openyida 2026.7.13 → 2026.7.14-2

package/lib/core/env.js

@@ -12,11 +12,7 @@ const os = require('os');
 const {
   detectActiveTool,
   findProjectRoot,
-  loadCookieData,
-  resolveBaseUrl,
-  extractInfoFromCookies,
   resolveWukongWorkspaceRoot,
-  getLastEnvAuthError,
 } = require('./utils');
 const { t } = require('./i18n');
 
@@ -85,22 +81,16 @@ function detectEnvironment() {
 
   return { activeToolName, activeProjectRoot, results };
 }
-function getCookieDiagnostics(projectRoot) {
-  const { getCurrentEnvConfig, getCookieFilePath } = require('./env-manager');
+function getTokenDiagnostics(projectRoot) {
+  const { getCurrentEnvConfig } = require('./env-manager');
+  const { getTokenFilePath } = require('../auth/token-store');
   const currentEnv = getCurrentEnvConfig(projectRoot);
-  const envCookieFile = getCookieFilePath(projectRoot);
-  const legacyCookieFile = path.join(projectRoot, '.cache', 'cookies.json');
-  const envCookieFileFound = fs.existsSync(envCookieFile);
-  const legacyCookieFileFound = fs.existsSync(legacyCookieFile);
-  const selectedCookieFile = envCookieFileFound ? envCookieFile : legacyCookieFile;
+  const tokenFile = getTokenFilePath({ projectRoot });
 
   return {
     currentEnv: currentEnv.name,
-    configuredCookieFile: envCookieFile,
-    legacyCookieFile,
-    cookieFile: selectedCookieFile,
-    cookieFileFound: envCookieFileFound || legacyCookieFileFound,
-    usedLegacyCookieFile: !envCookieFileFound && legacyCookieFileFound,
+    tokenFile,
+    tokenFileFound: fs.existsSync(tokenFile),
   };
 }
 
@@ -108,62 +98,30 @@ function getCookieDiagnostics(projectRoot) {
  * 检测登录态信息。
  */
 function detectLoginStatus(projectRoot) {
-  const cookieDiagnostics = getCookieDiagnostics(projectRoot);
-  const cookieData = loadCookieData(projectRoot);
-  const cookies = cookieData && Array.isArray(cookieData.cookies) ? cookieData.cookies : [];
-  const envAuthError = getLastEnvAuthError();
-
-  if (!cookieData || !cookieData.cookies) {
-    return {
-      loggedIn: false,
-      canAutoUse: false,
-      csrfToken: null,
-      corpId: null,
-      userId: null,
-      baseUrl: null,
-      cookiesCount: 0,
-      diagnostics: {
-        ...cookieDiagnostics,
-        cacheReadable: false,
-        cookiesArrayFound: false,
-        csrfTokenFound: false,
-        corpIdFound: false,
-        userIdFound: false,
-        baseUrlFound: false,
-        failureReason: envAuthError
-          ? envAuthError.failure_reason
-          : (cookieDiagnostics.cookieFileFound ? 'cookie_cache_unreadable_or_invalid' : 'cookie_cache_missing'),
-      },
-    };
-  }
-
-  const cookieInfo = extractInfoFromCookies(cookies);
-  const csrfToken = cookieData.csrf_token || cookieData.csrfToken || cookieData._csrf_token || cookieInfo.csrfToken;
-  const corpId = cookieData.corp_id || cookieData.corpId || cookieInfo.corpId;
-  const userId = cookieData.user_id || cookieData.userId || cookieData.staffId || cookieInfo.userId;
-  const baseUrl = resolveBaseUrl(cookieData);
-  const loggedIn = !!csrfToken;
-  const isEnvAuth = cookieData.auth_source === 'env';
+  const tokenDiagnostics = getTokenDiagnostics(projectRoot);
+  const { tokenStatus } = require('../auth/token-auth');
+  const status = tokenStatus({ projectRoot });
+  const loggedIn = status.status === 'ok';
 
