rovloom 0.5.0 → 0.6.1

package/README.md

@@ -45,9 +45,17 @@ always-on host runs the Gateway. Your AI client reaches the Gateway over MCP and
 workstation's real sessions.
 
 1. On the Gateway host: `rovloom gateway`.
-2. On the workstation: `rovloom connector`, then enter the Gateway address and the one-time code.
+2. On the workstation: paste the join command the Gateway prints (`rovloom connector --join ws://…#code`).
 3. Add the Gateway's MCP URL and Bearer to your AI client and ask it to list the workstation's workspaces.
 
+## CLI language
+
+CLI output (help, join messages, status hints) is English by default. Set `ROVLOOM_LANG=zh-CN`
+to switch to Simplified Chinese; without it the CLI stays in English regardless of the system
+locale (`LC_ALL`/`LANG` have no effect). Error and status codes (`config_valid`,
+`pairing_required`, …) are stable identifiers and never change with the language. The management
+page picks its language in the browser, independently of this setting.
+
 ## Install
 
 ```sh

package/dist/src/admin/index.js

@@ -8,7 +8,7 @@ import {
   StoreManagementWriteService2,
   createManagementHandler2,
   createManagementSessionAdapter2
-} from "../chunk-ympzv86c.js";
+} from "../chunk-6w4g9fw8.js";
 import {
   sampleManagementTransport2,
   createManagementTransportProjection2

package/dist/src/{chunk-emcefrc1.js → chunk-0e9gg4sg.js}

@@ -1,13 +1,12 @@
 // @bun
 import {
-  SERVICE_HELP2,
   parseServiceCommand2,
   handleServiceCommand2
-} from "./chunk-7q96e161.js";
+} from "./chunk-shez7hkc.js";
+import"./chunk-pgs9jp6t.js";
 export {
-  SERVICE_HELP2 as SERVICE_HELP,
   handleServiceCommand2 as handleServiceCommand,
   parseServiceCommand2 as parseServiceCommand
 };
 
-//# debugId=C3691EFE843F735764756E2164756E21
+//# debugId=2172CFBA81B35CDA64756E2164756E21

package/dist/src/chunk-1xer1ent.js

@@ -0,0 +1,102 @@
+// @bun
+import {
+  boundedJson2
+} from "./chunk-qt9m2kg2.js";
+import {
+  readRuntimeJson
+} from "./chunk-z7kkfrgz.js";
+import {
+  CliError2
+} from "./chunk-hpzr94hm.js";
+import {
+  privatePath,
+  readPrivateBytes
+} from "./chunk-0y5542k8.js";
+
+// src/cli/setup-files.ts
+import {
+  closeSync,
+  fsyncSync,
+  fchmodSync,
+  linkSync,
+  statSync,
+  openSync,
+  renameSync,
+  unlinkSync,
+  writeFileSync
+} from "fs";
+import { createHash, randomUUID } from "crypto";
+import { dirname, join } from "path";
+function setupFileStamp(path) {
+  const bytes = readPrivateBytes(path, 16777216);
+  try {
+    return createHash("sha256").update(bytes).digest("hex");
+  } finally {
+    bytes.fill(0);
+  }
+}
+function writeSetupFile(path, bytes, replace = false, expectedStamp) {
+  privatePath(path);
+  const previous = replace ? expectedStamp ?? setupFileStamp(path) : undefined;
+  if (replace && setupFileStamp(path) !== previous) {
+    throw new CliError2("config_changed");
+  }
+  const temporary = join(dirname(path), ".rovloom-setup-" + randomUUID() + ".tmp");
+  let fd;
+  let created = false;
+  try {
+    const mode = replace ? statSync(path).mode & 511 : 384;
+    fd = openSync(temporary, "wx", mode);
+    created = true;
