handmux 0.5.2 → 0.6.0

package/src/cli/i18n/en.js

@@ -0,0 +1,186 @@
+// English catalog (the fallback locale). Keys are grouped by command/area. `{var}` placeholders are filled
+// by translate(). Keep this in lockstep with zh.js — a missing zh key silently falls back to the line here.
+export default {
+  // generic
+  'err.generic': '✗ {msg}',
+  'err.configNotFound': '✗ --config {path}: not found',
+  'err.badConfig': '✗ bad config {path}: {msg}',
+  'err.namedNotProvisioned': '✗ named tunnel not provisioned — run `handmux setup` first',
+
+  // config line printed at the top of start / service install
+  'config.loaded': 'config: {path}',
+  'config.none': '(none — flags + defaults)',
+
+  // ssh preflight
+  'ssh.confirmSetup': 'passwordless SSH to {host} is not set up. Configure it now?',
+  'ssh.notSetup': 'passwordless SSH not set up — run: {bin} setup-key {host}',
+
+  // tmux presence / version
+  'tmux.notFound': '✗ tmux not found.',
+  'tmux.explain1': '  handmux runs on top of tmux (a terminal multiplexer) — it drives your real tmux',
+  'tmux.explain2': '  panes from your phone, so you need tmux on this machine first.',
+  'tmux.install': '  Install it:  {hint}',
+  'tmux.thenStart': '  Then run `handmux start` again.',
+  'tmux.tooOld': '⚠ tmux {raw} is below the tested minimum {min}; terminal rendering may be off',
+
+  // start — already running
+  'start.running.same': 'handmux is already running — open the address below.',
+  'start.running.changedHead': 'handmux is already running (tunnel: {tunnel}). A running instance does NOT pick up config changes on its own:',
+  'start.running.changedRow': '  • {key}: {from} → {to} (what you asked for now)',
+  'start.running.switchQ': 'Switch to the new settings now? (restarts handmux)',
+  'start.running.hint': "Leaving it as-is. Run 'handmux restart' whenever you want to apply the new settings.",
+
+  // start — launching
+  'start.overrides': '  ↳ --tunnel {flag} overrides config ({file}) for this run only',
+  'start.foreground': 'starting handmux (tunnel: {tunnel}, port: {port}) — Ctrl-C to stop',
+  'start.starting': 'starting handmux (tunnel: {tunnel}, port: {port}) …',
+
+  // stop / status
+  'stop.notRunning': 'handmux not running',
+  'stop.stopped': 'stopped handmux (pid {pid})',
+  'status.stopped': '● handmux stopped',
+  'status.running': '● handmux running',
+
+  // logs
+  'logs.none': '(no log yet — start handmux first)',
+
+  // update
+  'update.available': '  ⬆  handmux {latest} is available (you have {current})',
+  'update.how': '     upgrade:  handmux update   (or npm i -g handmux@latest)',
+  'update.running': 'Upgrading handmux (npm i -g handmux@latest)…',
+  'update.done': '✓ handmux updated.',
+  'update.restartHint': '  run `handmux restart` to run the new version.',
+  'update.failed': '✗ Upgrade failed. Try manually: npm i -g {pkg}@latest (may need sudo).',
+
+  // cloudflared auto-download
+  'cf.downloading': '  ↓ downloading cloudflared ({file}) …',
+
+  // access block (printAccess)
+  'access.noState': '  (no state)',
+  'access.error': '  ✗ {msg}',
+  'access.tunnel': '  tunnel   {tunnel}   ·   pid {pid}',
+  'access.open': '  🌐 open   {url}',
+  'access.pending': '(pending…)',
+  'access.lan': '  📶 lan    {url}',
+  'access.local': '  💻 local  {url}',
+  'access.token': '  🔑 token  {token}',
+  'access.reachable': '  ✓ reachable',
+  'access.unreachable': '  ⚠ tunnel up but {url} did not answer — check the server-side reverse proxy / DNS',
+  'access.hint': '  handmux status | stop',
+
+  // hooks
+  'hooks.confirmEnable': 'Enable coding-agent notifications (inbox)?',
+  'hooks.installedShort': '✓ Agent hooks installed.',
+  'hooks.noClaude': 'Claude Code not detected (~/.claude missing) — nothing to install.',
+  'hooks.noAgents': 'No coding agent detected (no ~/.claude, and codex not on PATH) — nothing to install.',
