@logictan/dsh-config-manager 0.1.60

package/lib/core/messages.js

@@ -0,0 +1,621 @@
+export const zh = {
+    // ---------- 导出 ----------
+    'export.encryptionRequired': '导出包含秘密需要注入 EncryptionProvider（m4 实现），拒绝明文导出秘密',
+    'export.sectionFailed': '分区 {adapter} 导出失败: {reason}',
+    'export.credentialsReadFailed': '读取凭据文件失败，跳过秘密导出: {reason}',
+    'export.vaultRefreshed': '凭据明文未进入备份，已镜像到本机 vault（{count} 个文件，恢复时可回填）',
+    'export.vaultRefreshSkipped': 'vault 镜像跳过 {rel}: {reason}',
+    'export.vaultRefreshFailed': 'vault 镜像刷新失败（不影响导出）: {reason}',
+    'export.fileSectionSecrets': '文件类分区 {section} 中检测到疑似凭据: {path}',
+    // ---------- 导入：ZIP 读入 / 完整性 / schema ----------
+    'import.readFailed': '无法读取备份文件 "{zip}": {reason}',
+    'import.noManifest': '备份缺少 manifest.json，不是有效的 DSH Config Manager 备份',
+    'import.manifestParseFailed': 'manifest.json 解析失败: {reason}',
+    'import.integrityFailed': '备份完整性校验失败: {entries}',
+    'import.schemaUnsupported': '备份 {version}，无法导入（当前支持 v1）',
+    'import.executableWarning': '备份包含可执行文件 "{name}"，本插件不会执行它',
+    'import.sectionParseFailed': '分区 {section} 数据解析失败: {reason}',
+    'import.sectionInvalid': '分区 {section} 数据无效: {issues}',
+    'import.adapterAnalyzeFailed': '{adapter}: 分析失败 {reason}',
+    'import.adapterValidationIssue': '{adapter}: {message}',
+    'import.versionUnsupported': '{version}：无法导入',
+    'import.missingSections': '备份声明了但缺少的分区: {sections}',
+    'import.unsupportedSections': '备份包含本版本不支持的分区: {sections}（已跳过，未导入）',
+    'import.unsupportedSectionVersion': '分区 {section} 的数据版本 {version} 高于本版本支持的 1（已跳过该分区）',
+    'import.checksumsMissing': '备份未提供完整性校验表，全部条目未被校验',
+    'import.extraEntries': 'ZIP 内含未登记进校验表的条目: {entries}（未被校验）',
+    'import.migrated': '备份 schema 已从 v{from} 迁移到 v{to}',
+    'import.migrateInvalidManifest': '迁移后的 manifest 不合法: {issues}',
+    'import.postValidationIssue': '导入后校验 {adapter}: {message}',
+    'import.postValidationFailed': '导入后校验 {adapter} 失败: {reason}',
+    'import.conflictKeepCurrent': '（用户选择保留当前）',
+    'import.conflictSkipExisting': '（skipExisting 策略）',
+    'import.conflictReplace': '（replace 策略）',
+    'import.secretMissingDesc': '凭据 {ref} 需要补录',
+    'import.secretNotProvided': '凭据未提供，需补录',
+    'import.notConfirmed': '导入未确认：必须显式 confirm 后才允许修改任何数据',
+    'import.encryptedPasswordRequired': '该备份已加密，必须提供解密密码才能导入（拒绝无密码导入）',
+    'import.encryptedPasswordWrong': '解密密码错误，请重试',
+    'import.notEncryptedContainer': '该文件不是加密备份容器，无法解锁',
+    'import.userSkipped': '用户跳过（导入中点击「跳过当前插件」）',
+    'import.userSkippedDetail': '插件 {name} 已由用户跳过，未安装',
+    'import.vaultRestored': '凭据文件 {rel} 已从本机 vault 回填',
+    'import.vaultMissing': '凭据文件 {rel} 不在本机 vault（跨机恢复需人工重填）',
+    'import.vaultBackfillFailed': 'vault 凭据回填失败（不影响导入结果）: {reason}',
+    // ---------- 回滚 ----------
+    'rollback.ns.createdNoDelete': '该 namespace 由导入创建，DSH settings 无删除语义',
+    'rollback.ns.manualHint': 'namespace "{ref}" 需人工删除或合并',
+    'rollback.ns.conflictHint': 'settings namespace "{ref}" 需人工核对',
+    'rollback.cred.noReadback': 'DSH 不回读凭据值，无法自动恢复',
+    'rollback.cred.manualHint': '凭据 "{ref}" 请人工重新填写',
+    'rollback.patch.manualHint': 'patch 行 "{ref}" 需人工核对',
+    'rollback.file.manualHint': '文件 "{ref}" 需人工恢复',
+    'rollback.workspace.manualHint': 'workspace "{ref}" 需人工核对',
+    'rollback.unknownEntry': '未知快照条目类型 {kind}',
+    // ---------- 快照恢复（restore.ts + 宿主执行器） ----------
+    'restore.snapshotInvalid': '快照 {dir} 的 snapshot.json 不是合法对象',
+    'restore.invalidSnapshotId': 'snapshotId 非法（禁止路径分隔符）/ invalid snapshotId',
+    'restore.pathEscape': '路径越界: {path}',
+    'restore.snapshotUntrusted': '快照不可信，拒绝恢复（{verdict}）：{reason}',
+    'restore.blobPathEscape': 'blob 路径越界: {path}',
+    'restore.hostSkipEscape': '宿主文件路径越界，跳过: {path}',
+    'restore.hostSkipEscapeDetail': '快照登记路径越界，拒绝恢复',
+    'restore.hostNoBlobInfo': '宿主文件 {path} 缺少 blob 副本，跳过',
+    'restore.hostBlobMissing': '宿主文件 {path} 的 blob 缺失，跳过',
+    'restore.hostRestore': '整文件还原 {path}',
+    'restore.backupBeforeWrite': '还原前将备份当前文件到 pre-restore/',
+    'restore.writeDirect': '当前文件不存在，直接写入',
+    'restore.hostRemove': '移除快照时不存在、现已出现的文件 {path}',
+    'restore.backupBeforeRemove': '删除前将备份当前文件到 pre-restore/',
+    'restore.hostSkipAbsent': '宿主文件 {path} 快照时不存在且当前也不存在，无动作',
+    'restore.settingsNotBacked': 'settings 文件 {path} 未被快照登记，无法整文件还原',
+    'restore.settingsNotBackedDetail': '该快照未备份此 settings 文件（可能当时不存在或宿主未暴露 profile）',
+    'restore.noBaseline': '旧快照无 beforePlugins 基线，无法自动卸载插件',
+    'restore.noBaselineDetail': '请人工核对导入期间新增的插件并逐个移除',
+    'restore.pluginRemove': '卸载导入期间新增插件 {name}',
+    'restore.pluginRemoveEmptyBaseline': '快照基线为空（导入前可能未捕获插件清单），请确认后执行',
+    'restore.noAddedPlugins': '无导入期间新增插件（当前已装插件 ⊆ 快照基线）',
+    'restore.fileSkipEscape': '文件条目路径越界，跳过: {adapter}:{ref}',
+    'restore.fileBlobMissing': '文件 {path} 的 blob 缺失，跳过',
+    'restore.fileRestore': '还原文件 {path}（{adapter}）',
+    'restore.fileRemove': '删除导入写入的文件 {path}（{adapter}）',
+    'restore.fileSkipAbsent': '文件 {path} 快照时不存在且当前也不存在，无动作',
+    'restore.fileNoBlobInfo': '文件 {path} 缺少 blob 副本信息，跳过',
+    'restore.credentialHint': '凭据 {ref} 需人工补录',
+    'restore.credentialManualHint': '凭据 "{ref}" 请人工重新填写（DSH 不回读凭据值）',
+    'restore.nsAggregate': '{count} 条 settings namespace 条目：快照无 settings 整文件备份，离线无法恢复',
+    'restore.nsAggregateDetail': '需经在线回滚（rollback.ts）或人工核对 settings.yaml',
+    'restore.patchAggregate': '{count} 条 patch 行条目：快照无 cordis.patch.yml 整文件备份，离线无法恢复',
+    'restore.patchAggregateDetail': '需经在线回滚（rollback.ts）或人工核对 patch 文件',
+    'restore.workspaceAggregate': '{count} 条 workspace 记录条目：离线无法恢复（数据在 DSH storages）',
+    'restore.workspaceAggregateDetail': '需经在线回滚（rollback.ts）或人工核对 workspace 注册表',
+    'restore.credentialAbsentAggregate': '{count} 条凭据快照时未配置：若导入已创建，需人工在 DSH 中删除',
+    'restore.uninstallFailedCode': 'dsh plugin remove {name} 失败（{code}）：{message}',
+    'restore.uninstallFailedExit': 'dsh plugin remove {name} 失败（exit {code}）：{tail}',
