CF\u5C55\u5F00\u505A\u5B57\u7B26\u4E32\u62FC\u88C5" },
-  { pattern: /\bprintf\b[^|;&]*\|/, desc: "printf \u6784\u9020\u540E\u7BA1\u9053" },
-  { pattern: /\bcurl\b[^|;&]*\|/, desc: "\u4E0B\u8F7D\u540E\u7BA1\u9053" }
+  { pattern: /\beval\b/, desc: () => t("danger.obf_eval") },
+  { pattern: /\bexec\s+\$/, desc: () => t("danger.obf_exec_var") },
+  { pattern: /\bbase64\s+(-d|--decode)/, desc: () => t("danger.obf_base64") },
+  { pattern: /\b(xxd|od)\s+-r/, desc: () => t("danger.obf_hex_restore") },
+  { pattern: /\|\s*(ba|z|k|da)?sh\b/, desc: () => t("danger.obf_pipe_shell") },
+  { pattern: /\\x[0-9a-f]{2}/i, desc: () => t("danger.obf_hex_escape") },
+  { pattern: /\$\{[^}]*[:#%/][^}]*\}/, desc: () => t("danger.obf_var_expansion") },
+  { pattern: /\bprintf\b[^|;&]*\|/, desc: () => t("danger.obf_printf_pipe") },
+  { pattern: /\bcurl\b[^|;&]*\|/, desc: () => t("danger.obf_curl_pipe") }
 ];
 function checkObfuscation(command) {
   const parsed = parseForSafety(command, currentPlatform());
-  if (parsed.parseError !== void 0) return `\u65E0\u6CD5\u89E3\u6790\uFF08${parsed.parseError}\uFF09`;
+  if (parsed.parseError !== void 0) {
+    return t("infra_misc.parse_failed", { reason: parsed.parseError });
+  }
   if (parsed.hasSubstitution) {
-    return /`/.test(parsed.stripped) && !/\$\(/.test(parsed.stripped) ? "\u53CD\u5F15\u53F7\u547D\u4EE4\u66FF\u6362" : "\u547D\u4EE4\u66FF\u6362 $(...)";
+    return /`/.test(parsed.stripped) && !/\$\(/.test(parsed.stripped) ? t("infra_misc.backtick_substitution") : t("infra_misc.dollar_substitution");
   }
   for (const seg of parsed.segments) {
     const interpreter = inlineCodeExecOf(seg);
-    if (interpreter !== null) return `${interpreter} \u6267\u884C\u5185\u8054\u4EE3\u7801\uFF08\u5185\u5BB9\u65E0\u6CD5\u9759\u6001\u5206\u6790\uFF09`;
+    if (interpreter !== null) return t("infra_misc.inline_code", { interpreter });
   }
   const norm = command.replace(/\s+/g, " ").trim();
   for (const { pattern, desc } of OBFUSCATION_PATTERNS) {
-    if (pattern.test(norm)) return desc;
+    if (pattern.test(norm)) return desc();
   }
   return null;
 }
@@ -1705,11 +1962,7 @@ var SYSTEM_READ_PATHS = [
   "/private/var/db",
   "/private/var/folders",
   "/private/var/select",
-  // xcode-select 要读它，否则 macOS 自带 python3 起不来
   "/private/etc",
-  // macOS 自带的 /usr/bin/python3 是个 Xcode shim：它会去跑 xcodebuild，
-  // 需要读整个 Xcode.app（Info.plist + SharedFrameworks）。
-  // Xcode.app 是公开的应用包，放行读取不泄露任何用户数据。
   "/Applications/Xcode.app",
   "/Library/Developer"
 ];
@@ -1745,9 +1998,6 @@ var SENSITIVE_HOME_PATHS = [
   "Library/Application Support/Firefox",
   "Library/Cookies",
   "Library/Messages",
-  // agent 自己的数据：会话、记忆、审批、API key 都在这。
-  // 注意沙箱目录本身就在 ~/.epoch/sandbox 下，所以 buildProfile 必须
-  // 在这条 deny **之后**重新 allow writableDirs，否则连自己的 code.js 都读不到。
   ".epoch"
 ];
 var SENSITIVE_ABS_PATHS = ["/etc/shadow", "/etc/sudoers", "/private/etc/master.passwd"];
@@ -1809,7 +2059,6 @@ function networkSection(allowNetwork) {
   return [
     ";; ---- \u7F51\u7EDC ----",
     "(deny network*)",
-    // 留一个本机 unix socket，否则解析库初始化就可能失败
     '(allow network-outbound (literal "/private/var/run/mDNSResponder"))'
   ];
 }
@@ -1885,7 +2134,6 @@ function isolateWithSeatbelt(command, args2, opts) {
     ]
   };
 }
-
 // src/sandbox/backend.ts
 function detectBackend() {
   if (platform() === "darwin" && probeSeatbelt()) return "seatbelt";
@@ -1902,7 +2150,6 @@ function isolate(command, args2, opts) {
       return null;
   }
 }
-
 // src/sandbox/classify.ts
 var DENIAL_SIGNATURES = {
   seatbelt: [/Operation not permitted/i, /\bEPERM\b/],
@@ -1912,13 +2159,10 @@ var DENIAL_SIGNATURES = {
 var RUNNER_FAILURE_RULES = {
   seatbelt: {
     fatal: [/^sandbox-exec:/],
-    // sandbox-exec 在 macOS 上已标记 deprecated，它可能（现在或将来）
-    // 往 stderr 打一句提示。那是**信息**不是失败，见方案 46 验收 7
     benign: [/^sandbox-exec:.*\bdeprecat/i]
   },
   bubblewrap: {
     fatal: [/^bwrap:/],
-    // bwrap 在部分内核上会为无害的降级打一行提示（比如某个 unshare 跳过了）
     benign: [/^bwrap:.*\b(?:skipping|ignoring|deprecat)/i]
   },
   none: { fatal: [], benign: [] }
@@ -1979,6 +2223,9 @@ function writableDirsFor(policy) {
 }
 function confine(command, args2, policy) {
   const backend = detectBackend();
+  if (policy.enabled === false) {
+    return { confined: false, backend, mode: policy.mode, reason: "config-disabled" };
+  }
   if (policy.mode === "danger-full-access") {
     return { confined: false, backend, mode: policy.mode, reason: "mode-disabled" };
   }
@@ -2004,40 +2251,299 @@ function confine(command, args2, policy) {
     runnerFailureRules: RUNNER_FAILURE_RULES[backend]
   };
 }
+// src/jobs.ts
+var bySession2 = /* @__PURE__ */ new Map();
+var PREFIX = { command: "t", shell: "s", agent: "a" };
+var counters = { command: 0, shell: 0, agent: 0 };
+function nextId(kind) {
+  counters[kind] += 1;
+  return `${PREFIX[kind]}${counters[kind]}`;
+}
+function bucketOf(sessionId) {
+  const existing = bySession2.get(sessionId);
+  if (existing) return existing;
+  const fresh = /* @__PURE__ */ new Map();
+  bySession2.set(sessionId, fresh);
+  return fresh;
+}
+function jobIn(sessionId, id) {
+  return bySession2.get(sessionId)?.get(id);
+}
+function append(job, chunk) {
+  job.info.outputBytes += chunk.length;
+  job.buffer += chunk;
+  if (job.buffer.length <= job.spec.maxOutput) return;
+  if (job.spill === void 0) {
+    job.spill = openArtifact(job.spec.artifactsDir, `${job.spec.artifactLabel}-${job.info.id}`, ".txt") ?? null;
+    job.spill?.append(job.buffer);
+    if (job.spill) job.info.artifact = job.spill.path;
+  } else {
+    job.spill?.append(chunk);
+  }
+  const drop = job.buffer.length - job.spec.maxOutput;
+  job.buffer = job.buffer.slice(drop);
+  job.droppedBytes += drop;
+  job.info.truncated = true;
+}
+function endJob(job, status, exitCode) {
+  if (job.info.status !== "running") return;
+  job.info.status = status;
+  if (exitCode !== void 0) job.info.exitCode = exitCode;
+  job.info.endedAt = Date.now();
+  job.spill?.close();
+  job.settle();
+}
+function registerJob(spec) {
+  const now = Date.now();
+  let settle;
+  const done = new Promise((resolve5) => {
+    settle = resolve5;
+  });
+  const job = {
+    spec,
+    info: {
+      id: nextId(spec.kind),
+      kind: spec.kind,
+      label: spec.label,
+      ...spec.cwd ? { cwd: spec.cwd } : {},