+  'hooks.installed': '✓ Claude hooks installed → ~/.claude/settings.json',
+  'hooks.installedClaude': '✓ Claude Code hooks installed → ~/.claude/settings.json',
+  'hooks.installedCodex': '✓ Codex hooks installed → ~/.codex/config.toml',
+  'hooks.installedHint': '  Restart or open a new agent session to load them; the inbox lights up as panes report.',
+  'hooks.removed': '✓ Agent hooks removed.',
+  'hooks.usage': 'usage: handmux hooks install|uninstall',
+
+  // tmux status-dot offer
+  'tmuxdot.tip': '  Tip: to show a Claude status dot on each tmux window, run `handmux hooks install` from an interactive terminal — it wires {conf} for you (see tmux/README.md in the handmux package).',
+  'tmuxdot.confirm': 'Also show a per-window Claude status dot in tmux? (adds a block to ~/.tmux.conf)',
+  'tmuxdot.added': '✓ tmux dot added → {path}',
+  'tmuxdot.apply': '  Apply with: tmux source-file ~/.tmux.conf  (it changes the shared tmux server — all clients, including your PC).',
+
+  // service
+  'service.usage': 'usage: handmux service install [start-flags] | handmux service uninstall',
+  'service.installed': "handmux will now start at login. 'handmux service uninstall' to remove.",
+
+  // config command
+  'configcmd.file': 'config file: {path}',
+  'configcmd.fileNone': '(none — using defaults; run `handmux setup` to create one)',
+  'configcmd.legend': '  origin: flag (this run only) · file · env · default',
+
+  // setup wizard
+  'setup.confirmStart': 'Start handmux now?',
+  'setup.later': "run 'handmux start' when you're ready.",
+  'setup.needTty': 'handmux setup needs an interactive terminal',
+  'setup.langQ': 'Language / 语言',
+  'setup.lang1': '  1) English',
+  'setup.lang2': '  2) 中文',
+  'setup.askName': 'app name (shown in the browser tab / home-screen icon; blank = default)',
+  'setup.tunnelQ': 'How should your phone reach this machine?',
+  'setup.tunnel1': '  1) none              — same Wi-Fi / LAN only',
+  'setup.tunnel2': '  2) cloudflare        — instant, random temporary https URL',
+  'setup.tunnel3': '  3) cloudflare-named  — your domain, stable HTTPS (most hands-off)',
+  'setup.tunnel4': '  4) ssh (tunlite)     — your own server / edge',
+  'setup.choose': 'choose 1-4',
+  'setup.invalid': 'invalid choice',
+  'setup.askPort': 'server port',
+  'setup.askHostname': 'public hostname (e.g. handmux.example.com)',
+  'setup.askTunnelName': 'tunnel name',
+  'setup.askSshHost': 'ssh host (user@host[:port])',
+  'setup.askRemotePort': 'remote port on the ssh host',
+  'setup.askPublicUrl': 'public url (blank = http://host:remotePort)',
+  'setup.wrote': '✓ wrote {path}',
+  'setup.pushKeep': 'keep push notifications configured?',
+  'setup.pushSetup': 'set up push notifications now? (generates VAPID keys)',
+  'setup.pushContact': 'contact (mailto: or https URL, for the push service)',
+  'setup.pushGenerated': '✓ generated VAPID keypair',
+  'setup.voiceKeep': 'keep voice input configured?',
+  'setup.voiceSetup': 'set up voice input now? (needs iFlytek/xfyun keys)',
+  'setup.voiceAppId': 'xfyun appId',
+  'setup.voiceApiKey': 'xfyun apiKey',
+  'setup.voiceApiSecret': 'xfyun apiSecret',
+  'setup.voiceSkipped': '  (skipped — missing fields)',
+  'setup.cfLogin': '→ logging in to Cloudflare (a browser will open) …',
+  'setup.cfReuse': '✓ reusing existing tunnel {name} ({id})',
+  'setup.cfCredMissing1': '⚠ credentials file {file} not found on this machine — the tunnel was likely',
+  'setup.cfCredMissing2': '  created elsewhere. Run `{bin} tunnel delete {name}` and re-run setup to recreate it here.',
+  'setup.cfCreate': '→ creating tunnel {name} …',
+  'setup.cfRoute': '→ routing {host} → tunnel …',
+  'setup.cfRouteFail': "⚠ route dns failed — is {domain}'s DNS hosted on Cloudflare?",
