dsh-config-manager 0.1.71 → 0.1.73

package/src/core/messages-core.ts

@@ -0,0 +1,661 @@
+/**
+ * 核心引擎领域消息目录（src/core/** 与 src/migrations/** 的追加目录）。
+ *
+ * 与 src/core/messages.ts 的分工：
+ *  - messages.ts = 基础目录（既有 372 键，指纹冻结在 engine-locale.test.ts，只许追加不许改）；
+ *  - 本文件 = 领域追加目录，键一律带 `core.` 前缀，经 registerMessageCatalog 注册进
+ *    引擎语言运行时（src/core/engine-locale.ts），**只在基础目录未命中时生效**。
+ *
+ * 用法：`import { engineMsg } from './messages-core.ts'` —— 从本模块 import 有两个作用：
+ *  ① 模块加载即完成目录注册（本文件顶层调用 registerMessageCatalog）；
+ *  ② 拿到活翻译器 engineMsg（每次取值时按 getEngineLocale() 选 zh/en）。
+ *  **不要**从 engine-locale.ts 直接 import engineMsg 后使用 core.* 键：那样目录可能尚未注册。
+ *
+ * 纪律：
+ *  - zh 值 = 迁移前的中文字面量原样（逐字不变，既有测试断言依赖它）；
+ *  - en 值类型 Record<keyof typeof zh, string>（缺键/多键即编译错误），必须是纯英文；
+ *  - 动态明细（路径 / id / err.message / 字节数）一律以 {param} 插值传入，绝不写死。
+ */
+import { engineMsg, getEngineLocale, registerMessageCatalog } from './engine-locale.ts';
+import {
+  en as migrationEn,
+  setMigrationLanguageSource,
+  zh as migrationZh,
+} from '../migrations/messages-migrations.ts';
+
+export { engineMsg };
+
+export const zh = {
+  // ---------- boot-safety ----------
+  'core.bootSafety.bundlesNotArray': 'dsh.profile.bundles 不是数组或结构异常',
+
+  // ---------- exporter ----------
+  'core.exporter.fileSectionSecretsTruncated': '文件类分区 {section} 中检测到疑似凭据: （另有 {count} 个文件命中，详见报告）',
+
+  // ---------- local-plugin-host ----------
+  'core.localPluginHost.packTimeout': '{stderr}\nnpm pack 超时（{timeoutMs}ms）已终止',
+  'core.localPluginHost.tmpDirCreateFailed': '本地插件打包临时目录创建失败，已跳过本地插件打包: {reason}',
+
+  // ---------- boot-rescue ----------
+  'core.bootRescue.patchTakenOver': '# 本文件（profile patch 层）已被救援模式接管；home patch 同时被置空。',
+  'core.bootRescue.bundlesNarrowed': '# dsh.profile.bundles 已被收窄为 DSH 核心与救援插件自身，被禁用的包同时已从 dependencies 临时摘除：其余用户插件本次启动不挂载。',
+  'core.bootRescue.bundlesNote': '# 注意：dsh.profile.bundles 里的插件仍由 bundle 层挂载（本次只裁剪了不可解析的 bundle）。',
+
+  // ---------- phase3-host ----------
+  'core.phase3.transactionNotConverged': 'active transaction {opId} 未收敛（待 recover / reconcile），拒绝创建新 transaction',
+  'core.phase3.snapshotProviderNull': 'snapshotProvider 返回 null（快照创建失败），abort operation {operationType}',
+  'core.phase3.bindSnapshotEmptyId': 'bindSnapshot: snapshotId 为空',
+  'core.phase3.bindSnapshotIllegalState': 'bindSnapshot 非法 state: {state}',
+
+  // ---------- transaction-coordinator ----------
+  'core.txn.residuePending': '残留 active transaction {residue} 待处理，请重试',
+  'core.txn.unresolvedActive': '存在 unresolved active transaction {residue}',
+  'core.txn.tailCommitFailed': 'tail/commit 后异常：{message}',
+
+  // ---------- validator ----------
+  'core.compat.excellent': 'Excellent — 完美兼容（同平台、无缺失、schema 支持）',
+  'core.compat.good': 'Good — 兼容（旧版备份导入新版 DSH）',
+  'core.compat.partial': 'Partial — 部分兼容（跨平台/分区缺失/版本超前，需人工确认）',
+  'core.compat.unsupported': 'Unsupported — 不受支持（schema 超出范围）',
+
+  // ---------- journal ----------
+  'core.journal.illegalTransition': '非法 journal state transition: {from} → {to} (op {opId})',
+  'core.journal.illegalOperationId': '非法 operationId: {opId}',
+  'core.journal.notFoundOrCorrupt': 'journal 不存在或损坏: {opId}',
+  'core.journal.illegalOperationIdBare': '非法 operationId',
+  'core.journal.notTerminal': 'moveToCompleted 仅接受 terminal journal: {opId} state={state}',
+
+  // ---------- run-registry ----------
+  'core.run.autosyncBusy': '自动同步已在进行中',
+  'core.run.syncApplyBusy': '一键同步已在进行中',
+  'core.run.backupScheduleBusy': '定时备份已在进行中',
+  'core.run.restoreBusy': '快照恢复已在进行中（请等待当前恢复完成）',
+  'core.run.recoveryBusy': '恢复/回滚已在进行中（请等待当前恢复完成）',
+
+  // ---------- consult-source ----------
+  'core.consult.manifestUnparsable': 'manifest 无法解析',
+  'core.consult.manifestMissing': 'manifest 缺失',
+  'core.consult.hashMismatch': '"{name}" (hash 不符)',
+  'core.consult.entryMissing': '"{name}" (缺失)',
+  'core.consult.snapshotIntegrityFailed': '快照完整性校验失败',
+  // ---------- migration-history ----------
+  'core.migrationHistory.filenameCollision': 'history filename collision (retry 上限)',
+  'core.migrationHistory.title': 'DSH 配置迁移历史',
+  'core.migrationHistory.total': '总数',
+  'core.migrationHistory.empty': '暂无迁移记录',
+  'core.migrationHistory.kind': '操作',
+  'core.migrationHistory.time': '时间',
+  'core.migrationHistory.result': '结果',
+  'core.migrationHistory.sections': '分区',
+  'core.migrationHistory.detail': '摘要',
+  'core.migrationHistory.resultSuccess': '成功',
+  'core.migrationHistory.resultFailed': '失败',
+  'core.migrationHistory.resultSkipped': '跳过',
+
+  // ---------- local-plugin-pack ----------
+  'core.localPluginPack.dirCreateFailed': '本地插件打包目录创建失败，已跳过全部本地插件: {reason}',
+  'core.localPluginPack.tarballTooLarge': '本地插件 {name} 的 tarball 超过上限（{size} > {max} 字节），已跳过打包',
+  'core.localPluginPack.packFailed': '本地插件 {name} 打包失败（npm pack 退出码 {code}）：{detail}',
+  'core.localPluginPack.noOutput': '无输出',
+  'core.localPluginPack.parseFilenameFailed': '本地插件 {name} 打包失败：无法从 npm pack 输出解析文件名',
+  'core.localPluginPack.packError': '本地插件 {name} 打包失败：{reason}',
+
+  // ---------- recovery-orchestrator ----------
+  'core.recovery.executeFailed': 'recovery 执行失败',
+  'core.recovery.stateNotAllowed': 'journal state {state} 不允许 {action}',
+  'core.recovery.noTrustedSnapshot': 'journal 无 trusted snapshot，无法恢复',
+  'core.recovery.snapshotUntrusted': 'snapshot 不可信: {verdict}',
+  'core.recovery.needsAttentionNoAuto': 'recovery decision 为 needs-attention，无法自动执行',
+  'core.recovery.noTrustedSnapshotShort': 'journal 无 trusted snapshot',
+  'core.recovery.snapshotLoadFailed': 'snapshot 无法加载',
+  'core.recovery.needsAttentionNoRetry': 'recovery decision 为 needs-attention，无法 retry',
+  'core.recovery.dismissFailed': 'dismiss 失败',
+  'core.recovery.lockNotStale': '未判定为 stale，已拒绝回收',
+  // ---------- restore ----------
+  'core.restore.pathEscaped': '路径越界: {rel}',
+  'core.restore.symlinkCriticalFile': 'symlink 化关键文件: {rel}',
+  'core.restore.invalidSnapshotId': 'snapshotId 非法',
+  'core.restore.snapshotDirOutOfBounds': '快照目录越界或非直接子目录',
+  'core.restore.blobSymlink': 'blob 是 symlink: {name}',
+  'core.restore.snapshotJsonUnparsable': 'snapshot.json 无法解析',
+  'core.restore.legacyNeedsConfirm': '旧快照（无 manifest/READY），需显式确认后恢复',
+  'core.restore.envFingerprintMismatch': 'environmentFingerprint 不匹配（可能来自其他机器/安装）',
+  'core.restore.legacyNoReadiness': '旧快照（无 readiness），需显式确认后恢复',
+  'core.restore.trustedManualLocal': '完整性通过，但非 operation-bound（手动/本地快照）',
+  'core.restore.trustedOperationSnapshot': 'READY + manifest 完整 + op/env/owner binding 匹配',
+  'core.restore.snapshotDirUnreadable': '快照目录读不出来（{code}）：{dir}',
+  'core.restore.illegalSnapshotId': '非法快照 id: {id}',
+  'core.restore.snapshotPathEscaped': '快照路径越界: {id}',
+
+  // ---------- reconcile ----------
+  'core.reconcile.journalUnparsable': 'journal {opId} 无法解析或 schema 非法（隔离处理）',
+  'core.reconcile.ownerLive': 'owner 存活，live operation 进行中',
