device-center 0.2.0-beta.1 → 0.2.0-beta.3

package/server/drivers/cloudRegistry.mjs

@@ -2,6 +2,7 @@ import { randomBytes, randomUUID, createHash } from 'node:crypto';
 import { fail, object, text, publicIdentity, verifyRequest, normalizeReport } from './driverProtocol.mjs';
 import { validateCertificate } from './certificates.mjs';
 import { createRelay } from './relay.mjs';
+import { createDeviceProfiles } from './deviceProfiles.mjs';
 
 const PAIR_AGE = 5 * 60_000;
 export function createCloudRegistry({ db, origin, now = Date.now, multiUser = false, legacyOwnerMapped = !multiUser }) {
@@ -19,6 +20,10 @@ export function createCloudRegistry({ db, origin, now = Date.now, multiUser = fa
   }
   db.exec('CREATE INDEX IF NOT EXISTS cloud_drivers_tenant_created ON cloud_drivers(tenant_id, created_at)');
   for (const table of ['driver_pairings', 'cloud_drivers']) if (!db.prepare(`PRAGMA table_info(${table})`).all().some(c => c.name === 'certificate')) db.exec(`ALTER TABLE ${table} ADD COLUMN certificate TEXT`);
+  if (!db.prepare('PRAGMA table_info(cloud_drivers)').all().some(c => c.name === 'control_seen_at')) db.exec('ALTER TABLE cloud_drivers ADD COLUMN control_seen_at INTEGER');
+  db.exec(`CREATE TABLE IF NOT EXISTS driver_collection_requests (driver_id TEXT PRIMARY KEY, request_id TEXT NOT NULL,
+    requested_at INTEGER NOT NULL, expires_at INTEGER NOT NULL, completed_at INTEGER)`);
+  const profiles = createDeviceProfiles({ db, now, initialize: true });
   if (multiUser && !legacyOwnerMapped && db.prepare("SELECT 1 FROM cloud_drivers WHERE tenant_id='cloud-owner' LIMIT 1").get()) throw new Error('cloud_legacy_owner_mapping_required');
   let starts = [], globalLookups = [], globalApprovals = [];
   const lookups = new Map(), approvals = new Map();
@@ -54,7 +59,18 @@ export function createCloudRegistry({ db, origin, now = Date.now, multiUser = fa
     if (row.revoked_at != null) fail('driver_revoked', 403);
     return row;
   }
-  const descriptor = row => ({ id: row.id, name: row.name, platform: row.platform, fingerprint: row.fingerprint, shareSsh: Boolean(row.share_ssh), createdAt: row.created_at, revokedAt: row.revoked_at, lastSeen: row.last_seen });
+  const descriptor = row => {
+    const profile = profiles.get(row.tenant_id, `${row.id}:host`);
+    return { id: row.id, name: profile.displayName || row.name, reportedName: row.name, profile, platform: row.platform, fingerprint: row.fingerprint, shareSsh: Boolean(row.share_ssh), createdAt: row.created_at, revokedAt: row.revoked_at, lastSeen: row.last_seen };
+  };
+  const collection = row => {
+    const request = db.prepare('SELECT * FROM driver_collection_requests WHERE driver_id=?').get(row.id);
+    const connected = row.last_seen != null && now() - row.last_seen <= 90_000;
+    const supported = connected && row.control_seen_at != null && now() - row.control_seen_at <= 30_000;
+    return { supported, reason: !connected ? 'driver_not_connected' : row.control_seen_at == null ? 'driver_upgrade_required' : !supported ? 'driver_control_unavailable' : null,
+      status: !request ? 'idle' : request.completed_at != null ? 'completed' : request.expires_at <= now() ? 'timeout' : 'pending',
+      requestedAt: request?.requested_at ?? null, completedAt: request?.completed_at ?? null, expiresAt: request?.expires_at ?? null };
+  };
   const peers = row => db.prepare('SELECT * FROM cloud_drivers WHERE tenant_id=? AND revoked_at IS NULL AND certificate IS NOT NULL').all(row.tenant_id).map(peer => ({ ...descriptor(peer), certificate: peer.certificate }));
   const relay = createRelay({ db, now, getDriver: id => db.prepare('SELECT * FROM cloud_drivers WHERE id=?').get(id) });
   const registry = {
@@ -118,6 +134,7 @@ export function createCloudRegistry({ db, origin, now = Date.now, multiUser = fa
       const report = normalizeReport(input.payload, Boolean(row.share_ssh), now());
       if (row.last_seen != null && now() - row.last_seen < 15_000) fail('driver_report_too_frequent', 429);
       db.prepare('UPDATE cloud_drivers SET last_seen=?, report_json=? WHERE id=?').run(now(), JSON.stringify(report), row.id);
+      if (report.collectionRequestId && report.resources[0].observedAt != null) db.prepare('UPDATE driver_collection_requests SET completed_at=? WHERE driver_id=? AND request_id=? AND completed_at IS NULL AND expires_at>?').run(now(), row.id, report.collectionRequestId, now());
       return { ok: true, receivedAt: now() };
     },
     disconnect(input) {
@@ -133,6 +150,24 @@ export function createCloudRegistry({ db, origin, now = Date.now, multiUser = fa
       return { ok: true };
     },
     bindings: tenantId => db.prepare('SELECT * FROM cloud_drivers WHERE tenant_id=? ORDER BY created_at').all(tenantId).map(descriptor),
+    saveProfile(input, tenantId) {
+      if (!registry.devices(tenantId).some(d => d.id === input?.deviceId)) fail('device_not_found', 404);
+      return { profile: profiles.save(tenantId, input) };
+    },
+    collect(input, tenantId) {
+      object(input, ['deviceId']);
+      if (typeof input.deviceId !== 'string') fail('invalid_device_id');
+      const device = registry.devices(tenantId).find(d => d.id === input.deviceId);
+      if (!device) fail('device_not_found', 404);
+      if (device.kind !== 'management') fail('collection_requires_local_ssh_check', 409);
+      const row = db.prepare('SELECT * FROM cloud_drivers WHERE id=? AND tenant_id=? AND revoked_at IS NULL').get(device.managementDriver.id, tenantId);
+      const current = collection(row);
+      if (!current.supported) fail(current.reason, 409);
+      if (current.status === 'pending') return { status: 'pending', collection: current };
+      if (current.requestedAt != null && now() - current.requestedAt < 10_000) fail('collection_rate_limited', 429);
+      db.prepare('INSERT INTO driver_collection_requests VALUES (?,?,?,?,NULL) ON CONFLICT(driver_id) DO UPDATE SET request_id=excluded.request_id,requested_at=excluded.requested_at,expires_at=excluded.expires_at,completed_at=NULL').run(row.id, randomUUID(), now(), now() + 75_000);
+      return { status: 'pending', collection: collection(row) };
+    },
     devices(tenantId) {
       return db.prepare('SELECT * FROM cloud_drivers WHERE tenant_id=? AND revoked_at IS NULL ORDER BY created_at').all(tenantId).flatMap(row => {
         const report = row.report_json ? JSON.parse(row.report_json).resources : [{ id: 'host', name: row.name, platform: row.platform, kind: 'management', observedAt: null, memory: { status: 'unobserved', usedMb: null, totalMb: null }, disk: { status: 'unobserved', usedGb: null, totalGb: null } }];
@@ -140,7 +175,7 @@ export function createCloudRegistry({ db, origin, now = Date.now, multiUser = fa
           const latest = resource.observedAt == null || row.last_seen == null ? null : Math.min(resource.observedAt, row.last_seen);
           const age = latest == null ? null : Math.max(0, now() - latest);
           const connected = row.last_seen != null && now() - row.last_seen <= 90_000;
-          return { ...resource, id: `${row.id}:${resource.id}`, role: resource.kind === 'management' ? 'driver' : 'resource', source: 'driver-report', transport: 'driver', scope: 'host', state: age == null ? 'unknown' : !connected || age > (resource.kind === 'management' ? 90_000 : 300_000) ? 'expired' : 'online', lastHeartbeat: latest, heartbeatAgeMs: age, memory: resource.memory, disk: resource.disk, synthetic: false, managementDriver: { ...descriptor(row), origin, connected }, capabilities: { observation: true, remoteExecution: false } };
+          return profiles.apply(tenantId, { ...resource, id: `${row.id}:${resource.id}`, role: resource.kind === 'management' ? 'driver' : 'resource', source: 'driver-report', transport: 'driver', scope: 'host', state: age == null ? 'unknown' : !connected || age > (resource.kind === 'management' ? 90_000 : 300_000) ? 'expired' : 'online', lastHeartbeat: latest, heartbeatAgeMs: age, memory: resource.memory, disk: resource.disk, synthetic: false, managementDriver: { ...descriptor(row), origin, connected }, collection: resource.kind === 'management' ? collection(row) : { supported: false, reason: 'collection_requires_local_ssh_check', status: 'idle' }, capabilities: { observation: true, remoteExecution: false } });
         });
       });
     },
@@ -149,6 +184,13 @@ export function createCloudRegistry({ db, origin, now = Date.now, multiUser = fa
     start: registry.start, poll: registry.poll, report: registry.report, disconnect: registry.disconnect,
     machine(action, input) {
       const row = driver(input, `/api/driver/${action}`);
+      if (action === 'control') {
+        object(input.payload, []);
+        if (row.control_seen_at != null && now() - row.control_seen_at < 3000) fail('driver_control_too_frequent', 429);
+        db.prepare('UPDATE cloud_drivers SET control_seen_at=? WHERE id=?').run(now(), row.id);
+        const request = db.prepare('SELECT * FROM driver_collection_requests WHERE driver_id=? AND completed_at IS NULL AND expires_at>?').get(row.id, now());
+        return { request: request ? { id: request.request_id, action: 'collect-resources', expiresAt: request.expires_at } : null };
+      }
       if (action === 'certificate') { object(input.payload, ['certificate']); const cert = validateCertificate(input.payload.certificate, row.fingerprint, now()); db.prepare('UPDATE cloud_drivers SET certificate=? WHERE id=?').run(cert, row.id); return { ok: true }; }
       if (action === 'peers') { object(input.payload, []); return { peers: peers(row) }; }
       if (!row.certificate) fail('driver_certificate_required', 409);
@@ -160,6 +202,7 @@ export function createCloudRegistry({ db, origin, now = Date.now, multiUser = fa
       return {
         lookup: input => registry.lookup(input, tenantId), approve: input => registry.approve(input, tenantId),
         revoke: input => registry.revoke(input, tenantId), bindings: () => registry.bindings(tenantId), devices: () => registry.devices(tenantId), relayUsage: () => relay.usage(tenantId),
+        saveProfile: input => registry.saveProfile(input, tenantId), collect: input => registry.collect(input, tenantId),
       };
     },
   };

