@lumenkey/cli 0.3.0 → 0.4.0-rc.1

package/dist/core/locale.js

@@ -1,4 +1,8 @@
+import { zhText } from '../core/chinese-messages.js';
 const EN = {
+    DOWNLOAD_ROOT_INVALID: 'LUMENKEY_DOWNLOAD_ROOT must be an absolute path.',
+    DOWNLOAD_OUTSIDE_ROOT: 'The download target is outside the allowed root or contains parent traversal.',
+    DOWNLOAD_UNSAFE_PATH: 'The download path contains an unsafe link or cannot be verified.',
     API_KEY_NOT_CONFIGURED: 'key: not configured. Set LUMENKEY_API_KEY or run lumenkey login.',
     INVALID_API_KEY: 'This key was rejected. Check LUMENKEY_API_KEY or run lumenkey login.',
     MODEL_REQUIRED: 'Choose a model with -m <modelId>.',
@@ -106,111 +110,114 @@ const EN = {
     CLI_COMMAND_FAILED: 'The command failed before it could finish.',
 };
 const ZH = {
-    API_KEY_NOT_CONFIGURED: '尚未配置密钥。请设置 LUMENKEY_API_KEY，或运行 lumenkey login。',
-    INVALID_API_KEY: '密钥无效或已失效，请确认后重试。',
-    MODEL_REQUIRED: '请用 -m <模型ID> 指定模型。',
-    MODEL_NOT_IN_CATALOG: '该模型 ID 不在你的可用目录中。运行 lumenkey models 查看准确 ID。',
-    BASE_URL_INVALID: '网关地址必须是 HTTP(S) 源地址，且不能包含账号密码、查询参数或片段。',
-    TRANSPORT_FAILED: '无法连接网关，请检查网络与网关地址。',
-    PROXY_URL_INVALID: '代理地址无效，请检查代理环境变量。',
-    PROXY_PROTOCOL_UNSUPPORTED: '仅支持 HTTP(S) 代理；未绕过已配置的代理直连。',
-    CLI_ARGUMENTS_INVALID: '命令包含多余的位置参数，请用 --help 检查用法。',
-    HTTP_ERROR: '网关无法完成本次请求。',
-    API_REQUEST_FAILED: '网关无法完成本次请求。',
-    JOB_ID_INVALID: '任务 ID 不能为空，且必须是 UUID 格式。',
-    JOB_NOT_FOUND: '未找到该任务。注意：报价编号不能用于查询任务。',
-    CHAT_CREDIT_LIMIT_INVALID: '对话花费上限必须是非负整数。',
-    CHAT_CREDIT_LIMIT_EXCEEDED: '本次对话所需预授权超过你的花费上限，已阻止。未发起对话，也未冻结算力点。',
-    STREAM_SETTLEMENT_PENDING: '对话失败，但结算尚未确认。算力点可能仍处于冻结状态，请不要认为已自动归还。',
-    STREAM_INPUT_SETTLEMENT_PENDING: '先前请求的结算尚未确认，算力点可能仍处于冻结状态。请不要认为已自动归还；客户端没有自动重试。',
-    STREAM_ALREADY_CONSUMED: '该幂等键已成功完成过同一请求，本次未重复扣费。',
-    IDEMPOTENCY_CONFLICT: '该幂等键已用于另一个不同的请求，本次未重复扣费。',
-    IDEMPOTENCY_RESULT_EXPIRED: '该幂等键上一次保存的结果已经不能再回放。上一次请求已经完成，本次未重复扣费；请核对余额与流水。',
-    REQUEST_IN_PROGRESS: '该幂等键上一次的请求仍在运行。本次未重复扣费；请等待它完成后核对余额与流水。',
-    INPUT_INVALID: '请求参数无效。',
-    SUBMISSION_RETRY_MISMATCH: '该幂等键对应一条待确认的提交，但模型或输入与这次不同。没有提交任何任务；请用原来的参数重新运行。',
-    SUBMISSION_CREDENTIALS_MISMATCH: '该幂等键对应的待确认提交是用另一组凭据或另一个网关发出的。没有提交任何任务；请用创建它的档案和网关重试。',
-    SUBMISSION_JOURNAL_UNWRITABLE: '无法写入待确认提交记录。',
-    SUBMISSION_RECORD_NOT_FOUND: '这个账号和网关下没有以该幂等键记录的待确认提交。',
-    SUBMISSION_PENDING_IDENTICAL: '已有一次相同的提交以另一个幂等键记录且结果未确认，因此没有用这个键发送任何内容。请先处理那次待确认提交，或等它在记录后 23 小时过期。',
-    QUOTE_NOT_AVAILABLE: '报价已不可用：已过期、从未签发，或与这次输入不匹配。',
-    QUOTE_ALREADY_CONSUMED: '该报价已被另一次提交使用。',
-    SUBMISSION_RECORD_EXPIRED: '该幂等键对应的待确认提交已超过 23 小时。没有重发：网关可能已不再保留它的幂等记录，重放的结果无法安全解读。请先核对任务列表与余额，再决定是否重新提交。',
-    SUBMISSION_JOURNAL_INVALID: '无法读取待确认提交记录。',
-    IDEMPOTENCY_KEY_REQUIRED: '必须提供幂等键。',
-    IDEMPOTENCY_KEY_INVALID: '幂等键不能包含换行符。',
-    IDEMPOTENCY_KEY_TOO_LONG: '幂等键不得超过 128 字节。',
-    SDK_STREAM_NOT_IMPLEMENTED: '当前客户端不支持流式对话。请省略 stream 参数或将其设为 false。',
-    LANG_INVALID: '语言只能是 zh 或 en。',
-    BALANCE_RESPONSE_INVALID: '余额响应字段不符合约定。',
-    CATALOG_RESPONSE_INVALID: '模型目录响应不符合约定。',
-    CHAT_BILLING_INVALID: '本次对话返回的结算信息无法使用。',
-    CHAT_EMPTY_RESPONSE: '模型没有返回可显示的回复。',
-    JOB_ID_MISMATCH: '响应中的任务 ID 与请求的任务不一致。',
-    JOB_RESPONSE_INVALID: '任务响应不符合约定。',
-    MODEL_INPUT_SCHEMA_INVALID: '该模型没有可用的输入结构。',
-    MODEL_PARAM_INVALID: '模型参数的值无效。',
-    MODEL_PARAM_ALIAS_CONFLICT: '同一模型参数使用了两个不同字段名。请只保留一个字段名；没有发送请求。',
-    SUBMISSION_INPUT_POLICY_CHANGED: '默认值补全改变了待确认提交的输入。请恢复记录的原请求体，不要创建新任务。',
-    MODEL_PARAM_UNKNOWN: '该模型未声明这个参数。',
-    MODEL_PARAM_SYNTAX_INVALID: 'key=value 参数语法无效。',
-    QUOTE_EXPIRED: '该报价已过期。请重新报价。',
-    QUOTE_RESPONSE_INVALID: '报价响应不符合约定。',
-    QUOTE_CREDIT_LIMIT: '本次报价超过你设置的花费上限。',
-    REQUEST_TIMEOUT: '网关在客户端超时前没有响应。',
-    RESPONSE_JSON_INVALID: '网关响应不是有效的 JSON。',
-    RESPONSE_TOO_LARGE: '网关响应超过客户端大小限制。',
-    TIMEOUT_INVALID: '超时时间必须是正整数。',
-    VIDEO_DURATION_INVALID: '该视频时长对这个模型无效。',
-    WAIT_OPTIONS_INVALID: '等待间隔或超时时间无效。',
-    WAIT_TIMEOUT: '等待任务超时。任务可能仍在运行。',
-    UPSTREAM_UNAVAILABLE: '上游服务暂时不可用。',
-    UPSTREAM_TIMEOUT: '上游服务超时。',
-    UPSTREAM_INVALID_RESPONSE: '上游服务返回了网关无法使用的响应。',
-    STREAM_FAILED: '对话流在完成前失败了。',
-    STREAM_ROUTE_NOT_AVAILABLE: '这个模型当前没有可用线路。',