+      pid: 0,
+      status: "running",
+      startedAt: now,
+      lastActivity: now,
+      outputBytes: 0,
+      truncated: false
+    },
+    buffer: "",
+    droppedBytes: 0,
+    done,
+    settle
+  };
+  bucketOf(spec.sessionId).set(job.info.id, job);
+  return {
+    id: job.info.id,
+    detail: spec.detail,
+    info: () => ({ ...job.info }),
+    status: () => job.info.status,
+    setPid: (pid) => {
+      job.info.pid = pid;
+    },
+    append: (chunk) => append(job, chunk),
+    touch: () => {
+      job.info.lastActivity = Date.now();
+    },
+    cursor: () => job.info.outputBytes,
+    finish: (status, exitCode) => endJob(job, status, exitCode)
+  };
+}
+function listJobs(sessionId, kind) {
+  const bucket = bySession2.get(sessionId);
+  if (!bucket) return [];
+  const all = [...bucket.values()].map((job) => ({ ...job.info }));
+  return kind ? all.filter((info) => info.kind === kind) : all;
+}
+function getJob(sessionId, id) {
+  const job = jobIn(sessionId, id);
+  return job ? { ...job.info } : void 0;
+}
+function jobDetail(sessionId, id) {
+  return jobIn(sessionId, id)?.spec.detail;
+}
+function allJobs(kind) {
+  const out = [];
+  for (const [sessionId, bucket] of bySession2) {
+    for (const job of bucket.values()) {
+      if (kind && job.info.kind !== kind) continue;
+      out.push({ sessionId, info: { ...job.info } });
+    }
+  }
+  return out;
+}
+function readJob(sessionId, id, since, maxChunk) {
+  const job = jobIn(sessionId, id);
+  return job ? sliceFrom(job, since, maxChunk) : void 0;
+}
+function sliceFrom(job, since, maxChunk) {
+  const from = Math.max(since, job.droppedBytes);
+  const missed = Math.max(0, job.droppedBytes - since);
+  const slice = job.buffer.slice(from - job.droppedBytes);
+  const output = slice.slice(0, maxChunk);
+  return {
+    info: { ...job.info },
+    output,
+    nextCursor: from + output.length,
+    missed,
+    hasMore: output.length < slice.length
+  };
+}
+function touchJob(sessionId, id) {
+  const job = jobIn(sessionId, id);
+  if (job) job.info.lastActivity = Date.now();
+}
+function appendJob(sessionId, id, chunk) {
+  const job = jobIn(sessionId, id);
+  if (job) append(job, chunk);
+}
+async function waitJob(sessionId, id, timeoutMs) {
+  const job = jobIn(sessionId, id);
+  if (!job) return void 0;
+  const snapshot = () => ({ ...job.info });
+  if (job.info.status !== "running") {
+    return { info: snapshot(), timedOut: false, neverEnds: false };
+  }
+  if (!job.spec.terminates) return { info: snapshot(), timedOut: false, neverEnds: true };
+  let timer;
+  const timeout = new Promise((resolve5) => {
+    timer = setTimeout(() => resolve5("timeout"), timeoutMs);
+    timer.unref?.();
+  });
+  try {
+    const winner = await Promise.race([job.done.then(() => "done"), timeout]);
+    return { info: snapshot(), timedOut: winner === "timeout", neverEnds: false };
+  } finally {
+    if (timer) clearTimeout(timer);
+  }
+}
+function stopJob(sessionId, id, status) {
+  const job = jobIn(sessionId, id);
+  if (!job || job.info.status !== "running") return Promise.resolve(false);
+  const stop = job.spec.stop;
+  endJob(job, status ?? job.spec.stoppedStatus ?? "killed");
+  return stop().then(() => true);
+}
+function rekeyJobs(from, to, kinds) {
+  if (from === to) return;
+  const moving = bySession2.get(from);
+  if (!moving) return;
+  const wanted = [...moving].filter(([, job]) => kinds.includes(job.info.kind));
+  if (wanted.length === 0) return;
+  for (const [id] of wanted) moving.delete(id);
+  if (moving.size === 0) bySession2.delete(from);
+  const target = bucketOf(to);
+  for (const [id, job] of wanted) {
+    job.spec.sessionId = to;
+    target.set(id, job);
+  }
+}
+function clearAllJobs(kinds) {
+  for (const [sessionId, bucket] of bySession2) {
+    for (const [id, job] of bucket) {
+      if (kinds && !kinds.includes(job.info.kind)) continue;
+      job.spill?.close();
+      job.settle();
+      bucket.delete(id);
+    }
+    if (bucket.size === 0) bySession2.delete(sessionId);
+  }
+  for (const kind of kinds ?? ["command", "shell", "agent"]) counters[kind] = 0;
+}
 var EXEC_PATH_AS_NODE_ENV = {
   ELECTRON_RUN_AS_NODE: "1"
 };
-var tracked = /* @__PURE__ */ new Map();
-function startLongLivedProcess(opts) {
-  const child = spawn(opts.file, [...opts.args], {
-    stdio: ["ignore", "pipe", "pipe"],
-    // 见文件头：和前台命令同一个决定，不 detach
-    detached: false,
-    ...opts.cwd ? { cwd: opts.cwd } : {},
-    ...opts.spawnOptions
-  });
-  const pid = child.pid ?? 0;
-  if (pid > 0) tracked.set(pid, child);
-  const pump = (stream) => {
-    child[stream]?.on("data", (buf) => {
-      opts.onOutput?.(buf.toString("utf8"), stream);
+var owners = /* @__PURE__ */ new Map();
+var bySession3 = /* @__PURE__ */ new Map();
+var TableImpl = class {
+  constructor(fallback) {
+    this.fallback = fallback;
+  }
+  fallback;
+  entries = /* @__PURE__ */ new Map();
+  sessions = /* @__PURE__ */ new Set();
+  released = false;
+  adopt(pid, entry) {
+    this.entries.set(pid, entry);
+    owners.set(pid, this);
+  }
+  forget(pid) {
+    this.entries.delete(pid);
+    if (owners.get(pid) === this) owners.delete(pid);
+  }
+  take(pid) {
+    const entry = this.entries.get(pid);
+    this.forget(pid);
+    return entry;
+  }
+  start(opts) {
+    const child = spawn(opts.file, [...opts.args], {
+      stdio: ["ignore", "pipe", "pipe"],
+      detached: false,
+      ...opts.cwd ? { cwd: opts.cwd } : {},
+      ...opts.spawnOptions
     });
-  };
-  pump("stdout");
-  pump("stderr");
-  child.on("exit", (code, signal) => {
-    tracked.delete(pid);
-    opts.onExit?.(code, signal);
-  });
-  child.on("error", () => {
-    tracked.delete(pid);
-    opts.onExit?.(null, null);
-  });
-  return { pid, child };
+    const pid = child.pid ?? 0;
+    if (pid > 0) this.adopt(pid, { kind: "child", child });
+    const pump = (stream) => {
+      child[stream]?.on("data", (buf) => {
+        opts.onOutput?.(buf.toString("utf8"), stream);
+      });
+    };
+    pump("stdout");
+    pump("stderr");
+    child.on("exit", (code, signal) => {
+      this.forget(pid);
+      opts.onExit?.(code, signal);
+    });
+    child.on("error", () => {
+      this.forget(pid);
+      opts.onExit?.(null, null);
+    });
+    return { pid, child };
+  }