   return {
     loggedIn,
-    canAutoUse: loggedIn,
-    csrfToken,
-    corpId,
-    userId,
-    baseUrl,
-    cookiesCount: cookies.length,
-    authSource: isEnvAuth ? 'env' : 'cache',
+    canAutoUse: !!status.can_auto_use,
+    csrfToken: null,
+    corpId: status.corp_id || null,
+    userId: status.user_id || null,
+    baseUrl: status.base_url || null,
+    authSource: 'token',
+    authMode: 'token',
+    tokenFile: status.token_file || tokenDiagnostics.tokenFile,
     diagnostics: {
-      ...cookieDiagnostics,
-      authSource: isEnvAuth ? 'env' : 'cache',
-      cacheReadable: true,
-      cookiesArrayFound: Array.isArray(cookieData.cookies),
-      csrfTokenFound: !!csrfToken,
-      corpIdFound: !!corpId,
-      userIdFound: !!userId,
-      baseUrlFound: !!baseUrl,
-      failureReason: loggedIn ? null : 'csrf_token_missing',
+      ...tokenDiagnostics,
+      authSource: 'token',
+      cacheReadable: tokenDiagnostics.tokenFileFound,
+      tokenFound: loggedIn,
+      corpIdFound: !!status.corp_id,
+      userIdFound: !!status.user_id,
+      baseUrlFound: !!status.base_url,
+      failureReason: loggedIn ? null : status.status,
     },
   };
 }
@@ -213,10 +171,10 @@ function buildEnvironmentSnapshot() {
       canAutoUse: loginStatus.canAutoUse,
       baseUrl: loginStatus.baseUrl,
       authSource: loginStatus.authSource || null,
-      corpId: loginStatus.authSource === 'env' ? maskIdentifier(loginStatus.corpId) : loginStatus.corpId,
-      userId: loginStatus.authSource === 'env' ? maskIdentifier(loginStatus.userId) : loginStatus.userId,
-      csrfToken: loginStatus.authSource === 'env' ? null : maskSecret(loginStatus.csrfToken),
-      cookiesCount: loginStatus.cookiesCount,
+      authMode: loginStatus.authMode || null,
+      corpId: loginStatus.corpId,
+      userId: loginStatus.userId,
+      tokenFile: loginStatus.tokenFile,
       diagnostics: loginStatus.diagnostics,
     },
   };

package/lib/core/locales/ar.js

@@ -10,7 +10,7 @@ module.exports = {
     usage: 'الاستخدام:',
     alias: 'الاسم المستعار:',
     group_auth: 'البيئة & المصادقة',
-    cmd_login: 'تسجيل الدخول (الذاكرة المؤقتة أولاً، استخدم --browser أو --agent-qr عند الحاجة)',
+    cmd_login: 'Login with OAuth token mode',
     cmd_logout: 'تسجيل الخروج / تبديل الحساب',
     cmd_auth: 'إدارة حالة تسجيل الدخول',
     cmd_org: 'إدارة المنظمات (عرض / تبديل)',
@@ -809,9 +809,9 @@ module.exports = {
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',
     no_playwright: '{0} mode does not require Playwright or a separate Chromium install.',
-    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login --browser for Yida login cookies.',
-    browser_handoff_hint: '{0} in-app Browser does not support authentication Cookie export. Use openyida login --browser when CLI cookies are required.',
-    handoff_message: '{0} in-app Browser cannot export Yida login cookies. Run fallback_command when CLI cookies are required.',
-    cache_available: 'Existing CLI Cookie cache is available; no browser login needed.',
+    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login for CLI auth.',
+    browser_handoff_hint: '{0} in-app Browser is not used for CLI auth. Use openyida login.',
+    handoff_message: '{0} in-app Browser cannot complete CLI token login. Run openyida login.',
+    cache_available: 'Existing CLI token session cache is available; no browser login needed.',
   },
 };

package/lib/core/locales/de.js

@@ -10,7 +10,7 @@ module.exports = {
     usage: 'Verwendung:',
     alias: 'Alias:',
     group_auth: 'Umgebung & Authentifizierung',
-    cmd_login: 'Anmelden (Cache zuerst, bei Bedarf --browser oder --agent-qr)',
+    cmd_login: 'Login with OAuth token mode',
     cmd_logout: 'Abmelden / Konto wechseln',
     cmd_auth: 'Anmeldestatus-Verwaltung',
     cmd_org: 'Organisationsverwaltung (auflisten / wechseln)',
@@ -809,9 +809,9 @@ module.exports = {
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',
     no_playwright: '{0} mode does not require Playwright or a separate Chromium install.',
-    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login --browser for Yida login cookies.',
-    browser_handoff_hint: '{0} in-app Browser does not support authentication Cookie export. Use openyida login --browser when CLI cookies are required.',
-    handoff_message: '{0} in-app Browser cannot export Yida login cookies. Run fallback_command when CLI cookies are required.',
-    cache_available: 'Existing CLI Cookie cache is available; no browser login needed.',
+    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login for CLI auth.',
+    browser_handoff_hint: '{0} in-app Browser is not used for CLI auth. Use openyida login.',
+    handoff_message: '{0} in-app Browser cannot complete CLI token login. Run openyida login.',
+    cache_available: 'Existing CLI token session cache is available; no browser login needed.',
   },
 };

