cc-env-checker 0.1.0

package/src/i18n.js

@@ -0,0 +1,405 @@
+const dictionaries = {
+  'zh-CN': {
+    'ui.overallRisk': '整体环境风险',
+    'ui.generatedAt': '生成时间',
+    'ui.modulesChecked': '已检查模块: {moduleCount} | 检查项: {checkCount} | 高风险: {highRiskCount} | 中风险: {mediumRiskCount}',
+    'ui.topFindings': '重点发现',
+    'ui.noFindings': '暂无明显问题。',
+    'ui.coverageMatrix': '覆盖矩阵',
+    'ui.evidenceSummary': '依据摘要',
+    'ui.evidenceSources': '依据来源',
+    'ui.evidenceConfidence': '依据置信度',
+    'coverage.persistent-identifiers.title': '持久化标识',
+    'coverage.message-request-fingerprinting.title': '消息与请求指纹',
+    'coverage.environment-fingerprinting.title': '环境指纹采集',
+    'coverage.telemetry-event-logging.title': '遥测与事件日志',
+    'coverage.third-party-analytics-channels.title': '第三方分析通道',
+    'coverage.remote-policy-settings-control.title': '远程策略与设置控制',
+    'coverage.identity-linking-risk.title': '身份关联风险',
+    'coverage.rate-limit-abuse-signals.title': '速率限制滥用信号',
+    'coverage.automation-abuse-signals.title': '自动化滥用信号',
+    'coverage.client-tampering-signals.title': '客户端篡改信号',
+    'coverage.state.covered': '已覆盖',
+    'coverage.state.partial': '部分覆盖',
+    'coverage.state.unverifiable': '无法本地验证',
+    'coverage.state.not_covered': '未覆盖',
+    'ui.recommendedActions': '建议动作',
+    'ui.progress.runningChecks': '正在检查 {moduleId} 模块...',
+    'cli.description.doctor': '执行完整环境风险检测',
+    'cli.description.network': '仅执行网络相关检测',
+    'cli.description.runtime': '仅执行运行时相关检测',
+    'cli.description.install': '仅执行安装相关检测',
+    'cli.description.config': '仅执行配置相关检测',
+    'cli.description.report': '输出完整报告',
+    'cli.option.verbose': '显示详细依据和原始观测值',
+    'cli.option.json': '输出机器可读的 JSON',
+    'cli.option.lang': '指定输出语言，例如 zh-CN 或 en',
+    'cli.option.noRemote': '关闭真实联网探测',
+    'cli.option.timeout': '设置联网探测超时时间（毫秒）',
+    'ui.detail.risk': '风险',
+    'ui.detail.evidence': '依据',
+    'ui.detail.source': '来源',
+    'ui.detail.suggestion': '建议',
+    'ui.priority.fix_now': '立即处理',
+    'ui.priority.review_soon': '尽快复查',
+    'ui.priority.optional': '可选',
+    'risk.low': '低',
+    'risk.medium': '中',
+    'risk.high': '高',
+    'risk.unknown': '未知',
+    'module.network': '网络',
+    'module.runtime': '运行时',
+    'module.install': '安装',
+    'module.config': '配置',
+    'module.artifacts': '工件',
+    'module.fingerprint': '指纹',
+    'module.staticInstall': '静态安装',
+    'check.artifacts.identity.title': 'Claude 身份摘要',
+    'check.artifacts.identity.summary.pass': 'Claude 身份信息已记录，并以掩码形式展示',
+    'check.artifacts.identity.summary.warn': '未能读取 Claude 身份配置',
+    'check.artifacts.identity.suggestion.warn': '确认 .claude.json 可读，并避免在输出中暴露原始账号信息。',
+    'check.artifacts.telemetry.title': '遥测缓存',
+    'check.artifacts.telemetry.summary.pass': '遥测缓存目录可用',
+    'check.artifacts.telemetry.summary.warn': '遥测缓存目录不可用',
+    'check.artifacts.telemetry.suggestion.review': '检查缓存目录中的历史记录是否符合预期。',
+    'check.artifacts.projects.title': '项目历史',
+    'check.artifacts.projects.summary.pass': '项目历史目录可用',
+    'check.artifacts.projects.summary.skip': '未找到项目历史目录',
+    'check.artifacts.projects.summary.warn': '项目历史目录存在访问异常',
+    'check.artifacts.projects.suggestion.review': '确认是否需要保留项目历史数据。',
+    'check.artifacts.credentials.title': '凭据文件',
+    'check.artifacts.credentials.summary.warn': '检测到本地凭据文件',
+    'check.artifacts.credentials.summary.pass': '未发现本地凭据文件',
+    'check.artifacts.credentials.suggestion.warn': '检查凭据文件是否应继续保留在本机。',
+    'check.fingerprint.environment.title': '本地可观测信号',
+    'check.fingerprint.environment.summary.pass': '未发现明显的自动化或远程会话信号',
+    'check.fingerprint.environment.summary.warn': '检测到自动化或远程会话信号',
+    'check.fingerprint.environment.suggestion.review': '确认这些本地信号是否符合当前会话预期。',
+    'check.fingerprint.runtime.title': '运行时清单',
+    'check.fingerprint.runtime.summary.pass': '已收集本地运行时清单',
+    'check.fingerprint.runtime.suggestion.review': '确认这些运行时可用性是否符合当前环境。',
+    'check.runtime.node.title': 'Node.js 运行时',
+    'check.runtime.node.summary.fail': '需要 Node.js 20 或更高版本',
+    'check.runtime.node.summary.pass': 'Node.js 版本兼容',
+    'check.runtime.node.suggestion.fail': '请升级到 Node.js 20 或更高版本。',
+    'check.common.noAction': '无需处理。',
+    'check.runtime.npm.title': 'npm 可用性',