+  trackForeign(pid, kill) {
+    if (pid <= 0) return () => {
+    };
+    this.adopt(pid, { kind: "foreign", kill });
+    return () => {
+      if (this.entries.get(pid)?.kind === "foreign") this.forget(pid);
+    };
+  }
+  count() {
+    return this.entries.size;
+  }
+  async killAll() {
+    const pids = [...this.entries.keys()];
+    await Promise.all(pids.map((pid) => killTrackedProcess(pid)));
+  }
+  claim(sessionId) {
+    if (this.fallback || !sessionId) return;
+    bySession3.set(sessionId, this);
+    this.sessions.add(sessionId);
+  }
+  async release() {
+    if (this.fallback || this.released) return;
+    this.released = true;
+    for (const sid of this.sessions) if (bySession3.get(sid) === this) bySession3.delete(sid);
+    this.sessions.clear();
+    const last = --fallbackRefs <= 0;
+    if (last) fallbackRefs = 0;
+    await Promise.all(last ? [this.killAll(), fallbackTable.killAll()] : [this.killAll()]);
+  }
+};
+var fallbackTable = new TableImpl(true);
+var fallbackRefs = 0;
+function createProcessTable() {
+  fallbackRefs++;
+  return new TableImpl(false);
+}
+function processTableFor(sessionId) {
+  if (!sessionId) return fallbackTable;
+  return bySession3.get(sessionId) ?? fallbackTable;
+}
+function processFallbackTable() {
+  return fallbackTable;
+}
+function startLongLivedProcess(opts) {
+  return fallbackTable.start(opts);
+}
+function trackForeignProcess(pid, kill) {
+  return fallbackTable.trackForeign(pid, kill);
 }
 async function killTrackedProcess(pid) {
-  const child = tracked.get(pid);
-  tracked.delete(pid);
+  const entry = owners.get(pid)?.take(pid);
+  if (entry?.kind === "foreign") {
+    await entry.kill();
+    return;
+  }
+  const child = entry?.child;
   await killProcessTree({
     pid,
     detached: false,
@@ -2046,10 +2552,10 @@ async function killTrackedProcess(pid) {
   });
 }
 function trackedProcessCount() {
-  return tracked.size;
+  return owners.size;
 }
 async function killAllTrackedProcesses() {
-  const pids = [...tracked.keys()];
+  const pids = [...owners.keys()];
   await Promise.all(pids.map((pid) => killTrackedProcess(pid)));
 }
 function within(root, abs) {
@@ -2063,7 +2569,6 @@ function isInWorkspace(target, workDir, extraRoots = []) {
   if (within(root, abs)) return true;
   return extraRoots.some((r) => within(resolve$1(r), abs));
 }
-
 // src/schema.ts
 function parseLenient(schema, input, fallback) {
   const result = schema.safeParse(input);
@@ -2075,8 +2580,7 @@ function parseStrict(schema, input, label) {
   if (result.success) return result.data;
   const issues = toIssues(result.error.issues);
   const detail = issues.map((i) => `  - ${i.path}: ${i.message}`).join("\n");
-  throw new Error(`${label} \u6821\u9A8C\u5931\u8D25\uFF08${issues.length} \u5904\uFF09\uFF1A
-${detail}`);
+  throw new Error(t("infra_misc.schema_failed", { path: label, count: issues.length, detail }));
 }
 var DEFAULT_ISSUE_LIMIT = 8;
 function formatIssues(label, issues, limit = DEFAULT_ISSUE_LIMIT) {
@@ -2086,7 +2590,7 @@ function issueDetails(issues, limit = DEFAULT_ISSUE_LIMIT) {
   if (issues.length === 0) return [];
   const shown = issues.slice(0, limit).map((i) => `${i.path} \u2014\u2014 ${i.message}`);
   const rest = issues.length - shown.length;
-  if (rest > 0) shown.push(`\u8FD8\u6709 ${rest} \u5904\u95EE\u9898\u672A\u5217\u51FA`);
+  if (rest > 0) shown.push(t("infra_misc.schema_more", { count: rest }));
   return shown;
 }
 function unknownKeyIssues(known, input, prefix = "") {
@@ -2094,7 +2598,7 @@ function unknownKeyIssues(known, input, prefix = "") {
   const knownSet = new Set(known);
   return Object.keys(input).filter((key) => !knownSet.has(key)).map((key) => ({
     path: prefix ? `${prefix}.${key}` : key,
-    message: "\u672A\u77E5\u914D\u7F6E\u9879\uFF0C\u5DF2\u5FFD\u7565\uFF08\u4E0D\u5F71\u54CD\u5176\u4ED6\u914D\u7F6E\u751F\u6548\uFF09"
+    message: t("infra_misc.schema_unknown_key")
   }));
 }
 var MAX_NEST_DEPTH = 5;
@@ -2129,7 +2633,6 @@ function dedupe(issues) {
     return true;
   });
 }
-
 // src/async.ts
 async function withTimeout(promise, ms, fallback) {
   let timer;
@@ -2158,151 +2661,6 @@ function safeInit(name, factory, diags) {
     return null;
   }
 }
-var LANGS = ["zh", "en"];
-var DEFAULT_LANG = "zh";
-function isLang(value) {
-  return LANGS.includes(value);
-}
-var catalogs = /* @__PURE__ */ new Map();
-var pending = [];
-var localesDirCache;
-var currentLangValue;
-function localesDir() {
-  if (localesDirCache !== void 0) return localesDirCache ?? void 0;
-  const override = process.env.EPOCH_LOCALES_DIR;
-  if (override) {
-    localesDirCache = existsSync(override) ? override : null;
-    return localesDirCache ?? void 0;
-  }
-  let dir = dirname(fileURLToPath(import.meta.url));
-  for (let depth = 0; depth < 8; depth += 1) {
-    if (basename(dir) === "node_modules") break;
-    const candidate = join(dir, "locales");
-    if (existsSync(join(candidate, `${DEFAULT_LANG}.yaml`))) {
-      localesDirCache = candidate;
-      return candidate;
-    }
-    const parent = dirname(dir);
-    if (parent === dir) break;
-    dir = parent;
-  }
-  localesDirCache = null;
-  return void 0;
-}
-function flatten(value, prefix, out) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return;
-  for (const [key, child] of Object.entries(value)) {
-    const path = prefix ? `${prefix}.${key}` : key;
-    if (typeof child === "string") out[path] = child;
-    else flatten(child, path, out);
-  }
-}
-function loadCatalog(lang) {
-  const cached2 = catalogs.get(lang);
-  if (cached2) return cached2;
-  const result = readCatalog(lang);
-  catalogs.set(lang, result);
-  return result;
-}
-function readCatalog(lang) {
-  const dir = localesDir();
-  if (!dir) {
-    pending.push({ code: "locales-missing", render: () => t("i18n.locales_missing") });
-    return { entries: {}, error: "\u627E\u4E0D\u5230 locales \u76EE\u5F55" };
-  }
-  const file = `${lang}.yaml`;
-  const path = join(dir, file);
-  if (!existsSync(path)) {
-    pending.push({
-      code: "catalog-missing",
-      render: () => t("i18n.catalog_missing", { file, lang })
-    });
-    return { entries: {}, error: `${path} \u4E0D\u5B58\u5728` };
-  }
-  let parsed;
-  try {
-    parsed = load(readFileSync(path, "utf-8"));
-  } catch (err) {
