rovloom 0.4.0 → 0.6.0

package/README.md

@@ -27,47 +27,16 @@ port is opened on the machines that run them.
 ## How it works
 
 AI Agents and CLIs talk to the Gateway over MCP. Each device runs one Connector with local provider
-adapters, which can manage several runtime instances.
-
-```mermaid
-flowchart TB
-  subgraph ACCESS["Access layer"]
-    direction LR
-    AI["AI Agent / AI Bot"]
-    CLI["CLI"]
-  end
-
-  GW["Gateway<br/>MCP facade · registry · routing · policy<br/>call ledger · result storage · management UI"]
-
-  subgraph DEVICE_A["Device A"]
-    direction TB
-    CA["One Connector<br/>one device identity · local policy"]
-    PA["Provider adapters<br/>trusted binding per instance"]
-    LA["Local Luvus<br/>Host / session"]
-    HA["Local Herdr<br/>session runtime"]
-    CA <--> PA
-    PA <--> LA
-    PA <--> HA
-  end
-
-  subgraph DEVICE_B["Device B"]
-    direction TB
-    CB["One Connector<br/>one device identity · local policy"]
-    PB["Provider adapters<br/>trusted binding per instance"]
-    LB["Local Luvus<br/>Host / session"]
-    HB["Local Herdr<br/>session runtime"]
-    CB <--> PB
-    PB <--> LB
-    PB <--> HB
-  end
-
-  AI <-->|"MCP requests / results"| GW
-  CLI <-->|"commands / results"| GW
-  GW <-->|"requests ↓ · results / events ↑"| CA
-  GW <-->|"requests ↓ · results / events ↑"| CB
-  CA -.->|"initiates outbound WSS"| GW
-  CB -.->|"initiates outbound WSS"| GW
-```
+adapters, which can manage several runtime instances. Sessions in those runtimes run local Agents
+such as Claude Code, Codex, Pi, OpenCode and Fx; the Agent software and logins stay on that device.
+
+<p align="center">
+  <a href="docs/assets/architecture/architecture.en.svg">
+    <img src="docs/assets/architecture/architecture.en.png" alt="Rovloom architecture: MCP clients access a Gateway; one outbound Connector per device routes calls through provider adapters to local Luvus and Herdr runtimes and their session Agents, such as Claude Code, Codex, Pi, OpenCode and Fx." width="1200">
+  </a>
+</p>
+
+Solid arrows show requests and returned results/events; dashed arrows show Connector-initiated outbound WSS. Click the image for the scalable SVG.
 
 ## Typical setup: two machines, one Agent
 
@@ -79,12 +48,23 @@ workstation's real sessions.
 2. On the workstation: `rovloom connector`, then enter the Gateway address and the one-time code.
 3. Add the Gateway's MCP URL and Bearer to your AI client and ask it to list the workstation's workspaces.
 
+## CLI language
+
+CLI output (help, pairing prompts, status hints) is English by default. Set `ROVLOOM_LANG=zh-CN`
+to switch to Simplified Chinese; without it the CLI stays in English regardless of the system
+locale (`LC_ALL`/`LANG` have no effect). Error and status codes (`config_valid`,
+`pairing_required`, …) are stable identifiers and never change with the language. The management
+page picks its language in the browser, independently of this setting.
+
 ## Install
 
 ```sh
 curl --fail --silent --show-error --location https://raw.githubusercontent.com/ArnoChenFx/rovloom/main/scripts/install.sh | sh
 ```
 
+Already have Bun (1.4.3 or newer)? `bun add -g rovloom` installs the npm package instead — no
+bundled runtime to download — and `bunx rovloom` runs it without installing.
+
 Windows PowerShell and the Docker Gateway are covered in the [Quick Start](docs/QUICK-START.md).
 
 | | Linux | macOS | Windows |

package/dist/src/admin/index.js

@@ -8,7 +8,7 @@ import {
   StoreManagementWriteService2,
   createManagementHandler2,
   createManagementSessionAdapter2
-} from "../chunk-khmgp03q.js";
+} from "../chunk-ez7d5dac.js";
 import {
   sampleManagementTransport2,
   createManagementTransportProjection2

package/dist/src/{chunk-smpevv7n.js → chunk-0dqx2mmz.js}

@@ -2,6 +2,9 @@
 import {
   canonical2
 } from "./chunk-d71r315c.js";
+import {
+  cliMessages2
+} from "./chunk-5b8g62kw.js";
 
