@songsid/agend 2.3.5-alpha.3 → 2.3.5-alpha.5

package/dist/hub/init/text.js

@@ -0,0 +1,247 @@
+/** `agend hub init` wizard strings, English and Traditional Chinese (follows the process locale, like quickstart). */
+import { getLocale } from "../../locale.js";
+const en = {
+    build_info: "Installed build: {0} (package {1}). Run agend build-info --json for source details.",
+    build_source: "source", build_modified: "modified", build_unknown: "changes unknown",
+    title: "═══ AgEnD Hub setup (experimental) ═══",
+    intro: "A Hub lets colleagues sign in with your organisation's directory and ask agents that fleet owners choose to publish.\nThe Hub runs no agents and needs no AI CLI sign-in. Best placement: a dedicated, always-on machine or OS account with a stable intranet address.",
+    hub_exists: "A Hub is already set up under {0}. Initialization never replaces a Hub identity; nothing was changed.",
+    incomplete: "An earlier Hub setup (started {0}) stopped after step “{1}”. The Hub is off.",
+    resume_q: "Resume it with the answers saved then? You will be asked for the directory service password again. [y/N] ",
+    restart_how: "To start over instead, check {0} (nothing in it is in use while the Hub is off), remove it, and run agend hub init again.",
+    fleet_warn_title: "This OS account already runs an AgEnD fleet:",
+    fleet_warn_body: "A Hub in the same account shares its user with that fleet's agents. Those agents have full tools (shell, file reads), so they could read the Hub's keys, grants and audit records. Exposed-agent restrictions do not apply to the owner's own agents.\nRecommended: a dedicated OS account on this machine (for example, create a user “agend-hub”, sign in as it, install AgEnD and run agend hub init there), or a separate machine.",
+    fleet_confirm: "To set up the Hub in this account anyway (pilot or solo testing only), type “same account”: ",
+    fleet_confirm_word: "same account",
+    cancelled: "Cancelled. Nothing was changed.",
+    name_q: "Hub name (shown as “AgEnD Hub — <name>”): ",
+    web_origin_q: "Web address colleagues will open (https://host[:port]; a stable intranet IP or host name): ",
+    member_origin_q: "Member address fleets will connect to (https://host:port, different from the web address) [{0}]: ",
+    loopback_warn: "{0} only works on this computer; other people's fleets and browsers cannot reach it. Use it anyway? [y/N] ",
+    web_listen_q: "Web listener: the interface address and port to listen on [{0}]: ",
+    member_listen_q: "Member listener: the interface address and port to listen on [{0}]: ",
+    listen_need: "Enter host:port, for example 192.0.2.10:8443 (one interface; 0.0.0.0 is not accepted).",
+    network_check: "Checking the Hub's two local listeners…",
+    network_web: "Web listener", network_member: "Member listener", network_both: "Hub listeners",
+    network_invalid: "{0}: use a specific interface address and a port from 1 to 65535; wildcards are not accepted.",
+    network_unresolved: "{0}: the host name did not resolve within 2 seconds. Use an IP address assigned to this computer, or fix its DNS.",
+    network_interface: "{0}: this address is not available on this computer. Choose an IP assigned to its intended network interface.",
+    network_occupied: "{0}: the address and port are already in use, possibly by the other Hub listener. Choose a different port; no existing process was stopped.",
+    network_permission: "{0}: this account cannot bind that port. Choose an unprivileged port above 1024, or ask the host administrator to arrange it.",
+    network_reserved: "{0}: this endpoint is reserved for AgEnD's local dashboard or preview. Choose another Hub port.",
+    network_unavailable: "{0}: the local bind check could not complete. Check the interface and available sockets, then retry.",
+    network_ok: "Both Hub listeners can bind locally; the check sockets are now closed. This does not test DNS from other computers, firewall access or reverse-proxy routing. Test both advertised HTTPS addresses from a member computer after startup.",
+    network_unchanged: "No Hub settings were written by this check. Correct the listeners and retry; an interrupted setup must resume with its saved addresses.",