-    const reason = (err instanceof Error ? err.message : String(err)).split("\n")[0] ?? "";
-    pending.push({
-      code: "catalog-invalid",
-      render: () => t("i18n.catalog_invalid", { file, reason })
-    });
-    return { entries: {}, error: reason };
-  }
-  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-    const reason = "\u9876\u5C42\u4E0D\u662F\u952E\u503C\u5BF9";
-    pending.push({
-      code: "catalog-invalid",
-      render: () => t("i18n.catalog_invalid", { file, reason })
-    });
-    return { entries: {}, error: reason };
-  }
-  const entries = {};
-  flatten(parsed, "", entries);
-  return { entries };
-}
-function resetI18n() {
-  catalogs.clear();
-  pending = [];
-  localesDirCache = void 0;
-  currentLangValue = void 0;
-}
-var PLACEHOLDER = /\{(\w+)\}/g;
-function placeholdersOf(text) {
-  const found = [];
-  for (const match of text.matchAll(PLACEHOLDER)) {
-    const name = match[1];
-    if (name && !found.includes(name)) found.push(name);
-  }
-  return found;
-}
-function t(key, vars, lang) {
-  const target = lang ?? currentLang();
-  const text = loadCatalog(target).entries[key] ?? loadCatalog(DEFAULT_LANG).entries[key] ?? key;
-  if (!vars) return text;
-  return text.replace(PLACEHOLDER, (whole, name) => {
-    const value = vars[name];
-    return value === void 0 ? whole : String(value);
-  });
-}
-function currentLang() {
-  currentLangValue ??= resolveLang();
-  return currentLangValue;
-}
-function setLang(lang) {
-  currentLangValue = lang;
-}
-function systemLocaleSignals() {
-  const env = process.env;
-  const signals = [env.LC_ALL, env.LC_MESSAGES, env.LANG, env.LANGUAGE].filter(
-    (v) => typeof v === "string" && v.length > 0
-  );
-  try {
-    signals.push(new Intl.DateTimeFormat().resolvedOptions().locale);
-  } catch {
-  }
-  return signals;
-}
-function langFromLocale(tag) {
-  const primary = tag.split(/[.@]/)[0]?.replace("_", "-").toLowerCase() ?? "";
-  if (!primary || primary === "c" || primary === "posix") return void 0;
-  if (primary === "zh" || primary.startsWith("zh-")) return "zh";
-  return "en";
-}
-function resolveLang(configured, signals) {
-  const fromEnv = process.env.EPOCH_LANGUAGE;
-  if (fromEnv && isLang(fromEnv)) return fromEnv;
-  if (configured && isLang(configured)) return configured;
-  for (const tag of signals ?? systemLocaleSignals()) {
-    const lang = langFromLocale(tag);
-    if (lang) return lang;
-  }
-  return DEFAULT_LANG;
-}
-function i18nDiagnostics() {
-  return pending.map((item) => ({ code: item.code, detail: item.render() }));
-}
 var SECRET_SERVICE = "epoch-agent";
 function secretServiceFor(homeDir) {
   if (homeDir === join(homedir(), ".epoch")) return SECRET_SERVICE;
@@ -2320,7 +2678,7 @@ var OP_TIMEOUT_MS = 1e4;
 var BACKEND_ENV_VAR = "EPOCH_SECRET_BACKEND";
 function assertValidSecretName(name) {
   if (!/^[A-Za-z0-9._:-]{1,128}$/.test(name)) {
-    throw new Error(`\u975E\u6CD5\u7684\u51ED\u636E\u540D "${name}"\uFF1A\u53EA\u5141\u8BB8 A-Z a-z 0-9 . _ : - \uFF0C\u4E14 1~128 \u5B57\u7B26`);
+    throw new Error(t("secret.bad_name", { name }));
   }
 }
 function secretIndexPath(homeDir) {
@@ -2329,7 +2687,6 @@ function secretIndexPath(homeDir) {
 function dpapiStorePath(homeDir) {
   return join(homeDir, "secrets.dpapi.json");
 }
-
 // src/secret/catalog.ts
 var FILE_VERSION = 1;
 var SecretCatalog = class {
@@ -2338,7 +2695,6 @@ var SecretCatalog = class {
   }
   filePath;
   cache = null;
-  /** 已登记的名字，顺序稳定（排序过），方便 `epoch config secret list` 输出稳定 */
   read() {
     if (this.cache) return [...this.cache];
     this.cache = parse(this.filePath);
@@ -2354,22 +2710,14 @@ var SecretCatalog = class {
     if (!names.includes(name)) return;
     this.write(names.filter((n) => n !== name));
   }
-  /** 整体替换。预取自愈用：把「钥匙串里真读得出来」的那份写回去 */
   replace(names) {
     const next = [...new Set(names)].sort();
     if (sameList(this.read(), next)) return;
     this.write(next);
   }
-  /** 仅供测试：丢掉内存缓存，强制重新读盘 */
   invalidate() {
     this.cache = null;
   }
-  /**
-   * 原子写 + 建文件时就 0600。
-   *
-   * mode 在**创建时**生效，写完再 chmod 会留 TOCTOU 窗口
-   * [对标 hermes mcp_oauth.py:388 的 `_write_secure_json`]。
-   */
   write(names) {
     const sorted = [...names].sort();
     const file = { version: FILE_VERSION, names: sorted };
@@ -2384,7 +2732,11 @@ var SecretCatalog = class {
     } catch (err) {
       rmSync(tmp, { force: true });
       throw new Error(
-        `\u51ED\u636E\u7D22\u5F15 ${this.filePath} \u5199\u5165\u5931\u8D25\uFF1A${err instanceof Error ? err.message : String(err)}`
+        t("secret.op_failed", {
+          op: t("secret.op_write"),
+          name: t("secret.catalog_label"),
+          detail: `${this.filePath}: ${err instanceof Error ? err.message : String(err)}`
+        })
       );
     }
     this.cache = sorted;
@@ -2411,10 +2763,8 @@ function run(file, args2, opts) {
       args2,
       {
         timeout: opts.timeoutMs,
-        // 凭据值可能几 KB（OAuth token 串），默认 1MB 够用但显式写出来更清楚
         maxBuffer: 1024 * 1024,
         encoding: "utf-8",
-        // Windows 上别弹黑框：PowerShell 冷启动会闪一个控制台窗口
         ...WINDOWS_HIDE_FLAGS
       },
       (err, stdout, stderr) => {
@@ -2444,12 +2794,15 @@ function classify(err) {
   };
 }
 function describeFailure(file, r) {
-  if (r.missing) return `\u627E\u4E0D\u5230 ${file}`;
-  if (r.timedOut) return `${file} \u8D85\u65F6\u672A\u8FD4\u56DE`;
+  if (r.missing) return t("secret.exec_missing", { file });
+  if (r.timedOut) return t("secret.exec_timeout", { file });
   const detail = r.stderr.trim().split("\n")[0]?.slice(0, 200);
-  return `${file} \u9000\u51FA\u7801 ${r.code}${detail ? `\uFF08${detail}\uFF09` : ""}`;
+  return t("secret.exec_exit", {
+    file,
+    code: r.code ?? -1,
+    detail: detail ? t("secret.exec_exit_detail", { detail }) : ""
+  });
 }
-
 // src/secret/dpapi.ts
 var FILE_VERSION2 = 1;
 var SHELLS2 = ["powershell.exe", "pwsh"];
@@ -2476,20 +2829,38 @@ var DpapiStore = class {
   shell;
   backend = "dpapi";
   encrypted = true;
-  detail = "Windows DPAPI\uFF08\u5DF2\u52A0\u5BC6\uFF0C\u7ED1\u5B9A\u5F53\u524D\u7528\u6237\u8D26\u6237\uFF09";
+  get detail() {
+    return t("secret.backend_dpapi");
+  }
   cache = null;
   async get(name) {
     assertValidSecretName(name);
     const blob = this.load().secrets[name];
     if (!blob) return void 0;