+    'restore.noOutput': '无输出',
+    'restore.pluginRemoveFailed': '卸载失败',
+    'restore.unknownAction': '未知动作 {kind}: {description}',
+    'restore.missingTargetBlob': '恢复动作缺少 target/blobPath',
+    'restore.missingTarget': '恢复动作缺少 target',
+    'restore.missingPluginName': '恢复动作缺少插件名',
+    'restore.ghostSweepSummary': '发现 {count} 个幽灵会话（备份有记录、磁盘无文件），需人工在 DSH 确认清理：{keys}',
+    // ---------- run 注册表 ----------
+    'run.conflict.export': '已有进行中的导出任务（{runId}），请等待其完成后再试',
+    'run.conflict.import': '已有进行中的导入任务（{runId}），请等待其完成后再试',
+    'run.notFound': 'run {runId} not found（可能已过保留期被清理）',
+    // ---------- 宿主（src/index.ts 门面与路由） ----------
+    'host.exportTimeout': '导出超时（5 分钟）：导出过程未完成，请重试；若反复超时请检查 profile 依赖状态',
+    'host.syncPushTimeout': '同步推送超时（5 分钟）：请检查网络与仓库可达性后重试',
+    'host.syncPullTimeout': '同步拉取超时（5 分钟）：请检查网络与仓库可达性后重试',
+    'host.workspaceUnavailable': 'workspaceRegistry 服务不可用，无法写入工作区',
+    'host.patchUnsupported': 'dsh-config-manager 仅支持管理 {user} 与 profile 的 {profile}（收到 {file}）',
+    'host.fsPathEscape': '路径越界: {path}',
+    'host.activationRowFailed': '插件 {pkg} 已安装，但激活行写入 profile 补丁失败：{reason}（重启后该插件可能未激活；修复后重试安装即可幂等补行）',
+    'host.syncTokenWriteFailed': 'token 写入 DSH credentials 失败：{reason}（请在 DSH 凭据管理里配置 {ref} 后重试）',
+    'host.githubMissingClientId': '未配置 GitHub OAuth client_id：请在插件配置中设置 githubClientId（GitHub → Settings → Developer settings → OAuth Apps 注册应用获取）',
+    'host.githubFlowGone': 'GitHub 登录流程不存在或已过期，请重新开始',
+    'host.restoreBlobEscape': 'blob 路径越界: {blob}',
+    'host.restoreUninstallFailed': 'dsh plugin remove {name} 失败（exit {code}）：{tail}',
+    'host.restoreNoOutput': '无输出',
+    // ---------- 适配器：分区导出告警 ----------
+    'adapter.pluginListReadFailed': '插件清单读取失败: {reason}',
+    'adapter.patchReadFailed': 'patch 文件读取失败: {reason}',
+    'adapter.patchReadFailedPrompts': 'patch 文件读取失败，无法提取 prompts: {reason}',
+    'adapter.patchReadFailedMCP': 'patch 文件读取失败，无法提取 MCP: {reason}',
+    'adapter.pnpmReadFailed': 'pnpm-workspace.yaml 读取失败: {reason}',
+    'adapter.localPackFailed': '本地插件打包失败（已跳过，其余插件不受影响）: {reason}',
+    'adapter.pluginLocalTarballHint': '（本地源插件，将用备份内自带的 tarball 安装）',
+    'adapter.providerNsReadFailed': 'provider namespace {ns} 读取失败（可能未配置）: {reason}',
+    'adapter.credStatusReadFailed': '凭据 {ref} 状态读取失败: {reason}',
+    'adapter.settingsNsReadFailed': '设置 namespace {name} 读取失败: {reason}',
+    'adapter.dirEmpty': '{type} 目录为空或不存在',
+    'adapter.linksFollowed': '{type} 分区：已跟随 {count} 个链接目录收集内容（导入时按普通目录还原，链接结构不会重建）',
+    'adapter.linksSkipped': '{type} 分区：{count} 个链接被跳过，其内容**未进备份** —— {detail}',
+    'adapter.dirsUnreadable': '{type} 分区：{count} 个目录读取失败（权限/竞态），其内容**未进备份** —— {detail}',
+    'adapter.linkReason.loop': '自引用/重复链接',
+    'adapter.linkReason.outsideHome': '目标在 DSH home 之外',
+    'adapter.linkReason.broken': '断链',
+    'adapter.linkReason.unreadable': '目标既非文件也非目录',
+    'adapter.linkReason.tooDeep': '层级过深',
+    'adapter.noSettingsNamespaces': '未配置 settings namespace 清单，settings 分区为空',
+    // ---------- 适配器：计划项描述 ----------
+    'adapter.fileCreate': '创建{type}文件 {path}',
+    'adapter.fileSame': '文件 {path} 已一致',
+    'adapter.fileDiff': '文件 {path} 内容不同',
+    'adapter.pluginFileCreate': '创建插件配置文件 {path}',
+    'adapter.pluginFileReserved': '拒绝：{path} 落在内部 recovery/control-plane 保留区（快照/事务/锁/同步存储）',
+    'adapter.fileReserved': '拒绝：{path} 落在内部 recovery/control-plane 保留区（快照/事务/锁/同步存储）',
+    'adapter.mcpCreate': '创建 MCP server {serverName}',
+    'adapter.mcpSame': 'MCP server {serverName} 已一致',
+    'adapter.mcpDiff': 'MCP server {serverName} 与目标不同',
+    'adapter.pwCreate': '写入 pnpm-workspace.yaml（插件构建白名单/冷静期配置）',
+    'adapter.pwUpdate': '更新 pnpm-workspace.yaml（插件构建白名单/冷静期配置）',
+    'adapter.pluginInstall': '安装插件 {name}@{version}',
+    'adapter.pluginSame': '插件 {name} 已安装且版本一致',
+    'adapter.pluginDiff': '插件 {name} 版本不同',
+    'adapter.pluginVersionDetail': '当前 {current} vs 导入 {imported}',
+    'adapter.pluginBundleMember': '（bundle 成员，经聚合包安装）',
+    'adapter.pluginInstallOk': '插件 {name} 已安装{suffix}',
+    'adapter.pluginUpdateTriggered': '插件 {name} 已触发更新（npm 最新版）{suffix}',
+    'adapter.pluginRestartSuffix': '，重启 dsh 后生效',
+    'adapter.pwMissing': '导入数据缺少 pnpm-workspace.yaml 内容',
+    'adapter.pluginInstallFailed': '插件 {name} 安装失败：{msg}。可手动安装：dsh plugin --profile {profile} add {name}（其余配置已导入；可修复依赖后在设置页重试或手动安装）',
+    'adapter.pluginUpdateFailed': '插件 {name} 更新失败：{msg}。可手动安装：dsh plugin --profile {profile} add {name}（其余配置已导入；可修复依赖后在设置页重试或手动安装）',
+    'adapter.patchLineCreate': '写入 patch 行 {lineId}',
+    'adapter.patchLineSame': 'patch 行 {lineId} 已一致',
+    'adapter.patchLineDiff': 'patch 行 {lineId} 与目标不同',
+    'adapter.promptSame': '提示词 {name} 已一致',
+    'adapter.promptDiff': '提示词 {name} 与目标不同',
+    'adapter.promptDiffWithLine': '提示词 {name} 与目标不同（目标位于行 {line}）',
+    'adapter.promptCreate': '创建提示词 {name}（行 {line}）',
+    'adapter.promptManual': '提示词 {name} 在目标无对应来源，请手动配置（DSH 无独立 prompt 存储）',
+    'adapter.providerUnregistered': 'Provider {route} 的命名空间 {ns} 在目标未注册（可能需要安装对应插件）',
+    'adapter.providerCreate': '创建 Provider {route}（namespace {ns}）',
+    'adapter.providerSame': 'Provider {route} 已一致',
+    'adapter.providerDiff': 'Provider {route} 与目标不同',
+    'adapter.settingsUnregistered': '设置命名空间 {ns} 在目标未注册（可能需要安装提供它的插件）',
+    'adapter.settingsCreate': '创建设置 {name}',
+    'adapter.settingsSame': '设置 {name} 已一致',
+    'adapter.settingsDiff': '设置 {name} 与目标不同',
+    'adapter.workspaceCreate': '创建工作区 {title}（{path}）',
+    'adapter.workspaceSame': '工作区 {id} 已一致',
+    'adapter.workspaceDiff': '工作区 {id} 与目标不同',
+    'adapter.workspacePathMapping': '路径需映射: {path}',
+    'adapter.workspaceMissing': '导入数据缺少工作区 {ref}',
+    'adapter.credentialDescription': '凭据补录',
+    // ---------- 适配器：applyItem 结果消息 ----------
+    'adapter.missingTargetRef': '缺少 target.ref',
+    'adapter.dataMissingFile': '导入数据缺少文件 {ref}',
+    'adapter.patchMissing': '导入数据缺少 patch 行 {ref}',