-    STREAM_RUNTIME_UNAVAILABLE: '对话运行时暂时不可用。',
-    MODEL_NOT_AVAILABLE: '该模型当前不可用。',
-    CONTENT_REJECTED: '内容未通过审核。',
-    IDEMPOTENCY_INPUT_INVALID: '幂等键只能是不含空格的可见 ASCII 字符。',
-    CONFIG_INVALID: '本地配置文件不可用。',
-    CONFIG_UNREADABLE: '本地配置文件无法读取或写入。',
-    CONFIG_UNSAFE_PATH: '配置路径不能使用符号链接或硬链接。',
-    CONFIG_NOT_A_FILE: '配置路径存在，但不是普通文件。',
-    CHAT_REQUEST_INVALID: '对话请求无效。',
-    CANCELLED: '请求已取消。',
-    ACCOUNT_NOT_ELIGIBLE: '此账号不能使用所请求的模型。',
-    CHAT_UPSTREAM_ERROR: '模型返回了内部错误，而不是回答。',
-    UNAUTHORIZED: '密钥未被接受。请检查 LUMENKEY_API_KEY，或运行 lumenkey login。',
-    FORBIDDEN: '这把密钥不能执行该操作。',
-    INSUFFICIENT_CREDITS: '算力点不足，无法完成本次请求。',
-    NOT_FOUND: '网关没有这个资源。',
-    RATE_LIMITED: '请求过于频繁，请稍后再试。',
-    GATEWAY_REDIRECTED: '网关返回了重定向，客户端没有跟随。',
-    JOB_CANCELLED: '任务已取消。',
-    JOB_EXPIRED: '任务在完成前已过期。',
-    JOB_OUTPUT_MISSING: '任务已结束，但没有结果地址。',
-    JOB_TERMINAL_FAILURE: '任务已结束，没有可用结果。',
-    DOWNLOAD_URL_INVALID: '结果地址无法下载。',
-    DOWNLOAD_TOO_LARGE: '结果超过 128 MiB，没有保存。',
-    DOWNLOAD_EXISTS: '目标文件已存在，没有覆盖。',
-    DOWNLOAD_IS_DIRECTORY: '目标是目录；请选择包含文件名的路径。',
-    DOWNLOAD_NETWORK_ERROR: '无法通过网络下载结果。',
-    DOWNLOAD_TIMEOUT: '下载结果超时。',
-    DOWNLOAD_INTERRUPTED: '已停止本机下载，生成结果仍然可用。',
-    DOWNLOAD_WRITE_ERROR: '无法把结果保存到该位置。',
-    DOWNLOAD_HTTP_ERROR: '结果服务器拒绝了下载请求。',
-    DOWNLOAD_PATH_NOT_ABSOLUTE: '下载路径必须是绝对路径。',
-    WAIT_INTERRUPTED: '已停止等待，没有取消任务。',
-    REQUEST_ABORTED: '已停止本机请求。',
-    PROFILE_INVALID: '档案文件格式无效，没有覆盖原文件。',
-    PROFILE_UNREADABLE: '档案文件无法读取或安全写入。',
-    PROFILE_MISSING: '所选档案不存在。',
-    PROFILE_EXISTS: '该档案已存在。',
-    INPUT_CLOSED: '回答前标准输入已关闭。',
-    CANCEL_CONFIRMATION_REQUIRED: '未加 --yes，拒绝取消。',
-    CREDIT_LIMIT_INVALID: '花费上限必须是非负安全整数。',
-    CLI_COMMAND_FAILED: '命令未能完成。',
+    DOWNLOAD_ROOT_INVALID: () => zhText('downloadRootInvalid'),
+    DOWNLOAD_OUTSIDE_ROOT: () => zhText('downloadOutsideRoot'),
+    DOWNLOAD_UNSAFE_PATH: () => zhText('downloadUnsafePath'),
+    API_KEY_NOT_CONFIGURED: () => zhText("m213"),
+    INVALID_API_KEY: () => zhText("m212"),
+    MODEL_REQUIRED: () => zhText("m211"),
+    MODEL_NOT_IN_CATALOG: () => zhText("m210"),
+    BASE_URL_INVALID: () => zhText("m209"),
+    TRANSPORT_FAILED: () => zhText("m208"),
+    PROXY_URL_INVALID: () => zhText("m207"),
+    PROXY_PROTOCOL_UNSUPPORTED: () => zhText("m206"),
+    CLI_ARGUMENTS_INVALID: () => zhText("m205"),
+    HTTP_ERROR: () => zhText("m204"),
+    API_REQUEST_FAILED: () => zhText("m204"),
+    JOB_ID_INVALID: () => zhText("m203"),
+    JOB_NOT_FOUND: () => zhText("m202"),
+    CHAT_CREDIT_LIMIT_INVALID: () => zhText("m201"),
+    CHAT_CREDIT_LIMIT_EXCEEDED: () => zhText("m200"),
+    STREAM_SETTLEMENT_PENDING: () => zhText("m199"),
+    STREAM_INPUT_SETTLEMENT_PENDING: () => zhText("m198"),
+    STREAM_ALREADY_CONSUMED: () => zhText("m197"),
+    IDEMPOTENCY_CONFLICT: () => zhText("m196"),
+    IDEMPOTENCY_RESULT_EXPIRED: () => zhText("m195"),
+    REQUEST_IN_PROGRESS: () => zhText("m194"),
+    INPUT_INVALID: () => zhText("m193"),
+    SUBMISSION_RETRY_MISMATCH: () => zhText("m192"),
+    SUBMISSION_CREDENTIALS_MISMATCH: () => zhText("m191"),
+    SUBMISSION_JOURNAL_UNWRITABLE: () => zhText("m190"),
+    SUBMISSION_RECORD_NOT_FOUND: () => zhText("m22"),
+    SUBMISSION_PENDING_IDENTICAL: () => zhText("m189"),
+    QUOTE_NOT_AVAILABLE: () => zhText("m188"),
+    QUOTE_ALREADY_CONSUMED: () => zhText("m187"),
+    SUBMISSION_RECORD_EXPIRED: () => zhText("m186"),
+    SUBMISSION_JOURNAL_INVALID: () => zhText("m185"),
+    IDEMPOTENCY_KEY_REQUIRED: () => zhText("m99"),
+    IDEMPOTENCY_KEY_INVALID: () => zhText("m97"),
+    IDEMPOTENCY_KEY_TOO_LONG: () => zhText("m98"),
+    SDK_STREAM_NOT_IMPLEMENTED: () => zhText("m184"),
+    LANG_INVALID: () => zhText("m183"),
+    BALANCE_RESPONSE_INVALID: () => zhText("m182"),
+    CATALOG_RESPONSE_INVALID: () => zhText("m181"),
+    CHAT_BILLING_INVALID: () => zhText("m180"),
+    CHAT_EMPTY_RESPONSE: () => zhText("m179"),
+    JOB_ID_MISMATCH: () => zhText("m178"),
+    JOB_RESPONSE_INVALID: () => zhText("m177"),
+    MODEL_INPUT_SCHEMA_INVALID: () => zhText("m176"),
+    MODEL_PARAM_INVALID: () => zhText("m175"),
+    MODEL_PARAM_ALIAS_CONFLICT: () => zhText("m174"),
+    SUBMISSION_INPUT_POLICY_CHANGED: () => zhText("m173"),
