ai-helper-agent 1.14.4 → 1.14.5

package/bin/agent.js

@@ -6,6 +6,7 @@ import { existsSync, readFileSync, writeFileSync, unlinkSync, mkdirSync } from '
 import { spawn } from 'child_process';
 import { homedir } from 'os';
 import { fileURLToPath } from 'url';
+import { detectSystemLang } from '../src/sys-lang.js';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const AGENT_DIR = join(homedir(), '.ai-helper-agent');
@@ -25,7 +26,7 @@ function loadCliTranslations() {
 }
 
 function resolveLang(args) {
-  // Priority: --lang flag > AI_HELPER_LANG env > default 'en'
+  // Priority: --lang flag > AI_HELPER_LANG env > system language detection > default 'en'
   for (let i = 0; i < args.length; i++) {
     if (args[i] === '--lang' && args[i + 1]) {
       const val = args[i + 1].toLowerCase();
@@ -34,7 +35,7 @@ function resolveLang(args) {
   }
   const envLang = process.env.AI_HELPER_LANG;
   if (envLang && (envLang === 'zh' || envLang === 'en')) return envLang;
-  return 'en';
+  return detectSystemLang();
 }
 
 // Remove --lang <val> from args to avoid passing to server

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-helper-agent",
-  "version": "1.14.4",
+  "version": "1.14.5",
   "description": "AI Helper Agent - Local file access and system command execution proxy for Chrome extension / AI Helper 代理服务，为 Chrome 扩展提供本地文件读写和系统命令执行",
   "type": "module",
   "main": "./src/server.js",

package/src/auth.js

@@ -2,9 +2,10 @@
 import crypto from 'crypto';
 import { loadConfig, loadPairings, savePairing } from './config.js';
 import { t as translate } from './i18n.js';
+import { detectSystemLang } from './sys-lang.js';
 
-// 默认使用 zh 语言（独立调用场景）；server.js 调用时会传入 req 的 lang
-let currentLang = 'zh';
+// 默认跟随系统语言（独立调用场景）；server.js 调用时会传入 req 的 lang
+let currentLang = detectSystemLang();
 
 /**
  * 设置 auth 模块当前使用的语言（由 server.js 在请求入口处调用）
@@ -77,7 +78,7 @@ function startPairCodeRotation() {
 
   // Generate a pairing code immediately on startup (for initial pairing; lastAuthTime=0 ensures refresh)
   currentPairCode = generatePairCode();
-  console.log(`\n[Agent] Pairing code: ${currentPairCode}\n`);
+  console.log(`\n[Agent] ${tr('auth.pairCode', { code: currentPairCode })}\n`);
 
   if (pairCodeTimer) clearInterval(pairCodeTimer);
   pairCodeTimer = setInterval(() => {
@@ -89,14 +90,14 @@ function startPairCodeRotation() {
     if (hasPairings && isRecentlyActive) {
       if (currentPairCode !== null) {
         currentPairCode = null;
-        console.log('[Agent] Active connection detected, stopping pairing code rotation');
+        console.log(`[Agent] ${tr('auth.activeConnectionDetected')}`);
       }
       return;
     }
 
     // No pairing or extension offline timeout: rotate pairing code to allow new extension pairing
     currentPairCode = generatePairCode();
-    console.log(`[Agent] Pairing code updated: ${currentPairCode}`);
+    console.log(`[Agent] ${tr('auth.pairCodeUpdated', { code: currentPairCode })}`);
   }, ttl);
 }
 
@@ -149,7 +150,7 @@ async function handlePairRequest(code, extensionId, tFn) {
       pairFailCount = 0;
       // 锁定时立即轮换配对码，使攻击者已观测到的配对码失效
       currentPairCode = generatePairCode();
-      console.log('[Agent] Too many failed pairing attempts, locked for 60s and pairing code rotated');
+      console.log(`[Agent] ${tr('auth.tooManyFailedAttempts')}`);
     }
     return { success: false, error: tr('auth.invalidCode', undefined, tFn) };
   }
@@ -161,7 +162,7 @@ async function handlePairRequest(code, extensionId, tFn) {
   if (pairings[extensionId]) {
     // 一次性使用：成功后立即轮换配对码
     currentPairCode = generatePairCode();
-    console.log('[Agent] Pairing code verified, code rotated (one-time use)');
+    console.log(`[Agent] ${tr('auth.codeVerifiedRotated')}`);
     return { success: true, token: pairings[extensionId].token, message: tr('auth.alreadyPaired', undefined, tFn) };
   }
   // 生成新 token 并保存
@@ -173,7 +174,7 @@ async function handlePairRequest(code, extensionId, tFn) {
   }
   // 一次性使用：成功后立即轮换配对码
   currentPairCode = generatePairCode();
-  console.log('[Agent] Pairing successful, pairing code rotated (one-time use)');
+  console.log(`[Agent] ${tr('auth.pairSuccessRotated')}`);
   return { success: true, token, message: tr('auth.pairSuccess', undefined, tFn) };
 }
 

package/src/i18n.js

@@ -5,6 +5,7 @@
 import { readFileSync } from 'fs';
 import { join, dirname } from 'path';
 import { fileURLToPath } from 'url';
+import { detectSystemLang } from './sys-lang.js';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 
@@ -14,8 +15,12 @@ const translations = {
   en: JSON.parse(readFileSync(join(__dirname, 'locales', 'en.json'), 'utf-8')),
 };
 