+  'core.reconcile.bindingMismatch': 'ownership binding 不匹配（journal.ownerInstanceId/lockId 非 crashed ownership {instanceId}），不作 trusted 恢复',
+  'core.reconcile.envMismatch': 'environment fingerprint 不匹配（跨机/环境变化），不自动恢复',
+  'core.reconcile.needsAttentionConfirm': 'NEEDS_ATTENTION 待用户确认',
+  'core.reconcile.selfProvenNoSteps': '自证零副作用：external intent 未登记任何步骤（fn 未开始）',
+  'core.reconcile.selfProvenArtifactOnly': '自证零配置副作用：定时备份只产出 exports 归档与调度状态',
+  'core.reconcile.terminalOrganized': 'terminal({state}) journal 规整到 completed',
+  'core.reconcile.rollbackInterrupted': '回滚中断（{detail}），需显式续跑回滚（用户确认）',
+  'core.reconcile.recoveringUnverified': 'RECOVERING 且 recovery 未验证（无 recoveryVerification 或 verdict 非 MATCH/PARTIAL_MATCH），绝不自动 RECOVERED',
+  'core.reconcile.danglingPlannedStep': 'planned step {stepId} 缺少 steps 条目（损坏/篡改 journal）',
+  'core.reconcile.stepNotReliablyDone': 'step {ref} 未可靠完成（磁盘==before）',
+  'core.reconcile.stepFingerprint': 'step {ref} 指纹 {verdict}',
+  'core.reconcile.mutationNotStarted': 'mutation 未开始，安全完成',
+  'core.reconcile.opaqueRollbackAvailable': 'opaque APPLYING（空 steps）且 mutation 可能已开始，有 trusted snapshot 可回滚（需用户确认）',
+  'core.reconcile.opaqueNoSnapshot': 'opaque APPLYING（空 steps）且 mutation 可能已开始，无 trusted snapshot 可回滚',
+  'core.reconcile.noSideEffects': '无副作用可恢复，安全完成',
+  'core.reconcile.unprovableSteps': '不可证明步骤: {details}',
+  'core.reconcile.externalSideEffectsUnknown': '外部副作用未知',
+  'core.reconcile.snapshotMissingSuffix': '；快照缺失',
+  'core.reconcile.partialApplied': '部分 step 已应用，可安全回滚（需用户确认）',
+
+  // ---------- reinstall ----------
+  'core.reinstall.programLabel': 'DSH 程序本体',
+  'core.reinstall.programDesc': '卸载并重装 @deepseek-ai/dsh 全局启动器（核心动作）',
+  'core.reinstall.cacheLabel': '全局残留缓存',
+  'core.reinstall.cacheDesc': '清 pnpm store 与 npm cache（可选）',
+  'core.reinstall.settingsLabel': '~/.dsh 设置',
+  'core.reinstall.settingsDesc': '清空 settings.yaml 等配置（不可逆）',
+  'core.reinstall.pluginsLabel': '~/.dsh 已装插件',
+  'core.reinstall.pluginsDesc': '清空 profiles 下已装插件依赖（不可逆）',
+  'core.reinstall.dataLabel': '会话记录与凭据',
+  'core.reinstall.dataDesc': '清空 sessions 会话与 .credentials.yaml 凭据（最高风险，强制二次确认）',
+  'core.reinstall.stepUninstallGlobal': '卸载全局 @deepseek-ai/dsh',
+  'core.reinstall.stepCleanGlobal': '清理全局残留 @deepseek-ai/dsh',
+  'core.reinstall.stepInstallGlobal': '安装全局 @deepseek-ai/dsh@{version}',
+  'core.reinstall.stepVerifyVersion': '验证版本（dsh --version）',
+  'core.reinstall.stepCleanPnpmStore': '清理 pnpm store',
+  'core.reinstall.stepCleanNpmCache': '清理 npm cache',
+  'core.reinstall.stepBackupHome': '备份 ~/.dsh 到同级 .reinstall-backup（抢救兜底）',
+  'core.reinstall.stepWipeSettings': '清空 ~/.dsh 设置（settings.yaml 等）',
+  'core.reinstall.stepWipePlugins': '清空 ~/.dsh 已装插件（profiles/*/node_modules）',
+  'core.reinstall.stepWipeSessions': '清空会话记录（sessions/）',
+  'core.reinstall.stepWipeCredentials': '清空凭据（.credentials.yaml，仅删除文件）',
+  // ---------- verify-recovery ----------
+  'core.verifyRecovery.blobPathEscaped': 'blob 路径越界: {path}',
+  'core.verifyRecovery.revalidateFailed': '快照重验失败: {verdict}',
+  'core.verifyRecovery.revalidatePassed': '快照重验通过（TRUSTED_OPERATION_SNAPSHOT）',
+  'core.verifyRecovery.snapshotJsonRereadFailed': 'snapshot.json 重读失败: {reason}',
+  'core.verifyRecovery.envMismatch': 'environmentFingerprint 不匹配（WRONG_ENVIRONMENT）',
+  'core.verifyRecovery.operationMismatch': 'operationId 不匹配（WRONG_OPERATION）: snapshot={snapshot} expected={expected}',
+  'core.verifyRecovery.none': '无',
+  'core.verifyRecovery.hostFileNoBlob': 'host file 无 blob 信息: {rel}',
+  'core.verifyRecovery.hostFileMissing': 'host file 缺失: {rel}',
+  'core.verifyRecovery.hostFileBlobReadFailed': 'host file blob 读取失败: {rel}',
+  'core.verifyRecovery.hostFileContentMismatch': 'host file 内容不匹配: {rel}',
+  'core.verifyRecovery.hostFileMatch': 'host file 匹配: {rel}',
+  'core.verifyRecovery.hostFileStillPresent': '应删除目标仍存在: {rel}',
+  'core.verifyRecovery.hostFileAlreadyGone': '删除目标已不存在: {rel}',
+  'core.verifyRecovery.filePathEscaped': 'file 路径越界: {ref}',
+  'core.verifyRecovery.fileMissing': 'file 缺失: {ref}',
+  'core.verifyRecovery.fileBlobReadFailed': 'file blob 读取失败: {ref}',
+  'core.verifyRecovery.fileContentMismatch': 'file 内容不匹配: {ref}',
+  'core.verifyRecovery.fileMatch': 'file 匹配: {ref}',
+  'core.verifyRecovery.fileStillPresent': '应删除 file 目标仍存在: {ref}',
+  'core.verifyRecovery.fileAlreadyGone': '删除 file 目标已不存在: {ref}',
+  'core.verifyRecovery.pluginsNoBaseline': '快照无 beforePlugins 基线，插件状态不可验证',
+  'core.verifyRecovery.pluginsNoBaselineHint': '插件状态无法自动验证（快照无基线），请人工确认已装插件',
+  'core.verifyRecovery.pluginsAdded': '导入期间新增插件未移除: {names}',
+  'core.verifyRecovery.pluginsMatch': '插件状态匹配（无新增插件）',
+  'core.verifyRecovery.pluginsVerifyFailed': '插件状态无法验证（listInstalled 失败）',
+  'core.verifyRecovery.pluginsVerifyFailedHint': '插件状态无法自动验证（listInstalled 失败），请人工确认已装插件',
+  'core.verifyRecovery.settingsMismatch': 'settings 不匹配: {ref}',
+  'core.verifyRecovery.settingsMatch': 'settings 匹配: {ref}',
+  'core.verifyRecovery.settingsVerifyFailed': 'settings 无法验证: {ref}',
+  'core.verifyRecovery.settingsVerifyFailedHint': 'settings 无法自动验证（{ref}），请人工确认',
+
+  // ---------- backup-verify ----------
+  'core.backupVerify.notRegularFile': '不是普通文件（目录或特殊文件）/ not a regular file: {zip}',
+  'core.backupVerify.fileNotFound': '备份文件不存在 / backup file not found: {zip}',
+  'core.backupVerify.fileUnreadable': '备份文件不可读 / backup file unreadable: {reason}',
+  'core.backupVerify.encryptedContainer': '整体加密备份容器（DCA1）需先用密码解密为 ZIP 才能自检 / encrypted container must be decrypted first',
+  'core.backupVerify.cannotOpenZip': 'ZIP 无法打开 / cannot open as ZIP: {reason}',
+  'core.backupVerify.emptyArchive': '空 ZIP（0 条目）/ empty archive',
+  'core.backupVerify.missingManifest': '缺少 {file}（不是本插件导出的备份）/ {file} missing',
+  'core.backupVerify.manifestUnreadable': '{file} 无法读取（归档损坏）/ unreadable entry: {reason}',
+  'core.backupVerify.invalidManifest': '{file} 非法 / invalid manifest: {reason}',
+  'core.backupVerify.unsupportedSchema': 'schema 版本不受支持 / unsupported schema version: {version}',
+  'core.backupVerify.missingChecksums': '缺少 {file}（无法做完整性校验）/ {file} missing',
+  'core.backupVerify.invalidChecksums': '{file} 非法或不可读 / invalid or unreadable checksums table: {reason}',
+  'core.backupVerify.unreadableEntry': '{name}（{reason}）',
+  'core.backupVerify.emptyTableWithData': '校验表为空但归档含数据条目 / empty checksums table with data entries',
+  'core.backupVerify.emptyTable': '校验表为空（归档仅含 manifest 与校验表自身）/ empty checksums table',
+  'core.backupVerify.uncoveredEntries': '含未纳入校验表的条目 {count} 个 / entries not covered by checksums: {shown}{suffix}',
+  'core.backupVerify.declaredSectionNoEntries': 'manifest 声明分区 {id} 但归档内无对应文件 / declared section has no entries: {id}',
+  'core.backupVerify.declaredSectionPayloadMissing': 'manifest 声明分区 {id} 但缺少 {path} / declared section payload missing: {id}',
+  'core.backupVerify.encryptedFlagNoSecrets': 'manifest 标记加密但归档内无凭据密文条目 / encrypted flag without secrets entry',