+    MODEL_PARAM_UNKNOWN: () => zhText("m172"),
+    MODEL_PARAM_SYNTAX_INVALID: () => zhText("m171"),
+    QUOTE_EXPIRED: () => zhText("m170"),
+    QUOTE_RESPONSE_INVALID: () => zhText("m169"),
+    QUOTE_CREDIT_LIMIT: () => zhText("m168"),
+    REQUEST_TIMEOUT: () => zhText("m167"),
+    RESPONSE_JSON_INVALID: () => zhText("m166"),
+    RESPONSE_TOO_LARGE: () => zhText("m165"),
+    TIMEOUT_INVALID: () => zhText("m164"),
+    VIDEO_DURATION_INVALID: () => zhText("m163"),
+    WAIT_OPTIONS_INVALID: () => zhText("m162"),
+    WAIT_TIMEOUT: () => zhText("m161"),
+    UPSTREAM_UNAVAILABLE: () => zhText("m160"),
+    UPSTREAM_TIMEOUT: () => zhText("m159"),
+    UPSTREAM_INVALID_RESPONSE: () => zhText("m158"),
+    STREAM_FAILED: () => zhText("m157"),
+    STREAM_ROUTE_NOT_AVAILABLE: () => zhText("m156"),
+    STREAM_RUNTIME_UNAVAILABLE: () => zhText("m155"),
+    MODEL_NOT_AVAILABLE: () => zhText("m154"),
+    CONTENT_REJECTED: () => zhText("m153"),
+    IDEMPOTENCY_INPUT_INVALID: () => zhText("m152"),
+    CONFIG_INVALID: () => zhText("m151"),
+    CONFIG_UNREADABLE: () => zhText("m150"),
+    CONFIG_UNSAFE_PATH: () => zhText("m149"),
+    CONFIG_NOT_A_FILE: () => zhText("m148"),
+    CHAT_REQUEST_INVALID: () => zhText("m147"),
+    CANCELLED: () => zhText("m146"),
+    ACCOUNT_NOT_ELIGIBLE: () => zhText("m145"),
+    CHAT_UPSTREAM_ERROR: () => zhText("m144"),
+    UNAUTHORIZED: () => zhText("m143"),
+    FORBIDDEN: () => zhText("m142"),
+    INSUFFICIENT_CREDITS: () => zhText("m141"),
+    NOT_FOUND: () => zhText("m140"),
+    RATE_LIMITED: () => zhText("m139"),
+    GATEWAY_REDIRECTED: () => zhText("m138"),
+    JOB_CANCELLED: () => zhText("m137"),
+    JOB_EXPIRED: () => zhText("m136"),
+    JOB_OUTPUT_MISSING: () => zhText("m135"),
+    JOB_TERMINAL_FAILURE: () => zhText("m134"),
+    DOWNLOAD_URL_INVALID: () => zhText("m133"),
+    DOWNLOAD_TOO_LARGE: () => zhText("m132"),
+    DOWNLOAD_EXISTS: () => zhText("m131"),
+    DOWNLOAD_IS_DIRECTORY: () => zhText("m130"),
+    DOWNLOAD_NETWORK_ERROR: () => zhText("m129"),
+    DOWNLOAD_TIMEOUT: () => zhText("m128"),
+    DOWNLOAD_INTERRUPTED: () => zhText("m127"),
+    DOWNLOAD_WRITE_ERROR: () => zhText("m126"),
+    DOWNLOAD_HTTP_ERROR: () => zhText("m125"),
+    DOWNLOAD_PATH_NOT_ABSOLUTE: () => zhText("m124"),
+    WAIT_INTERRUPTED: () => zhText("m123"),
+    REQUEST_ABORTED: () => zhText("m122"),
+    PROFILE_INVALID: () => zhText("m121"),
+    PROFILE_UNREADABLE: () => zhText("m120"),
+    PROFILE_MISSING: () => zhText("m119"),
+    PROFILE_EXISTS: () => zhText("m118"),
+    INPUT_CLOSED: () => zhText("m117"),
+    CANCEL_CONFIRMATION_REQUIRED: () => zhText("m116"),
+    CREDIT_LIMIT_INVALID: () => zhText("m115"),
+    CLI_COMMAND_FAILED: () => zhText("m114"),
 };
 export function langFlag(argv = process.argv) {
     const args = argv.slice(2);
@@ -229,7 +236,7 @@ function primarySubtag(raw) {
     return (raw.trim().replace(/-/g, '_').split(/[._@]/)[0] ?? '').toLowerCase();
 }
 function localeLang(env) {
-    return primarySubtag(env.LC_ALL || env.LANG || '') === 'en' ? 'en' : 'zh';
+    return primarySubtag(env.LC_ALL || env.LC_MESSAGES || env.LANG || '') === 'en' ? 'en' : 'zh';
 }
 /** --lang zh|en, then LUMENKEY_LANG, then LC_ALL / LANG, then zh. Invalid values are ignored here. */
 export function resolveLang(argv = process.argv, env = process.env) {
@@ -247,22 +254,21 @@ export function hasErrorSentence(code) {
     return Object.prototype.hasOwnProperty.call(EN, code);
 }
 export function errorSentence(code, lang = resolveLang()) {
-    const table = lang === 'zh' ? ZH : EN;
-    return table[code] ?? code;
+    return lang === 'zh' ? ZH[code]?.() ?? code : EN[code] ?? code;
 }
 export function transportFailureDetail(baseUrl, lang = resolveLang()) {
     return lang === 'zh'
-        ? `无法连接网关 ${baseUrl}，请检查网络与网关地址。`
+        ? (zhText("m112") + (baseUrl) + zhText("m113"))
         : `Network connection to ${baseUrl} failed. Check the gateway address and connection.`;
 }
 export function proxyTransportDetail(baseUrl, lang = resolveLang()) {
     return lang === 'zh'
-        ? `通过 HTTP(S)_PROXY 或 ALL_PROXY 连接网关 ${baseUrl} 失败。请检查代理，不要把代理地址当成网关故障。`
