agents-gitflow-guard 0.0.2 → 0.0.4

package/README.md

@@ -2,7 +2,8 @@
 
 > **Are you tired of agents skipping your GitFlow?**
 
-A configurable branch-role guard for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (DSH). You define your own branches —
+A configurable branch-role guard for AI coding agents — [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (DSH), Claude Code, and Codex.
+You define your own branches —
 **integration** (features merge in via PR/MR), **preview** (env endpoints), **production**, **archive** — each with its own update rules. Agents can't skip the flow, and sensitive merges stay in your hands.
 
 [中文文档](README.zh.md) · [License](LICENSE)
@@ -48,8 +49,8 @@ dsh plugin --profile web add agents-gitflow-guard
   "enabled": true,
   "featurePattern": "feature/[\\w-]+",
   "branches": {
-    "integration": ["develop"],   // 集成分支: feature 经 PR 合入, 受保护
-    "archive": ["main"]           // 归档分支: 发布后由你亲手合入
+    "integration": ["develop"],   // integration: features merge in via PR, protected
+    "archive": ["main"]           // archive: archived by you after release
   }
 }
 ```
@@ -59,11 +60,11 @@ This one file is the entire setup: `integration` is the **only required** role;
 **Step 3 — verify.** Ask the agent (or run in a DSH session) to `git push origin develop`. Expect the tool call to be denied:
 
 ```text
-Error: [gitflow-guard] 已拦截: 受保护分支「develop」禁止直推
-下一步: 集成分支(develop)由 PR/MR 合入 feature: 先推 feature 分支, 再 gh pr create --base develop / glab mr create --target-branch develop
+Error: [gitflow-guard] blocked: Protected branch "develop" forbids direct push
+Next: Integration branch (develop) is updated via PR/MR from a feature branch: push the feature first, then `gh pr create --base develop` / `glab mr create --target-branch develop`.
 ```
 
-The block message is currently Chinese by default (localization is on the [Roadmap](#roadmap)); in English it means: *blocked: protected branch `develop` — direct push forbidden. Next: integration branch is updated by PR/MR — push the feature branch first, then open a PR/MR into `develop`.*
+Messages are English by default; add `"locale": "zh"` to the config to switch to Chinese (see [Configuration Reference](#configuration-reference)).
 
 **Done.** The guard is live for this repo. Keep reading for the [Configuration](#configuration-reference) to map your own branches, or the [Gate Matrix](#gate-matrix--what-gets-blocked-what-passes) for the full decision table.
 
@@ -189,12 +190,12 @@ No plugin code decides "is this merge OK?" for production or archive. The gate s
 Only **`integration`** is required. Every other role is optional — configure what your flow actually uses, and each entry is an exact branch name **or** a regex pattern.
 
 ```text
-feature branches ──(free)──> integration（集成分支, PR/MR 合入）
+feature branches ──(free)──> integration (integration branch; updates via PR/MR)
                                    │
-                                   ├──> preview（可选, 环境终点, PR/MR 更新）
+                                   ├──> preview (optional; env endpoints; updates via PR/MR)
                                    │
-                                   └──> production（可选, PR/MR + 只有你能点合并）
-archive（可选, 发布后你亲手归档）
+                                   └──> production (optional; PR/MR + only you click merge)
+archive (optional; you archive after release)
 ```
 
 | role | config key | required? | enforced behavior |
@@ -207,7 +208,7 @@ archive（可选, 发布后你亲手归档）
 
 ### Customizing branch names & rules — any naming works
 
-**小团队（个人 / 2-3 人）—— 最简，只有 integration：**
+**Small team (solo / 2–3 devs) — minimal: integration only:**
 
 ```jsonc
 {
@@ -217,7 +218,7 @@ archive（可选, 发布后你亲手归档）
 }
 ```
 
-**大团队（多预览环境 + 生产 + 归档）：**
+**Larger team (multiple preview envs + production + archive):**
 
 ```jsonc
 {
@@ -251,6 +252,7 @@ archive（可选, 发布后你亲手归档）
     "production":  { "branches": ["prd"], "update": "pr", "mergeBy": "user" }, // optional
     "archive":     ["main"]                                      // optional
   },
+  "locale": "en",                      // optional: message language ('en' default, or 'zh')
   "ci": { "enabled": true }            // optional: gh pr checks logged as reference
 }
 ```
@@ -259,6 +261,7 @@ archive（可选, 发布后你亲手归档）
 - `update`: `pr` (default) = updates only via PR/MR; `flexible` = allow direct/local merges (small teams).
 - `mergeBy` (production): `user` (default) = only you click merge; `anyone` = allow PR merge through.
 - Each branch entry is an exact name or a regex (auto-detected).
+- **Language**: messages are English by default; add `"locale": "zh"` for Chinese.
 - **Validation**: `integration` is required; overlapping role entries are rejected; invalid regex is rejected. **Any error disables the plugin for that project** (reported) rather than applying a half-guessed setup.
 
 ---
@@ -306,9 +309,10 @@ dsh plugin --profile web add file:/path/to/agents-gitflow-guard
 
 The package declares `dsh.bundle.patch`, so `dsh plugin add` automatically makes it a profile layer — no manual profile editing.
 
-**Claude Code hook** — the same guard inside Claude Code, no DSH required. This repo already ships the config at `.claude/settings.json`; for any other repo, add these hooks:
+**Claude Code / Codex hooks** — the same guard inside those agents, no DSH required. This repo ships project configs at `.claude/settings.json` (Claude Code) and `.codex/hooks.json` (Codex); any other repo adds its own:
 
-```json
+```jsonc
+// Claude Code — .claude/settings.json
 {
   "hooks": {
     "PreToolUse": [
@@ -318,9 +322,20 @@ The package declares `dsh.bundle.patch`, so `dsh plugin add` automatically makes
 }
 ```
 
-- The hook reads the payload on stdin and answers `exit 0` (allow) or `exit 2` (block — stderr is the reason shown to the model, plus a "next step" hint).
+```jsonc
+// Codex — .codex/hooks.json
+{
+  "hooks": {
+    "PreToolUse": [
+      { "matcher": "^Bash$", "hooks": [{ "type": "command", "command": "node bin/gitflow-guard.mjs check --platform codex" }] }
+    ]
+  }
+}
+```
+
+- The hook reads the payload on stdin and answers with that platform's protocol: Claude Code → `exit 2` (stderr is the reason + "next step" hint); Codex → JSON `{"hookSpecificOutput":{"permissionDecision":"deny",...}}` on stdout (Codex also accepts the legacy `{"decision":"block","reason":...}` shape, which `--platform antigravity` uses).
 - Only `PreToolUse` is needed: the guard blocks *before* the command runs. There is no permit to consume afterwards, so no `PostToolUse` hooks are required.
-- Use an **absolute path** to the binary — hook subprocesses may not inherit your shell `PATH`. `${CLAUDE_PROJECT_DIR}/bin/gitflow-guard.mjs` (after `npm run build`) also works from a checkout.
+- Use an **absolute path** to the binary — hook subprocesses may not inherit your shell `PATH`. `${CLAUDE_PROJECT_DIR}/bin/gitflow-guard.mjs` (Claude Code) or `node bin/gitflow-guard.mjs` (Codex, runs from the project working directory) also work from a checkout.
 - Fully opt-in: the hook does nothing unless the repo has `gitflow-guard.config.json` with `enabled: true`.
 