     const r = await this.ps(UNPROTECT_SCRIPT, blob);
-    if (r.code !== 0) throw new Error(`\u8BFB\u53D6\u51ED\u636E ${name} \u5931\u8D25\uFF1A${describeFailure(this.shell, r)}`);
+    if (r.code !== 0) {
+      throw new Error(
+        t("secret.op_failed", {
+          op: t("secret.op_read"),
+          name,
+          detail: describeFailure(this.shell, r)
+        })
+      );
+    }
     return Buffer.from(r.stdout.trim(), "base64").toString("utf-8");
   }
   async set(name, value) {
     assertValidSecretName(name);
     const r = await this.ps(PROTECT_SCRIPT, Buffer.from(value, "utf-8").toString("base64"));
-    if (r.code !== 0) throw new Error(`\u5199\u5165\u51ED\u636E ${name} \u5931\u8D25\uFF1A${describeFailure(this.shell, r)}`);
+    if (r.code !== 0) {
+      throw new Error(
+        t("secret.op_failed", {
+          op: t("secret.op_write"),
+          name,
+          detail: describeFailure(this.shell, r)
+        })
+      );
+    }
     const file = this.load();
     file.secrets[name] = stripBlank(r.stdout);
     this.save(file);
@@ -2503,7 +2874,6 @@ var DpapiStore = class {
     }
     return Promise.resolve();
   }
-  /** 密文就在自己的文件里，名字直接是 key —— 这个后端不需要 catalog.ts 的索引 */
   list() {
     return Promise.resolve(Object.keys(this.load().secrets).sort());
   }
@@ -2515,7 +2885,6 @@ var DpapiStore = class {
     this.cache = readDpapiFile(this.filePath);
     return this.cache;
   }
-  /** 原子写 + 建文件时就 0600（Windows 上 mode 是空操作，但这份代码也跑在测试里） */
   save(file) {
     mkdirSync(dirname(this.filePath), { recursive: true });
     const tmp = `${this.filePath}.${process.pid}.tmp`;
@@ -2525,7 +2894,11 @@ var DpapiStore = class {
     } catch (err) {
       rmSync(tmp, { force: true });
       throw new Error(
-        `\u51ED\u636E\u6587\u4EF6 ${this.filePath} \u5199\u5165\u5931\u8D25\uFF1A${err instanceof Error ? err.message : String(err)}`
+        t("secret.op_failed", {
+          op: t("secret.op_write"),
+          name: t("secret.dpapi_file_label"),
+          detail: `${this.filePath}: ${err instanceof Error ? err.message : String(err)}`
+        })
       );
     }
     this.cache = file;
@@ -2548,10 +2921,10 @@ function readDpapiFile(filePath) {
   }
 }
 async function probeDpapi() {
-  if (platform() !== "win32") return { reason: "\u4E0D\u662F Windows" };
+  if (platform() !== "win32") return { reason: t("secret.not_windows") };
   const expect = randomBytes(8).toString("hex");
   const payload = Buffer.from(expect, "utf-8").toString("base64");
-  let last = "\u672A\u627E\u5230 PowerShell\uFF08powershell.exe / pwsh \u90FD\u4E0D\u53EF\u7528\uFF09";
+  let last = t("secret.no_powershell");
   for (const shell of SHELLS2) {
     const sealed = await run(shell, [...PS_FLAGS, PROTECT_SCRIPT], {
       timeoutMs: POWERSHELL_TIMEOUT_MS,
@@ -2559,7 +2932,7 @@ async function probeDpapi() {
     });
     if (sealed.missing) continue;
     if (sealed.code !== 0) {
-      last = `\u52A0\u5BC6\u63A2\u6D4B\u5931\u8D25\uFF08${describeFailure(shell, sealed)}\uFF09`;
+      last = t("secret.probe_encrypt_failed", { detail: describeFailure(shell, sealed) });
       continue;
     }
     const back = await run(shell, [...PS_FLAGS, UNPROTECT_SCRIPT], {
@@ -2567,11 +2940,11 @@ async function probeDpapi() {
       stdin: stripBlank(sealed.stdout)
     });
     if (back.code !== 0) {
-      last = `\u89E3\u5BC6\u63A2\u6D4B\u5931\u8D25\uFF08${describeFailure(shell, back)}\uFF09`;
+      last = t("secret.probe_decrypt_failed", { detail: describeFailure(shell, back) });
       continue;
     }
     if (Buffer.from(back.stdout.trim(), "base64").toString("utf-8") !== expect) {
-      last = "\u52A0\u89E3\u5BC6\u63A2\u6D4B\u7684\u503C\u5BF9\u4E0D\u4E0A";
+      last = t("secret.probe_crypto_mismatch");
       continue;
     }
     return { shell };
@@ -2584,11 +2957,6 @@ function stripBlank(s) {
 var SECURITY = "/usr/bin/security";
 var NOT_FOUND = 44;
 var KeychainStore = class {
-  /**
-   * @param service 钥匙串里的服务名。**按家目录分命名空间**，见
-   *                [types.ts](./types.js) 的 `secretServiceFor()` ——
-   *                钥匙串是全局的，写死一个名字会让多 profile 共用同一批凭据
-   */
   constructor(catalog, service) {
     this.catalog = catalog;
     this.service = service;
@@ -2597,14 +2965,24 @@ var KeychainStore = class {
   service;
   backend = "keychain";
   encrypted = true;
-  detail = "macOS Keychain\uFF08\u5DF2\u52A0\u5BC6\uFF09";
+  get detail() {
+    return t("secret.backend_keychain");
+  }
   async get(name) {
     assertValidSecretName(name);
     const r = await run(SECURITY, ["find-generic-password", "-s", this.service, "-a", name, "-w"], {
       timeoutMs: OP_TIMEOUT_MS
     });
     if (r.code === NOT_FOUND) return void 0;
-    if (r.code !== 0) throw new Error(`\u8BFB\u53D6\u51ED\u636E ${name} \u5931\u8D25\uFF1A${describeFailure(SECURITY, r)}`);
+    if (r.code !== 0) {
+      throw new Error(
+        t("secret.op_failed", {
+          op: t("secret.op_read"),
+          name,
+          detail: describeFailure(SECURITY, r)
+        })
+      );
+    }
     return decode(r.stdout);
   }
   async set(name, value) {
@@ -2625,7 +3003,15 @@ var KeychainStore = class {
       ],
       { timeoutMs: OP_TIMEOUT_MS }
     );
-    if (r.code !== 0) throw new Error(`\u5199\u5165\u51ED\u636E ${name} \u5931\u8D25\uFF1A${describeFailure(SECURITY, r)}`);
+    if (r.code !== 0) {
+      throw new Error(
+        t("secret.op_failed", {
+          op: t("secret.op_write"),
+          name,
+          detail: describeFailure(SECURITY, r)
+        })
+      );
+    }
     this.catalog.add(name);
   }
   async delete(name) {
@@ -2634,24 +3020,28 @@ var KeychainStore = class {
       timeoutMs: OP_TIMEOUT_MS
     });
     if (r.code !== 0 && r.code !== NOT_FOUND) {
-      throw new Error(`\u5220\u9664\u51ED\u636E ${name} \u5931\u8D25\uFF1A${describeFailure(SECURITY, r)}`);
+      throw new Error(
+        t("secret.op_failed", {
+          op: t("secret.op_delete"),
+          name,
+          detail: describeFailure(SECURITY, r)
+        })
+      );
     }
     this.catalog.remove(name);
   }
-  /** 见 catalog.ts：钥匙串本身没有便宜的列举方式，索引是提示、`get` 才是权威 */
   list() {
     return Promise.resolve(this.catalog.read());
   }
-  /** 预取时发现索引里有、钥匙串里没有的名字，就地剔掉（自愈） */
   healCatalog(available) {
     this.catalog.replace(available);
   }
 };
 async function probeKeychain(service) {