+        ? (zhText("m110") + (baseUrl) + zhText("m111"))
         : `The request to ${baseUrl} failed through HTTP(S)_PROXY or ALL_PROXY. Check that proxy; this is not a gateway-address failure.`;
 }
 export function chatFailureSettlementAdvice(lang = resolveLang()) {
     return lang === 'zh'
-        ? '未收到结算信息，本次结算状态未知；算力点可能仍处于冻结状态。请核对余额与流水后再重试。'
+        ? zhText("m109")
         : 'Settlement was not reported and is unknown; credits may still be reserved. Check your balance and ledger before retrying.';
 }
 const INVISIBLE_PROMPT = /[\p{Cf}\p{Mn}\p{Me}\p{Zs}\p{Zl}\p{Zp}\u115F\u1160\u2800\u3164\uFFA0]/gu;
@@ -273,23 +279,23 @@ export function isBlankPrompt(value) {
 export function textCatalogMissDetail(model, lang = resolveLang()) {
     const shown = JSON.stringify(model);
     return lang === 'zh'
-        ? `模型 ${shown} 不在你的可用文本目录中。请使用准确的模型 ID。`
+        ? (zhText("m107") + (shown) + zhText("m108"))
         : `Model ${shown} is not in your available text catalog. Use an exact model ID.`;
 }
 export function missingModelSentence(name, lang = resolveLang()) {
     return lang === 'zh'
-        ? `没有名为 ${name} 的模型。请运行：lumenkey model search ${name}`
+        ? (zhText("m105") + (name) + zhText("m106") + (name) + "")
         : `No exact model named ${name}. Run: lumenkey model search ${name}`;
 }
 export function billingSentence(status, credits, lang = resolveLang()) {
     if (lang === 'zh') {
         if (status === 'PENDING')
-            return '结算尚未确认，算力点可能仍处于冻结状态。';
+            return zhText("m104");
         if (status === 'RELEASED')
-            return '已扣 0 算力点，预授权已释放。';
+            return zhText("m103");
         if (status === 'SETTLED')
-            return `已扣 ${credits} 算力点。`;
-        return '未收到结算信息，本次扣费金额未知。';
+            return (zhText("m101") + (credits) + zhText("m102"));
+        return zhText("m100");
     }
     if (status === 'PENDING')
         return 'Settlement pending; credits may still be reserved.';
@@ -301,7 +307,7 @@ export function billingSentence(status, credits, lang = resolveLang()) {
 }
 export function idempotencyKeyMessages(lang = resolveLang()) {
     return lang === 'zh'
-        ? { required: '必须提供幂等键。', max: '幂等键不得超过 128 字节。', breaks: '幂等键不能包含换行符。' }
+        ? { required: zhText("m99"), max: zhText("m98"), breaks: zhText("m97") }
         : {
             required: 'An idempotency key is required.',
             max: 'The idempotency key must be at most 128 bytes.',
@@ -313,56 +319,80 @@ export function ui(en, zh, lang = resolveLang()) {
 }
 export function waitTimeoutDetail(jobId, timeoutMs, lang = resolveLang()) {
     const seconds = timeoutMs / 1000;
-    return ui(`Timed out waiting after ${seconds} seconds. The task may still be running; it was not cancelled. Resume with: lumenkey status ${jobId}`, `等待任务 ${seconds} 秒后超时。任务可能仍在运行，未执行取消。可继续查询：lumenkey status ${jobId}`, lang);
+    return ui(`Timed out waiting after ${seconds} seconds. The task may still be running; it was not cancelled. Resume with: lumenkey status ${jobId}`, (zhText("m95") + (seconds) + zhText("m96") + (jobId) + ""), lang);
 }
 export function waitInterruptedDetail(jobId, lang = resolveLang()) {
-    return ui(`${errorSentence('WAIT_INTERRUPTED', 'en')} Resume with: lumenkey status ${jobId}`, `${errorSentence('WAIT_INTERRUPTED', 'zh')} 可继续查询：lumenkey status ${jobId}`, lang);
+    return ui(`${errorSentence('WAIT_INTERRUPTED', 'en')} Resume with: lumenkey status ${jobId}`, ("" + (errorSentence('WAIT_INTERRUPTED', 'zh')) + zhText("m94") + (jobId) + ""), lang);
+}
+/** Local display only; recovery's machine deadline stays ISO UTC in the outcome. */
+export function submissionUnknownMessage(recovery, deadline, lang = resolveLang()) {
+    const head = ui('Submission result unknown; do not retry with different key or input.', zhText("m93"), lang);
+    const pad = (value) => String(value).padStart(2, '0');
+    let local;
+    if (deadline && Number.isFinite(deadline.getTime())) {
+        const offset = -deadline.getTimezoneOffset();
+        local = `${deadline.getFullYear()}-${pad(deadline.getMonth() + 1)}-${pad(deadline.getDate())} ${pad(deadline.getHours())}:${pad(deadline.getMinutes())} (${offset >= 0 ? '+' : '-'}${pad(Math.floor(Math.abs(offset) / 60))}:${pad(Math.abs(offset) % 60)})`;