+  'setup.cfRouteFail2': '  Add the domain on Cloudflare (free) and point its nameservers there, then re-run setup.',
+  'setup.sshReady': '✓ passwordless SSH already set up',
+  'setup.sshSetup': "→ setting up passwordless SSH to {host} (you'll enter the password once) …",
+  'setup.sshHelp1': 'Server side (one-time): point a reverse proxy at the forwarded loopback port.',
+  'setup.sshHelpNginx': '  nginx:  proxy_pass http://127.0.0.1:{port};  (add client_max_body_size 60m; proxy_read_timeout 90s;)',
+  'setup.sshHelpCaddy': '  caddy:  {url} {  reverse_proxy 127.0.0.1:{port}  }',
+  'setup.previewHelp1': 'Optional — dynamic port preview (open a dev server by port on your phone):',
+  'setup.previewHelp2': '  set  "previewDomain": "..."  in the config, and route the wildcard preview domain to the gateway.',
+  'setup.previewTlsCf': "  TLS: Cloudflare's free cert covers ONE level (*.example.com); deeper (*.preview.example.com) needs Advanced Certificate Manager.",
+  'setup.previewTlsEdge': "  TLS: your edge serves the wildcard cert (e.g. a Let's Encrypt *.preview.your.domain).",
+
+  // help
+  'help.body': `handmux — drive your tmux from your phone
+
+  handmux start            run it (defaults to LAN-only; no config needed)
+  handmux setup            configure tunnel / name / notifications (writes config; re-run to change)
+  handmux stop | restart | status
+  handmux logs [--follow] [--lines N]
+  handmux update           upgrade to the latest published version (npm i -g handmux@latest)
+
+The model: 'start' runs · 'setup' configures (writes ~/.handmux/config.json) · re-run setup to change.
+A flag overrides one value for one run and never persists (flag > file > default).
+
+advanced (scripting / multiple configs):
+  handmux config                        show the effective config + where each value came from
+  handmux hooks install|uninstall         enable/disable Claude Code notifications (inbox)
+  handmux service install [start-flags]   start at login (launchd/systemd)
+  handmux service uninstall               remove the autostart entry
+  --config PATH             use this config file instead of ~/.handmux/config.json (dev / multi-config)
+  --lang en|zh              CLI language (default: auto-detect from your shell locale)
+  --version, -v            print the handmux version
+
+start flags (one-run overrides — for persistence use 'handmux setup'):
+  --tunnel none|cloudflare|cloudflare-named|ssh   expose method (default: none)
+  --ssh-host user@host[:port]   ssh tunnel target (tunlite)
+  --remote-port N               port bound on the ssh host (default: --port)
+  --public-url URL              public url to advertise (any tunnel, incl. none if you run your own;
+                                ssh defaults to http://host:remotePort)
+  --ssh-jump u@h[,…]            optional bastion for ssh
+  --cf-hostname H               public hostname for cloudflare-named
+  --cf-tunnel-name N            tunnel name for cloudflare-named (default: handmux)
+  --port N                  server port (default: 19999)
+  --host H                  bind host (default: 0.0.0.0)
+  --token S                 auth token (default: generated)
+  --name "My Box"           app name in the browser tab + home-screen icon label
+  --preview-domain D        enable dynamic previews (needs wildcard subdomain)
+  --foreground, -f          run in the foreground (don't daemonize)
+  --no-qr                   don't render the QR code
+`,
+};

package/src/cli/i18n/index.js

@@ -0,0 +1,53 @@
+// CLI-side i18n. Mirrors the web i18n shape (a pure `translate` with English fallback) but resolves the
+// locale from the shell environment / flags / config instead of the browser + localStorage. Default is
+// English; a Chinese shell (LANG/LC_* = zh…) or an explicit `--lang zh` / config `"lang": "zh"` switches it.