 ---
@@ -409,7 +424,7 @@ If it saves your team from a shortcut gone wrong, the coffee button at the top o
 
 ## Roadmap
 
-- **i18n — localized block messages**: deny messages are Chinese by default today; make them follow the user's language (and the plugin config).
+- **i18n — localized block messages** ✅ (0.0.3): English by default, `"locale": "zh"` for Chinese.
 - **v2 — audit sync**: sync `.git/gitflow-guard/audit.jsonl` across machines (audit is local-only today).
 - **v2 — more pre-built templates**: ready-made config templates for common flows (solo `develop`, multi-env enterprise) as community-contributed presets.
 - **v2 — CI hard-gating research**: whether `pr checks` could become a real gate without hurting the platform-agnostic core.
@@ -433,9 +448,12 @@ npm install
 npm test          # unit tests: classify / gate / config / cli / repo / platform
 npm run typecheck     # tsc --noEmit, 0 errors
 npm run build         # tsdown → lib/ (CLI and plugin share the build)
+npm run verify:matrix # continuous cross-agent regression: DSH logic + Claude Code / Codex / antigravity hook wiring
 ```
 
-**Rule**: any logic change must pass a 0-error build + all green tests before done.
+**Rule**: any logic change must pass a 0-error build + all green tests + a green `verify:matrix` before done.
+
+**Adding a new agent client** (e.g. Gemini / OpenCode / Cursor): all of these must change in one commit — `src/platform.ts` (+tests, `HookPlatform` union), a repo hook config beside `.claude/settings.json` / `.codex/hooks.json`, `.agents/hooks/references/<tool>.md`, `scripts/verify-matrix.mjs`, the README hook section and the top tagline, `package.json` description/keywords, and `CHANGELOG`. Done only when `npm run verify:matrix` is green. (Same checklist in [AGENTS.md](AGENTS.md) §8.)
 
 ---
 

package/README.zh.md

@@ -2,7 +2,7 @@
 
 > **有没有受够了 agent 跳过你的合入流程?**
 
-一个可自由配置分支角色守卫的 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)(DSH)插件。  
+一个可自由配置分支角色的流程守卫,为 AI 编码 agent 而生——[DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)(DSH)、Claude Code、Codex。  
 你自己定义分支——**集成分支**(feature 经 PR/MR 合入)、**预览分支**(环境终点)、**生产分支**、**归档分支**——每个角色各自配规则。agent 无法跳过流程,敏感合并始终留在你手上。
 
 [English](README.md) · [许可证](LICENSE)
@@ -59,11 +59,11 @@ dsh plugin --profile web add agents-gitflow-guard
 **第 3 步——验证**。让 agent 执行 `git push origin develop`,预期工具调用被拒绝:
 
 ```text
-Error: [gitflow-guard] 已拦截: 受保护分支「develop」禁止直推
-下一步: 集成分支(develop)由 PR/MR 合入 feature: 先推 feature 分支, 再 gh pr create --base develop / glab mr create --target-branch develop
+Error: [gitflow-guard] blocked: Protected branch "develop" forbids direct push
+Next: Integration branch (develop) is updated via PR/MR from a feature branch: push the feature first, then `gh pr create --base develop` / `glab mr create --target-branch develop`.
 ```
 
-拦截文案目前默认是中文(本地化在[路线图](#路线图));英文意思是:*blocked: protected branch `develop` — direct push forbidden. Next: integration branch is updated by PR/MR — push the feature branch first, then open a PR/MR into `develop`.*
+**文案默认是英文**(面向国际化)。要在你的项目里看中文,在 `gitflow-guard.config.json` 里加 `"locale": "zh"`;中文效果是:*已拦截:受保护分支「develop」禁止直推 / 下一步:集成分支(develop)由 PR/MR 合入 feature……*
 
 **完成。** 守卫对该仓库生效。继续往下看[配置参考](#配置参考)映射自己的分支,或看[门禁矩阵](#门禁矩阵拦什么放什么)的完整判定表。
 
@@ -249,6 +249,7 @@ archive(可选, 发布后你亲手归档)
     "production":  { "branches": ["prd"], "update": "pr", "mergeBy": "user" }, // 可选
     "archive":     ["main"]                                      // 可选
   },
+  "locale": "en",                      // 可选: 文案语言('en' 默认, 或 'zh')
   "ci": { "enabled": true }            // 可选: gh pr checks 作参考日志
 }
 ```
@@ -257,6 +258,7 @@ archive(可选, 发布后你亲手归档)
 - `update`:`pr`(默认)= 只能 PR/MR 合入;`flexible` = 允许直推/本地合入(小团队)。
 - `mergeBy`(生产):`user`(默认)= 只能你点合并;`anyone` = 放行 PR 合并。
 - 每条分支条目是精确名或正则(自动识别)。
+- **文案语言**:默认英文;加 `"locale": "zh"` 切中文。
 - **校验**:`integration` 必填;角色条目重叠会被拒;非法正则会报错。**任何错误都会让该项目的插件禁用并上报**(而不是用半吊子配置)。
 
 ---
@@ -304,9 +306,10 @@ dsh plugin --profile web add file:/path/to/agents-gitflow-guard
 
 包自带 `dsh.bundle.patch` 声明,`dsh plugin add` 自动把它挂为 profile 层,无需手工编辑 profile。
 
-**Claude Code hook**——同一守卫也能在 Claude Code 里跑,不依赖 DSH。本仓库已自带 `.claude/settings.json`;其他仓库加这些 hooks:
+**Claude Code / Codex hook**——同一守卫也能在这些 agent 里跑,不依赖 DSH。本仓库已自带 `.claude/settings.json`(Claude Code)和 `.codex/hooks.json`(Codex);其他仓库加自己的 hooks:
 
