dsh-coding-subscription-oauth 0.5.0

package/src/client/index.tsx

@@ -0,0 +1,37 @@
+/** Browser half: coding-subscription account management inside dsh Settings. */
+
+import type {} from "@deepseek-ai/dsh-client-locale/client";
+import type { ClientContext } from "@deepseek-ai/dsh-client-runtime/client";
+import type {} from "@deepseek-ai/dsh-client-ui-settings/client";
+import type {} from "@deepseek-ai/dsh-client-ui-slots";
+import type { GrokBuildSettingsInjected } from "./GrokBuildSettings.tsx";
+import { GrokBuildSettings } from "./GrokBuildSettings.tsx";
+import type { GrokBuildSettingsKey } from "./locales.ts";
+import { en, zh } from "./locales.ts";
+
+declare module "@deepseek-ai/dsh-client-ui-slots" {
+	interface LocaleNamespaceMap {
+		"settings.grok-build": GrokBuildSettingsKey;
+	}
+}
+
+export const name = "dsh-grok-build-client";
+export const inject = ["slots", "locale"];
+
+export function apply(ctx: ClientContext): void {
+	const namespace = "settings.grok-build";
+	ctx.effect(() => ctx.locale.register(namespace, { zh, en }), "dsh-coding-subscription-oauth: settings copy");
+	const t = ctx.locale.bind(namespace) as GrokBuildSettingsInjected["t"];
+	ctx.slots.inject("settings.section", () =>
+		ctx.slots.register(
+			{
+				name: "settings.section",
+				id: "grok-build",
+				order: 17,
+				label: () => t("nav"),
+				inject: (): GrokBuildSettingsInjected => ({ t }),
+			},
+			GrokBuildSettings,
+		),
+	);
+}

package/src/client/locales.ts

@@ -0,0 +1,421 @@
+/** English copy for the Coding OAuth settings section. */
+export const en = {
+	nav: "Coding OAuth",
+	title: "Coding subscriptions",
+	intro:
+		"Use your own Grok Build, ChatGPT Codex, Kimi Code, and Claude Code subscriptions in dsh. API-key routes remain separate.",
+	termsWarning:
+		"These are unofficial third-party integrations with subscription services. Provider terms, quotas, regions, and account-risk policies still apply.",
+	loadingAccount: "Loading accounts…",
+	signedOut: "Not signed in",
+	signingIn: "Waiting for authorization…",
+	signedIn: "Signed in",
+	requestFailed: "The account request failed.",
+	logout: "Sign out",
+	working: "Working…",
+	cancelLogin: "Cancel sign-in",
+	deviceLogin: "Sign in with device code",
+	browserLogin: "Sign in in browser",
+	pkceLogin: "Sign in with authorization code",
+	userCode: "Enter this code when the provider asks:",
+	openUrl: "Complete sign-in at:",
+	popupBlocked: "The browser blocked the sign-in window. Open this URL manually:",
+	pasteCodeHint:
+		"Paste the authorization code or complete redirect URL returned by the provider. For local PKCE, use this only if the callback could not reach this DSH host:",
+	pasteBrowserCodeHint:
+		"Paste the authorization code or complete redirect URL returned by the provider to finish this browser sign-in:",
+	pasteCodePlaceholder: "authorization code or complete redirect URL",
+	submitCode: "Submit code",
+	importGrok: "Import from Grok CLI",
+	importHint: "Copies ~/.grok/auth.json into dsh. A later dsh refresh may rotate the token and sign the Grok CLI out.",
+	models: "Visible models",