-// Default language: check env var (set by CLI), fallback to 'en'
-const DEFAULT_LANG = (process.env.AI_HELPER_LANG === 'zh') ? 'zh' : 'en';
+// Default language: --lang / AI_HELPER_LANG env (set by CLI) > system language detection > 'en'
+const DEFAULT_LANG = (() => {
+  const env = process.env.AI_HELPER_LANG;
+  if (env === 'zh' || env === 'en') return env;
+  return detectSystemLang();
+})();
 const SUPPORTED_LANGS = Object.keys(translations);
 
 /**

package/src/locales/cli.json

@@ -15,7 +15,7 @@
     "optPort": "  --port <端口>      设置监听端口 (默认: 18910)",
     "optHost": "  --host <地址>      设置监听地址 (默认: 127.0.0.1)",
     "optWorkdir": "  --workdir <目录>   设置工作目录 (默认: 当前目录)",
-    "optLang": "  --lang <语言>      设置界面语言 (zh/en, 默认: en)",
+    "optLang": "  --lang <语言>      设置界面语言 (zh/en, 默认: 自动检测系统语言)",
     "examples": "示例:",
     "configReadFailed": "配置文件读取失败",
     "configDirCreateFailed": "无法创建配置目录",
@@ -82,7 +82,7 @@
     "optPort": "  --port <port>      Set listening port (default: 18910)",
     "optHost": "  --host <address>   Set listening address (default: 127.0.0.1)",
     "optWorkdir": "  --workdir <dir>    Set working directory (default: current dir)",
-    "optLang": "  --lang <lang>      Set UI language (zh/en, default: en)",
+    "optLang": "  --lang <lang>      Set UI language (zh/en, default: detect system language)",
     "examples": "Examples:",
     "configReadFailed": "Failed to read config file",
     "configDirCreateFailed": "Cannot create config directory",

package/src/locales/en.json

@@ -106,7 +106,13 @@
     "invalidCode": "Invalid pairing code",
     "alreadyPaired": "Already paired, returning existing token",
     "saveFailed": "Pairing save failed: {message}",
-    "pairSuccess": "Pairing successful"
+    "pairSuccess": "Pairing successful",
+    "pairCode": "Pairing code: {code}",
+    "pairCodeUpdated": "Pairing code updated: {code}",
+    "activeConnectionDetected": "Active connection detected, stopping pairing code rotation",
+    "tooManyFailedAttempts": "Too many failed pairing attempts, locked for 60s and pairing code rotated",
+    "codeVerifiedRotated": "Pairing code verified, code rotated (one-time use)",
+    "pairSuccessRotated": "Pairing successful, pairing code rotated (one-time use)"
   },
   "exec": {
     "requestTimeout": "Request timeout ({ms}ms)",
@@ -149,7 +155,15 @@
     "entryNotFound": "Trash entry does not exist or has expired",
     "fileNotFound": "Trash file no longer exists",
     "originalPathOccupied": "Original location already has a file: {path}",
-    "restoreFailed": "Restore failed: {message}"
+    "restoreFailed": "Restore failed: {message}",
+    "cannotCreateDir": "Cannot create trash directory: {message}",
+    "cleanedUp": "Cleaned up {count} expired trash entries",
+    "movedToTrashLog": "Moved to trash: {source} -> {target} ({size} bytes, {type})",
+    "typeDirectory": "directory",
+    "typeFile": "file",
+    "restoredLog": "Restored: {path}",
+    "periodicCleanStarted": "Periodic cleanup started (interval: 6 hours)",
+    "periodicCleanError": "Periodic cleanup error: {message}"
   },
   "search": {
     "pathNotExist": "Search path does not exist",
@@ -166,9 +180,24 @@
     "execError": "Execution error: {message}",
     "execIdNotFound": "Execution ID \"{execId}\" does not exist",
     "validationFailed": "Validation failed: {errors}",
+    "loadFailed": "Load failed: {message}",
+    "registered": "{count} registered ({workflow} Workflow + {agent} Agent), {enabled} enabled",
     "saveFailed": "Save failed: {message}",
     "deleteFailed": "Delete failed: {message}",
     "skillNotFound": "Skill \"{name}\" does not exist",
+    "skillNotExistOrDisabled": "Skill \"{name}\" does not exist or is not enabled",
+    "agentSkillNotRunnable": "\"{name}\" is an Agent Skill and cannot be executed directly. Agent Skills are called autonomously by the AI during conversations based on the SKILL.md description.",
+    "skillNotAgentSkill": "Skill \"{name}\" does not exist or is not an Agent Skill",
+    "builtinNotDeletable": "\"{name}\" is a built-in skill and cannot be deleted",
+    "skillPromptHeader": "## Available Skills",
+    "skillPromptIntro": "The following Agent Skills (AI capability extensions) are available. When a user request closely matches a skill, use the `agent_skill` tool (action: load) to load the full instructions for that skill, then complete the task autonomously following the instructions.",
+    "skillPromptStrategy": "**Usage strategy**:",
+    "skillPromptStrategy1": "- Only load a skill when the user request clearly matches its description; do not load skills for general programming/technical questions",
+    "skillPromptStrategy2": "- Load only one skill at a time, then follow the SKILL.md instructions after loading",
+    "skillPromptStrategy3": "- Loading skills consumes significant tokens, avoid loading unnecessarily",
+    "skillPromptDesc": "**Description**: {description}",
+    "skillPromptResources": "**Available resources**: {resources}",
+    "skillPromptWorkdir": "[Skill working directory: {path}]\n\n{prompt}",
     "missingNameField": "Missing name field",
     "missingPromptContent": "Missing prompt content",
     "missingDescriptionField": "Missing description field",
@@ -209,7 +238,11 @@
     "stdioRequiresCommand": "stdio transport requires a command",
     "toolCallError": "Tool call error: {message}",
     "serverNotConnected": "MCP Server \"{name}\" not connected",
-    "toolCallFailed": "Tool call failed"
+    "serverNotFound": "MCP Server \"{name}\" does not exist",
+    "toolCallFailed": "Tool call failed",
+    "serversConnected": "{count} MCP servers connected",
+    "someFailed": "{connected}/{total} connected, {failed} failed: {list}",
+    "callingTool": "Calling tool: {serverId}/{toolName}"
   },
   "server": {
     "requestException": "Request processing error",