-```json
+```jsonc
+// Claude Code — .claude/settings.json
 {
   "hooks": {
     "PreToolUse": [
@@ -316,9 +319,20 @@ dsh plugin --profile web add file:/path/to/agents-gitflow-guard
 }
 ```
 
-- hook 读 stdin payload,按 `exit 0`(放行)/ `exit 2`(拦截,stderr 展示给模型的原因 + "下一步"提示)作答。
+```jsonc
+// Codex — .codex/hooks.json
+{
+  "hooks": {
+    "PreToolUse": [
+      { "matcher": "^Bash$", "hooks": [{ "type": "command", "command": "node bin/gitflow-guard.mjs check --platform codex" }] }
+    ]
+  }
+}
+```
+
+- hook 读 stdin payload,按**各平台协议**作答:Claude Code → `exit 2`(stderr 展示原因 + "下一步"提示);Codex → stdout 输出 JSON `{"hookSpecificOutput":{"permissionDecision":"deny",...}}`(Codex 也兼容旧的 `{"decision":"block","reason":...}` 形状,`--platform antigravity` 用的就是它)。
 - 只需要 `PreToolUse`:守卫在命令执行*之前*拦截;没有特许可事后消费,因此无需 `PostToolUse` 钩子。
-- 用**绝对路径**指向二进制——hook 子进程不一定继承你的 shell PATH。`${CLAUDE_PROJECT_DIR}/bin/gitflow-guard.mjs`(`npm run build` 后)也可以。
+- 用**绝对路径**指向二进制——hook 子进程不一定继承你的 shell PATH。Claude Code 用 `${CLAUDE_PROJECT_DIR}/bin/gitflow-guard.mjs`,Codex 用 `node bin/gitflow-guard.mjs`(在项目目录执行)也可以。
 - 完全 opt-in:仓库没有 `gitflow-guard.config.json`(或 `enabled` 非 true)时 hook 什么都不做。
 
 ---
@@ -407,7 +421,7 @@ MIT,免费,无条件。随便用、随便改、随便发,唯一义务是保留
 
 ## 路线图
 
-- **i18n——拦截文案本地化**:目前默认中文;让它跟随用户语言(和插件配置)。
+- **i18n——拦截文案本地化** ✅(0.0.3):默认英文,`"locale": "zh"` 切中文。
 - **v2——审计同步**:跨机器同步 `.git/gitflow-guard/audit.jsonl`(现仅本地)。
 - **v2——更多预制模板**:常用流程(solo `develop`、多环境企业)的现成配置模板,由社区贡献。
 - **v2——CI 硬门槛研究**:`pr checks` 能否在不伤平台无关核心的前提下变成真实门槛。

package/lib/cli.mjs

@@ -1,4 +1,4 @@
-import { c as findRepoRoot, d as roleMatches, f as classify, i as formatDeny, l as gitRunner, o as stateDir, r as evaluateCommand, s as currentBranch, u as loadConfig } from "./src-Dv6jKDsO.mjs";
+import { c as findRepoRoot, d as resolveLocale, f as loadConfig, i as formatDeny, l as gitRunner, m as classify, o as stateDir, p as roleMatches, r as evaluateCommand, s as currentBranch, u as makeT } from "./src-LvZrsHEn.mjs";
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
 //#region src/platform.ts
@@ -84,17 +84,6 @@ function encodeDeny(platform, reason) {
 }
 //#endregion
 //#region src/cli.ts
-const USAGE = `gitflow-guard — GitFlow 流程守卫 CLI
-
-用法:
-  gitflow-guard status [--repo <路径>]
-  gitflow-guard audit [--lines <数量>] [--repo <路径>]
-  gitflow-guard check [--platform <claude|auto>] [--command "<cmd>"] [--repo <路径>]
-  gitflow-guard --help
-
-说明:
-  status/audit 只读, agent 可自查。
-  check 读 stdin hook payload 做门禁(exit 0=放行 / 2=拦截), 供 Claude Code 等 agent 的 pre/post hook 调用。`;
 function parseFlags(argv) {
 	const flags = {};
 	for (let i = 0; i < argv.length; i++) {
@@ -117,9 +106,10 @@ async function resolveRepo(flags) {
 }
 async function main(argv, opts = {}) {
 	const runner = opts.runner ?? gitRunner;
+	const usage = makeT("en")("usage.text");
 	const [cmd, ...rest] = argv;
 	if (cmd === "--help" || cmd === "help" || cmd === void 0) {
-		console.log(USAGE);
+		console.log(usage);
 		return 0;
 	}
 	const flags = parseFlags(rest);
@@ -127,7 +117,7 @@ async function main(argv, opts = {}) {
 		if (cmd === "status") return await status(flags, runner);
 		if (cmd === "audit") return await audit(flags);
 		if (cmd === "check") return await check(flags);
-		console.error(`[gitflow-guard] 未知子命令: ${cmd ?? ""}\n\n${USAGE}`);
+		console.error(`${makeT("en")("cli.unknownCommand", { cmd: cmd ?? "" })}\n\n${usage}`);
 		return 1;
 	} catch (e) {
 		console.error(`[gitflow-guard] ${e.message}`);
@@ -137,25 +127,36 @@ async function main(argv, opts = {}) {
 async function status(flags, runner) {
 	const repoRoot = await resolveRepo(flags);
 	if (!repoRoot) {
-		console.error("[gitflow-guard] 无法定位 git 仓库");
+		console.error(makeT("en")("cli.cannotLocate"));
 		return 1;
 	}
 	const { config, errors } = await loadConfig(repoRoot);
 	const enabled = config?.enabled === true;
-	console.log(`[gitflow-guard] status — ${repoRoot}`);
+	const t = makeT(resolveLocale(config?.locale));
+	console.log(t("cli.statusTitle", { repo: repoRoot }));
 	if (!enabled) {
-		console.log("配置: 未启用(不存在 gitflow-guard.config.json 或 enabled=false)");
-		for (const e of errors) console.log(`  配置错误: ${e}`);
+		console.log(t("cli.statusDisabled"));
+		for (const e of errors) console.log(t("cli.statusConfigError", { err: e }));
 		return 0;
 	}
 	const branch = await currentBranch(runner, repoRoot);
 	const c = config;
-	console.log(`配置: 已启用 | featurePattern: ${c.featurePattern}`);
-	console.log(`集成分支: ${c.branches.integration.branches.join(", ")} (update=${c.branches.integration.update || "pr"})`);
-	if (c.branches.preview) console.log(`预览分支: ${c.branches.preview.branches.join(", ")} (update=${c.branches.preview.update || "pr"})`);
-	if (c.branches.production) console.log(`生产分支: ${c.branches.production.branches.join(", ")} (update=${c.branches.production.update || "pr"}, 合并=${c.branches.production.mergeBy || "user"})`);
-	if (c.branches.archive) console.log(`归档分支: ${c.branches.archive.branches.join(", ")}`);
-	console.log(`当前分支: ${branch ?? "(未知)"}`);
+	console.log(t("cli.statusEnabled", { pattern: c.featurePattern }));
+	console.log(t("cli.statusIntegration", {
+		list: c.branches.integration.branches.join(", "),
+		mode: c.branches.integration.update || "pr"
+	}));
+	if (c.branches.preview) console.log(t("cli.statusPreview", {
+		list: c.branches.preview.branches.join(", "),
+		mode: c.branches.preview.update || "pr"
+	}));
+	if (c.branches.production) console.log(t("cli.statusProduction", {
+		list: c.branches.production.branches.join(", "),
+		mode: c.branches.production.update || "pr",
+		merge: c.branches.production.mergeBy || "user"
+	}));
+	if (c.branches.archive) console.log(t("cli.statusArchive", { list: c.branches.archive.branches.join(", ") }));
+	console.log(t("cli.statusCurrentBranch", { branch: branch ?? t("cli.statusUnknownBranch") }));