-  if (platform() !== "darwin") return "\u4E0D\u662F macOS";
+  if (platform() !== "darwin") return t("secret.not_macos");
   const dk = await run(SECURITY, ["default-keychain"], { timeoutMs: PROBE_TIMEOUT_MS2 });
   if (dk.code !== 0 || dk.stdout.trim() === "") {
-    return `\u6CA1\u6709\u9ED8\u8BA4\u94A5\u5319\u4E32\uFF08${describeFailure(SECURITY, dk)}\uFF09`;
+    return t("secret.no_default_keychain", { detail: describeFailure(SECURITY, dk) });
   }
   const account = `__probe__${randomBytes(8).toString("hex")}`;
   const expect = randomBytes(8).toString("hex");
@@ -2659,13 +3049,17 @@ async function probeKeychain(service) {
   const added = await run(SECURITY, ["add-generic-password", "-U", ...args2, "-w", encode(expect)], {
     timeoutMs: PROBE_TIMEOUT_MS2
   });
-  if (added.code !== 0) return `\u5199\u5165\u63A2\u6D4B\u5931\u8D25\uFF08${describeFailure(SECURITY, added)}\uFF09`;
+  if (added.code !== 0) {
+    return t("secret.probe_write_failed", { detail: describeFailure(SECURITY, added) });
+  }
   const read = await run(SECURITY, ["find-generic-password", ...args2, "-w"], {
     timeoutMs: PROBE_TIMEOUT_MS2
   });
   await run(SECURITY, ["delete-generic-password", ...args2], { timeoutMs: PROBE_TIMEOUT_MS2 });
-  if (read.code !== 0) return `\u8BFB\u53D6\u63A2\u6D4B\u5931\u8D25\uFF08${describeFailure(SECURITY, read)}\uFF09`;
-  if (decode(read.stdout) !== expect) return "\u8BFB\u5199\u63A2\u6D4B\u7684\u503C\u5BF9\u4E0D\u4E0A";
+  if (read.code !== 0) {
+    return t("secret.probe_read_failed", { detail: describeFailure(SECURITY, read) });
+  }
+  if (decode(read.stdout) !== expect) return t("secret.probe_mismatch");
   return null;
 }
 function encode(value) {
@@ -2676,10 +3070,6 @@ function decode(stdout) {
 }
 var SECRET_TOOL = "secret-tool";
 var LibsecretStore = class {
-  /**
-   * @param service Secret Service 里的 `service` 属性值。**按家目录分命名空间**，
-   *                见 [types.ts](./types.js) 的 `secretServiceFor()`
-   */
   constructor(catalog, service) {
     this.catalog = catalog;
     this.service = service;
@@ -2688,8 +3078,9 @@ var LibsecretStore = class {
   service;
   backend = "libsecret";
   encrypted = true;
-  detail = "Linux libsecret / Secret Service\uFF08\u5DF2\u52A0\u5BC6\uFF09";
-  /** 条目的属性对。用 service + account 两个属性，和 macOS 那边同一套心智 */
+  get detail() {
+    return t("secret.backend_libsecret");
+  }
   attrs(name) {
     return ["service", this.service, "account", name];
   }
@@ -2698,7 +3089,13 @@ var LibsecretStore = class {
     const r = await run(SECRET_TOOL, ["lookup", ...this.attrs(name)], { timeoutMs: OP_TIMEOUT_MS });
     if (r.code === 0) return decode2(r.stdout);
     if (r.stdout.trim() === "" && !r.timedOut && !r.missing) return void 0;
-    throw new Error(`\u8BFB\u53D6\u51ED\u636E ${name} \u5931\u8D25\uFF1A${describeFailure(SECRET_TOOL, r)}`);
+    throw new Error(
+      t("secret.op_failed", {
+        op: t("secret.op_read"),
+        name,
+        detail: describeFailure(SECRET_TOOL, r)
+      })
+    );
   }
   async set(name, value) {
     assertValidSecretName(name);
@@ -2707,31 +3104,40 @@ var LibsecretStore = class {
       ["store", `--label=${this.service}: ${name}`, ...this.attrs(name)],
       { timeoutMs: OP_TIMEOUT_MS, stdin: encode2(value) }
     );
-    if (r.code !== 0) throw new Error(`\u5199\u5165\u51ED\u636E ${name} \u5931\u8D25\uFF1A${describeFailure(SECRET_TOOL, r)}`);
+    if (r.code !== 0) {
+      throw new Error(
+        t("secret.op_failed", {
+          op: t("secret.op_write"),
+          name,
+          detail: describeFailure(SECRET_TOOL, r)
+        })
+      );
+    }
     this.catalog.add(name);
   }
   async delete(name) {
     assertValidSecretName(name);
     const r = await run(SECRET_TOOL, ["clear", ...this.attrs(name)], { timeoutMs: OP_TIMEOUT_MS });
     if (r.code !== 0 && (r.timedOut || r.missing)) {
-      throw new Error(`\u5220\u9664\u51ED\u636E ${name} \u5931\u8D25\uFF1A${describeFailure(SECRET_TOOL, r)}`);
+      throw new Error(
+        t("secret.op_failed", {
+          op: t("secret.op_delete"),
+          name,
+          detail: describeFailure(SECRET_TOOL, r)
+        })
+      );
     }
     this.catalog.remove(name);
   }
-  /**
-   * `secret-tool search --all` 能列，但输出格式随 libsecret 版本变，
-   * 而且要多走一次 D-Bus 往返。索引更便宜也更稳定 —— 见 catalog.ts。
-   */
   list() {
     return Promise.resolve(this.catalog.read());
   }
-  /** 预取时发现索引里有、keyring 里没有的名字，就地剔掉（自愈） */
   healCatalog(available) {
     this.catalog.replace(available);
   }
 };
 async function probeLibsecret(service) {
-  if (platform() === "darwin" || platform() === "win32") return "\u4E0D\u662F Linux";
+  if (platform() === "darwin" || platform() === "win32") return t("secret.not_linux");
   const account = `__probe__${randomBytes(8).toString("hex")}`;
   const expect = randomBytes(8).toString("hex");
   const args2 = ["service", service, "account", account];
@@ -2740,16 +3146,20 @@ async function probeLibsecret(service) {
     stdin: encode2(expect)
   });
   if (stored.missing) {
-    return "\u672A\u627E\u5230 secret-tool\uFF08\u88C5\u6CD5\uFF1Aapt install libsecret-tools / dnf install libsecret\uFF09";
+    return t("secret.no_secret_tool");
   }
   if (stored.timedOut) {
-    return "secret-tool \u65E0\u54CD\u5E94\uFF0C\u591A\u534A\u662F\u6CA1\u6709 D-Bus \u6216 keyring \u672A\u89E3\u9501\uFF08headless / SSH \u4F1A\u8BDD\u5E38\u89C1\uFF09";
+    return t("secret.secret_tool_hang");
+  }
+  if (stored.code !== 0) {
+    return t("secret.probe_write_failed", { detail: describeFailure(SECRET_TOOL, stored) });
   }
-  if (stored.code !== 0) return `\u5199\u5165\u63A2\u6D4B\u5931\u8D25\uFF08${describeFailure(SECRET_TOOL, stored)}\uFF09`;
   const read = await run(SECRET_TOOL, ["lookup", ...args2], { timeoutMs: PROBE_TIMEOUT_MS2 });
   await run(SECRET_TOOL, ["clear", ...args2], { timeoutMs: PROBE_TIMEOUT_MS2 });
-  if (read.code !== 0) return `\u8BFB\u53D6\u63A2\u6D4B\u5931\u8D25\uFF08${describeFailure(SECRET_TOOL, read)}\uFF09`;
-  if (decode2(read.stdout) !== expect) return "\u8BFB\u5199\u63A2\u6D4B\u7684\u503C\u5BF9\u4E0D\u4E0A";
+  if (read.code !== 0) {
+    return t("secret.probe_read_failed", { detail: describeFailure(SECRET_TOOL, read) });
+  }
+  if (decode2(read.stdout) !== expect) return t("secret.probe_mismatch");
   return null;
 }
