jishushell 0.4.24 → 0.4.30

package/scripts/check-app-spec.mjs

@@ -0,0 +1,443 @@
+#!/usr/bin/env node
+/**
+ * Validates `apps/*.yaml` against the Provider Authoring Contract
+ * (docs/app-interconnect-design.md §13.2.3).
+ *
+ * Three provide classes:
+ *   A. Bindable category   — capability has CAPABILITY_CATEGORIES prefix
+ *      (`llm-` / `search-` / `browser-` / `mcp-`). Must declare task,
+ *      port (resolvable to a task port via host_port ?? port), protocol
+ *      from category whitelist, optional health, description.
+ *   B. Legacy bindable exact — capability is in LEGACY_BINDABLE_EXACT_ALLOWLIST
+ *      OR appears in some yaml's `requires.capability`. Same field
+ *      requirements as A but protocol whitelist is `default` (broader).
+ *   C. UI-only — capability is in UI_LEGACY_ALLOWLIST or matches a
+ *      `web-*` / `*-terminal` / `*-dashboard` / `*-ui` pattern. Looser
+ *      checks: only naming + (port resolves OR no port for terminal-only).
+ *
+ * `requires[*]` checks: capability is a category token OR is in
+ * `allowedRequiresExact = LEGACY_BINDABLE_EXACT_ALLOWLIST ∪ exactRequiresInRepo`.
+ * Plus an "orphan require" check that matches each require to at least one
+ * provide (severity gated by `required` — error for required:true, warning
+ * otherwise).
+ */
+import { readFileSync, readdirSync, statSync } from "fs";
+import { join, dirname } from "path";
+import { fileURLToPath } from "url";
+import { parse as parseYaml } from "yaml";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const APPS_DIR = process.env.APPS_DIR_OVERRIDE ?? join(__dirname, "..", "apps");
+
+// ── Allowlists (kept here so check-app-spec stays mechanically driven) ──
+
+const CAPABILITY_CATEGORIES = new Set(["llm", "search", "browser", "mcp"]);
+
+const LEGACY_BINDABLE_EXACT_ALLOWLIST = new Set([
+  "ollama-api",
+]);
+
+const UI_LEGACY_ALLOWLIST = new Set([
+  "openwebui-web",
+  "hollama-web",
+  "playwright-ui",
+  "openclaw-dashboard",
+  "ollama-terminal",
+  "web-ui",
+  "web-searxng",
+  "web-openwebui",
+  "web-hermes",
+]);
+
+const PROTOCOL_WHITELIST = {
+  llm: new Set(["http", "https"]),
+  search: new Set(["http", "https"]),
+  browser: new Set(["ws", "wss", "http", "https"]),
+  mcp: new Set(["http", "https", "ws", "sse"]),
+  default: new Set(["http", "https", "ws", "wss", "tcp"]),
+};
+
+// ── Helpers ──
+
+function categoryOf(capability) {
+  const dashIdx = capability.indexOf("-");
+  if (dashIdx <= 0) return null;
+  const head = capability.slice(0, dashIdx);
+  return CAPABILITY_CATEGORIES.has(head) ? head : null;
+}
+
+function isUILegacy(capability) {
+  if (UI_LEGACY_ALLOWLIST.has(capability)) return true;
+  if (capability.startsWith("web-")) return true;
+  return /-(terminal|dashboard|ui)$/.test(capability);
+}
+
+// ── Auth block validation (§6 of agents-as-llm-provider spec) ──
+
+const AUTH_KINDS = new Set(["none", "bearer", "header", "query"]);
+const AUTH_OPTIONAL_FIELDS_BY_KIND = {
+  none: new Set(),
+  bearer: new Set(["headerName", "tokenPrefix"]),
+  header: new Set(["headerName", "tokenPrefix"]),
+  query: new Set(["headerName", "tokenPrefix"]),
+};
+const TOKEN_SOURCE_PATTERNS = [
+  /^instance\.env\.[A-Z][A-Z0-9_]*$/,
+  /^instance\.config\..+$/,
+  /^proxy\.token$/,
+];
+
+/**
+ * Validate the optional `auth` block on a provides[] entry.
+ * Reports errors via the `err(file, msg)` callback; returns nothing.
