dsh-winrm 0.1.0

package/src/client/api.ts

@@ -0,0 +1,345 @@
+/**
+ * Browser-side API client for the /api/dsh-winrm route family. The only data
+ * access path the panel components use — plain fetch/WebSocket, same origin.
+ */
+
+import {
+  WINRM_API,
+  type ClusterResult,
+  type ConsoleClientFrame,
+  type ConsoleServerFrame,
+  type ExecResult,
+  type ProcessInfo,
+  type RemoteDirEntry,
+  type ServiceInfo,
+  type TestResult,
+  type TransferProgress,
+  type TransferStreamLine,
+  type WinHostPayload,
+  type WinHostSummary,
+} from '../protocol.ts'
+
+/** Minimal File System Access API surface (not in all lib.dom versions). */
+interface WindowWithFileSystemAccess {
+  showSaveFilePicker?: (options: { suggestedName?: string }) => Promise<{
+    createWritable: () => Promise<{ write: (data: Uint8Array) => Promise<void>; close: () => Promise<void> }>
+  }>
+}
+
+/** Error carrying the route's JSON error message. */
+export class WinrmApiError extends Error {
+  constructor(message: string) {
+    super(message)
+    this.name = 'WinrmApiError'
+  }
+}
+
+/** Parse a JSON response or throw a WinrmApiError. */
+async function readJson<T>(response: Response): Promise<T> {
+  let body: unknown
+  try {
+    body = await response.json()
+  } catch {
+    throw new WinrmApiError(`HTTP ${response.status}: invalid JSON response`)
+  }
+  if (!response.ok) {
+    const message = typeof body === 'object' && body !== null && typeof (body as { error?: unknown }).error === 'string'
+      ? (body as { error: string }).error
+      : `HTTP ${response.status}`
+    throw new WinrmApiError(message)
+  }
+  return body as T
+}
+
+/** Query-string helper. */
+function query(params: Record<string, string | number | undefined>): string {
+  const search = new URLSearchParams()
+  for (const [key, value] of Object.entries(params)) {
+    if (value !== undefined && value !== '') search.set(key, String(value))
+  }
+  const text = search.toString()
+  return text === '' ? '' : '?' + text
+}
+
+/** One open console connection (WebSocket JSON frames). */
+export interface ConsoleConnection {
+  onReady: (() => void) | undefined
+  onOutput: ((data: string) => void) | undefined
+  onExit: ((code: number | null, error?: string) => void) | undefined
+  send(data: string): void
+  close(): void
+}
+
+/** The browser half's only data entry point. */
+export class WinrmApi {
+  // -------------------------------------------------------------- hosts
+  async listHosts(queryText?: string): Promise<WinHostSummary[]> {
+    const response = await fetch(WINRM_API.hosts + query({ query: queryText }))
+    const body = await readJson<{ hosts: WinHostSummary[] }>(response)
+    return body.hosts
+  }
+
+  async createHost(payload: WinHostPayload): Promise<WinHostSummary> {
+    const response = await fetch(WINRM_API.hosts, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify(payload),
+    })
+    const body = await readJson<{ host: WinHostSummary }>(response)
+    return body.host
+  }
+
+  async updateHost(alias: string, patch: WinHostPayload): Promise<WinHostSummary> {
+    const response = await fetch(WINRM_API.hosts + query({ alias }), {
+      method: 'PATCH',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify(patch),
+    })
+    const body = await readJson<{ host: WinHostSummary }>(response)
+    return body.host
+  }
+
+  async deleteHost(alias: string): Promise<void> {
+    const response = await fetch(WINRM_API.hosts + query({ alias }), { method: 'DELETE' })
+    await readJson<{ ok: boolean }>(response)
+  }
+
+  // ---------------------------------------------------------------- ops
+  async testHost(alias: string): Promise<TestResult> {
+    const response = await fetch(WINRM_API.test, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ alias }),
+    })
+    const body = await readJson<{ result: TestResult }>(response)
+    return body.result
+  }
+
+  async exec(alias: string, command: string, timeoutMs?: number): Promise<ExecResult> {
+    const response = await fetch(WINRM_API.exec, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ alias, command, timeoutMs }),
+    })
+    const body = await readJson<{ result: ExecResult }>(response)
+    return body.result
+  }
+