+    'check.runtime.npm.summary.fail': '当前 shell 中无法使用 npm',
+    'check.runtime.npm.summary.pass': 'npm 可用',
+    'check.runtime.npm.suggestion.fail': '请安装 npm，或确认它已在 PATH 中。',
+    'check.runtime.path.title': 'PATH 一致性',
+    'check.runtime.path.summary.warn': 'PATH 中存在重复条目',
+    'check.runtime.path.summary.pass': 'PATH 未发现明显重复',
+    'check.runtime.path.suggestion.warn': '清理重复 PATH 条目，减少命令解析歧义。',
+    'check.install.binary.title': 'Claude Code 二进制',
+    'check.install.binary.summary.fail': '当前 shell 中找不到 Claude Code CLI',
+    'check.install.binary.summary.pass': 'Claude Code CLI 可用',
+    'check.install.binary.suggestion.fail': '请安装 Claude Code CLI，并确保 `claude` 命令在 PATH 中。',
+    'check.install.help.title': 'Claude Code 基本执行',
+    'check.install.help.summary.warn': 'Claude Code CLI 存在，但 `--help` 执行失败',
+    'check.install.help.summary.pass': 'Claude Code CLI 可响应基础命令',
+    'check.install.help.suggestion.warn': '请重新安装 Claude Code CLI，或排查当前安装是否损坏。',
+    'check.staticInstall.summary.skip': '未找到 Claude Code 可执行文件，无法进行静态安装分析',
+    'check.staticInstall.summary.warn': '无法读取本地安装文本，静态安装分析不完整',
+    'check.staticInstall.suggestion.skip': '确认 `claude` 命令可用后，再运行静态安装分析。',
+    'check.staticInstall.suggestion.warn': '检查 Claude Code 安装文件是否可读，再重新运行分析。',
+    'check.staticInstall.endpoint.title': '可观测端点摘要',
+    'check.staticInstall.endpoint.summary.pass': '已从本地安装文本中归类出可观测端点',
+    'check.staticInstall.endpoint.summary.warn': '未从本地安装文本中发现已知端点类别',
+    'check.staticInstall.endpoint.suggestion.review': '复查这些端点类别是否符合你对当前安装行为的预期。',
+    'check.staticInstall.header.title': '可观测请求头摘要',
+    'check.staticInstall.header.summary.pass': '已从本地安装文本中归类出可观测请求头',
+    'check.staticInstall.header.summary.warn': '未从本地安装文本中发现已知请求头类别',
+    'check.staticInstall.header.suggestion.review': '复查这些请求头类别是否符合你对当前安装行为的预期。',
+    'check.staticInstall.event.title': '可观测事件摘要',
+    'check.staticInstall.event.summary.pass': '已从本地安装文本中归类出可观测事件名称',
+    'check.staticInstall.event.summary.warn': '未从本地安装文本中发现已知事件类别',
+    'check.staticInstall.event.suggestion.review': '复查这些事件类别是否符合你对当前安装行为的预期。',
+    'check.install.npx.title': 'NPX 兜底执行',
+    'check.install.npx.summary.warn': '当前无法通过 NPX 调起 Claude Code CLI',
+    'check.install.npx.summary.pass': 'NPX 可以解析 Claude Code CLI',
+    'check.install.npx.suggestion.warn': '如果你依赖 npx 方式运行，请确认 npm 安装和包解析状态正常。',
+    'check.config.json.title': 'Claude 配置文件',
+    'check.config.json.summary.pass': 'Claude 配置文件存在且 JSON 合法',
+    'check.config.json.summary.missing': '未找到 Claude 配置文件',
+    'check.config.json.summary.fail': 'Claude 配置文件存在但无法解析',
+    'check.config.json.suggestion.missing': '先运行一次 Claude Code 生成配置，或确认当前用户目录是否正确。',
+    'check.config.json.suggestion.fail': '请修复或重建配置文件，再继续使用当前环境。',
+    'check.config.dir.title': 'Claude 数据目录',
+    'check.config.dir.summary.invalid': 'Claude 数据路径存在，但不是目录',
+    'check.config.dir.summary.pass': 'Claude 数据目录存在',
+    'check.config.dir.summary.missing': '未找到 Claude 数据目录',
+    'check.config.dir.summary.fail': '无法检查 Claude 数据目录',
+    'check.config.dir.suggestion.invalid': '移除无效路径，让 Claude Code 重新初始化数据目录。',
+    'check.config.dir.suggestion.missing': '至少运行一次 Claude Code 以初始化用户数据。',
+    'check.config.dir.suggestion.fail': '请检查权限和用户目录状态。',
+    'check.config.noProxy.title': 'NO_PROXY 配置',
+    'check.config.noProxy.summary.unset': 'NO_PROXY 未设置',
+    'check.config.noProxy.summary.empty': 'NO_PROXY 已设置，但解析后为空',
+    'check.config.noProxy.summary.pass': 'NO_PROXY 包含明确的绕过规则',
+    'check.config.noProxy.suggestion.unset': '如果你的环境不需要代理绕过规则，则无需处理。',
+    'check.config.noProxy.suggestion.empty': '清理 NO_PROXY，避免代理绕过行为含糊不清。',
+    'check.config.noProxy.suggestion.pass': '确认当前绕过列表仍符合你的网络设计。',
+    'check.network.remoteDisabled': '已关闭联网探测',
+    'check.network.connectivity.title': '网络连通性',
+    'check.network.connectivity.summary.fail': '无法完成外网连通性探测',
+    'check.network.connectivity.summary.pass': '外网连通性探测成功',
+    'check.network.connectivity.suggestion.disabled': '去掉 `--no-remote` 可启用真实联网检测。',
+    'check.network.connectivity.suggestion.fail': '请检查外网连接、代理设置和 DNS 解析。',
+    'check.network.egress.title': '出口画像',
+    'check.network.egress.summary.fail': '由于 IP 探测失败，无法确定出口画像',
+    'check.network.egress.summary.partial': '已检测到公网 IP，但无法获取地区或 ASN 信息',