package/lib/core/locales/en.js

@@ -12,11 +12,11 @@ module.exports = {
     usage: 'Usage:',
     alias: 'Alias:',
     group_auth: 'Auth & Environment',
-    cmd_login: 'Login (cache first, --browser or --agent-qr when needed)',
-    cmd_logout: 'Logout / switch account',
-    cmd_auth: 'Login state management',
-    cmd_org: 'Organization management (list / switch)',
-    cmd_env: 'Detect AI tool environment & login state',
+    cmd_login: 'Login with OAuth token mode',
+    cmd_logout: 'Logout / clear token',
+    cmd_auth: 'Token login state management',
+    cmd_org: 'Organization management (list / switch by OAuth re-login)',
+    cmd_env: 'Detect AI tool environment & token login state',
     cmd_env_management: 'Manage public/private Yida environment profiles',
     group_app: 'App Management',
     cmd_app_list: 'List my Yida apps',
@@ -283,9 +283,9 @@ Examples:
     save_permission_example: "Example: openyida save-permission APP_XXX FORM-XXX --data-permission '{\"role\":\"DEFAULT\",\"dataRange\":\"SELF\"}'",
     exec_failed: '\n❌ Execution failed: {0}',
     auth_usage: 'Usage: openyida auth <status|login|refresh|logout>',
-    auth_example: 'Examples:\n  openyida auth status         # View login status\n  openyida auth login          # Perform login\n  openyida auth login --codex  # Codex browser login\n  openyida auth refresh        # Refresh login session\n  openyida auth logout         # Logout',
-    org_usage: 'Usage: openyida org <list|switch>',
-    org_example: 'Examples:\n  openyida org list                       # List accessible organizations\n  openyida org switch --corp-id dingXXX   # Switch to specified organization',
+    auth_example: 'Examples:\n  openyida auth status         # View login status\n  openyida auth login          # Perform login\n  openyida auth refresh        # Refresh login session\n  openyida auth logout         # Logout',
+    org_usage: 'Usage: openyida org <list|switch> [--json] [--corp-id <corpId>]',
+    org_example: 'Examples:\n  openyida org list --json                    # List accessible organizations\n  openyida org switch --corp-id dingXXX       # Switch by OAuth re-login',
     first_run_title: '  🤖 OpenYida - AI Conversation Mode Activated!               ',
     first_run_welcome: "  {0}Welcome to OpenYida!{1} Here's a quick start guide:",
     first_run_way1_title: '  📝 Option 1: Describe your needs directly',
@@ -477,27 +477,27 @@ Examples:
   login: {
     title: '  openyida login - Yida Login Tool',
     logout_title: '  openyida logout - Yida Logout Tool',
-    cookie_file_label: '\n  Cookie file: {0}',
-    logout_success: '  ✅ Cookie cleared, login session invalidated.',
-    logout_hint: '  Next time you run openyida login, a QR scan will be triggered.',
-    logout_no_file: '  ℹ️  Cookie file does not exist, nothing to clear.',
-    using_cache: '🔍 Local Cookie found, using it directly...',
+    cookie_file_label: '\n  Token file: {0}',
+    logout_success: '  ✅ Token cleared, login session invalidated.',
+    logout_hint: '  Next time you run openyida login, OAuth login will be triggered.',
+    logout_no_file: '  ℹ️  Token file does not exist, nothing to clear.',
+    using_cache: '🔍 Local token found, using it directly...',
     csrf_ok: '  ✅ csrf_token: {0}...',
     corp_id_ok: '  ✅ corpId: {0}',
-    no_playwright: '\n❌ Local browser login prefers Chrome/Edge/Chromium CDP first; CDP is unavailable and no Playwright fallback was found. Use openyida login or openyida login --qr by default; install Playwright only if you need local browser login:',
+    no_playwright: '\n❌ This version only supports token login. Run openyida login.',
     playwright_install1: '   npm install -g playwright',
     playwright_install2: '   npx playwright install chromium',
-    browser_opening: '\n🔐 Opening browser for QR code login...',
+    browser_opening: '\n🔐 Opening browser for OAuth login...',
     login_url_label: '  Login URL: {0}',
     waiting_login: '  Waiting for login (up to 10 minutes)...',
     login_timeout: '  ⏰ Login timed out (10 minutes). Please try again.',
     login_success: '  ✅ Login successful!',
-    no_csrf_in_cookie: '  ❌ Login succeeded but no tianshu_csrf_token in Cookie. Please retry.',
-    no_cookie_cache: '  ❌ No valid local Cookie found. Cannot refresh. Please log in again.',
-    no_csrf_in_cache: '  ❌ No tianshu_csrf_token in Cookie. Please log in again.',
+    no_csrf_in_cookie: '  ❌ Token login did not return a valid user context. Please retry.',
+    no_cookie_cache: '  ❌ No valid local token found. Cannot refresh. Please log in again.',
+    no_csrf_in_cache: '  ❌ No valid local token found. Please log in again.',
     csrf_extracted: '  ✅ csrf_token extracted: {0}...',
-    trigger_login: '\n🔐 Login session expired, opening browser for QR code login...\n',
-    csrf_refresh: '\n🔄 csrf_token expired, re-extracting from Cookie...\n',
+    trigger_login: '\n🔐 Login session expired. Run openyida login again.\n',
+    csrf_refresh: '\n🔄 Token mode does not refresh csrf_token on the client.\n',
   },
 