+    'adapter.pwWritten': 'pnpm-workspace.yaml 已写入（插件安装将按该配置执行）',
+    'adapter.pwWriteFailed': 'pnpm-workspace.yaml 写入失败：{msg}（插件安装可能因此受阻，可修复后在设置页重试）',
+    'adapter.patchFileCreate': '写入 pnpm patch 文件 {path}',
+    'adapter.patchFileWriteFailed': 'pnpm patch 文件 {path} 写入失败：{reason}（对应的 patchedDependencies 声明会被移除）',
+    'adapter.patchFileMissing': 'pnpm patch 文件缺失，无法随备份迁移：{name} → {path}（该 patchedDependencies 条目导入时会被移除）',
+    'adapter.patchFileUnsafe': 'pnpm patch 路径不安全，已跳过：{name} → {path}',
+    'adapter.patchFileReadFailed': 'pnpm patch 文件读取失败：{name} → {path}（{reason}）',
+    'adapter.patchFileTooLarge': 'pnpm patch 文件过大，未随备份迁移：{name} → {path}（上限 {limit}）',
+    'adapter.pwPatchesDropped': '已移除 {count} 条 patchedDependencies 声明（目标机没有对应 patch 文件，保留会让 pnpm 拒绝一切插件安装）：{names}',
+    'adapter.pwPatchesDroppedDetail': '导入时会移除 {count} 条无法满足的 patchedDependencies 声明：{names}',
+    'adapter.pwPatchesUnsupported': 'patchedDependencies 为单行 flow 写法，无法安全剔除缺失条目；若目标机没有对应 patch 文件，pnpm 可能拒绝安装：{line}',
+    'adapter.pwWrittenPatchesDropped': 'pnpm-workspace.yaml 已写入，但移除了 {count} 条 patchedDependencies 声明（目标机没有对应 patch 文件）：{names}',
+    'adapter.patchWritten': 'patch 行 {ref} 已写入（宿主热重载 patch，无需重启）',
+    'adapter.credentialValueMissing': '凭据值未提供（需补录）',
+    'adapter.promptWarningNoWrite': '提示项，无需写入',
+    'adapter.promptMissing': '导入数据缺少提示词 {id}',
+    'adapter.promptCreated': '提示词 {name} 已创建（行 {ref}）',
+    'adapter.patchLineMissing': '目标 patch 行 {ref} 不存在，无法写入',
+    'adapter.promptWritten': '提示词 {name} 已写入 patch 行 {ref}',
+    'adapter.mcpMissing': '导入数据缺少 MCP server {serverName}',
+    'adapter.mcpWritten': 'MCP server {serverName} 已写入 patch（宿主热重载 patch，无需重启）',
+    'adapter.workspaceWriteFailed': '工作区 {ref} 未能写入：{msg}（需映射路径或先在目标创建目录）',
+    'adapter.providerMissing': '导入数据缺少 provider {route}',
+    'adapter.namespaceMissing': '导入数据缺少 namespace {ref}',
+    // ---------- 适配器：结构校验（validate） ----------
+    'adapter.validate.object': '{subject} 数据必须是对象',
+    'adapter.validate.fileSection': '文件分区数据必须是对象',
+    'adapter.validate.version': 'version 必须为 1（收到 {value}）',
+    'adapter.validate.array': '{subject} 必须是数组',
+    'adapter.validate.string': '{subject} 必须是字符串',
+    'adapter.validate.localTarballPath': '本地插件 tarball 路径非法（须位于 local-plugins/ 之下且不含 ..）: {path}',
+    'adapter.validate.missingObject': '缺少 {subject} 对象',
+    'adapter.validate.recordObject': '{subject} 记录必须是对象',
+    'adapter.validate.requiredField': '缺少 {subject}',
+    'adapter.validate.sourceNamespace': '缺少来源 namespace',
+    'adapter.validate.number': '{subject} 必须是数字',
+    'adapter.validate.nonEmptyRef': '{subject} 记录必须含非空 ref',
+    'adapter.validate.credentialRef': '凭据记录必须含非空 ref',
+    'adapter.validate.fileRelativePath': '文件记录必须含非空 relativePath',
+    'adapter.validate.promptIdentity': 'prompt 记录必须含字符串 name 与 text',
+    'adapter.validate.hasValueFalse': '值未导出，hasValue 必须为 false',
+    'adapter.validate.serverName': 'server 记录必须含非空 serverName',
+    'adapter.validate.workspaceIdentity': 'workspace 记录必须含字符串 id 与 path',
+    'adapter.validate.missingValue': '缺少 value',
+    // ---------- 远程同步 ----------
+    'sync.denySensitiveSection': '同步拒绝携带敏感分区 {section}（secret 值永不参与同步）',
+    'sync.sectionFailed': '分区 {adapter} 导出失败: {reason}',
+    'sync.unknownSection': '分区 {section} 不存在，已跳过，不参与同步',
+    'sync.noSections': '没有可同步的分区（全部导出失败）',
+    'sync.legacyEncryptedSnapshot': '快照 {id} 是旧版加密快照，当前同步通道不产生也不读取加密快照（请在旧版本中改用明文通道重新推送）',
+    'sync.remoteEmpty': '远端无快照',
+    'sync.missingImporter': 'SyncEngine 缺少 importer：pull 需要注入 Importer（analyzeImport/createImportPlan）',
+    'sync.missingCtx': 'SyncEngine 需要 ctx',
+    'sync.missingTransport': 'SyncEngine 需要完整 SyncTransport（list/upload/download/delete）',
+    'sync.missingStateDir': 'SyncEngine 需要 stateDir',
+    'sync.unchanged': '远端快照与本地一致（无变更）',
+    'sync.changesSummary': 'compatibility={compatibility}，共 {count} 项变更',
+    'sync.configWhitespace': '仓库地址不能包含空白字符',
+    'sync.configUnparseable': '无法解析仓库地址: {url}',
+    'sync.configUserinfo': '请勿在仓库地址中包含用户名/密码（认证 token 请使用凭据字段，不会拼入地址）',
+    'sync.state.notObject': 'sync-state.json 损坏：必须是对象',
+    'sync.state.schemaUnsupported': 'sync-state.json schemaVersion 不支持: {version}（期望 {expected}）',
+    'sync.state.lastSyncAt': 'sync-state.json 损坏：lastSyncAt 必须是字符串',
+    'sync.state.sections': 'sync-state.json 损坏：sections 必须是对象',
+    'sync.state.sectionRecord': 'sync-state.json 损坏：分区 {section} 记录必须是对象',
+    'sync.state.sectionFields': 'sync-state.json 损坏：分区 {section} 记录必须含字符串 hash/updatedAt',
+    'sync.state.transport': 'sync-state.json 损坏：transport 必须含字符串 type/ref',
+    'sync.git.repoUrlRequired': 'repoUrl 必须是非空字符串',
+    'sync.git.workDirRequired': 'workDir 必须是非空字符串',
+    'sync.git.credentialsRequired': 'credentials 必须提供 getToken()',
+    'sync.git.snapshotMissing': '快照 {id} 不存在（本地工作副本 {dir}）',
+    'sync.git.snapshotCorrupt': '加密快照 {id} 损坏（{dir}）: {err}',
+    'sync.git.repoUnreachable': '仓库不可达或认证失败: {url}',
+    'sync.git.workDirNotRepo': 'workDir 不是 git 仓库（缺少 .git）且目录非空，无法 clone: {dir}',
+    'sync.git.pullFailed': 'git pull 失败: {err}',
+    'sync.git.cmdFailed': 'git {args} 失败 (exit {code}): {err}',
+    'sync.git.repoUrlInvalid': '无法解析 repoUrl（http(s) 仓库必须为合法 URL）: {url}',
+    'sync.git.invalidSnapshotId': '非法快照 id: {id}（仅允许字母数字开头，字符限 . _ -）',
+    'sync.webdav.baseUrlRequired': 'baseUrl 必须是非空字符串',
+    'sync.webdav.baseUrlInvalid': '无法解析 baseUrl（必须为合法 http(s) URL）: {url}',
+    'sync.webdav.baseUrlUserinfo': '请勿在 baseUrl 中包含用户名/密码（认证走凭据字段，不会拼入地址）',
+    'sync.webdav.usernameRequired': 'username 必须是非空字符串',
+    'sync.webdav.credentialsRequired': 'credentials 必须提供 getPassword()',
+    'sync.webdav.invalidSnapshotId': '非法快照 id: {id}（仅允许字母数字开头，字符限 . _ -）',
+    'sync.webdav.snapshotMissing': '快照 {id} 不存在（{url}）',
+    'sync.webdav.requestFailed': '{method} {url} 失败 (HTTP {status}): {err}',
+    'sync.webdav.requestError': '{method} {url} 请求出错: {err}',