package/src/locales/zh.json

@@ -106,7 +106,13 @@
     "invalidCode": "配对码无效",
     "alreadyPaired": "已配对，返回现有 token",
     "saveFailed": "配对保存失败: {message}",
-    "pairSuccess": "配对成功"
+    "pairSuccess": "配对成功",
+    "pairCode": "配对码: {code}",
+    "pairCodeUpdated": "配对码已更新: {code}",
+    "activeConnectionDetected": "检测到活跃连接，停止配对码轮换",
+    "tooManyFailedAttempts": "配对失败次数过多，已锁定 60 秒并轮换配对码",
+    "codeVerifiedRotated": "配对码验证成功，配对码已轮换（一次性使用）",
+    "pairSuccessRotated": "配对成功，配对码已轮换（一次性使用）"
   },
   "exec": {
     "requestTimeout": "请求超时 ({ms}ms)",
@@ -149,7 +155,15 @@
     "entryNotFound": "回收站条目不存在或已过期",
     "fileNotFound": "回收站文件已不存在",
     "originalPathOccupied": "原位置已有文件: {path}",
-    "restoreFailed": "恢复失败: {message}"
+    "restoreFailed": "恢复失败: {message}",
+    "cannotCreateDir": "无法创建回收站目录: {message}",
+    "cleanedUp": "已清理 {count} 个过期的回收站条目",
+    "movedToTrashLog": "已移至回收站: {source} -> {target} ({size} 字节, {type})",
+    "typeDirectory": "目录",
+    "typeFile": "文件",
+    "restoredLog": "已恢复: {path}",
+    "periodicCleanStarted": "定期清理已启动（间隔: 6 小时）",
+    "periodicCleanError": "定期清理异常: {message}"
   },
   "search": {
     "pathNotExist": "搜索路径不存在",
@@ -166,9 +180,24 @@
     "execError": "执行异常: {message}",
     "execIdNotFound": "执行 ID \"{execId}\" 不存在",
     "validationFailed": "校验失败: {errors}",
+    "loadFailed": "加载失败: {message}",
+    "registered": "已注册 {count} 个技能（{workflow} 个 Workflow + {agent} 个 Agent），启用 {enabled} 个",
     "saveFailed": "保存失败: {message}",
     "deleteFailed": "删除失败: {message}",
     "skillNotFound": "Skill \"{name}\" 不存在",
+    "skillNotExistOrDisabled": "Skill \"{name}\" 不存在或未启用",
+    "agentSkillNotRunnable": "\"{name}\" 是 Agent Skill，无法直接执行。Agent Skill 由 AI 在对话中根据 SKILL.md 描述自主调用。",
+    "skillNotAgentSkill": "Skill \"{name}\" 不存在或不是 Agent Skill",
+    "builtinNotDeletable": "\"{name}\" 是内置技能，不可删除",
+    "skillPromptHeader": "## 可用技能 (Skills)",
+    "skillPromptIntro": "以下是可用的 Agent Skill（AI 能力扩展）列表。当用户需求与某个技能高度匹配时，使用 `agent_skill` 工具（action: load）加载该技能的完整说明，然后根据说明自主完成任务。",
+    "skillPromptStrategy": "**使用策略**：",
+    "skillPromptStrategy1": "- 仅在用户需求明确匹配技能描述时才加载，不要为一般性的编程/技术问题加载技能",
+    "skillPromptStrategy2": "- 一次只加载一个技能，加载后根据 SKILL.md 说明执行",
+    "skillPromptStrategy3": "- 技能加载会消耗较多 token，避免无故加载",
+    "skillPromptDesc": "**描述**: {description}",
+    "skillPromptResources": "**可用资源**: {resources}",
+    "skillPromptWorkdir": "[技能工作目录: {path}]\n\n{prompt}",
     "missingNameField": "缺少 name 字段",
     "missingPromptContent": "缺少 prompt 内容",
     "missingDescriptionField": "缺少 description 字段",
@@ -209,7 +238,11 @@
     "stdioRequiresCommand": "stdio 传输需要提供 command",
     "toolCallError": "工具调用异常: {message}",
     "serverNotConnected": "MCP Server \"{name}\" 未连接",
-    "toolCallFailed": "工具调用失败"
+    "serverNotFound": "MCP Server \"{name}\" 不存在",
+    "toolCallFailed": "工具调用失败",
+    "serversConnected": "{count} 个 MCP 服务器已连接",
+    "someFailed": "已连接 {connected}/{total} 个服务器，{failed} 个失败: {list}",
+    "callingTool": "调用工具: {serverId}/{toolName}"
   },
   "server": {
     "requestException": "请求处理异常",

package/src/logger.js

@@ -2,6 +2,7 @@
 import { appendFileSync, mkdirSync, existsSync, readdirSync, statSync, unlinkSync, readFileSync } from 'fs';
 import { join } from 'path';
 import { homedir } from 'os';
+import { detectSystemLang } from './sys-lang.js';
 
 const LOG_DIR = join(homedir(), '.ai-helper-agent', 'logs');
 const MAX_LOG_FILES = 30;               // Max log files to retain
@@ -28,7 +29,11 @@ const CATEGORY_LABELS_EN = {
   auth: 'Auth', fs: 'File', exec: 'Exec', security: 'Security', system: 'System'
 };
 