   // ── lib/auth.js ────────────────────────────────────
@@ -518,8 +518,8 @@ Examples:
     login_success: '\n✅ Login successful!',
     corp_id_ok: '  ✅ corpId: {0}',
     refresh_start: '\n🔄 Refreshing login session...',
-    no_cookie_cache: '  ❌ No local Cookie cache, cannot refresh',
-    no_csrf_in_cache: '  ❌ No csrf_token in Cookie, need to re-login',
+    no_cookie_cache: '  ❌ No local token cache, cannot refresh',
+    no_csrf_in_cache: '  ❌ No valid local token found. Please log in again',
     refresh_success: '  ✅ Login session refreshed!',
     csrf_ok: '  ✅ csrf_token: {0}...',
     auth_config_cleared: '  ✅ Auth config cleared',
@@ -1647,9 +1647,9 @@ Options:
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',
     no_playwright: '{0} mode does not require Playwright or a separate Chromium install.',
-    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login --browser for Yida login cookies.',
-    browser_handoff_hint: '{0} in-app Browser does not support authentication Cookie export. Use openyida login --browser when CLI cookies are required.',
-    handoff_message: '{0} in-app Browser cannot export Yida login cookies. Run fallback_command when CLI cookies are required.',
-    cache_available: 'Existing CLI Cookie cache is available; no browser login needed.',
+    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login for CLI auth.',
+    browser_handoff_hint: '{0} in-app Browser is not used for CLI auth. Use openyida login.',
+    handoff_message: '{0} in-app Browser cannot complete CLI token login. Run openyida login.',
+    cache_available: 'Existing CLI token cache is available; no login needed.',
   },
 };

package/lib/core/locales/es.js

@@ -10,7 +10,7 @@ module.exports = {
     usage: 'Uso:',
     alias: 'Alias:',
     group_auth: 'Entorno & Autenticación',
-    cmd_login: 'Iniciar sesión (caché primero, --browser o --agent-qr si hace falta)',
+    cmd_login: 'Login with OAuth token mode',
     cmd_logout: 'Cerrar sesión / cambiar cuenta',
     cmd_auth: 'Gestión del estado de sesión',
     cmd_org: 'Gestión de organizaciones (listar / cambiar)',
@@ -809,9 +809,9 @@ module.exports = {
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',
     no_playwright: '{0} mode does not require Playwright or a separate Chromium install.',
-    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login --browser for Yida login cookies.',
-    browser_handoff_hint: '{0} in-app Browser does not support authentication Cookie export. Use openyida login --browser when CLI cookies are required.',
-    handoff_message: '{0} in-app Browser cannot export Yida login cookies. Run fallback_command when CLI cookies are required.',
-    cache_available: 'Existing CLI Cookie cache is available; no browser login needed.',
+    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login for CLI auth.',
+    browser_handoff_hint: '{0} in-app Browser is not used for CLI auth. Use openyida login.',
+    handoff_message: '{0} in-app Browser cannot complete CLI token login. Run openyida login.',
+    cache_available: 'Existing CLI token session cache is available; no browser login needed.',
   },
 };

package/lib/core/locales/fr.js

@@ -10,7 +10,7 @@ module.exports = {
     usage: 'Utilisation :',
     alias: 'Alias :',
     group_auth: 'Environnement & Authentification',
-    cmd_login: 'Connexion (cache prioritaire, --browser ou --agent-qr si nécessaire)',
+    cmd_login: 'Login with OAuth token mode',
     cmd_logout: 'Déconnexion / changer de compte',
     cmd_auth: 'Gestion de l\'état de connexion',
     cmd_org: 'Gestion des organisations (lister / changer)',
@@ -809,9 +809,9 @@ module.exports = {
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',
     no_playwright: '{0} mode does not require Playwright or a separate Chromium install.',
-    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login --browser for Yida login cookies.',
-    browser_handoff_hint: '{0} in-app Browser does not support authentication Cookie export. Use openyida login --browser when CLI cookies are required.',
-    handoff_message: '{0} in-app Browser cannot export Yida login cookies. Run fallback_command when CLI cookies are required.',
-    cache_available: 'Existing CLI Cookie cache is available; no browser login needed.',
+    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login for CLI auth.',
+    browser_handoff_hint: '{0} in-app Browser is not used for CLI auth. Use openyida login.',
+    handoff_message: '{0} in-app Browser cannot complete CLI token login. Run openyida login.',
+    cache_available: 'Existing CLI token session cache is available; no browser login needed.',
   },
 };