 	const r = await runner.run([
 		"for-each-ref",
 		"--format=%(refname:short)",
@@ -170,14 +171,14 @@ async function status(flags, runner) {
 		if (new RegExp(c.featurePattern).test(b)) return "feature";
 		return "other";
 	};
-	console.log("本地分支(按角色):");
+	console.log(t("cli.statusLocalBranches"));
 	for (const b of localBranches) console.log(`  ${b} → ${classifyBranch(b)}`);
 	return 0;
 }
 async function audit(flags) {
 	const repoRoot = await resolveRepo(flags);
 	if (!repoRoot) {
-		console.error("[gitflow-guard] 无法定位 git 仓库");
+		console.error(makeT("en")("cli.cannotLocate"));
 		return 1;
 	}
 	const lines = flags.lines != null && Number.isFinite(flags.lines) && flags.lines > 0 ? Math.floor(flags.lines) : 20;
@@ -190,7 +191,7 @@ async function audit(flags) {
 			console.log(`  ${line}`);
 		}
 	} catch {
-		console.log("  暂无审计记录");
+		console.log(makeT("en")("cli.auditEmpty"));
 	}
 	return 0;
 }
@@ -222,16 +223,17 @@ async function check(flags) {
 		const { config } = await loadConfig(repoRoot);
 		if (!config?.enabled) return 0;
 		const hookPlatform = platform === "auto" ? detectPlatform(raw) : platform;
+		const locale = resolveLocale(config.locale);
 		const result = await evaluateCommand(payload.command, { repoRoot });
 		if (result.outcome === "deny" && result.reason) {
-			const enc = encodeDeny(hookPlatform, formatDeny(result.reason.why, result.reason.next));
+			const enc = encodeDeny(hookPlatform, formatDeny(locale, result.reason.why, result.reason.next));
 			if (enc.stdout) process.stdout.write(enc.stdout + "\n");
 			if (enc.stderr) process.stderr.write(enc.stderr + "\n");
 			return enc.exitCode;
 		}
 		return 0;
 	} catch (e) {
-		process.stderr.write(`[gitflow-guard] check 内部错误, 已放行: ${e.message}\n`);
+		process.stderr.write(`${makeT("en")("cli.checkInternalError", { msg: e.message })}\n`);
 		return 0;
 	}
 }

package/lib/index.d.mts

@@ -1,5 +1,9 @@
 import { t as Runner } from "./repo-DrgptHl1.mjs";
 import { Context } from "@deepseek-ai/cordis";
+//#region src/types.d.ts
+/** 文案语言: 默认 en; 'zh' 切中文 */
+type Locale = 'en' | 'zh';
+//#endregion
 //#region src/index.d.ts
 declare const name = "gitflow-guard";
 interface PluginConfig {
@@ -23,6 +27,8 @@ interface EvaluateResult {
     next: string;
   };
   segmentCount: number;
+  /** 本次评估使用的文案语言(供 formatDeny/审计一致) */
+  locale: Locale;
 }
 interface AuditEntry {
   time: number;
@@ -36,7 +42,7 @@ declare function stateDir(repoRoot: string): string;
 declare function appendAudit(repoRoot: string, entry: AuditEntry): Promise<void>;
 /** 解析一条命令: 分类 → git 事实 → 门禁 → allow/deny */
 declare function evaluateCommand(command: string, opts: EvaluateOptions): Promise<EvaluateResult>;
-declare function formatDeny(why: string, next: string): string;
+declare function formatDeny(locale: Locale, why: string, next: string): string;
 declare function apply(ctx: Context, pluginConfig?: PluginConfig): void;
 //#endregion
 export { AuditEntry, EvaluateOptions, EvaluateResult, PluginConfig, appendAudit, apply, evaluateCommand, formatDeny, name, stateDir };

package/lib/index.mjs

@@ -1,2 +1,2 @@
-import { a as name, i as formatDeny, n as apply, o as stateDir, r as evaluateCommand, t as appendAudit } from "./src-Dv6jKDsO.mjs";
+import { a as name, i as formatDeny, n as apply, o as stateDir, r as evaluateCommand, t as appendAudit } from "./src-LvZrsHEn.mjs";
 export { appendAudit, apply, evaluateCommand, formatDeny, name, stateDir };

package/lib/{src-Dv6jKDsO.mjs → src-LvZrsHEn.mjs}

@@ -217,7 +217,8 @@ const CONFIG_FILE = "gitflow-guard.config.json";
 const DEFAULT_CONFIG = {
 	enabled: false,
 	featurePattern: "feature/[\\w-]+",
-	ci: { enabled: true }
+	ci: { enabled: true },
+	locale: "en"
 };
 const REGEX_CHARS = /[\\^$.*+?()[\]{}|]/;
 /** 一条分支条目: 含正则元字符按正则对待, 否则精确匹配 */
@@ -248,14 +249,14 @@ function normalizeRole(raw, defaultUpdate, defaultMergeBy) {
 		mergeBy = o.mergeBy;
 	} else return {
 		role: { branches: [] },
-		errors: ["分支角色必须是数组或 { branches: [...] }"]
+		errors: ["Branch role must be an array or { branches: [...] }"]
 	};
-	if (!Array.isArray(arr) || arr.length === 0 || !arr.every((x) => typeof x === "string" && x !== "")) errors.push("branches 必须是非空字符串数组");
+	if (!Array.isArray(arr) || arr.length === 0 || !arr.every((x) => typeof x === "string" && x !== "")) errors.push("branches must be a non-empty array of strings");
 	const role = { branches: (Array.isArray(arr) ? arr : []).filter((x) => typeof x === "string" && x !== "") };
 	if (update === void 0 || update === "pr" || update === "flexible") role.update = update === void 0 ? defaultUpdate : update;
-	else errors.push("update 必须是 \"pr\" 或 \"flexible\"");
+	else errors.push("update must be \"pr\" or \"flexible\"");
 	if (mergeBy === void 0 || mergeBy === "user" || mergeBy === "anyone") role.mergeBy = mergeBy === void 0 ? defaultMergeBy : mergeBy;
-	else errors.push("mergeBy 必须是 \"user\" 或 \"anyone\"");
+	else errors.push("mergeBy must be \"user\" or \"anyone\"");
 	return {
 		role,
 		errors
@@ -266,7 +267,7 @@ function mergeConfig(raw) {
 	const errors = [];
 	if (typeof raw !== "object" || raw === null) return {
 		config: null,
-		errors: ["配置文件必须是 JSON 对象"]
+		errors: ["Config file must be a JSON object"]
 	};
 	const r = raw;
 	const config = {
@@ -280,12 +281,14 @@ function mergeConfig(raw) {
 	};
 	if (typeof r.enabled === "boolean") config.enabled = r.enabled;
 	if (typeof r.featurePattern === "string" && r.featurePattern !== "") config.featurePattern = r.featurePattern;
+	if (r.locale === "en" || r.locale === "zh") config.locale = r.locale;
+	else if (r.locale !== void 0) errors.push("locale must be \"en\" or \"zh\"");
 	const b = r.branches ?? {};
 	if ("integration" in b) {
 		const { role, errors: e } = normalizeRole(b.integration, "pr", "anyone");
 		config.branches.integration = role;