+    'sync.webdav.timeout': '{method} {url} 请求超时（{timeout}ms）',
+    'sync.webdav.tooManyRedirects': '{method} {url} 重定向超过 {n} 次上限，疑似跳转循环',
+    'sync.webdav.indexInvalid': '{url} 解析失败或结构非法: {err}',
+    'sync.webdav.snapshotInvalid': '快照 {id} 解析失败或结构非法: {err}',
+    'sync.pruneListFailed': '远端快照裁剪失败：无法列出远端快照，{reason}',
+    'sync.pruneDeleteFailed': '远端快照裁剪失败：删除快照 {id} 失败，{reason}',
+    // ---------- 配置市场（m-market：只读公开仓库目录读取 + 校验） ----------
+    'market.invalidItemId': '非法市场条目 id: {id}（仅允许字母数字开头，字符限 . _ -）',
+    'market.urlWhitespace': '市场仓库地址不能包含空白字符',
+    'market.urlUnparseable': '无法解析市场仓库地址: {url}',
+    'market.urlUserinfo': '请勿在市场仓库地址中包含用户名/密码（公开市场无需凭据；token 不会拼入地址）',
+    'market.repoUnreachable': '市场仓库不可达: {url}',
+    'market.cloneFailed': '市场仓库拉取（clone）失败: {err}',
+    'market.pullFailed': '市场仓库同步（pull）失败: {err}',
+    'market.workDirNotRepo': '市场工作目录非空且不是 git 仓库，无法 clone: {dir}',
+    'market.missingIndex': '市场缺少 index.json: {url}',
+    'market.missingManifest': '条目 {id} 缺少 manifest.json',
+    'market.missingZip': '条目 {id} 缺少 config.zip',
+    'market.zipTooLarge': 'config.zip 体积 {size} 超过上限 {limit} 字节',
+    'market.invalid': '条目 {id} 校验未通过: {errors}',
+};
+export const en = {
+    // ---------- export ----------
+    'export.encryptionRequired': 'Encrypted export requires an EncryptionProvider (m4); refusing to export secrets in plaintext',
+    'export.sectionFailed': 'Section {adapter} export failed: {reason}',
+    'export.credentialsReadFailed': 'Failed to read the credentials file; secrets export skipped: {reason}',
+    'export.vaultRefreshed': 'Credential plaintext did not enter the backup; mirrored to the local vault ({count} file(s), available for restore backfill)',
+    'export.vaultRefreshSkipped': 'Vault mirror skipped {rel}: {reason}',
+    'export.vaultRefreshFailed': 'Vault mirror refresh failed (export unaffected): {reason}',
+    'export.fileSectionSecrets': 'Suspected credential detected in file section {section}: {path}',
+    // ---------- import: ZIP / integrity / schema ----------
+    'import.readFailed': 'Cannot read backup file "{zip}": {reason}',
+    'import.noManifest': 'Backup is missing manifest.json — not a valid DSH Config Manager backup',
+    'import.manifestParseFailed': 'Failed to parse manifest.json: {reason}',
+    'import.integrityFailed': 'Backup integrity check failed: {entries}',
+    'import.schemaUnsupported': 'Backup {version} cannot be imported (current support: v1)',
+    'import.executableWarning': 'Backup contains an executable file "{name}"; this plugin will not run it',
+    'import.sectionParseFailed': 'Section {section} data parse failed: {reason}',
+    'import.sectionInvalid': 'Section {section} data is invalid: {issues}',
+    'import.adapterAnalyzeFailed': '{adapter}: analysis failed {reason}',
+    'import.adapterValidationIssue': '{adapter}: {message}',
+    'import.versionUnsupported': '{version}: cannot import',
+    'import.missingSections': 'Sections declared by the backup but missing: {sections}',
+    'import.unsupportedSections': 'Backup contains sections not supported by this version: {sections} (skipped, not imported)',
+    'import.unsupportedSectionVersion': 'Section {section} data version {version} is higher than the supported version 1 (section skipped)',
+    'import.checksumsMissing': 'Backup provides no integrity checksum table; no entry was verified',
+    'import.extraEntries': 'ZIP contains entries not registered in the checksum table: {entries} (not verified)',
+    'import.migrated': 'Backup schema migrated from v{from} to v{to}',
+    'import.migrateInvalidManifest': 'Migrated manifest is invalid: {issues}',
+    'import.postValidationIssue': 'Post-import validation {adapter}: {message}',
+    'import.postValidationFailed': 'Post-import validation {adapter} failed: {reason}',
+    'import.conflictKeepCurrent': ' (user chose to keep current)',
+    'import.conflictSkipExisting': ' (skipExisting strategy)',
+    'import.conflictReplace': ' (replace strategy)',
+    'import.secretMissingDesc': 'Credential {ref} needs to be re-entered',
+    'import.secretNotProvided': 'Credential not provided; requires re-entry',
+    'import.notConfirmed': 'Import not confirmed: explicit confirm is required before any data is modified',
+    'import.encryptedPasswordRequired': 'This backup is encrypted; the decryption password is required to import it (refusing password-less import)',
+    'import.encryptedPasswordWrong': 'Wrong decryption password, please try again',
+    'import.notEncryptedContainer': 'This file is not an encrypted backup container and cannot be unlocked',
+    'import.userSkipped': 'Skipped by user (clicked "Skip current plugin" during import)',
+    'import.userSkippedDetail': 'Plugin {name} was skipped by the user and not installed',
+    'import.vaultRestored': 'Credential file {rel} backfilled from the local vault',
+    'import.vaultMissing': 'Credential file {rel} is not in the local vault (cross-machine restore: re-enter manually)',
+    'import.vaultBackfillFailed': 'Vault credential backfill failed (import result unaffected): {reason}',
+    // ---------- rollback ----------
+    'rollback.ns.createdNoDelete': 'This namespace was created by the import; DSH settings have no delete semantics',
+    'rollback.ns.manualHint': 'namespace "{ref}" needs manual removal or merge',
+    'rollback.ns.conflictHint': 'settings namespace "{ref}" needs manual review',
+    'rollback.cred.noReadback': 'DSH never reads credential values back, so the original cannot be restored automatically',
+    'rollback.cred.manualHint': 'Credential "{ref}": please re-enter it manually',
+    'rollback.patch.manualHint': 'patch row "{ref}" needs manual review',
+    'rollback.file.manualHint': 'File "{ref}" needs manual restore',
+    'rollback.workspace.manualHint': 'workspace "{ref}" needs manual review',
+    'rollback.unknownEntry': 'Unknown snapshot entry kind {kind}',