package/server/drivers/deviceProfiles.mjs

@@ -0,0 +1,47 @@
+// Descriptive owner metadata. It never changes device identity or grants access.
+export const DEVICE_TYPES = ['unspecified', 'personal', 'server', 'workstation', 'other'];
+const fail = (message, statusCode = 400) => { throw Object.assign(new Error(message), { statusCode }); };
+function string(value, max, multiline = false) {
+  if (typeof value !== 'string' || value.length > max || (multiline ? /[\x00-\x09\x0b-\x1f\x7f]/ : /[\x00-\x1f\x7f]/).test(value)) fail('invalid_device_profile');
+  return value.trim();
+}
+export function normalizeDeviceProfile(value) {
+  if (!value || Array.isArray(value) || Object.keys(value).some(k => !['displayName', 'type', 'purpose', 'tags', 'services'].includes(k)) || !DEVICE_TYPES.includes(value.type)) fail('invalid_device_profile');
+  const list = (items, max, length) => {
+    if (!Array.isArray(items) || items.length > max) fail('invalid_device_profile');
+    const result = items.map(v => string(v, length));
+    if (result.some(v => !v)) fail('invalid_device_profile');
+    return [...new Set(result)];
+  };
+  return { displayName: string(value.displayName, 80), type: value.type, purpose: string(value.purpose, 240, true), tags: list(value.tags, 8, 24), services: list(value.services, 12, 40) };
+}
+const EMPTY = { displayName: '', type: 'unspecified', purpose: '', tags: [], services: [], revision: 0, updatedAt: null, servicesSource: 'user-declared' };
+export function createDeviceProfiles({ db, now = Date.now, initialize = false }) {
+  const ensure = () => db.exec(`CREATE TABLE IF NOT EXISTS device_profiles (
+    tenant_id TEXT NOT NULL, device_id TEXT NOT NULL, profile_json TEXT NOT NULL,
+    revision INTEGER NOT NULL, updated_at INTEGER NOT NULL, PRIMARY KEY(tenant_id, device_id))`);
+  if (initialize) ensure();
+  const get = (tenantId, id) => {
+    if (!db.prepare("SELECT 1 FROM sqlite_master WHERE type='table' AND name='device_profiles'").get()) return { ...EMPTY, tags: [], services: [] };
+    const row = db.prepare('SELECT * FROM device_profiles WHERE tenant_id=? AND device_id=?').get(tenantId, id);
+    return row ? { ...normalizeDeviceProfile(JSON.parse(row.profile_json)), revision: row.revision, updatedAt: row.updated_at, servicesSource: 'user-declared' } : { ...EMPTY, tags: [], services: [] };
+  };
+  return {
+    get,
+    apply(tenantId, device) {
+      const profile = get(tenantId, device.id);
+      return { ...device, reportedName: device.reportedName ?? device.name, name: profile.displayName || device.name, profile };
+    },
+    save(tenantId, input) {
+      if (!input || Array.isArray(input) || Object.keys(input).some(k => !['deviceId', 'profile', 'revision'].includes(k)) || typeof input.deviceId !== 'string' || !input.deviceId || input.deviceId.length > 200 || !Number.isSafeInteger(input.revision) || input.revision < 0) fail('invalid_device_profile');
+      const profile = normalizeDeviceProfile(input.profile); ensure();
+      db.exec('BEGIN IMMEDIATE');
+      try {
+        if (get(tenantId, input.deviceId).revision !== input.revision) fail('device_profile_conflict', 409);
+        db.prepare('INSERT INTO device_profiles VALUES (?,?,?,?,?) ON CONFLICT(tenant_id,device_id) DO UPDATE SET profile_json=excluded.profile_json,revision=excluded.revision,updated_at=excluded.updated_at').run(tenantId, input.deviceId, JSON.stringify(profile), input.revision + 1, now());
+        db.exec('COMMIT');
+        return get(tenantId, input.deviceId);
+      } catch (error) { db.exec('ROLLBACK'); throw error; }
+    },
+  };
+}

package/server/drivers/driverProtocol.mjs

@@ -50,7 +50,8 @@ function metric(input, kind) {
   return { status: input.status, [used]: input.status === 'ok' ? input[used] : null, [total]: input.status === 'ok' ? input[total] : null };
 }
 export function normalizeReport(payload, shareSsh, now) {
-  object(payload, ['resources']);
+  object(payload, ['resources', 'collectionRequestId']);
+  if (payload.collectionRequestId !== undefined && (typeof payload.collectionRequestId !== 'string' || !/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(payload.collectionRequestId))) fail('invalid_collection_request');
   if (!Array.isArray(payload.resources) || !payload.resources.length || payload.resources.length > 16) fail('invalid_driver_resources');
   const ids = new Set();
   const resources = payload.resources.map((value, index) => {
@@ -62,5 +63,5 @@ export function normalizeReport(payload, shareSsh, now) {
     if (observedAt !== null && (!Number.isSafeInteger(observedAt) || observedAt < 0 || observedAt > now + 90_000)) fail('invalid_driver_observation_time');
     return { id: value.id, name: text(value.name), platform: text(value.platform, 64), kind: value.kind, observedAt: observedAt == null ? null : Math.min(observedAt, now), memory: metric(value.memory, 'memory'), disk: metric(value.disk, 'disk') };
   });
-  return { resources };
+  return { resources, ...(payload.collectionRequestId ? { collectionRequestId: payload.collectionRequestId } : {}) };
 }

package/server/drivers/inventory.mjs

@@ -4,12 +4,14 @@ import { discoverSsh } from './sshConfig.mjs';
 import { prepareSshProfile, probeSsh } from './sshProbe.mjs';
 import { normalizeConnectionPlan, readConnectionPlan, writeConnectionPlan } from './connectionPlans.mjs';
 import { inspectSshImport } from './sshInitialization.mjs';
+import { createDeviceProfiles } from './deviceProfiles.mjs';
 
 function associations(db, tenantId) {
   if (!db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name='ssh_associations'").get()) return [];
   return db.prepare('SELECT alias, created_at AS createdAt FROM ssh_associations WHERE tenant_id = ? ORDER BY alias COLLATE NOCASE').all(tenantId);
 }
 export function createInventory({ db, tenantId, runtime = 'native', sshHome, sshProbe = probeSsh }) {
+  const profiles = createDeviceProfiles({ db });
   const activeChecks = new Set();
   const pendingChecks = new Set();
   const exclusions = () => db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name='ssh_exclusions'").get()
@@ -48,7 +50,7 @@ export function createInventory({ db, tenantId, runtime = 'native', sshHome, ssh
         capabilities: { observation: Boolean(profile), remoteExecution: false },
       };
     });
-    return [observeLocalDriver({ runtime }), ...remote, ...listDevices(db, tenantId)];
+    return [observeLocalDriver({ runtime }), ...remote, ...listDevices(db, tenantId)].map(device => profiles.apply(tenantId, device));
   };
   const check = async (input) => {
     if (!input || Array.isArray(input) || Object.keys(input).some((key) => key !== 'alias') || typeof input.alias !== 'string') throw Object.assign(new Error('invalid_ssh_check'), { statusCode: 400 });
@@ -149,5 +151,22 @@ export function createInventory({ db, tenantId, runtime = 'native', sshHome, ssh
       return { removed, excluded: chosen.length, systemConfigurationChanged: false };
     } catch (cause) { db.exec('ROLLBACK'); throw cause; }
   };
-  return { list, discovery, associate, check, checkBatch, remove, associateAndCheck: (input) => configure(input, false), initializeAndCheck: (input) => configure(input, true), saveConnections, initialization, initialize };
+  const find = input => {
+    if (!input || Array.isArray(input) || typeof input.deviceId !== 'string') throw Object.assign(new Error('invalid_device_id'), { statusCode: 400 });
+    const device = list().find(d => d.id === input.deviceId);
+    if (!device) throw Object.assign(new Error('device_not_found'), { statusCode: 404 });
+    return device;
+  };
+  const saveProfile = input => { find(input); return { profile: profiles.save(tenantId, input) }; };
+  const collect = async input => {
+    if (Object.keys(input ?? {}).some(k => k !== 'deviceId')) throw Object.assign(new Error('invalid_collection_request'), { statusCode: 400 });
+    const device = find(input);
+    if (device.transport === 'ssh') {
+      const result = await check({ alias: device.ssh.alias });
+      if (!result.ok) return { status: 'failed', error: result.error, device: list().find(d => d.id === device.id) };
+    }
+    else if (device.source !== 'local-runtime' || runtime !== 'native') throw Object.assign(new Error('collection_unavailable'), { statusCode: 409 });
+    return { status: 'completed', device: list().find(d => d.id === device.id) };
+  };
+  return { list, discovery, associate, check, checkBatch, remove, saveProfile, collect, associateAndCheck: (input) => configure(input, false), initializeAndCheck: (input) => configure(input, true), saveConnections, initialization, initialize };
 }