+// Adding a language = create ./<code>.js with the same keys, import it, and add it to LOCALES — any missing
+// key falls back to English, so a partial translation degrades gracefully rather than printing blanks.
+import en from './en.js';
+import zh from './zh.js';
+
+const LOCALES = { en, zh };
+export const AVAILABLE = [
+  { code: 'en', label: 'English' },
+  { code: 'zh', label: '中文' },
+];
+
+// pure + testable: current-dict → English-fallback → key, then {var} interpolation (same as web).
+export function translate(dict, fallback, key, vars) {
+  let s = dict && dict[key] != null ? dict[key]
+        : fallback && fallback[key] != null ? fallback[key]
+        : key;
+  if (vars) s = s.replace(/\{(\w+)\}/g, (_, k) => (vars[k] != null ? vars[k] : `{${k}}`));
+  return s;
+}
+
+// A POSIX locale string → the base language we might have a dict for: `zh_CN.UTF-8` → `zh`, `en` → `en`.
+const baseOf = (v) => String(v || '').toLowerCase().split(/[._@-]/)[0];
+
+// pure + testable: explicit choice (flag/config) wins, else the first shell locale var that names a known
+// language, else English. `C`/`POSIX`/`C.UTF-8` carry no language → fall through to English.
+export function detectLang(flags = {}, fileCfg = {}, env = {}, available = LOCALES) {
+  const explicit = flags.lang ?? fileCfg.lang;
+  if (explicit != null) { const b = baseOf(explicit); if (available[b]) return b; }
+  for (const k of ['HANDMUX_LANG', 'LC_ALL', 'LC_MESSAGES', 'LANG']) {
+    const b = baseOf(env[k]);
+    if (b && available[b]) return b;
+  }
+  return 'en';
+}
+
+let current = 'en';
+
+// Resolve + install the active locale for the whole CLI process (called once at startup). Returns the code.
+export function initLocale(flags, fileCfg, env = process.env) {
+  current = detectLang(flags, fileCfg, env);
+  return current;
+}
+
+// Force a specific locale (e.g. right after the setup wizard's language question, so the rest of the wizard
+// speaks the chosen language). No-op for an unknown code.
+export function setLocale(code) { if (LOCALES[code]) current = code; }
+export function getLocale() { return current; }
+
+// The one call sites use: translate `key` in the active locale, falling back to English then the key itself.
+export function t(key, vars) { return translate(LOCALES[current], en, key, vars); }

package/src/cli/i18n/zh.js

@@ -0,0 +1,185 @@
+// 中文字典。键与 en.js 一一对应;缺键会自动回退到英文。命令名、flag、隧道名等字面量保持英文(它们是要照抄输入的)。
+export default {
+  // 通用
+  'err.generic': '✗ {msg}',
+  'err.configNotFound': '✗ --config {path}:找不到该文件',
+  'err.badConfig': '✗ 配置有误 {path}:{msg}',
+  'err.namedNotProvisioned': '✗ 命名隧道尚未配置 —— 请先运行 `handmux setup`',
+
+  // start / service install 顶部打印的配置来源
+  'config.loaded': '配置:{path}',
+  'config.none': '(无 —— 使用 flag + 默认值)',
+
+  // ssh 预检
+  'ssh.confirmSetup': '到 {host} 的免密 SSH 还没配置。现在配置吗?',