+  'core.backupVerify.missingEntries': '校验表内条目缺失（{count}）/ missing entries: {list}',
+  'core.backupVerify.hashMismatch': '条目 SHA-256 不符（{count}）/ hash mismatch: {list}',
+  'core.backupVerify.unreadableEntries': '条目无法读取（{count}）/ unreadable entries: {list}',
+  'core.backupVerify.verificationError': '自检过程异常 / verification error: {reason}',
+
+  // ---------- backup-plan ----------
+  'core.backupPlan.pluginFilesRisk': '第三方插件自有文件不受控（dsh-ssh.json 内含明文主机密码等），仅在你确认内容后才应纳入备份',
+  'core.backupPlan.pathWithReason': '{path}（{reason}）',
+  'core.backupPlan.tooDeep': '层级超过上限未进备份（目录或链接目标超出深度上限） / nesting limit exceeded, content NOT in this backup: {at}',
+  'core.backupPlan.linkSkipped': '链接未进备份 / link NOT in this backup: {at}',
+  'core.backupPlan.dirUnreadable': '目录读取失败，其内容未进备份 / directory unreadable, content NOT in this backup: {dir}',
+  'core.backupPlan.countNotMeasured': '文件数未统计 / count not measured',
+  'core.backupPlan.fileCount': '{count} 个文件 / {count} file(s)',
+  'core.backupPlan.depDirSkipped': '运行时依赖目录未进备份（可重建，目标机需重新安装依赖）/ runtime dependency directory NOT in this backup (rebuildable; reinstall on the target): {path}（{files}）',
+  'core.backupPlan.followedLinks': '已跟随 {count} 个链接目录收集内容 / followed {count} linked director(ies)',
+  'core.backupPlan.sectionsMissingValue': '`--sections` 缺值 / missing value for `--sections`',
+  'core.backup.osHomeUnavailable': '分区 {section} 的数据在系统主目录下，但宿主未提供该目录的文件门面（旧版本宿主）；本次不读也不写 / section {section} stores data under the system home directory but the host provides no file facade for it (older host); nothing is read or written this time',
+  'core.backupPlan.unknownSections': '未知分区 / unknown section(s): {unknown}（可用 / available: {available}）',
+  'core.backupPlan.sectionNotOffline': '分区 {section} 不支持离线 CLI 备份（它的收集依赖插件来源注册表与本机插件清单），请用 GUI 的导出/导入迁移它 / section {section} is not supported by the offline CLI backup (its collection depends on the plugin-data source registry and the local plugin manifests); use the GUI export/import instead',
+  'core.backupPlan.unsafeEntryName': '跳过不安全条目名 / unsafe entry name skipped: {name}',
+  'core.backupPlan.statFailed': '探测失败 / stat failed: {path}（{reason}）',
+  'core.backupPlan.readFailed': '读取失败 / read failed: {path}（{reason}）',
+  'core.backupPlan.sectionEmpty': '分区无内容，未写入 / section empty, skipped: {section}',
+  // ---------- model-tools ----------
+  'core.modelTools.illegalSnapshotId': '非法快照 id：{id}',
+  'core.modelTools.syncChannelNotConfigured': '同步通道 {channel} 尚未配置（sync-config.json 缺失或损坏）',
+  'core.modelTools.snapshotNotFound': '快照不存在：{id}（用 config_list_snapshots 查看可用快照）',
+  'core.modelTools.toolsServiceUnavailable': 'tools 服务不可用：跳过模型工具注册（引擎能力仍可用）',
+  'core.modelTools.backupToolDesc': '全量备份 DSH 配置到本地 exports 目录（默认不含 secret；可传 password 加密导出）。返回 ZIP 文件名/大小/分区清单/加密状态。',
+  'core.modelTools.backupOnlyParam': '仅导出的分区 id 白名单；缺省 = 全部推荐分区',
+  'core.modelTools.backupPasswordParam': '可选：加密备份密码（仅内存，不落盘/不回显；提供即加密导出）',
+  'core.modelTools.backupOutputDesc': '备份结果（zip 文件名 / sizeBytes / 分区清单 / excluded / encrypted / containsSecrets / redactedHits / warnings）',
+  'core.modelTools.listSnapshotsToolDesc': '列出 DSH 配置的本地回滚快照（id / 创建时间 / 来源 / 状态 / 条目数），供后续 config_restore 使用。',
+  'core.modelTools.listSnapshotsOutputDesc': '快照数组（id / createdAt / sourceZip / status / entryCount）',
+  'core.modelTools.restoreToolDesc': '恢复到指定快照。默认只返回动作计划（零写入）；确认要真实执行时传 confirm:true（会覆盖/删除 $DSH_HOME 文件并卸载导入期间新增插件，属破坏性操作，务必先预览）。',
+  'core.modelTools.restoreSnapshotIdParam': '要恢复的快照 id（用 config_list_snapshots 获取）',
+  'core.modelTools.restoreConfirmParam': 'true 才真实执行恢复；缺省 false 只预览计划（零写入）',
+  'core.modelTools.restoreOutputDesc': 'dryRun=true 时为恢复计划；dryRun=false 时为执行报告',
+  'core.modelTools.syncPushToolDesc': '手动推送 DSH 配置同步到远端（Git/WebDAV），复用已持久化的通道配置。写远端属主动操作；加密/含凭据须传 password 且引擎强制 encrypt。',
+  'core.modelTools.channelParam': '同步通道；缺省 = 已配置的活动通道',
+  'core.modelTools.syncPushSectionsParam': '仅推送的分区；缺省 = 全部推荐 portable 分区（非 portable 自动跳过）',
+  'core.modelTools.syncPushEncryptParam': '加密快照；开启必须提供 password',
+  'core.modelTools.syncPushIncludeSecretsParam': '推送真实凭据值（必须同时 encrypt=true，否则引擎拒绝）',
+  'core.modelTools.syncPushPasswordParam': '加密密码（仅内存，不落盘/不回显）',
+  'core.modelTools.syncPushOutputDesc': '推送报告（snapshotId / 实际同步分区 / 告警）',
+  'core.modelTools.syncPullToolDesc': '拉取远端同步差异预览（Git/WebDAV，零写入：只下载 + 分析出差异报告，绝不直接写配置）。若要落地差异需另走确认导入管道。',
+  'core.modelTools.syncPullSnapshotIdParam': '远端快照 id；缺省 = 最新',
+  'core.modelTools.syncPullStrategyParam': '冲突全局策略；缺省 merge（冲突保留待决策）',
+  'core.modelTools.syncPullPasswordParam': '解密密码（加密快照需要；仅内存）',
+  'core.modelTools.syncPullOutputDesc': '差异报告（changes 列表 / needsReview）',
+
+  // ---------- backup ----------
+  'core.backup.fileSectionBaseMissing': '分区 {section} 是文件类分区，但 core/backup.ts 的 FILE_BASES 未给基准目录（拒绝静默退回 homeDir 根）',
+  'core.backup.secretsSectionNotSnapshotTarget': 'secrets 分区没有 adapter / 无分区载荷，不应作为快照目标（凭据值走独立加密容器，绝不进快照）',
+  'core.backup.sectionUnsupported': '快照不支持分区「{section}」：它未在 schema/section-registry.ts 注册（或缺少快照实现）；拒绝按其它分区语义静默记录（那会让该分区的写入无法回滚）',
+  'core.backup.blobPathEscaped': '快照 blob 路径越界: {path}',
+  'core.backup.snapshotVerifyFailed': '快照 {id} 验证失败: {reason}',
+  'core.backup.pruneFailed': '快照保留清理失败（快照本身已就绪发布，不受影响）：{reason}',
+  'core.backup.pruneAbandoned': '快照保留清理已放弃：读取 recovery 引用集合失败（{reason}）',
+  'core.backup.dirNameIdMismatch': '快照目录名与内部 id 不一致，已跳过自动清理：{dir}（内部 id {id}）',
+  'core.backup.snapshotPathEscaped': '快照路径越界',
+  'core.backup.snapshotJsonMissing': 'snapshot.json 缺失',
+  'core.backup.snapshotJsonInvalid': 'snapshot.json 非法',
+  'core.backup.snapshotIdDirMismatch': 'snapshot.id 与目录不匹配',
+  'core.backup.manifestMissing': 'manifest.json 缺失',
+  'core.backup.manifestInvalid': 'manifest 非法或 snapshotId 不匹配',
+  'core.backup.entryCountMismatch': 'manifest.entryCount 与 snapshot.entries 不一致（篡改）',
+  'core.backup.metadataHashMismatch': 'metadataHash 不匹配（破坏性内容被篡改）',
+  'core.backup.blobMissing': 'blob 缺失: {path}',
+  'core.backup.blobHashMismatch': 'blob hash 不匹配: {path}',
+  'core.backup.blobNotInManifest': 'snapshot 引用的 blob 未在 manifest 中: {blob}',
+  // ---------- plugin-cli ----------
+  'core.pluginCli.hoistPatternDiff': "profile 的 node_modules 由旧版 pnpm 创建，与当前 pnpm 的默认配置不兼容；在 profile 目录执行一次 pnpm install 重建后重试 / this profile's node_modules was created by a different pnpm major; rebuild it (pnpm install) before retrying",
+  'core.pluginCli.addingToRoot': "profile 是 pnpm workspace，当前 dsh CLI 转发未带 -w 被 pnpm 拒绝；可手动执行 dsh plugin --profile <name> add -w <pkg> / pnpm refused to add at a workspace root (missing -w); run dsh plugin --profile <name> add -w <pkg> by hand",
+  'core.pluginCli.notAWorkspace': 'profile 目录不是 pnpm workspace，却传入了 -w，因此被 pnpm 拒绝 / -w was passed but the profile is not a pnpm workspace, so pnpm refused the operation',