+ */
+function validateAuth(file, capLabel, auth) {
+  if (auth === undefined || auth === null) return; // optional
+
+  if (typeof auth !== "object" || Array.isArray(auth)) {
+    err(file, `provide '${capLabel}' auth must be an object`);
+    return;
+  }
+
+  const kind = auth.kind;
+  if (typeof kind !== "string" || !AUTH_KINDS.has(kind)) {
+    err(file, `provide '${capLabel}' auth.kind must be one of ${[...AUTH_KINDS].join("|")}`);
+    return;
+  }
+
+  // Reject unknown keys
+  const allowed = new Set(["kind"]);
+  if (kind !== "none") allowed.add("tokenSource");
+  for (const opt of AUTH_OPTIONAL_FIELDS_BY_KIND[kind]) allowed.add(opt);
+  for (const key of Object.keys(auth)) {
+    if (!allowed.has(key)) {
+      err(file, `provide '${capLabel}' auth has unknown key '${key}' for kind '${kind}'`);
+    }
+  }
+
+  if (kind === "none") {
+    return; // nothing more to check
+  }
+
+  // tokenSource required for non-none kinds
+  if (typeof auth.tokenSource !== "string" || !auth.tokenSource) {
+    err(file, `provide '${capLabel}' auth.tokenSource required for kind '${kind}'`);
+    return;
+  }
+  const matchesPattern = TOKEN_SOURCE_PATTERNS.some((re) => re.test(auth.tokenSource));
+  if (!matchesPattern) {
+    err(
+      file,
+      `provide '${capLabel}' auth.tokenSource '${auth.tokenSource}' does not match any of: instance.env.<NAME>, instance.config.<path>, proxy.token`,
+    );
+  }
+
+  if (auth.headerName !== undefined) {
+    if (typeof auth.headerName !== "string" || !auth.headerName) {
+      err(file, `provide '${capLabel}' auth.headerName must be a non-empty string when present`);
+    }
+  }
+  if (auth.tokenPrefix !== undefined) {
+    if (typeof auth.tokenPrefix !== "string") {
+      err(file, `provide '${capLabel}' auth.tokenPrefix must be a string when present`);
+    }
+  }
+}
+
+function findTask(spec, taskName) {
+  return (spec.tasks ?? []).find((t) => t.name === taskName);
+}
+
+function hostPortOf(p) {
+  if (typeof p?.host_port === "number" && p.host_port > 0) return p.host_port;
+  if (typeof p?.port === "number" && p.port > 0) return p.port;
+  return undefined;
+}
+
+function findPortInTask(task, providePort) {
+  return (task?.ports ?? []).find((p) => hostPortOf(p) === providePort);
+}
+
+// ── Main ──
+
+const errors = [];
+const warnings = [];
+
+function err(file, msg) {
+  errors.push(`${file}: ${msg}`);
+}
+function warn(file, msg) {
+  warnings.push(`${file}: ${msg}`);
+}
+
+const yamlFiles = readdirSync(APPS_DIR)
+  .filter((f) => f.endsWith(".yaml"))
+  .map((f) => join(APPS_DIR, f));
+
+const specs = [];
+for (const file of yamlFiles) {
+  try {
+    const text = readFileSync(file, "utf-8");
+    const doc = parseYaml(text);
+    if (!doc || typeof doc !== "object") {
+      err(file, "yaml does not parse to an object");
+      continue;
+    }
+    specs.push({ file: file.replace(APPS_DIR + "/", "apps/"), spec: doc });
+  } catch (e) {
+    err(file, `yaml parse failed: ${e.message}`);
+  }
+}
+
+// First pass: collect exact-name requires across the repo (B class membership).
+const exactRequiresInRepo = new Set();
+for (const { spec } of specs) {
+  for (const req of spec.requires ?? []) {
+    if (typeof req?.capability !== "string") continue;
+    if (CAPABILITY_CATEGORIES.has(req.capability)) continue;
+    exactRequiresInRepo.add(req.capability);
+  }
+}
+
+const allowedRequiresExact = new Set([
+  ...LEGACY_BINDABLE_EXACT_ALLOWLIST,
+  ...exactRequiresInRepo,
+]);
+
+// Index every provide capability across the repo for orphan-require check.
+const providersByCapability = new Map();
+for (const { spec } of specs) {
+  for (const provide of spec.provides ?? []) {
+    if (typeof provide?.capability !== "string") continue;
+    if (!providersByCapability.has(provide.capability)) {
+      providersByCapability.set(provide.capability, []);
+    }
+    providersByCapability.get(provide.capability).push({ spec });
+  }
+}
+
+function hasProviderForRequire(req) {
+  // A path: prefix match against any provide name starting with `${req}-`.
+  if (CAPABILITY_CATEGORIES.has(req)) {
+    for (const cap of providersByCapability.keys()) {
+      if (cap.startsWith(req + "-")) return true;
+    }
+    return false;
+  }
+  // B path: exact match.
+  return providersByCapability.has(req);
+}
+
+// Second pass: validate each spec.
+for (const { file, spec } of specs) {
+  const id = typeof spec.id === "string" ? spec.id : "<no id>";
+
+  // ── provides[*] ──────────────────────────────────────────────────────
+  for (const provide of spec.provides ?? []) {
+    if (typeof provide?.capability !== "string" || !provide.capability) {
+      err(file, `provide missing capability`);
+      continue;
+    }
+    const cap = provide.capability;
+    const cat = categoryOf(cap);
+    const isB =
+      !cat &&
+      (LEGACY_BINDABLE_EXACT_ALLOWLIST.has(cap) || exactRequiresInRepo.has(cap)) &&
+      !UI_LEGACY_ALLOWLIST.has(cap);
+    const isUI = !cat && !isB && isUILegacy(cap);
+
+    // url-only provide: skip endpoint checks (not in registry per §5.1).
