talos-code 0.0.1 → 0.2.0

package/dist/i18n/en/credentials.js

@@ -0,0 +1,92 @@
+/*
+ * R2 lane K: provider keys, the missing-key sentence, the credential store and `talos model list` (gate E1, E8, E13, E14).
+ * ⛔ `key.bench.cause.*` is keyed by the kernel's bench code (`provider-credential-store.mjs`, `PANCHINE_PROVIDER_MS`): the ids
+ *   carry the kernel's Italian codes so that the mapping is by code, never by text (gate E4); only the values reach the screen.
+ */
+export const credentials = {
+    /* E8 / Q-R2-7: the ONE missing-key sentence, on every path (`provider/missing-key.ts`). */
+    'key.missing': 'No API key for {provider}. Set {env} or run `talos provider set-key {id}`.',
+    /* Only for a provider whose registry names no environment variable: the sentence never invents one. */
+    'key.missing.noEnv': 'No API key for {provider}. Run `talos provider set-key {id}`.',
+    'key.origin.saved.system': 'Key for {provider}: saved in the system keyring.',
+    'key.origin.saved.memory': 'Key for {provider}: kept in memory for this process only.',
+    'key.origin.environment.approved': 'Key for {provider}: environment variable {variable}, approved earlier.',
+    'key.origin.environment.unasked': 'Key for {provider}: environment variable {variable}, used without asking because this run is non-interactive.',
+    'key.origin.unknownVariable': '(unknown)',
+    /* E1: the two `BENCH_CAUSES` tables (`provider/health.ts`, `tui/catalog-service.ts`), deduplicated. */
+    'key.bench.cause.traffico': 'rate limit',
+    'key.bench.cause.credenziale': 'key refused',
+    'key.bench.cause.credito': 'out of credit',
+    'key.bench.cause.rete': 'network error',
+    'key.bench.cause.timeout-fornitore': 'provider timeout',
+    'key.bench.cause.guasto-fornitore': 'provider error',
+    'key.bench.cause.flusso-interrotto': 'interrupted stream',
+    'key.benched.one': 'The {provider} key is benched',
+    'key.benched.other': 'All {count} {provider} keys are benched',
+    'key.benched.until': '{state} until {time}',
+    'key.benched.because': '{state} ({cause})',
+    'key.benched.remedy.until': 'Wait until then, or add another key with /provider.',
+    'key.benched.remedy': 'Wait, or add another key with /provider.',
+    'key.benched.status': '{state}. {remedy}',
+    'key.benched.refusal': '{state}, so nothing was sent to {provider}. {remedy}',
+    'key.remedy.replaceKey': '{provider} rejected the current credential. Replace or re-authorize the key.',
+    'key.remedy.configureProvider': 'Configure {provider} before using this provider.',
+    'key.remedy.configureEndpoint': 'Configure a valid {provider} endpoint.',
+    'key.remedy.checkEndpoint': '{provider} could not be reached. Check the endpoint and network, then retry.',
+    'key.remedy.retry': '{provider} returned an error. Retry after checking provider status and configuration.',
+    'key.remedy.completeConfiguration': 'Complete the {provider} provider configuration before using it.',
+    'key.remedy.inspect': 'TALOS cannot verify {provider} with a normal health probe; inspect its configuration before relying on the connection state.',
+    /* E1: `KEYRING_TEXT` (`provider/system-keyring.ts`), unchanged words. */
+    'store.keyring.moduleMissing': '@napi-rs/keyring is not installed where TALOS loads it from ({roots})',
+    'store.keyring.outsideApprovedRoots': '@napi-rs/keyring resolved outside the approved roots, at {location}; TALOS loads it only from {roots}',
+    'store.keyring.unresolved': '@napi-rs/keyring could not be resolved: {detail}',
+    'store.keyring.loadFailed': '@napi-rs/keyring at {location} failed to load: {detail}',
+    'store.keyring.invalidModule': '@napi-rs/keyring at {location} does not export Entry',
+    'store.keyring.probeWriteFailed': 'the keyring probe write failed: {detail}',
+    'store.keyring.probeReadFailed': 'the keyring probe read failed: {detail}',
+    'store.keyring.probeMismatch': 'the keyring probe did not read back the value it wrote',
+    /* E13 / Q-R2-5: the credential store, named by `doctor` (Q-R2-9: wording only). */
+    'store.name.system.win32': 'Windows Credential Manager',
+    'store.name.system.darwin': 'macOS Keychain',
+    'store.name.system.other': 'the system keyring',
+    'store.name.memory': 'in memory, this process only',
+    'store.source.environment': 'set by {variable}',
+    'store.source.config': 'set by credentials.store in the configuration',
+    'store.source.testProfile': 'test profile',
+    'store.source.default': 'default',
+    'store.line': '{store} ({source})',
+    /* R4 Q-R4-15 (a): the system store is per operating-system user; doctor says who shares it. */
+    'store.shared.win32': 'shared by every TALOS of this Windows user',
+    'store.shared.darwin': 'shared by every TALOS of this macOS user',
+    'store.shared.other': 'shared by every TALOS of this user',
+    'store.refused.line': 'refused: {message}',
+    'store.refusedInTest': 'This is a test profile, so TALOS did not open the real credential store ({store}). Set {variable}=memory.',
+    'store.invalid': '"{value}" is not a credential store TALOS knows. Set {variable} to system or memory.',
+    'store.saved.system': 'Saved to the system keyring.',
+    'store.saved.memory': 'Kept in memory for this process only; it is gone when TALOS exits.',
+    /* E14 / E-03: human `talos model list` (the JSON output is unchanged). */
+    'key.models.column.model': 'MODEL',
+    'key.models.column.context': 'CONTEXT',
+    'key.models.column.tools': 'TOOLS',
+    'key.models.column.reasoning': 'REASONING',
+    'key.models.column.availability': 'AVAILABILITY',
+    'key.models.yes': 'yes',
+    'key.models.no': 'no',
+    'key.models.unknown': '-',
+    'key.models.source.live': 'live',
+    'key.models.source.configured': 'configured',
+    'key.models.source.documented': 'documented',
+    'key.models.source.unknown': 'not verified',
+    'key.models.none': 'No models are known for this provider.',
+    'key.models.use': 'Use one with: talos model use <MODEL>',
+    /* P21: `talos provider login openrouter`. */
+    'key.login.paste': 'Open this address in a browser on any machine, sign in to OpenRouter, then paste the code it shows:',
+    'key.login.opened': 'Opening OpenRouter in your browser. If it did not open, use this address:',
+    'key.login.open': 'Open this address in your browser and sign in to OpenRouter:',
+    'key.login.waiting': 'Waiting for the browser (10 min). Ctrl+C cancels; on another machine, run it again with --paste.',
+    'key.login.codePrompt': 'Code: ',
+    'key.login.failed': 'OpenRouter sign-in did not complete ({code}).',
+    'key.login.signedIn': 'Signed in to OpenRouter. {message} {saved}',
+    'key.login.saved': 'Saved.',
+    'key.login.notSaved': 'The key was not saved.',
+};