+    tls_title: "Browser HTTPS certificate",
+    tls_intro: "Import a trusted certificate covering {0}, or generate a 30-day self-signed certificate for this address. Browsers warn about self-signed certificates until the owner arranges trust. Generation does not change any trust store. The Hub never signs anyone in over plain HTTP.",
+    tls_cert_q: "Certificate file (PEM, full chain), or type generate for a 30-day self-signed certificate: ",
+    tls_key_q: "Its private key file (PEM, not encrypted): ",
+    tls_needed: "You need a certificate and its private key for {0}:\n  • issued by a certificate authority colleagues' browsers trust (usually your IT department's),\n  • naming the host {1} (subject alternative name),\n  • as PEM files: the certificate (with its chain) and an unencrypted private key.\nNothing was changed. Run agend hub init again when you have them.",
+    tls_problem: "That certificate can't be used:",
+    tls_self_signed: "This certificate is self-signed: browsers will warn colleagues unless it is installed as trusted on their computers. Use it anyway? [y/N] ",
+    tls_ok: "Certificate for {0}, valid until {1}.",
+    tls_fingerprint: "Browser certificate SHA-256: {0}",
+    tls_generate_unavailable: "Certificate generation is unavailable in this build. Import a certificate and its private key instead.",
+    tls_generate_failed: "Could not generate the browser certificate. Check that OpenSSL is installed, or import a certificate and its private key.",
+    tls_stage_kept: "Private certificate staging remains at {0}. If setup is incomplete, resume with agend hub init. Otherwise inspect it before removing it manually.",
+    retry_q: "[r] try again  [q] quit: ",
+    dir_title: "Directory (LDAP / Active Directory, LDAPS only)",
+    dir_realm_q: "Directory id: a short stable name for this directory, lowercase (for example “corp”): ",
+    dir_url_q: "Directory address (ldaps://host[:port]): ",
+    dir_ca_q: "Directory CA: PEM file, “fetch” to inspect and fetch from this directory, or Enter for system roots: ",
+    dir_profile_q: "Directory type: [1] Active Directory  [2] OpenLDAP [1]: ",
+    dir_base_q: "Where people are (base DN, for example dc=example,dc=com): ",
+    dir_bind_q: "Read-only service account the Hub searches with (bind DN): ",
+    dir_bind_pw_q: "Service account password (not shown): ",
+    dir_bind_empty: "Enter a non-empty service account password, or import its private file.",
+    dir_bind_source_q: "Service password: [1] enter without echo  [2] import a private file [1]: ",
+    dir_bind_source_invalid: "Choose 1 to enter the password, or 2 to import a private file.",
+    dir_bind_file_q: "Absolute path to your 0600 or 0400 UTF-8 secret file (1–1024 bytes). Bytes are used exactly, including trailing newlines; the source stays in place: ",
+    dir_bind_file_invalid: "That secret file could not be imported. Use your own regular file, mode 0600 or 0400, without symlinks; it must be unchanged, non-empty UTF-8, at most 1024 bytes, with no NUL. No secret was printed or saved.",
+    dir_invalid: "Those directory settings can't be used: {0}",
+    dir_ca_unreadable: "That CA file must contain only 1–4 currently valid PEM CA certificate blocks and whitespace (64 KiB maximum).",
+    dir_ca_compare: "Compare each CA fingerprint with a trusted copy from your directory administrator or certificate store.",
+    dir_ca_details: "Certificate: {0}\nSHA-256: {1}\nExpires: {2}",
+    dir_ca_confirm_q: "Trust these exact CA certificates for this Hub directory? [y/N] ",
+    dir_leaf_unverified: "The directory presented this certificate. Its issuer is not trusted yet. No login or password has been sent.",
+    dir_leaf_confirm_q: "Compare it using a trusted source. Type the full SHA-256 fingerprint to allow a one-time CA lookup, or Enter to cancel: ",
+    dir_leaf_refused: "The fingerprint did not match. No directory credential was sent and no CA was trusted.",
+    dir_ca_bind_needed: "Anonymous CA lookup was denied. The read-only service password will be used only on TLS authenticated to the exact certificate fingerprint you confirmed.",