-let currentLocale = (process.env.AI_HELPER_LANG === 'zh') ? 'zh' : 'en';
+let currentLocale = (() => {
+  const env = process.env.AI_HELPER_LANG;
+  if (env === 'zh' || env === 'en') return env;
+  return detectSystemLang();
+})();
 
 /**
  * Set locale for log category labels

package/src/mcp/mcp-config.js

@@ -3,6 +3,10 @@
 import { readFileSync, writeFileSync, existsSync, statSync } from 'fs';
 import { join } from 'path';
 import { homedir } from 'os';
+import { t as translate, parseAcceptLanguage } from '../i18n.js';
+
+const LANG = parseAcceptLanguage();
+const T = (key, params) => translate(LANG, key, params);
 
 const AGENT_DIR = join(homedir(), '.ai-helper-agent');
 const MCP_CONFIG_FILE = join(AGENT_DIR, 'mcp_servers.json');
@@ -100,7 +104,7 @@ export async function removeMcpServer(serverId) {
   const config = loadMcpConfig();
   const idx = config.servers.findIndex(s => s.id === serverId);
   if (idx < 0) {
-    return { success: false, error: `MCP Server "${serverId}" 不存在` };
+    return { success: false, error: T('mcp.serverNotFound', { name: serverId }) };
   }
   config.servers.splice(idx, 1);
   await saveMcpConfig(config);
@@ -114,7 +118,7 @@ export async function toggleMcpServer(serverId, enabled) {
   const config = loadMcpConfig();
   const server = config.servers.find(s => s.id === serverId);
   if (!server) {
-    return { success: false, error: `MCP Server "${serverId}" 不存在` };
+    return { success: false, error: T('mcp.serverNotFound', { name: serverId }) };
   }
   server.enabled = enabled;
   await saveMcpConfig(config);

package/src/mcp/registry.js

@@ -2,6 +2,19 @@
 // 管理所有 MCP Client 实例，提供统一的工具发现和调用接口
 import { McpClient } from './client.js';
 import { loadMcpConfig, addMcpServer, removeMcpServer, toggleMcpServer } from './mcp-config.js';
+import { t as translate, parseAcceptLanguage } from '../i18n.js';
+
+// 默认跟随系统语言；server.js 启动时可用 setMcpRegistryLang 同步 serverLang
+let LANG = parseAcceptLanguage();
+const T = (key, params) => translate(LANG, key, params);
+
+/**
+ * 设置 MCP 注册表当前使用的语言（由 server.js 在启动时调用）
+ * @param {string} lang - 语言代码（'zh' | 'en'）
+ */
+export function setMcpRegistryLang(lang) {
+  if (lang) LANG = lang;
+}
 
 // 已连接的 MCP Client 映射表: serverId → McpClient
 const clients = new Map();
@@ -33,9 +46,9 @@ export async function initializeMcpRegistry() {
   if (config.servers.length > 0) {
     if (failed > 0) {
       const failedList = failedServers.map(fs => `${fs.id}(${fs.error})`).join(', ');
-      console.warn(`[MCP] ${connected}/${config.servers.length} connected, ${failed} failed: ${failedList}`);
+      console.warn(`[MCP] ${T('mcp.someFailed', { connected, total: config.servers.length, failed, list: failedList })}`);
     } else if (connected > 0) {
-      console.log(`[MCP] ${connected} servers connected`);
+      console.log(`[MCP] ${T('mcp.serversConnected', { count: connected })}`);
     }
   }
   return { connected, failed };
@@ -103,13 +116,13 @@ export function getMcpTools(serverId) {
 export async function callMcpTool(serverId, toolName, args) {
   const client = clients.get(serverId);
   if (!client) {
-    return { success: false, error: `MCP Server "${serverId}" 不存在` };
+    return { success: false, error: T('mcp.serverNotFound', { name: serverId }) };
   }
   if (!client.connected) {
-    return { success: false, error: `MCP Server "${serverId}" 未连接` };
+    return { success: false, error: T('mcp.serverNotConnected', { name: serverId }) };
   }
 
-  console.log(`[MCP Registry] Calling tool: ${serverId}/${toolName}`, args);
+  console.log(`[MCP Registry] ${T('mcp.callingTool', { serverId, toolName })}`, args);
   const result = await client.callTool(toolName, args);
   return result;
 }
@@ -121,7 +134,7 @@ export async function connectMcpServer(serverId) {
   const config = loadMcpConfig();
   const server = config.servers.find(s => s.id === serverId);
   if (!server) {
-    return { success: false, error: `MCP Server "${serverId}" 不存在` };
+    return { success: false, error: T('mcp.serverNotFound', { name: serverId }) };
   }
 