package/server/index.mjs

@@ -13,6 +13,7 @@ import { createRemoteAgent, createRemoteClient } from './drivers/remote.mjs';
 
 const PROJECT_ROOT = resolve(fileURLToPath(new URL('..', import.meta.url)));
 const MIME_TYPES = { '.html': 'text/html; charset=utf-8', '.js': 'text/javascript; charset=utf-8', '.css': 'text/css; charset=utf-8', '.svg': 'image/svg+xml', '.png': 'image/png' };
+const PUBLIC_GUIDES = Object.freeze({ '/install/agent.md': 'docs/agent-install.md', '/install/trial.md': 'docs/friend-trial.md', '/install/remote-access.md': 'docs/remote-access.md', '/install/device-profiles.md': 'docs/device-profiles.md', '/install/troubleshooting.md': 'docs/troubleshooting.md' });
 function sendJson(response, status, payload, headers = {}) {
   response.writeHead(status, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store', 'x-content-type-options': 'nosniff', ...headers });
   response.end(JSON.stringify(payload));
@@ -42,6 +43,7 @@ async function serveStatic(pathname, response) {
   let filePath;
   if (pathname === '/' || pathname === '/index.html') filePath = resolve(PROJECT_ROOT, 'index.html');
   else if (pathname === '/login') filePath = resolve(PROJECT_ROOT, 'login.html');
+  else if (pathname === '/start' || pathname === '/start.html') filePath = resolve(PROJECT_ROOT, 'start.html');
   else if (pathname.startsWith('/src/')) {
     filePath = resolve(PROJECT_ROOT, `.${pathname}`);
     if (!filePath.startsWith(resolve(PROJECT_ROOT, 'src') + '/')) return sendJson(response, 404, { error: 'not_found' });
@@ -79,11 +81,18 @@ export function createDeviceCenterServer({ dbPath = './data/device-center.sqlite
       const origin = cloudAccess ? cloudAccess.validate(request) : validateLocalRequest(request);
       const url = new URL(request.url ?? '/', origin);
       const path = url.pathname;
+      // Public static installation reference only. No identity, configuration or owner API.
+      if (['/start', '/start.html', '/src/start.js', '/src/start.css', '/src/onboarding.js', '/src/i18n.js', '/src/i18n.css', '/src/messages.js', '/src/install-prompt.js'].includes(path) && request.method === 'GET') return await serveStatic(path, response);
+      if (Object.hasOwn(PUBLIC_GUIDES, path) && request.method === 'GET') {
+        const body = await readFile(resolve(PROJECT_ROOT, PUBLIC_GUIDES[path]));
+        response.writeHead(200, { 'content-type': 'text/markdown; charset=utf-8', 'cache-control': 'no-store', 'x-content-type-options': 'nosniff', 'content-security-policy': "default-src 'none'; frame-ancestors 'none'", 'referrer-policy': 'no-referrer' });
+        return response.end(body);
+      }
       let accountRegistry;
       if (cloud) {
         const machineActions = { '/api/driver/pair/start': 'start', '/api/driver/pair/poll': 'poll', '/api/driver/report': 'report', '/api/driver/disconnect': 'disconnect' };
         if (Object.hasOwn(machineActions, path) && request.method === 'POST') return sendJson(response, 200, registry[machineActions[path]](await readJson(request)));
-        if (['certificate','peers','relay/open','relay/accept','relay/exchange','relay/close'].some(action => path === `/api/driver/${action}`) && request.method === 'POST') return sendJson(response, 200, registry.machine(path.slice('/api/driver/'.length), await readJson(request)));
+        if (['control','certificate','peers','relay/open','relay/accept','relay/exchange','relay/close'].some(action => path === `/api/driver/${action}`) && request.method === 'POST') return sendJson(response, 200, registry.machine(path.slice('/api/driver/'.length), await readJson(request)));
         if (['/login', '/src/login.js', '/src/login.css'].includes(path) && request.method === 'GET') return await serveStatic(path, response);
         if (path === '/api/auth/options' && request.method === 'GET') return sendJson(response, 200, cloudAccess.options(request));
         if (path === '/api/auth/continue' && request.method === 'POST') {
@@ -106,12 +115,12 @@ export function createDeviceCenterServer({ dbPath = './data/device-center.sqlite
         }
         const principal = await cloudAccess.resolvePrincipal(request);
         if (!principal) {
-          if (path === '/' && request.method === 'GET') { response.writeHead(303, { location: '/login', 'cache-control': 'no-store' }); return response.end(); }
+          if (path === '/' && request.method === 'GET') { response.writeHead(303, { location: `/login${/^(zh-CN|zh-TW|en|ja|ko|es|fr|de|pt-BR)$/.test(url.searchParams.get('lang') ?? '') ? '?lang=' + url.searchParams.get('lang') : ''}`, 'cache-control': 'no-store' }); return response.end(); }
           return sendJson(response, 401, { error: 'authentication_required' });
         }
         accountRegistry = registry.forTenant(principal.tenantId);
         if (path === '/api/drivers' && request.method === 'GET') return sendJson(response, 200, { drivers: accountRegistry.bindings() });
-        const ownerActions = { '/api/drivers/pairing/lookup': 'lookup', '/api/drivers/pairing/approve': 'approve', '/api/drivers/revoke': 'revoke' };
+        const ownerActions = { '/api/devices/profile': 'saveProfile', '/api/devices/collect': 'collect', '/api/drivers/pairing/lookup': 'lookup', '/api/drivers/pairing/approve': 'approve', '/api/drivers/revoke': 'revoke' };
         if (Object.hasOwn(ownerActions, path) && request.method === 'POST') {
           if (request.headers.origin !== origin) return sendJson(response, 403, { error: 'same_origin_required' });
           return sendJson(response, 200, accountRegistry[ownerActions[path]](await readJson(request)));
@@ -144,6 +153,14 @@ export function createDeviceCenterServer({ dbPath = './data/device-center.sqlite
         if (request.method !== 'GET' || !web) return sendJson(response, 404, { error: 'not_found' });
         return await serveStatic(path, response);
       }
+      if (!cloud && ['/api/devices/profile', '/api/devices/collect'].includes(path) && request.method === 'POST') {
+        if (request.headers.origin !== origin) return sendJson(response, 403, { error: 'same_origin_required' });
+        const input = await readJson(request);
+        if (path === '/api/devices/profile') return sendJson(response, 200, inventory.saveProfile(input));
+        const result = await inventory.collect(input);
+        if (result.device.source === 'local-runtime') publisher?.requestCollection();
+        return sendJson(response, 200, result);
+      }
       if (path === '/api/devices/ssh' && request.method === 'POST') {
         if (request.headers.origin !== origin) return sendJson(response, 403, { error: 'same_origin_required' });
         return sendJson(response, 200, inventory.associate(await readJson(request)));