+    if (typeof provide.url === "string" && provide.url.trim()) {
+      if (provide.auth !== undefined) {
+        err(file, `provide '${cap}' auth is not allowed on UI-only or url-only provides`);
+      }
+      continue;
+    }
+
+    if (cat) {
+      // Class A
+      if (typeof provide.task !== "string" || !provide.task) {
+        err(file, `provide '${cap}' (A) missing task`);
+      } else if (!findTask(spec, provide.task)) {
+        err(file, `provide '${cap}' (A) task '${provide.task}' not declared in tasks[]`);
+      }
+      if (typeof provide.port !== "number") {
+        err(file, `provide '${cap}' (A) missing port`);
+      } else {
+        const task = findTask(spec, provide.task);
+        if (task && !findPortInTask(task, provide.port)) {
+          err(file, `provide '${cap}' (A) port ${provide.port} not in task '${provide.task}' ports`);
+        }
+      }
+      const proto = (provide.protocol ?? "http").toLowerCase();
+      if (!PROTOCOL_WHITELIST[cat].has(proto)) {
+        err(file, `provide '${cap}' (A) protocol '${proto}' not in ${cat} whitelist`);
+      }
+      if (typeof provide.description !== "string" || !provide.description.trim()) {
+        warn(file, `provide '${cap}' (A) missing description`);
+      }
+      validateAuth(file, cap, provide.auth);
+    } else if (isB) {
+      // Class B
+      if (typeof provide.task !== "string" || !provide.task) {
+        err(file, `provide '${cap}' (B legacy bindable exact) missing task`);
+      } else if (!findTask(spec, provide.task)) {
+        err(file, `provide '${cap}' (B) task '${provide.task}' not declared`);
+      }
+      if (typeof provide.port !== "number") {
+        err(file, `provide '${cap}' (B) missing port`);
+      } else {
+        const task = findTask(spec, provide.task);
+        if (task && !findPortInTask(task, provide.port)) {
+          err(file, `provide '${cap}' (B) port ${provide.port} not in task '${provide.task}' ports`);
+        }
+      }
+      const proto = (provide.protocol ?? "").toLowerCase();
+      if (!proto) {
+        err(file, `provide '${cap}' (B) protocol must be declared (one of ${[...PROTOCOL_WHITELIST.default].join("|")})`);
+      } else if (!PROTOCOL_WHITELIST.default.has(proto)) {
+        err(file, `provide '${cap}' (B) protocol '${proto}' not in default whitelist`);
+      }
+      if (typeof provide.description !== "string" || !provide.description.trim()) {
+        warn(file, `provide '${cap}' (B) missing description`);
+      }
+      validateAuth(file, cap, provide.auth);
+    } else if (isUI) {
+      // Class C — looser. Terminal capabilities legitimately have no port.
+      if (provide.auth !== undefined) {
+        err(file, `provide '${cap}' auth is not allowed on UI-only or url-only provides`);
+      }
+      if (typeof provide.port === "number") {
+        if (typeof provide.task === "string" && provide.task) {
+          const task = findTask(spec, provide.task);
+          if (task && !findPortInTask(task, provide.port)) {
+            err(file, `provide '${cap}' (C) port ${provide.port} not in task '${provide.task}' ports`);
+          }
+        }
+      }
+    } else {
+      // Unrecognized — author must explicitly opt into one of A/B/C.
+      err(
+        file,
+        `provide '${cap}' is not recognized as A/B/C; rename with category prefix (llm-/search-/browser-/mcp-), add to LEGACY_BINDABLE_EXACT_ALLOWLIST, or add to UI_LEGACY_ALLOWLIST`,
+      );
+    }
+
+    // ── §17 (PR 8): tool_schema validation — applies to any bindable
+    //    capability that an LLM-binding adapter may turn into an MCP
+    //    server entry (i.e. category A search-/mcp-, plus any future
+    //    bindable cap). Warn-only this release; promoted to err in v0.5.
+    if (provide.tool_schema !== undefined) {
+      const ts = provide.tool_schema;
+      if (typeof ts !== "object" || ts === null) {
+        err(file, `provide '${cap}' tool_schema must be an object`);
+      } else {
+        if (typeof ts.name !== "string" || !/^[a-z][a-z0-9_]*$/.test(ts.name)) {
+          err(file, `provide '${cap}' tool_schema.name must match /^[a-z][a-z0-9_]*$/ (got ${JSON.stringify(ts.name)})`);
+        }
+        if (typeof ts.description !== "string" || !ts.description.trim()) {
+          err(file, `provide '${cap}' tool_schema.description is required`);
+        }
+        if (typeof ts.parameters !== "object" || ts.parameters === null) {
+          err(file, `provide '${cap}' tool_schema.parameters must be an object`);
+        } else {
+          if (ts.parameters.type !== "object") {
+            err(file, `provide '${cap}' tool_schema.parameters.type must be "object"`);
+          }
+          const props = ts.parameters.properties ?? {};
+          if (typeof props !== "object" || props === null) {