 		errors.push(...e);
-	} else errors.push("branches.integration 必填");
+	} else errors.push("branches.integration is required");
 	if (b.preview !== void 0) {
 		const { role, errors: e } = normalizeRole(b.preview, "pr", "anyone");
 		config.branches.preview = role;
@@ -312,11 +315,11 @@ function mergeConfig(raw) {
 /** 配置校验: 角色分支重叠 / 正则合法等 */
 function validateConfig(config) {
 	const errors = [];
-	if (config.branches.integration.branches.length === 0) errors.push("branches.integration.branches 必填");
+	if (config.branches.integration.branches.length === 0) errors.push("branches.integration.branches is required");
 	try {
 		new RegExp(config.featurePattern);
 	} catch {
-		errors.push(`featurePattern 不是合法正则: ${config.featurePattern}`);
+		errors.push(`featurePattern is not a valid regex: ${config.featurePattern}`);
 	}
 	const allRoles = [
 		"integration",
@@ -330,7 +333,7 @@ function validateConfig(config) {
 		for (let j = i + 1; j < allRoles.length; j++) {
 			const bb = config.branches[allRoles[j]];
 			if (!bb) continue;
-			if (a.branches.some((s) => bb.branches.includes(s))) errors.push(`branches.${allRoles[i]} 与 branches.${allRoles[j]} 含有相同条目`);
+			if (a.branches.some((s) => bb.branches.includes(s))) errors.push(`branches.${allRoles[i]} and branches.${allRoles[j]} share the same entries`);
 		}
 	}
 	return errors;
@@ -347,19 +350,183 @@ async function loadConfig(repoRoot) {
 		};
 		return {
 			config: null,
-			errors: [`读取配置文件失败: ${e.message}`]
+			errors: [`Failed to read config file: ${e.message}`]
 		};
 	}
 }
 //#endregion
+//#region src/i18n.ts
+const en = {
+	"role.integration": () => "integration branch",
+	"role.preview": () => "preview branch",
+	"role.production": () => "production branch",
+	"role.archive": () => "archive branch",
+	"role.feature": () => "feature branch",
+	"role.other": () => "other branch",
+	"head.unknown": () => "current branch",
+	"denyDeleteOrForce.why": (v) => `Protected branch "${v.branch}" may not be deleted or force-pushed`,
+	"denyDeleteOrForce.next": () => "Delete/force-push on a feature branch outside the protected branches; protected branches are managed by you.",
+	"pushAll.why": () => "--all/--mirror push would include protected branches",
+	"pushAll.next": () => "Push branch by branch with an explicit refspec.",
+	"pushDetached.why": () => "Cannot determine the push target (detached HEAD?)",
+	"pushDetached.next": () => "Specify the refspec explicitly, e.g. `git push origin <branch>`.",
+	"pushProtectedDelete.why": (v) => `Protected branch "${v.branch}" may not be deleted`,
+	"pushProtectedDirect.why": (v) => `Protected branch "${v.branch}" forbids direct push`,
+	"pushProtectedDirectForce.why": (v) => `Protected branch "${v.branch}" forbids direct push (force)`,
+	"mergeProtected.why": (v) => `Merging into ${v.role} is allowed only by the user`,
+	"mergeProtected.next": () => `Do the merge in your own terminal (or UI); the agent can't do it for you.`,
+	"mergeFeature.why": (v) => `${v.role} forbids local merge of a feature: use PR/MR`,
+	"mergeFeature.next": (v) => `Push the feature branch first, then open a PR/MR into ${v.branch}.`,
+	"prCreateNoTarget.why": () => "Cannot determine the PR/MR target branch",
+	"prCreateNoTarget.next": (v) => `Specify --base/--target-branch explicitly (e.g. \`gh pr create --base ${v.base}\`).`,
+	"prCreateArchive.why": () => "Archive branches are user-managed; PRs/MRs into them are not allowed",
+	"prCreateArchive.next": () => "Do the release/archive yourself in your terminal or UI.",
+	"prCreateHead.why": (v) => `Current branch (${v.head}) is not a feature branch, so it cannot be the source of a PR/MR into ${v.role}`,
+	"prCreateHead.next": () => "Open the PR/MR into integration/preview/production from a feature/topic branch.",
+	"prMergeProduction.why": () => "Merging into production is allowed only by you (click merge)",
+	"prMergeProduction.next": () => "Click merge yourself on the PR/MR page.",
+	"prMergeArchive.why": () => "Merging into an archive branch is allowed only by the user",
+	"prMergeArchive.next": () => "Let the user do the archive merge in their terminal or UI.",
+	"prMergeUnknown.why": () => "Cannot confirm the PR/MR target branch",
+	"prMergeUnknown.next": () => "Retry once gh/glab is available, or let the user handle it.",
+	"prMergeHead.why": () => "Cannot confirm the PR/MR target, and the head is not a feature branch",
+	"prMergeHead.next": () => "Confirm the platform CLI is available, or let the user handle it.",
+	"next.integration": (v) => `Integration branch (${v.branch}) is updated via PR/MR from a feature branch: push the feature first, then \`gh pr create --base ${v.branch}\` / \`glab mr create --target-branch ${v.branch}\`.`,
+	"next.preview": (v) => `Preview branch (${v.branch}) only accepts PR/MRs: open a PR/MR into it from a feature/release branch (content of ${v.base} etc. first goes into a feature release branch).`,
+	"next.production": (v) => `Production branch (${v.branch}) is PR/MR-only, and you click the merge yourself.`,
+	"next.archive": (v) => `Archive branch (${v.branch}) is user-managed only.`,
+	"next.unspecified": () => "Retry once the target branch is clear.",
+	"deny.header": (v) => `[gitflow-guard] blocked: ${v.why}`,
+	"deny.next": (v) => `Next: ${v.next}`,
+	"cli.unknownCommand": (v) => `[gitflow-guard] unknown subcommand: ${v.cmd}`,
+	"cli.cannotLocate": () => "Cannot locate a git repository",
+	"cli.statusTitle": (v) => `[gitflow-guard] status — ${v.repo}`,
+	"cli.statusDisabled": () => "Config: not enabled (no gitflow-guard.config.json or enabled=false)",
+	"cli.statusConfigError": (v) => `  config error: ${v.err}`,
+	"cli.statusEnabled": (v) => `Config: enabled | featurePattern: ${v.pattern}`,
+	"cli.statusIntegration": (v) => `Integration: ${v.list} (update=${v.mode})`,