package/src/api.js

@@ -1,11 +1,14 @@
+import { getLocale } from './i18n.js';
 async function request(path, { timeoutMs = 12000, ...options } = {}) {
   const response = await fetch(path, { ...options, cache: 'no-store', signal: AbortSignal.timeout(timeoutMs) });
   const payload = await response.json().catch(() => ({}));
-  if (response.status === 401) { location.replace('/login'); throw new Error('authentication_required'); }
+  if (response.status === 401) { location.replace('/login?lang=' + getLocale()); throw new Error('authentication_required'); }
   if (!response.ok) throw new Error(payload.error ?? `http_${response.status}`);
   return payload;
 }
 export const api = {
+  saveDeviceProfile: (profile) => request('/api/devices/profile', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(profile) }),
+  collectDevice: (deviceId) => request('/api/devices/collect', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ deviceId }), timeoutMs: 30000 }),
   remotePeers: () => request('/api/remote/peers'),
   lookupPairing: (code) => request('/api/drivers/pairing/lookup', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ code }), timeoutMs: 12000 }),
   approvePairing: (id, shareSsh, code, fingerprint) => request('/api/drivers/pairing/approve', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ id, shareSsh, code, fingerprint }), timeoutMs: 12000 }),

package/src/device-state.js

@@ -1,3 +1,4 @@
+import { t } from './i18n.js';
 // Expire displayed SSH snapshots without a network request or a background SSH check.
 export function expireSshSnapshots(overview, now = Date.now()) {
   const expired = device => device.state === 'online' && (device.transport === 'ssh' && now - device.lastHeartbeat > 300_000 || device.source === 'driver-report' && (now - device.managementDriver.lastSeen > 90_000 || now - device.lastHeartbeat > (device.kind === 'management' ? 90_000 : 300_000)));
@@ -7,3 +8,22 @@ export function expireSshSnapshots(overview, now = Date.now()) {
   const stats = devices.reduce((totals, device) => { totals.total++; totals[device.state]++; return totals; }, { total: 0, online: 0, unknown: 0, expired: 0 });
   return { ...overview, devices, stats };
 }
+
+export const DEVICE_TYPE_LABELS = { get unspecified() { return t("panel.498"); }, get personal() { return t("panel.499"); }, get server() { return t("panel.500"); }, get workstation() { return t("panel.501"); }, get other() { return t("panel.502"); } };
+export function deviceStatus(device, now = Date.now()) {
+  if (device.state === 'unknown') return { label: t("panel.457"), title: t("panel.503") };
+  if (device.source === 'driver-report' && (device.managementDriver.lastSeen == null || now - device.managementDriver.lastSeen > 90_000)) return { label: t("panel.504"), title: t("panel.505") };
+  if (device.state === 'expired') return { label: t("panel.506"), title: t("panel.507") };
+  return { label: t("panel.456"), title: device.transport === 'ssh' ? t("panel.508") : t("panel.509") };
+}
+export function collectionAvailability(device, now = Date.now()) {
+  if (device.source === 'driver-report') {
+    if (device.collection?.status === 'pending' && device.collection.expiresAt > now) return { available: false, pending: true, hint: t("panel.41") };
+    if (device.kind !== 'management') return { available: false, hint: t("panel.510") };
+    if (device.managementDriver.lastSeen == null || now - device.managementDriver.lastSeen > 90_000) return { available: false, hint: t("panel.511") };
+    if (!device.collection?.supported) return { available: false, hint: device.collection?.reason === 'driver_control_unavailable' ? t("panel.512") : t("panel.513") };
+    return { available: true, hint: t("panel.514") };
+  }
+  if (device.transport === 'ssh') return { available: Boolean(device.ssh?.checkAvailable && !device.ssh.checking && !device.ssh.queued), hint: t("panel.515") };
+  return { available: device.source === 'local-runtime' && device.scope === 'host', hint: t("panel.516") };
+}