package/lib/core/locales/hi.js

@@ -10,7 +10,7 @@ module.exports = {
     usage: 'उपयोग:',
     alias: 'उपनाम:',
     group_auth: 'वातावरण & प्रमाणीकरण',
-    cmd_login: 'लॉगिन (पहले कैश, जरूरत हो तो --browser या --agent-qr)',
+    cmd_login: 'Login with OAuth token mode',
     cmd_logout: 'लॉगआउट / खाता बदलें',
     cmd_auth: 'लॉगिन स्थिति प्रबंधन',
     cmd_org: 'संगठन प्रबंधन (सूची / बदलें)',
@@ -809,9 +809,9 @@ module.exports = {
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',
     no_playwright: '{0} mode does not require Playwright or a separate Chromium install.',
-    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login --browser for Yida login cookies.',
-    browser_handoff_hint: '{0} in-app Browser does not support authentication Cookie export. Use openyida login --browser when CLI cookies are required.',
-    handoff_message: '{0} in-app Browser cannot export Yida login cookies. Run fallback_command when CLI cookies are required.',
-    cache_available: 'Existing CLI Cookie cache is available; no browser login needed.',
+    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login for CLI auth.',
+    browser_handoff_hint: '{0} in-app Browser is not used for CLI auth. Use openyida login.',
+    handoff_message: '{0} in-app Browser cannot complete CLI token login. Run openyida login.',
+    cache_available: 'Existing CLI token session cache is available; no browser login needed.',
   },
 };