+    'check.network.egress.summary.pass': '已成功获取公网 IP、地区和 ASN 提示',
+    'check.network.egress.suggestion.disabled': '去掉 `--no-remote` 可启用地区和 ASN 提示。',
+    'check.network.egress.suggestion.fail': '先恢复外网连通性，再参考地区和 ASN 信息。',
+    'check.network.egress.suggestion.partial': '重试出口画像检查，确认地区和 ASN 元数据。',
+    'check.network.egress.suggestion.pass': '检查暴露的国家和 ASN 是否符合预期。',
+    'check.network.externalIpSignal.title': '外部 IP 风险信号',
+    'check.network.externalIpSignal.summary.unavailable': '未拿到足够的外部 IP 风险元数据',
+    'check.network.externalIpSignal.summary.low': '外部风险元数据显示当前出口暂无明显高风险信号',
+    'check.network.externalIpSignal.summary.medium': '外部风险元数据显示当前出口存在可疑风险信号',
+    'check.network.externalIpSignal.summary.high': '外部风险元数据显示当前出口存在强风险信号',
+    'check.network.externalIpSignal.suggestion.disabled': '去掉 `--no-remote` 可启用外部 IP 风险信号探测。',
+    'check.network.externalIpSignal.suggestion.unavailable': '重试外部 IP 风险探测，确认是否能拿到稳定元数据。',
+    'check.network.externalIpSignal.suggestion.low': '继续关注出口类型和组织信息是否符合预期。',
+    'check.network.externalIpSignal.suggestion.review': '复查当前出口 IP 类型、代理/VPN/机房标签，以及 ASN/组织信息。',
+    'check.network.dnsBaseline.title': 'DNS 基线',
+    'check.network.dnsBaseline.summary.fail': '一个或多个目标域名无法解析',
+    'check.network.dnsBaseline.summary.pass': '目标域名解析正常',
+    'check.network.dnsBaseline.suggestion.fail': '请检查 DNS 服务器、代理 DNS 行为和 IPv4/IPv6 可用性。',
+    'check.network.dnsFamily.title': '地址族一致性',
+    'check.network.dnsFamily.summary.skip': '由于 DNS 基线解析失败，无法判断 IPv4/IPv6 一致性',
+    'check.network.dnsFamily.summary.warn': '目标域名可解析，但 IPv4/IPv6 地址族不一致',
+    'check.network.dnsFamily.summary.pass': '目标域名在 IPv4 和 IPv6 上都可解析',
+    'check.network.dnsFamily.suggestion.skip': '先恢复 DNS 解析，再判断 IPv4 或 IPv6 一致性。',
+    'check.network.dnsFamily.suggestion.warn': '请检查 IPv4 和 IPv6 路由，避免可达性不一致。',
+    'check.network.proxy.title': '代理环境',
+    'check.network.proxy.summary.unset': '未设置代理环境变量',
+    'check.network.proxy.summary.warn': 'HTTP 和 HTTPS 代理变量不一致',
+    'check.network.proxy.summary.pass': '代理环境变量存在且一致',
+    'check.network.proxy.suggestion.unset': '如果预期直连网络，则无需处理。',
+    'check.network.proxy.suggestion.warn': '请同时设置或同时清理 HTTP_PROXY 和 HTTPS_PROXY。',
+    'check.network.proxy.suggestion.pass': '确认当前代理地址是你预期使用的那一组。',
+  },
+  en: {
+    'ui.overallRisk': 'Overall environment risk',
+    'ui.generatedAt': 'Generated at',
+    'ui.modulesChecked': 'Modules checked: {moduleCount} | Checks: {checkCount} | High: {highRiskCount} | Medium: {mediumRiskCount}',
+    'ui.topFindings': 'Top findings',
+    'ui.noFindings': 'No significant findings.',
+    'ui.coverageMatrix': 'Coverage matrix',
+    'ui.evidenceSummary': 'Evidence summary',
+    'ui.evidenceSources': 'sources',
+    'ui.evidenceConfidence': 'confidence',
+    'coverage.persistent-identifiers.title': 'Persistent identifiers',
+    'coverage.message-request-fingerprinting.title': 'Message and request fingerprinting',
+    'coverage.environment-fingerprinting.title': 'Environment fingerprint collection',
+    'coverage.telemetry-event-logging.title': 'Telemetry and event logging',
+    'coverage.third-party-analytics-channels.title': 'Third-party analytics channels',
+    'coverage.remote-policy-settings-control.title': 'Remote policy and settings control',
+    'coverage.identity-linking-risk.title': 'Identity-linking risk',
+    'coverage.rate-limit-abuse-signals.title': 'Rate-limit abuse signals',
+    'coverage.automation-abuse-signals.title': 'Automation-abuse signals',
+    'coverage.client-tampering-signals.title': 'Client-tampering signals',
+    'coverage.state.covered': 'covered',
+    'coverage.state.partial': 'partial',
+    'coverage.state.unverifiable': 'unverifiable',
+    'coverage.state.not_covered': 'not covered',
+    'ui.recommendedActions': 'Recommended actions',
+    'ui.progress.runningChecks': 'Running {moduleId} checks...',
+    'cli.description.doctor': 'run the full environment risk check',
+    'cli.description.network': 'run only network checks',
+    'cli.description.runtime': 'run only runtime checks',
+    'cli.description.install': 'run only installation checks',
+    'cli.description.config': 'run only configuration checks',
+    'cli.description.report': 'print the full report',