   // 先断开已有连接

package/src/server.js

@@ -15,7 +15,7 @@ import { verifyToken, startPairCodeRotation, stopPairCodeRotation, handlePairReq
 import { checkPath, checkCommand, normalizePathFormat, setSecurityLang } from './security.js';
 import { moveToTrash, restoreFromTrash, listTrash, startPeriodicCleanup, stopPeriodicCleanup, setTrashLang } from './trash.js';
 import { executeCommand, executeCommandSync, addWsClient, disconnectWsClient, killProcess, getRunningProcesses, setExecutorLang } from './executor.js';
-import { setConsoleOutput, logAuth, logFs, logExec, logSecurity, logSystem, logError, queryLogs, getLogDates } from './logger.js';
+import { setConsoleOutput, setLoggerLocale, logAuth, logFs, logExec, logSecurity, logSystem, logError, queryLogs, getLogDates } from './logger.js';
 import { initSearchTools, getSearchToolsAvailable, searchFiles, searchContent, setSearchLang } from './search.js';
 import {
   initializeMcpRegistry,
@@ -28,7 +28,8 @@ import {
   loadMcpConfig,
   addMcpServer,
   removeMcpServer,
-  toggleMcpServer
+  toggleMcpServer,
+  setMcpRegistryLang
 } from './mcp/registry.js';
 import {
   initializeSkillRegistry,
@@ -41,7 +42,8 @@ import {
   reloadSkills,
   getAgentSkillPrompts,
   getAgentSkillPrompt,
-  getSkillsDir
+  getSkillsDir,
+  setSkillRegistryLang
 } from './skill/registry.js';
 import { saveMarkdownSkill, importMarkdownSkillFromZip, importMarkdownSkillFromUrl, setSkillLoaderLang } from './skill/loader.js';
 import { setSkillExecutorLang } from './skill/executor.js';
@@ -842,7 +844,7 @@ export function startServer() {
         // 禁止设为 Agent 系统目录本身（防敏感文件暴露）
         const AGENT_DIR_PATH = join(homedir(), '.ai-helper-agent');
         if (resolvedWorkdir === AGENT_DIR_PATH) {
-          logSecurity('workdir_switch_blocked', { path: resolvedWorkdir, reason: '禁止设为 Agent 系统目录' });
+          logSecurity('workdir_switch_blocked', { path: resolvedWorkdir, reason: t('error.workdirIsSystemDir') });
           return jsonResponse(res, 403, { success: false, error: t('error.workdirIsSystemDir') });
         }
 
@@ -2036,6 +2038,22 @@ export function startServer() {
   server.listen(port, host, () => {
     console.log(`[Agent] ${ln('httpStarted', { host, port })}`);
     console.log(`[Agent] ${ln('wsStarted', { host, port })}`);
+
+    // 同步 server 级语言到各子模块，确保启动日志语言一致（--lang / AI_HELPER_LANG / 系统检测）
+    setLoggerLocale(serverLang);
+    setAuthLang(serverLang);
+    setTrashLang(serverLang);
+    setConfigLang(serverLang);
+    setExecutorLang(serverLang);
+    setSecurityLang(serverLang);
+    setSearchLang(serverLang);
+    setSkillLoaderLang(serverLang);
+    setSkillRegistryLang(serverLang);
+    setSkillExecutorLang(serverLang);
+    setMarkdownLoaderLang(serverLang);
+    setMcpRegistryLang(serverLang);
+    setMcpClientLang(serverLang);
+
     startPairCodeRotation();
 
     // 启动回收站定期清理（每6小时）+ 启动时清理一次过期文件

package/src/skill/loader.js

@@ -7,9 +7,10 @@ import { homedir } from 'os';
 import { loadAllMarkdownSkills, saveMarkdownSkill, deleteMarkdownSkillDir, importMarkdownSkillFromZip, importMarkdownSkillFromUrl } from './markdown-loader.js';
 import { SKILL_CREATOR_SEED_MD, SKILL_CREATOR_DIR } from './skill-creator-seed.js';
 import { t as translate } from '../i18n.js';
+import { detectSystemLang } from '../sys-lang.js';
 
-// 当前模块使用的语言（由 server.js 在请求入口处设置）
-let currentLang = 'en';
+// 当前模块使用的语言（默认跟随系统语言；server.js 在请求入口处设置）
+let currentLang = detectSystemLang();
 
 /**
  * 设置 skill loader 模块当前使用的语言（由 server.js 在请求入口处调用）
@@ -151,7 +152,7 @@ function loadSkillFile(filePath) {
 
     const validation = validateWorkflowSkill(skill);
     if (!validation.valid) {
-      console.warn(`[Skill Loader] "${filePath}" validation failed:`, validation.errors.join(', '));
+      console.warn(`[Skill Loader] "${filePath}" ${tr('skill.validationFailed', { errors: validation.errors.join(', ') })}`);
       return null;
     }
 
@@ -160,7 +161,7 @@ function loadSkillFile(filePath) {
     skill.type = 'workflow';
     return skill;
   } catch (err) {
-    console.warn(`[Skill Loader] Load "${filePath}" failed:`, err.message);
+    console.warn(`[Skill Loader] "${filePath}" ${tr('skill.loadFailed', { message: err.message })}`);
     return null;
   }
 }

package/src/skill/markdown-loader.js

@@ -1,9 +1,8 @@
 // skill/markdown-loader.js - Markdown Skill 加载器
 // 扫描子目录中的 SKILL.md，解析 YAML frontmatter 和正文内容
 import { readFileSync, readdirSync, existsSync, statSync, writeFileSync, mkdirSync, rmSync, cpSync } from 'fs';
-import { join, basename, extname, normalize, sep } from 'path';
-import { execFile } from 'child_process';
-import { promisify } from 'util';
+import { join, basename, extname, normalize, sep, dirname } from 'path';
+import { inflateRawSync } from 'zlib';
 import { randomBytes } from 'crypto';
 import { tmpdir } from 'os';
 import { lookup as dnsLookup } from 'dns/promises';
@@ -11,8 +10,6 @@ import https from 'https';
 import http from 'http';
 import { t as translate } from '../i18n.js';
 
-const execFileAsync = promisify(execFile);
-
 // 当前模块使用的语言（由 server.js 在请求入口处设置）
 let currentLang = 'zh';
 