+  'core.pluginCli.releaseAgeViolation': "profile 里有刚发布不久的插件版本，pnpm 的安全等待期检查拒绝了本次改动（即使改的是别的插件）；等待发布期满，或临时以 --config.minimumReleaseAge=0 重试 / a recently-published plugin version in this profile trips pnpm's fresh-release safety check, blocking any change (even to other plugins); wait for the release to mature, or retry once with --config.minimumReleaseAge=0",
+  'core.pluginCli.gitBuildBlocked': "该 git 插件需要在安装时执行构建脚本，被 pnpm 的 allowBuilds 白名单拦截；把 pnpm 提示的包名加入 profile 的 pnpm-workspace.yaml 的 allowBuilds 后重试 / this git-hosted plugin needs to run its build script at install time, which pnpm blocks until allowed — add the exact package pnpm printed to allowBuilds in the profile's pnpm-workspace.yaml, then re-run",
+  'core.pluginCli.parenValue': '（{value}）',
+  'core.pluginCli.patchFileMissing': "profile 的 pnpm-workspace.yaml 声明了 patchedDependencies，但对应的 patch 文件不存在{patch}；pnpm 因此拒绝任何安装（含与补丁无关的插件）。把缺失的 patch 文件放回 profile 的 patches/ 目录，或从 pnpm-workspace.yaml 删除该条目后重试 / the profile's pnpm-workspace.yaml declares patchedDependencies but the patch file is missing{patch}; pnpm then refuses every install (even unrelated plugins). Put the patch file back under the profile's patches/ directory, or remove that entry from pnpm-workspace.yaml and retry",
+  'core.pluginCli.fetch404': "有一个依赖在 registry 上不存在{pkg}，pnpm 拒绝任何安装操作；它可能是之前失败操作残留在 profile package.json 里的幽灵依赖（手动删除该行），也可能是需要登录的私有包 / a dependency cannot be resolved from the registry{pkg}; pnpm refuses every install while it is present — it may be a ghost entry left in the profile's package.json by an earlier failed operation (remove that line by hand), or a private package needing registry credentials",
+  'core.pluginCli.transientNetwork': '拉取依赖时网络临时失败（安装会重放整个依赖树，任何一个既有依赖抖动都会中断本次操作）；稍后直接重试通常即可 / a transient network failure while fetching dependencies (installs replay the whole dependency tree, so any existing dependency can hiccup); a plain retry usually succeeds',
+  'core.pluginCli.desktopProfileReserved': 'desktop 是 DeepSeek Harness Desktop 独占管理的保留档案，普通 dsh CLI 拒绝操作它；请在桌面端应用内重试（新版本插件会自动改用桌面端自带的 CLI 载体），或改用其它档案 / the "desktop" profile is managed exclusively by the DeepSeek Harness Desktop application and the plain dsh CLI refuses to touch it; retry from inside the Desktop app (a current version of this plugin switches to the Desktop-bundled CLI carrier) or target another profile',
+  'core.pluginCli.pnpmMissing': '找不到 pnpm（dsh 转发 pnpm 失败）：请先安装 pnpm（npm install -g pnpm 或 corepack enable pnpm），然后重试 / pnpm is not on PATH (dsh forwards to pnpm): install pnpm (npm install -g pnpm or corepack enable pnpm) and retry',
+  'core.pluginCli.dshCliStartFailed': '无法启动 dsh CLI（{spawnError}）：请确认 dsh 已安装且在 PATH 上，然后重试安装 {pkg} / cannot start dsh CLI ({spawnError}): make sure dsh is installed and on PATH, then retry installing {pkg}',
+  'core.pluginCli.installTimeout': '安装 {pkg} 超时（进程已终止，默认 15 分钟）：请检查网络或稍后重试 / install {pkg} timed out (process killed, default 15 min): check your network and retry later',
+  'core.pluginCli.installFailed': '安装 {pkg} 失败（{code}）：{message}',
+  'core.pluginCli.noOutput': '无输出',
+  'core.pluginCli.installFailedWithTail': 'dsh plugin 安装 {pkg} 失败（exit {exitCode}）：{tail}',
+
+  // ---------- migration-consult ----------
+  'core.consult.compatNoManifest': '无法评估兼容性：manifest 缺失',
+  'core.consult.compatPartial': '部分兼容：跨平台 / 分区缺失 / 版本超前，需人工确认',
+  'core.consult.compatUnsupported': '不受支持：schema 超出本插件支持范围',
+  'core.consult.integrityNoManifest': 'manifest 缺失，无法校验结构完整性',
+  'core.consult.manifestInvalid': 'manifest 无效：{message}',
+  'core.consult.manifestWarning': 'manifest 警告：{message}',
+  'core.consult.checksumMismatch': '完整性校验失败：{reason}',
+  'core.consult.noChecksums': '源缺少 checksum 表，无法校验条目完整性',
+  'core.consult.zipSlip': 'ZIP 路径越界：{path}',
+  'core.consult.sectionDataMissing': '声明包含但数据缺失：{section}',
+  'core.consult.sectionUnparseable': '分区数据不可解析：{section}',
+  'core.consult.listSeparator': '、',
+  'core.consult.andMore': ' 等 {count} 个',
+  'core.consult.danglingCredentialRef': '备份引用了 {count} 个未在凭据分区声明的凭据（导入后本机若缺值需补录）：{shown}{more}',
+  'core.consult.unencryptedSecrets': '快照含未加密秘密（凭据值明文暴露）',
+  'core.consult.sensitiveHits': '检测到 {count} 处敏感字段暴露（已脱敏）',
+  'core.consult.migratabilityNotEvaluated': '未评估可迁移性（dry-run 未执行）',
+  'core.consult.migratabilityFailed': '可迁移性检查失败：dry-run 无法通过',
+  'core.consult.conflicts': '有 {count} 处冲突需要你决定保留哪一边（下一步可逐个选择；默认不覆盖本机）',
+  'core.consult.warnings': '另有 {count} 项需要留意（不影响导入能否成功）',
+};
+
+export const en: Record<keyof typeof zh, string> = {
+  // ---------- boot-safety ----------
+  'core.bootSafety.bundlesNotArray': 'dsh.profile.bundles is not an array or is structurally invalid',
+
+  // ---------- exporter ----------
+  'core.exporter.fileSectionSecretsTruncated': 'Suspected credentials detected in file section {section}: ({count} more files matched, see the report)',
+
+  // ---------- local-plugin-host ----------
+  'core.localPluginHost.packTimeout': '{stderr}\nnpm pack timed out ({timeoutMs}ms); terminated',
+  'core.localPluginHost.tmpDirCreateFailed': 'Failed to create the temporary directory for local plugin packing; skipped packing local plugins: {reason}',
+
+  // ---------- boot-rescue ----------
+  'core.bootRescue.patchTakenOver': '# This file (the profile patch layer) has been taken over by rescue mode; the home patch is cleared as well.',
+  'core.bootRescue.bundlesNarrowed': '# dsh.profile.bundles has been narrowed to the DSH core and the rescue plugin itself; disabled packages were also temporarily removed from dependencies: other user plugins are not mounted in this boot.',
+  'core.bootRescue.bundlesNote': '# Note: plugins listed in dsh.profile.bundles are still mounted by the bundle layer (only unresolvable bundles were pruned this time).',
+
+  // ---------- phase3-host ----------
+  'core.phase3.transactionNotConverged': 'active transaction {opId} has not converged (needs recover / reconcile); refusing to create a new transaction',
+  'core.phase3.snapshotProviderNull': 'snapshotProvider returned null (snapshot creation failed); aborting operation {operationType}',
+  'core.phase3.bindSnapshotEmptyId': 'bindSnapshot: snapshotId is empty',
+  'core.phase3.bindSnapshotIllegalState': 'bindSnapshot: illegal state {state}',
+
+  // ---------- transaction-coordinator ----------
+  'core.txn.residuePending': 'Residual active transaction {residue} is pending; retry',
+  'core.txn.unresolvedActive': 'An unresolved active transaction exists: {residue}',
+  'core.txn.tailCommitFailed': 'Exception after tail/commit: {message}',
+
+  // ---------- validator ----------
+  'core.compat.excellent': 'Excellent — fully compatible (same platform, nothing missing, schema supported)',
+  'core.compat.good': 'Good — compatible (an older backup imported into a newer DSH)',
+  'core.compat.partial': 'Partial — partly compatible (cross-platform / missing sections / newer version; needs manual confirmation)',
+  'core.compat.unsupported': 'Unsupported — not supported (schema out of range)',
+