 function encode2(value) {
@@ -2759,18 +3169,17 @@ function decode2(stdout) {
   return Buffer.from(stdout.trim(), "base64").toString("utf-8");
 }
 var PlaintextStore = class {
-  /**
-   * @param reason 为什么降级。**必须带修复方法** —— 只说「明文」而不说怎么修，
-   *               用户除了忍着没有别的选择
-   */
   constructor(envFilePath, reason) {
     this.envFilePath = envFilePath;
-    this.detail = `\u660E\u6587\u964D\u7EA7 \u2014\u2014 ${reason}\uFF0C\u51ED\u636E\u4ECD\u662F\u660E\u6587\uFF08${envFilePath}\uFF0C\u6743\u9650 0600\uFF09`;
+    this.reason = reason;
   }
   envFilePath;
+  reason;
   backend = "plaintext";
   encrypted = false;
-  detail;
+  get detail() {
+    return t("secret.plaintext_note", { reason: this.reason, path: this.envFilePath });
+  }
   get(name) {
     return Promise.resolve(parseEnvText(readText(this.envFilePath))[name]);
   }
@@ -2850,7 +3259,7 @@ var TAG_BYTES = 16;
 var dataKey = null;
 function setDataKey(key) {
   if (key !== null && key.length !== KEY_BYTES) {
-    throw new Error(`\u6570\u636E\u5BC6\u94A5\u957F\u5EA6\u5FC5\u987B\u662F ${KEY_BYTES} \u5B57\u8282\uFF0C\u5B9E\u9645 ${key.length}`);
+    throw new Error(t("secret.bad_key_length", { expected: KEY_BYTES, actual: key.length }));
   }
   dataKey = key;
 }
@@ -2879,9 +3288,9 @@ function isEnvelope(text) {
   return text.startsWith(ENVELOPE_PREFIX);
 }
 function openEnvelope(key, blob) {
-  if (!isEnvelope(blob)) throw new Error("\u4E0D\u662F epoch \u4FE1\u5C01\u5BC6\u6587");
+  if (!isEnvelope(blob)) throw new Error(t("secret.not_envelope"));
   const raw = Buffer.from(blob.slice(ENVELOPE_PREFIX.length), "base64");
-  if (raw.length < IV_BYTES + TAG_BYTES) throw new Error("\u4FE1\u5C01\u5BC6\u6587\u957F\u5EA6\u4E0D\u8DB3");
+  if (raw.length < IV_BYTES + TAG_BYTES) throw new Error(t("secret.envelope_too_short"));
   const iv = raw.subarray(0, IV_BYTES);
   const tag = raw.subarray(IV_BYTES, IV_BYTES + TAG_BYTES);
   const body = raw.subarray(IV_BYTES + TAG_BYTES);
@@ -2899,7 +3308,10 @@ async function migrateEnvSecrets(opts) {
   try {
     existing = new Set(await store.list());
   } catch (err) {
-    return { migrated: [], warning: `\u8BFB\u53D6\u5DF2\u6709\u51ED\u636E\u5931\u8D25\uFF0C\u8DF3\u8FC7\u8FC1\u79FB\uFF08${message(err)}\uFF09` };
+    return {
+      migrated: [],
+      warning: t("secret.migrate_read_failed", { detail: message(err) })
+    };
   }
   const todo = candidates.filter((n) => !existing.has(n));
   if (todo.length === 0) return { migrated: [] };
@@ -2913,7 +3325,11 @@ async function migrateEnvSecrets(opts) {
     } catch (err) {
       return {
         migrated,
-        warning: `\u8FC1\u79FB ${name} \u5931\u8D25\uFF0C\u5DF2\u505C\u6B62\u4E14\u4FDD\u7559 ${envFilePath}\uFF08${message(err)}\uFF09`
+        warning: t("secret.migrate_failed", {
+          name,
+          path: envFilePath,
+          detail: message(err)
+        })
       };
     }
   }
@@ -2921,7 +3337,10 @@ async function migrateEnvSecrets(opts) {
   try {
     renameSync(envFilePath, backupPath);
   } catch (err) {
-    return { migrated, warning: `\u5DF2\u8FC1\u5165\u94A5\u5319\u4E32\uFF0C\u4F46 ${envFilePath} \u6539\u540D\u5931\u8D25\uFF08${message(err)}\uFF09` };
+    return {
+      migrated,
+      warning: t("secret.migrate_partial", { path: envFilePath, detail: message(err) })
+    };
   }
   return { migrated, backupPath };
 }
@@ -2943,14 +3362,16 @@ function readOrEmpty(path) {
 function message(err) {
   return err instanceof Error ? err.message : String(err);
 }
-
 // src/secret/index.ts
 async function createSecretStore(opts = {}) {
   if (opts.inject) return opts.inject;
   const homeDir = opts.homeDir ?? resolveHomeDir();
   const forced = readForcedBackend();
   if (forced === "plaintext") {
-    return new PlaintextStore(envPath(homeDir), `${BACKEND_ENV_VAR}=plaintext \u663E\u5F0F\u6307\u5B9A`);
+    return new PlaintextStore(
+      envPath(homeDir),
+      t("secret.backend_plaintext_forced", { envVar: BACKEND_ENV_VAR })
+    );
   }
   const reason = await tryBackends(homeDir, forced);
   if (typeof reason !== "string") return reason;
@@ -2968,14 +3389,18 @@ async function tryBackends(homeDir, forced) {
   if (want("dpapi") && platform() === "win32") {
     const { shell, reason } = await probeDpapi();
     if (shell) return new DpapiStore(dpapiStorePath(homeDir), shell);
-    return reason ?? "DPAPI \u4E0D\u53EF\u7528";
+    return reason ?? t("secret.dpapi_unavailable");
   }
   if (want("libsecret") && platform() !== "darwin" && platform() !== "win32") {
     const why = await probeLibsecret(service);
     if (why === null) return new LibsecretStore(catalog, service);
     return why;
   }
-  return forced === null ? `\u672C\u5E73\u53F0\uFF08${platform()}\uFF09\u6CA1\u6709\u53EF\u7528\u7684\u51ED\u636E\u540E\u7AEF` : `${BACKEND_ENV_VAR}=${forced} \u5728\u672C\u5E73\u53F0\uFF08${platform()}\uFF09\u7528\u4E0D\u4E86`;
+  return forced === null ? t("secret.no_backend", { platform: platform() }) : t("secret.forced_unavailable", {
+    envVar: BACKEND_ENV_VAR,
+    forced,
+    platform: platform()
+  });
 }
 function readForcedBackend() {
   const raw = process.env[BACKEND_ENV_VAR]?.trim().toLowerCase();
@@ -2988,7 +3413,7 @@ async function prefetchProviderSecrets(store, names) {
   try {
     stored = await store.list();
   } catch (err) {
-    return { values: {}, warning: `\u5217\u4E3E\u51ED\u636E\u5931\u8D25\uFF08${message2(err)}\uFF09` };
+    return { values: {}, warning: t("secret.list_failed", { detail: message2(err) }) };
   }
   const wanted = stored.filter((n) => names.includes(n));
   const values2 = {};
@@ -2999,7 +3424,7 @@ async function prefetchProviderSecrets(store, names) {
       if (value) values2[name] = value;
       else missing.push(name);
     } catch (err) {
-      return { values: values2, warning: `\u8BFB\u53D6 ${name} \u5931\u8D25\uFF08${message2(err)}\uFF09` };
+      return { values: values2, warning: t("secret.read_failed", { name, detail: message2(err) }) };
     }
   }
   if (missing.length > 0) {
@@ -3038,6 +3463,37 @@ function resetSecretState() {
   current = null;
   values = {};
 }
+async function writeProviderSecret(name, value, fallbackEnvPath) {
+  const store = getSecretStore();
+  const result = await writeThrough(store, name, value, fallbackEnvPath);
+  setSecretValues({ ...getSecretValues(), [name]: value });