+    if (replace && process.platform !== "win32") {
+      fchmodSync(fd, mode);
+    }
+    writeFileSync(fd, bytes);
+    fsyncSync(fd);
+    const complete = fd;
+    fd = undefined;
+    closeSync(complete);
+    if (replace) {
+      if (setupFileStamp(path) !== previous) {
+        throw new CliError2("config_changed");
+      }
+      renameSync(temporary, path);
+    } else {
+      linkSync(temporary, path);
+      unlinkSync(temporary);
+    }
+    created = false;
+  } catch (error) {
+    if (error instanceof CliError2) {
+      throw error;
+    }
+    throw new CliError2("config_unreadable");
+  } finally {
+    try {
+      if (fd !== undefined) {
+        closeSync(fd);
+      }
+    } finally {
+      if (created) {
+        unlinkSync(temporary);
+      }
+    }
+  }
+}
+function readSetupJson(path, maximum = 16384) {
+  try {
+    return readRuntimeJson(path, maximum);
+  } catch (error) {
+    if (error instanceof CliError2 && error.code === "backend_unavailable") {
+      return;
+    }
+    throw error;
+  }
+}
+function writeSetupJson(path, value, replace = false, maximum = 16384) {
+  writeSetupFile(path, boundedJson2(value, maximum), replace);
+}
+
+export { setupFileStamp, writeSetupFile, readSetupJson, writeSetupJson };
+
+//# debugId=F153F55644C9BB1764756E2164756E21

package/dist/src/{chunk-863tk45b.js → chunk-41fny9qm.js}

@@ -10,9 +10,6 @@ import {
 import {
   compileHerdrSchemas2
 } from "./chunk-5h82060k.js";
-import {
-  ConnectorCapacityError
-} from "./chunk-57ayxqnb.js";
 import {
   HerdrLocalError,
   readHerdrPeer,
@@ -23,7 +20,10 @@ import {
   measureHerdrInstallation,
   verifyHerdrInstallation,
   isHerdrInstanceBinding
-} from "./chunk-q5pgbwb3.js";
+} from "./chunk-e7jgpxkf.js";
+import {
+  ConnectorCapacityError
+} from "./chunk-pksaqt9a.js";
 
 // src/connector/herdr/io.ts
 import { spawn } from "child_process";
@@ -430,4 +430,4 @@ function createHerdrHostServices2(installation, services) {
 
 export { isStoppedHerdrCommandCancellation, checkHerdrSignal, herdrDeadline, runHerdrCommand, withHerdrSocket, exchangeHerdr, HerdrInstallation2, createHerdrHostServices2 };
 
-//# debugId=CB0FB8FAF9DAAC5964756E2164756E21
+//# debugId=C2DD57901BB8C75064756E2164756E21

package/dist/src/{chunk-zjzrcc59.js → chunk-59h200cr.js}

@@ -25,16 +25,16 @@ import {
   decodeWireFrame2,
   discardFencedWireFrame2
 } from "./chunk-qt9m2kg2.js";
-import {
-  LuvusAdapterError2,
-  ConnectorCapacityError
-} from "./chunk-57ayxqnb.js";
 import {
   HerdrLocalError
-} from "./chunk-q5pgbwb3.js";
+} from "./chunk-e7jgpxkf.js";
 import {
   createLuvusWireAdapter2
 } from "./chunk-hz8pm6hz.js";
+import {
+  LuvusAdapterError2,
+  ConnectorCapacityError
+} from "./chunk-pksaqt9a.js";
 
 // src/transport/gateway.ts
 import { randomUUID as randomUUID2 } from "crypto";
@@ -1795,6 +1795,138 @@ function createConnector2(options) {
     }
   };
 }
+// src/transport/pairing.ts
+class PairingAdmin2 {
+  store;
+  host;
+  constructor(store, host) {
+    this.store = store;
+    this.host = host;
+  }
+  register(name) {
+    if (this.host.authorize("register") !== undefined) {