 // src/mcp/schema.ts
 import { Ajv } from "ajv";
@@ -61,19 +64,9 @@ var schemas = {
   runtime_result_read: object({ result_id: id, cursor, max_bytes: { type: "integer", minimum: 1, maximum: MAX_RESULT_BYTES2 } }, ["result_id"]),
   runtime_response_discard: object({ call_id: id }, ["call_id"])
 };
-var descriptions = {
-  machines_list: "\u5217\u51FA\u5F53\u524D caller \u53EF\u89C1\u7684\u8BBE\u5907\uFF1B\u5206\u9875\u548C\u8BA1\u6570\u987B\u7ECF\u8FC7\u5F53\u524D ACL\u3002",
-  machines_get: "\u6309\u7A33\u5B9A ID \u6216\u7CBE\u786E\u540D\u79F0\u8BFB\u53D6\u53EF\u89C1\u8BBE\u5907\u3002",
-  providers_list: "\u5217\u51FA\u6307\u5B9A\u8BBE\u5907\u4E0B\u5F53\u524D caller \u53EF\u89C1\u7684\u5DF2\u914D\u7F6E provider\uFF1B\u4E0D\u8FD4\u56DE\u672C\u673A\u914D\u7F6E\u3002",
-  providers_get: "\u8BFB\u53D6\u663E\u5F0F provider \u7684 kind\u3001revision \u548C readiness\u3002",
-  runtime_discover: "\u53D1\u73B0\u663E\u5F0F Target/revision \u7684\u6709\u6548\u80FD\u529B\u53CA\u6765\u6E90\uFF1B\u4E0D\u6388\u4E88\u6267\u884C\u6743\u9650\u3002",
-  runtime_describe: "\u63CF\u8FF0\u663E\u5F0F Target/revision \u4E0B\u7CBE\u786E\u65B9\u6CD5\u7684\u539F\u751F\u53C2\u6570\u3001\u5206\u7C7B\u548C\u9650\u5236\u3002",
-  runtime_call: "\u63D0\u4EA4\u4E00\u6B21\u663E\u5F0F Target/revision/\u5951\u7EA6\u7684\u539F\u751F\u8C03\u7528\u3002deadline \u662F\u7EDD\u5BF9\u6BEB\u79D2\u671F\u9650\uFF0Cwait_ms \u53EA\u63A7\u5236\u77ED\u7B49\uFF1B\u4E0D\u91CD\u8BD5\u6216\u7BA1\u7406 provider\u3002",
-  runtime_call_get: "\u6309\u5F53\u524D\u5F52\u5C5E\u3001\u53CC\u7AEF\u7B56\u7565\u548C\u5185\u5BB9\u95E8\u7981\u8BFB\u53D6\u8C03\u7528\uFF1B\u77ED\u7B49\u5230\u671F\u4E0D\u6539\u53D8\u6267\u884C\u671F\u9650\u3002",
-  runtime_call_cancel: "\u8BF7\u6C42\u505C\u6B62\u7B49\u5F85\u6216\u6865\u63A5\uFF1B\u4EC5\u62A5\u544A\u670D\u52A1\u53EF\u786E\u8BA4\u7A0B\u5EA6\uFF0C\u4E0D\u627F\u8BFA\u539F\u751F\u56DE\u6EDA\u3002",
-  runtime_result_read: "\u6309\u5F53\u524D\u8BFB\u53D6\u6388\u6743\u548C\u671F\u9650\u8BFB\u53D6\u6709\u754C\u7ED3\u679C\u9875\uFF1Bcursor \u7531\u670D\u52A1\u7ED1\u5B9A caller \u548C\u539F\u7ED3\u679C\u3002",
-  runtime_response_discard: "\u5904\u7406\u5B8C\u7ED3\u679C\u540E\u663E\u5F0F\u5220\u9664\u539F\u6587\u4E0E\u53E5\u67C4\u5E76\u91CA\u653E\u8BFB\u53D6\u5BB9\u91CF\uFF1B\u5FC5\u987B\u9A8C\u8BC1\u5F52\u5C5E\u3001\u5F53\u524D\u539F\u65B9\u6CD5\u7B56\u7565\u53CA\u72EC\u7ACB discard_response \u6743\u9650\u3002\u8BFB\u53D6\u5230 EOF \u4E0D\u4F1A\u81EA\u52A8\u5220\u9664\u7ED3\u679C\u3002"
-};
+function toolDescription(name, language = "en") {
+  return cliMessages2(language)["mcp.tool." + name];
+}
 var readOnly = new Set([
   "machines_list",
   "machines_get",
@@ -89,10 +82,10 @@ var validators = new Map(Object.entries(schemas).map(([name, schema]) => [name,
 function toolNames2() {
   return Object.keys(schemas);
 }
-function toolDefinition2(name) {
+function toolDefinition2(name, language = "en") {
   return {
     name,
-    description: descriptions[name],
+    description: toolDescription(name, language),
     inputSchema: structuredClone(schemas[name]),
     outputSchema: {
       type: "object",
@@ -178,4 +171,4 @@ class NativeRequestNotDispatchedError extends FacadeServiceError2 {
 
 export { MAX_MCP_BYTES2, MAX_RESULT_BYTES2, MAX_WAIT_MS2, TOOLS_PAGE_SIZE, toolNames2, toolDefinition2, isToolName, parseToolArguments2, SERVICE_ERROR_CODES, FacadeServiceError2, NativeRequestNotDispatchedError };
 