+    }
+    return `${head} ${RECOVERY_COPY[recovery].message(local, lang)}`;
 }
 /** The recovery verb on both surfaces, named wherever a keyless rerun will not do. */
 export function resumeCommandText(idempotencyKey, lang = resolveLang()) {
-    return ui(`lumenkey tasks resume ${idempotencyKey} (MCP: lumenkey_resume_submission with idempotencyKey "${idempotencyKey}")`, `lumenkey tasks resume ${idempotencyKey}（MCP：lumenkey_resume_submission 并带 idempotencyKey "${idempotencyKey}"）`, lang);
+    return ui(`lumenkey tasks resume ${idempotencyKey} (MCP: lumenkey_resume_submission with idempotencyKey "${idempotencyKey}")`, ("lumenkey tasks resume " + (idempotencyKey) + zhText("m92") + (idempotencyKey) + "\"）"), lang);
 }
 export function submissionUnknownAdvice(idempotencyKey, recovery = 'ledger', recordedAt, lang = resolveLang()) {
-    const head = ui('The gateway may already have accepted this job and reserved credits. Do not submit again with a different key.', '网关可能已经受理了这次任务并冻结了算力点。不要换用别的幂等键重新提交。', lang);
+    const head = ui('The gateway may already have accepted this job and reserved credits. Do not submit again with a different key.', zhText("m91"), lang);
     const deadline = recordedAt && Number.isFinite(Date.parse(recordedAt)) ? new Date(Date.parse(recordedAt) + 23 * 60 * 60 * 1000).toISOString() : undefined;
-    if (recovery === 'rerun')
-        return `${head} ${ui(`To recover, run the same command again with the same arguments${deadline ? ` before ${deadline} (23 hours after the submission was recorded)` : ''}; the client re-sends this recorded submission and the gateway replays the earlier job or creates it once. You can also run ${resumeCommandText(idempotencyKey, 'en')}, or check your balance and ledger first.`, `恢复方法：${deadline ? `在 ${deadline}（记录后 23 小时）之前` : ''}用相同参数再次运行同一命令，客户端会原样重发这次记录的提交，网关会回放之前的任务或只创建一次。也可以运行 ${resumeCommandText(idempotencyKey, 'zh')}，或先核对余额与流水。`, lang)}`;
-    if (recovery === 'resume-command')
-        return `${head} ${ui(`The recorded submission is still marked in flight, so a plain rerun will not resume it. To recover, run ${resumeCommandText(idempotencyKey, 'en')}; it re-sends the recorded body and the gateway replays the earlier job or creates it once. Or check your balance and ledger first.`, `记录的提交仍标记为进行中，直接重跑不会接续它。恢复方法：运行 ${resumeCommandText(idempotencyKey, 'zh')}，它会原样重发记录的请求体，网关会回放之前的任务或只创建一次；也可以先核对余额与流水。`, lang)}`;
-    if (recovery === 'expired')
-        return `${head} ${ui(`The recorded submission is past the 23-hour window in which it can be re-sent safely, so it will not be resumed. Check your job list and balance before submitting again.`, `记录的提交已超过可安全重发的 23 小时窗口，不会再接续。请先核对任务列表与余额，再决定是否重新提交。`, lang)}`;
-    return `${head} ${ui(`No local record of this submission remains (idempotency key ${idempotencyKey}), so it cannot be re-sent from here. Check your job list and balance before submitting again.`, `本机已没有这次提交的记录（幂等键 ${idempotencyKey}），无法从这里重发。请先核对任务列表与余额，再决定是否重新提交。`, lang)}`;
+    return `${head} ${RECOVERY_COPY[recovery].advice(idempotencyKey, deadline, lang)}`;
 }
+/** Each recovery state owns both short and compatibility copy: no independent fallthroughs. */
+const RECOVERY_COPY = {
+    rerun: {
+        message: (local, lang) => ui(`Run the same command again with the same arguments${local ? ` before ${local}` : ''}; or use lumenkey tasks resume <idempotencyKey> (MCP: lumenkey_resume_submission).`, (zhText("m89") + (local ? (zhText("m83") + (local) + "") : '') + zhText("m90")), lang),
+        advice: (idempotencyKey, deadline, lang) => ui(`To recover, run the same command again with the same arguments${deadline ? ` before ${deadline} (23 hours after the submission was recorded)` : ''}; the client re-sends this recorded submission and the gateway replays the earlier job or creates it once. You can also run ${resumeCommandText(idempotencyKey, 'en')}, or check your balance and ledger first.`, (zhText("m84") + (deadline ? (zhText("m85") + (deadline) + zhText("m86")) : '') + zhText("m87") + (resumeCommandText(idempotencyKey, 'zh')) + zhText("m88")), lang),
+    },
+    'resume-command': {