+      fail2("pairing_admin_forbidden");
+    }
+    return this.store.register(name);
+  }
+  issue(machine, ttlMs = 600000) {
+    if (this.host.authorize("enroll", machine) !== undefined) {
+      fail2("pairing_admin_forbidden");
+    }
+    return this.store.issueEnrollment(machine, ttlMs);
+  }
+}
+// src/transport/custody.ts
+import { randomUUID as randomUUID4 } from "crypto";
+function createPairingDelivery2(options) {
+  const timeout = options.timeout_ms ?? 5000;
+  const concurrency = options.concurrency ?? 4;
+  if (!Number.isSafeInteger(timeout) || timeout < 1 || timeout > 30000 || !Number.isSafeInteger(concurrency) || concurrency < 1 || concurrency > 64) {
+    fail2("pairing_limit");
+  }
+  const pending = new Map;
+  let closed = false;
+  async function transfer(machine, operation, issue) {
+    if (closed || pending.size >= concurrency) {
+      fail2("pairing_unavailable");
+    }
+    id2(machine);
+    const deliveryId = randomUUID4();
+    let sink;
+    try {
+      sink = options.authorizeChannel({ machine_id: machine, delivery_id: deliveryId, operation });
+    } catch {
+      fail2("pairing_channel_forbidden");
+    }
+    if (!sink || typeof sink.deliver !== "function" || typeof sink.close !== "function") {
+      fail2("pairing_channel_forbidden");
+    }
+    if (closed) {
+      try {
+        sink.close();
+      } catch {}
+      fail2("pairing_unavailable");
+    }
+    const controller = new AbortController;
+    let rejectAbort;
+    const aborted = new Promise((_, reject) => {
+      rejectAbort = reject;
+    });
+    const closeSink = () => {
+      controller.abort();
+      try {
+        sink.close();
+      } catch {}
+    };
+    const abort = () => {
+      closeSink();
+      rejectAbort(new Error("pairing_delivery_unknown"));
+    };
+    const timer = setTimeout(abort, timeout);
+    pending.set(deliveryId, { timer, abort });
+    let installedDigest;
+    let sending = false;
+    try {
+      const credential = issue();
+      installedDigest = hash2(credential.credential);
+      const generation = credential.recovery_generation;
+      const revision = options.identities.credentialRevision(machine);
+      sending = true;
+      const delivered = Promise.resolve().then(() => sink.deliver(structuredClone(credential), controller.signal, { delivery_id: deliveryId, revision })).finally(() => {
+        clearTimeout(timer);
+        pending.delete(deliveryId);
+      });
+      const ack = await Promise.race([delivered, aborted]);
+      if (!ack || ack.delivery_id !== deliveryId || ack.revision !== revision || ack.machine_id !== machine || ack.recovery_generation !== generation) {
+        fail2("pairing_ack_mismatch");
+      }
+      if (closed || controller.signal.aborted) {
+        fail2("pairing_delivery_unknown");
+      }
+      return { machine_id: machine, delivery_id: deliveryId, state: "delivered" };
+    } catch {
+      if (installedDigest !== undefined) {
+        try {
+          options.identities.rejectDelivery(machine, installedDigest);
+        } catch {}
+      }
+      return fail2("pairing_delivery_unknown");