-//# debugId=08E91064C7F6137064756E2164756E21
+//# debugId=E037D9DEF799B17A64756E2164756E21

package/dist/src/{chunk-z1vhdr3c.js → chunk-0qgk7mhz.js}

@@ -1,20 +1,21 @@
 // @bun
 import {
   createProductionCliRuntime2
-} from "./chunk-dtj9y82v.js";
-import"./chunk-fd9n51mc.js";
-import"./chunk-wdr3sdsm.js";
-import"./chunk-qab3m6nh.js";
+} from "./chunk-d2kz25f2.js";
+import"./chunk-zjkjjm81.js";
+import"./chunk-yv9px0f5.js";
+import"./chunk-wxqhscsw.js";
 import"./chunk-2tn0r64b.js";
-import"./chunk-khmgp03q.js";
-import"./chunk-7k9g0x5e.js";
-import"./chunk-smpevv7n.js";
-import"./chunk-6hxy1fcg.js";
-import"./chunk-v1httsp6.js";
-import"./chunk-qfyefed3.js";
-import"./chunk-se5daacy.js";
-import"./chunk-bjdqj43d.js";
-import"./chunk-4etdq0cp.js";
+import"./chunk-ez7d5dac.js";
+import"./chunk-mg0fd6ph.js";
+import"./chunk-0dqx2mmz.js";
+import"./chunk-bspzg8er.js";
+import"./chunk-8ykrqhxh.js";
+import"./chunk-1bf0wmgk.js";
+import"./chunk-z7kkfrgz.js";
+import"./chunk-hpzr94hm.js";
+import"./chunk-5b8g62kw.js";
+import"./chunk-jka7v3wb.js";
 import"./chunk-5s2emvww.js";
 import"./chunk-d4ejrtjq.js";
 import"./chunk-zj48jvfe.js";
@@ -30,7 +31,7 @@ import"./chunk-57ayxqnb.js";
 import"./chunk-3nnahj0j.js";
 import"./chunk-5h82060k.js";
 import"./chunk-5svt6rwr.js";
-import"./chunk-nyn75b8v.js";
+import"./chunk-qjh9x872.js";
 import"./chunk-zdxww7ms.js";
 import"./chunk-0pewfj89.js";
 import"./chunk-0y5542k8.js";
@@ -48,4 +49,4 @@ export {
   createProductionCliRuntime2 as createProductionCliRuntime
 };
 
-//# debugId=BEA716956F67769264756E2164756E21
+//# debugId=9700A4A99B06459764756E2164756E21

package/dist/src/{chunk-qfyefed3.js → chunk-1bf0wmgk.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   CliError2
-} from "./chunk-bjdqj43d.js";
+} from "./chunk-hpzr94hm.js";
 
 // src/cli/config-path.ts
 import { homedir } from "os";

package/dist/src/{chunk-ymsx7hhd.js → chunk-3dvn33c4.js}

@@ -21,7 +21,11 @@ import {
   observedHerdrSource
 } from "./chunk-9tt13dm0.js";
 import"./chunk-g7pnjzkk.js";
-import"./chunk-wdr3sdsm.js";
+import {
+  cliMessages2,
+  formatMessage2
+} from "./chunk-5b8g62kw.js";
+import"./chunk-yv9px0f5.js";
 import"./chunk-mqyq5jh6.js";
 import"./chunk-zj48jvfe.js";
 import {
@@ -30,7 +34,7 @@ import {
   setupReference,
   setupSessionsFor,
   GatewaySetup
-} from "./chunk-fd9n51mc.js";
+} from "./chunk-zjkjjm81.js";
 import {
   compileHerdrSchemas2
 } from "./chunk-5h82060k.js";
@@ -72,17 +76,17 @@ import {
   writeSetupFile,
   readSetupJson,
   writeSetupJson
-} from "./chunk-qab3m6nh.js";
+} from "./chunk-wxqhscsw.js";
 import {
   readRuntimeConfig2
-} from "./chunk-6hxy1fcg.js";
+} from "./chunk-bspzg8er.js";
 import {
   privateDirectory
-} from "./chunk-v1httsp6.js";
-import"./chunk-qfyefed3.js";
+} from "./chunk-8ykrqhxh.js";
+import"./chunk-1bf0wmgk.js";
 import {
   runtimeReference
-} from "./chunk-se5daacy.js";
+} from "./chunk-z7kkfrgz.js";
 import {
   herdrMode,
   luvusMode,
@@ -92,7 +96,7 @@ import {
   parseConfig2,
   configDocument2,
   readConfig2
-} from "./chunk-bjdqj43d.js";
+} from "./chunk-hpzr94hm.js";
 import {
   createFileCredentialSink2,
   loadCredential2
@@ -248,23 +252,20 @@ import { homedir } from "os";
 import { isAbsolute, join } from "path";
 