+        message: (local, lang) => ui(`Record still in flight; a plain rerun will not resume it. Use lumenkey tasks resume <idempotencyKey> (MCP: lumenkey_resume_submission)${local ? ` before ${local}` : ''}.`, (zhText("m82") + (local ? (zhText("m83") + (local) + "") : '') + "。"), lang),
+        advice: (idempotencyKey, _deadline, lang) => ui(`The recorded submission is still marked in flight, so a plain rerun will not resume it. To recover, run ${resumeCommandText(idempotencyKey, 'en')}; it re-sends the recorded body and the gateway replays the earlier job or creates it once. Or check your balance and ledger first.`, (zhText("m80") + (resumeCommandText(idempotencyKey, 'zh')) + zhText("m81")), lang),
+    },
+    expired: {
+        message: (local, lang) => ui(`Past the 23-hour window${local ? ` (${local})` : ''}; check your job list and balance.`, (zhText("m78") + (local ? `（${local}）` : '') + zhText("m79")), lang),
+        advice: (_idempotencyKey, _deadline, lang) => ui(`The recorded submission is past the 23-hour window in which it can be re-sent safely, so it will not be resumed. Check your job list and balance before submitting again.`, zhText("m77"), lang),
+    },
+    ledger: {
+        message: (_local, lang) => ui('Check your job list and balance; no safe replay is available here.', zhText("m76"), lang),
+        advice: (idempotencyKey, _deadline, lang) => ui(`No local record of this submission remains (idempotency key ${idempotencyKey}), so it cannot be re-sent from here. Check your job list and balance before submitting again.`, (zhText("m74") + (idempotencyKey) + zhText("m75")), lang),
+    },
+};
 /** A replay was refused inside the gateway's create step, which is only reached when no job exists for the key. */
 export function replaySettledAdvice(lang = resolveLang()) {
-    return ui('The earlier submission with this idempotency key was never created, so nothing was charged for it. It is safe to run the command again to get a new quote.', '该幂等键之前的提交从未被创建，没有产生扣费。可以安全地重新运行命令获取新的报价。', lang);
+    return ui('The earlier submission with this idempotency key was never created, so nothing was charged for it. It is safe to run the command again to get a new quote.', zhText("m73"), lang);
 }
 /** A replay met a record for the same key with a different body: the earlier job exists, but this client cannot see it. */
 export function replayConflictAdvice(lang = resolveLang()) {
-    return ui('A job for this idempotency key already exists with a different request body. Check your job list and balance before submitting again; do not retry with a new key.', '该幂等键已有一个请求体不同的任务。请先核对任务列表与余额，再决定是否重新提交；不要换新键重试。', lang);
+    return ui('A job for this idempotency key already exists with a different request body. Check your job list and balance before submitting again; do not retry with a new key.', zhText("m72"), lang);
 }
 /** Chat requests are replayed by key, so the safe retry is the identical request with the same key. */
 export function chatRetryAdvice(idempotencyKey, lang = resolveLang()) {
-    return ui(`To retry safely, send the identical request again with the same idempotency key ${idempotencyKey}; the gateway replays the earlier result instead of charging twice.`, `安全重试方法：用同一个幂等键 ${idempotencyKey} 再次发送完全相同的请求；网关会回放上一次结果，不会重复扣费。`, lang);
+    return ui(`To retry safely, send the identical request again with the same idempotency key ${idempotencyKey}; the gateway replays the earlier result instead of charging twice.`, (zhText("m70") + (idempotencyKey) + zhText("m71")), lang);
 }
 export function downloadPathNotAbsoluteDetail(lang = resolveLang()) {
-    return ui('The download path must be absolute, or start with ~/ for the home directory. This server cannot resolve a relative path on behalf of the caller.', '下载路径必须是绝对路径，或以 ~/ 开头表示主目录。服务无法代替调用方解析相对路径。', lang);
+    return ui('The download path must be absolute, or start with ~/ for the home directory. This server cannot resolve a relative path on behalf of the caller.', zhText("m69"), lang);
 }
 export function jobStatusText(status, lang = resolveLang()) {
     const names = {
-        accepted: '已受理', policy_checking: '策略检查中', queued: '排队中', submitting: '提交中',
-        provider_running: '生成中', output_checking: '结果检查中', succeeded: '已完成',