+    'cli.option.verbose': 'show detailed evidence and raw observations',
+    'cli.option.json': 'print machine-readable JSON output',
+    'cli.option.lang': 'override output language, e.g. zh-CN or en',
+    'cli.option.noRemote': 'disable live network probes',
+    'cli.option.timeout': 'remote check timeout in milliseconds',
+    'ui.detail.risk': 'risk',
+    'ui.detail.evidence': 'evidence',
+    'ui.detail.source': 'source',
+    'ui.detail.suggestion': 'suggestion',
+    'ui.priority.fix_now': 'fix now',
+    'ui.priority.review_soon': 'review soon',
+    'ui.priority.optional': 'optional',
+    'risk.low': 'low',
+    'risk.medium': 'medium',
+    'risk.high': 'high',
+    'risk.unknown': 'unknown',
+    'module.network': 'Network',
+    'module.runtime': 'Runtime',
+    'module.install': 'Install',
+    'module.config': 'Config',
+    'module.artifacts': 'Artifacts',
+    'module.fingerprint': 'Fingerprint',
+    'module.staticInstall': 'Static install',
+    'check.artifacts.identity.title': 'Claude identity summary',
+    'check.artifacts.identity.summary.pass': 'Claude identity information is recorded and shown in masked form',
+    'check.artifacts.identity.summary.warn': 'Could not read the Claude identity config',
+    'check.artifacts.identity.suggestion.warn': 'Verify that .claude.json is readable and avoid exposing raw account data in output.',
+    'check.artifacts.telemetry.title': 'Telemetry cache',
+    'check.artifacts.telemetry.summary.pass': 'Telemetry cache directory is available',
+    'check.artifacts.telemetry.summary.warn': 'Telemetry cache directory is unavailable',
+    'check.artifacts.telemetry.suggestion.review': 'Review the cache directory history to confirm it matches expectations.',
+    'check.artifacts.projects.title': 'Projects history',
+    'check.artifacts.projects.summary.pass': 'Projects history directory is available',
+    'check.artifacts.projects.summary.skip': 'Projects history directory was not found',
+    'check.artifacts.projects.summary.warn': 'Projects history directory has an access issue',
+    'check.artifacts.projects.suggestion.review': 'Confirm whether project history data should be retained locally.',
+    'check.artifacts.credentials.title': 'Credentials file',
+    'check.artifacts.credentials.summary.warn': 'A local credentials file was detected',
+    'check.artifacts.credentials.summary.pass': 'No local credentials file was found',
+    'check.artifacts.credentials.suggestion.warn': 'Check whether the credentials file should continue to live on this machine.',
+    'check.fingerprint.environment.title': 'Locally observable signals',
+    'check.fingerprint.environment.summary.pass': 'No obvious automation or remote-session signals were observed',
+    'check.fingerprint.environment.summary.warn': 'Automation or remote-session signals were observed',
+    'check.fingerprint.environment.suggestion.review': 'Confirm whether these local signals are expected for this session.',
+    'check.fingerprint.runtime.title': 'Runtime inventory',
+    'check.fingerprint.runtime.summary.pass': 'Local runtime inventory was collected',
+    'check.fingerprint.runtime.suggestion.review': 'Confirm whether the available runtimes match this environment.',
+    'check.runtime.node.title': 'Node.js runtime',
+    'check.runtime.node.summary.fail': 'Node.js 20 or newer is required',
+    'check.runtime.node.summary.pass': 'Node.js version is compatible',
+    'check.runtime.node.suggestion.fail': 'Upgrade Node.js to version 20 or newer.',
+    'check.common.noAction': 'No action needed.',
+    'check.runtime.npm.title': 'npm availability',
+    'check.runtime.npm.summary.fail': 'npm is not available in the current shell',
+    'check.runtime.npm.summary.pass': 'npm is available',
+    'check.runtime.npm.suggestion.fail': 'Install npm or ensure it is available on PATH.',
+    'check.runtime.path.title': 'PATH consistency',
+    'check.runtime.path.summary.warn': 'PATH contains duplicated entries',
+    'check.runtime.path.summary.pass': 'PATH does not contain obvious duplication',
+    'check.runtime.path.suggestion.warn': 'Clean up duplicated PATH entries to reduce command resolution ambiguity.',