@@ -365,6 +362,96 @@ function sanitizeSkillName(name) {
   return name;
 }
 
+/**
+ * 纯 JavaScript ZIP 解压，替换外部命令（powershell/unzip），消除 spawn EPERM 问题
+ * 支持 stored（无压缩）和 deflate（压缩方法 8）两种方式
+ * 内置路径穿越安全校验
+ * @param {Buffer} zipBuffer - ZIP 文件内容
+ * @param {string} destDir - 解压目标目录
+ * @throws {Error} 解压或安全校验失败时抛出
+ */
+function extractZipPureJs(zipBuffer, destDir) {
+  const EOCD_SIG = 0x06054b50;
+  const CD_SIG = 0x02014b50;
+  const LFH_SIG = 0x04034b50;
+
+  // 1. 从末尾反向扫描 EOCD（End of Central Directory）
+  let eocdOffset = -1;
+  const maxComment = Math.min(65535, zipBuffer.length - 22);
+  for (let i = zipBuffer.length - 22; i >= Math.max(0, zipBuffer.length - 22 - maxComment); i--) {
+    if (zipBuffer.readUInt32LE(i) === EOCD_SIG) {
+      eocdOffset = i;
+      break;
+    }
+  }
+  if (eocdOffset === -1) throw new Error('Invalid ZIP: EOCD not found');
+
+  // 2. 读取 Central Directory 元信息
+  const cdOffset = zipBuffer.readUInt32LE(eocdOffset + 16);
+  const cdSize  = zipBuffer.readUInt32LE(eocdOffset + 12);
+  const totalEntries = zipBuffer.readUInt16LE(eocdOffset + 8);
+
+  // 3. 解析 Central Directory 条目，收集文件信息
+  let cdPos = cdOffset;
+  const entries = [];
+
+  for (let i = 0; i < totalEntries; i++) {
+    if (zipBuffer.readUInt32LE(cdPos) !== CD_SIG) throw new Error('Invalid central directory entry');
+
+    const compressionMethod   = zipBuffer.readUInt16LE(cdPos + 10);
+    const compressedSize      = zipBuffer.readUInt32LE(cdPos + 20);
+    const uncompressedSize    = zipBuffer.readUInt32LE(cdPos + 24);
+    const fileNameLen         = zipBuffer.readUInt16LE(cdPos + 28);
+    const extraLen            = zipBuffer.readUInt16LE(cdPos + 30);
+    const commentLen          = zipBuffer.readUInt16LE(cdPos + 32);
+    const localHeaderOffset   = zipBuffer.readUInt32LE(cdPos + 42);
+
+    const fileName = zipBuffer.slice(cdPos + 46, cdPos + 46 + fileNameLen).toString('utf8');
+
+    entries.push({ fileName, compressionMethod, localHeaderOffset, compressedSize, uncompressedSize });
+
+    cdPos += 46 + fileNameLen + extraLen + commentLen;
+  }
+
+  // 4. 逐文件解压并写入磁盘
+  for (const entry of entries) {
+    // 跳过目录条目（以 / 结尾）
+    if (entry.fileName.endsWith('/') || entry.fileName.endsWith('\\')) continue;
+
+    // 路径穿越安全校验：拒绝 .. 或绝对路径
+    const normalizedName = normalize(entry.fileName).replace(/^[/\\]+/, '');
+    if (normalizedName.startsWith('..') || entry.fileName.startsWith('/')) {
+      throw new Error(`Path traversal detected: ${entry.fileName}`);
+    }
+
+    // 读取本地文件头（Local File Header）
+    const lfh = entry.localHeaderOffset;
+    if (zipBuffer.readUInt32LE(lfh) !== LFH_SIG) throw new Error(`Invalid local file header for: ${entry.fileName}`);
+
+    const lfhFileNameLen = zipBuffer.readUInt16LE(lfh + 26);
+    const lfhExtraLen    = zipBuffer.readUInt16LE(lfh + 28);
+    const dataOffset     = lfh + 30 + lfhFileNameLen + lfhExtraLen;
+
+    // 根据压缩方法提取数据
+    let fileData;
+    if (entry.compressionMethod === 0) {
+      // Stored（无压缩）
+      fileData = zipBuffer.slice(dataOffset, dataOffset + entry.uncompressedSize);
+    } else if (entry.compressionMethod === 8) {
+      // Deflate 压缩（zlib inflateRawSync 可直接解压）
+      const compressed = zipBuffer.slice(dataOffset, dataOffset + entry.compressedSize);
+      fileData = inflateRawSync(compressed);
+    } else {
+      throw new Error(`Unsupported compression method ${entry.compressionMethod} for: ${entry.fileName}`);
+    }
+
+    // 写入目标文件
+    const destPath = join(destDir, normalizedName);
+    mkdirSync(dirname(destPath), { recursive: true });
+    writeFileSync(destPath, fileData);
+  }
+}
+
 /**
  * 从 Zip 文件导入 Skill
  * 要求 zip 包内有一个顶层目录，目录中包含 SKILL.md
@@ -375,24 +462,12 @@ function sanitizeSkillName(name) {
  */
 export async function importMarkdownSkillFromZip(skillsDir, zipBuffer, skillName) {
   const tmpDir = join(tmpdir(), `ai-helper-skill-import-${Date.now()}-${randomBytes(4).toString('hex')}`);
-  const tmpZip = join(tmpdir(), `ai-helper-skill-${Date.now()}-${randomBytes(4).toString('hex')}.zip`);
 
   try {
     mkdirSync(tmpDir, { recursive: true });
-    writeFileSync(tmpZip, zipBuffer);
-
-    // 解压到临时目录（跨平台：Windows 用 PowerShell Expand-Archive，Unix 用 unzip）
-    if (process.platform === 'win32') {
-      // PowerShell 单引号转义：路径中的单引号用两个单引号表示（tmpZip/tmpDir 由程序生成，正常不含单引号）
-      const esc = (s) => s.replace(/'/g, "''");
-      await execFileAsync('powershell.exe',
-        ['-NoProfile', '-NonInteractive', '-Command',
-         `Expand-Archive -LiteralPath '${esc(tmpZip)}' -DestinationPath '${esc(tmpDir)}' -Force`],
-        { timeout: 30000, windowsHide: true });
-    } else {
-      // execFile 数组参数，不经 shell，杜绝命令注入
-      await execFileAsync('unzip', ['-o', tmpZip, '-d', tmpDir], { timeout: 30000, windowsHide: true });
-    }
+
+    // 纯 JavaScript ZIP 解压（无需外部命令，消除 spawn EPERM）
+    extractZipPureJs(zipBuffer, tmpDir);
 