-        rejected: '已拒绝', failed: '失败', cancelled: '已取消', expired: '已过期',
+        accepted: zhText("m68"), policy_checking: zhText("m67"), queued: zhText("m66"), submitting: zhText("m65"),
+        provider_running: zhText("m64"), output_checking: zhText("m63"), succeeded: zhText("m62"),
+        rejected: zhText("m61"), failed: zhText("m60"), cancelled: zhText("m59"), expired: zhText("m58"),
     };
     return lang === 'zh' && names[status] ? `${names[status]} (${status})` : status;
 }
 export function blankPromptSentence(kind, lang = resolveLang()) {
     if (lang === 'zh') {
         if (kind === 'flag')
-            return '必须提供 --prompt，且不能为空白。';
+            return zhText("m57");
         if (kind === 'field')
-            return '必须提供 prompt，且不能为空白。';
-        return '用户提示不能为空白。';
+            return zhText("m56");
+        return zhText("m55");
     }
     if (kind === 'flag')
         return '--prompt is required and must not be blank.';
@@ -372,16 +402,16 @@ export function blankPromptSentence(kind, lang = resolveLang()) {
 }
 /** Surface-neutral: neither a CLI flag nor an MCP field is named. */
 export function promptRequiredSentence(lang = resolveLang()) {
-    return ui('A prompt is required and must not be blank.', '必须提供提示词，且不能为空白。', lang);
+    return ui('A prompt is required and must not be blank.', zhText("m54"), lang);
 }
 export function spendingCapSentence(label, lang = resolveLang()) {
     return lang === 'zh'
-        ? `${label} 必须是非负整数。`
+        ? ("" + (label) + zhText("m53"))
         : `${label} must be a non-negative integer.`;
 }
 export function quoteCapSentence(label, lang = resolveLang()) {
     return lang === 'zh'
-        ? `本次报价超过你设置的 ${label} 上限。`
+        ? (zhText("m51") + (label) + zhText("m52"))
         : `This quote is above the ${label} limit you set.`;
 }
 const INTERNAL_ERROR_TEXT = /^\s*\[error:\s*[a-z0-9_]+\]\s*$/i;

package/dist/core/outcome.d.ts

@@ -60,6 +60,12 @@ export interface Failure extends LegacyJobMirror {
     quoteId?: string;
     submission?: Submission;
     resumed?: boolean;
+    /** Recovery state of an unknown submission; never an instruction to create a new job. */
+    recovery?: UnknownRecovery;
+    /** CLI argv, not a shell command string. Absent when replay is unsafe or no record remains. */
+    recoveryCommand?: string[];
+    /** The recorded 23-hour replay deadline, ISO UTC. */
+    resumeDeadline?: string;
     billing?: ChatBilling;
     /** The gateway task record, including its raw `error` object. */
     job?: GenerationJobDetail;

package/dist/core/outcome.js

@@ -1,6 +1,7 @@
 import { LumenKeyError, parseChatBilling } from './client.js';
-import { errorSentence, submissionUnknownAdvice } from './locale.js';
+import { errorSentence, submissionUnknownAdvice, submissionUnknownMessage } from './locale.js';
 import { assertJobResult } from './poller.js';
+import { RESUMABLE_WINDOW_MS } from './submission-journal.js';
 export function chatText(response) {
     const message = response.choices?.[0]?.message;
     if (typeof message?.content === 'string' && message.content.trim())
@@ -24,7 +25,8 @@ function submissionOf(value) {
  */
 export function failure(error, ctx = {}) {
     const e = (error && typeof error === 'object' ? error : {});
-    const code = typeof e.code === 'string' && CODE.test(e.code) ? e.code : 'CLI_COMMAND_FAILED';
+    const expired = e.code === 'SUBMISSION_RECORD_EXPIRED' || ctx.recovery === 'expired';
+    const code = expired ? 'SUBMISSION_RECORD_EXPIRED' : typeof e.code === 'string' && CODE.test(e.code) ? e.code : 'CLI_COMMAND_FAILED';
     const job = ctx.job ?? (e.job && typeof e.job === 'object' ? e.job : undefined);
     const jobId = ctx.jobId ?? text(e.jobId) ?? job?.jobId;
     const jobStatus = ctx.jobStatus ?? text(e.jobStatus) ?? job?.status;
@@ -42,8 +44,16 @@ export function failure(error, ctx = {}) {
     const pendingAgeSeconds = ctx.pendingAgeSeconds ?? (typeof e.pendingAgeSeconds === 'number' ? e.pendingAgeSeconds : undefined);
     const waitStatus = code === 'WAIT_TIMEOUT' ? 'TIMEOUT' : code === 'WAIT_INTERRUPTED' ? 'INTERRUPTED' : undefined;
     // IDEMPOTENCY_CONFLICT carries its own, more specific recovery text from the use case.