+    dir_ca_fetch_failed: "Could not obtain and verify the directory CA. Check the address and certificate fingerprint, or import a CA PEM file from your directory administrator. Fetch supports the presented chain or a same-directory LDAP AIA cACertificate entry, and requires Node 22.9 or newer.",
+    signin_title: "Choose the first Hub administrator. The read-only service account looks up this directory login; the person signs in later in their own browser. No personal password is needed here.",
+    signin_login_q: "First administrator's directory login: ",
+    signin_ok: "Found {0} ({1}). This selects their immutable directory identity; it does not sign them in.",
+    signin_invalid: "No eligible account was found for that directory login.",
+    signin_not_eligible: "That account is disabled or expired in the directory.",
+    signin_unavailable: "Could not reach the directory, or its certificate could not be verified: {0}",
+    signin_bad_input: "Enter a directory login.",
+    signin_retry_q: "[r] try again  [e] change directory settings  [q] quit: ",
+    signin_too_many: "Too many attempts. Nothing was changed.",
+    admin_q: "Designate {0} ({1}) as the first Hub administrator? They claim administration on their first successful browser sign-in. [y/N] ",
+    admin_browser_next: "First administrator: open {0} and sign in as the designated directory identity to claim administration. No personal sign-in took place in this terminal.",
+    retention_title: "How long the Hub keeps records. Press Enter for the suggestion, or choose a different period; review both before initializing.",
+    retention_content_q: "Question and answer content, in days [{0}]: ",
+    retention_event_q: "Event records (who asked whom, when, the outcome), in days [{0}]: ",
+    retention_need: "Enter a whole number of days from 1 to 3650.",
+    summary_title: "Ready to set up:",
+    pilot_reminder: "Reminder: same account as an existing fleet; its agents can read the Hub's files.",
+    confirm_q: "Type “initialize” to write this setup (anything else cancels): ",
+    confirm_word: "initialize",
+    failed: "The Hub was not set up:",
+    stays_off: "The Hub stays off.",
+    done: "The Hub is set up (Hub id {0}).",
+    service_installed: "The AgEnD service is already installed for this account; it was not reinstalled. Restart it to start the Hub: agend restart",
+    service_q: "Install AgEnD as a service now (systemd / launchd; on Windows inside WSL), so the Hub starts at boot? Type “install” to install, anything else to skip: ",
+    service_word: "install",
+    service_ok: "Service installed; startup requested. The Hub opens after the previous process and listeners have closed.",
+    service_install_idle: "The previous Hub process or PID record is not confirmed stopped. Use agend stop, inspect any stale fleet.pid, then run agend install. No PID was signalled or removed by this check.",
+    service_drain_wait: "Waiting for the previous Hub process and listeners to close before startup…",
+    service_restart_requested: "Restart requested. The replacement waits for the old Hub process and listeners to close; check the Hub address and fleet.log for startup completion.",
+    service_drain_config: "Hub startup refused: its settings changed or could not be read. Check fleet.yaml and retry agend restart; no replacement fleet was constructed.",
+    service_drain_process: "Hub startup refused: the previous PID record or process identity could not be verified. Inspect the old service and fleet.pid before retrying; no process was signalled or PID file removed.",
+    service_drain_listeners: "Hub startup refused: its listener interfaces could not be checked. Check the configured addresses and permissions before retrying agend restart.",
+    service_drain_timeout: "Hub startup refused: the previous process or listeners did not close within the existing stop grace. Inspect the old service and occupied ports before retrying; no replacement fleet was constructed.",
+    service_failed: "The service could not be installed: {0}. The Hub setup is kept; install it later with: agend install",