+	catalogLive: "From your current xAI account",
+	catalogCache: "From the last successful xAI listing",
+	catalogFallback: "Built-in Grok baseline (live listing unavailable)",
+	catalogError: "Could not refresh the live Grok model list.",
+	selectAll: "Show all",
+	modelHint: "Checked models appear in the model picker as",
+	grokTitle: "xAI Grok Build",
+	grokDescription: "SuperGrok / X Premium coding subscription through the Grok Build endpoint.",
+	codexTitle: "OpenAI Codex",
+	codexDescription: "ChatGPT Plus/Pro Codex entitlement. Device code is recommended for a remote DSH host.",
+	kimiTitle: "Kimi Code",
+	kimiDescription:
+		"Kimi Code membership through auth.kimi.com and api.kimi.com/coding; this is not the Moonshot API-key platform.",
+	claudeTitle: "Claude Code",
+	claudeDescription: "Claude Pro/Max OAuth with Claude Code scopes and automatic refresh.",
+	antigravityTitle: "Google Antigravity",
+	antigravityDescription: "Provided by the separately pinned MIT dsh-agy plugin and exposed as the agy route.",
+	antigravityInstalled: "Installed (CLI-managed)",
+	antigravityMissing: "Not installed",
+	antigravityCliHint:
+		"The unauthenticated dsh-agy web export dashboard is disabled. Manage Google OAuth with the profile-local CLI when needed.",
+	antigravityCliCommand: "dsh plugin --profile web exec dsh-agy login --headless",
+	sourcesTitle: "Pull a copy from official CLI files",
+	sourcesIntro:
+		"dsh can discover a local official CLI login and pull a one-way copy into its own store. Official CLI files stay read-only and are never modified.",
+	sourcesReadOnlyHint:
+		"This is a one-way pull of a copy. dsh does not update, replace, or write back the official CLI documents.",
+	sourcesLoading: "Looking for official CLI login files…",
+	sourcesCheckAgain: "Check again",
+	sourcesAvailable: "A readable copy is available",
+	sourcesUnavailable: "No usable copy found",
+	sourcesPullCopy: "Pull a copy",
+	sourcesPreviewTitle: "Review this copy before saving it in dsh",
+	sourcesPreviewExpires: "CLI credential expiry: {time}",
+	sourcesTicketExpires: "This preview expires at {time}",
+	sourcesConflict: "Stored dsh credential: {detail}",
+	sourcesAction: "If you continue: {detail}",
+	sourcesWarnings: "Notes",
+	sourcesConfirmOverwrite: "Replace the credential already stored in dsh with this copy",
+	sourcesConfirmOverwriteHint: "A different credential is already stored. Check the box, then confirm the pull.",
+	sourcesCommit: "Confirm pull",
+	sourcesCancelPreview: "Cancel preview",
+	sourcesCommitSuccess: "Copied into dsh ({action}).",
+	sourcesPreviewFailed: "Could not prepare a copy from that CLI file.",
+	sourcesCommitFailed: "Could not save the copy in dsh.",
+	sourcesLoadFailed: "Could not look for official CLI login files.",
+	sourceKindGrok: "Grok CLI",
+	sourceKindCodex: "Codex CLI",
+	sourceKindKimi: "Kimi Code CLI",
+	sourceKindClaude: "Claude Code CLI",
+	sourceReasonMissing: "No official CLI file was found at the expected location.",
+	sourceReasonUnsafe: "The official CLI file is not safe to read (permissions or file type).",