+  async cluster(options: {
+    command: string
+    aliases?: string[]
+    environment?: string
+    tags?: string[]
+    timeoutMs?: number
+    maxWorkers?: number
+  }): Promise<ClusterResult[]> {
+    const response = await fetch(WINRM_API.cluster, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify(options),
+    })
+    const body = await readJson<{ results: ClusterResult[] }>(response)
+    return body.results
+  }
+
+  // ------------------------------------------------------------ services
+  async listServices(alias: string): Promise<ServiceInfo[]> {
+    const response = await fetch(WINRM_API.services, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ alias, action: 'list' }),
+    })
+    const body = await readJson<{ services: ServiceInfo[] }>(response)
+    return body.services
+  }
+
+  async serviceAction(alias: string, name: string, action: string): Promise<ServiceInfo> {
+    const response = await fetch(WINRM_API.services, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ alias, name, action }),
+    })
+    const body = await readJson<{ service: ServiceInfo }>(response)
+    return body.service
+  }
+
+  // ----------------------------------------------------------- processes
+  async listProcesses(alias: string): Promise<ProcessInfo[]> {
+    const response = await fetch(WINRM_API.processes, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ alias, action: 'list' }),
+    })
+    const body = await readJson<{ processes: ProcessInfo[] }>(response)
+    return body.processes
+  }
+
+  async killProcess(alias: string, id: number): Promise<void> {
+    const response = await fetch(WINRM_API.processes, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ alias, action: 'kill', id }),
+    })
+    await readJson<{ killed: number }>(response)
+  }
+
+  // ----------------------------------------------------------------- ls
+  async ls(alias: string, dir: string): Promise<RemoteDirEntry[]> {
+    const response = await fetch(WINRM_API.ls + query({ alias, path: dir }))
+    const body = await readJson<{ entries: RemoteDirEntry[] }>(response)
+    return body.entries
+  }
+
+  // ------------------------------------------------------------ transfer
+  /**
+   * Upload one file (raw bytes) to a remote path. Progress arrives through
+   * the NDJSON response stream; resolves when the result frame lands.
+   */
+  async uploadFile(
+    file: File,
+    alias: string,
+    remotePath: string,
+    onProgress?: (progress: TransferProgress) => void,
+  ): Promise<{ transferredBytes: number }> {
+    const response = await fetch(WINRM_API.upload + query({ alias, remotePath }), {
+      method: 'POST',
+      body: file,
+    })
+    if (!response.ok || response.body === null) {
+      throw new WinrmApiError(`upload failed: HTTP ${response.status}`)
+    }
+    const reader = response.body.getReader()
+    const decoder = new TextDecoder()
+    let buffer = ''
+    let finalError: string | undefined
+    let sawResult = false
+    let transferredBytes = 0
+    for (;;) {
+      const { done, value } = await reader.read()
+      if (done) break
+      buffer += decoder.decode(value, { stream: true })
+      const lines = buffer.split('\n')
+      buffer = lines.pop() ?? ''
+      for (const line of lines) {
+        if (line.trim() === '') continue
+        let parsed: TransferStreamLine
+        try {
+          parsed = JSON.parse(line) as TransferStreamLine
+        } catch {
+          continue
+        }
+        if (parsed.type === 'progress') {
+          onProgress?.(parsed.progress)
+        } else if (parsed.type === 'result') {
+          sawResult = true
+          if (parsed.ok) transferredBytes = parsed.transferredBytes ?? 0
+          finalError = parsed.ok ? undefined : parsed.error ?? 'upload failed'
+        }
+      }
+    }
+    if (finalError !== undefined) throw new WinrmApiError(finalError)
+    if (!sawResult) throw new WinrmApiError('upload ended without a result frame — the transfer did not complete')
+    return { transferredBytes }
+  }
+
+  /**
+   * Download a remote file with client-side progress. Streams straight to
+   * disk when the File System Access API is available; otherwise falls back
+   * to an in-memory Blob.