+    service_skipped: "Service not installed. Start AgEnD with agend start, or install the service later with: agend install",
+    handoff_title: "Hub installation record ({0})",
+    handoff_snapshot: "These are setup values. Use Settings to check current addresses and status, or agend hub init to resume incomplete setup.",
+    handoff_record: "Private installation inventory: {0}",
+    handoff_config: "Shared configuration (Hub settings are under hub.*): {0}",
+    handoff_data: "Hub identity, TLS, secrets, database, audit and setup records: {0}",
+    handoff_log: "Shared fleet log: {0}",
+    handoff_service: "Current service definition: {0} ({1})",
+    handoff_scope: "These commands control the existing AgEnD service and every agent it runs, including any fleet sharing it.",
+    handoff_stop: "Stop: {0}",
+    handoff_restart: "Restart: {0}",
+    handoff_uninstall: "Remove the service (asks for confirmation): {0}",
+    handoff_preserve: "Service removal keeps the AgEnD package, fleet.yaml, and the Hub's identity, secrets, data and logs. Retention rules purge records while the Hub is running; stopping or uninstalling the service does not erase them. Keep a private backup before any separate manual data removal.",
+    handoff_repeat: "Show this handoff again: {0}",
+    handoff_unavailable: "The private Hub installation record is missing or unreadable. Setup from an older release may not have one. Check the selected AGEND_HOME and its private permissions; incomplete setup can be resumed with agend hub init. No lifecycle or data changes were made by the handoff display.",
+    pairing_title: "Connecting fleets to this Hub",
+    pairing_steps: "  1. As the administrator, sign in at {0}/web and create a pairing code for the fleet's owner (Administration → Paired fleets).\n  2. On the member's own computer, its owner opens Settings → Connect to a Hub, enters {1} and the code.\n  3. Both screens show the same fingerprint; compare it, then the owner confirms and you approve.\nMembers pin this Hub's certificate key: SHA-256 {2}",
+};
+const zhTW = {
+    build_info: "已安裝建置：{0}（套件 {1}）。可執行 agend build-info --json 查看原始碼資訊。",
+    build_source: "原始碼建置", build_modified: "含未提交變更", build_unknown: "變更狀態不明",
+    title: "═══ AgEnD Hub 設定（實驗性）═══",
+    intro: "Hub 讓同事用組織的目錄登入，向各機群主人選擇公開的 agent 提問。\nHub 本身不跑 agent，也不需要登入任何 AI CLI。建議放在一台專用、常開、有固定內網位址的機器或 OS 帳號上。",
+    hub_exists: "{0} 下已經設定過 Hub。初始化不會取代既有的 Hub 身分；沒有做任何變更。",
+    incomplete: "先前的 Hub 設定（開始於 {0}）停在「{1}」之後。Hub 目前是關閉的。",
+    resume_q: "要用當時存下的答案繼續嗎？會再請你輸入一次目錄服務帳號的密碼。[y/N] ",
+    restart_how: "若要重新開始：先檢查 {0}（Hub 關閉時裡面的東西都沒在使用），刪除後再執行 agend hub init。",
+    fleet_warn_title: "這個 OS 帳號已經在跑 AgEnD 機群：",
+    fleet_warn_body: "Hub 若和它在同一個帳號，就和那個機群的 agent 共用同一個使用者。那些 agent 有完整工具（shell、讀檔），讀得到 Hub 的金鑰、授權與稽核紀錄；公開 agent 的限制不適用於主人自己的 agent。\n建議：在這台機器上用專用的 OS 帳號（例如建立使用者「agend-hub」，用它登入、安裝 AgEnD 後在那裡執行 agend hub init），或用另一台機器。",
+    fleet_confirm: "若仍要在這個帳號設定 Hub（只限試點或個人測試），請輸入「same account」：",
+    fleet_confirm_word: "same account",
+    cancelled: "已取消，沒有做任何變更。",
+    name_q: "Hub 名稱（會顯示為「AgEnD Hub — <名稱>」）：",
+    web_origin_q: "同事要開的網址（https://主機[:埠]；固定的內網 IP 或主機名稱）：",
+    member_origin_q: "機群連線用的成員位址（https://主機:埠，需與網址不同）[{0}]：",
+    loopback_warn: "{0} 只在這台電腦上有效，別人的機群和瀏覽器連不到。仍要使用嗎？[y/N] ",
+    web_listen_q: "網頁監聽：要監聽的網路介面位址與埠 [{0}]：",
+    member_listen_q: "成員監聽：要監聽的網路介面位址與埠 [{0}]：",
+    listen_need: "請輸入 主機:埠，例如 192.0.2.10:8443（單一介面；不接受 0.0.0.0）。",
+    network_check: "正在檢查 Hub 的兩個本機監聽端點…",
+    network_web: "網頁監聽", network_member: "成員監聽", network_both: "Hub 監聽端點",
+    network_invalid: "{0}：請使用特定網路介面的位址及 1 到 65535 的埠號，不接受萬用位址。",
+    network_unresolved: "{0}：主機名稱未在 2 秒內解析。請改用這台電腦已有的 IP 位址，或修正 DNS。",
+    network_interface: "{0}：這台電腦無法使用此位址。請選擇預定網路介面已有的 IP 位址。",
+    network_occupied: "{0}：位址與埠已被使用，也可能與另一個 Hub 監聽端點重複。請改用其他埠；沒有停止任何既有程序。",
+    network_permission: "{0}：這個帳號無權監聽該埠。請選擇大於 1024 的非特權埠，或請主機管理員安排。",
+    network_reserved: "{0}：此端點保留給 AgEnD 的本機儀表板或預覽。請替 Hub 選擇其他埠。",
+    network_unavailable: "{0}：無法完成本機綁定位址檢查。請檢查網路介面及可用的通訊端，再重試。",
+    network_ok: "兩個 Hub 端點皆可在本機監聽，檢查用通訊端已關閉。這不代表其他電腦的 DNS、防火牆或反向代理路由已可用。啟動後，請從成員電腦測試兩個對外公布的 HTTPS 位址。",
+    network_unchanged: "這次檢查沒有寫入 Hub 設定。請修正監聽端點後重試；中斷的設定流程必須使用已儲存的位址續作。",