+	sourceReasonInvalid: "The official CLI file is present but is not a usable OAuth login.",
+	sourceReasonTooLarge: "The official CLI file is larger than the allowed read limit.",
+	sourceConflictNone: "dsh has no stored credential yet",
+	sourceConflictSameCredential: "same credential already stored",
+	sourceConflictSameAccount: "same account, different credential",
+	sourceConflictDifferentAccount: "a different account is already stored",
+	sourceConflictUnknownAccount: "an existing credential is stored (account could not be compared)",
+	sourceConflictUnreadableDestination: "the stored dsh credential could not be read",
+	sourceConflictUnsafeDestination: "the stored dsh credential file is not safe to replace",
+	sourceConflictUnrecognized: "the stored credential needs a review",
+	sourceActionImport: "save this copy in dsh",
+	sourceActionReuse: "keep the stored dsh credential (it already matches)",
+	sourceActionOverwrite: "replace the stored dsh credential",
+	sourceActionBlocked: "blocked — the stored dsh file cannot be replaced from here",
+	sourceActionUnrecognized: "needs a review",
+	sourceCommitImported: "saved",
+	sourceCommitUnchanged: "already matched",
+	sourceCommitOverwritten: "replaced",
+	capabilitiesTitle: "Subscription capabilities",
+	capabilitiesIntro:
+		"Every switch starts off. Turning one on uses that vendor’s subscription quota, not a separate API-key bill.",
+	capabilitiesQuotaHint:
+		"Search, images, edits, Fast, usage, and Grok Imagine all consume the matching subscription quota when they run.",
+	capabilitiesReadOnly: "These switches are read-only in this deployment.",
+	capabilitiesLoading: "Loading capability settings…",
+	capabilitiesLoadFailed: "Could not load capability settings.",
+	capabilitiesSaveFailed: "Could not save that capability setting.",
+	capabilitiesConflictRefreshed: "Those settings changed elsewhere. The page was refreshed; try again.",
+	capabilityLimitsTitle: "Capability limits",
+	capabilityLimitsHint: "Limits apply live to newly started operations and remain within the audited safety bounds.",
+	capSearchResults: "Maximum search results",
+	capSearchResultsHint: "Codex search returns at most this many results (1–20).",
+	capImageCount: "Maximum images per call",
+	capImageCountHint: "Codex and Imagine image tools can return at most this many images (1–4).",
+	capVideoTtlHours: "Video artifact retention (hours)",
+	capVideoTtlHoursHint:
+		"Completed Imagine video artifacts are kept for 1–168 hours. Lowering retention cleans older artifacts immediately; raising it applies to new artifacts.",
+	capabilityLimitInvalid: "Enter a whole number from {min} through {max}.",
+	capCodexSearch: "Codex subscription search",
+	capCodexSearchHint: "Optional Codex search. It does not become the default search provider.",
+	capCodexImages: "Codex images",
+	capCodexImagesHint: "Optional Codex image generation. Uses ChatGPT/Codex quota.",
+	capCodexImageEdits: "Codex image edits",
+	capCodexImageEditsHint: "Optional Codex image edits. Available only when Codex images is on.",
+	capCodexUsage: "Show Codex quota",