+            err(file, `provide '${cap}' tool_schema.parameters.properties must be an object`);
+          } else {
+            const required = Array.isArray(ts.parameters.required) ? ts.parameters.required : [];
+            for (const r of required) {
+              if (!(r in props)) {
+                err(file, `provide '${cap}' tool_schema.parameters.required has '${r}' not in properties`);
+              }
+            }
+          }
+        }
+        if (typeof ts.upstream !== "object" || ts.upstream === null) {
+          err(file, `provide '${cap}' tool_schema.upstream is required`);
+        } else if (typeof ts.upstream.command !== "string" || !ts.upstream.command) {
+          err(file, `provide '${cap}' tool_schema.upstream.command is required`);
+        }
+      }
+    }
+  }
+
+  // ── requires[*] ──────────────────────────────────────────────────────
+  const seenSlots = new Set();
+  for (const req of spec.requires ?? []) {
+    if (typeof req?.capability !== "string" || !req.capability) {
+      err(file, `require missing capability`);
+      continue;
+    }
+    const isCategory = CAPABILITY_CATEGORIES.has(req.capability);
+    const isExact = allowedRequiresExact.has(req.capability);
+    if (!isCategory && !isExact) {
+      err(
+        file,
+        `require '${req.capability}' is neither a category token nor in LEGACY_BINDABLE_EXACT_ALLOWLIST / repo exact set`,
+      );
+      continue;
+    }
+
+    if (typeof req.inject_as !== "string" || !req.inject_as) {
+      err(file, `require '${req.capability}' missing inject_as`);
+    } else {
+      if (!/^[A-Z][A-Z0-9_]*$/.test(req.inject_as)) {
+        warn(file, `require '${req.capability}' inject_as '${req.inject_as}' should be UPPER_SNAKE_CASE`);
+      }
+      if (seenSlots.has(req.inject_as)) {
+        err(file, `require slot '${req.inject_as}' duplicated`);
+      }
+      seenSlots.add(req.inject_as);
+    }
+
+    if (req.cardinality && !["one", "many"].includes(req.cardinality)) {
+      err(file, `require '${req.capability}' cardinality must be 'one' or 'many'`);
+    }
+
+    if (req.apply !== undefined) {
+      if (!["proxy-upstream", "openai-env"].includes(req.apply)) {
+        err(file, `require '${req.capability}' apply must be 'proxy-upstream' or 'openai-env'`);
+      }
+      if (req.capability !== "llm" && categoryOf(req.capability) !== "llm") {
+        err(file, `require '${req.capability}' apply field is only valid for llm category`);
+      }
+    }
+
+    // Orphan-require check: at least one provider in the repo must satisfy.
+    if (!hasProviderForRequire(req.capability)) {
+      const isRequired = req.required !== false; // default true
+      if (isRequired) {
+        err(
+          file,
+          `orphan required require '${req.capability}' — no provider matches; add provider, fix typo, or set required: false`,
+        );
+      } else {
+        warn(
+          file,
+          `orphan optional require '${req.capability}' — no provider in repo (will resolve at runtime if user installs one)`,
+        );
+      }
+    }
+  }
+}
+
+// ── Report ──
+
+if (warnings.length) {
+  console.warn("⚠ Warnings:");
+  for (const w of warnings) console.warn("   " + w);
+}
+
+if (errors.length) {
+  console.error("✗ check-app-spec failed:");
+  for (const e of errors) console.error("   " + e);
+  process.exit(1);
+}
+
+console.log(
+  `✓ check-app-spec passed: ${specs.length} yamls, ${warnings.length} warnings`,
+);

package/scripts/check-i18n.mjs

@@ -0,0 +1,154 @@
+#!/usr/bin/env node
+// Verify i18n integrity:
+//   1. en and zh namespace files are paired (same set of .json files)
+//   2. every flat dotted key in one language exists in the other
+//   3. every t('...') call in frontend/src (excluding tests & dynamic template
+//      keys that use ${}) resolves to a key present in some locale file
+//   4. Chinese-defaultValue regression guard: each source file's count of
+//      `defaultValue: '中文…'` literals must not exceed its baseline below.
+//      Locale files are the source of truth — the Chinese fallback is dead
+//      code (the existing key check above guarantees both en and zh have an
+//      entry), but it misleads readers and rots over time. New files must
+//      not introduce any; existing files may drop the count to clean up.
+// Exits non-zero on any mismatch so pre-commit / CI can block the commit.
+
+import fs from "node:fs";
+import path from "node:path";
+
+const REPO = path.resolve(path.dirname(new URL(import.meta.url).pathname), "..");
+const SRC = path.join(REPO, "frontend/src");
+const LOC = path.join(SRC, "i18n/locales");
+
+// Baseline of files with Chinese-defaultValue literals at the time the rule
+// was introduced. Keep counts in sync as you clean up — when a file's count
+// drops, lower the baseline (or delete the entry) so regressions are caught
+// at the new floor.