+  return result;
+}
+async function writeThrough(store, name, value, fallbackEnvPath) {
+  if (!store) {
+    writeEnvFile(fallbackEnvPath, setEnvVarText(readEnvOrEmpty(fallbackEnvPath), name, value));
+    return {
+      backend: "plaintext",
+      encrypted: false,
+      detail: t("cli.config.secret_plaintext_write", { path: fallbackEnvPath }),
+      envPath: fallbackEnvPath
+    };
+  }
+  await store.set(name, value);
+  return {
+    backend: store.backend,
+    encrypted: store.encrypted,
+    detail: store.detail,
+    envPath: store.backend === "plaintext" ? fallbackEnvPath : null
+  };
+}
+function readEnvOrEmpty(path) {
+  try {
+    return readFileSync(path, "utf-8");
+  } catch {
+    return "";
+  }
+}
 function message2(err) {
   return err instanceof Error ? err.message : String(err);
 }
@@ -3096,4 +3552,4 @@ function message2(err) {
  * Modifications Copyright 2024-2026 bowen
  */
 
-export { CODE_EXEC_ROOTS, DEFAULT_LANG, DEFAULT_YAML, DENIAL_SIGNATURES, ENVELOPE_PREFIX, EXEC_PATH_AS_NODE_ENV, IS_WINDOWS, LANGS, PROJECT_DIR_NAME, PlaintextStore, RIPGREP_INSTALL_HINT, RUNNER_FAILURE_RULES, SECRET_MODE, SECRET_SERVICE, SHELL_KINDS, SIGKILL_TIMEOUT_MS, SecretCatalog, TOOLCHAIN_CACHE_DIRS, WINDOWS_HIDE_FLAGS, agentsDir, approvalsPath, artifactsDir, assertValidSecretName, automationDir, automationLogsDir, automationWorkDir, budgetStatePath, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, checkpointsDir, classifyFailure, closeAllDatabases, collectProcessTree, commandsDir, configPath, confine, countCodePoints, createLogger, createSecretStore, createStreamDecoder, currentLang, dbPath, detectBackend, detectConsoleEncoding, encodingForCodePage, envPath, formatIssues, generateDataKey, getDataKey, getDefaultShell, getPythonCommand, getSecretStore, getSecretValues, hasSideEffectChannel, headCodePoints, hooksPath, i18nDiagnostics, isEnvelope, isInWorkspace, isLang, isReadOnlyCommand, isSensitiveKey, isolate, issueDetails, keepHeadAndTail, keybindingsPath, killAllTrackedProcesses, killPids, killProcessTree, killTrackedProcess, listStoredSecretNames, loadCatalog, localesDir, managedSettingsPath, marketplacesPath, maskApiKey, maskSensitive, mcpAuthPath, mcpConfigPath, mcpSchemaCachePath, memoriesDir, migrate, migrateEnvSecrets, normalizeForMatch, openArtifact, openDatabase, openEnvelope, parseDataKey, parseEnvText, parseLenient, parseShellCommand, parseStrict, placeholdersOf, pluginsDir, pluginsStatePath, policiesDir, powershellCommandArg, prefetchProviderSecrets, probeBubblewrap, probeSeatbelt, probeShell, projectCommandsDir, projectHooksPath, projectLocalSettingsPath, projectPoliciesDir, projectSchemasDir, projectSettingsPath, projectSkillsDir, readConfigYaml, readKey, refCount, releaseDatabase, removeEnvVarText, resetI18n, resetRipgrepCache, resetSecretState, resolveHomeDir, resolveLang, resolveProfile, resolveRipgrep, resolveShellKind, safeInit, sandboxModeForLevel, schemaVersion, sealEnvelope, setDataKey, setEnvVarText, setLang, setLogLevel, setScalar, setSecretStore, setSecretValues, setSectionField, setShell, shellPtyArgs, shellSpawnArgs, skillsDir, splitWords, startLongLivedProcess, stripShellWrapper, systemLocaleSignals, t, tailCodePoints, trackedProcessCount, trustPath, trustedImportsPath, unknownKeyIssues, unsetScalar, unsetSectionField, withTimeout, workspacesPath, worktreesDir, writeArtifact, writeConfigYaml, writeEnvFile };
+export { CLAUDE_DIR_NAME, CODE_EXEC_ROOTS, DEFAULT_LANG, DEFAULT_YAML, DENIAL_SIGNATURES, ENVELOPE_PREFIX, EXEC_PATH_AS_NODE_ENV, IS_WINDOWS, LANGS, PROJECT_DIR_NAME, PlaintextStore, RUNNER_FAILURE_RULES, SECRET_MODE, SECRET_SERVICE, SHELL_KINDS, SIGKILL_TIMEOUT_MS, SecretCatalog, TOOLCHAIN_CACHE_DIRS, WINDOWS_HIDE_FLAGS, agentsDir, allJobs, appendJob, approvalsPath, artifactsDir, assertValidSecretName, automationDir, automationLogsDir, automationWorkDir, budgetStatePath, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, checkpointsDir, classifyFailure, claudeUserSettingsPath, clearAllJobs, closeAllDatabases, collectProcessTree, collectProcessTreeStamped, commandsDir, complianceDir, configPath, confine, countCodePoints, createLogger, createProcessTable, createSecretStore, createStreamDecoder, currentLang, dbPath, detectBackend, detectConsoleEncoding, encodingForCodePage, envPath, formatIssues, generateDataKey, getDataKey, getDefaultShell, getJob, getPythonCommand, getSecretStore, getSecretValues, hasSideEffectChannel, headCodePoints, hooksPath, i18nDiagnostics, isEnvelope, isInWorkspace, isLang, isReadOnlyCommand, isSensitiveKey, isolate, issueDetails, jobDetail, keepHeadAndTail, keybindingsPath, killAllTrackedProcesses, killPids, killProcessTree, killStampedPids, killTrackedProcess, listJobs, listStoredSecretNames, loadCatalog, localesDir, managedSettingsPath, marketplacesPath, maskApiKey, maskSensitive, mcpAuthPath, mcpConfigPath, mcpSchemaCachePath, memoriesDir, migrate, migrateEnvSecrets, normalizeForMatch, openArtifact, openDatabase, openEnvelope, parseDataKey, parseEnvText, parseLenient, parseShellCommand, parseStrict, placeholdersOf, pluginsDir, pluginsStatePath, policiesDir, powershellCommandArg, prefetchProviderSecrets, probeBubblewrap, probeSeatbelt, probeShell, processFallbackTable, processTableFor, projectClaudeLocalSettingsPath, projectClaudeSettingsPath, projectCommandsDir, projectComplianceDir, projectHooksPath, projectLocalSettingsPath, projectPoliciesDir, projectSchemasDir, projectSettingsPath, projectSkillsDir, readConfigYaml, readJob, readKey, refCount, registerJob, rekeyJobs, releaseDatabase, removeEnvVarText, resetI18n, resetRipgrepCache, resetSecretState, resolveHomeDir, resolveLang, resolveProfile, resolveRipgrep, resolveShellKind, ripgrepInstallHint, safeInit, sandboxModeForLevel, schemaVersion, sealEnvelope, setDataKey, setEnvVarText, setLang, setLogLevel, setScalar, setSecretStore, setSecretValues, setSectionField, setShell, shellPtyArgs, shellSpawnArgs, skillsDir, splitWords, startLongLivedProcess, stopJob, stripShellWrapper, systemLocaleSignals, t, tailCodePoints, touchJob, trackForeignProcess, trackedProcessCount, trustPath, trustedImportsPath, uiDateLocale, unknownKeyIssues, unsetScalar, unsetSectionField, waitJob, withTimeout, workspacesPath, worktreesDir, writeArtifact, writeConfigYaml, writeEnvFile, writeProviderSecret };