+  // ---------- journal ----------
+  'core.journal.illegalTransition': 'Illegal journal state transition: {from} → {to} (op {opId})',
+  'core.journal.illegalOperationId': 'Illegal operationId: {opId}',
+  'core.journal.notFoundOrCorrupt': 'Journal does not exist or is corrupt: {opId}',
+  'core.journal.illegalOperationIdBare': 'Illegal operationId',
+  'core.journal.notTerminal': 'moveToCompleted only accepts a terminal journal: {opId} state={state}',
+
+  // ---------- run-registry ----------
+  'core.run.autosyncBusy': 'Automatic sync is already in progress',
+  'core.run.syncApplyBusy': 'One-click sync is already in progress',
+  'core.run.backupScheduleBusy': 'Scheduled backup is already in progress',
+  'core.run.restoreBusy': 'Snapshot restore is already in progress (wait for the current restore to finish)',
+  'core.run.recoveryBusy': 'Recovery/rollback is already in progress (wait for the current recovery to finish)',
+
+  // ---------- consult-source ----------
+  'core.consult.manifestUnparsable': 'manifest cannot be parsed',
+  'core.consult.manifestMissing': 'manifest is missing',
+  'core.consult.hashMismatch': '"{name}" (hash mismatch)',
+  'core.consult.entryMissing': '"{name}" (missing)',
+  'core.consult.snapshotIntegrityFailed': 'Snapshot integrity verification failed',
+  // ---------- migration-history ----------
+  'core.migrationHistory.filenameCollision': 'history filename collision (retry limit reached)',
+  'core.migrationHistory.title': 'DSH Config Migration History',
+  'core.migrationHistory.total': 'Total',
+  'core.migrationHistory.empty': 'No migration records',
+  'core.migrationHistory.kind': 'Operation',
+  'core.migrationHistory.time': 'Time',
+  'core.migrationHistory.result': 'Result',
+  'core.migrationHistory.sections': 'Sections',
+  'core.migrationHistory.detail': 'Summary',
+  'core.migrationHistory.resultSuccess': 'success',
+  'core.migrationHistory.resultFailed': 'failed',
+  'core.migrationHistory.resultSkipped': 'skipped',
+
+  // ---------- local-plugin-pack ----------
+  'core.localPluginPack.dirCreateFailed': 'Failed to create the local plugin packing directory; skipped all local plugins: {reason}',
+  'core.localPluginPack.tarballTooLarge': 'The tarball of local plugin {name} exceeds the limit ({size} > {max} bytes); skipped packing',
+  'core.localPluginPack.packFailed': 'Failed to pack local plugin {name} (npm pack exit code {code}): {detail}',
+  'core.localPluginPack.noOutput': 'no output',
+  'core.localPluginPack.parseFilenameFailed': 'Failed to pack local plugin {name}: cannot parse a filename from the npm pack output',
+  'core.localPluginPack.packError': 'Failed to pack local plugin {name}: {reason}',
+
+  // ---------- recovery-orchestrator ----------
+  'core.recovery.executeFailed': 'recovery execution failed',
+  'core.recovery.stateNotAllowed': 'journal state {state} does not allow {action}',
+  'core.recovery.noTrustedSnapshot': 'journal has no trusted snapshot; cannot recover',
+  'core.recovery.snapshotUntrusted': 'snapshot is not trusted: {verdict}',
+  'core.recovery.needsAttentionNoAuto': 'the recovery decision is needs-attention; cannot execute automatically',
+  'core.recovery.noTrustedSnapshotShort': 'journal has no trusted snapshot',
+  'core.recovery.snapshotLoadFailed': 'snapshot cannot be loaded',
+  'core.recovery.needsAttentionNoRetry': 'the recovery decision is needs-attention; cannot retry',
+  'core.recovery.dismissFailed': 'dismiss failed',
+  'core.recovery.lockNotStale': 'Not determined to be stale; recovery was refused',
+  // ---------- restore ----------
+  'core.restore.pathEscaped': 'Path escapes the allowed root: {rel}',
+  'core.restore.symlinkCriticalFile': 'Critical file is a symlink: {rel}',
+  'core.restore.invalidSnapshotId': 'Invalid snapshotId',
+  'core.restore.snapshotDirOutOfBounds': 'Snapshot directory is out of bounds or not a direct child',
+  'core.restore.blobSymlink': 'Blob is a symlink: {name}',
+  'core.restore.snapshotJsonUnparsable': 'snapshot.json cannot be parsed',
+  'core.restore.legacyNeedsConfirm': 'Legacy snapshot (no manifest/READY); restore requires explicit confirmation',
+  'core.restore.envFingerprintMismatch': 'environmentFingerprint does not match (possibly from another machine or installation)',
+  'core.restore.legacyNoReadiness': 'Legacy snapshot (no readiness); restore requires explicit confirmation',
+  'core.restore.trustedManualLocal': 'Integrity passed, but the snapshot is not operation-bound (manual/local)',
+  'core.restore.trustedOperationSnapshot': 'READY + complete manifest + matching op/env/owner binding',
+  'core.restore.snapshotDirUnreadable': 'Snapshot directory cannot be read ({code}): {dir}',
+  'core.restore.illegalSnapshotId': 'Illegal snapshot id: {id}',
+  'core.restore.snapshotPathEscaped': 'Snapshot path escapes the root: {id}',
+
+  // ---------- reconcile ----------
+  'core.reconcile.journalUnparsable': 'journal {opId} cannot be parsed or has an illegal schema (quarantined)',
+  'core.reconcile.ownerLive': 'The owner is alive; a live operation is in progress',
+  'core.reconcile.bindingMismatch': 'ownership binding mismatch (journal.ownerInstanceId/lockId is not the crashed ownership {instanceId}); not treated as a trusted recovery',
+  'core.reconcile.envMismatch': 'environment fingerprint mismatch (another machine or changed environment); no automatic recovery',
+  'core.reconcile.needsAttentionConfirm': 'NEEDS_ATTENTION awaiting user confirmation',
+  'core.reconcile.selfProvenNoSteps': 'Self-proven zero side effects: the external intent registered no steps (fn never started)',
+  'core.reconcile.selfProvenArtifactOnly': 'Self-proven zero config side effects: a scheduled backup only produces an exports archive and scheduler state',
+  'core.reconcile.terminalOrganized': 'terminal({state}) journal organized into completed',
+  'core.reconcile.rollbackInterrupted': 'Rollback interrupted ({detail}); resuming the rollback requires explicit action (user confirmation)',
+  'core.reconcile.recoveringUnverified': 'RECOVERING with unverified recovery (no recoveryVerification, or a verdict other than MATCH/PARTIAL_MATCH); never auto-RECOVERED',
+  'core.reconcile.danglingPlannedStep': 'planned step {stepId} is missing its steps entry (corrupt or tampered journal)',
+  'core.reconcile.stepNotReliablyDone': 'step {ref} did not complete reliably (disk == before)',
+  'core.reconcile.stepFingerprint': 'step {ref} fingerprint {verdict}',
+  'core.reconcile.mutationNotStarted': 'No mutation started; completed safely',
+  'core.reconcile.opaqueRollbackAvailable': 'opaque APPLYING (empty steps) and the mutation may have started; a trusted snapshot is available for rollback (user confirmation required)',
+  'core.reconcile.opaqueNoSnapshot': 'opaque APPLYING (empty steps) and the mutation may have started; no trusted snapshot to roll back to',