+   */
+  async downloadFile(
+    alias: string,
+    remotePath: string,
+    onProgress?: (progress: TransferProgress) => void,
+  ): Promise<{ blob?: Blob; filename: string; streamed: boolean; bytes: number }> {
+    const response = await fetch(WINRM_API.download + query({ alias, remotePath }))
+    if (!response.ok || response.body === null) {
+      const text = await response.text().catch(() => '')
+      throw new WinrmApiError(text !== '' && text.startsWith('{') ? text : `download failed: HTTP ${response.status}`)
+    }
+    const total = Number(response.headers.get('content-length') ?? '0')
+    const disposition = response.headers.get('content-disposition') ?? ''
+    const match = /filename="([^"]+)"/.exec(disposition)
+    const filename = match?.[1] ?? remotePath.split(/[\\/]/).pop() ?? 'download'
+    const reader = response.body.getReader()
+    const picker = typeof window !== 'undefined'
+      ? (window as WindowWithFileSystemAccess).showSaveFilePicker
+      : undefined
+    let streamed = false
+    let writable: { write: (data: Uint8Array) => Promise<void>; close: () => Promise<void> } | undefined
+    const chunks: Uint8Array<ArrayBuffer>[] = []
+    let received = 0
+    const progress = (): void => {
+      onProgress?.({
+        phase: 'transferring',
+        file: remotePath,
+        transferred: received,
+        total,
+        percent: total > 0 ? Math.round((received / total) * 1000) / 10 : 0,
+      })
+    }
+    try {
+      if (picker !== undefined) {
+        const handle = await picker.call(window, { suggestedName: filename })
+        writable = await handle.createWritable()
+        streamed = true
+      }
+    } catch {
+      // User cancelled the save dialog or the API is unavailable: fall back.
+    }
+    for (;;) {
+      const { done, value } = await reader.read()
+      if (done) break
+      if (writable !== undefined) {
+        await writable.write(value as Uint8Array)
+      } else {
+        chunks.push(value as Uint8Array<ArrayBuffer>)
+      }
+      received += value.length
+      progress()
+    }
+    if (writable !== undefined) await writable.close()
+    onProgress?.({ phase: 'done', file: remotePath, transferred: received, total: received > 0 ? received : total, percent: 100 })
+    return {
+      blob: streamed ? undefined : new Blob(chunks),
+      filename,
+      streamed,
+      bytes: received,
+    }
+  }
+
+  // ------------------------------------------------------------ console
+  /** Open a WebSocket PowerShell console session. */
+  openConsole(alias: string): ConsoleConnection {
+    const scheme = window.location.protocol === 'https:' ? 'wss' : 'ws'
+    const url = scheme + '://' + window.location.host + WINRM_API.console + query({ alias })
+    const socket = new WebSocket(url)
+    const connection: ConsoleConnection = {
+      onReady: undefined,
+      onOutput: undefined,
+      onExit: undefined,
+      send: (data) => {
+        if (socket.readyState === WebSocket.OPEN) {
+          socket.send(JSON.stringify({ type: 'input', data } satisfies ConsoleClientFrame))
+        }
+      },
+      close: () => {
+        try { socket.close() } catch { /* already closed */ }
+      },
+    }
+    socket.onmessage = (event: MessageEvent<string>) => {
+      let frame: ConsoleServerFrame
+      try {
+        frame = JSON.parse(event.data) as ConsoleServerFrame
+      } catch {
+        return
+      }
+      if (frame.type === 'ready') connection.onReady?.()
+      else if (frame.type === 'output') connection.onOutput?.(frame.data)
+      else if (frame.type === 'exit') connection.onExit?.(frame.code, frame.error)
+    }
+    socket.onclose = () => { connection.onExit?.(null, 'connection closed') }
+    socket.onerror = () => { connection.onExit?.(null, 'connection error') }
+    return connection
+  }
+}

package/src/client/css-modules.d.ts

@@ -0,0 +1,5 @@
+/** CSS module imports: hashed class map (bundled by the tsdown css plugin). */
+declare module '*.module.css' {
+  const classes: Record<string, string>
+  export default classes
+}

package/src/client/index.ts

@@ -0,0 +1,82 @@
+/**
+ * Browser-half entry for the dsh-winrm plugin — runs inside the dsh web GUI.