+    } finally {
+      clearTimeout(timer);
+      closeSink();
+      if (!sending) {
+        pending.delete(deliveryId);
+      }
+    }
+  }
+  return {
+    async redeem(request) {
+      if (typeof request.enrollment !== "string" || !/^[A-Za-z0-9_-]{32,256}$/.test(request.enrollment)) {
+        fail2("invalid_enrollment");
+      }
+      return transfer(request.registration_id, "enroll", () => {
+        const device = options.backend.redeem(request.enrollment);
+        if (device.machine_id !== request.registration_id) {
+          fail2("pairing_target_mismatch");
+        }
+        return { ...device, recovery_generation: options.backend.generation() };
+      });
+    },
+    status() {
+      return { closed, pending: pending.size };
+    },
+    close() {
+      if (closed) {
+        return;
+      }
+      closed = true;
+      for (const item of pending.values()) {
+        clearTimeout(item.timer);
+        item.abort();
+      }
+    }
+  };
+}
 // src/transport/lifecycle.ts
 function createDeviceLifecycle2(store) {
   function authenticate(machine, generation, credential) {
@@ -1864,6 +1996,6 @@ function createDeviceLifecycleAdapter2(lifecycle, channels, services) {
   };
   return { backend, adapter: createLuvusWireAdapter2(backend) };
 }
-export { closeSession, OFFER, providerHealth, ready, ReceiveWindow, ChannelRegistry2, createGateway2, createConnector2, createDeviceLifecycle2, createDeviceLifecycleAdapter2 };
+export { closeSession, OFFER, providerHealth, ready, ReceiveWindow, ChannelRegistry2, createGateway2, createConnector2, PairingAdmin2, createPairingDelivery2, createDeviceLifecycle2, createDeviceLifecycleAdapter2 };
 
-//# debugId=4431B5C43A54FCC664756E2164756E21
+//# debugId=1F0ADD524CEDDA6964756E2164756E21

package/dist/src/chunk-5w5srj3b.js

@@ -0,0 +1,93 @@
+// @bun
+import {
+  fail2,
+  object2,
+  fields2,
+  id2,
+  boundedJson2
+} from "./chunk-qt9m2kg2.js";
+import {
+  privatePath,
+  privateFile,
+  createPrivate,
+  syncParentDirectory
+} from "./chunk-0y5542k8.js";
+
+// src/transport/credentials.ts
+import { constants, closeSync, fstatSync, openSync, readFileSync, renameSync, unlinkSync } from "fs";
+import { randomUUID } from "crypto";
+function validate(value) {
+  const v = object2(value);
+  fields2(v, ["machine_id", "recovery_generation", "credential"]);
+  id2(v.machine_id);
+  id2(v.recovery_generation);
+  if (typeof v.credential !== "string" || !/^[A-Za-z0-9_-]{32,256}$/.test(v.credential)) {
+    fail2("invalid_device_credential");
+  }
+  return v;
+}
+function saveCredential2(path, input, replace = false) {
+  privatePath(path);
+  const raw = boundedJson2(validate(input), 4096);
+  if (!replace) {
+    createPrivate(path, raw);
+    syncParentDirectory(path, true);
+    return;
+  }
+  privateFile(path);
+  const temporary = path + "." + randomUUID();
+  try {
+    createPrivate(temporary, raw);
+    renameSync(temporary, path);
+    syncParentDirectory(path, true);
+  } finally {
+    try {
+      unlinkSync(temporary);
+    } catch {}
+  }
+}
+function createFileCredentialSink2(path, expected, replace = false) {