     // 查找 SKILL.md
     const entries = readdirSync(tmpDir);
@@ -445,7 +520,7 @@ export async function importMarkdownSkillFromZip(skillsDir, zipBuffer, skillName
       rmSync(destDir, { recursive: true, force: true });
     }
 
-    // 复制（跨平台：fs.cpSync 替代 cp -r，Windows 无 cp 命令；destDir 已被 rmSync 清空）
+    // 复制（跨平台：fs.cpSync 替代 cp -r，Windows 无 cp 命令）
     cpSync(skillDir, destDir, { recursive: true });
 
     // 重新加载
@@ -457,7 +532,6 @@ export async function importMarkdownSkillFromZip(skillsDir, zipBuffer, skillName
     // 清理临时文件
     try {
       rmSync(tmpDir, { recursive: true, force: true });
-      if (existsSync(tmpZip)) rmSync(tmpZip);
     } catch { /* ignore cleanup errors */ }
   }
 }

package/src/skill/registry.js

@@ -5,6 +5,19 @@ import { executeSkill } from './executor.js';
 import { SKILLS_DIR } from './loader.js';
 import { readFileSync, writeFileSync, existsSync } from 'fs';
 import { join, basename, dirname } from 'path';
+import { t as translate, parseAcceptLanguage } from '../i18n.js';
+
+// 默认跟随系统语言；server.js 启动时可用 setSkillRegistryLang 同步 serverLang
+let LANG = parseAcceptLanguage();
+const T = (key, params) => translate(LANG, key, params);
+
+/**
+ * 设置 Skill 注册表当前使用的语言（由 server.js 在启动时调用）
+ * @param {string} lang - 语言代码（'zh' | 'en'）
+ */
+export function setSkillRegistryLang(lang) {
+  if (lang) LANG = lang;
+}
 
 // Skill 映射表: name → skill定义
 const skills = new Map();
@@ -37,7 +50,7 @@ function saveDisabledState(disabledSet) {
   try {
     writeFileSync(DISABLED_STATE_FILE, JSON.stringify({ disabled: [...disabledSet] }, null, 2), 'utf-8');
   } catch (e) {
-    console.error('[Skill Registry] Cannot save disabled state:', e.message);
+    console.error(`[Skill Registry] ${T('skill.saveFailed', { message: e.message })}`);
   }
 }
 
@@ -62,7 +75,7 @@ function saveBuiltinState(state) {
   try {
     writeFileSync(BUILTIN_STATE_FILE, JSON.stringify(state, null, 2), 'utf-8');
   } catch (e) {
-    console.error('[Skill Registry] Cannot save builtin skill state:', e.message);
+    console.error(`[Skill Registry] ${T('skill.saveFailed', { message: e.message })}`);
   }
 }
 
@@ -123,7 +136,7 @@ export function initializeSkillRegistry() {
   const enabledCount = [...skills.values()].filter(s => s.enabled !== false).length;
 
   if (skills.size > 0) {
-    console.log(`[Skill] ${skills.size} registered (${workflowCount} Workflow + ${agentCount} Agent), ${enabledCount} enabled`);
+    console.log(`[Skill] ${T('skill.registered', { count: skills.size, workflow: workflowCount, agent: agentCount, enabled: enabledCount })}`);
   }
   return skills.size;
 }
@@ -181,7 +194,7 @@ export function getSkill(name) {
 export async function runSkill(name, params = {}, onStepUpdate) {
   const skill = skills.get(name);
   if (!skill) {
-    return { success: false, error: `Skill "${name}" 不存在或未启用` };
+    return { success: false, error: T('skill.skillNotExistOrDisabled', { name }) };
   }
 
   if (skill.type === 'agent') {
@@ -208,22 +221,22 @@ export function getAgentSkillPrompts() {
   if (agentSkills.length === 0) return '';
 
   const parts = [];
-  parts.push('## 可用技能 (Skills)');
+  parts.push(T('skill.skillPromptHeader'));
   parts.push('');
-  parts.push('以下是可用的 Agent Skill（AI 能力扩展）列表。当用户需求与某个技能高度匹配时，使用 `agent_skill` 工具（action: load）加载该技能的完整说明，然后根据说明自主完成任务。');
+  parts.push(T('skill.skillPromptIntro'));
   parts.push('');
-  parts.push('**使用策略**：');
-  parts.push('- 仅在用户需求明确匹配技能描述时才加载，不要为一般性的编程/技术问题加载技能');
-  parts.push('- 一次只加载一个技能，加载后根据 SKILL.md 说明执行');
-  parts.push('- 技能加载会消耗较多 token，避免无故加载');
+  parts.push(T('skill.skillPromptStrategy'));
+  parts.push(T('skill.skillPromptStrategy1'));
+  parts.push(T('skill.skillPromptStrategy2'));
+  parts.push(T('skill.skillPromptStrategy3'));
   parts.push('');
 