+ * Registers locale dictionaries and contributes the "Windows" sidebar entry
+ * plus the central operations panel through the shell's slot system: a
+ * `sidebar.panellist` list row (icon + label) that selects the keyed `main`
+ * panel, and the `main` occupant that renders the tabbed WinRM panel in the
+ * center column. This replaces the earlier DOM-injection approach with the
+ * first-class extension points the shell now provides. DOM/slot mounting
+ * problems are logged, never thrown — an external plugin must not take the
+ * GUI down.
+ *
+ * Export discipline (packages/client rule): the /client surface carries what
+ * cordis loading needs plus types only — all value exports stay internal.
+ */
+import type { Context as ClientContext } from '@deepseek-ai/cordis'
+// Type-only: the locale plugin's Context merge (ctx.locale).
+import type {} from '@deepseek-ai/dsh-client-locale/client'
+// Type-only: the SlotRegistry service merge (ctx.slots).
+import type {} from '@deepseek-ai/dsh-client-ui-renderer/client'
+// Type-only: the keyed `main` slot, the MainPanelId brand, and the ctx.layout merge.
+import type { MainPanelId } from '@deepseek-ai/dsh-client-ui-layout/client'
+// Type-only: the `sidebar.panellist` list slot declaration.
+import type {} from '@deepseek-ai/dsh-client-ui-sidebar/client'
+import { WinrmApi } from './api.ts'
+import { en, zh, type WinKey } from './locales.ts'
+import { WinrmPanel } from './panel/WinrmPanel.tsx'
+import { WinrmPanelIcon } from './panel/WinrmPanelIcon.tsx'
+
+/** Locale namespace this plugin owns. */
+const NS = 'dsh-winrm'
+
+/** The id shared by the sidebar entry and the main panel it opens. */
+const PANEL_ID = 'winrm' as MainPanelId
+
+declare module '@deepseek-ai/dsh-client-ui-slots' {
+  interface LocaleNamespaceMap {
+    /** dsh-winrm surface copy. */
+    'dsh-winrm': WinKey
+  }
+}
+
+/** Required services (fiber inject waiting — slots, locale, and layout must be up first). */
+export const inject = ['slots', 'locale', 'layout']
+
+/** Type-only surface (export discipline: no value exports beyond the plugin contract). */
+export type { WinrmPanelProps } from './panel/WinrmPanel.tsx'
+export type { HostsTabProps } from './panel/HostsTab.tsx'
+export type { HostFormDialogProps } from './panel/HostFormDialog.tsx'
+export type { ConsoleTabProps } from './panel/ConsoleTab.tsx'
+export type { ServicesTabProps } from './panel/ServicesTab.tsx'
+export type { ProcessesTabProps } from './panel/ProcessesTab.tsx'
+export type { TransferTabProps } from './panel/TransferTab.tsx'
+export type { WinKey } from './locales.ts'
+
+/**
+ * Contribute the Windows sidebar entry and the tabbed WinRM panel it opens.
+ * @param ctx - client root context (locale, slots, layout services).
+ */
+export function apply(ctx: ClientContext): void {
+  ctx.effect(() => ctx.locale.register(NS, { zh, en }), 'dsh-winrm: dictionaries')
+  const t = ctx.locale.bind(NS)
+  const api = new WinrmApi()
+
+  // The panel is a global main-panel occupant: the sidebar entry selects it,
+  // and the shell swaps the center column between the Conversation and this
+  // keyed occupant. `onBack` returns to the Conversation.