 // src/cli/setup-prompts.ts
-function connectorNativePrompt(enabled, kind = "Luvus", attach = false) {
-  if (attach) {
-    return enabled === true ? `Attach to your running ${kind} session (or start one in your own config directory if none is running); remote callers will act on your REAL workspaces (terminal execution ENABLED in user config)? / \u9644\u7740\u5230\u4F60\u6B63\u5728\u8FD0\u884C\u7684 ${kind} \u4F1A\u8BDD\uFF08\u6CA1\u6709\u5219\u5728\u4F60\u81EA\u5DF1\u7684\u914D\u7F6E\u76EE\u5F55\u91CC\u542F\u52A8\u4E00\u4E2A\uFF09\uFF0C\u8FDC\u7A0B\u8C03\u7528\u5C06\u76F4\u63A5\u64CD\u4F5C\u4F60\u7684\u771F\u5B9E\u5DE5\u4F5C\u533A\uFF08\u7528\u6237\u914D\u7F6E\u5DF2\u5F00\u542F\u7EC8\u7AEF\u6267\u884C\uFF09\uFF1F` : `Attach to your running ${kind} session (or start one in your own config directory if none is running); remote callers will act on your REAL workspaces (terminal execution disabled)? / \u9644\u7740\u5230\u4F60\u6B63\u5728\u8FD0\u884C\u7684 ${kind} \u4F1A\u8BDD\uFF08\u6CA1\u6709\u5219\u5728\u4F60\u81EA\u5DF1\u7684\u914D\u7F6E\u76EE\u5F55\u91CC\u542F\u52A8\u4E00\u4E2A\uFF09\uFF0C\u8FDC\u7A0B\u8C03\u7528\u5C06\u76F4\u63A5\u64CD\u4F5C\u4F60\u7684\u771F\u5B9E\u5DE5\u4F5C\u533A\uFF08\u5173\u95ED\u7EC8\u7AEF\u6267\u884C\uFF09\uFF1F`;
-  }
-  return enabled === true ? `Discover ${kind} and create isolated state (terminal execution ENABLED in user config)? / \u53D1\u73B0 ${kind} \u5E76\u521B\u5EFA\u9694\u79BB\u72B6\u6001\uFF08\u7528\u6237\u914D\u7F6E\u5DF2\u5F00\u542F\u7EC8\u7AEF\u6267\u884C\uFF09\uFF1F` : `Discover this ${kind} installation and create its isolated local state (terminal execution disabled)? / \u53D1\u73B0 ${kind} \u5E76\u521B\u5EFA\u9694\u79BB\u72B6\u6001\uFF08\u5173\u95ED\u7EC8\u7AEF\u6267\u884C\uFF09\uFF1F`;
+function connectorNativePrompt(enabled, kind = "Luvus", attach = false, language = "en") {
+  const messages = cliMessages2(language);
+  const key = attach ? enabled === true ? "setup.prompt.connectorNativeAttachEnabled" : "setup.prompt.connectorNativeAttachDisabled" : enabled === true ? "setup.prompt.connectorNativeIsolatedEnabled" : "setup.prompt.connectorNativeIsolatedDisabled";
+  return formatMessage2(messages[key], { kind });
 }
 