+    // ---------- snapshot restore (restore.ts + host executor) ----------
+    'restore.snapshotInvalid': 'snapshot.json in {dir} is not a valid object',
+    'restore.invalidSnapshotId': 'invalid snapshotId (path separators forbidden)',
+    'restore.snapshotUntrusted': 'Snapshot untrusted, restore refused ({verdict}): {reason}',
+    'restore.pathEscape': 'Path outside home directory: {path}',
+    'restore.blobPathEscape': 'Blob path outside snapshot directory: {path}',
+    'restore.hostSkipEscape': 'Host file path outside home directory, skipped: {path}',
+    'restore.hostSkipEscapeDetail': 'Snapshot-recorded path escapes the home root; restore refused',
+    'restore.hostNoBlobInfo': 'Host file {path} has no blob copy, skipped',
+    'restore.hostBlobMissing': 'Blob for host file {path} is missing, skipped',
+    'restore.hostRestore': 'Restore whole file {path}',
+    'restore.backupBeforeWrite': 'The current file will be backed up to pre-restore/ first',
+    'restore.writeDirect': 'File does not exist now; writing directly',
+    'restore.hostRemove': 'Remove file {path} that did not exist at snapshot time but exists now',
+    'restore.backupBeforeRemove': 'The current file will be backed up to pre-restore/ before removal',
+    'restore.hostSkipAbsent': 'Host file {path} did not exist at snapshot time and does not exist now; no action',
+    'restore.settingsNotBacked': 'Settings file {path} was not recorded by the snapshot; whole-file restore unavailable',
+    'restore.settingsNotBackedDetail': 'This snapshot did not back up this settings file (it may not have existed, or the host profile was not exposed)',
+    'restore.noBaseline': 'Old snapshot has no beforePlugins baseline; plugin uninstall cannot be planned automatically',
+    'restore.noBaselineDetail': 'Please review plugins added during the import and remove them individually',
+    'restore.pluginRemove': 'Uninstall plugin {name} added during import',
+    'restore.pluginRemoveEmptyBaseline': 'Snapshot baseline is empty (plugin list may not have been captured before import); confirm before executing',
+    'restore.noAddedPlugins': 'No plugins added during import (all currently installed plugins ⊆ snapshot baseline)',
+    'restore.fileSkipEscape': 'File entry path outside home directory, skipped: {adapter}:{ref}',
+    'restore.fileBlobMissing': 'Blob for file {path} is missing, skipped',
+    'restore.fileRestore': 'Restore file {path} ({adapter})',
+    'restore.fileRemove': 'Remove file {path} written by the import ({adapter})',
+    'restore.fileSkipAbsent': 'File {path} did not exist at snapshot time and does not exist now; no action',
+    'restore.fileNoBlobInfo': 'File {path} has no blob copy information, skipped',
+    'restore.credentialHint': 'Credential {ref} needs manual re-entry',
+    'restore.credentialManualHint': 'Credential "{ref}": please re-enter it manually (DSH never reads credential values back)',
+    'restore.nsAggregate': '{count} settings namespace entries: snapshot has no whole-file settings backup, cannot restore offline',
+    'restore.nsAggregateDetail': 'Needs the online rollback path (rollback.ts) or manual review of settings.yaml',
+    'restore.patchAggregate': '{count} patch-row entries: snapshot has no whole-file cordis.patch.yml backup, cannot restore offline',
+    'restore.patchAggregateDetail': 'Needs the online rollback path (rollback.ts) or manual review of the patch file',
+    'restore.workspaceAggregate': '{count} workspace-record entries: cannot restore offline (data lives in DSH storages)',
+    'restore.workspaceAggregateDetail': 'Needs the online rollback path (rollback.ts) or manual review of the workspace registry',
+    'restore.credentialAbsentAggregate': '{count} credentials were not configured at snapshot time: if the import created them, remove them manually in DSH',
+    'restore.uninstallFailedCode': 'dsh plugin remove {name} failed ({code}): {message}',
+    'restore.uninstallFailedExit': 'dsh plugin remove {name} failed (exit {code}): {tail}',
+    'restore.noOutput': 'no output',
+    'restore.pluginRemoveFailed': 'Uninstall failed',
+    'restore.unknownAction': 'Unknown action {kind}: {description}',
+    'restore.missingTargetBlob': 'Restore action is missing target/blobPath',
+    'restore.missingTarget': 'Restore action is missing target',
+    'restore.missingPluginName': 'Restore action is missing the plugin name',
+    'restore.ghostSweepSummary': 'Found {count} ghost session(s) (recorded in the backup, missing on disk); please confirm and clean them up in DSH: {keys}',
+    // ---------- run registry ----------
+    'run.conflict.export': 'An export task is already running ({runId}); wait for it to finish before retrying',
+    'run.conflict.import': 'An import task is already running ({runId}); wait for it to finish before retrying',
+    'run.notFound': 'run {runId} not found (may have been pruned after the retention period)',
+    // ---------- host (src/index.ts facades & routes) ----------
+    'host.exportTimeout': 'Export timed out (5 min): the export did not complete, please retry; if it keeps timing out, check the profile dependency state',
+    'host.syncPushTimeout': 'Sync push timed out (5 min): check network and repository reachability, then retry',
+    'host.syncPullTimeout': 'Sync pull timed out (5 min): check network and repository reachability, then retry',
+    'host.workspaceUnavailable': 'workspaceRegistry service unavailable; cannot write the workspace',
+    'host.patchUnsupported': 'dsh-config-manager only manages {user} and the profile {profile} (received {file})',
+    'host.fsPathEscape': 'Path outside home directory: {path}',
+    'host.activationRowFailed': 'Plugin {pkg} is installed, but writing the activation row into the profile patch failed: {reason} (the plugin may be inactive until restart; retrying the install after fixing is idempotent)',