+	capCodexUsageHint: "Best-effort remaining-quota card. Hidden if the vendor does not return usable numbers.",
+	capCodexFast: "Fast requested",
+	capCodexFastHint:
+		"Publishes the codex-oauth-fast route only after a fresh private model catalog confirms a priority-eligible model; failures withdraw it.",
+	capGrokImagineImage: "Grok Imagine images",
+	capGrokImagineImageHint: "Optional official xAI Imagine images. Requires an Imagine credential, not only Grok OAuth.",
+	capGrokImagineVideo: "Grok Imagine video",
+	capGrokImagineVideoHint: "Optional official xAI Imagine video. Requires an Imagine credential, not only Grok OAuth.",
+	usageTitle: "Codex quota",
+	usageLoading: "Loading Codex quota…",
+	usageUnavailable: "Codex quota is not available right now.",
+	usageEmpty: "The vendor did not return any displayable quota fields.",
+	usageFetchedAt: "Last read: {time}",
+	usageRateLimit: "Rate limit",
+	usageWindow: "{seconds}s window",
+	usageUsed: "Used {value}",
+	usageRemaining: "Remaining {value}",
+	usageResets: "Resets {time}",
+	usageCredits: "Credits",
+	usageCreditsUnlimited: "Unlimited credits",
+	usageCreditsLimited: "Limited credits",
+	usageBalance: "Balance {value}",
+	usageIndividualLimit: "Individual limit",
+	usageLimit: "Limit {value}",
+	usageUsedAmount: "Used {value}",
+	usageRemainingAmount: "Remaining {value}",
+	usageSpendControlReached: "Spend control has been reached.",
+	usageResetCredits: "Reset credits available: {value}",
+	imagineTitle: "Grok Imagine credential",
+	imagineIntro:
+		"Official Imagine calls use an xAI API credential (for example $XAI_API_KEY). That key is separate from a Grok Build OAuth login and is never shown here.",
+	imagineLoading: "Checking the Imagine credential…",
+	imagineLoadFailed: "Could not read the Imagine credential status.",
+	imagineConfigured: "An Imagine credential is configured",
+	imagineNotConfigured: "No Imagine credential is configured",
+	imagineSource: "Source: {source}",
+	imagineWritable: "This deployment can update the Imagine credential store.",
+	imagineReadOnly: "This deployment cannot update the Imagine credential store.",
+	imagineSourceNone: "none",
+	imagineSourceEnv: "environment variable",
+	imagineSourceApiKey: "stored API key",
+	imagineSourceOAuth: "OAuth access (only if Imagine accepted it)",
+	imagineSourceCliKey: "Grok CLI key field",
+	imagineSourceUnknown: "configured (details withheld)",
+	tabAccounts: "Accounts",
+	tabCapabilities: "Capabilities",
+	tabGateway: "Gateway",
+	tabAbout: "About",
+	copy: "Copy",
+	copied: "Copied",
+	copyFailed: "Could not copy",
+	modelsSummary: "{selected}/{total} models visible",
+	expandModels: "Models",
+	collapseModels: "Hide models",
+	usageUsedShort: "Used {value}",
+	gatewayTitle: "Local API gateway",
+	gatewayIntro: "Loopback OpenAI/Anthropic-compatible server for your own tools. Off until you enable it.",
+	gatewayWarning: "Exposes signed-in subscriptions as a local API. Can violate provider terms and uses quota.",
+	gatewayEnabled: "Enable local gateway",
+	gatewayBind: "Bind",
+	gatewayPort: "Port",
+	gatewayPortHint: "Integer from 1024 through 65535. Apply to save; Random fills a high port, then Apply.",
+	gatewayPortApply: "Apply",
+	gatewayPortRandom: "Random",
+	gatewayPortInvalid: "Enter a whole port number from 1024 through 65535.",
+	gatewayAddress: "Gateway address",
+	gatewayOpenAiUrl: "OpenAI-compatible base URL",
+	gatewayAnthropicUrl: "Anthropic-compatible base URL",
+	gatewayKeyHint: "Bearer key",
+	gatewayKeyCopyHint: "Copy uses the current key. Rotate only if you want to invalidate existing clients.",
+	gatewayCopyKey: "Copy key",
+	gatewayShowKey: "Show",
+	gatewayHideKey: "Hide",
+	gatewayRevealFailed: "Could not read the current key.",
+	gatewayRotateConfirm: "Rotate the key? Existing clients will stop working.",
+	gatewayRotateConfirmHint: "This replaces the current Bearer key.",
+	gatewayRotateConfirmAction: "Confirm rotate",
+	gatewayRotateCancel: "Cancel",
+	gatewayRunning: "Listening",
+	gatewayStopped: "Not listening",
+	gatewayRotate: "Rotate API key",
+	gatewayRotated: "New key (shown once): {key}",
+	gatewayLoadFailed: "Could not load gateway settings.",
+	gatewaySaveFailed: "Could not update the gateway.",
+	gatewayLoading: "Loading gateway settings…",
+};
+
+export type GrokBuildSettingsKey = keyof typeof en;
+
+export const zh: { [Key in GrokBuildSettingsKey]: string } = {
+	nav: "编码 OAuth",
+	title: "编码订阅账户",
+	intro:
+		"在 dsh 中使用自己的 Grok Build、ChatGPT Codex、Kimi Code 和 Claude Code 订阅；现有 API-key 路由继续独立保留。",
+	termsWarning: "这些是订阅服务的非官方第三方集成，仍受供应商条款、配额、地区限制和账号风控约束。",
+	loadingAccount: "正在加载账户…",
+	signedOut: "尚未登录",
+	signingIn: "正在等待授权…",
+	signedIn: "已登录",
+	requestFailed: "账户请求失败。",
+	logout: "退出登录",
+	working: "处理中…",
+	cancelLogin: "取消登录",
+	deviceLogin: "使用设备码登录",
+	browserLogin: "在浏览器中登录",
+	pkceLogin: "使用授权码登录",
+	userCode: "供应商要求输入代码时，请输入：",
+	openUrl: "请在此完成登录：",
+	popupBlocked: "浏览器阻止了登录窗口，请手动打开：",
+	pasteCodeHint: "请粘贴供应商返回的授权 code 或完整跳转链接。本地 PKCE 仅在回调无法到达这台 DSH 主机时使用：",
+	pasteBrowserCodeHint: "请粘贴供应商返回的授权 code 或完整跳转链接，以完成此次浏览器登录：",
+	pasteCodePlaceholder: "授权 code 或完整跳转链接",
+	submitCode: "提交 code",
+	importGrok: "从 Grok CLI 导入",
+	importHint: "把 ~/.grok/auth.json 复制进 dsh；之后 dsh 刷新 token 可能让 Grok CLI 掉线。",
+	models: "可见模型",
+	catalogLive: "来自当前 xAI 账号",
+	catalogCache: "来自上一次成功拉取的 xAI 列表",
+	catalogFallback: "内置 Grok 基线目录（线上列表不可用）",
+	catalogError: "无法刷新线上 Grok 模型列表。",
+	selectAll: "全部显示",
+	modelHint: "勾选模型会以该前缀出现在模型选择器：",
+	grokTitle: "xAI Grok Build",
+	grokDescription: "通过 Grok Build 端点使用 SuperGrok / X Premium 编码订阅。",
+	codexTitle: "OpenAI Codex",
+	codexDescription: "使用 ChatGPT Plus/Pro 的 Codex 权益；远程 DSH 主机推荐设备码登录。",
+	kimiTitle: "Kimi Code",
+	kimiDescription: "通过 auth.kimi.com 与 api.kimi.com/coding 使用 Kimi Code 会员；不是 Moonshot API-key 开放平台。",
+	claudeTitle: "Claude Code",
+	claudeDescription: "Claude Pro/Max OAuth，包含 Claude Code scope 和自动刷新。",
+	antigravityTitle: "Google Antigravity",
+	antigravityDescription: "由单独固定版本的 MIT 开源 dsh-agy 插件提供，对外路由为 agy。",
+	antigravityInstalled: "已安装（CLI 管理）",
+	antigravityMissing: "尚未安装",
+	antigravityCliHint:
+		"为避免暴露无认证的凭据导出页面，默认禁用 dsh-agy Web 管理页；需要时使用 profile 内 CLI 管理 Google OAuth。",