+const CHINESE_DEFAULT_VALUE_BASELINE = Object.freeze({
+  "frontend/src/components/instance/BackupActions.tsx": 73,
+  "frontend/src/pages/NewInstance.tsx": 46,
+  "frontend/src/components/instance/BackupStatus.tsx": 17,
+  "frontend/src/components/instance/ImportFlow.tsx": 15,
+  "frontend/src/pages/InstanceDetail.tsx": 12,
+  "frontend/src/components/instance/HermesConfigForm.tsx": 5,
+  "frontend/src/components/instance/FeishuLoginPanel.tsx": 1,
+  "frontend/src/components/instance/WeixinLoginPanel.tsx": 1,
+  "frontend/src/pages/Dashboard.tsx": 1,
+});
+
+function walkSrc(dir, out = []) {
+  for (const name of fs.readdirSync(dir)) {
+    const p = path.join(dir, name);
+    const st = fs.statSync(p);
+    if (st.isDirectory()) {
+      if (!/node_modules|dist|build|locales$|i18n$/.test(p)) walkSrc(p, out);
+    } else if (/\.(ts|tsx)$/.test(p)
+      && !/\.test\.(ts|tsx)$/.test(p)
+      && !/providers\.ts$/.test(p)) {
+      out.push(p);
+    }
+  }
+  return out;
+}
+
+function flatten(obj, prefix = "", out = {}) {
+  for (const [k, v] of Object.entries(obj)) {
+    const key = prefix ? `${prefix}.${k}` : k;
+    if (v && typeof v === "object" && !Array.isArray(v)) flatten(v, key, out);
+    else out[key] = v;
+  }
+  return out;
+}
+
+const errors = [];
+
+// ── 1/2: compare locale files ────────────────────────────────────────────────
+const langs = fs.readdirSync(LOC).filter(f =>
+  fs.statSync(path.join(LOC, f)).isDirectory());
+if (langs.length < 2) {
+  errors.push(`Expected at least two language directories under ${LOC}, got ${langs.join(",")}`);
+}
+const fileSets = Object.fromEntries(langs.map(l =>
+  [l, new Set(fs.readdirSync(path.join(LOC, l)).filter(f => f.endsWith(".json")))]));
+const allFiles = new Set(langs.flatMap(l => [...fileSets[l]]));
+for (const f of allFiles) {
+  for (const l of langs) {
+    if (!fileSets[l].has(f)) errors.push(`Missing locale file: ${l}/${f}`);
+  }
+}
+
+const allKeys = new Set();
+const perLangKeys = Object.fromEntries(langs.map(l => [l, {}]));
+for (const l of langs) {
+  for (const f of fileSets[l]) {
+    const ns = f.replace(/\.json$/, "");
+    let data;
+    try { data = JSON.parse(fs.readFileSync(path.join(LOC, l, f), "utf8")); }
+    catch (e) { errors.push(`${l}/${f}: invalid JSON — ${e.message}`); continue; }
+    const flat = flatten(data);
+    // Also accept flat-dotted keys stored as top-level string values
+    for (const k of Object.keys(data)) {
+      if (typeof data[k] === "string") flat[k] = data[k];
+    }
+    perLangKeys[l][ns] = flat;
+    for (const k of Object.keys(flat)) allKeys.add(`${ns}:${k}`);
+  }
+}
+
+for (const tag of allKeys) {
+  const [ns, ...rest] = tag.split(":");
+  const k = rest.join(":");
+  for (const l of langs) {
+    const bag = perLangKeys[l][ns];
+    if (!bag) { errors.push(`${l}/${ns}.json missing entirely`); break; }
+    if (bag[k] === undefined) errors.push(`Missing key in ${l}: ${ns}:${k}`);
+  }
+}
+
+// ── 3: source code t('...') coverage ─────────────────────────────────────────
+const tCallRe = /\bt\(\s*['"`]([^'"`]+)['"`]/g;
+const files = walkSrc(SRC);
+for (const file of files) {
+  const src = fs.readFileSync(file, "utf8");
+  let m;
+  while ((m = tCallRe.exec(src)) !== null) {
+    const key = m[1];
+    if (key.includes("${") || key.includes("`")) continue; // dynamic, skip
+    const line = src.slice(0, m.index).split("\n").length;
+    let hit = false;
+    if (key.includes(":")) {
+      hit = allKeys.has(key);
+    } else {
+      for (const full of allKeys) if (full.endsWith(`:${key}`)) { hit = true; break; }
+    }
+    if (!hit) errors.push(`${path.relative(REPO, file)}:${line} — t('${key}') has no matching locale key`);
+  }
+}
+
+// ── 4: Chinese-defaultValue regression guard ─────────────────────────────────
+const cnDefaultValueRe = /defaultValue:\s*(['"`])([^'"`]*[一-鿿][^'"`]*)\1/g;
+let cnDefaultValueTotal = 0;
+for (const file of files) {
+  const rel = path.relative(REPO, file).split(path.sep).join("/");
+  const src = fs.readFileSync(file, "utf8");
+  let count = 0;
+  while (cnDefaultValueRe.exec(src) !== null) count += 1;
+  cnDefaultValueRe.lastIndex = 0;
+  cnDefaultValueTotal += count;
+  const allowed = CHINESE_DEFAULT_VALUE_BASELINE[rel] ?? 0;
+  if (count > allowed) {
+    errors.push(
+      `${rel} — Chinese defaultValue count ${count} exceeds baseline ${allowed}; ` +
+        "add the locale entry to en/zh JSON instead of writing a Chinese fallback in source.",
+    );
+  }
+}
+
+if (errors.length) {
+  console.error(`i18n check failed (${errors.length} issues):`);
+  for (const e of errors) console.error("  " + e);
+  process.exit(1);
+}
+const cnNote = cnDefaultValueTotal
+  ? `, ${cnDefaultValueTotal} legacy Chinese-defaultValue literals (under baseline)`
+  : "";
+console.log(`i18n check passed: ${allKeys.size} keys across ${langs.join("/")} × ${allFiles.size} namespaces, ${files.length} source files scanned${cnNote}`);

package/scripts/run.sh

@@ -81,7 +81,7 @@ kill_port() {
 
 # ─── Nomad ────────────────────────────────────────────────────────────────────
 ensure_nomad() {
-    # 如果 Nomad 相关端口有任何进程，全部 kill（确保干净重启）
+    # If anything is holding Nomad-related ports, kill it all to guarantee a clean restart.