+  'core.reconcile.noSideEffects': 'No side effects to recover; completed safely',
+  'core.reconcile.unprovableSteps': 'Unprovable steps: {details}',
+  'core.reconcile.externalSideEffectsUnknown': 'external side effects unknown',
+  'core.reconcile.snapshotMissingSuffix': '; snapshot is missing',
+  'core.reconcile.partialApplied': 'Some steps were applied; a safe rollback is possible (user confirmation required)',
+
+  // ---------- reinstall ----------
+  'core.reinstall.programLabel': 'DSH program itself',
+  'core.reinstall.programDesc': 'Uninstall and reinstall the global @deepseek-ai/dsh launcher (core action)',
+  'core.reinstall.cacheLabel': 'Global leftover cache',
+  'core.reinstall.cacheDesc': 'Clear the pnpm store and npm cache (optional)',
+  'core.reinstall.settingsLabel': '~/.dsh settings',
+  'core.reinstall.settingsDesc': 'Wipe settings.yaml and other configuration (irreversible)',
+  'core.reinstall.pluginsLabel': '~/.dsh installed plugins',
+  'core.reinstall.pluginsDesc': 'Wipe installed plugin dependencies under profiles (irreversible)',
+  'core.reinstall.dataLabel': 'Sessions and credentials',
+  'core.reinstall.dataDesc': 'Wipe sessions and .credentials.yaml credentials (highest risk; double confirmation required)',
+  'core.reinstall.stepUninstallGlobal': 'Uninstall the global @deepseek-ai/dsh',
+  'core.reinstall.stepCleanGlobal': 'Clean up leftover global @deepseek-ai/dsh',
+  'core.reinstall.stepInstallGlobal': 'Install the global @deepseek-ai/dsh@{version}',
+  'core.reinstall.stepVerifyVersion': 'Verify the version (dsh --version)',
+  'core.reinstall.stepCleanPnpmStore': 'Clean the pnpm store',
+  'core.reinstall.stepCleanNpmCache': 'Clean the npm cache',
+  'core.reinstall.stepBackupHome': 'Back up ~/.dsh to the sibling .reinstall-backup (rescue fallback)',
+  'core.reinstall.stepWipeSettings': 'Wipe ~/.dsh settings (settings.yaml and others)',
+  'core.reinstall.stepWipePlugins': 'Wipe ~/.dsh installed plugins (profiles/*/node_modules)',
+  'core.reinstall.stepWipeSessions': 'Wipe session records (sessions/)',
+  'core.reinstall.stepWipeCredentials': 'Wipe credentials (.credentials.yaml; delete the file only)',
+  // ---------- verify-recovery ----------
+  'core.verifyRecovery.blobPathEscaped': 'blob path escapes the root: {path}',
+  'core.verifyRecovery.revalidateFailed': 'Snapshot re-validation failed: {verdict}',
+  'core.verifyRecovery.revalidatePassed': 'Snapshot re-validation passed (TRUSTED_OPERATION_SNAPSHOT)',
+  'core.verifyRecovery.snapshotJsonRereadFailed': 'Failed to re-read snapshot.json: {reason}',
+  'core.verifyRecovery.envMismatch': 'environmentFingerprint does not match (WRONG_ENVIRONMENT)',
+  'core.verifyRecovery.operationMismatch': 'operationId does not match (WRONG_OPERATION): snapshot={snapshot} expected={expected}',
+  'core.verifyRecovery.none': 'none',
+  'core.verifyRecovery.hostFileNoBlob': 'host file has no blob information: {rel}',
+  'core.verifyRecovery.hostFileMissing': 'host file is missing: {rel}',
+  'core.verifyRecovery.hostFileBlobReadFailed': 'failed to read the host file blob: {rel}',
+  'core.verifyRecovery.hostFileContentMismatch': 'host file content mismatch: {rel}',
+  'core.verifyRecovery.hostFileMatch': 'host file matches: {rel}',
+  'core.verifyRecovery.hostFileStillPresent': 'a target that should have been deleted still exists: {rel}',
+  'core.verifyRecovery.hostFileAlreadyGone': 'delete target no longer exists: {rel}',
+  'core.verifyRecovery.filePathEscaped': 'file path escapes the root: {ref}',
+  'core.verifyRecovery.fileMissing': 'file is missing: {ref}',
+  'core.verifyRecovery.fileBlobReadFailed': 'failed to read the file blob: {ref}',
+  'core.verifyRecovery.fileContentMismatch': 'file content mismatch: {ref}',
+  'core.verifyRecovery.fileMatch': 'file matches: {ref}',
+  'core.verifyRecovery.fileStillPresent': 'the file target that should have been deleted still exists: {ref}',
+  'core.verifyRecovery.fileAlreadyGone': 'the deleted file target no longer exists: {ref}',
+  'core.verifyRecovery.pluginsNoBaseline': 'the snapshot has no beforePlugins baseline; plugin state cannot be verified',
+  'core.verifyRecovery.pluginsNoBaselineHint': 'plugin state cannot be verified automatically (the snapshot has no baseline); please confirm the installed plugins manually',
+  'core.verifyRecovery.pluginsAdded': 'plugins added during import were not removed: {names}',
+  'core.verifyRecovery.pluginsMatch': 'plugin state matches (no plugins added)',
+  'core.verifyRecovery.pluginsVerifyFailed': 'plugin state cannot be verified (listInstalled failed)',
+  'core.verifyRecovery.pluginsVerifyFailedHint': 'plugin state cannot be verified automatically (listInstalled failed); please confirm the installed plugins manually',
+  'core.verifyRecovery.settingsMismatch': 'settings mismatch: {ref}',
+  'core.verifyRecovery.settingsMatch': 'settings matches: {ref}',
+  'core.verifyRecovery.settingsVerifyFailed': 'settings cannot be verified: {ref}',
+  'core.verifyRecovery.settingsVerifyFailedHint': 'settings cannot be verified automatically ({ref}); please confirm manually',
+
+  // ---------- backup-verify ----------
+  'core.backupVerify.notRegularFile': 'not a regular file (a directory or a special file): {zip}',
+  'core.backupVerify.fileNotFound': 'backup file not found: {zip}',
+  'core.backupVerify.fileUnreadable': 'backup file unreadable: {reason}',
+  'core.backupVerify.encryptedContainer': 'the whole-archive encrypted container (DCA1) must first be decrypted into a ZIP before it can be self-checked',
+  'core.backupVerify.cannotOpenZip': 'cannot open as ZIP: {reason}',
+  'core.backupVerify.emptyArchive': 'empty archive (0 entries)',
+  'core.backupVerify.missingManifest': '{file} is missing (this is not a backup exported by this plugin)',
+  'core.backupVerify.manifestUnreadable': '{file} cannot be read (corrupt archive): {reason}',
+  'core.backupVerify.invalidManifest': '{file} is invalid: {reason}',
+  'core.backupVerify.unsupportedSchema': 'unsupported schema version: {version}',
+  'core.backupVerify.missingChecksums': '{file} is missing (integrity cannot be verified)',
+  'core.backupVerify.invalidChecksums': '{file} is invalid or unreadable: {reason}',
+  'core.backupVerify.unreadableEntry': '{name} ({reason})',
+  'core.backupVerify.emptyTableWithData': 'the checksums table is empty but the archive contains data entries',
+  'core.backupVerify.emptyTable': 'the checksums table is empty (the archive contains only the manifest and the checksums table itself)',
+  'core.backupVerify.uncoveredEntries': '{count} entries are not covered by the checksums table: {shown}{suffix}',
+  'core.backupVerify.declaredSectionNoEntries': 'the manifest declares section {id} but the archive has no matching file',
+  'core.backupVerify.declaredSectionPayloadMissing': 'the manifest declares section {id} but {path} is missing',