+    tls_title: "瀏覽器用的 HTTPS 憑證",
+    tls_intro: "請匯入涵蓋 {0} 的受信任憑證，或為這個位址產生有效 30 天的自簽憑證。自行安排信任前，瀏覽器會對自簽憑證顯示警告。產生憑證不會變更任何信任存放區。Hub 絕不透過一般 HTTP 讓人登入。",
+    tls_cert_q: "憑證檔（PEM，含完整憑證鏈），或輸入 generate 產生有效 30 天的自簽憑證：",
+    tls_key_q: "對應的私鑰檔（PEM，未加密）：",
+    tls_needed: "你需要 {0} 的憑證與私鑰：\n  • 由同事瀏覽器信任的憑證機構簽發（通常是 IT 部門），\n  • 名稱涵蓋主機 {1}（subject alternative name），\n  • PEM 檔：憑證（含憑證鏈）與未加密的私鑰。\n沒有做任何變更。準備好後再執行 agend hub init。",
+    tls_problem: "這個憑證無法使用：",
+    tls_self_signed: "這是自簽憑證：除非在同事電腦上安裝為信任憑證，瀏覽器會跳出警告。仍要使用嗎？[y/N] ",
+    tls_ok: "{0} 的憑證，有效到 {1}。",
+    tls_fingerprint: "瀏覽器憑證 SHA-256：{0}",
+    tls_generate_unavailable: "這個版本無法產生憑證。請改用現有憑證與對應的私鑰檔。",
+    tls_generate_failed: "無法產生瀏覽器憑證。請確認已安裝 OpenSSL，或改用現有憑證與私鑰檔。",
+    tls_stage_kept: "私人憑證暫存仍保留於 {0}。初始化若尚未完成，請執行 agend hub init 繼續；已完成時，請先檢查再手動刪除。",
+    retry_q: "[r] 再試一次  [q] 離開：",
+    dir_title: "目錄（LDAP / Active Directory，只接受 LDAPS）",
+    dir_realm_q: "目錄代號：這個目錄的固定短名稱，小寫（例如「corp」）：",
+    dir_url_q: "目錄位址（ldaps://主機[:埠]）：",
+    dir_ca_q: "目錄 CA：輸入 PEM 檔案、輸入「fetch」檢查並從此目錄取得，或按 Enter 使用系統信任的根憑證：",
+    dir_profile_q: "目錄種類：[1] Active Directory  [2] OpenLDAP [1]：",
+    dir_base_q: "人員所在位置（base DN，例如 dc=example,dc=com）：",
+    dir_bind_q: "Hub 用來查詢的唯讀服務帳號（bind DN）：",
+    dir_bind_pw_q: "服務帳號密碼（不會顯示）：",
+    dir_bind_empty: "請輸入非空白的服務帳號密碼，或匯入其私有檔案。",
+    dir_bind_source_q: "服務帳號密碼：[1] 隱藏輸入  [2] 匯入私密檔案 [1]：",
+    dir_bind_source_invalid: "請選 1 輸入密碼，或選 2 匯入私密檔案。",
+    dir_bind_file_q: "你擁有的 0600 或 0400 UTF-8 密碼檔之絕對路徑（1–1024 位元組）。會原樣使用所有位元組，包含結尾換行；來源檔保留原處：",
+    dir_bind_file_invalid: "無法匯入密碼檔。請使用你擁有的普通檔案，權限為 0600 或 0400，且不可包含符號連結；內容須未變動、非空且為有效 UTF-8、最多 1024 位元組且不可含 NUL。未顯示或儲存任何密碼。",
+    dir_invalid: "這組目錄設定無法使用：{0}",
+    dir_ca_unreadable: "CA 檔案必須包含 1 到 4 張目前有效的 PEM 格式 CA 憑證；憑證區塊之外僅能有空白，且總計不超過 64 KiB。",
+    dir_ca_compare: "請將每張 CA 的指紋與目錄管理員或憑證存放區提供的可信副本核對。",
+    dir_ca_details: "憑證：{0}\nSHA-256：{1}\n到期時間：{2}",
+    dir_ca_confirm_q: "信任這些確切的 CA 憑證，供此 Hub 目錄使用嗎？[y/N] ",
+    dir_leaf_unverified: "這是目錄提供的憑證，目前尚未信任其簽發者；尚未傳送任何帳號或密碼。",
+    dir_leaf_confirm_q: "請透過可信來源核對。輸入完整 SHA-256 指紋以允許一次性的 CA 查詢，或按 Enter 取消：",
+    dir_leaf_refused: "指紋不符。未傳送目錄帳號或密碼，也未信任任何 CA。",
+    dir_ca_bind_needed: "匿名 CA 查詢遭拒。唯讀服務帳號密碼只會透過已驗證為你所確認之確切憑證指紋的 TLS 連線傳送。",
+    dir_ca_fetch_failed: "無法取得並驗證目錄 CA。請檢查位址與憑證指紋，或匯入目錄管理員提供的 CA PEM 檔。取得功能支援伺服器提供的憑證鏈，或同一目錄的 LDAP AIA cACertificate 項目，並需要 Node 22.9 以上版本。",
+    signin_title: "選擇第一位 Hub 管理員。唯讀服務帳號只會查詢這個目錄帳號；當事人稍後在自己的瀏覽器登入，此處不需要個人密碼。",
+    signin_login_q: "第一位管理員的目錄帳號：",
+    signin_ok: "已找到 {0}（{1}）。這只會選定不可變更的目錄身分，並未登入。",
+    signin_invalid: "找不到符合條件的目錄帳號。",
+    signin_not_eligible: "這個帳號在目錄中已停用或已過期。",
+    signin_unavailable: "連不到目錄，或無法驗證它的憑證：{0}",
+    signin_bad_input: "請輸入目錄帳號。",
+    signin_retry_q: "[r] 再試一次  [e] 修改目錄設定  [q] 離開：",
+    signin_too_many: "嘗試次數太多。沒有做任何變更。",
+    admin_q: "要指定 {0}（{1}）為第一位 Hub 管理員嗎？當事人首次成功在瀏覽器登入後，才會取得管理權限。[y/N] ",
+    admin_browser_next: "第一位管理員：請開啟 {0}，以指定的目錄身分登入以取得管理權限。這個終端機並未進行個人登入。",
+    retention_title: "Hub 保留紀錄的天數。按 Enter 採用建議值，或選擇其他天數；初始化前會再次確認。",
+    retention_content_q: "提問與回答內容，天數 [{0}]：",
+    retention_event_q: "事件紀錄（誰問了誰、何時、結果），天數 [{0}]：",
+    retention_need: "請輸入 1 到 3650 的整數天數。",
+    summary_title: "即將設定：",
+    pilot_reminder: "提醒：與既有機群同一個帳號；它的 agent 讀得到 Hub 的檔案。",
+    confirm_q: "輸入「initialize」寫入這份設定（輸入其他內容即取消）：",
+    confirm_word: "initialize",
+    failed: "Hub 沒有設定成功：",
+    stays_off: "Hub 維持關閉。",
+    done: "Hub 已設定完成（Hub id {0}）。",
+    service_installed: "這個帳號已安裝 AgEnD 服務，沒有重新安裝。重新啟動它即可啟動 Hub：agend restart",
+    service_q: "現在要把 AgEnD 安裝成服務（systemd / launchd；Windows 透過 WSL），讓 Hub 開機自動啟動嗎？輸入「install」安裝，其他內容則略過：",
+    service_word: "install",
+    service_ok: "服務已安裝並要求啟動；Hub 會等候前一個程序與監聽端點關閉後才開放服務。",
+    service_install_idle: "尚未確認前一個 Hub 程序或 PID 紀錄已停止。請使用 agend stop，檢查可能過期的 fleet.pid，再執行 agend install。這次檢查沒有對 PID 傳送訊號，也沒有移除紀錄。",
+    service_drain_wait: "正在等待前一個 Hub 程序與監聽端點關閉，再啟動服務…",
+    service_restart_requested: "已要求重新啟動。替代程序會等候舊 Hub 程序與監聽端點關閉；請查看 Hub 網址與 fleet.log，確認啟動完成。",
+    service_drain_config: "Hub 拒絕啟動：設定已變更或無法讀取。請檢查 fleet.yaml 後重試 agend restart；尚未建立替代機群。",
+    service_drain_process: "Hub 拒絕啟動：無法驗證前一個 PID 紀錄或程序身分。請先檢查舊服務與 fleet.pid 再重試；沒有對程序傳送訊號，也沒有移除 PID 檔案。",