+    'host.syncTokenWriteFailed': 'Failed to write the token into DSH credentials: {reason} (configure {ref} in DSH credential management, then retry)',
+    'host.githubMissingClientId': 'GitHub OAuth client_id is not configured: set githubClientId in the plugin config (GitHub → Settings → Developer settings → OAuth Apps → register an app)',
+    'host.githubFlowGone': 'The GitHub sign-in flow does not exist or has expired; please start over',
+    'host.restoreBlobEscape': 'Blob path outside snapshot directory: {blob}',
+    'host.restoreUninstallFailed': 'dsh plugin remove {name} failed (exit {code}): {tail}',
+    'host.restoreNoOutput': 'no output',
+    // ---------- adapters: section export warnings ----------
+    'adapter.pluginListReadFailed': 'Failed to read the plugin list: {reason}',
+    'adapter.patchReadFailed': 'Failed to read the patch file: {reason}',
+    'adapter.patchReadFailedPrompts': 'Failed to read the patch file; prompts unavailable: {reason}',
+    'adapter.patchReadFailedMCP': 'Failed to read the patch file; MCP servers unavailable: {reason}',
+    'adapter.pnpmReadFailed': 'Failed to read pnpm-workspace.yaml: {reason}',
+    'adapter.localPackFailed': 'Failed to pack local plugin (skipped; other plugins unaffected): {reason}',
+    'adapter.pluginLocalTarballHint': ' (local-source plugin; will install from the tarball bundled in this backup)',
+    'adapter.providerNsReadFailed': 'provider namespace {ns} read failed (may be unconfigured): {reason}',
+    'adapter.credStatusReadFailed': 'Credential {ref} status read failed: {reason}',
+    'adapter.settingsNsReadFailed': 'settings namespace {name} read failed: {reason}',
+    'adapter.dirEmpty': '{type} directory is empty or missing',
+    'adapter.linksFollowed': '{type}: followed {count} linked directories (restored as plain directories on import; link structure is not recreated)',
+    'adapter.linksSkipped': '{type}: {count} links skipped and their content is NOT in this backup — {detail}',
+    'adapter.dirsUnreadable': '{type}: {count} director(ies) could not be read (permissions/race) and their content is NOT in this backup — {detail}',
+    'adapter.linkReason.loop': 'self-referencing/duplicate link',
+    'adapter.linkReason.outsideHome': 'target outside the DSH home',
+    'adapter.linkReason.broken': 'broken link',
+    'adapter.linkReason.unreadable': 'target is neither a regular file nor a directory',
+    'adapter.linkReason.tooDeep': 'nesting too deep',
+    'adapter.noSettingsNamespaces': 'No settings namespaces configured; the settings section is empty',
+    // ---------- adapters: plan item descriptions ----------
+    'adapter.fileCreate': 'Create {type} file {path}',
+    'adapter.fileSame': 'File {path} is already identical',
+    'adapter.fileDiff': 'File {path} differs',
+    'adapter.pluginFileCreate': 'Create plugin config file {path}',
+    'adapter.pluginFileReserved': 'Rejected: {path} falls inside the internal recovery/control-plane reserved namespace (snapshots/transactions/locks/sync)',
+    'adapter.fileReserved': 'Rejected: {path} falls inside the internal recovery/control-plane reserved namespace (snapshots/transactions/locks/sync)',
+    'adapter.mcpCreate': 'Create MCP server {serverName}',
+    'adapter.mcpSame': 'MCP server {serverName} is already identical',
+    'adapter.mcpDiff': 'MCP server {serverName} differs from the target',
+    'adapter.pwCreate': 'Write pnpm-workspace.yaml (plugin build whitelist / release-age settings)',
+    'adapter.pwUpdate': 'Update pnpm-workspace.yaml (plugin build whitelist / release-age settings)',
+    'adapter.pluginInstall': 'Install plugin {name}@{version}',
+    'adapter.pluginSame': 'Plugin {name} is installed and the version matches',
+    'adapter.pluginDiff': 'Plugin {name} version differs',
+    'adapter.pluginVersionDetail': 'current {current} vs backup {imported}',
+    'adapter.pluginBundleMember': ' (bundle member, installed via the aggregate package)',
+    'adapter.pluginInstallOk': 'Plugin {name} installed{suffix}',
+    'adapter.pluginUpdateTriggered': 'Plugin {name} update triggered (npm latest){suffix}',
+    'adapter.pluginRestartSuffix': '; takes effect after restarting dsh',
+    'adapter.pwMissing': 'Import data is missing pnpm-workspace.yaml content',
+    'adapter.pluginInstallFailed': 'Plugin {name} install failed: {msg}. You can install it manually: dsh plugin --profile {profile} add {name} (the rest of the config was imported; fix dependencies and retry from the settings page, or install by hand)',
+    'adapter.pluginUpdateFailed': 'Plugin {name} update failed: {msg}. You can install it manually: dsh plugin --profile {profile} add {name} (the rest of the config was imported; fix dependencies and retry from the settings page, or install by hand)',
+    'adapter.patchLineCreate': 'Write patch row {lineId}',
+    'adapter.patchLineSame': 'Patch row {lineId} is already identical',
+    'adapter.patchLineDiff': 'Patch row {lineId} differs from the target',
+    'adapter.promptSame': 'Prompt {name} is already identical',
+    'adapter.promptDiff': 'Prompt {name} differs from the target',
+    'adapter.promptDiffWithLine': 'Prompt {name} differs from the target (target lives at row {line})',
+    'adapter.promptCreate': 'Create prompt {name} (row {line})',
+    'adapter.promptManual': 'Prompt {name} has no matching source on the target; configure it manually (DSH has no standalone prompt storage)',
+    'adapter.providerUnregistered': 'Namespace {ns} of Provider {route} is not registered on the target (the providing plugin may need to be installed)',
+    'adapter.providerCreate': 'Create Provider {route} (namespace {ns})',
+    'adapter.providerSame': 'Provider {route} is already identical',
+    'adapter.providerDiff': 'Provider {route} differs from the target',
+    'adapter.settingsUnregistered': 'Settings namespace {ns} is not registered on the target (the providing plugin may need to be installed)',