+  'core.backupVerify.encryptedFlagNoSecrets': 'the manifest is marked encrypted but the archive has no secrets ciphertext entry',
+  'core.backupVerify.missingEntries': 'entries listed in the checksums table are missing ({count}): {list}',
+  'core.backupVerify.hashMismatch': 'entry SHA-256 mismatch ({count}): {list}',
+  'core.backupVerify.unreadableEntries': 'entries cannot be read ({count}): {list}',
+  'core.backupVerify.verificationError': 'the self-check raised an exception: {reason}',
+
+  // ---------- backup-plan ----------
+  'core.backupPlan.pluginFilesRisk': 'third-party plugin files are not under our control (dsh-ssh.json may contain plaintext host passwords etc.); include them in a backup only after you have reviewed the content',
+  'core.backupPlan.pathWithReason': '{path} ({reason})',
+  'core.backupPlan.tooDeep': 'nesting limit exceeded, content NOT in this backup (a directory or link target is deeper than the limit): {at}',
+  'core.backupPlan.linkSkipped': 'link NOT in this backup: {at}',
+  'core.backupPlan.dirUnreadable': 'directory unreadable, its content is NOT in this backup: {dir}',
+  'core.backupPlan.countNotMeasured': 'count not measured',
+  'core.backupPlan.fileCount': '{count} file(s)',
+  'core.backupPlan.depDirSkipped': 'runtime dependency directory NOT in this backup (rebuildable; reinstall dependencies on the target): {path} ({files})',
+  'core.backupPlan.followedLinks': 'followed {count} linked director(ies) to collect content',
+  'core.backupPlan.sectionsMissingValue': 'missing value for `--sections`',
+  'core.backup.osHomeUnavailable': 'section {section} stores data under the system home directory but the host provides no file facade for it (older host); nothing is read or written this time',
+  'core.backupPlan.unknownSections': 'unknown section(s): {unknown} (available: {available})',
+  'core.backupPlan.sectionNotOffline': 'section {section} is not supported by the offline CLI backup (its collection depends on the plugin-data source registry and the local plugin manifests); use the GUI export/import instead',
+  'core.backupPlan.unsafeEntryName': 'unsafe entry name skipped: {name}',
+  'core.backupPlan.statFailed': 'stat failed: {path} ({reason})',
+  'core.backupPlan.readFailed': 'read failed: {path} ({reason})',
+  'core.backupPlan.sectionEmpty': 'section empty, skipped: {section}',
+  // ---------- model-tools ----------
+  'core.modelTools.illegalSnapshotId': 'Illegal snapshot id: {id}',
+  'core.modelTools.syncChannelNotConfigured': 'Sync channel {channel} is not configured (sync-config.json is missing or corrupt)',
+  'core.modelTools.snapshotNotFound': 'Snapshot does not exist: {id} (use config_list_snapshots to list the available snapshots)',
+  'core.modelTools.toolsServiceUnavailable': 'the tools service is unavailable: skipping model tool registration (engine capabilities remain available)',
+  'core.modelTools.backupToolDesc': 'Back up the full DSH configuration to the local exports directory (no secrets by default; pass password to export encrypted). Returns the ZIP file name / size / section list / encryption status.',
+  'core.modelTools.backupOnlyParam': 'Whitelist of section ids to export; default = all recommended sections',
+  'core.modelTools.backupPasswordParam': 'Optional: encryption password for the backup (memory only, never written to disk or echoed back; providing it encrypts the export)',
+  'core.modelTools.backupOutputDesc': 'Backup result (zip file name / sizeBytes / section list / excluded / encrypted / containsSecrets / redactedHits / warnings)',
+  'core.modelTools.listSnapshotsToolDesc': 'List the local rollback snapshots of the DSH configuration (id / createdAt / sourceZip / status / entryCount) for a later config_restore.',
+  'core.modelTools.listSnapshotsOutputDesc': 'Array of snapshots (id / createdAt / sourceZip / status / entryCount)',
+  'core.modelTools.restoreToolDesc': 'Restore to the given snapshot. By default it only returns the action plan (zero writes); pass confirm:true to actually execute (it overwrites/deletes $DSH_HOME files and uninstalls plugins added during the import; this is destructive, so preview first).',
+  'core.modelTools.restoreSnapshotIdParam': 'Id of the snapshot to restore (obtain it with config_list_snapshots)',
+  'core.modelTools.restoreConfirmParam': 'true actually executes the restore; the default false only previews the plan (zero writes)',
+  'core.modelTools.restoreOutputDesc': 'the restore plan when dryRun=true; the execution report when dryRun=false',
+  'core.modelTools.syncPushToolDesc': 'Manually push the DSH configuration to a remote sync target (Git/WebDAV), reusing the persisted channel configuration. Writing to a remote is an active operation; encryption or credentials require a password and the engine forces encrypt.',
+  'core.modelTools.channelParam': 'Sync channel; default = the configured active channel',
+  'core.modelTools.syncPushSectionsParam': 'Sections to push; default = all recommended portable sections (non-portable ones are skipped automatically)',
+  'core.modelTools.syncPushEncryptParam': 'Encrypt the snapshot; enabling it requires a password',
+  'core.modelTools.syncPushIncludeSecretsParam': 'Push real credential values (requires encrypt=true at the same time, otherwise the engine refuses)',
+  'core.modelTools.syncPushPasswordParam': 'Encryption password (memory only, never written to disk or echoed back)',
+  'core.modelTools.syncPushOutputDesc': 'Push report (snapshotId / actually synced sections / warnings)',
+  'core.modelTools.syncPullToolDesc': 'Pull a remote sync diff preview (Git/WebDAV, zero writes: download and analyze only, never write configuration directly). Applying the diff goes through the separate confirmed-import pipeline.',
+  'core.modelTools.syncPullSnapshotIdParam': 'Remote snapshot id; default = newest',
+  'core.modelTools.syncPullStrategyParam': 'Global conflict strategy; default merge (conflicts are kept for a decision)',
+  'core.modelTools.syncPullPasswordParam': 'Decryption password (required for encrypted snapshots; memory only)',
+  'core.modelTools.syncPullOutputDesc': 'Diff report (changes list / needsReview)',
+
+  // ---------- backup ----------
+  'core.backup.fileSectionBaseMissing': 'Section {section} is a file section, but FILE_BASES in core/backup.ts has no base directory (refusing to silently fall back to the homeDir root)',
+  'core.backup.secretsSectionNotSnapshotTarget': 'the secrets section has no adapter / no section payload and must not be a snapshot target (credential values use the separate encrypted container and never enter a snapshot)',
+  'core.backup.sectionUnsupported': 'snapshots do not support section "{section}": it is not registered in schema/section-registry.ts (or lacks a snapshot implementation); refusing to silently record it under another section semantic (that would make writes to this section impossible to roll back)',