+  'ssh.notSetup': '免密 SSH 未配置 —— 请运行:{bin} setup-key {host}',
+
+  // tmux 是否存在 / 版本
+  'tmux.notFound': '✗ 未找到 tmux。',
+  'tmux.explain1': '  handmux 跑在 tmux(终端复用器)之上 —— 它从手机驱动你真实的 tmux 窗格,',
+  'tmux.explain2': '  所以这台机器上必须先装好 tmux。',
+  'tmux.install': '  安装:  {hint}',
+  'tmux.thenStart': '  然后再运行 `handmux start`。',
+  'tmux.tooOld': '⚠ tmux {raw} 低于测试过的最低版本 {min};终端渲染可能有偏差',
+
+  // start —— 已在运行
+  'start.running.same': 'handmux 已在运行 —— 直接打开下面的地址即可。',
+  'start.running.changedHead': 'handmux 已在运行(隧道:{tunnel})。运行中的实例不会自动应用配置改动:',
+  'start.running.changedRow': '  • {key}:{from} → {to}(你这次想要的)',
+  'start.running.switchQ': '现在切换到新设置吗?(会重启 handmux)',
+  'start.running.hint': "保持不变。想应用新设置时,运行 'handmux restart' 即可。",
+
+  // start —— 启动中
+  'start.overrides': '  ↳ --tunnel {flag} 仅本次覆盖配置文件里的 {file}',
+  'start.foreground': '正在启动 handmux(隧道:{tunnel},端口:{port})—— 按 Ctrl-C 停止',
+  'start.starting': '正在启动 handmux(隧道:{tunnel},端口:{port})…',
+
+  // stop / status
+  'stop.notRunning': 'handmux 未在运行',
+  'stop.stopped': '已停止 handmux(pid {pid})',
+  'status.stopped': '● handmux 已停止',
+  'status.running': '● handmux 运行中',
+
+  // logs
+  'logs.none': '(还没有日志 —— 先运行 handmux start)',
+
+  // update
+  'update.available': '  ⬆  handmux {latest} 可升级(当前 {current})',
+  'update.how': '     升级:  handmux update  (或 npm i -g handmux@latest)',
+  'update.running': '正在升级 handmux(npm i -g handmux@latest)…',
+  'update.done': '✓ handmux 已更新。',
+  'update.restartHint': '  运行 `handmux restart` 以启用新版本。',
+  'update.failed': '✗ 升级失败。请手动运行:npm i -g {pkg}@latest(可能需要 sudo)。',
+
+  // cloudflared 自动下载
+  'cf.downloading': '  ↓ 正在下载 cloudflared({file})…',
+
+  // 访问信息块(printAccess)
+  'access.noState': '  (无状态)',
+  'access.error': '  ✗ {msg}',
+  'access.tunnel': '  隧道   {tunnel}   ·   pid {pid}',
+  'access.open': '  🌐 打开   {url}',
+  'access.pending': '(等待中…)',
+  'access.lan': '  📶 局域网 {url}',
+  'access.local': '  💻 本机   {url}',
+  'access.token': '  🔑 令牌   {token}',
+  'access.reachable': '  ✓ 可访问',
+  'access.unreachable': '  ⚠ 隧道已起,但 {url} 没有响应 —— 检查服务端的反向代理 / DNS',
+  'access.hint': '  handmux status | stop',
+
+  // hooks
+  'hooks.confirmEnable': '启用编程 agent 通知(收件箱)?',
+  'hooks.installedShort': '✓ agent hooks 已安装。',
+  'hooks.noClaude': '未检测到 Claude Code(缺少 ~/.claude)—— 无需安装。',
+  'hooks.noAgents': '未检测到编程 agent(无 ~/.claude,且 PATH 上没有 codex)—— 无需安装。',
+  'hooks.installed': '✓ Claude hooks 已安装 → ~/.claude/settings.json',
+  'hooks.installedClaude': '✓ Claude Code hooks 已安装 → ~/.claude/settings.json',
+  'hooks.installedCodex': '✓ Codex hooks 已安装 → ~/.codex/config.toml',
+  'hooks.installedHint': '  重启或新开一个 agent 会话以加载;窗格上报后收件箱就会亮起。',
+  'hooks.removed': '✓ agent hooks 已移除。',
+  'hooks.usage': '用法:handmux hooks install|uninstall',
+
+  // tmux 状态点