+    'check.install.binary.title': 'Claude Code binary',
+    'check.install.binary.summary.fail': 'Claude Code CLI is not available from the current shell',
+    'check.install.binary.summary.pass': 'Claude Code CLI is available',
+    'check.install.binary.suggestion.fail': 'Install Claude Code CLI and ensure the `claude` command is on PATH.',
+    'check.install.help.title': 'Claude Code execution',
+    'check.install.help.summary.warn': 'Claude Code CLI exists but help output failed',
+    'check.install.help.summary.pass': 'Claude Code CLI responds to basic execution',
+    'check.install.help.suggestion.warn': 'Reinstall Claude Code CLI or inspect the current installation for corruption.',
+    'check.staticInstall.summary.skip': 'Claude Code executable was not found, so static install analysis could not run',
+    'check.staticInstall.summary.warn': 'Local install text could not be read, so static install analysis is incomplete',
+    'check.staticInstall.suggestion.skip': 'Ensure the `claude` command is available before rerunning static install analysis.',
+    'check.staticInstall.suggestion.warn': 'Check whether the Claude Code install files are readable, then rerun the analysis.',
+    'check.staticInstall.endpoint.title': 'Observable endpoint summary',
+    'check.staticInstall.endpoint.summary.pass': 'Observable endpoint categories were identified from local install text',
+    'check.staticInstall.endpoint.summary.warn': 'No known endpoint categories were identified from local install text',
+    'check.staticInstall.endpoint.suggestion.review': 'Review whether these endpoint categories match the installation behavior you expect.',
+    'check.staticInstall.header.title': 'Observable header summary',
+    'check.staticInstall.header.summary.pass': 'Observable header categories were identified from local install text',
+    'check.staticInstall.header.summary.warn': 'No known header categories were identified from local install text',
+    'check.staticInstall.header.suggestion.review': 'Review whether these header categories match the installation behavior you expect.',
+    'check.staticInstall.event.title': 'Observable event summary',
+    'check.staticInstall.event.summary.pass': 'Observable event-name categories were identified from local install text',
+    'check.staticInstall.event.summary.warn': 'No known event categories were identified from local install text',
+    'check.staticInstall.event.suggestion.review': 'Review whether these event categories match the installation behavior you expect.',
+    'check.install.npx.title': 'NPX fallback',
+    'check.install.npx.summary.warn': 'NPX fallback is not currently usable',
+    'check.install.npx.summary.pass': 'NPX fallback can resolve Claude Code CLI',
+    'check.install.npx.suggestion.warn': 'If you rely on npx-based execution, verify your npm installation and package availability.',
+    'check.config.json.title': 'Claude config file',
+    'check.config.json.summary.pass': 'Claude config file exists and is valid JSON',
+    'check.config.json.summary.missing': 'Claude config file was not found',
+    'check.config.json.summary.fail': 'Claude config file exists but cannot be parsed',
+    'check.config.json.suggestion.missing': 'Run Claude Code once to generate config, or verify you are using the expected user profile.',
+    'check.config.json.suggestion.fail': 'Repair or recreate the config file before relying on this environment.',
+    'check.config.dir.title': 'Claude data directory',
+    'check.config.dir.summary.invalid': 'The Claude data path exists but is not a directory',
+    'check.config.dir.summary.pass': 'Claude data directory is present',
+    'check.config.dir.summary.missing': 'Claude data directory was not found',
+    'check.config.dir.summary.fail': 'Claude data directory could not be inspected',
+    'check.config.dir.suggestion.invalid': 'Remove the invalid path and allow Claude Code to recreate its data directory.',
+    'check.config.dir.suggestion.missing': 'Run Claude Code at least once to initialize user data.',
+    'check.config.dir.suggestion.fail': 'Review permissions and user directory health.',
+    'check.config.noProxy.title': 'NO_PROXY configuration',