 // src/cli/setup-native.ts
 function assertSetupNativePath(config, terminal) {
   if (selectedNativeProviders(config).includes("luvus") && luvusMode(config) === "managed" && Buffer.byteLength(join(config.state_dir, "n")) > 52) {
-    terminal.show(`native_state_path_too_long: choose a shorter data.directory before initialization (Luvus state path maximum 52 UTF-8 bytes). / \u521D\u59CB\u5316\u524D\u8BF7\u7F29\u77ED data.directory\uFF08Luvus \u72B6\u6001\u8DEF\u5F84\u6700\u591A52\u4E2AUTF-8\u5B57\u8282\uFF09\u3002
-`);
+    terminal.show(cliMessages2(terminal.io.language)["setup.native.statePathTooLongLuvus"]);
     throw new CliError2("configuration_required");
   }
   if (selectedNativeProviders(config).includes("herdr") && herdrMode(config) === "managed" && process.platform !== "win32" && Buffer.byteLength(join(config.state_dir, "hr/c/herdr/herdr-client.sock")) > 107) {
-    terminal.show(`native_state_path_too_long: choose a shorter data.directory for the private Herdr sockets (herdr.sock and herdr-client.sock). / \u8BF7\u7F29\u77ED data.directory \u4EE5\u5BB9\u7EB3\u9694\u79BB Herdr \u7684 socket\uFF08\u542B herdr-client.sock\uFF09\u3002
-`);
+    terminal.show(cliMessages2(terminal.io.language)["setup.native.statePathTooLongHerdr"]);
     throw new CliError2("configuration_required");
   }
 }
@@ -311,16 +312,20 @@ async function prepareSetupNative(config, terminal, credential, attempt, authori
   const binary = setupBinary(config);
   const attach = luvusMode(config) === "attach";
   if (!attach && process.platform === "win32") {
-    terminal.show(`luvus_managed_unsupported_on_windows: set native.luvus.mode to "attach". / Windows \u4E0A\u6682\u4E0D\u652F\u6301 managed\uFF0C\u8BF7\u628A native.luvus.mode \u8BBE\u4E3A "attach"\u3002
-`);
+    terminal.show(formatMessage2(cliMessages2(terminal.io.language)["setup.native.managedUnsupportedWindows"], {
+      provider: "luvus",
+      configKey: "luvus"
+    }));
     throw new CliError2("configuration_required");
   }
   if (!attach && process.platform === "darwin") {
-    terminal.show(`luvus_managed_unsupported_on_macos: set native.luvus.mode to "attach". / macOS \u4E0A\u6682\u4E0D\u652F\u6301 managed\uFF0C\u8BF7\u628A native.luvus.mode \u8BBE\u4E3A "attach"\u3002
-`);
+    terminal.show(formatMessage2(cliMessages2(terminal.io.language)["setup.native.managedUnsupportedMacos"], {
+      provider: "luvus",
+      configKey: "luvus"
+    }));
     throw new CliError2("configuration_required");
   }
-  if (!await terminal.confirm(connectorNativePrompt(config.allow_terminal_execution, "Luvus", attach))) {
+  if (!await terminal.confirm(connectorNativePrompt(config.allow_terminal_execution, "Luvus", attach, terminal.io.language))) {
     throw new CliError2("configuration_required");
   }
   const control = join(config.state_dir, "control");
@@ -529,16 +534,20 @@ async function prepareSetupHerdr(config, terminal, credential, attempt, authoriz
   const binary = setupBinary(config, "herdr");
   const attach = herdrMode(config) === "attach";
   if (!attach && process.platform === "win32") {
-    terminal.show(`herdr_managed_unsupported_on_windows: set native.herdr.mode to "attach". / Windows \u4E0A\u6682\u4E0D\u652F\u6301 managed\uFF0C\u8BF7\u628A native.herdr.mode \u8BBE\u4E3A "attach"\u3002
-`);
+    terminal.show(formatMessage2(cliMessages2(terminal.io.language)["setup.native.managedUnsupportedWindows"], {
+      provider: "herdr",
+      configKey: "herdr"
+    }));
     throw new CliError2("configuration_required");
   }
   if (!attach && process.platform === "darwin") {