+	antigravityCliCommand: "dsh plugin --profile web exec dsh-agy login --headless",
+	sourcesTitle: "从官方 CLI 文件拉取副本",
+	sourcesIntro:
+		"dsh 可以自动发现本机官方 CLI 登录，并单向拉取一份副本到自己的存储。官方 CLI 文件保持只读，绝不会被修改。",
+	sourcesReadOnlyHint: "这是单向拉取副本。dsh 不会更新、覆盖或回写官方 CLI 文档。",
+	sourcesLoading: "正在查找官方 CLI 登录文件…",
+	sourcesCheckAgain: "再检查一次",
+	sourcesAvailable: "可以读取一份副本",
+	sourcesUnavailable: "没有可用的副本",
+	sourcesPullCopy: "拉取副本",
+	sourcesPreviewTitle: "先核对这份副本，再写入 dsh",
+	sourcesPreviewExpires: "CLI 凭据到期时间：{time}",
+	sourcesTicketExpires: "此次预览将于 {time} 失效",
+	sourcesConflict: "dsh 中已存凭据：{detail}",
+	sourcesAction: "若继续：{detail}",
+	sourcesWarnings: "说明",
+	sourcesConfirmOverwrite: "用这份副本替换 dsh 中已保存的凭据",
+	sourcesConfirmOverwriteHint: "dsh 里已有另一份凭据。请先勾选，再确认拉取。",
+	sourcesCommit: "确认拉取",
+	sourcesCancelPreview: "取消预览",
+	sourcesCommitSuccess: "已复制到 dsh（{action}）。",
+	sourcesPreviewFailed: "无法从该 CLI 文件准备副本。",
+	sourcesCommitFailed: "无法把副本保存到 dsh。",
+	sourcesLoadFailed: "无法查找官方 CLI 登录文件。",
+	sourceKindGrok: "Grok CLI",
+	sourceKindCodex: "Codex CLI",
+	sourceKindKimi: "Kimi Code CLI",
+	sourceKindClaude: "Claude Code CLI",
+	sourceReasonMissing: "在预期位置没有找到官方 CLI 文件。",
+	sourceReasonUnsafe: "官方 CLI 文件不安全，无法读取（权限或文件类型）。",
+	sourceReasonInvalid: "官方 CLI 文件存在，但不是可用的 OAuth 登录。",
+	sourceReasonTooLarge: "官方 CLI 文件超过允许的读取上限。",
+	sourceConflictNone: "dsh 尚未保存凭据",
+	sourceConflictSameCredential: "已保存同一份凭据",
+	sourceConflictSameAccount: "同一账号，但凭据不同",
+	sourceConflictDifferentAccount: "已保存另一个账号",
+	sourceConflictUnknownAccount: "已保存凭据（无法比较账号）",
+	sourceConflictUnreadableDestination: "无法读取 dsh 中已存凭据",
+	sourceConflictUnsafeDestination: "dsh 中的凭据文件不安全，不能从这里替换",
+	sourceConflictUnrecognized: "已存凭据需要核对",
+	sourceActionImport: "把这份副本保存到 dsh",
+	sourceActionReuse: "保留 dsh 中已存凭据（内容已相同）",
+	sourceActionOverwrite: "替换 dsh 中已存凭据",
+	sourceActionBlocked: "已阻止 — 不能从这里替换 dsh 中的文件",
+	sourceActionUnrecognized: "需要核对",
+	sourceCommitImported: "已保存",
+	sourceCommitUnchanged: "原本就相同",
+	sourceCommitOverwritten: "已替换",
+	capabilitiesTitle: "订阅能力",
+	capabilitiesIntro: "所有开关默认关闭。打开后消耗的是对应供应商的订阅配额，不是另一套 API-key 账单。",
+	capabilitiesQuotaHint: "搜索、出图、改图、Fast、额度展示和 Grok Imagine 在实际调用时都会消耗对应订阅配额。",
+	capabilitiesReadOnly: "当前部署中这些开关为只读。",
+	capabilitiesLoading: "正在加载能力设置…",
+	capabilitiesLoadFailed: "无法加载能力设置。",
+	capabilitiesSaveFailed: "无法保存该能力设置。",
+	capabilitiesConflictRefreshed: "这些设置已在别处被改过。页面已刷新，请再试一次。",
+	capabilityLimitsTitle: "能力限制",
+	capabilityLimitsHint: "限制会实时应用于新发起的操作，并始终保持在已审计的安全范围内。",
+	capSearchResults: "最多搜索结果数",
+	capSearchResultsHint: "Codex 搜索最多返回这么多条结果（1–20）。",
+	capImageCount: "单次最多图片数",
+	capImageCountHint: "Codex 与 Imagine 图片工具单次最多返回这么多张图片（1–4）。",
+	capVideoTtlHours: "视频产物保留时间（小时）",
+	capVideoTtlHoursHint: "Imagine 视频产物保留 1–168 小时；降低保留时间会立即清理过期旧产物，提高只影响新产物。",
+	capabilityLimitInvalid: "请输入 {min} 到 {max} 之间的整数。",
+	capCodexSearch: "Codex 订阅搜索",
+	capCodexSearchHint: "可选的 Codex 搜索。不会自动变成默认搜索提供方。",
+	capCodexImages: "Codex 出图",
+	capCodexImagesHint: "可选的 Codex 出图。消耗 ChatGPT/Codex 配额。",
+	capCodexImageEdits: "Codex 改图",
+	capCodexImageEditsHint: "可选的 Codex 改图。仅在打开 Codex 出图后可编辑。",