+  privatePath(path);
+  id2(expected.machine_id);
+  id2(expected.recovery_generation);
+  let closed = false;
+  let used = false;
+  return {
+    async deliver(input, signal, context) {
+      if (closed || used || signal.aborted) {
+        fail2("credential_sink_closed");
+      }
+      if (input.machine_id !== expected.machine_id || input.recovery_generation !== expected.recovery_generation) {
+        fail2("credential_sink_mismatch");
+      }
+      used = true;
+      saveCredential2(path, input, replace);
+      return { ...context, machine_id: input.machine_id, recovery_generation: input.recovery_generation };
+    },
+    close() {
+      closed = true;
+    }
+  };
+}
+function loadCredential2(path) {
+  privatePath(path);
+  privateFile(path);
+  const fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+  try {
+    const st = fstatSync(fd);
+    if (!st.isFile() || st.nlink !== 1 || process.platform !== "win32" && ((st.mode & 511) !== 384 || st.uid !== process.getuid?.()) || st.size > 4096) {
+      fail2("unsafe_storage_file");
+    }
+    try {
+      return validate(JSON.parse(readFileSync(fd, "utf8")));
+    } catch {
+      fail2("invalid_device_credential");
+    }
+  } finally {
+    closeSync(fd);
+  }
+}
+
+export { saveCredential2, createFileCredentialSink2, loadCredential2 };
+
+//# debugId=CE63F3C4843F109E64756E2164756E21

package/dist/src/{chunk-d4ejrtjq.js → chunk-6n6b1xpy.js}

@@ -14,7 +14,7 @@ import {
 } from "./chunk-qt9m2kg2.js";
 import {
   ConnectorCapacityError
-} from "./chunk-57ayxqnb.js";
+} from "./chunk-pksaqt9a.js";
 
 // src/runtime/connector-attempts.ts
 var CONNECTOR_MAX_DEADLINE_MS2 = 10 * 60000;

package/dist/src/{chunk-ympzv86c.js → chunk-6w4g9fw8.js}

@@ -931,7 +931,7 @@ function createManagementHandler2(options) {
       return failure2("invalid_arguments", 400);
     }
     const context = { ...identity, wait_signal: controller.signal };
-    const reply = await options.service.execute(operation, args, context);
+    const reply = operation.startsWith("resources/") ? await options.resources.execute(operation.slice("resources/".length), args, identity, controller.signal) : await options.service.execute(operation, args, context);
     if (controller.signal.aborted) {
       return failure2("outcome_unconfirmed", 503);
     }
@@ -952,7 +952,7 @@ function createManagementHandler2(options) {
       } catch {
         return failure2("forbidden", 403);
       }
-      if (!url.pathname.startsWith("/admin/v1/actions/")) {
+      if (!url.pathname.startsWith("/admin/v1/actions/") && !url.pathname.startsWith("/admin/v1/resources/")) {
         return reads.fetch(request);
       }
       let size = 0;
@@ -967,7 +967,19 @@ function createManagementHandler2(options) {
       if (request.method !== "POST") {
         return failure2("method_not_allowed", 405);
       }
-      const operation = routes.get(url.pathname);
+      const resource = url.pathname.startsWith("/admin/v1/resources/") ? url.pathname.slice("/admin/v1/resources/".length) : null;
+      const operation = resource !== null && options.resources && [