-    terminal.show(`herdr_managed_unsupported_on_macos: set native.herdr.mode to "attach". / macOS \u4E0A\u6682\u4E0D\u652F\u6301 managed\uFF0C\u8BF7\u628A native.herdr.mode \u8BBE\u4E3A "attach"\u3002
-`);
+    terminal.show(formatMessage2(cliMessages2(terminal.io.language)["setup.native.managedUnsupportedMacos"], {
+      provider: "herdr",
+      configKey: "herdr"
+    }));
     throw new CliError2("configuration_required");
   }
-  if (!await terminal.confirm(connectorNativePrompt(config.allow_terminal_execution, "Herdr", attach))) {
+  if (!await terminal.confirm(connectorNativePrompt(config.allow_terminal_execution, "Herdr", attach, terminal.io.language))) {
     throw new CliError2("configuration_required");
   }
   assertSetupNativePath(config, terminal);
@@ -703,7 +712,7 @@ async function pair(config, terminal) {
   let current;
   let credential;
   if (previous === undefined) {
-    const value = await terminal.ask("One-time pairing code / \u4E00\u6B21\u6027\u914D\u5BF9\u7801: ", true);
+    const value = await terminal.ask(cliMessages2(terminal.io.language)["setup.connector.pairingCodePrompt"], true);
     const parts = value.split(".");
     if (parts.length !== 3) {
       throw new CliError2("configuration_required");
@@ -714,7 +723,7 @@ async function pair(config, terminal) {
     if (!enrollment || !/^[A-Za-z0-9_-]{32,256}$/.test(enrollment)) {
       throw new CliError2("configuration_required");
     }
-    if (!await terminal.confirm("Trust this Gateway address for one-time device enrollment and reviewed native setup? / \u4FE1\u4EFB\u6B64 Gateway \u5730\u5740\u5E76\u5151\u6362\u4E00\u6B21\u6027\u8BBE\u5907\u914D\u5BF9\uFF1F")) {
+    if (!await terminal.confirm(cliMessages2(terminal.io.language)["setup.connector.trustGateway"])) {
       throw new CliError2("configuration_required");
     }
     current = {
@@ -815,7 +824,7 @@ async function setupConnector(config, terminal) {
     if (boundedJson2(configDocument2(readConfig2(terminal.configPath))) !== boundedJson2(configDocument2(config))) {
       throw new CliError2("config_changed");
     }
-    const address = await terminal.ask("Gateway address (ws://host:port or wss://host) / Gateway \u5730\u5740: ");
+    const address = await terminal.ask(cliMessages2(terminal.io.language)["setup.gatewayAddressPrompt"]);
     config = parseConfig2({ ...configDocument2(config), gateway: { url: address } });
     writeSetupFile(terminal.configPath, JSON.stringify(configDocument2(config), null, 2) + `
 `, true, previous);
@@ -824,8 +833,7 @@ async function setupConnector(config, terminal) {
   privateDirectory(config.state_dir);
   privateDirectory(join3(config.state_dir, "managed"));
   const paired = await pair(config, terminal);
-  terminal.show(`pairing_completed / \u8BBE\u5907\u8EAB\u4EFD\u5DF2\u6301\u4E45\u914D\u5BF9\uFF1B\u63A5\u4E0B\u6765\u53D1\u73B0\u6240\u9009\u539F\u751F\u5B89\u88C5\u3002
-`);
+  terminal.show(cliMessages2(terminal.io.language)["setup.connector.pairingCompleted"]);
   const prepared = [];
   for (const kind of selectedNativeProviders(config)) {
     prepared.push(await (kind === "luvus" ? prepareSetupNative : prepareSetupHerdr)(config, terminal, paired.credential, paired.current.attempt_id, paired.authorization));
@@ -843,8 +851,7 @@ async function setupConnector(config, terminal) {
       throw new CliError2("configuration_required");
     }
   } catch {
-    terminal.show(`Native setup response unavailable; retain the original setup and rerun Connector to check it. / \u539F\u751F\u8BBE\u7F6E\u54CD\u5E94\u4E0D\u53EF\u7528\uFF1B\u4FDD\u7559\u539F\u72B6\u6001\uFF0C\u91CD\u65B0\u8FD0\u884C Connector \u6838\u5BF9\u3002
-`);