package/lib/core/locales/ja.js

@@ -12,7 +12,7 @@ module.exports = {
     usage: '使用方法:',
     alias: 'エイリアス:',
     group_auth: '環境 & 認証',
-    cmd_login: 'ログイン（キャッシュ優先、必要に応じて --browser または --agent-qr）',
+    cmd_login: 'Login with OAuth token mode',
     cmd_logout: 'ログアウト / アカウント切替',
     cmd_auth: 'ログイン状態管理',
     cmd_org: '組織管理（一覧 / 切替）',
@@ -251,7 +251,7 @@ openyida - Yida CLI ツール
     import_example2: '    openyida import ./yida-export.json "品質追跡システム（本番環境）"',
     exec_failed: '\n❌ 実行に失敗しました: {0}',
     auth_usage: '使用方法: openyida auth <status|login|refresh|logout>',
-    auth_example: '例:\n  openyida auth status         # ログイン状態を確認\n  openyida auth login          # ログイン実行\n  openyida auth login --codex  # Codex browser login\n  openyida auth refresh        # ログイン状態を更新\n  openyida auth logout         # ログアウト',
+    auth_example: '例:\n  openyida auth status         # ログイン状態を確認\n  openyida auth login          # ログイン実行\n  openyida auth refresh        # ログイン状態を更新\n  openyida auth logout         # ログアウト',
     org_usage: '使用方法: openyida org <list|switch>',
     org_example: '例:\n  openyida org list                       # アクセス可能な組織一覧\n  openyida org switch --corp-id dingXXX   # 指定組織に切り替え',
     first_run_title: '  🤖 OpenYida - AI 会話モードが有効になりました！                ',
@@ -367,24 +367,24 @@ openyida - Yida CLI ツール
   login: {
     title: '  openyida login - Yida ログインツール',
     logout_title: '  openyida logout - Yida ログアウトツール',
-    cookie_file_label: '\n  Cookie ファイル: {0}',
+    cookie_file_label: '\n  Token ファイル: {0}',
     logout_success: '  ✅ Cookie をクリアしました。ログインセッションが無効になりました。',
     logout_hint: '  次回 openyida login を実行すると QR コードスキャンが開始されます。',
-    logout_no_file: '  ℹ️  Cookie ファイルが存在しません。クリア不要です。',
+    logout_no_file: '  ℹ️  Token ファイルが存在しません。クリア不要です。',
     using_cache: '🔍 ローカルの Cookie が見つかりました。直接使用します...',
     csrf_ok: '  ✅ csrf_token: {0}...',
     corp_id_ok: '  ✅ corpId: {0}',
-    no_playwright: '\n❌ ローカルブラウザログインは Chrome/Edge/Chromium CDP を優先します。現在 CDP が利用できず、Playwright フォールバックも見つかりません。通常は openyida login または openyida login --qr を使用してください。ローカルブラウザログインが必要な場合のみインストールしてください：',
+    no_playwright: 'This version only supports token login. Run openyida login.',
     playwright_install1: '   npm install -g playwright',
     playwright_install2: '   npx playwright install chromium',
-    browser_opening: '\n🔐 ブラウザを開いて QR コードログインを開始します...',
+    browser_opening: '\n🔐 ブラウザを開いて OAuth ログインを開始します...',
     login_url_label: '  ログイン URL: {0}',
     waiting_login: '  ログイン完了を待機中（最大 10 分）...',
     login_timeout: '  ⏰ ログインがタイムアウトしました（10 分）。再試行してください。',
     login_success: '  ✅ ログインに成功しました！',
     no_csrf_in_cookie: '  ❌ ログインは成功しましたが Cookie に tianshu_csrf_token がありません。再試行してください。',
-    no_cookie_cache: '  ❌ 有効なローカル Cookie がありません。再ログインが必要です。',
-    no_csrf_in_cache: '  ❌ Cookie に tianshu_csrf_token がありません。再ログインが必要です。',
+    no_cookie_cache: '  ❌ 有効なローカル token がありません。再ログインが必要です。',
+    no_csrf_in_cache: '  ❌ 有効なローカル token がありません。再ログインが必要です。',
     csrf_extracted: '  ✅ csrf_token を取得しました: {0}...',
     trigger_login: '\n🔐 ログインセッションが期限切れです。ブラウザで QR コードログインを開始します...\n',
     csrf_refresh: '\n🔄 csrf_token が期限切れです。Cookie から再取得中...\n',
@@ -408,8 +408,8 @@ openyida - Yida CLI ツール
     login_success: '\n✅ ログイン成功！',
     corp_id_ok: '  ✅ corpId: {0}',
     refresh_start: '\n🔄 ログイン状態を更新中...',
-    no_cookie_cache: '  ❌ ローカル Cookie キャッシュなし、更新できません',
-    no_csrf_in_cache: '  ❌ Cookie に csrf_token なし、再ログインが必要',
+    no_cookie_cache: '  ❌ ローカル token キャッシュなし、更新できません',
+    no_csrf_in_cache: '  ❌ 有効なローカル token なし、再ログインが必要',
     refresh_success: '  ✅ ログイン状態を更新しました！',
     csrf_ok: '  ✅ csrf_token: {0}...',
     auth_config_cleared: '  ✅ 認証設定をクリアしました',
@@ -1202,9 +1202,9 @@ openyida - Yida CLI ツール
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',
     no_playwright: '{0} mode does not require Playwright or a separate Chromium install.',
-    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login --browser for Yida login cookies.',
-    browser_handoff_hint: '{0} in-app Browser does not support authentication Cookie export. Use openyida login --browser when CLI cookies are required.',
-    handoff_message: '{0} in-app Browser cannot export Yida login cookies. Run fallback_command when CLI cookies are required.',
-    cache_available: 'Existing CLI Cookie cache is available; no browser login needed.',
+    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login for CLI auth.',
+    browser_handoff_hint: '{0} in-app Browser is not used for CLI auth. Use openyida login.',
+    handoff_message: '{0} in-app Browser cannot complete CLI token login. Run openyida login.',
+    cache_available: 'Existing CLI token session cache is available; no browser login needed.',
   },
 };

package/lib/core/locales/ko.js

@@ -10,7 +10,7 @@ module.exports = {
     usage: '사용법:',
     alias: '별칭:',
     group_auth: '환경 & 인증',
-    cmd_login: '로그인 (캐시 우선, 필요 시 --browser 또는 --agent-qr)',
+    cmd_login: 'Login with OAuth token mode',
     cmd_logout: '로그아웃 / 계정 전환',
     cmd_auth: '로그인 상태 관리',
     cmd_org: '조직 관리 (목록 / 전환)',
@@ -811,9 +811,9 @@ module.exports = {
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',
     no_playwright: '{0} mode does not require Playwright or a separate Chromium install.',
-    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login --browser for Yida login cookies.',
-    browser_handoff_hint: '{0} in-app Browser does not support authentication Cookie export. Use openyida login --browser when CLI cookies are required.',
-    handoff_message: '{0} in-app Browser cannot export Yida login cookies. Run fallback_command when CLI cookies are required.',
-    cache_available: 'Existing CLI Cookie cache is available; no browser login needed.',
+    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login for CLI auth.',
+    browser_handoff_hint: '{0} in-app Browser is not used for CLI auth. Use openyida login.',
+    handoff_message: '{0} in-app Browser cannot complete CLI token login. Run openyida login.',
+    cache_available: 'Existing CLI token session cache is available; no browser login needed.',
   },
 };