+	"cli.statusPreview": (v) => `Preview: ${v.list} (update=${v.mode})`,
+	"cli.statusProduction": (v) => `Production: ${v.list} (update=${v.mode}, merge=${v.merge})`,
+	"cli.statusArchive": (v) => `Archive: ${v.list}`,
+	"cli.statusCurrentBranch": (v) => `Current branch: ${v.branch}`,
+	"cli.statusUnknownBranch": () => "(unknown)",
+	"cli.statusLocalBranches": () => "Local branches (by role):",
+	"cli.auditEmpty": () => "  No audit entries yet",
+	"cli.checkInternalError": (v) => `[gitflow-guard] check internal error, allowed through: ${v.msg}`,
+	"usage.text": () => `gitflow-guard — GitFlow guard CLI
+
+Usage:
+  gitflow-guard status [--repo <path>]
+  gitflow-guard audit [--lines <count>] [--repo <path>]
+  gitflow-guard check [--platform <claude|auto>] [--command "<cmd>"] [--repo <path>]
+  gitflow-guard --help
+
+Notes:
+  status/audit are read-only; the agent can self-inspect.
+  check reads the hook payload on stdin (exit 0 = allow / 2 = block) and is meant for
+  pre/post hooks of agents such as Claude Code.`
+};
+const zh = {
+	"role.integration": () => "集成分支",
+	"role.preview": () => "预览分支",
+	"role.production": () => "生产分支",
+	"role.archive": () => "归档分支",
+	"role.feature": () => "feature 分支",
+	"role.other": () => "普通分支",
+	"head.unknown": () => "当前分支",
+	"denyDeleteOrForce.why": (v) => `受保护分支「${v.branch}」禁止删除或强推`,
+	"denyDeleteOrForce.next": () => "删除/强推请到受保护分支外的 feature 分支上操作; 受保护分支由用户亲手管理",
+	"pushAll.why": () => "--all/--mirror 推送会包含受保护分支",
+	"pushAll.next": () => "请逐分支推送并显式指定 refspec",
+	"pushDetached.why": () => "无法确定推送目标分支(可能处于 detached HEAD)",
+	"pushDetached.next": () => "请显式指定 refspec, 如 git push origin <分支名>",
+	"pushProtectedDelete.why": (v) => `受保护分支「${v.branch}」禁止删除`,
+	"pushProtectedDirect.why": (v) => `受保护分支「${v.branch}」禁止直推`,
+	"pushProtectedDirectForce.why": (v) => `受保护分支「${v.branch}」禁止直推(含强推)`,
+	"mergeProtected.why": (v) => `合入${v.role}仅允许用户亲手执行`,
+	"mergeProtected.next": () => "请在你自己终端(或 UI)完成该合并; agent 不能替你操作",
+	"mergeFeature.why": (v) => `${v.role}禁止本地合入 feature: 须通过 PR/MR`,
+	"mergeFeature.next": (v) => `先推 feature 分支, 再创建指向 ${v.branch} 的 PR/MR`,
+	"prCreateNoTarget.why": () => "无法确定 PR/MR 目标分支",
+	"prCreateNoTarget.next": (v) => `请显式指定 --base/--target-branch(如 gh pr create --base ${v.base})`,
+	"prCreateArchive.why": () => "归档分支(archive)仅用户亲手操作, 不允许创建指向它的 PR/MR",
+	"prCreateArchive.next": () => "发布/归档由你自己在终端或 UI 完成",
+	"prCreateHead.why": (v) => `当前分支(${v.head})不是 feature 分支, 不能作为指向${v.role}的 PR/MR 源`,
+	"prCreateHead.next": () => "请从 feature/topic 分支上创建指向集成/预览/生产分支的 PR/MR",
+	"prMergeProduction.why": () => "合入生产(production)分支仅允许用户亲手点合并",
+	"prMergeProduction.next": () => "请在 GitLab/GitHub 的 MR/PR 页面上由你本人点击合并",
+	"prMergeArchive.why": () => "合入归档分支(archive)仅允许用户亲手执行",
+	"prMergeArchive.next": () => "请让用户在自己终端或 UI 完成归档合并",
+	"prMergeUnknown.why": () => "无法确认 PR/MR 的目标分支",
+	"prMergeUnknown.next": () => "请确认 gh/glab 可用后重试, 或让用户亲手处理",
+	"prMergeHead.why": () => "无法确认 PR/MR 目标, 且 head 不是 feature 分支",
+	"prMergeHead.next": () => "请确认平台 CLI 可用, 或让用户亲手处理",
+	"next.integration": (v) => `集成分支(${v.branch})由 PR/MR 合入 feature: 先推 feature 分支, 再 gh pr create --base ${v.branch} / glab mr create --target-branch ${v.branch}`,
+	"next.preview": (v) => `预览分支(${v.branch})只收 PR/MR: 从 feature/发布分支创建指向它的 PR/MR(${v.base} 等集成分支内容先进 feature 发布分支)`,
+	"next.production": (v) => `生产分支(${v.branch})只能 PR/MR, 且合并由你亲手点击`,
+	"next.archive": (v) => `归档分支(${v.branch})仅用户亲手操作`,
+	"next.unspecified": () => "请明确目标分支后重试",
+	"deny.header": (v) => `[gitflow-guard] 已拦截: ${v.why}`,
+	"deny.next": (v) => `下一步: ${v.next}`,
+	"cli.unknownCommand": (v) => `[gitflow-guard] 未知子命令: ${v.cmd}`,
+	"cli.cannotLocate": () => "无法定位 git 仓库",
+	"cli.statusTitle": (v) => `[gitflow-guard] status — ${v.repo}`,
+	"cli.statusDisabled": () => "配置: 未启用(不存在 gitflow-guard.config.json 或 enabled=false)",
+	"cli.statusConfigError": (v) => `  配置错误: ${v.err}`,
+	"cli.statusEnabled": (v) => `配置: 已启用 | featurePattern: ${v.pattern}`,
+	"cli.statusIntegration": (v) => `集成分支: ${v.list} (update=${v.mode})`,
+	"cli.statusPreview": (v) => `预览分支: ${v.list} (update=${v.mode})`,
+	"cli.statusProduction": (v) => `生产分支: ${v.list} (update=${v.mode}, 合并=${v.merge})`,
+	"cli.statusArchive": (v) => `归档分支: ${v.list}`,
+	"cli.statusCurrentBranch": (v) => `当前分支: ${v.branch}`,
+	"cli.statusUnknownBranch": () => "(未知)",
+	"cli.statusLocalBranches": () => "本地分支(按角色):",
+	"cli.auditEmpty": () => "  暂无审计记录",
+	"cli.checkInternalError": (v) => `[gitflow-guard] check 内部错误, 已放行: ${v.msg}`,
+	"usage.text": () => `gitflow-guard — GitFlow 流程守卫 CLI
+
+用法:
+  gitflow-guard status [--repo <路径>]
+  gitflow-guard audit [--lines <数量>] [--repo <路径>]
+  gitflow-guard check [--platform <claude|auto>] [--command "<cmd>"] [--repo <路径>]
+  gitflow-guard --help
+
+说明:
+  status/audit 只读, agent 可自查。
+  check 读 stdin hook payload 做门禁(exit 0=放行 / 2=拦截), 供 Claude Code 等 agent 的 pre/post hook 调用。`
+};
+const MESSAGE_KEYS = Object.keys(en);
+/** key 合法性与 en/zh 双字典完整性检查(开发期一次) */
+if (Object.keys(zh).length !== MESSAGE_KEYS.length || MESSAGE_KEYS.some((k) => !(k in zh))) throw new Error("i18n: en/zh 字典键不一致");
+/**
+* 生成翻译函数。未知 key 回退英文原文(开发/防御性)。
+*/
+function makeT(locale) {
+	const dict = locale === "zh" ? zh : en;
+	return (key, vars = {}) => {
+		const entry = dict[key] ?? en[key];
+		if (!entry) return key;
+		try {
+			return entry(vars);
+		} catch {
+			return key;
+		}
+	};
+}
+/** 解析配置里的 locale 值: 仅 'zh' 视为中文, 其余(含未定义)一律英文 */
+function resolveLocale(v) {
+	return v === "zh" ? "zh" : "en";
+}
+//#endregion
 //#region src/gate.ts
-const FEATURE_UNKNOWN = "当前分支";
 const PROTECTED_ROLES = /* @__PURE__ */ new Set([
 	"integration",
 	"preview",
 	"production",
 	"archive"
 ]);
+/** 判别的默认英文(纯函数裸调用/测试时默认; 运行时由 evaluateCommand 按配置 locale 注入) */
+const defaultT = makeT("en");
 /** 判定分支角色: 优先角色配置, 其次 featurePattern, 其余 other */