+    service_drain_listeners: "Hub 拒絕啟動：無法檢查監聽端點的網路介面。請確認設定位址與權限後，再重試 agend restart。",
+    service_drain_timeout: "Hub 拒絕啟動：前一個程序或監聽端點未在既有停止寬限時間內關閉。請檢查舊服務及已占用的埠，再重試；尚未建立替代機群。",
+    service_failed: "無法安裝服務：{0}。Hub 設定已保留；之後可用 agend install 安裝。",
+    service_skipped: "沒有安裝服務。可用 agend start 啟動 AgEnD，或之後用 agend install 安裝服務。",
+    handoff_title: "Hub 安裝紀錄（{0}）",
+    handoff_snapshot: "這是初始化時的設定值。請到設定頁查看目前的網址與狀態；若初始化尚未完成，可用 agend hub init 繼續。",
+    handoff_record: "私人安裝清單：{0}",
+    handoff_config: "共用設定檔（Hub 設定位於 hub.*）：{0}",
+    handoff_data: "Hub 身分、TLS、密鑰、資料庫、稽核與初始化紀錄：{0}",
+    handoff_log: "共用機群日誌：{0}",
+    handoff_service: "目前的服務定義：{0}（{1}）",
+    handoff_scope: "以下指令會控制既有的 AgEnD 服務，以及它執行的所有 agent，包括共用此服務的既有機群。",
+    handoff_stop: "停止：{0}",
+    handoff_restart: "重新啟動：{0}",
+    handoff_uninstall: "移除服務（會要求確認）：{0}",
+    handoff_preserve: "移除服務會保留 AgEnD 套件、fleet.yaml，以及 Hub 身分、密鑰、資料與日誌。Hub 執行時會依保留規則清除紀錄；停止或移除服務不會抹除資料。若另行手動移除資料，請先保留私人備份。",
+    handoff_repeat: "再次顯示交接資訊：{0}",
+    handoff_unavailable: "找不到私人 Hub 安裝紀錄，或無法讀取。較舊版本建立的 Hub 可能沒有這份紀錄。請確認 AGEND_HOME 與私人權限；未完成的初始化可用 agend hub init 繼續。顯示交接資訊沒有變更服務或資料。",
+    pairing_title: "讓機群連上這個 Hub",
+    pairing_steps: "  1. 以管理員身分登入 {0}/web，為機群主人建立配對碼（管理 → 已配對的機群）。\n  2. 成員主人在自己的電腦開啟 設定 → 連線到 Hub，輸入 {1} 與配對碼。\n  3. 兩邊畫面會顯示相同的指紋；核對後由主人確認、你核准。\n成員會釘選這個 Hub 的憑證金鑰：SHA-256 {2}",
+};
+export function ht(key, ...args) {
+    const template = (getLocale() === "zh-TW" ? zhTW : en)[key];
+    return template.replace(/\{(\d+)\}/g, (_, i) => String(args[Number(i)] ?? ""));
+}
+//# sourceMappingURL=text.js.map

package/dist/hub/init/text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.js","sourceRoot":"","sources":["../../../src/hub/init/text.ts"],"names":[],"mappings":"AAAA,sHAAsH;AACtH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,MAAM,EAAE,GAAG;IACT,UAAU,EAAE,qFAAqF;IACjG,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,iBAAiB;IACpF,KAAK,EAAE,wCAAwC;IAC/C,KAAK,EACH,wQAAwQ;IAC1Q,UAAU,EAAE,uGAAuG;IACnH,UAAU,EAAE,8EAA8E;IAC1F,QAAQ,EAAE,2GAA2G;IACrH,WAAW,EAAE,2HAA2H;IACxI,gBAAgB,EAAE,8CAA8C;IAChE,eAAe,EACb,waAAwa;IAC1a,aAAa,EAAE,8FAA8F;IAC7G,kBAAkB,EAAE,cAAc;IAClC,SAAS,EAAE,iCAAiC;IAC5C,MAAM,EAAE,4CAA4C;IACpD,YAAY,EAAE,6FAA6F;IAC3G,eAAe,EAAE,mGAAmG;IACpH,aAAa,EAAE,4GAA4G;IAC3H,YAAY,EAAE,mEAAmE;IACjF,eAAe,EAAE,sEAAsE;IACvF,WAAW,EAAE,wFAAwF;IACrG,aAAa,EAAE,yCAAyC;IACxD,WAAW,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,YAAY,EAAE,eAAe;IAC7F,eAAe,EAAE,+FAA+F;IAChH,kBAAkB,EAAE,mHAAmH;IACvI,iBAAiB,EAAE,+GAA+G;IAClI,gBAAgB,EAAE,6IAA6I;IAC/J,kBAAkB,EAAE,+HAA+H;IACnJ,gBAAgB,EAAE,iGAAiG;IACnH,mBAAmB,EAAE,sGAAsG;IAC3H,UAAU,EAAE,0OAA0O;IACtP,iBAAiB,EAAE,yIAAyI;IAC5J,SAAS,EAAE,2BAA2B;IACtC,SAAS,EACP,mRAAmR;IACrR,UAAU,EAAE,6FAA6F;IACzG,SAAS,EAAE,6CAA6C;IACxD,UAAU,EACR,mWAAmW;IACrW,WAAW,EAAE,iCAAiC;IAC9C,eAAe,EACb,4IAA4I;IAC9I,MAAM,EAAE,uCAAuC;IAC/C,eAAe,EAAE,kCAAkC;IACnD,wBAAwB,EAAE,wGAAwG;IAClI,mBAAmB,EAAE,2HAA2H;IAChJ,cAAc,EAAE,mJAAmJ;IACnK,OAAO,EAAE,2BAA2B;IACpC,SAAS,EAAE,iDAAiD;IAC5D,WAAW,EAAE,wFAAwF;IACrG,SAAS,EAAE,2CAA2C;IACtD,QAAQ,EAAE,uGAAuG;IACjH,aAAa,EAAE,0DAA0D;IACzE,UAAU,EAAE,6DAA6D;IACzE,UAAU,EAAE,6DAA6D;IACzE,aAAa,EAAE,wCAAwC;IACvD,cAAc,EAAE,yEAAyE;IACzF,iBAAiB,EAAE,2EAA2E;IAC9F,uBAAuB,EAAE,gEAAgE;IACzF,eAAe,EAAE,uJAAuJ;IACxK,qBAAqB,EAAE,iNAAiN;IACxO,WAAW,EAAE,6CAA6C;IAC1D,iBAAiB,EAAE,+GAA+G;IAClI,cAAc,EAAE,yGAAyG;IACzH,cAAc,EAAE,8CAA8C;IAC9D,gBAAgB,EAAE,kEAAkE;IACpF,mBAAmB,EAAE,8GAA8G;IACnI,kBAAkB,EAAE,0HAA0H;IAC9I,gBAAgB,EAAE,wFAAwF;IAC1G,kBAAkB,EAAE,2JAA2J;IAC/K,mBAAmB,EAAE,+QAA+Q;IACpS,YAAY,EAAE,uLAAuL;IACrM,cAAc,EAAE,yCAAyC;IACzD,SAAS,EAAE,6FAA6F;IACxG,cAAc,EAAE,yDAAyD;IACzE,mBAAmB,EAAE,uDAAuD;IAC5E,kBAAkB,EAAE,8EAA8E;IAClG,gBAAgB,EAAE,0BAA0B;IAC5C,cAAc,EAAE,0DAA0D;IAC1E,eAAe,EAAE,yCAAyC;IAC1D,OAAO,EAAE,iIAAiI;IAC1I,kBAAkB,EAAE,0JAA0J;IAC9K,eAAe,EAAE,gIAAgI;IACjJ,mBAAmB,EAAE,8CAA8C;IACnE,iBAAiB,EAAE,oEAAoE;IACvF,cAAc,EAAE,8CAA8C;IAC9D,aAAa,EAAE,kBAAkB;IACjC,cAAc,EAAE,mFAAmF;IACnG,SAAS,EAAE,iEAAiE;IAC5E,YAAY,EAAE,YAAY;IAC1B,MAAM,EAAE,yBAAyB;IACjC,SAAS,EAAE,oBAAoB;IAC/B,IAAI,EAAE,iCAAiC;IACvC,iBAAiB,EAAE,6HAA6H;IAChJ,SAAS,EAAE,0JAA0J;IACrK,YAAY,EAAE,SAAS;IACvB,UAAU,EAAE,2GAA2G;IACvH,oBAAoB,EAAE,sLAAsL;IAC5M,kBAAkB,EAAE,6EAA6E;IACjG,yBAAyB,EAAE,sJAAsJ;IACjL,oBAAoB,EAAE,iJAAiJ;IACvK,qBAAqB,EAAE,8LAA8L;IACrN,uBAAuB,EAAE,kJAAkJ;IAC3K,qBAAqB,EAAE,wMAAwM;IAC/N,cAAc,EAAE,sGAAsG;IACtH,eAAe,EAAE,uGAAuG;IACxH,aAAa,EAAE,+BAA+B;IAC9C,gBAAgB,EAAE,2HAA2H;IAC7I,cAAc,EAAE,qCAAqC;IACrD,cAAc,EAAE,0DAA0D;IAC1E,YAAY,EAAE,oEAAoE;IAClF,WAAW,EAAE,uBAAuB;IACpC,eAAe,EAAE,uCAAuC;IACxD,aAAa,EAAE,4GAA4G;IAC3H,YAAY,EAAE,WAAW;IACzB,eAAe,EAAE,cAAc;IAC/B,iBAAiB,EAAE,iDAAiD;IACpE,gBAAgB,EAAE,uRAAuR;IACzS,cAAc,EAAE,8BAA8B;IAC9C,mBAAmB,EAAE,4RAA4R;IACjT,aAAa,EAAE,+BAA+B;IAC9C,aAAa,EACX,mYAAmY;CACtY,CAAC;AAIF,MAAM,IAAI,GAAwB;IAChC,UAAU,EAAE,wDAAwD;IACpE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ;IACxE,KAAK,EAAE,0BAA0B;IACjC,KAAK,EACH,uGAAuG;IACzG,UAAU,EAAE,2CAA2C;IACvD,UAAU,EAAE,0CAA0C;IACtD,QAAQ,EAAE,uCAAuC;IACjD,WAAW,EAAE,0DAA0D;IACvE,gBAAgB,EAAE,wBAAwB;IAC1C,eAAe,EACb,sMAAsM;IACxM,aAAa,EAAE,8CAA8C;IAC7D,kBAAkB,EAAE,cAAc;IAClC,SAAS,EAAE,cAAc;IACzB,MAAM,EAAE,iCAAiC;IACzC,YAAY,EAAE,yCAAyC;IACvD,eAAe,EAAE,uCAAuC;IACxD,aAAa,EAAE,yCAAyC;IACxD,YAAY,EAAE,0BAA0B;IACxC,eAAe,EAAE,0BAA0B;IAC3C,WAAW,EAAE,gDAAgD;IAC7D,aAAa,EAAE,qBAAqB;IACpC,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU;IACrE,eAAe,EAAE,0CAA0C;IAC3D,kBAAkB,EAAE,6CAA6C;IACjE,iBAAiB,EAAE,qCAAqC;IACxD,gBAAgB,EAAE,oDAAoD;IACtE,kBAAkB,EAAE,4CAA4C;IAChE,gBAAgB,EAAE,0CAA0C;IAC5D,mBAAmB,EAAE,sCAAsC;IAC3D,UAAU,EAAE,sFAAsF;IAClG,iBAAiB,EAAE,iDAAiD;IACpE,SAAS,EAAE,gBAAgB;IAC3B,SAAS,EACP,mGAAmG;IACrG,UAAU,EAAE,8CAA8C;IAC1D,SAAS,EAAE,kBAAkB;IAC7B,UAAU,EACR,0JAA0J;IAC5J,WAAW,EAAE,WAAW;IACxB,eAAe,EAAE,8CAA8C;IAC/D,MAAM,EAAE,kBAAkB;IAC1B,eAAe,EAAE,mBAAmB;IACpC,wBAAwB,EAAE,4BAA4B;IACtD,mBAAmB,EAAE,uCAAuC;IAC5D,cAAc,EAAE,+DAA+D;IAC/E,OAAO,EAAE,mBAAmB;IAC5B,SAAS,EAAE,uCAAuC;IAClD,WAAW,EAAE,+BAA+B;IAC5C,SAAS,EAAE,uBAAuB;IAClC,QAAQ,EAAE,yDAAyD;IACnE,aAAa,EAAE,8CAA8C;IAC7D,UAAU,EAAE,uCAAuC;IACnD,UAAU,EAAE,2BAA2B;IACvC,aAAa,EAAE,eAAe;IAC9B,cAAc,EAAE,yBAAyB;IACzC,iBAAiB,EAAE,kCAAkC;IACrD,uBAAuB,EAAE,wBAAwB;IACjD,eAAe,EAAE,wEAAwE;IACzF,qBAAqB,EAAE,mGAAmG;IAC1H,WAAW,EAAE,gBAAgB;IAC7B,iBAAiB,EAAE,gEAAgE;IACnF,cAAc,EAAE,mCAAmC;IACnD,cAAc,EAAE,+BAA+B;IAC/C,gBAAgB,EAAE,mCAAmC;IACrD,mBAAmB,EAAE,mCAAmC;IACxD,kBAAkB,EAAE,qDAAqD;IACzE,gBAAgB,EAAE,4BAA4B;IAC9C,kBAAkB,EAAE,mDAAmD;IACvE,mBAAmB,EAAE,mHAAmH;IACxI,YAAY,EAAE,0DAA0D;IACxE,cAAc,EAAE,cAAc;IAC9B,SAAS,EAAE,mCAAmC;IAC9C,cAAc,EAAE,eAAe;IAC/B,mBAAmB,EAAE,kBAAkB;IACvC,kBAAkB,EAAE,qBAAqB;IACzC,gBAAgB,EAAE,UAAU;IAC5B,cAAc,EAAE,+BAA+B;IAC/C,eAAe,EAAE,iBAAiB;IAClC,OAAO,EAAE,0DAA0D;IACnE,kBAAkB,EAAE,iDAAiD;IACrE,eAAe,EAAE,8CAA8C;IAC/D,mBAAmB,EAAE,mBAAmB;IACxC,iBAAiB,EAAE,4BAA4B;IAC/C,cAAc,EAAE,qBAAqB;IACrC,aAAa,EAAE,OAAO;IACtB,cAAc,EAAE,qCAAqC;IACrD,SAAS,EAAE,kCAAkC;IAC7C,YAAY,EAAE,YAAY;IAC1B,MAAM,EAAE,aAAa;IACrB,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,wBAAwB;IAC9B,iBAAiB,EAAE,qDAAqD;IACxE,SAAS,EAAE,yFAAyF;IACpG,YAAY,EAAE,SAAS;IACvB,UAAU,EAAE,uCAAuC;IACnD,oBAAoB,EAAE,wGAAwG;IAC9H,kBAAkB,EAAE,8BAA8B;IAClD,yBAAyB,EAAE,8DAA8D;IACzF,oBAAoB,EAAE,gEAAgE;IACtF,qBAAqB,EAAE,6EAA6E;IACpG,uBAAuB,EAAE,uDAAuD;IAChF,qBAAqB,EAAE,6DAA6D;IACpF,cAAc,EAAE,6CAA6C;IAC7D,eAAe,EAAE,yDAAyD;IAC1E,aAAa,EAAE,eAAe;IAC9B,gBAAgB,EAAE,2DAA2D;IAC7E,cAAc,EAAE,YAAY;IAC5B,cAAc,EAAE,2BAA2B;IAC3C,YAAY,EAAE,gCAAgC;IAC9C,WAAW,EAAE,YAAY;IACzB,eAAe,EAAE,kBAAkB;IACnC,aAAa,EAAE,kDAAkD;IACjE,YAAY,EAAE,QAAQ;IACtB,eAAe,EAAE,UAAU;IAC3B,iBAAiB,EAAE,iBAAiB;IACpC,gBAAgB,EAAE,oGAAoG;IACtH,cAAc,EAAE,cAAc;IAC9B,mBAAmB,EAAE,6GAA6G;IAClI,aAAa,EAAE,aAAa;IAC5B,aAAa,EACX,6JAA6J;CAChK,CAAC;AAEF,MAAM,UAAU,EAAE,CAAC,GAAQ,EAAE,GAAG,IAAyB;IACvD,MAAM,QAAQ,GAAG,CAAC,SAAS,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5D,OAAO,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AACzF,CAAC"}

package/dist/hub/init/types.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Hub initialization (S-48 / S5a, hub.md §5 "S5: audit, notifications, administration and init"). HubInitPlan and
+ * HubInitializer follow hub.md plus the S1 additions agreed with its author (hub-s48-init):
+ * - `memberListen` / `webListen`: explicit listener addresses (no implicit all-interface exposure);
+ * - `webTls`: the browser-facing HTTPS certificate the operator supplies (separate from the member certificate);
+ * - `prepareConfirmation`: creates the opaque, plan-bound `localOwnerConfirmation` that `commit` requires.