+	capCodexUsage: "显示 Codex 额度",
+	capCodexUsageHint: "尽力展示剩余额度。供应商未返回可用数字时会隐藏对应项。",
+	capCodexFast: "已请求 Fast",
+	capCodexFastHint: "仅在最新私有模型目录确认存在可用优先模型后发布 codex-oauth-fast 路由；刷新失败会撤回该路由。",
+	capGrokImagineImage: "Grok Imagine 出图",
+	capGrokImagineImageHint: "可选的官方 xAI Imagine 出图。需要 Imagine 凭据，仅有 Grok OAuth 不够。",
+	capGrokImagineVideo: "Grok Imagine 出视频",
+	capGrokImagineVideoHint: "可选的官方 xAI Imagine 出视频。需要 Imagine 凭据，仅有 Grok OAuth 不够。",
+	usageTitle: "Codex 额度",
+	usageLoading: "正在加载 Codex 额度…",
+	usageUnavailable: "当前无法读取 Codex 额度。",
+	usageEmpty: "供应商没有返回可展示的额度字段。",
+	usageFetchedAt: "最近读取：{time}",
+	usageRateLimit: "速率限制",
+	usageWindow: "{seconds} 秒窗口",
+	usageUsed: "已用 {value}",
+	usageRemaining: "剩余 {value}",
+	usageResets: "重置时间 {time}",
+	usageCredits: "积分",
+	usageCreditsUnlimited: "无限积分",
+	usageCreditsLimited: "有限积分",
+	usageBalance: "余额 {value}",
+	usageIndividualLimit: "个人额度",
+	usageLimit: "上限 {value}",
+	usageUsedAmount: "已用 {value}",
+	usageRemainingAmount: "剩余 {value}",
+	usageSpendControlReached: "已达到支出控制上限。",
+	usageResetCredits: "可用重置次数：{value}",
+	imagineTitle: "Grok Imagine 凭据",
+	imagineIntro:
+		"官方 Imagine 调用使用 xAI API 凭据（例如 $XAI_API_KEY）。它与 Grok Build OAuth 登录不是同一份凭据，这里也不会显示密钥。",
+	imagineLoading: "正在检查 Imagine 凭据…",
+	imagineLoadFailed: "无法读取 Imagine 凭据状态。",
+	imagineConfigured: "已配置 Imagine 凭据",
+	imagineNotConfigured: "尚未配置 Imagine 凭据",
+	imagineSource: "来源：{source}",
+	imagineWritable: "当前部署可以更新 Imagine 凭据存储。",
+	imagineReadOnly: "当前部署不能更新 Imagine 凭据存储。",
+	imagineSourceNone: "无",
+	imagineSourceEnv: "环境变量",
+	imagineSourceApiKey: "已保存的 API key",
+	imagineSourceOAuth: "OAuth access（仅当 Imagine 接受时）",
+	imagineSourceCliKey: "Grok CLI 的 key 字段",
+	imagineSourceUnknown: "已配置（细节不展示）",
+	tabAccounts: "账户",
+	tabCapabilities: "能力",
+	tabGateway: "网关",
+	tabAbout: "关于",
+	copy: "复制",
+	copied: "已复制",
+	copyFailed: "复制失败",
+	modelsSummary: "已显示 {selected}/{total} 个模型",
+	expandModels: "模型",
+	collapseModels: "收起模型",
+	usageUsedShort: "已用 {value}",
+	gatewayTitle: "本地 API 网关",
+	gatewayIntro: "本机 loopback 上的 OpenAI/Anthropic 兼容服务，供你自己的工具使用。默认关闭。",
+	gatewayWarning: "打开后会把已登录订阅暴露成本地 API。可能违反供应商条款并消耗配额。",
+	gatewayEnabled: "启用本地网关",
+	gatewayBind: "绑定地址",
+	gatewayPort: "端口",
+	gatewayPortHint: "1024–65535 的整数。改完点确定保存；随机会填一个高位端口，仍需确定。",
+	gatewayPortApply: "确定",
+	gatewayPortRandom: "随机",
+	gatewayPortInvalid: "请输入 1024 到 65535 之间的整数端口。",
+	gatewayAddress: "网关地址",
+	gatewayOpenAiUrl: "OpenAI 兼容地址",
+	gatewayAnthropicUrl: "Anthropic 兼容地址",
+	gatewayKeyHint: "Bearer key",
+	gatewayKeyCopyHint: "复制的是当前 key。只有要作废已有客户端时才轮换。",
+	gatewayCopyKey: "复制 key",
+	gatewayShowKey: "显示",
+	gatewayHideKey: "隐藏",
+	gatewayRevealFailed: "无法读取当前 key。",
+	gatewayRotateConfirm: "确定轮换 key？现有客户端将失效。",
+	gatewayRotateConfirmHint: "这会替换当前 Bearer key。",
+	gatewayRotateConfirmAction: "确认轮换",
+	gatewayRotateCancel: "取消",
+	gatewayRunning: "正在监听",
+	gatewayStopped: "未监听",
+	gatewayRotate: "轮换 API key",
+	gatewayRotated: "新 key（只显示一次）：{key}",
+	gatewayLoadFailed: "无法加载网关设置。",
+	gatewaySaveFailed: "无法更新网关。",
+	gatewayLoading: "正在加载网关设置…",
+};