+  'core.backup.blobPathEscaped': 'Snapshot blob path escapes the root: {path}',
+  'core.backup.snapshotVerifyFailed': 'Snapshot {id} failed verification: {reason}',
+  'core.backup.pruneFailed': 'Snapshot retention pruning failed (the snapshot itself is already published as READY and unaffected): {reason}',
+  'core.backup.pruneAbandoned': 'Snapshot retention pruning was abandoned: failed to read the recovery reference set ({reason})',
+  'core.backup.dirNameIdMismatch': 'the snapshot directory name does not match its internal id; automatic pruning skipped it: {dir} (internal id {id})',
+  'core.backup.snapshotPathEscaped': 'Snapshot path escapes the root',
+  'core.backup.snapshotJsonMissing': 'snapshot.json is missing',
+  'core.backup.snapshotJsonInvalid': 'snapshot.json is invalid',
+  'core.backup.snapshotIdDirMismatch': 'snapshot.id does not match the directory',
+  'core.backup.manifestMissing': 'manifest.json is missing',
+  'core.backup.manifestInvalid': 'manifest is invalid or its snapshotId does not match',
+  'core.backup.entryCountMismatch': 'manifest.entryCount does not match snapshot.entries (tampering)',
+  'core.backup.metadataHashMismatch': 'metadataHash does not match (destructive content was tampered with)',
+  'core.backup.blobMissing': 'blob is missing: {path}',
+  'core.backup.blobHashMismatch': 'blob hash mismatch: {path}',
+  'core.backup.blobNotInManifest': 'a blob referenced by the snapshot is not listed in the manifest: {blob}',
+  // ---------- plugin-cli ----------
+  'core.pluginCli.hoistPatternDiff': "this profile's node_modules was created by a different pnpm major; rebuild it (pnpm install) before retrying",
+  'core.pluginCli.addingToRoot': 'pnpm refused to add at a workspace root (missing -w); run dsh plugin --profile <name> add -w <pkg> by hand',
+  'core.pluginCli.notAWorkspace': '-w was passed but the profile is not a pnpm workspace, so pnpm refused the operation',
+  'core.pluginCli.releaseAgeViolation': "a recently-published plugin version in this profile trips pnpm's fresh-release safety check, blocking any change (even to other plugins); wait for the release to mature, or retry once with --config.minimumReleaseAge=0",
+  'core.pluginCli.gitBuildBlocked': "this git-hosted plugin needs to run its build script at install time, which pnpm blocks until allowed — add the exact package pnpm printed to allowBuilds in the profile's pnpm-workspace.yaml, then re-run",
+  'core.pluginCli.parenValue': '({value})',
+  'core.pluginCli.patchFileMissing': "the profile's pnpm-workspace.yaml declares patchedDependencies but the patch file is missing{patch}; pnpm then refuses every install (even unrelated plugins). Put the patch file back under the profile's patches/ directory, or remove that entry from pnpm-workspace.yaml and retry",
+  'core.pluginCli.fetch404': "a dependency cannot be resolved from the registry{pkg}; pnpm refuses every install while it is present — it may be a ghost entry left in the profile's package.json by an earlier failed operation (remove that line by hand), or a private package needing registry credentials",
+  'core.pluginCli.transientNetwork': 'a transient network failure while fetching dependencies (installs replay the whole dependency tree, so any existing dependency can hiccup); a plain retry usually succeeds',
+  'core.pluginCli.desktopProfileReserved': 'the "desktop" profile is managed exclusively by the DeepSeek Harness Desktop application and the plain dsh CLI refuses to touch it; retry from inside the Desktop app (a current version of this plugin switches to the Desktop-bundled CLI carrier) or target another profile',
+  'core.pluginCli.pnpmMissing': 'pnpm is not on PATH (dsh forwards to pnpm): install pnpm (npm install -g pnpm or corepack enable pnpm) and retry',
+  'core.pluginCli.dshCliStartFailed': 'cannot start dsh CLI ({spawnError}): make sure dsh is installed and on PATH, then retry installing {pkg}',
+  'core.pluginCli.installTimeout': 'install {pkg} timed out (process killed, default 15 min): check your network and retry later',
+  'core.pluginCli.installFailed': 'install {pkg} failed ({code}): {message}',
+  'core.pluginCli.noOutput': 'no output',
+  'core.pluginCli.installFailedWithTail': 'dsh plugin install {pkg} failed (exit {exitCode}): {tail}',
+
+  // ---------- migration-consult ----------
+  'core.consult.compatNoManifest': 'cannot assess compatibility: the manifest is missing',
+  'core.consult.compatPartial': 'partly compatible: cross-platform / missing sections / newer version; manual confirmation required',
+  'core.consult.compatUnsupported': 'not supported: the schema is beyond what this plugin supports',
+  'core.consult.integrityNoManifest': 'the manifest is missing; structural integrity cannot be verified',
+  'core.consult.manifestInvalid': 'invalid manifest: {message}',
+  'core.consult.manifestWarning': 'manifest warning: {message}',
+  'core.consult.checksumMismatch': 'integrity verification failed: {reason}',
+  'core.consult.noChecksums': 'the source has no checksums table; entry integrity cannot be verified',
+  'core.consult.zipSlip': 'ZIP path escapes the root: {path}',
+  'core.consult.sectionDataMissing': 'declared but the data is missing: {section}',
+  'core.consult.sectionUnparseable': 'section data cannot be parsed: {section}',
+  'core.consult.listSeparator': ', ',
+  'core.consult.andMore': ' and {count} more',
+  'core.consult.danglingCredentialRef': 'the backup references {count} credentials not declared in the credentials section (if this machine lacks their values, they must be entered after import): {shown}{more}',
+  'core.consult.unencryptedSecrets': 'the snapshot contains unencrypted secrets (credential values are exposed in plaintext)',
+  'core.consult.sensitiveHits': 'detected {count} exposed sensitive fields (redacted)',
+  'core.consult.migratabilityNotEvaluated': 'migratability was not evaluated (dry-run not executed)',
+  'core.consult.migratabilityFailed': 'migratability check failed: the dry-run does not pass',
+  'core.consult.conflicts': '{count} conflicts need your decision on which side to keep (you can decide each one in the next step; the local side is kept by default)',
+  'core.consult.warnings': '{count} more items need attention (they do not affect whether the import succeeds)',
+};
+
+/** 显式语言取本目录文案（带 locale 形参的渲染函数用；不读全局语言运行时）。 */
+export function coreText(lang: 'zh' | 'en', key: keyof typeof zh): string {
+  return lang === 'en' ? en[key] : zh[key];
+}
+
+registerMessageCatalog({ id: 'core', zh, en });
+// 迁移链自带零依赖目录（架构边界禁止 migrations → core）：这里作为 core → migrations 的
+// 允许方向，把它的目录并入引擎目录，并把语言源接到引擎语言运行时上。
+registerMessageCatalog({ id: 'core.migrations', zh: migrationZh, en: migrationEn });
+setMigrationLanguageSource(() => getEngineLocale());