package/lib/core/locales/pt.js

@@ -10,7 +10,7 @@ module.exports = {
     usage: 'Uso:',
     alias: 'Alias:',
     group_auth: 'Ambiente & Autenticação',
-    cmd_login: 'Login (cache primeiro, use --browser ou --agent-qr se necessário)',
+    cmd_login: 'Login with OAuth token mode',
     cmd_logout: 'Logout / trocar conta',
     cmd_auth: 'Gerenciamento do estado de login',
     cmd_org: 'Gerenciamento de organizações (listar / trocar)',
@@ -809,9 +809,9 @@ module.exports = {
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',
     no_playwright: '{0} mode does not require Playwright or a separate Chromium install.',
-    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login --browser for Yida login cookies.',
-    browser_handoff_hint: '{0} in-app Browser does not support authentication Cookie export. Use openyida login --browser when CLI cookies are required.',
-    handoff_message: '{0} in-app Browser cannot export Yida login cookies. Run fallback_command when CLI cookies are required.',
-    cache_available: 'Existing CLI Cookie cache is available; no browser login needed.',
+    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login for CLI auth.',
+    browser_handoff_hint: '{0} in-app Browser is not used for CLI auth. Use openyida login.',
+    handoff_message: '{0} in-app Browser cannot complete CLI token login. Run openyida login.',
+    cache_available: 'Existing CLI token session cache is available; no browser login needed.',
   },
 };

package/lib/core/locales/vi.js

@@ -10,7 +10,7 @@ module.exports = {
     usage: 'Cách dùng:',
     alias: 'Bí danh:',
     group_auth: 'Môi trường & Xác thực',
-    cmd_login: 'Đăng nhập (ưu tiên cache, dùng --browser hoặc --agent-qr khi cần)',
+    cmd_login: 'Login with OAuth token mode',
     cmd_logout: 'Đăng xuất / chuyển tài khoản',
     cmd_auth: 'Quản lý trạng thái đăng nhập',
     cmd_org: 'Quản lý tổ chức (liệt kê / chuyển)',
@@ -809,9 +809,9 @@ module.exports = {
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',
     no_playwright: '{0} mode does not require Playwright or a separate Chromium install.',
-    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login --browser for Yida login cookies.',
-    browser_handoff_hint: '{0} in-app Browser does not support authentication Cookie export. Use openyida login --browser when CLI cookies are required.',
-    handoff_message: '{0} in-app Browser cannot export Yida login cookies. Run fallback_command when CLI cookies are required.',
-    cache_available: 'Existing CLI Cookie cache is available; no browser login needed.',
+    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login for CLI auth.',
+    browser_handoff_hint: '{0} in-app Browser is not used for CLI auth. Use openyida login.',
+    handoff_message: '{0} in-app Browser cannot complete CLI token login. Run openyida login.',
+    cache_available: 'Existing CLI token session cache is available; no browser login needed.',
   },
 };