package/src/i18n.css

@@ -0,0 +1,61 @@
+.header-actions { display: flex; align-items: center; justify-content: flex-end; gap: 20px; flex-wrap: wrap; }
+.language-picker { display: inline-flex; flex: 0 0 auto; min-width: 0; color: #344d3e; font-size: 12px; }
+.language-picker button { font-family: inherit; cursor: pointer; filter: none; }
+.language-picker .language-trigger { display: inline-flex; align-items: center; justify-content: center; gap: 7px; width: auto; height: 34px; min-height: 34px; margin: 0; padding: 0 9px; border: 1px solid transparent; border-radius: 8px; background: transparent; color: inherit; font-size: 12px; font-weight: 500; line-height: 1; white-space: nowrap; transition: background .15s, border-color .15s; }
+.language-trigger > svg { width: 16px; height: 16px; flex-shrink: 0; color: #758375; }
+.language-trigger > .language-chevron { width: 12px; height: 12px; transition: transform .15s; }
+.language-trigger[aria-expanded="true"] > .language-chevron { transform: rotate(180deg); }
+.language-picker .language-trigger:hover, .language-trigger[aria-expanded="true"] { background: #eaf0e6; border-color: #dde6d8; }
+.language-picker button:focus-visible { outline: 2px solid #5c965d; outline-offset: 2px; }
+.language-menu { position: fixed; z-index: 40; width: 304px; max-width: calc(100vw - 24px); max-height: calc(100dvh - 32px); overflow: auto; padding: 8px; border: 1px solid #e0e7dc; border-radius: 13px; background: #fff; color: #344d3e; box-shadow: 0 12px 36px #2035241a, 0 2px 6px #20352409; }
+.language-menu[hidden] { display: none; }
+.language-menu-title { padding: 7px 9px 10px; color: #84907f; font-size: 11px; font-weight: 500; line-height: 1.3; }
+.language-options { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 3px; }
+.language-picker .language-option { display: flex; align-items: center; justify-content: space-between; gap: 5px; width: 100%; height: auto; min-height: 40px; padding: 8px 9px; margin: 0; border: 0; border-radius: 7px; background: transparent; color: #475449; text-align: left; font-size: 12px; font-weight: 400; line-height: 1.4; }
+.language-option > span { min-width: 0; }
+.language-option > svg { width: 14px; height: 14px; flex-shrink: 0; opacity: 0; color: #356c4c; }
+.language-picker .language-option:hover, .language-picker .language-option:focus-visible { background: #f2f5ef; }
+.language-picker .language-option[aria-checked="true"] { background: #eaf2e5; color: #2f6545; font-weight: 600; }
+.language-option[aria-checked="true"] > svg { opacity: 1; }
+.topbar { position: relative; z-index: 4; }
+.login-page main { position: relative; }
+.login-page main > .language-picker { position: absolute; top: 36px; right: 24px; }
+@media (max-width: 560px) { .header-actions { gap: 8px; } }
+@media (prefers-reduced-motion: reduce) { .language-trigger, .language-chevron { transition: none !important; } }
+/* Longer translations must wrap without moving the sidebar or top bar. */
+.modal-heading { gap: 12px; flex-wrap: wrap; }
+.modal-heading h2 { flex: 1 1 140px; min-width: 0; }
+.modal-heading .language-picker { margin-left: auto; }
+.nav-item svg { flex-shrink: 0; }
+.nav-item > span { min-width: 0; overflow-wrap: anywhere; }
+.resource-top { flex-wrap: wrap; }
+.resource-top > span { overflow-wrap: anywhere; white-space: normal; }
+@media (max-width: 760px) {
+  .topbar .environment-badge { display: none; }
+  .topbar .header-actions { flex-wrap: nowrap; gap: 0; }
+  .topbar > span { min-width: 0; }
+  .page-heading { flex-wrap: wrap; align-items: flex-start; gap: 8px; }
+  .page-heading > div:first-child { width: 100%; min-width: 0; }
+  .page-heading h1 { overflow-wrap: anywhere; line-height: 1.25; }
+  .heading-actions { max-width: none; width: 100%; justify-content: flex-start; }
+  .heading-actions > button { white-space: normal; max-width: 100%; }
+  .driver-summary { flex-wrap: wrap; }
+  .driver-summary p { flex-basis: 100%; margin-left: 12px; }
+  .initialize-entry { margin-left: auto; }
+  .filter-tabs { flex-wrap: wrap; }
+  .page-footer { gap: 8px; flex-wrap: wrap; }
+  .method-tabs { flex-wrap: wrap; }
+  .method-tabs button { white-space: normal; min-width: 0; }
+  .start-page header { flex-wrap: wrap; }
+}
+
+@media (max-width: 440px) {
+  .nav-item svg { display: none; }
+  .nav-item > span { overflow-wrap: normal; hyphens: auto; }
+}
+@media (max-width: 560px) {
+  .modal-heading { display: grid; grid-template-columns: minmax(0, 1fr) auto; }
+  .modal-heading h2 { grid-column: 1; grid-row: 1; }
+  .modal-heading .icon-button { grid-column: 2; grid-row: 1; }
+  .modal-heading .language-picker { grid-column: 1 / -1; grid-row: 2; margin-left: 0; }
+}