+    'check.config.noProxy.summary.unset': 'NO_PROXY is not set',
+    'check.config.noProxy.summary.empty': 'NO_PROXY is set but empty after parsing',
+    'check.config.noProxy.summary.pass': 'NO_PROXY contains explicit bypass rules',
+    'check.config.noProxy.suggestion.unset': 'No action needed unless your environment requires proxy bypass rules.',
+    'check.config.noProxy.suggestion.empty': 'Clean up NO_PROXY to avoid ambiguous proxy bypass behavior.',
+    'check.config.noProxy.suggestion.pass': 'Verify the bypass list still matches your network design.',
+    'check.network.remoteDisabled': 'Remote checks are disabled',
+    'check.network.connectivity.title': 'Network connectivity',
+    'check.network.connectivity.summary.fail': 'Unable to complete the outbound connectivity probe',
+    'check.network.connectivity.summary.pass': 'Outbound connectivity probe completed successfully',
+    'check.network.connectivity.suggestion.disabled': 'Run without --no-remote to include live network checks.',
+    'check.network.connectivity.suggestion.fail': 'Check your outbound connectivity, proxy settings, and DNS resolution.',
+    'check.network.egress.title': 'Egress profile',
+    'check.network.egress.summary.fail': 'Egress profile could not be determined because the IP probe failed',
+    'check.network.egress.summary.partial': 'Public IP was detected, but geographic and ASN hints were unavailable',
+    'check.network.egress.summary.pass': 'Public IP, region, and ASN hints were collected successfully',
+    'check.network.egress.suggestion.disabled': 'Run without --no-remote to include region and ASN hints.',
+    'check.network.egress.suggestion.fail': 'Restore outbound connectivity before relying on region or ASN hints.',
+    'check.network.egress.suggestion.partial': 'Retry the egress profile check to confirm region and ASN metadata.',
+    'check.network.egress.suggestion.pass': 'Review the exposed country and ASN values to confirm they match your expectation.',
+    'check.network.externalIpSignal.title': 'External IP risk signal',
+    'check.network.externalIpSignal.summary.unavailable': 'Not enough external IP risk metadata was available',
+    'check.network.externalIpSignal.summary.low': 'External metadata does not show obvious high-risk signals for this egress IP',
+    'check.network.externalIpSignal.summary.medium': 'External metadata shows suspicious risk signals for this egress IP',
+    'check.network.externalIpSignal.summary.high': 'External metadata shows strong risk signals for this egress IP',
+    'check.network.externalIpSignal.suggestion.disabled': 'Run without --no-remote to include external IP risk signals.',
+    'check.network.externalIpSignal.suggestion.unavailable': 'Retry the external IP risk probe and confirm whether stable metadata is available.',
+    'check.network.externalIpSignal.suggestion.low': 'Keep monitoring whether the exposed IP type and organization still match your expectation.',
+    'check.network.externalIpSignal.suggestion.review': 'Review the current IP type, proxy/VPN/datacenter labels, and ASN/organization metadata.',
+    'check.network.dnsBaseline.title': 'DNS baseline',
+    'check.network.dnsBaseline.summary.fail': 'One or more target hosts could not be resolved',
+    'check.network.dnsBaseline.summary.pass': 'Target hosts resolve successfully',
+    'check.network.dnsBaseline.suggestion.fail': 'Check your DNS servers, proxy DNS behavior, and IPv4/IPv6 network availability.',
+    'check.network.dnsFamily.title': 'Address family consistency',
+    'check.network.dnsFamily.summary.skip': 'Address family consistency could not be assessed because DNS baseline resolution failed',
+    'check.network.dnsFamily.summary.warn': 'Target hosts resolve, but address families are inconsistent',
+    'check.network.dnsFamily.summary.pass': 'Target hosts resolve on both IPv4 and IPv6',
+    'check.network.dnsFamily.suggestion.skip': 'Restore DNS resolution before relying on IPv4 or IPv6 consistency hints.',
+    'check.network.dnsFamily.suggestion.warn': 'Review IPv4 and IPv6 routing to avoid inconsistent reachability.',
+    'check.network.proxy.title': 'Proxy environment',