   for (const skill of agentSkills) {
     parts.push(`### ${skill.name}`);
-    parts.push(`**描述**: ${skill.description}`);
+    parts.push(T('skill.skillPromptDesc', { description: skill.description }));
     if (skill.resources && skill.resources.length > 0) {
       const resourceNames = skill.resources.map(r => `\`${r.name}\``).join(', ');
-      parts.push(`**可用资源**: ${resourceNames}`);
+      parts.push(T('skill.skillPromptResources', { resources: resourceNames }));
     }
     parts.push('');
   }
@@ -244,7 +257,7 @@ export function getAgentSkillPrompt(name) {
   // 如果 skill 有 dirPath，在 prompt 前注入工作目录信息，方便 AI 解析相对路径引用
   let prompt = skill.fullPrompt || skill.prompt || '';
   if (skill.dirPath) {
-    prompt = `[技能工作目录: ${skill.dirPath}]\n\n${prompt}`;
+    prompt = T('skill.skillPromptWorkdir', { path: skill.dirPath, prompt });
   }
   return {
     success: true,

package/src/sys-lang.js

@@ -0,0 +1,29 @@
+// agent/src/sys-lang.js - Detect system language from the local environment
+// Used as the final fallback when no explicit --lang flag or AI_HELPER_LANG env is set.
+// This module is intentionally side-effect free so it can be imported before
+// bin/agent.js sets process.env.AI_HELPER_LANG.
+// Returns 'zh' or 'en'.
+
+/**
+ * Detect system language from environment signals.
+ * Priority:
+ *   1. LANGUAGE / LC_ALL / LC_MESSAGES / LANG env vars (Unix-like: macOS / Linux)
+ *   2. Intl runtime default locale (fallback, useful on Windows)
+ * @returns {'zh'|'en'}
+ */
+export function detectSystemLang() {
+  for (const envName of ['LANGUAGE', 'LC_ALL', 'LC_MESSAGES', 'LANG']) {
+    const val = process.env[envName];
+    if (!val) continue;
+    if (/^zh/i.test(val)) return 'zh';
+    if (/^en/i.test(val)) return 'en';
+  }
+  try {
+    const locale = Intl.DateTimeFormat().resolvedOptions().locale || '';
+    if (/^zh/i.test(locale)) return 'zh';
+    if (/^en/i.test(locale)) return 'en';
+  } catch {
+    // Intl unavailable, fall through to 'en'
+  }
+  return 'en';
+}

package/src/trash.js

@@ -5,9 +5,10 @@ import { join, basename } from 'path';
 import { homedir } from 'os';
 import { existsSync } from 'fs';
 import { t as translate } from './i18n.js';
+import { detectSystemLang } from './sys-lang.js';
 
-// 默认使用 zh 语言（独立调用场景）；server.js 调用时会传入 req 的 lang
-let currentLang = 'zh';
+// 默认跟随系统语言（独立调用场景）；server.js 调用时会传入 req 的 lang
+let currentLang = detectSystemLang();
 
 /**
  * 设置 trash 模块当前使用的语言（由 server.js 在请求入口处调用）
@@ -45,7 +46,7 @@ async function ensureTrashDir() {
       await mkdir(TRASH_DIR, { recursive: true });
     }
   } catch (err) {
-    console.error('[Trash] Cannot create trash directory:', err.message);
+    console.error(`[Trash] ${tr('trash.cannotCreateDir', { message: err.message })}`);
     throw err;
   }
 }
@@ -120,7 +121,7 @@ async function cleanExpiredTrash() {
 
   if (expired.length > 0) {
     await saveMetadata(kept);
-    console.log(`[Trash] Cleaned up ${expired.length} expired trash entries`);
+    console.log(`[Trash] ${tr('trash.cleanedUp', { count: expired.length })}`);
   }
 }
 
@@ -161,7 +162,7 @@ export async function moveToTrash(sourcePath, tFn) {
     });
     await saveMetadata(entries);
 
-    console.log(`[Trash] Moved to trash: ${sourcePath} -> ${trashPath} (${size} bytes, ${isDir ? 'directory' : 'file'})`);
+    console.log(`[Trash] ${tr('trash.movedToTrashLog', { source: sourcePath, target: trashPath, size, type: tr(isDir ? 'trash.typeDirectory' : 'trash.typeFile') })}`);
     return { success: true, trashId: id, isDir };
   } catch (err) {
     return { success: false, error: tr('trash.moveFailed', { message: err.message }, tFn) };
@@ -199,7 +200,7 @@ export async function restoreFromTrash(trashId, tFn) {
     entries.splice(idx, 1);
     await saveMetadata(entries);
 
-    console.log(`[Trash] Restored: ${entry.originalPath}`);
+    console.log(`[Trash] ${tr('trash.restoredLog', { path: entry.originalPath })}`);
     return { success: true, restoredPath: entry.originalPath };
   } catch (err) {
     return { success: false, error: tr('trash.restoreFailed', { message: err.message }, tFn) };
@@ -233,11 +234,11 @@ export function startPeriodicCleanup() {
     try {
       await cleanExpiredTrash();
     } catch (err) {
-      console.error('[Trash] Periodic cleanup error:', err.message);
+      console.error(`[Trash] ${tr('trash.periodicCleanError', { message: err.message })}`);
     }
   }, PERIODIC_CLEAN_INTERVAL_MS);
   if (periodicCleanTimer.unref) periodicCleanTimer.unref();
-  console.log('[Trash] Periodic cleanup started (interval: 6 hours)');
+  console.log(`[Trash] ${tr('trash.periodicCleanStarted')}`);
 }
 
 /**