package/src/i18n.js

@@ -0,0 +1,174 @@
+import { messages } from './messages.js';
+
+export const LANGUAGES = Object.freeze([
+  { code: 'zh-CN', name: '简体中文' }, { code: 'zh-TW', name: '繁體中文' },
+  { code: 'en', name: 'English' }, { code: 'ja', name: '日本語' },
+  { code: 'ko', name: '한국어' }, { code: 'es', name: 'Español' },
+  { code: 'fr', name: 'Français' }, { code: 'de', name: 'Deutsch' },
+  { code: 'pt-BR', name: 'Português (Brasil)' },
+]);
+const STORAGE_KEY = 'device-center.locale';
+export function normalizeLocale(value) {
+  if (typeof value !== 'string') return null;
+  const tag = value.replaceAll('_', '-').toLowerCase();
+  if (/^zh(?:-|$)/.test(tag)) return /(?:hant|tw|hk|mo)(?:-|$)/.test(tag) ? 'zh-TW' : 'zh-CN';
+  if (/^pt(?:-|$)/.test(tag)) return 'pt-BR';
+  return LANGUAGES.find(item => item.code === tag.split('-')[0])?.code ?? null;
+}
+export function resolveLocale({ query, saved, languages = [] } = {}) {
+  return normalizeLocale(query) ?? normalizeLocale(saved) ?? languages.map(normalizeLocale).find(Boolean) ?? 'en';
+}
+export function translate(locale, key, values = {}) {
+  const code = normalizeLocale(locale) ?? 'en';
+  const entry = lang => Object.hasOwn(messages[lang], key) ? messages[lang][key] : undefined;
+  const text = entry(code) ?? entry('en') ?? entry('zh-CN') ?? key;
+  return text.replace(/\{([a-zA-Z0-9_]+)\}/g, (match, name) => Object.hasOwn(values, name) ? String(values[name]) : match);
+}
+let locale = 'zh-CN';
+export const getLocale = () => locale;
+export const t = (key, values) => translate(locale, key, values);
+export const h = (key, values) => t(key, values).replace(/[&<>"']/g, char => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[char]);
+let pickerSequence = 0;
+const globe = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.6" aria-hidden="true"><circle cx="12" cy="12" r="9"/><path d="M3 12h18M12 3a17 17 0 0 1 0 18 17 17 0 0 1 0-18Z"/></svg>';
+const chevron = '<svg class="language-chevron" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5" aria-hidden="true"><path d="m4 6 4 4 4-4"/></svg>';
+function pickerContents() {
+  const id = `language-menu-${++pickerSequence}`;
+  const current = LANGUAGES.find(item => item.code === locale);
+  return `<button type="button" class="language-trigger" data-language-trigger aria-label="${h('language')}: ${current.name}" aria-haspopup="menu" aria-expanded="false" aria-controls="${id}">${globe}<span>${current.code === 'pt-BR' ? 'Português' : current.name}</span>${chevron}</button>
+    <div class="language-menu" id="${id}" data-language-menu role="menu" aria-label="${h('language')}" hidden><div class="language-menu-title" aria-hidden="true">${h('language')}</div><div class="language-options" role="none">${LANGUAGES.map(item => `<button type="button" class="language-option" data-language-option="${item.code}" role="menuitemradio" aria-checked="${locale === item.code}" tabindex="-1" lang="${item.code}"><span>${item.name}</span><svg viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.7" aria-hidden="true"><path d="m3 8 3 3 7-7"/></svg></button>`).join('')}</div></div>`;
+}
+export function languagePickerMarkup() {
+  return `<div class="language-picker" data-language-picker>${pickerContents()}</div>`;
+}
+export function applyTranslations(root = document) {
+  for (const element of root.querySelectorAll('[data-i18n]')) element.textContent = t(element.dataset.i18n);
+  for (const attribute of ['placeholder', 'title', 'aria-label', 'content']) {
+    for (const element of root.querySelectorAll(`[data-i18n-${attribute}]`)) element.setAttribute(attribute, t(element.getAttribute(`data-i18n-${attribute}`)));
+  }
+}
+// Only explicit UI markers are translated. User names, tags, code and paths are untouched.
+export function initLanguage({ onChange = () => {} } = {}) {
+  let saved;
+  try { saved = localStorage.getItem(STORAGE_KEY); } catch { /* Private mode can deny storage. */ }
+  const params = new URLSearchParams(location.search);
+  locale = resolveLocale({ query: params.get('lang'), saved, languages: navigator.languages ?? [navigator.language] });
+  if (normalizeLocale(params.get('lang'))) {
+    try { localStorage.setItem(STORAGE_KEY, locale); } catch { /* Share links also work without storage. */ }
+  }
+  const apply = () => {
+    document.documentElement.lang = locale;
+    document.documentElement.dir = 'ltr';
+    applyTranslations();
+    for (const picker of document.querySelectorAll('[data-language-picker]')) picker.innerHTML = pickerContents();
+    // Language links stay on this origin and never include account/pairing information.
+    for (const link of document.querySelectorAll('a[data-language-link]')) {
+      const url = new URL(link.getAttribute('href'), location.origin);
+      if (url.origin === location.origin) { url.searchParams.set('lang', locale); link.setAttribute('href', `${url.pathname}${url.search}${url.hash}`); }
+    }
+    onChange(locale);
+  };
+  const closeMenus = (restoreFocus = false) => {
+    for (const picker of document.querySelectorAll('[data-language-picker]')) {
+      const trigger = picker.querySelector('[data-language-trigger]');
+      const menu = picker.querySelector('[data-language-menu]');
+      if (!menu || menu.hidden) continue;
+      menu.hidden = true; trigger.setAttribute('aria-expanded', 'false');