+ */
+import type { HubDirectoryConfig, PersonKey } from "../directory/index.js";
+export type HubCoexistence = "dedicated" | "same-user-pilot";
+export interface HubInitPlan {
+    name: string;
+    /** Browser origin (https://host[:port]) — distinct from memberOrigin. */
+    webOrigin: string;
+    /** Member transport origin; its host goes into the self-signed member certificate's SAN. */
+    memberOrigin: string;
+    directory: HubDirectoryConfig;
+    bindPasswordRef: string;
+    /** The immutable directory identity designated by the local owner; claimed on its first browser sign-in. */
+    administrator: PersonKey;
+    retention: {
+        contentDays: number;
+        eventDays: number;
+    };
+    coexistence: HubCoexistence;
+    /** Where the member transport listens (a specific interface address, never a wildcard). */
+    memberListen: HubListen;
+    /** Where the browser HTTPS listener listens. */
+    webListen: HubListen;
+    /** The operator's browser certificate chain and private key (PEM files); copied privately on commit. */
+    webTls: {
+        certFile: string;
+        keyFile: string;
+        /** Private staging owned by explicit wizard generation, for cleanup after resume. */
+        generated?: true;
+    };
+}
+export interface HubListen {
+    host: string;
+    port: number;
+}
+export interface HubInitInspection {
+    existingFleet: boolean;
+    existingHub: boolean;
+    /** Addition: what was found, for the wizard's warning. */
+    fleetEvidence: readonly string[];
+    /** Addition: an initialization that stopped part-way (a visible repair state), if any. */
+    incomplete?: {
+        startedAt: string;
+        stage: string;
+        plan: HubInitPlan;
+    };
+}
+export interface HubIdentitySummary {
+    hubId: string;
+    /** SHA-256 of the member certificate's SubjectPublicKeyInfo (what members pin), lowercase hex. */
+    spkiSha256: string;
+    issuerKeyId: string;
+    /** PEM public key of the Ed25519 issuer. */
+    issuerPublicKey: string;
+}
+/**
+ * S1 owns Hub key material (hub.md §2): a TLS key + self-signed certificate with the member address in its SAN, a
+ * stable random hubId and the Ed25519 issuer key. Init calls it; it never generates keys itself.
+ */
+export interface HubIdentityProvider {
+    readonly available: boolean;
+    /** Create the identity privately under the AgEnD home. Must refuse to overwrite an existing identity. */
+    provision(args: {
+        home: string;
+        memberOrigin: string;
+    }): Promise<HubIdentitySummary>;
+    /** The identity already provisioned under the home, if any (to resume an interrupted initialization). */
+    read(home: string): Promise<HubIdentitySummary | undefined>;
+    /**
+     * S1 `sealHubInitialization` (read-only): the issuer key's Ed25519 signature over
+     * JSON.stringify(["agend-hub-init-v1", 1, hubId, planDigest, committedAt, confirmationId]). S5 writes the manifest.
+     * Called only after the local-owner confirmation was verified, before `hub.enabled` is published.
+     */
+    seal(args: {
+        home: string;
+        planDigest: string;
+        confirmationId: string;
+        committedAt: string;
+    }): string | Promise<string>;
+}
+export interface HubInitSecrets {
+    /** The directory service account's password; written to the private file bindPasswordRef names, nowhere else. */
+    bindPassword: string;
+}
+export interface HubInitConfirmation {
+    /** Opaque, single-use, expires; bound to the plan digest and to the secrets given with it. */
+    reference: string;
+    /** Digest of the plan and its certificate files that this confirmation is bound to (not the sealed config digest). */
+    planDigest: string;
+    summary: string;
+}
+export interface HubInitResult {
+    hubId: string;
+    spkiSha256: string;
+    issuerKeyId: string;
+    configPath: string;
+}
+export interface HubInitializer {
+    inspect(): Promise<HubInitInspection>;
+    /** Throws HubInitError with every problem; nothing is written. */
+    validate(plan: HubInitPlan): Promise<void>;
+    /** Addition: validate, then hold the plan + secrets in memory under a fresh reference for commit. */
+    prepareConfirmation(plan: HubInitPlan, secrets: HubInitSecrets): Promise<HubInitConfirmation>;
+    commit(plan: HubInitPlan, localOwnerConfirmation: string): Promise<HubInitResult>;
+}
+export declare class HubInitError extends Error {
+    readonly problems: readonly string[];
+    constructor(message: string, problems?: readonly string[]);
+}

package/dist/hub/init/types.js

@@ -0,0 +1,9 @@
+export class HubInitError extends Error {
+    problems;
+    constructor(message, problems = [message]) {
+        super(message);
+        this.problems = problems;
+        this.name = "HubInitError";
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/hub/init/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/hub/init/types.ts"],"names":[],"mappings":"AA0GA,MAAM,OAAO,YAAa,SAAQ,KAAK;IAG1B,QAAQ;IAFnB,YACE,OAAe,EACN,QAAQ,GAAsB,CAAC,OAAO,CAAC;QAEhD,KAAK,CAAC,OAAO,CAAC,CAAC;wBAFN,QAAQ;QAGjB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF"}

package/dist/hub/init/wizard.d.ts

@@ -0,0 +1,34 @@
+import type { createHubDirectory as CreateHubDirectory } from "../directory/index.js";
+import { type WizardIO } from "./prompt.js";
+import { type HubInitializer, type HubInitPlan } from "./types.js";
+import { type DirectoryCertificateProbe, type DirectoryCaBundle } from "./directory-certificate.js";
+import type { HubBrowserMaterial } from "./browser-certificate.js";
+import { type HubNetworkCheck } from "./network.js";
+export interface HubServiceControl {
+    installed(): boolean;
+    /** Install and start the existing AgEnD service wrapper; returns a short description. Throws on failure. */
+    install(): Promise<string>;
+}
+export interface HubWizardDeps {
+    io: WizardIO;
+    home: string;
+    initializer: HubInitializer;
+    createDirectory: typeof CreateHubDirectory;
+    readFile(path: string): string;
+    readSecretFile?(path: string): string;
+    service: HubServiceControl;
+    now?: () => number;
+    /** Default: real local TCP preflight. Isolated tests may supply an inert checker. */
+    checkNetwork?: HubNetworkCheck;
+    createBrowserCertificate?(origin: string): Promise<HubBrowserMaterial>;
+    recoverBrowserCertificate?(plan: HubInitPlan): HubBrowserMaterial | null;
+    directoryCertificates?: {
+        inspect(url: string): Promise<DirectoryCertificateProbe>;
+        fetch(probe: DirectoryCertificateProbe, pin: string, credentials?: {
+            bindDn: string;
+            password: string;
+        }): Promise<DirectoryCaBundle>;
+    };
+}
+export type HubWizardOutcome = "initialized" | "cancelled" | "refused";
+export declare function runHubInitWizard(deps: HubWizardDeps): Promise<HubWizardOutcome>;