 function roleOfBranch(branch, config) {
 	if (!branch) return "other";
@@ -375,97 +542,98 @@ function roleOfBranch(branch, config) {
 function isProtected(role) {
 	return PROTECTED_ROLES.has(role);
 }
-function decide(classified, facts, config) {
+function deny(why, next) {
+	return {
+		kind: "deny",
+		reason: why,
+		next
+	};
+}
+/** 角色名展示: 集成分支(main) 等 */
+function roleLabel(role, t, branch) {
+	const label = t(`role.${role}`);
+	return branch ? `${label}(${branch})` : label;
+}
+function decide(classified, facts, config, t = defaultT) {
 	switch (classified.kind) {
-		case "push": return decidePush(classified, facts, config);
-		case "local-merge": return decideMerge(classified, facts, config);
-		case "pr-create": return decidePrCreate(classified, facts, config);
-		case "pr-merge": return decidePrMerge(classified, facts, config);
-		case "branch-delete": return isProtected(roleOfBranch(classified.branch, config)) ? deny(`受保护分支「${classified.branch}」禁止删除或强推`, "删除/强推请到受保护分支外的 feature 分支上操作; 受保护分支由用户亲手管理") : { kind: "allow" };
+		case "push": return decidePush(classified, facts, config, t);
+		case "local-merge": return decideMerge(classified, facts, config, t);
+		case "pr-create": return decidePrCreate(classified, facts, config, t);
+		case "pr-merge": return decidePrMerge(classified, facts, config, t);
+		case "branch-delete": return isProtected(roleOfBranch(classified.branch, config)) ? deny(t("denyDeleteOrForce.why", { branch: classified.branch ?? "" }), t("denyDeleteOrForce.next")) : { kind: "allow" };
 		case "guard-cli": return { kind: "allow" };
 		case "checkout": return { kind: "allow" };
 		default: return { kind: "allow" };
 	}
 }
-function decidePush(c, facts, config) {
-	if (c.all) return deny("--all/--mirror 推送会包含受保护分支", "请逐分支推送并显式指定 refspec");
+function decidePush(c, facts, config, t) {
+	if (c.all) return deny(t("pushAll.why"), t("pushAll.next"));
 	const dst = c.dst ?? facts.currentBranch;
-	if (dst == null) return deny("无法确定推送目标分支(可能处于 detached HEAD)", "请显式指定 refspec, 如 git push origin <分支名>");
+	if (dst == null) return deny(t("pushDetached.why"), t("pushDetached.next"));
 	const role = roleOfBranch(dst, config);
 	if (isProtected(role)) {
 		const flexRole = role === "integration" ? config.branches.integration : config.branches.preview;
 		if ((role === "integration" || role === "preview") && flexRole?.update === "flexible" && !c.delete) return { kind: "allow" };
-		return deny(c.delete ? `受保护分支「${dst}」禁止删除` : `受保护分支「${dst}」禁止直推${c.force ? "(含强推)" : ""}`, branchNext(dst, config));
+		if (c.delete) return deny(t("pushProtectedDelete.why", { branch: dst }), branchNext(dst, config, t));
+		return deny(t(c.force ? "pushProtectedDirectForce.why" : "pushProtectedDirect.why", { branch: dst }), branchNext(dst, config, t));
 	}
 	return { kind: "allow" };
 }
-function decideMerge(c, facts, config) {
+function decideMerge(c, facts, config, t) {
 	const currentRole = roleOfBranch(facts.currentBranch, config);
 	const source = c.source;
 	const sourceRole = source ? roleOfBranch(source, config) : null;
-	if (currentRole === "production" || currentRole === "archive") return deny(`合入${roleLabel(currentRole, facts.currentBranch)}仅允许用户亲手执行`, "请在你自己终端(或 UI)完成该合并; agent 不能替你操作");
+	if (currentRole === "production" || currentRole === "archive") return deny(t("mergeProtected.why", { role: roleLabel(currentRole, t, facts.currentBranch) }), t("mergeProtected.next"));
 	if (currentRole === "integration" || currentRole === "preview") {
 		if (source == null) return { kind: "allow" };
 		if (sourceRole != null && isProtected(sourceRole)) return { kind: "allow" };
 		if ((currentRole === "integration" ? config.branches.integration : config.branches.preview)?.update === "flexible") return { kind: "allow" };
-		return deny(`${roleLabel(currentRole, facts.currentBranch)}(${facts.currentBranch})禁止本地合入 feature: 须通过 PR/MR`, `先推 feature 分支, 再创建指向 ${facts.currentBranch} 的 PR/MR`);
+		return deny(t("mergeFeature.why", { role: roleLabel(currentRole, t, facts.currentBranch) }), t("mergeFeature.next", { branch: facts.currentBranch ?? "" }));
 	}
 	return { kind: "allow" };
 }
-function decidePrCreate(c, facts, config) {
-	if (c.target == null) return deny("无法确定 PR/MR 目标分支", `请显式指定 --base/--target-branch(如 gh pr create --base ${config.branches.integration.branches[0]})`);
+function decidePrCreate(c, facts, config, t) {
+	if (c.target == null) return deny(t("prCreateNoTarget.why"), t("prCreateNoTarget.next", { base: config.branches.integration.branches[0] ?? "" }));
 	const targetRole = roleOfBranch(c.target, config);
 	const head = facts.currentBranch;
 	const headRole = roleOfBranch(head, config);
-	if (targetRole === "archive") return deny("归档分支(archive)仅用户亲手操作, 不允许创建指向它的 PR/MR", "发布/归档由你自己在终端或 UI 完成");
+	if (targetRole === "archive") return deny(t("prCreateArchive.why"), t("prCreateArchive.next"));
 	if (targetRole === "integration" || targetRole === "preview" || targetRole === "production") {
-		if (headRole !== "feature") return deny(`当前分支(${head ?? FEATURE_UNKNOWN})不是 feature 分支, 不能作为指向${roleLabel(targetRole, c.target)}的 PR/MR 源`, "请从 feature/topic 分支上创建指向集成/预览/生产分支的 PR/MR");
+		if (headRole !== "feature") return deny(t("prCreateHead.why", {
+			head: head ?? t("head.unknown"),
+			role: roleLabel(targetRole, t, c.target)
+		}), t("prCreateHead.next"));
 		return { kind: "allow" };
 	}
 	return { kind: "allow" };
 }
-function decidePrMerge(c, facts, config) {
+function decidePrMerge(c, facts, config, t) {
 	const resolved = facts.resolvePrTarget?.(c.pr) ?? null;
 	const role = resolved?.role ?? null;
 	const head = resolved?.head ?? facts.currentBranch;
 	if (role === "production") {
-		if (config.branches.production?.mergeBy === "user") return deny("合入生产(production)分支仅允许用户亲手点合并", "请在 GitLab/GitHub 的 MR/PR 页面上由你本人点击合并");