+    'check.network.proxy.summary.unset': 'No proxy environment variables are set',
+    'check.network.proxy.summary.warn': 'HTTP and HTTPS proxy variables are not aligned',
+    'check.network.proxy.summary.pass': 'Proxy environment variables are present and aligned',
+    'check.network.proxy.suggestion.unset': 'No action needed if you expect direct network access.',
+    'check.network.proxy.suggestion.warn': 'Set both HTTP_PROXY and HTTPS_PROXY consistently, or clear both if not required.',
+    'check.network.proxy.suggestion.pass': 'Confirm the proxy endpoints are the ones you intend to use.',
+  },
+};
+
+export function normalizeLocale(input) {
+  if (!input) return null;
+  const value = input.toLowerCase();
+  if (value.startsWith('zh')) return 'zh-CN';
+  if (value.startsWith('en')) return 'en';
+  return null;
+}
+
+export function detectSystemLocale() {
+  return normalizeLocale(Intl.DateTimeFormat().resolvedOptions().locale) ?? 'zh-CN';
+}
+
+export function resolveLocale(requestedLocale) {
+  if (requestedLocale) {
+    return normalizeLocale(requestedLocale) ?? 'zh-CN';
+  }
+  return detectSystemLocale() ?? 'zh-CN';
+}
+
+function formatTemplate(template, params = {}) {
+  return template.replaceAll(/\{([^}]+)\}/g, (_, key) => String(params[key] ?? ''));
+}
+
+export function createTranslator(locale) {
+  const resolved = resolveLocale(locale);
+  const dict = dictionaries[resolved] ?? dictionaries['zh-CN'];
+  const fallback = dictionaries['zh-CN'];
+
+  function t(key, params = {}) {
+    const template = dict[key] ?? fallback[key] ?? key;
+    return formatTemplate(template, params);
+  }
+
+  return {
+    locale: resolved,
+    t,
+  };
+}

package/src/modules.js

@@ -0,0 +1,25 @@
+import { artifactsModule } from './checks/artifacts.js';
+import { configModule } from './checks/config.js';
+import { fingerprintModule } from './checks/fingerprint.js';
+import { installModule } from './checks/install.js';
+import { networkModule } from './checks/network.js';
+import { runtimeModule } from './checks/runtime.js';
+import { staticInstallModule } from './checks/static-install.js';
+
+export const defaultModules = [
+  networkModule,
+  runtimeModule,
+  installModule,
+  configModule,
+  artifactsModule,
+  fingerprintModule,
+  staticInstallModule,
+];
+
+export function selectModules(modules, targetId) {
+  if (!targetId || targetId === 'doctor') {
+    return modules;
+  }
+
+  return modules.filter((module) => module.id === targetId);
+}

package/src/render.js

@@ -0,0 +1,189 @@
+function line(text = '') {
+  return `${text}\n`;
+}
+
+const ANSI = {
+  reset: '\u001b[0m',
+  red: '\u001b[31m',
+  yellow: '\u001b[33m',
+  green: '\u001b[32m',
+  gray: '\u001b[90m',
+  bold: '\u001b[1m',
+};
+
+function colorize(text, color) {
+  return `${color}${text}${ANSI.reset}`;
+}
+
+function formatGeneratedAt(timestamp, locale) {
+  const date = new Date(timestamp);
+  if (Number.isNaN(date.getTime())) {
+    return timestamp;
+  }
+
+  return new Intl.DateTimeFormat(locale, {
+    year: 'numeric',
+    month: 'numeric',
+    day: 'numeric',
+    hour: '2-digit',
+    minute: '2-digit',
+    second: '2-digit',
+    hour12: false,
+  }).format(date);
+}
+
+function formatPriority(priority, t) {
+  return t(`ui.priority.${priority}`);
+}
+
+function formatStatusSymbol(status) {
+  switch (status) {
+    case 'fail':
+      return colorize('✖', ANSI.red);
+    case 'warn':
+      return colorize('▲', ANSI.yellow);
+    case 'skip':
+      return colorize('•', ANSI.gray);
+    default:
+      return colorize('✔', ANSI.green);
+  }
+}
+
+function formatRiskLabel(riskLevel, t) {
+  const label = t(`risk.${riskLevel}`);
+  switch (riskLevel) {
+    case 'high':
+      return colorize(label, ANSI.red);
+    case 'medium':
+      return colorize(label, ANSI.yellow);
+    case 'unknown':
+      return colorize(label, ANSI.gray);
+    default:
+      return colorize(label, ANSI.green);
+  }
+}
+
+function localizeMessage(key, fallback, params, t) {
+  if (key) {
+    return t(key, params);
+  }
+  return fallback ?? '';
+}
+
+function localizeCheck(check, t) {
+  return {
+    ...check,
+    title: localizeMessage(check.titleKey, check.title, check.messageParams, t),