package/lib/core/locales/zh-HK.js

@@ -12,7 +12,7 @@ module.exports = {
     usage: '用法:',
     alias: '別名:',
     group_auth: '環境 & 認證',
-    cmd_login: '登入（優先緩存，按需使用 --browser 或 --agent-qr）',
+    cmd_login: 'Login with OAuth token mode',
     cmd_logout: '登出 / 切換帳戶',
     cmd_auth: '登入態管理',
     cmd_org: '組織管理（列出 / 切換）',
@@ -351,24 +351,24 @@ openyida - 宜搭命令列工具
   login: {
     title: '  openyida login - 宜搭登入工具',
     logout_title: '  openyida logout - 宜搭登出工具',
-    cookie_file_label: '\n  Cookie 檔案：{0}',
+    cookie_file_label: '\n  Token 檔案：{0}',
     logout_success: '  ✅ 已清空 Cookie，登入態已失效。',
     logout_hint: '  下次呼叫 openyida login 時將重新觸發掃碼登入。',
-    logout_no_file: '  ℹ️  Cookie 檔案不存在，無需清空。',
+    logout_no_file: '  ℹ️  Token 檔案不存在，無需清空。',
     using_cache: '🔍 偵測到本機 Cookie，直接使用...',
     csrf_ok: '  ✅ csrf_token：{0}...',
     corp_id_ok: '  ✅ corpId：{0}',
-    no_playwright: '\n❌ 本機瀏覽器登入會優先使用 Chrome/Edge/Chromium CDP；目前 CDP 不可用且未找到 Playwright 兜底。預設請使用 openyida login 或 openyida login --qr；如確需本機瀏覽器登入，請先安裝：',
+    no_playwright: 'This version only supports token login. Run openyida login.',
     playwright_install1: '   npm install -g playwright',
     playwright_install2: '   npx playwright install chromium',
-    browser_opening: '\n🔐 正在開啟瀏覽器，請掃碼登入...',
+    browser_opening: '\n🔐 正在開啟瀏覽器完成 OAuth 登入...',
     login_url_label: '  登入網址：{0}',
     waiting_login: '  等待登入完成（最長等待 10 分鐘）...',
     login_timeout: '  ⏰ 登入逾時（10 分鐘），請重試。',
     login_success: '  ✅ 登入成功！',
-    no_csrf_in_cookie: '  ❌ 登入成功但 Cookie 中無 tianshu_csrf_token，請重試。',
-    no_cookie_cache: '  ❌ 本機無有效 Cookie，無法刷新，需要重新登入。',
-    no_csrf_in_cache: '  ❌ Cookie 中無 tianshu_csrf_token，需要重新登入。',
+    no_csrf_in_cookie: '  ❌ token 登入未返回有效使用者上下文，請重試。',
+    no_cookie_cache: '  ❌ 本機無有效 token，無法刷新，需要重新登入。',
+    no_csrf_in_cache: '  ❌ 本機無有效 token，需要重新登入。',
     csrf_extracted: '  ✅ csrf_token 擷取成功：{0}...',
     trigger_login: '\n🔐 登入態失效，正在開啟瀏覽器掃碼登入...\n',
     csrf_refresh: '\n🔄 csrf_token 已過期，正在從 Cookie 重新擷取...\n',
@@ -392,8 +392,8 @@ openyida - 宜搭命令列工具
     login_success: '\n✅ 登入成功！',
     corp_id_ok: '  ✅ corpId：{0}',
     refresh_start: '\n🔄 正在刷新登入態...',
-    no_cookie_cache: '  ❌ 本機無 Cookie 緩存，無法刷新',
-    no_csrf_in_cache: '  ❌ Cookie 中無 csrf_token，需要重新登入',
+    no_cookie_cache: '  ❌ 本機無 token 緩存，無法刷新',
+    no_csrf_in_cache: '  ❌ 本機無有效 token，需要重新登入',
     refresh_success: '  ✅ 登入態刷新成功！',
     csrf_ok: '  ✅ csrf_token：{0}...',
     auth_config_cleared: '  ✅ 已清空登入設定',
@@ -599,7 +599,7 @@ openyida - 宜搭命令列工具
   import_example2: '      openyida import ./yida-export.json "品質追溯系統（正式環境）"',
   exec_failed: '\n❌ 執行失敗：{0}',
   auth_usage: '用法：openyida auth <status|login|refresh|logout>',
-  auth_example: '範例：\n  openyida auth status         # 查看登入狀態\n  openyida auth login          # 執行登入\n  openyida auth login --codex  # Codex 內建瀏覽器登入\n  openyida auth refresh        # 刷新登入態\n  openyida auth logout         # 登出',
+  auth_example: '範例：\n  openyida auth status         # 查看登入狀態\n  openyida auth login          # 執行登入\n  openyida auth refresh        # 刷新登入態\n  openyida auth logout         # 登出',
   org_usage: '用法：openyida org <list|switch>',
   org_example: '範例：\n  openyida org list                    # 列出可訪問的組織\n  openyida org switch --corp-id dingXXX  # 切換到指定組織',
   title: '  openyida import - 宜搭應用程式匯入工具',
@@ -1238,9 +1238,9 @@ openyida - 宜搭命令列工具
     title: '  openyida login {0} - {1} 登入模式',
     not_codex: '目前環境未偵測為 Codex / Qoder / 悟空，僅返回內建瀏覽器登入 handoff。',
     no_playwright: '{0} 登入模式不需要安裝 Playwright 或額外 Chromium。',
-    using_browser: '{0} 內建瀏覽器僅適合無需登入的頁面預覽；宜搭登入 Cookie 請使用 openyida login --browser。',
-    browser_handoff_hint: '{0} 內建瀏覽器不支援認證 Cookie 匯出；如需 CLI Cookie，請使用 openyida login --browser。',
-    handoff_message: '{0} 內建瀏覽器不能匯出宜搭登入 Cookie；如需 CLI Cookie，請執行 fallback_command。',
-    cache_available: '已存在可用的 CLI Cookie 緩存，無需重新開啟瀏覽器登入。',
+    using_browser: '{0} in-app Browser is only suitable for unauthenticated page previews; use openyida login for CLI auth.',
+    browser_handoff_hint: '{0} in-app Browser is not used for CLI auth. Use openyida login.',
+    handoff_message: '{0} 內建瀏覽器不能匯出宜搭登入 Cookie；如需 CLI token session，請執行 fallback_command。',
+    cache_available: '已存在可用的 CLI token session 緩存，無需重新開啟瀏覽器登入。',
   },
 };