     local nomad_ports_pids
     nomad_ports_pids="$(sudo lsof -ti tcp:4646,4647,4648 2>/dev/null || lsof -ti tcp:4646,4647,4648 2>/dev/null || true)"
     if [[ -n "$nomad_ports_pids" ]]; then
@@ -105,7 +105,7 @@ ensure_nomad() {
         success "Nomad ports 4646/4647/4648 freed"
     fi
 
-    # 查找 nomad 二进制：优先用 jishushell 自带的
+    # Locate the nomad binary; prefer the one bundled with jishushell.
     local nomad_bin="${HOME}/.jishushell/bin/nomad"
     if [[ ! -x "$nomad_bin" ]]; then
         nomad_bin="$(command -v nomad 2>/dev/null || true)"
@@ -133,7 +133,7 @@ ensure_nomad() {
         nohup "$nomad_bin" agent -dev -bind=127.0.0.1 > "$log_path" 2>&1 &
     fi
 
-    # 等待 Nomad 就绪（最多 15 秒）
+    # Wait for Nomad to become ready (up to 15 seconds).
     local tries=0
     while ! lsof -ti tcp:4646 &>/dev/null && [[ $tries -lt 15 ]]; do
         sleep 1
@@ -294,7 +294,7 @@ mode_server() {
 # ─── Entry point ──────────────────────────────────────────────────────────────
 check_node
 
-# Nomad 最先启动（build/frontend/help 模式不需要）
+# Start Nomad first (not required in build/frontend/help modes).
 case "$MODE" in
     ""|dev|server) ensure_nomad ;;
 esac

package/public/assets/Dashboard-B-JoOjBQ.js

@@ -1 +0,0 @@
-import{k as B,j as e,L as E,l as k,m as M,n as R,o as K,q as L,t as A,v as I,w as T,x as W}from"./index-DQsM6Joa.js";import{r as m,u as D}from"./vendor-react-Bk1hRGiY.js";import{u as P}from"./usePolling-Do5Erqm_.js";import{u as C}from"./vendor-i18n-ucpM0OR0.js";function q(t){if(!t)return"-";const l=Math.floor(t/86400),d=Math.floor(t%86400/3600),r=Math.floor(t%3600/60);return l>0?`${l}d ${d}h`:d>0?`${d}h ${r}m`:`${r}m`}function G({status:t}){const{t:l}=C(),r={running:{cls:"bg-emerald-500/10 text-emerald-400 border border-emerald-500/20",labelKey:"status.running"},pending:{cls:"bg-amber-500/10 text-amber-400 border border-amber-500/20",labelKey:"status.starting"},failed:{cls:"bg-red-500/10 text-red-400 border border-red-500/20",labelKey:"status.failed"},dead:{cls:"bg-red-500/10 text-red-400 border border-red-500/20",labelKey:"status.crashed"}}[t]||{cls:"bg-[var(--card)] text-muted border border-[var(--border)]",labelKey:"status.stopped"};return e.jsx("span",{className:`inline-flex items-center text-xs px-2 py-0.5 rounded-full font-medium ${r.cls}`,children:l(r.labelKey)})}function z(){const{t}=C(["dashboard","common"]),[l,d]=m.useState([]),[r,$]=m.useState(null),[h,v]=m.useState(""),[y,j]=m.useState(""),[p,N]=m.useState(!1),g=D(),{showToast:c}=B(),u=()=>{K().then(s=>{d(s),j("")}).catch(s=>j(s.message||t("common:error.loadFailed"))),L().then($).catch(()=>{})};P(u,1e4);const _=async()=>{if(window.confirm(t("engine.restartConfirm"))){N(!0);try{await A(),c(t("engine.restarted"),"success"),setTimeout(u,2e3)}catch(s){c(s.message||t("engine.restartFailed"),"error")}finally{N(!1)}}},f=async(s,a,i)=>{s.stopPropagation(),v(`${i}-${a}`);try{let n=null;a==="start"&&(n=await I(i)),a==="stop"&&(n=await T(i)),a==="restart"&&(n=await W(i)),c(t(`common:action.${a}Done`),"success");const o=n==null?void 0:n.port_allocation;o&&typeof o.from=="number"&&typeof o.to=="number"&&o.from!==o.to&&c(t("common:toast.portReallocated",{defaultValue:"端口 {{from}} 被占用,已自动切换到 {{to}}",from:o.from,to:o.to}),"info"),setTimeout(u,1e3)}catch(n){c(n.message||t("common:error.operationFailed"),"error")}finally{v("")}},F=l.filter(s=>{var a;return((a=s.service)==null?void 0:a.status)==="running"}).length,b=!!r&&r.disk.percent>90,S=r?[{label:t("stats.runningInstances"),value:`${F} / ${l.length}`,sub:r.nomad_running?t("stats.engineRunning"):t("stats.engineStopped"),subColor:r.nomad_running?"text-emerald-400":"text-red-400",icon:e.jsxs("svg",{className:"w-4 h-4",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.5,children:[e.jsx("rect",{x:"2",y:"3",width:"20",height:"14",rx:"2"}),e.jsx("line",{x1:"8",y1:"21",x2:"16",y2:"21"}),e.jsx("line",{x1:"12",y1:"17",x2:"12",y2:"21"})]}),iconColor:"text-[#0066FF]",glowColor:"rgba(0,102,255,0.12)",accent:"border-l-2 border-l-[#0066FF]"},{label:t("stats.cpu"),value:`${r.cpu_percent}%`,sub:r.temperature?