+      if (restoreFocus) trigger.focus({ preventScroll: true });
+    }
+  };
+  const openMenu = (picker, last = false) => {
+    closeMenus();
+    const trigger = picker.querySelector('[data-language-trigger]');
+    const menu = picker.querySelector('[data-language-menu]');
+    menu.hidden = false; trigger.setAttribute('aria-expanded', 'true');
+    const anchor = trigger.getBoundingClientRect();
+    const size = menu.getBoundingClientRect();
+    menu.style.left = `${Math.max(12, Math.min(anchor.right - size.width, innerWidth - size.width - 12))}px`;
+    const top = anchor.bottom + 8;
+    menu.style.top = `${Math.max(12, top + size.height <= innerHeight - 12 ? top : anchor.top - size.height - 8)}px`;
+    const options = [...menu.querySelectorAll('[data-language-option]')];
+    (last ? options.at(-1) : menu.querySelector('[aria-checked="true"]') ?? options[0])?.focus({ preventScroll: true });
+  };
+  const choose = (value, picker) => {
+    const next = normalizeLocale(value); if (!next) return;
+    const inDialog = Boolean(picker.closest('[role="dialog"]'));
+    closeMenus(true);
+    locale = next;
+    try { localStorage.setItem(STORAGE_KEY, locale); } catch { /* Selection still works in memory. */ }
+    const url = new URL(location.href); url.searchParams.set('lang', locale);
+    try { history.replaceState(null, '', url); } catch { /* Do not prevent language selection. */ }
+    apply();
+    const container = picker.isConnected ? picker : document.querySelector(inDialog ? '[role="dialog"]' : '.topbar') ?? document;
+    container.querySelector('[data-language-trigger]')?.focus({ preventScroll: true });
+  };
+  // Capture events before the page's dialog handlers; Escape closes this menu first.
+  document.addEventListener('click', event => {
+    const trigger = event.target.closest('[data-language-trigger]');
+    const option = event.target.closest('[data-language-option]');
+    if (trigger) {
+      event.stopPropagation();
+      if (trigger.getAttribute('aria-expanded') === 'true') closeMenus(true);
+      else openMenu(trigger.closest('[data-language-picker]'));
+    } else if (option) {
+      event.stopPropagation(); choose(option.dataset.languageOption, option.closest('[data-language-picker]'));
+    } else if (!event.target.closest('[data-language-menu]')) closeMenus();
+  }, true);
+  document.addEventListener('keydown', event => {
+    const picker = event.target.closest('[data-language-picker]');
+    if (!picker) return;
+    const menu = picker.querySelector('[data-language-menu]');
+    if (menu.hidden) {
+      if (event.target.matches('[data-language-trigger]') && ['ArrowDown', 'ArrowUp'].includes(event.key)) {
+        event.preventDefault(); event.stopPropagation(); openMenu(picker, event.key === 'ArrowUp');
+      }
+      return;
+    }
+    if (event.key === 'Escape') { event.preventDefault(); event.stopPropagation(); closeMenus(true); return; }
+    const options = [...menu.querySelectorAll('[data-language-option]')];
+    const index = options.indexOf(document.activeElement);
+    let next;
+    if (event.key === 'Home') next = 0;
+    else if (event.key === 'End') next = options.length - 1;
+    else if (event.key === 'ArrowDown') next = (index + 2) % options.length;
+    else if (event.key === 'ArrowUp') next = (index - 2 + options.length) % options.length;
+    else if (event.key === 'ArrowRight') next = (index + 1) % options.length;
+    else if (event.key === 'ArrowLeft') next = (index - 1 + options.length) % options.length;
+    if (next !== undefined) { event.preventDefault(); event.stopPropagation(); options[next].focus(); }
+    if (event.key === 'Tab') closeMenus(true);
+  }, true);
+  document.addEventListener('focusout', event => {
+    const picker = event.target.closest('[data-language-picker]');
+    if (picker?.isConnected && !picker.contains(event.relatedTarget)) closeMenus();
+  });
+  document.addEventListener('scroll', event => { if (!event.target.closest?.('[data-language-menu]')) closeMenus(); }, true);
+  window.addEventListener('resize', () => closeMenus());
+  apply();
+  return locale;
+}
+
+// Compatibility for server-owned diagnostics only; never pass device names or user input.
+const REPORT_MESSAGE_KEYS = {
+  "容器不能代表宿主内存": "metric.containerMemory",
+  "容器不能代表宿主磁盘": "metric.containerDisk",
+  "无法读取系统内存": "metric.memoryFailure",
+  "无法读取用户目录所在卷": "metric.diskFailure",
+  "尚无有效 SSH 采集": "metric.sshPending",
+  "SSH 内存采集失败": "metric.sshMemory",
+  "SSH 磁盘采集失败": "metric.sshDisk",
+  "容器不读取宿主 SSH 配置。请在宿主运行 Driver。": "notice.container",
+  "本机尚无可读取的 SSH 配置。": "notice.missing",
+  "Include 路径过深，已跳过。": "notice.deep",
+  "Include 目录读取达到上限，候选可能不完整。": "notice.directoryLimit",
+  "已跳过目录外的 Include。": "notice.outside",
+  "部分 Include 无法读取。": "notice.unreadable",
+  "配置读取达到上限，部分候选未列出。": "notice.limit",
+  "已跳过受限目录外或非 config / .conf 的 Include。": "notice.restricted",
+  "已跳过循环 Include。": "notice.loop",
+  "配置文件过大或不是普通文件，已跳过。": "notice.fileSize",
+  "配置文件过大，已跳过。": "notice.large",
+  "文件不是 SSH 配置，已忽略。": "notice.notConfig",
+  "候选数达到上限。": "notice.candidateLimit",
+  "含 Match 条件：仅登记别名，未解析条件或执行命令。": "notice.match",
+  "已跳过 Host / Match 内的条件 Include，候选可能不完整。": "notice.conditional"
+};
+export const reportMessage = value => Object.hasOwn(REPORT_MESSAGE_KEYS, value) ? t(REPORT_MESSAGE_KEYS[value]) : value;