+        "tokens_list",
+        "tokens_create",
+        "tokens_delete",
+        "tokens_rotate",
+        "pairing_codes_list",
+        "pairing_codes_create",
+        "pairing_codes_revoke",
+        "pairings_list",
+        "pairings_delete",
+        "devices_delete"
+      ].includes(resource) ? `resources/${resource}` : routes.get(url.pathname);
       if (!operation) {
         return failure2("not_found", 404);
       }
@@ -1184,4 +1196,4 @@ function createManagementSessionAdapter2(options) {
 }
 export { createManagementReadHandler2, startManagementReadListener2, startManagementListener2, loadManagementAssets2, ManagementServiceError2, StoreManagementWriteService2, createManagementHandler2, createManagementSessionAdapter2 };
 
-//# debugId=5F343A955701396E64756E2164756E21
+//# debugId=77B098389207C26664756E2164756E21

package/dist/src/{chunk-smpevv7n.js → chunk-73aq2qkz.js}

@@ -2,6 +2,9 @@
 import {
   canonical2
 } from "./chunk-d71r315c.js";
+import {
+  cliMessages2
+} from "./chunk-pgs9jp6t.js";
 
 // src/mcp/schema.ts
 import { Ajv } from "ajv";
@@ -61,19 +64,9 @@ var schemas = {
   runtime_result_read: object({ result_id: id, cursor, max_bytes: { type: "integer", minimum: 1, maximum: MAX_RESULT_BYTES2 } }, ["result_id"]),
   runtime_response_discard: object({ call_id: id }, ["call_id"])
 };
-var descriptions = {
-  machines_list: "\u5217\u51FA\u5F53\u524D caller \u53EF\u89C1\u7684\u8BBE\u5907\uFF1B\u5206\u9875\u548C\u8BA1\u6570\u987B\u7ECF\u8FC7\u5F53\u524D ACL\u3002",
-  machines_get: "\u6309\u7A33\u5B9A ID \u6216\u7CBE\u786E\u540D\u79F0\u8BFB\u53D6\u53EF\u89C1\u8BBE\u5907\u3002",
-  providers_list: "\u5217\u51FA\u6307\u5B9A\u8BBE\u5907\u4E0B\u5F53\u524D caller \u53EF\u89C1\u7684\u5DF2\u914D\u7F6E provider\uFF1B\u4E0D\u8FD4\u56DE\u672C\u673A\u914D\u7F6E\u3002",
-  providers_get: "\u8BFB\u53D6\u663E\u5F0F provider \u7684 kind\u3001revision \u548C readiness\u3002",
-  runtime_discover: "\u53D1\u73B0\u663E\u5F0F Target/revision \u7684\u6709\u6548\u80FD\u529B\u53CA\u6765\u6E90\uFF1B\u4E0D\u6388\u4E88\u6267\u884C\u6743\u9650\u3002",
-  runtime_describe: "\u63CF\u8FF0\u663E\u5F0F Target/revision \u4E0B\u7CBE\u786E\u65B9\u6CD5\u7684\u539F\u751F\u53C2\u6570\u3001\u5206\u7C7B\u548C\u9650\u5236\u3002",
-  runtime_call: "\u63D0\u4EA4\u4E00\u6B21\u663E\u5F0F Target/revision/\u5951\u7EA6\u7684\u539F\u751F\u8C03\u7528\u3002deadline \u662F\u7EDD\u5BF9\u6BEB\u79D2\u671F\u9650\uFF0Cwait_ms \u53EA\u63A7\u5236\u77ED\u7B49\uFF1B\u4E0D\u91CD\u8BD5\u6216\u7BA1\u7406 provider\u3002",
-  runtime_call_get: "\u6309\u5F53\u524D\u5F52\u5C5E\u3001\u53CC\u7AEF\u7B56\u7565\u548C\u5185\u5BB9\u95E8\u7981\u8BFB\u53D6\u8C03\u7528\uFF1B\u77ED\u7B49\u5230\u671F\u4E0D\u6539\u53D8\u6267\u884C\u671F\u9650\u3002",
-  runtime_call_cancel: "\u8BF7\u6C42\u505C\u6B62\u7B49\u5F85\u6216\u6865\u63A5\uFF1B\u4EC5\u62A5\u544A\u670D\u52A1\u53EF\u786E\u8BA4\u7A0B\u5EA6\uFF0C\u4E0D\u627F\u8BFA\u539F\u751F\u56DE\u6EDA\u3002",
-  runtime_result_read: "\u6309\u5F53\u524D\u8BFB\u53D6\u6388\u6743\u548C\u671F\u9650\u8BFB\u53D6\u6709\u754C\u7ED3\u679C\u9875\uFF1Bcursor \u7531\u670D\u52A1\u7ED1\u5B9A caller \u548C\u539F\u7ED3\u679C\u3002",