+  'tmuxdot.tip': '  提示:想在每个 tmux 窗口上显示 Claude 状态点,请在交互终端里运行 `handmux hooks install` —— 它会替你写好 {conf}(见 handmux 包内的 tmux/README.md)。',
+  'tmuxdot.confirm': '同时在 tmux 里显示每个窗口的 Claude 状态点吗?(会往 ~/.tmux.conf 加一段)',
+  'tmuxdot.added': '✓ tmux 状态点已添加 → {path}',
+  'tmuxdot.apply': '  生效方式:tmux source-file ~/.tmux.conf  (它改的是共享 tmux 服务器 —— 对所有客户端生效,包括你的电脑)。',
+
+  // service
+  'service.usage': '用法:handmux service install [start-flags] | handmux service uninstall',
+  'service.installed': "handmux 现在会开机自启。移除请运行 'handmux service uninstall'。",
+
+  // config 命令
+  'configcmd.file': '配置文件:{path}',
+  'configcmd.fileNone': '(无 —— 使用默认值;运行 `handmux setup` 可创建一个)',
+  'configcmd.legend': '  来源:flag(仅本次)· file · env · default',
+
+  // setup 向导
+  'setup.confirmStart': '现在启动 handmux 吗?',
+  'setup.later': "准备好后运行 'handmux start' 即可。",
+  'setup.needTty': 'handmux setup 需要一个交互式终端',
+  'setup.langQ': 'Language / 语言',
+  'setup.lang1': '  1) English',
+  'setup.lang2': '  2) 中文',
+  'setup.askName': '应用名称(显示在浏览器标签 / 主屏图标;留空 = 默认)',
+  'setup.tunnelQ': '你的手机怎么连到这台机器?',
+  'setup.tunnel1': '  1) none              —— 仅同一 Wi-Fi / 局域网',
+  'setup.tunnel2': '  2) cloudflare        —— 即时、随机的临时 https 地址',
+  'setup.tunnel3': '  3) cloudflare-named  —— 用你自己的域名,稳定 HTTPS(最省心)',
+  'setup.tunnel4': '  4) ssh (tunlite)     —— 你自己的服务器 / 边缘',
+  'setup.choose': '选择 1-4',
+  'setup.invalid': '无效选择',
+  'setup.askPort': '服务端口',
+  'setup.askHostname': '公网域名(例如 handmux.example.com)',
+  'setup.askTunnelName': '隧道名称',
+  'setup.askSshHost': 'ssh 主机(user@host[:port])',
+  'setup.askRemotePort': 'ssh 主机上的远程端口',
+  'setup.askPublicUrl': '公网地址(留空 = http://host:remotePort)',
+  'setup.wrote': '✓ 已写入 {path}',
+  'setup.pushKeep': '保留已配置的推送通知吗?',
+  'setup.pushSetup': '现在配置推送通知吗?(会生成 VAPID 密钥)',
+  'setup.pushContact': '联系方式(mailto: 或 https 地址,供推送服务使用)',
+  'setup.pushGenerated': '✓ 已生成 VAPID 密钥对',
+  'setup.voiceKeep': '保留已配置的语音输入吗?',
+  'setup.voiceSetup': '现在配置语音输入吗?(需要讯飞/xfyun 密钥)',
+  'setup.voiceAppId': 'xfyun appId',
+  'setup.voiceApiKey': 'xfyun apiKey',
+  'setup.voiceApiSecret': 'xfyun apiSecret',
+  'setup.voiceSkipped': '  (已跳过 —— 字段缺失)',
+  'setup.cfLogin': '→ 正在登录 Cloudflare(会打开一个浏览器)…',
+  'setup.cfReuse': '✓ 复用已有隧道 {name}({id})',
+  'setup.cfCredMissing1': '⚠ 本机找不到凭据文件 {file} —— 该隧道很可能是',
+  'setup.cfCredMissing2': '  在别处创建的。运行 `{bin} tunnel delete {name}` 再重新 setup,即可在本机重建。',
+  'setup.cfCreate': '→ 正在创建隧道 {name} …',
+  'setup.cfRoute': '→ 正在把 {host} 路由到隧道 …',
+  'setup.cfRouteFail': '⚠ route dns 失败 —— {domain} 的 DNS 托管在 Cloudflare 上吗?',
+  'setup.cfRouteFail2': '  在 Cloudflare 上添加该域名(免费)并把 nameserver 指过去,然后重新 setup。',
+  'setup.sshReady': '✓ 免密 SSH 已配置好',
+  'setup.sshSetup': '→ 正在配置到 {host} 的免密 SSH(你需要输入一次密码)…',
+  'setup.sshHelp1': '服务端(一次性):把反向代理指向被转发的 loopback 端口。',
+  'setup.sshHelpNginx': '  nginx:  proxy_pass http://127.0.0.1:{port};  (加上 client_max_body_size 60m; proxy_read_timeout 90s;)',