-    const advice = submission === 'unknown' && idempotencyKey && code !== 'IDEMPOTENCY_CONFLICT' ? ` ${submissionUnknownAdvice(idempotencyKey, ctx.recovery ?? 'ledger', ctx.recordedAt)}` : '';
-    const message = `${error instanceof LumenKeyError ? error.publicMessage : error instanceof Error ? error.message : errorSentence(code)}${advice}`;
+    const recovery = expired ? 'expired' : submission === 'unknown' ? code === 'IDEMPOTENCY_CONFLICT' ? 'ledger' : ctx.recovery ?? 'ledger' : undefined;
+    const recordedAt = ctx.recordedAt ?? text(e.recordedAt);
+    const advice = (submission === 'unknown' || expired) && idempotencyKey && code !== 'IDEMPOTENCY_CONFLICT' ? ` ${submissionUnknownAdvice(idempotencyKey, recovery ?? 'ledger', recordedAt)}` : '';
+    const recorded = recordedAt ? Date.parse(recordedAt) : NaN;
+    const deadline = Number.isFinite(recorded) ? new Date(recorded + RESUMABLE_WINDOW_MS) : undefined;
+    const resumeDeadline = recovery && recovery !== 'ledger' ? deadline?.toISOString() : undefined;
+    const recoveryCommand = recovery === 'rerun' || recovery === 'resume-command'
+        ? idempotencyKey ? ['lumenkey', 'tasks', 'resume', `--key=${idempotencyKey}`] : undefined : undefined;
+    const message = recovery ? submissionUnknownMessage(recovery, deadline)
+        : `${error instanceof LumenKeyError ? error.publicMessage : error instanceof Error ? error.message : errorSentence(code)}${advice}`;
     const legacy = `${error instanceof Error ? error.message : errorSentence(code)}${advice}`;
     const { error: _jobError, status: _jobState, jobId: _id, ...mirror } = job ?? {};
     return {
@@ -57,6 +67,9 @@ export function failure(error, ctx = {}) {
         ...(quoteId ? { quoteId } : {}),
         ...(submission ? { submission } : {}),
         ...(resumed !== undefined ? { resumed } : {}),
+        ...(recovery ? { recovery } : {}),
+        ...(recoveryCommand ? { recoveryCommand } : {}),
+        ...(resumeDeadline ? { resumeDeadline } : {}),
         ...(billing ? { billing } : {}),
         ...(job ? { job } : {}),
         ...(pendingIdempotencyKey ? { pendingIdempotencyKey } : {}),

package/dist/core/output-path.d.ts

@@ -6,5 +6,7 @@
  */
 export type OutputPathPolicy = 'resolve-cwd' | 'absolute-only';
 /** Expand a leading `~` / `~/` (never `~user`) to the home directory, then apply the surface policy. */
-export declare function resolveOutputPath(raw: string, policy: OutputPathPolicy, home?: string): string;
+export declare function resolveOutputPath(raw: string, policy: OutputPathPolicy, home?: string, downloadPolicy?: {
+    configuredRoot: string | undefined;
+}): string;
 //# sourceMappingURL=output-path.d.ts.map

package/dist/core/output-path.js

@@ -2,14 +2,17 @@ import os from 'node:os';
 import path from 'node:path';
 import { LumenKeyError } from './client.js';
 import { downloadPathNotAbsoluteDetail } from './locale.js';
+import { assertDownloadPath } from './download-root.js';
 /** Expand a leading `~` / `~/` (never `~user`) to the home directory, then apply the surface policy. */
-export function resolveOutputPath(raw, policy, home = os.homedir()) {
+export function resolveOutputPath(raw, policy, home = os.homedir(), downloadPolicy) {
+    if (raw.split(/[\\/]/).includes('..'))
+        throw new LumenKeyError('DOWNLOAD_OUTSIDE_ROOT');
     let value = raw;
     if (value === '~' || value.startsWith('~/') || (process.platform === 'win32' && value.startsWith('~\\')))
         value = path.join(home, value.slice(1));
     if (policy === 'absolute-only' && !path.isAbsolute(value)) {
         throw Object.assign(new LumenKeyError('DOWNLOAD_PATH_NOT_ABSOLUTE', undefined, undefined, downloadPathNotAbsoluteDetail()), { path: raw });
     }
-    return path.resolve(value);
+    return assertDownloadPath(value, downloadPolicy);
 }
 //# sourceMappingURL=output-path.js.map