+  ctx.slots.inject('main', () => ctx.slots.register({
+    name: 'main',
+    key: PANEL_ID,
+    locale: NS,
+    inject: () => ({ api, onBack: () => { ctx.layout.selectPanel(null) } }),
+  }, WinrmPanel))
+
+  // The sidebar row: an icon plus a localized label; selecting it opens the panel.
+  ctx.slots.inject('sidebar.panellist', () => ctx.slots.register({
+    name: 'sidebar.panellist',
+    id: PANEL_ID,
+    order: 10,
+    label: () => t('entry.label'),
+    locale: NS,
+  }, WinrmPanelIcon))
+}

package/src/client/locales.ts

@@ -0,0 +1,243 @@
+/**
+ * Locale dictionaries for the WinRM panel (zh / en), bound to the shared
+ * interpolator in panel/helpers.ts.
+ */
+
+export const zh = {
+  'entry.label': 'Windows',
+  'entry.tooltip': 'Windows 远程管理（WinRM）',
+  'panel.title': 'Windows 远程管理',
+  'panel.backToConversation': '返回对话',
+  'tab.hosts': '主机',
+  'tab.console': '控制台',
+  'tab.services': '服务',
+  'tab.processes': '进程',
+  'tab.transfer': '传输',
+  'common.loading': '加载中…',
+  'common.error': '错误：{error}',
+  'common.refresh': '刷新',
+  'hosts.search': '搜索主机…',
+  'hosts.add': '添加主机',
+  'hosts.test': '测试',
+  'hosts.testing': '测试中…',
+  'hosts.edit': '编辑',
+  'hosts.delete': '删除',
+  'hosts.deleteConfirm': '确认删除主机 {alias}？',
+  'hosts.connect': '连接控制台',
+  'hosts.testOk': '连接成功（{latency} ms）',
+  'hosts.testFail': '连接失败：{error}',
+  'hosts.empty': '尚未配置 Windows 主机，点「添加主机」开始。',
+  'hosts.col.alias': '别名',
+  'hosts.col.host': '主机',
+  'hosts.col.user': '用户',
+  'hosts.col.auth': '认证',
+  'hosts.col.transport': '传输',
+  'hosts.col.environment': '环境',
+  'hosts.col.tags': '标签',
+  'hosts.col.description': '备注',
+  'hosts.col.actions': '操作',
+  'form.title.create': '添加 Windows 主机',
+  'form.title.edit': '编辑主机 {alias}',
+  'form.alias': '别名',
+  'form.aliasHint': '英文字母/数字/点/连字符/下划线',
+  'form.host': '主机名或 IP',
+  'form.port': 'WinRM 端口',
+  'form.user': '用户名',
+  'form.userHint': '由原生 Node WinRM 客户端自动选择 NTLM/Negotiate 或 Basic；支持本地账户、DOMAIN\\user 或 user@domain',
+  'form.password': '密码',
+  'form.passwordHint': '仅保存在本机 ~/.dsh/dsh-winrm.json（0600），不显示在页面上',
+  'form.transport': '传输',
+  'form.transport.http': 'HTTP (5985)',
+  'form.transport.https': 'HTTPS (5986)',
+  'form.rejectUnauthorized': '接受自签名证书（HTTPS）',
+  'form.environment': '环境（development / production…）',
+  'form.tags': '标签（逗号分隔）',
+  'form.description': '备注',
+  'form.save': '保存',
+  'form.cancel': '取消',
+  'form.error': '错误：{error}',
+  'form.passwordPlaceholder': '（保持不变）',
+  'console.select': '选择主机开始控制台',
+  'console.connecting': '正在连接 {alias}…',
+  'console.connected': '已连接 {alias} — 输入 PowerShell 命令，回车执行；输入 exit 退出',
+  'console.disconnected': '连接已关闭',
+  'console.disconnect': '断开',
+  'console.inputPlaceholder': 'PowerShell 命令…',
+  'console.send': '发送',
+  'console.utf8Note': '注意：控制台经 WinRM 传输，中文输出可能乱码；需要精确中文输出请用「exec」或文件传输',
+  'services.select': '选择主机查看服务',
+  'services.list': '服务列表',
+  'services.name': '服务名',
+  'services.displayName': '显示名',
+  'services.status': '状态',
+  'services.startMode': '启动类型',
+  'services.startName': '运行账户',
+  'services.start': '启动',