+  'setup.sshHelpCaddy': '  caddy:  {url} {  reverse_proxy 127.0.0.1:{port}  }',
+  'setup.previewHelp1': '可选 —— 动态端口预览(在手机上按端口打开一个 dev server):',
+  'setup.previewHelp2': '  在配置里设  "previewDomain": "..."  ,并把通配预览域名路由到网关。',
+  'setup.previewTlsCf': '  TLS:Cloudflare 的免费证书只覆盖一级(*.example.com);更深一层(*.preview.example.com)需要 Advanced Certificate Manager。',
+  'setup.previewTlsEdge': '  TLS:由你自己的边缘提供通配证书(例如 Let\'s Encrypt 的 *.preview.your.domain)。',
+
+  // help
+  'help.body': `handmux —— 从手机驱动你的 tmux
+
+  handmux start            直接运行(默认仅局域网;无需配置)
+  handmux setup            配置隧道 / 名称 / 通知(写入配置;重跑即可修改)
+  handmux stop | restart | status
+  handmux logs [--follow] [--lines N]
+  handmux update           升级到最新发布版本(npm i -g handmux@latest)
+
+模型:'start' 运行 · 'setup' 配置(写入 ~/.handmux/config.json)· 重跑 setup 即可修改。
+flag 仅本次覆盖某一项、绝不持久化(优先级 flag > file > default)。
+
+进阶(脚本 / 多套配置):
+  handmux config                        显示生效的配置 + 每一项来自哪里
+  handmux hooks install|uninstall         启用/停用 Claude Code 通知(收件箱)
+  handmux service install [start-flags]   开机自启(launchd/systemd)
+  handmux service uninstall               移除自启项
+  --config PATH             使用指定配置文件,替代 ~/.handmux/config.json(开发 / 多套配置)
+  --lang en|zh              CLI 语言(默认:根据你的 shell locale 自动检测)
+  --version, -v            打印 handmux 版本
+
+start flag(仅本次覆盖 —— 要持久化请用 'handmux setup'):
+  --tunnel none|cloudflare|cloudflare-named|ssh   暴露方式(默认:none)
+  --ssh-host user@host[:port]   ssh 隧道目标(tunlite)
+  --remote-port N               绑定在 ssh 主机上的端口(默认:--port)
+  --public-url URL              对外公布的公网地址(任意隧道均可,包括自建的 none;
+                                ssh 默认 http://host:remotePort)
+  --ssh-jump u@h[,…]            ssh 的可选跳板机
+  --cf-hostname H               cloudflare-named 的公网域名
+  --cf-tunnel-name N            cloudflare-named 的隧道名(默认:handmux)
+  --port N                  服务端口(默认:19999)
+  --host H                  绑定地址(默认:0.0.0.0)
+  --token S                 鉴权令牌(默认:自动生成)
+  --name "My Box"           浏览器标签 + 主屏图标里的应用名
+  --preview-domain D        启用动态预览(需要通配子域名)
+  --foreground, -f          前台运行(不后台化)
+  --no-qr                   不渲染二维码
+`,
+};

package/src/cli/options.js

@@ -137,6 +137,9 @@ export function explainConfig(flags = {}, fileCfg = {}, cfgPath = null, env = pr
   const name = trace(flags, fileCfg, env, cfgPath, 'name', 'HANDMUX_APP_NAME', null);
   add('name', name, name.value == null ? '(default)' : String(name.value));
 
+  const lang = trace(flags, fileCfg, env, cfgPath, 'lang', 'HANDMUX_LANG', null);
+  add('lang', lang, lang.value == null ? '(auto — shell locale)' : String(lang.value));
+
   const token = trace(flags, fileCfg, env, cfgPath, 'token', 'HANDMUX_TOKEN', null);
   add('token', token, token.value == null ? '(generated each start)' : mask(token.value));