+    terminal.show(cliMessages2(terminal.io.language)["setup.connector.nativeSetupResponseUnavailable"]);
     throw new CliError2("configuration_required");
   }
   writeSetupJson(runtimeReference(config.state_dir, "providers"), {
@@ -856,8 +863,7 @@ async function setupConnector(config, terminal) {
     }))
   }, false, 1048576);
   writeSetupJson(runtimeReference(config.state_dir, "pairing"), { ...paired.current, phase: "configured" }, true);
-  terminal.show(`Native state prepared; starting the real Connector. Watch Gateway for connector_ready. / \u539F\u751F\u72B6\u6001\u5DF2\u51C6\u5907\uFF1B\u542F\u52A8\u6B63\u5F0F Connector\uFF0C\u4EE5 Gateway \u7684\u5B9E\u9645\u5C31\u7EEA\u63D0\u793A\u4E3A\u51C6\u3002
-`);
+  terminal.show(cliMessages2(terminal.io.language)["setup.connector.nativeStatePrepared"]);
   terminal.finishQuestions();
   return config;
 }
@@ -869,9 +875,8 @@ async function repairConnector(config, terminal) {
     throw new CliError2("configuration_required");
   }
   const old = loadCredential2(credentialPath);
-  terminal.show("This Connector is paired as " + old.machine_id + ". Re-pairing replaces only its Gateway credential; native setup is kept. Stop any other running Connector for this device first. / \u6B64 Connector \u5DF2\u914D\u5BF9\u4E3A " + old.machine_id + `\u3002\u91CD\u65B0\u914D\u5BF9\u53EA\u66F4\u6362\u4E0E Gateway \u7684\u51ED\u636E\uFF0C\u4FDD\u7559\u539F\u751F\u8BBE\u7F6E\uFF1B\u8BF7\u5148\u505C\u6B62\u8BE5\u8BBE\u5907\u4E0A\u5176\u5B83\u6B63\u5728\u8FD0\u884C\u7684 Connector\u3002
-`);
-  const value = await terminal.ask("One-time re-pairing code from rovloom gateway --repair-device / \u6765\u81EA rovloom gateway --repair-device \u7684\u4E00\u6B21\u6027\u7801: ", true);
+  terminal.show(formatMessage2(cliMessages2(terminal.io.language)["setup.repair.alreadyPaired"], { machine: old.machine_id }));
+  const value = await terminal.ask(cliMessages2(terminal.io.language)["setup.repair.codePrompt"], true);
   const parts = value.split(".");
   if (parts.length !== 3) {
     throw new CliError2("configuration_required");
@@ -882,7 +887,7 @@ async function repairConnector(config, terminal) {
   if (machine !== old.machine_id || !enrollment || !/^[A-Za-z0-9_-]{32,256}$/.test(enrollment)) {
     throw new CliError2("configuration_required");
   }
-  if (!await terminal.confirm("Trust this Gateway address and replace this device credential with a new one? / \u4FE1\u4EFB\u6B64 Gateway \u5730\u5740\u5E76\u7528\u65B0\u51ED\u636E\u66FF\u6362\u672C\u673A\u8BBE\u5907\u51ED\u636E\uFF1F")) {
+  if (!await terminal.confirm(cliMessages2(terminal.io.language)["setup.repair.trustConfirm"])) {
     throw new CliError2("configuration_required");
   }
   const delivery = await post(config, "/pairing/redeem", { attempt_id: attempt, machine_id: machine, enrollment }, terminal.io.signal);
@@ -921,14 +926,12 @@ async function repairConnector(config, terminal) {
       }
     } catch {
       terminal.assertOwner();
-      terminal.show(`Gateway confirmation unavailable; if this Connector cannot authenticate, run the re-pairing again. / \u672A\u6536\u5230 Gateway \u7684\u786E\u8BA4\uFF1B\u82E5 Connector \u4E4B\u540E\u65E0\u6CD5\u8BA4\u8BC1\uFF0C\u8BF7\u91CD\u65B0\u6267\u884C\u91CD\u65B0\u914D\u5BF9\u3002
-`);
+      terminal.show(cliMessages2(terminal.io.language)["setup.repair.confirmationUnavailable"]);
     }
   } finally {
     sink.close();
   }
-  terminal.show(`device_repaired / \u8BBE\u5907\u51ED\u636E\u5DF2\u66F4\u6362\uFF1B\u6B63\u5728\u542F\u52A8 Connector\u3002
-`);
+  terminal.show(cliMessages2(terminal.io.language)["setup.repair.deviceRepaired"]);
 }
 