+		if (config.branches.production?.mergeBy === "user") return deny(t("prMergeProduction.why"), t("prMergeProduction.next"));
 		return { kind: "allow" };
 	}
-	if (role === "archive") return deny("合入归档分支(archive)仅允许用户亲手执行", "请让用户在自己终端或 UI 完成归档合并");
+	if (role === "archive") return deny(t("prMergeArchive.why"), t("prMergeArchive.next"));
 	if (role === "integration" || role === "preview") return { kind: "allow" };
 	if (role === "feature" || role === "other") return { kind: "allow" };
-	if (head == null) return deny("无法确认 PR/MR 的目标分支", "请确认 gh/glab 可用后重试, 或让用户亲手处理");
+	if (head == null) return deny(t("prMergeUnknown.why"), t("prMergeUnknown.next"));
 	if (roleOfBranch(head, config) === "feature") return { kind: "allow" };
-	return deny("无法确认 PR/MR 目标, 且 head 不是 feature 分支", "请确认平台 CLI 可用, 或让用户亲手处理");
-}
-function deny(reason, next) {
-	return {
-		kind: "deny",
-		reason,
-		next
-	};
-}
-function roleLabel(role, branch) {
-	const map = {
-		integration: "集成分支",
-		preview: "预览分支",
-		production: "生产分支",
-		archive: "归档分支",
-		feature: "feature 分支",
-		other: "普通分支"
-	};
-	return branch ? `${map[role]}(${branch})` : map[role];
+	return deny(t("prMergeHead.why"), t("prMergeHead.next"));
 }
 /** 受保护分支被拦后的下一步引导 */
-function branchNext(branch, config) {
-	if (branch == null) return "请明确目标分支后重试";
-	const base = config.branches.integration.branches[0] ?? "集成分支";
+function branchNext(branch, config, t) {
+	if (branch == null) return t("next.unspecified");
+	const base = config.branches.integration.branches[0] ?? "";
 	switch (roleOfBranch(branch, config)) {
-		case "integration": return `集成分支(${branch})由 PR/MR 合入 feature: 先推 feature 分支, 再 gh pr create --base ${branch} / glab mr create --target-branch ${branch}`;
-		case "preview": return `预览分支(${branch})只收 PR/MR: 从 feature/发布分支创建指向它的 PR/MR(${base} 等集成分支内容先进 feature 发布分支)`;
-		case "production": return `生产分支(${branch})只能 PR/MR, 且合并由你亲手点击`;
-		default: return `归档分支(${branch})仅用户亲手操作`;
+		case "integration": return t("next.integration", { branch });
+		case "preview": return t("next.preview", {
+			branch,
+			base
+		});
+		case "production": return t("next.production", { branch });
+		default: return t("next.archive", { branch });
 	}
 }
 //#endregion
@@ -607,8 +775,11 @@ async function evaluateCommand(command, opts) {
 	const { config } = await loadConfig(opts.repoRoot);
 	if (!config?.enabled) return {
 		outcome: "skipped",
-		segmentCount: 0
+		segmentCount: 0,
+		locale: "en"
 	};
+	const locale = resolveLocale(config.locale);
+	const t = makeT(locale);
 	const branch = opts.currentBranch ?? await currentBranch(runner, opts.repoRoot);
 	const env = {
 		repoRoot: opts.repoRoot,
@@ -625,7 +796,7 @@ async function evaluateCommand(command, opts) {
 			...env,
 			branch: simulatedBranch
 		});
-		const decision = decide(seg, facts, config);
+		const decision = decide(seg, facts, config, t);
 		if (decision.kind === "deny") {
 			await appendAudit(env.repoRoot, {
 				time: Date.now(),
@@ -639,7 +810,8 @@ async function evaluateCommand(command, opts) {
 					why: decision.reason,
 					next: decision.next
 				},
-				segmentCount: segments.length
+				segmentCount: segments.length,
+				locale
 			};
 		}
 		await logCiReference(seg, env);
@@ -647,7 +819,8 @@ async function evaluateCommand(command, opts) {
 	}
 	return {
 		outcome: "allow",
-		segmentCount: segments.length
+		segmentCount: segments.length,
+		locale
 	};
 }
 /** CI 参考(可选适配器): gh pr checks 状态记入审计日志, 查不到自动跳过 */
@@ -685,8 +858,9 @@ function commandText(exec) {
 	const args = exec.arguments;
 	return typeof args?.command === "string" ? args.command : "";
 }
-function formatDeny(why, next) {
-	return `[gitflow-guard] 已拦截: ${why}\n下一步: ${next}`;
+function formatDeny(locale, why, next) {
+	const t = makeT(locale);
+	return `${t("deny.header", { why })}\n${t("deny.next", { next })}`;
 }
 function apply(ctx, pluginConfig = {}) {
 	const toolNames = new Set(pluginConfig.toolNames ?? ["pwsh", "bash"]);
@@ -703,7 +877,7 @@ function apply(ctx, pluginConfig = {}) {
 			});
 			if (result.outcome === "deny" && result.reason) return {
 				kind: "deny",
-				reason: formatDeny(result.reason.why, result.reason.next)
+				reason: formatDeny(result.locale, result.reason.why, result.reason.next)
 			};
 			return next();
 		} catch (e) {
@@ -713,4 +887,4 @@ function apply(ctx, pluginConfig = {}) {
 	});
 }
 //#endregion
-export { name as a, findRepoRoot as c, roleMatches as d, classify as f, formatDeny as i, gitRunner as l, apply as n, stateDir as o, evaluateCommand as r, currentBranch as s, appendAudit as t, loadConfig as u };
+export { name as a, findRepoRoot as c, resolveLocale as d, loadConfig as f, formatDeny as i, gitRunner as l, classify as m, apply as n, stateDir as o, roleMatches as p, evaluateCommand as r, currentBranch as s, appendAudit as t, makeT as u };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "agents-gitflow-guard",
-  "version": "0.0.2",
-  "description": "DSH plugin: a configurable branch-role guard — integration/preview/production/archive, each with its own update rules",
+  "version": "0.0.4",
+  "description": "A configurable branch-role guard for AI coding agents (DSH / Claude Code / Codex) — integration/preview/production/archive, each with its own update rules",
   "license": "MIT",
   "type": "module",
   "main": "lib/index.mjs",
@@ -26,7 +26,10 @@
   "keywords": [
     "dsh",
     "deepseek-harness",
+    "claude-code",
+    "codex",
     "plugin",
+    "hook",
     "gitflow",
     "git",
     "workflow",
@@ -46,7 +49,8 @@
     "build": "tsdown",
     "prepack": "npm run build",
     "test": "vitest run",
-    "typecheck": "tsc --noEmit"
+    "typecheck": "tsc --noEmit",
+    "verify:matrix": "npm run build && node scripts/verify-matrix.mjs"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",