-  runtime_response_discard: "\u5904\u7406\u5B8C\u7ED3\u679C\u540E\u663E\u5F0F\u5220\u9664\u539F\u6587\u4E0E\u53E5\u67C4\u5E76\u91CA\u653E\u8BFB\u53D6\u5BB9\u91CF\uFF1B\u5FC5\u987B\u9A8C\u8BC1\u5F52\u5C5E\u3001\u5F53\u524D\u539F\u65B9\u6CD5\u7B56\u7565\u53CA\u72EC\u7ACB discard_response \u6743\u9650\u3002\u8BFB\u53D6\u5230 EOF \u4E0D\u4F1A\u81EA\u52A8\u5220\u9664\u7ED3\u679C\u3002"
-};
+function toolDescription(name, language = "en") {
+  return cliMessages2(language)["mcp.tool." + name];
+}
 var readOnly = new Set([
   "machines_list",
   "machines_get",
@@ -89,10 +82,10 @@ var validators = new Map(Object.entries(schemas).map(([name, schema]) => [name,
 function toolNames2() {
   return Object.keys(schemas);
 }
-function toolDefinition2(name) {
+function toolDefinition2(name, language = "en") {
   return {
     name,
-    description: descriptions[name],
+    description: toolDescription(name, language),
     inputSchema: structuredClone(schemas[name]),
     outputSchema: {
       type: "object",
@@ -178,4 +171,4 @@ class NativeRequestNotDispatchedError extends FacadeServiceError2 {
 
 export { MAX_MCP_BYTES2, MAX_RESULT_BYTES2, MAX_WAIT_MS2, TOOLS_PAGE_SIZE, toolNames2, toolDefinition2, isToolName, parseToolArguments2, SERVICE_ERROR_CODES, FacadeServiceError2, NativeRequestNotDispatchedError };
 
-//# debugId=08E91064C7F6137064756E2164756E21
+//# debugId=E037D9DEF799B17A64756E2164756E21

package/dist/src/{chunk-0ake7e4r.js → chunk-8c9yc0ge.js}

@@ -14,8 +14,11 @@ import {
   assertUsage,
   GATEWAY_LOCK_FORMAT2,
   Store2
-} from "./chunk-nyn75b8v.js";
-import"./chunk-09f9q26d.js";
+} from "./chunk-av31bx1e.js";
+import"./chunk-vdwzb63d.js";
+import {
+  cliMessages2
+} from "./chunk-pgs9jp6t.js";
 import {
   readRuntimeConfig2
 } from "./chunk-bspzg8er.js";
@@ -33,8 +36,8 @@ import {
 import"./chunk-3nnahj0j.js";
 import {
   lockContent
-} from "./chunk-zdxww7ms.js";
-import"./chunk-0pewfj89.js";
+} from "./chunk-h3xyq7zk.js";
+import"./chunk-qp8tgms2.js";
 import {
   privatePath,
   databasePath,
@@ -131,17 +134,6 @@ function inspectStorage(input) {
 }
 
 // src/cli/storage-command.ts
-var STORAGE_HELP = `\u7528\u6CD5\uFF1A
-  rovloom doctor --role gateway|connector [--config /absolute/config.json] [--json]
-  rovloom storage check --role gateway [--config /absolute/config.json] [--json]
-  rovloom storage backup --role gateway --output /path/to/gateway.backups/snapshot.db [--config /absolute/config.json] [--json]
-  rovloom storage resume --role gateway [--config /absolute/config.json] [--json]
-
-Gateway \u547D\u4EE4\u987B\u5148\u505C\u6B62\u670D\u52A1\uFF1B\u6CBF\u7528\u540C\u4E00\u5199\u9501\uFF0C\u62D2\u7EDD\u6D3B\u52A8\u6216\u65E0\u6CD5\u5224\u5B9A\u7684\u6301\u6709\u8005\u3002
-check \u53EA\u8BFB\uFF1Bbackup \u4EC5\u4F7F\u7528\u771F\u5B9E\u72B6\u6001\u76EE\u5F55\u540C\u7EA7\u7684 <state>.backups \u666E\u901A\u76EE\u5F55\uFF0C\u5BFC\u51FA\u8131\u654F\u5FEB\u7167\uFF08\u4E0D\u542B\u539F\u6587\u53CA\u6709\u6548\u51ED\u636E\uFF09\uFF0C\u5B8C\u6574\u72B6\u6001\u9700\u53E6\u884C\u79BB\u7EBF\u5907\u4EFD\u3002