 // src/cli/online-claim.ts
@@ -958,7 +961,7 @@ async function claimConnector(config, terminal) {
     if (boundedJson2(configDocument2(readConfig2(terminal.configPath))) !== boundedJson2(configDocument2(config))) {
       throw new CliError2("config_changed");
     }
-    const address = await terminal.ask("Gateway address (ws://host:port or wss://host) / Gateway \u5730\u5740: ");
+    const address = await terminal.ask(cliMessages2(terminal.io.language)["setup.gatewayAddressPrompt"]);
     config = parseConfig2({ ...configDocument2(config), gateway: { url: address } });
     writeSetupFile(terminal.configPath, JSON.stringify(configDocument2(config), null, 2) + `
 `, true, previous);
@@ -976,8 +979,7 @@ async function claimConnector(config, terminal) {
       throw new CliError2("configuration_required");
     }
     if (current.phase === "configured") {
-      terminal.show(`pairing_completed / \u8BBE\u5907\u8EAB\u4EFD\u5DF2\u6301\u4E45\u914D\u5BF9\uFF0C\u539F\u751F\u6FC0\u6D3B\u5DF2\u5B8C\u6210\u3002
-`);
+      terminal.show(cliMessages2(terminal.io.language)["setup.claim.pairingCompletedActivated"]);
       return config;
     }
     if (current.phase === "paired") {
@@ -1005,8 +1007,7 @@ async function claimConnector(config, terminal) {
       continue;
     }
     if (Date.now() > deadline) {
-      terminal.show(`Approval wait ended; rerun the same command to resume this claim. / \u7B49\u5F85\u6279\u51C6\u5DF2\u7ED3\u675F\uFF1B\u91CD\u65B0\u8FD0\u884C\u540C\u4E00\u547D\u4EE4\u53EF\u7EE7\u7EED\u539F\u8BA4\u9886\u3002
-`);
+      terminal.show(cliMessages2(terminal.io.language)["setup.claim.waitEnded"]);
       throw new CliError2("configuration_required");
     }
     let status;
@@ -1064,15 +1065,15 @@ function matchesSavedCredential(current, path) {
   return credential.machine_id === current.machine_id && credential.recovery_generation === current.recovery_generation && digest2(credential.credential) === current.credential_hash;
 }
 async function restartClaim(config, terminal, path, credentialPath) {
-  if (terminal.io.signal.aborted || existsSync2(credentialPath) || !await terminal.confirm("Start a new claim with a new pairing application? / \u539F\u8BA4\u9886\u5DF2\u7EC8\u6B62\u6216\u8FC7\u671F\uFF0C\u662F\u5426\u4F7F\u7528\u65B0\u7684\u914D\u5BF9\u7533\u8BF7\u91CD\u65B0\u8BA4\u9886\uFF1F")) {
+  if (terminal.io.signal.aborted || existsSync2(credentialPath) || !await terminal.confirm(cliMessages2(terminal.io.language)["setup.claim.restartConfirm"])) {
     throw new CliError2("configuration_required");
   }
   return startClaim(config, terminal, path, true);
 }
 async function startClaim(config, terminal, path, replace) {
-  const pairing_id = await terminal.ask("Pairing application ID / \u914D\u5BF9\u7533\u8BF7 ID: ");
+  const pairing_id = await terminal.ask(cliMessages2(terminal.io.language)["setup.claim.pairingIdPrompt"]);
   id2(pairing_id);
-  if (!await terminal.confirm("Trust this Gateway address for online device enrollment? / \u4FE1\u4EFB\u6B64 Gateway \u5730\u5740\u5E76\u5728\u7EBF\u8BA4\u9886\u8BBE\u5907\u914D\u5BF9\uFF1F")) {
+  if (!await terminal.confirm(cliMessages2(terminal.io.language)["setup.claim.trustConfirm"])) {
     throw new CliError2("configuration_required");
   }
   const secret = randomBytes(32).toString("base64url");
@@ -1094,9 +1095,10 @@ async function startClaim(config, terminal, path, replace) {
     phase: "waiting"
   };
   writeSetupJson(path, current, replace);
-  terminal.show("Claim code / \u6838\u5BF9\u7801: " + created.user_code + `
-Approve this exact code for machine ` + current.machine_id + ` in the management page. / \u8BF7\u5728\u7BA1\u7406\u9875\u4E3A\u8BE5\u8BBE\u5907\u6838\u5BF9\u5E76\u6279\u51C6\u6B64\u7801\u3002
-`);
+  terminal.show(formatMessage2(cliMessages2(terminal.io.language)["setup.claim.claimCodeBlock"], {
+    code: created.user_code,
+    machine: current.machine_id
+  }));
   return current;
 }
 async function acknowledge(config, terminal, current) {
@@ -1115,8 +1117,7 @@ async function acknowledge(config, terminal, current) {
   const { secret: _secret, ...rest } = current;
   const paired = { ...rest, phase: "paired" };
   writeSetupJson(runtimeReference(config.state_dir, "pairing-claim"), paired, true);
-  terminal.show(`pairing_completed / \u8BBE\u5907\u8EAB\u4EFD\u5DF2\u6301\u4E45\u914D\u5BF9\uFF1B\u63A5\u4E0B\u6765\u53D1\u73B0\u6240\u9009\u539F\u751F\u5B89\u88C5\u3002
-`);
+  terminal.show(cliMessages2(terminal.io.language)["setup.connector.pairingCompleted"]);
   return paired;
 }
 async function activate(config, terminal, current) {
@@ -1163,8 +1164,7 @@ async function activate(config, terminal, current) {
       throw new CliError2("configuration_required");
     }
   } catch {
-    terminal.show(`Native activation response unavailable; rerun the same command to check the original claim. / \u539F\u751F\u6FC0\u6D3B\u54CD\u5E94\u4E0D\u53EF\u7528\uFF1B\u91CD\u65B0\u8FD0\u884C\u540C\u4E00\u547D\u4EE4\u6309\u539F\u8BA4\u9886\u6838\u5BF9\u3002
-`);
+    terminal.show(cliMessages2(terminal.io.language)["setup.claim.activationResponseUnavailable"]);
     throw new CliError2("configuration_required");
   }
   const providersPath = runtimeReference(config.state_dir, "providers");
@@ -1194,8 +1194,7 @@ async function activate(config, terminal, current) {
     throw new CliError2("configuration_required");
   }
   writeSetupJson(runtimeReference(config.state_dir, "pairing-claim"), { ...current, phase: "configured" }, true);
-  terminal.show(`Native state prepared; starting the real Connector. / \u539F\u751F\u72B6\u6001\u5DF2\u51C6\u5907\uFF1B\u542F\u52A8\u6B63\u5F0F Connector\u3002
-`);
+  terminal.show(cliMessages2(terminal.io.language)["setup.claim.nativeStatePrepared"]);
   terminal.finishQuestions();
   return config;
 }
@@ -1297,4 +1296,4 @@ export {
   CliSetup
 };
 
-//# debugId=C698A949CB8251CE64756E2164756E21
+//# debugId=DAEB8FB1ABC451BE64756E2164756E21