+  'services.stop': '停止',
+  'services.restart': '重启',
+  'services.auto': '自动',
+  'services.manual': '手动',
+  'services.disabled': '禁用',
+  'services.actionOk': '操作成功：{name} → {status}',
+  'services.actionFail': '操作失败：{error}',
+  'services.filter': '筛选…',
+  'processes.select': '选择主机查看进程',
+  'processes.id': 'PID',
+  'processes.name': '名称',
+  'processes.cpu': 'CPU',
+  'processes.memMB': '内存(MB)',
+  'processes.startTime': '启动时间',
+  'processes.path': '路径',
+  'processes.kill': '结束',
+  'processes.killConfirm': '确认结束进程 {name} (PID {id})？',
+  'processes.killed': '已结束进程 PID {id}',
+  'processes.killFail': '结束失败：{error}',
+  'processes.filter': '筛选…',
+  'transfer.select': '选择主机浏览文件',
+  'transfer.path': '路径',
+  'transfer.go': '打开',
+  'transfer.up': '上级',
+  'transfer.root': '根目录',
+  'transfer.name': '名称',
+  'transfer.type': '类型',
+  'transfer.size': '大小',
+  'transfer.modified': '修改时间',
+  'transfer.download': '下载',
+  'transfer.upload': '上传文件',
+  'transfer.uploading': '上传中…',
+  'transfer.downloading': '下载中…',
+  'transfer.uploaded': '已上传 {bytes} 字节',
+  'transfer.downloaded': '已下载 {bytes} 字节',
+  'transfer.fail': '传输失败：{error}',
+  'transfer.bytes': 'B',
+  'transfer.kib': 'KB',
+  'transfer.mib': 'MB',
+  'transfer.dir': '目录',
+  'transfer.file': '文件',
+} as const
+
+export const en = {
+  'entry.label': 'Windows',
+  'entry.tooltip': 'Windows remote administration (WinRM)',
+  'panel.title': 'Windows Remote',
+  'panel.backToConversation': 'Back to chat',
+  'tab.hosts': 'Hosts',
+  'tab.console': 'Console',
+  'tab.services': 'Services',
+  'tab.processes': 'Processes',
+  'tab.transfer': 'Transfer',
+  'common.loading': 'Loading…',
+  'common.error': 'Error: {error}',
+  'common.refresh': 'Refresh',
+  'hosts.search': 'Search hosts…',
+  'hosts.add': 'Add host',
+  'hosts.test': 'Test',
+  'hosts.testing': 'Testing…',
+  'hosts.edit': 'Edit',
+  'hosts.delete': 'Delete',
+  'hosts.deleteConfirm': 'Delete host {alias}?',
+  'hosts.connect': 'Console',
+  'hosts.testOk': 'connected ({latency} ms)',
+  'hosts.testFail': 'failed: {error}',
+  'hosts.empty': 'No Windows hosts configured yet — click "Add host" to start.',
+  'hosts.col.alias': 'Alias',
+  'hosts.col.host': 'Host',
+  'hosts.col.user': 'User',
+  'hosts.col.auth': 'Auth',
+  'hosts.col.transport': 'Transport',
+  'hosts.col.environment': 'Environment',
+  'hosts.col.tags': 'Tags',
+  'hosts.col.description': 'Description',
+  'hosts.col.actions': 'Actions',
+  'form.title.create': 'Add Windows host',
+  'form.title.edit': 'Edit host {alias}',
+  'form.alias': 'Alias',
+  'form.aliasHint': 'letters, digits, dots, hyphens or underscores',
+  'form.host': 'Hostname or IP',
+  'form.port': 'WinRM port',
+  'form.user': 'Username',
+  'form.userHint': 'Native Node WinRM client auto-selects NTLM/Negotiate or Basic; supports local, DOMAIN\\user, or user@domain accounts',
+  'form.password': 'Password',
+  'form.passwordHint': 'Stored locally only in ~/.dsh/dsh-winrm.json (0600), never shown here',
+  'form.transport': 'Transport',
+  'form.transport.http': 'HTTP (5985)',