+    summary: localizeMessage(check.summaryKey, check.summary, check.messageParams, t),
+    suggestion: localizeMessage(check.suggestionKey, check.suggestion, check.messageParams, t),
+  };
+}
+
+function localizeReport(report, t) {
+  return {
+    ...report,
+    coverageMatrix: (report.coverageMatrix ?? []).map((row) => ({
+      ...row,
+      title: localizeMessage(row.titleKey ?? `coverage.${row.id}.title`, row.title, {}, t),
+      state: localizeMessage(row.stateKey ?? `coverage.state.${row.state}`, row.state, {}, t),
+    })),
+    modules: report.modules.map((module) => ({
+      ...module,
+      title: localizeMessage(module.titleKey, module.title, {}, t),
+      checks: module.checks.map((check) => localizeCheck(check, t)),
+    })),
+    topFindings: report.topFindings.map((check) => localizeCheck(check, t)),
+    recommendedActions: report.recommendedActions.map((action) => ({
+      ...action,
+      suggestion: localizeMessage(action.suggestionKey, action.suggestion, action.messageParams, t),
+    })),
+  };
+}
+
+function formatSummaryEntries(entries) {
+  const pairs = Object.entries(entries ?? {});
+  if (!pairs.length) {
+    return 'none';
+  }
+
+  return pairs.map(([label, count]) => `${label}: ${count}`).join(', ');
+}
+
+function formatCheck(check, verbose, t) {
+  const prefix = `${formatStatusSymbol(check.status)} ${check.title}`;
+  let output = line(`${prefix}: ${check.summary}`);
+
+  if (verbose) {
+    output += line(`  ${t('ui.detail.risk')}: ${formatRiskLabel(check.riskLevel, t)}`);
+    output += line(`  ${t('ui.detail.evidence')}: ${check.evidenceType}`);
+    output += line(`  ${t('ui.detail.source')}: ${check.source}`);
+    for (const detail of check.details) {
+      output += line(`  - ${detail}`);
+    }
+    if (check.suggestion) {
+      output += line(`  ${t('ui.detail.suggestion')}: ${check.suggestion}`);
+    }
+  }
+
+  return output;
+}
+
+export function renderHumanReport(report, options = {}) {
+  const verbose = Boolean(options.verbose);
+  const t = options.t ?? ((key) => key);
+  const locale = options.lang ?? 'zh-CN';
+  const localized = localizeReport(report, t);
+  let output = '';
+
+  output += line(`${ANSI.bold}${t('ui.overallRisk')}:${ANSI.reset} ${formatRiskLabel(localized.overallRiskLevel, t)}`);
+  output += line(`${colorize(`${t('ui.generatedAt')}:`, ANSI.gray)} ${formatGeneratedAt(localized.generatedAt, locale)}`);
+  output += line(t('ui.modulesChecked', localized.summary));
+  output += line();
+
+  output += line(`${ANSI.bold}${t('ui.topFindings')}:${ANSI.reset}`);
+  if (localized.topFindings.length) {
+    for (const finding of localized.topFindings.slice(0, 3)) {
+      output += line(`- ${finding.title}: ${finding.summary}`);
+    }
+  } else {
+    output += line(`- ${t('ui.noFindings')}`);
+  }
+  output += line();
+
+  if (localized.coverageMatrix?.length) {
+    output += line(`${ANSI.bold}${t('ui.coverageMatrix')}:${ANSI.reset}`);
+    for (const row of localized.coverageMatrix.slice(0, 5)) {
+      output += line(`- ${row.title}: ${row.state}`);
+    }
+    output += line();
+  }
+
+  if (localized.evidenceSummary) {
+    output += line(`${ANSI.bold}${t('ui.evidenceSummary')}:${ANSI.reset}`);
+    output += line(`- ${t('ui.evidenceSources')}: ${formatSummaryEntries(localized.evidenceSummary.sources)}`);
+    output += line(`- ${t('ui.evidenceConfidence')}: ${formatSummaryEntries(localized.evidenceSummary.confidence)}`);
+    output += line();
+  }
+
+  for (const module of localized.modules) {
+    output += line(`${ANSI.bold}${module.title}${ANSI.reset} (${formatRiskLabel(module.riskLevel, t)})`);
+    for (const check of module.checks) {
+      output += formatCheck(check, verbose, t);
+    }
+    output += line();
+  }
+
+  if (localized.recommendedActions.length) {
+    output += line(`${ANSI.bold}${t('ui.recommendedActions')}:${ANSI.reset}`);
+    for (const action of localized.recommendedActions) {
+      output += line(`- [${formatPriority(action.priority, t)}] ${action.suggestion}`);
+    }
+  }
+
+  return output;
+}
+
+export function renderJsonReport(report, options = {}) {
+  const t = options.t ?? ((key) => key);
+  return JSON.stringify(localizeReport(report, t), null, 2);
+}