-resume \u662F\u672C\u673A\u64CD\u4F5C\u5458\u663E\u5F0F\u6279\u51C6\u7684\u89E3\u9664\u964D\u7EA7\uFF0C\u5B8C\u6574\u6027\u3001\u65F6\u949F\u6216\u9884\u7B97\u4E0D\u6B63\u5E38\u65F6\u4ECD\u62D2\u7EDD\u3002
-Connector doctor \u53EA\u68C0\u67E5\u914D\u7F6E\u53CA managed \u72B6\u6001\uFF0C\u4E0D\u542F\u52A8 native\uFF0C\u4E5F\u4E0D\u58F0\u660E native \u5C31\u7EEA\u3002
-`;
 function parse(args) {
   const action = args[0] === "doctor" ? "doctor" : args[1];
   if (!["doctor", "check", "backup", "resume"].includes(action ?? "")) {
@@ -201,7 +193,7 @@ async function handleStorageCommand(args, io, environment) {
   let json = args.includes("--json");
   try {
     if (args.length === 2 && args[1] === "--help") {
-      io.stderr.write(STORAGE_HELP);
+      io.stderr.write(cliMessages2(io.language)["help.storage"]);
       return 0;
     }
     const flags = parse(args);
@@ -318,4 +310,4 @@ export {
   handleStorageCommand
 };
 
-//# debugId=007190958BDB411E64756E2164756E21
+//# debugId=2C436BD5D6042D5D64756E2164756E21

package/dist/src/{chunk-57ayxqnb.js → chunk-8fy8w7ds.js}

@@ -3,27 +3,6 @@ import {
   fail2
 } from "./chunk-qt9m2kg2.js";
 
-// src/connector/luvus/types.ts
-class LuvusAdapterError2 extends Error {
-  code;
-  outcome;
-  constructor(code, outcome = "not_dispatched") {
-    super(code);
-    this.code = code;
-    this.outcome = outcome;
-    this.name = "LuvusAdapterError";
-  }
-}
-
-// src/connector/capacity.ts
-class ConnectorCapacityError extends LuvusAdapterError2 {
-  capacity;
-  constructor(resource, reclaimAt) {
-    super(resource.startsWith("claim_") ? "claim_capacity" : "connector_attempt_capacity");
-    this.capacity = Object.freeze({ resource, reclaim_at: reclaimAt });
-  }
-}
-
 // src/connector/local/linux-peer.ts
 import { createRequire } from "module";
 import { Socket } from "net";
@@ -179,6 +158,6 @@ function assertTerminalExecutionAllowed(kind, request, enabled = false) {
   }
 }
 
-export { LuvusAdapterError2, ConnectorCapacityError, readLinuxPeer, pinTerminalExecution, terminalExecutionCatalog, assertTerminalExecutionAllowed };
+export { readLinuxPeer, pinTerminalExecution, terminalExecutionCatalog, assertTerminalExecutionAllowed };
 
-//# debugId=D0819F737EC4D21B64756E2164756E21
+//# debugId=190A991502F4F00A64756E2164756E21

package/dist/src/{chunk-64ftwe9b.js → chunk-8ykrqhxh.js}

@@ -41,7 +41,13 @@ function defaults(role, environment, initialization) {
     return { ...config, native: { ...config.native, provider: initialization.provider } };
   }
   if (config.role === "gateway" && initialization.container) {
-    return { ...config, mcp_hostname: "0.0.0.0", device_hostname: "0.0.0.0", management_hostname: "0.0.0.0" };
+    return {
+      ...config,
+      mcp_hostname: "0.0.0.0",
+      device_hostname: "0.0.0.0",
+      management_hostname: "0.0.0.0",
+      management_lan: true
+    };
   }
   return config;
 }
@@ -98,4 +104,4 @@ function readOrCreateRoleConfig(role, path, environment, initialization = {}) {
 
 export { privateDirectory, readOrCreateRoleConfig };
 
-//# debugId=98F38BF75586543964756E2164756E21
+//# debugId=2B2959D62D3C434064756E2164756E21