+  'form.transport.https': 'HTTPS (5986)',
+  'form.rejectUnauthorized': 'Accept self-signed certificates (HTTPS)',
+  'form.environment': 'Environment (development / production…)',
+  'form.tags': 'Tags (comma separated)',
+  'form.description': 'Description',
+  'form.save': 'Save',
+  'form.cancel': 'Cancel',
+  'form.error': 'Error: {error}',
+  'form.passwordPlaceholder': '(unchanged)',
+  'console.select': 'Pick a host to open the console',
+  'console.connecting': 'Connecting to {alias}…',
+  'console.connected': 'Connected to {alias} — type a PowerShell command and press Enter; type exit to quit',
+  'console.disconnected': 'Connection closed',
+  'console.disconnect': 'Disconnect',
+  'console.inputPlaceholder': 'PowerShell command…',
+  'console.send': 'Send',
+  'console.utf8Note': 'Note: the console travels over WinRM and non-ASCII output may garble; use exec or file transfer for exact UTF-8 content',
+  'services.select': 'Pick a host to view services',
+  'services.list': 'Services',
+  'services.name': 'Name',
+  'services.displayName': 'Display name',
+  'services.status': 'Status',
+  'services.startMode': 'Start mode',
+  'services.startName': 'Run as',
+  'services.start': 'Start',
+  'services.stop': 'Stop',
+  'services.restart': 'Restart',
+  'services.auto': 'Auto',
+  'services.manual': 'Manual',
+  'services.disabled': 'Disabled',
+  'services.actionOk': 'OK: {name} → {status}',
+  'services.actionFail': 'Failed: {error}',
+  'services.filter': 'Filter…',
+  'processes.select': 'Pick a host to view processes',
+  'processes.id': 'PID',
+  'processes.name': 'Name',
+  'processes.cpu': 'CPU',
+  'processes.memMB': 'Mem(MB)',
+  'processes.startTime': 'Started',
+  'processes.path': 'Path',
+  'processes.kill': 'Kill',
+  'processes.killConfirm': 'Kill process {name} (PID {id})?',
+  'processes.killed': 'Killed PID {id}',
+  'processes.killFail': 'Failed: {error}',
+  'processes.filter': 'Filter…',
+  'transfer.select': 'Pick a host to browse files',
+  'transfer.path': 'Path',
+  'transfer.go': 'Open',
+  'transfer.up': 'Up',
+  'transfer.root': 'Root',
+  'transfer.name': 'Name',
+  'transfer.type': 'Type',
+  'transfer.size': 'Size',
+  'transfer.modified': 'Modified',
+  'transfer.download': 'Download',
+  'transfer.upload': 'Upload file',
+  'transfer.uploading': 'Uploading…',
+  'transfer.downloading': 'Downloading…',
+  'transfer.uploaded': 'Uploaded {bytes} bytes',
+  'transfer.downloaded': 'Downloaded {bytes} bytes',
+  'transfer.fail': 'Transfer failed: {error}',
+  'transfer.bytes': 'B',
+  'transfer.kib': 'KB',
+  'transfer.mib': 'MB',
+  'transfer.dir': 'dir',
+  'transfer.file': 'file',
+} as const
+
+export type WinKey = keyof typeof zh
+
+/** Translate a key in one dictionary with optional {name} params. */
+export function t(dict: Record<string, string>, key: WinKey, values?: Record<string, string | number>): string {
+  let text = dict[key] ?? key
+  if (values !== undefined) {
+    for (const [name, value] of Object.entries(values)) {
+      text = text.split('{' + name + '}').join(String(value))
+    }
+  }
+  return text
+}