package/src/install-prompt.js

@@ -0,0 +1,19 @@
+import { translate } from './i18n.js';
+
+export function localizedInstallPrompt(plan, locale) {
+  const c = plan.commands;
+  const tr = (key, values) => translate(locale, key, values);
+  return [
+    tr('prompt.intro'),
+    tr('prompt.choice', { mode: tr(plan.mode === 'local' ? 'guide.local' : plan.mode === 'official' ? 'guide.hosted' : 'guide.custom'), version: plan.version, run: tr(plan.background ? 'prompt.background' : 'prompt.foreground') }),
+    plan.controlOrigin ? tr('prompt.private', { origin: plan.controlOrigin }) : '',
+    `1. ${tr('prompt.environment')}`,
+    `2. ${tr('prompt.existing', { url: plan.url, status: c.bindingStatus, service: c.serviceStatus })}`,
+    `3. ${tr('prompt.userInstall')}\n   ${c.install}\n   ${c.version}\n   ${tr('prompt.config')}`,
+    `4. ${plan.background ? `${tr('prompt.bg')}\n   ${c.servicePlan}\n   ${c.serviceInstall}\n   ${c.serviceStatus}` : `${tr('prompt.fg')}${plan.controlOrigin ? '' : `\n   ${c.foreground}`}`}`,
+    `5. ${plan.controlOrigin ? `${tr('prompt.pairBefore')}\n   ${c.pairingPlan}\n   ${c.connect}\n   ${tr('prompt.pairAfter', { origin: plan.controlOrigin })}` : tr('prompt.local')}`,
+    `6. ${tr('prompt.mcp', { url: plan.url, mcp: plan.mcpUrl })}`,
+    `7. ${tr('prompt.verify')}\n   ${tr('prompt.uninstall')}\n   ${c.uninstallService}`,
+    tr('prompt.boundaries'), tr('prompt.end'),
+  ].filter(Boolean).join('\n\n');
+}

package/src/login.css

@@ -14,3 +14,7 @@ button:disabled { opacity: .6; }
 .login-link { display: grid; place-items: center; min-height: 44px; margin-top: 24px; border-radius: 8px; color: white; background: #3c622a; text-decoration: none; font-size: 14px; }
 .help { line-height: 1.7; margin: 20px 0; }
 small { color: #788473; }
+
+.install-help { margin-top: 24px; padding-top: 18px; border-top: 1px solid #e3e7e0; line-height: 1.8; }
+.install-help a { color: #3c622a; text-underline-offset: 3px; }
+.install-help span { font-size: 12px; }