`${r.temperature}°C`:null,icon:e.jsxs("svg",{className:"w-4 h-4",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.5,children:[e.jsx("rect",{x:"4",y:"4",width:"16",height:"16",rx:"2"}),e.jsx("rect",{x:"9",y:"9",width:"6",height:"6"}),e.jsx("line",{x1:"9",y1:"2",x2:"9",y2:"4"}),e.jsx("line",{x1:"15",y1:"2",x2:"15",y2:"4"}),e.jsx("line",{x1:"9",y1:"20",x2:"9",y2:"22"}),e.jsx("line",{x1:"15",y1:"20",x2:"15",y2:"22"}),e.jsx("line",{x1:"20",y1:"9",x2:"22",y2:"9"}),e.jsx("line",{x1:"20",y1:"15",x2:"22",y2:"15"}),e.jsx("line",{x1:"2",y1:"9",x2:"4",y2:"9"}),e.jsx("line",{x1:"2",y1:"15",x2:"4",y2:"15"})]}),iconColor:"text-[#0066FF]",glowColor:"rgba(0,102,255,0.12)",accent:"border-l-2 border-l-[#0066FF]",warn:r.cpu_percent>90},{label:t("stats.memory"),value:`${r.memory.percent}%`,sub:`${r.memory.used_mb}MB / ${r.memory.total_mb}MB`,icon:e.jsx("svg",{className:"w-4 h-4",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.5,children:e.jsx("path",{d:"M6 19v-8m4 8v-4m4 4v-6m4 6v-2"})}),iconColor:"text-[#00D4AA]",glowColor:"rgba(0,212,170,0.12)",accent:"border-l-2 border-l-[#00D4AA]"},{label:t("stats.disk"),value:`${r.disk.percent}%`,sub:`${r.disk.used_gb}GB / ${r.disk.total_gb}GB`,icon:e.jsxs("svg",{className:"w-4 h-4",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.5,children:[e.jsx("ellipse",{cx:"12",cy:"5",rx:"9",ry:"3"}),e.jsx("path",{d:"M3 5v14a9 3 0 0018 0V5"}),e.jsx("line",{x1:"12",y1:"8",x2:"12",y2:"22"})]}),iconColor:b?"text-red-400":"text-[#0066FF]",glowColor:b?"rgba(239,68,68,0.12)":"rgba(0,102,255,0.12)",accent:b?"border-l-2 border-l-red-400":"border-l-2 border-l-[#0066FF]",warn:b}]:[];return e.jsxs("div",{className:"p-4 max-w-5xl mx-auto",children:[e.jsxs("div",{className:"mb-4 flex items-center justify-between",children:[e.jsxs("div",{children:[e.jsx("h1",{className:"text-base font-semibold text-foreground",children:t("title")}),e.jsx("p",{className:"text-xs text-muted mt-0.5",children:t("subtitle")})]}),e.jsx(E,{})]}),r&&e.jsx("div",{className:"grid grid-cols-2 lg:grid-cols-4 gap-3 mb-4",children:S.map(s=>e.jsxs("div",{className:`bg-[var(--card)] border border-[var(--border)] rounded-lg p-3 relative overflow-hidden hover:border-[var(--border-hover)] hover:bg-[var(--card-hover)] transition-all duration-200 ${s.accent}`,children:[e.jsx("div",{className:"absolute top-0 right-0 w-16 h-16 rounded-full opacity-60 pointer-events-none",style:{background:`radial-gradient(circle, ${s.glowColor} 0%, transparent 70%)`}}),e.jsxs("div",{className:"flex items-center justify-between mb-1.5",children:[e.jsx("span",{className:"text-[11px] text-muted",children:s.label}),e.jsx("span",{className:`${s.iconColor} opacity-80`,children:s.icon})]}),e.jsx("div",{className:`text-lg font-semibold ${s.warn?"text-red-400":"text-foreground"}`,children:s.value}),s.sub&&e.jsx("div",{className:`text-[11px] mt-0.5 truncate ${s.subColor??"text-muted"}`,children:s.sub})]},s.label))}),e.jsxs("div",{className:"bg-[var(--card)] border border-[var(--border)] rounded-xl overflow-hidden",children:[e.jsxs("div",{className:"px-4 py-2.5 border-b border-[var(--border)] flex items-center justify-between",children:[e.jsx("h2",{className:"text-sm font-medium text-foreground",children:t("instances.title")}),e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsx("button",{onClick:()=>g("/instances/new"),className:"bg-[#0066FF] text-white px-3 py-1.5 rounded-md text-xs font-medium hover:bg-[#0066FF]/90 transition-all duration-200 shadow-[0_0_12px_rgba(0,102,255,0.3)]",children:t("instances.new")}),e.jsx("button",{onClick:()=>g("/instances/new?import=true"),className:"px-3 py-1.5 rounded-md text-xs font-medium text-muted border border-[var(--border)] bg-[var(--card)] hover:bg-[var(--card-hover)] hover:text-foreground transition-all duration-200",children:t("instances.import")}),e.jsxs("button",{onClick:_,disabled:p,title:t("instances.restartEngineTitle"),className:"flex items-center gap-1.5 px-2.5 py-1.5 rounded-md text-xs font-medium text-red-400 