+    'adapter.settingsCreate': 'Create settings {name}',
+    'adapter.settingsSame': 'Settings {name} are already identical',
+    'adapter.settingsDiff': 'Settings {name} differ from the target',
+    'adapter.workspaceCreate': 'Create workspace {title} ({path})',
+    'adapter.workspaceSame': 'Workspace {id} is already identical',
+    'adapter.workspaceDiff': 'Workspace {id} differs from the target',
+    'adapter.workspacePathMapping': 'Path needs mapping: {path}',
+    'adapter.workspaceMissing': 'Import data is missing workspace {ref}',
+    'adapter.credentialDescription': 'Re-enter credential',
+    // ---------- adapters: applyItem result messages ----------
+    'adapter.missingTargetRef': 'Missing target.ref',
+    'adapter.dataMissingFile': 'Import data is missing file {ref}',
+    'adapter.patchMissing': 'Import data is missing patch row {ref}',
+    'adapter.pwWritten': 'pnpm-workspace.yaml written (plugin installs will follow it)',
+    'adapter.pwWriteFailed': 'Failed to write pnpm-workspace.yaml: {msg} (plugin installs may be blocked; fix it and retry from the settings page)',
+    'adapter.patchFileCreate': 'Write pnpm patch file {path}',
+    'adapter.patchFileWriteFailed': 'Failed to write pnpm patch file {path}: {reason} (the matching patchedDependencies entry will be removed)',
+    'adapter.patchFileMissing': 'pnpm patch file missing, cannot be migrated: {name} → {path} (this patchedDependencies entry will be removed on import)',
+    'adapter.patchFileUnsafe': 'Unsafe pnpm patch path, skipped: {name} → {path}',
+    'adapter.patchFileReadFailed': 'Failed to read pnpm patch file: {name} → {path} ({reason})',
+    'adapter.patchFileTooLarge': 'pnpm patch file too large, not migrated: {name} → {path} (limit {limit})',
+    'adapter.pwPatchesDropped': 'Removed {count} patchedDependencies entries (the target has no matching patch file; keeping them would make pnpm reject every plugin install): {names}',
+    'adapter.pwPatchesDroppedDetail': '{count} unsatisfiable patchedDependencies entries will be removed on import: {names}',
+    'adapter.pwPatchesUnsupported': 'patchedDependencies uses single-line flow syntax, so missing entries cannot be removed safely; if the target lacks the patch files pnpm may refuse installs: {line}',
+    'adapter.pwWrittenPatchesDropped': 'pnpm-workspace.yaml written, but {count} patchedDependencies entries were removed (the target has no matching patch file): {names}',
+    'adapter.patchWritten': 'Patch row {ref} written (the host hot-reloads patches; no restart needed)',
+    'adapter.credentialValueMissing': 'Credential value not provided (re-entry required)',
+    'adapter.promptWarningNoWrite': 'Informational item; nothing to write',
+    'adapter.promptMissing': 'Import data is missing prompt {id}',
+    'adapter.promptCreated': 'Prompt {name} created (row {ref})',
+    'adapter.patchLineMissing': 'Target patch row {ref} does not exist; cannot write',
+    'adapter.promptWritten': 'Prompt {name} written to patch row {ref}',
+    'adapter.mcpMissing': 'Import data is missing MCP server {serverName}',
+    'adapter.mcpWritten': 'MCP server {serverName} written to the patch (the host hot-reloads patches; no restart needed)',
+    'adapter.workspaceWriteFailed': 'Workspace {ref} could not be written: {msg} (map the path or create the target directory first)',
+    'adapter.providerMissing': 'Import data is missing provider {route}',
+    'adapter.namespaceMissing': 'Import data is missing namespace {ref}',
+    // ---------- adapters: structural validation ----------
+    'adapter.validate.object': '{subject} data must be an object',
+    'adapter.validate.fileSection': 'File-section data must be an object',
+    'adapter.validate.version': 'version must be 1 (received {value})',
+    'adapter.validate.array': '{subject} must be an array',
+    'adapter.validate.string': '{subject} must be a string',
+    'adapter.validate.localTarballPath': 'Invalid local plugin tarball path (must live under local-plugins/ without ..): {path}',
+    'adapter.validate.missingObject': 'Missing {subject} object',
+    'adapter.validate.recordObject': '{subject} records must be objects',
+    'adapter.validate.requiredField': 'Missing {subject}',
+    'adapter.validate.sourceNamespace': 'Missing source namespace',
+    'adapter.validate.number': '{subject} must be a number',
+    'adapter.validate.nonEmptyRef': '{subject} records must have a non-empty ref',
+    'adapter.validate.credentialRef': 'Credential records must have a non-empty ref',
+    'adapter.validate.fileRelativePath': 'File records must have a non-empty relativePath',
+    'adapter.validate.promptIdentity': 'Prompt records must contain string name and text',
+    'adapter.validate.hasValueFalse': 'Values are never exported; hasValue must be false',
+    'adapter.validate.serverName': 'Server records must have a non-empty serverName',
+    'adapter.validate.workspaceIdentity': 'Workspace records must contain string id and path',
+    'adapter.validate.missingValue': 'Missing value',
+    // ---------- remote sync ----------
+    'sync.denySensitiveSection': 'Sync refuses to carry the sensitive section {section} (secret values never sync)',
+    'sync.sectionFailed': 'Section {adapter} export failed: {reason}',
+    'sync.unknownSection': 'Section {section} does not exist; skipped from sync',
+    'sync.noSections': 'No sections to sync (all exports failed)',
+    'sync.legacyEncryptedSnapshot': 'Snapshot {id} is a legacy encrypted snapshot; the sync channel neither produces nor reads encrypted snapshots (re-push over a plaintext channel on the old version)',
+    'sync.remoteEmpty': 'No snapshots on the remote',
+    'sync.missingImporter': 'SyncEngine is missing the importer: pull requires an Importer (analyzeImport/createImportPlan)',
+    'sync.missingCtx': 'SyncEngine requires ctx',
+    'sync.missingTransport': 'SyncEngine requires a complete SyncTransport (list/upload/download/delete)',
+    'sync.missingStateDir': 'SyncEngine requires stateDir',
+    'sync.unchanged': 'Remote snapshot matches local (no changes)',
+    'sync.changesSummary': 'compatibility={compatibility}, {count} change(s)',
+    'sync.configWhitespace': 'Repository URL must not contain whitespace',
+    'sync.configUnparseable': 'Cannot parse repository URL: {url}',
+    'sync.configUserinfo': 'Do not include a username/password in the repository URL (use the credential field for the auth token; it is never embedded in the URL)',
+    'sync.state.notObject': 'sync-state.json is corrupt: must be an object',
+    'sync.state.schemaUnsupported': 'sync-state.json schemaVersion not supported: {version} (expected {expected})',
+    'sync.state.lastSyncAt': 'sync-state.json is corrupt: lastSyncAt must be a string',
+    'sync.state.sections': 'sync-state.json is corrupt: sections must be an object',
+    'sync.state.sectionRecord': 'sync-state.json is corrupt: section {section} record must be an object',
+    'sync.state.sectionFields': 'sync-state.json is corrupt: section {section} record must contain string hash/updatedAt',
+    'sync.state.transport': 'sync-state.json is corrupt: transport must contain string type/ref',
+    'sync.git.repoUrlRequired': 'repoUrl must be a non-empty string',
+    'sync.git.workDirRequired': 'workDir must be a non-empty string',
+    'sync.git.credentialsRequired': 'credentials must provide getToken()',
+    'sync.git.snapshotMissing': 'Snapshot {id} does not exist (local working copy {dir})',
+    'sync.git.snapshotCorrupt': 'Encrypted snapshot {id} is corrupt ({dir}): {err}',
+    'sync.git.repoUnreachable': 'Repository unreachable or authentication failed: {url}',
+    'sync.git.workDirNotRepo': 'workDir is not a git repository (no .git) and the directory is not empty; cannot clone: {dir}',
+    'sync.git.pullFailed': 'git pull failed: {err}',
+    'sync.git.cmdFailed': 'git {args} failed (exit {code}): {err}',
+    'sync.git.repoUrlInvalid': 'Cannot parse repoUrl (http(s) repositories must be valid URLs): {url}',
+    'sync.git.invalidSnapshotId': 'Invalid snapshot id: {id} (must start with an alphanumeric; only . _ - allowed)',
+    'sync.webdav.baseUrlRequired': 'baseUrl must be a non-empty string',
+    'sync.webdav.baseUrlInvalid': 'Cannot parse baseUrl (must be a valid http(s) URL): {url}',
+    'sync.webdav.baseUrlUserinfo': 'Do not include a username/password in baseUrl (use the credential field for auth; never embedded in the URL)',
+    'sync.webdav.usernameRequired': 'username must be a non-empty string',
+    'sync.webdav.credentialsRequired': 'credentials must provide getPassword()',
+    'sync.webdav.invalidSnapshotId': 'Invalid snapshot id: {id} (must start with an alphanumeric; only . _ - allowed)',
+    'sync.webdav.snapshotMissing': 'Snapshot {id} does not exist ({url})',
+    'sync.webdav.requestFailed': '{method} {url} failed (HTTP {status}): {err}',
+    'sync.webdav.requestError': '{method} {url} request error: {err}',
+    'sync.webdav.timeout': '{method} {url} request timed out ({timeout}ms)',
+    'sync.webdav.tooManyRedirects': '{method} {url} too many redirects ({n} max), possible redirect loop',
+    'sync.webdav.indexInvalid': '{url} failed to parse or is structurally invalid: {err}',
+    'sync.webdav.snapshotInvalid': 'Snapshot {id} failed to parse or is structurally invalid: {err}',
+    'sync.pruneListFailed': 'Remote snapshot pruning failed: could not list remote snapshots, {reason}',
+    'sync.pruneDeleteFailed': 'Remote snapshot pruning failed: deleting snapshot {id} failed, {reason}',
+    // ---------- config marketplace (m-market: read-only public repo directory read + validation) ----------
+    'market.invalidItemId': 'Invalid marketplace item id: {id} (must start with an alphanumeric; only . _ - allowed)',
+    'market.urlWhitespace': 'Marketplace repository URL must not contain whitespace',
+    'market.urlUnparseable': 'Cannot parse marketplace repository URL: {url}',
+    'market.urlUserinfo': 'Do not include a username/password in the marketplace repository URL (public markets need no credential; the token is never embedded in the URL)',
+    'market.repoUnreachable': 'Marketplace repository unreachable: {url}',
+    'market.cloneFailed': 'Marketplace repository clone failed: {err}',
+    'market.pullFailed': 'Marketplace repository sync (pull) failed: {err}',
+    'market.workDirNotRepo': 'Marketplace working directory is not a git repo and is not empty; cannot clone: {dir}',
+    'market.missingIndex': 'Marketplace is missing index.json: {url}',
+    'market.missingManifest': 'Item {id} is missing manifest.json',
+    'market.missingZip': 'Item {id} is missing config.zip',
+    'market.zipTooLarge': 'config.zip size {size} exceeds the limit {limit} bytes',
+    'market.invalid': 'Item {id} failed verification: {errors}',
+};
+/** 插值：{param} → 形参值；缺参原样保留（便于排查）。 */
+function interpolate(template, params) {
+    if (params === undefined)
+        return template;
+    return template.replace(/\{(\w+)\}/g, (match, key) => {
+        const value = params[key];
+        return value === undefined ? match : String(value);
+    });
+}
+/** 构造 MsgFunc：en → en 目录（缺键回退 zh）；其余 → zh。 */
+export function makeMsg(lang) {
+    const langKey = lang === 'en' ? 'en' : 'zh';
+    const dict = langKey === 'en' ? en : zh;
+    const fallback = langKey === 'en' ? zh : undefined;
+    return (key, params) => {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const template = dict[key] ?? fallback?.[key] ?? key;
+        return interpolate(template, params);
+    };
+}
+/** 缺省目录（zh）：未注入 msg 的引擎/测试路径使用，行为与改造前完全一致。 */
+export const zhMsg = makeMsg('zh');
+/** 从「可能携带 msg 的对象」取翻译器；缺省 zh。 */
+export function msgOf(ctx) {
+    return ctx?.msg ?? zhMsg;
+}
+//# sourceMappingURL=messages.js.map