border border-red-500/20 bg-red-500/5 hover:bg-red-500/15 disabled:opacity-40 disabled:cursor-not-allowed transition-all duration-200",children:[e.jsx(k,{className:`w-3 h-3 ${p?"animate-spin":""}`}),t(p?"instances.restarting":"instances.restartEngine")]})]})]}),y?e.jsxs("div",{className:"text-center py-12 px-4",children:[e.jsx("p",{className:"text-sm text-red-400 mb-2",children:t("instances.loadError",{error:y})}),e.jsx("button",{onClick:u,className:"text-xs text-muted hover:text-foreground underline",children:t("common:action.retry")})]}):l.length===0?e.jsxs("div",{className:"text-center py-12 px-4",children:[e.jsx("div",{className:"text-muted opacity-40 mb-3",children:e.jsxs("svg",{className:"w-8 h-8 mx-auto",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1,strokeLinecap:"round",strokeLinejoin:"round",children:[e.jsx("rect",{x:"2",y:"3",width:"20",height:"14",rx:"2"}),e.jsx("line",{x1:"8",y1:"21",x2:"16",y2:"21"}),e.jsx("line",{x1:"12",y1:"17",x2:"12",y2:"21"})]})}),e.jsx("p",{className:"text-sm text-muted mb-1",children:t("instances.empty")}),e.jsx("p",{className:"text-xs text-muted opacity-60",children:t("instances.emptyHint")})]}):e.jsxs("table",{className:"w-full text-sm",children:[e.jsx("thead",{children:e.jsxs("tr",{className:"text-xs text-muted border-b border-[var(--border)]",children:[e.jsx("th",{className:"text-left font-medium px-4 py-2",children:t("table.name")}),e.jsx("th",{className:"text-left font-medium px-4 py-2",children:t("table.status")}),e.jsx("th",{className:"text-left font-medium px-4 py-2 hidden sm:table-cell",children:t("table.uptime")}),e.jsx("th",{className:"text-left font-medium px-4 py-2 hidden md:table-cell",children:t("table.memory")}),e.jsx("th",{className:"text-right font-medium px-4 py-2",children:t("table.actions")})]})}),e.jsx("tbody",{className:"divide-y divide-[var(--border)]",children:l.map(s=>{var n,o,w;const a=((n=s.service)==null?void 0:n.status)||"stopped",i=a==="running";return e.jsxs("tr",{className:"hover:bg-[var(--card-hover)] cursor-pointer transition-colors duration-150",onClick:()=>g(`/instances/${s.id}`),children:[e.jsxs("td",{className:"px-4 py-2.5",children:[e.jsx("div",{className:"font-medium text-foreground",children:s.name}),e.jsx("div",{className:"text-xs text-muted font-mono",children:s.id})]}),e.jsx("td",{className:"px-4 py-2.5",children:e.jsxs("div",{className:"flex items-center gap-1.5",children:[e.jsx(G,{status:a}),((o=s.auto_backup)==null?void 0:o.enabled)&&e.jsx("span",{className:`text-xs leading-none ${s.auto_backup.last_backup_ok===!1?"text-red-400":"text-green-400"}`,title:s.auto_backup.last_backup_ok===!1?"Backup failed":"Backup OK",children:s.auto_backup.last_backup_ok===!1?"⚠":"●"})]})}),e.jsx("td",{className:"px-4 py-2.5 text-muted hidden sm:table-cell font-mono text-xs",children:i?q(s.service.uptime):"-"}),e.jsx("td",{className:"px-4 py-2.5 text-muted hidden md:table-cell font-mono text-xs",children:(w=s.service)!=null&&w.memory_mb?`${s.service.memory_mb} MB`:"-"}),e.jsx("td",{className:"px-4 py-2.5 text-right",children:e.jsx("div",{className:"inline-flex items-center gap-1",children:i||a==="pending"?e.jsxs(e.Fragment,{children:[e.jsx("button",{title:t("common:action.restart"),onClick:x=>f(x,"restart",s.id),disabled:!!h,className:"p-1.5 rounded-md text-muted hover:text-foreground hover:bg-[var(--card-hover)] disabled:opacity-30 transition-colors duration-150",children:e.jsx(k,{className:"w-3.5 h-3.5"})}),e.jsx("button",{title:t("common:action.stop"),onClick:x=>f(x,"stop",s.id),disabled:!!h,className:"p-1.5 rounded-md text-muted hover:text-red-400 hover:bg-red-500/10 disabled:opacity-30 transition-colors duration-150",children:e.jsx(M,{className:"w-3.5 h-3.5"})})]}):e.jsx("button",{title:t("common:action.start"),onClick:x=>f(x,"start",s.id),disabled:!!h,className:"p-1.5 rounded-md text-muted hover:text-emerald-400 hover:bg-emerald-500/10 disabled:opacity-30 transition-colors duration-150",children:e.jsx(R,{className:"w-3.5 h-3.5"})})})})]},s.id)})})]})]})]})}export{z as default};