package/dist/i18n/en/errors.js

@@ -0,0 +1,267 @@
+/*
+ * R2 lane E: error anatomy (what · what to do · where to look) and the English for kernel codes (gate E4-E7, Q-R2-2/4).
+ * Every failure the screen shows is one of these families or one of the mapped codes below; the kernel's own words (Italian)
+ * are never a value here. `{id}`/`{provider}` name the provider, `{seconds}` a known wait (E7: never invented, E15).
+ */
+export const errors = {
+    'error.generic.what': 'TALOS could not finish this action.',
+    'error.generic.where': 'talos logs',
+    'error.prefix': 'Error',
+    'error.trace': 'Trace {trace} · component {component}',
+    /* Families: the fallback for a code with no entry of its own (Q-R2-2), chosen by the same taxonomy as the exit code. */
+    'error.family.internal.what': 'TALOS could not finish this action.',
+    'error.family.internal.todo': 'Try again; if it happens again, keep the log for a report.',
+    'error.family.permission.what': 'TALOS did not do this because it is not allowed here.',
+    'error.family.permission.todo': 'Review the permission rules, then try again.',
+    'error.family.permission.where': 'talos config permissions',
+    'error.family.key.what': 'The provider key could not be used.',
+    'error.family.key.todo': 'Check the key saved for this provider.',
+    'error.family.key.where': 'talos provider list',
+    'error.family.provider.what': 'The model provider returned an error.',
+    'error.family.provider.todo': 'Try again in a moment, or pick another model with /model.',
+    'error.family.extension.what': 'An extension (MCP server, hook or plugin) failed.',
+    'error.family.extension.todo': 'Check the extension, then try again.',
+    'error.family.timeout.what': 'This took too long and was stopped.',
+    'error.family.timeout.todo': 'Try again; if it keeps timing out, check the connection.',
+    'error.family.session.what': 'The session could not be used.',
+    'error.family.session.todo': 'Pick a session from the list.',
+    'error.family.session.where': 'talos session list',
+    'error.family.update.what': 'The update could not be completed.',
+    'error.family.update.todo': 'Try again later.',
+    'error.family.usage.what': 'The command or the configuration is not valid.',
+    'error.family.usage.todo': 'Check the command, its options and the configuration.',
+    'error.family.usage.where': 'talos --help',
+    'error.family.interrupted.what': 'Stopped at your request.',
+    'error.where.doctor': 'talos doctor',
+    'error.where.providerTest': 'talos provider test {id}',
+    'error.where.providerList': 'talos provider list',
+    /* Provider failures (PROVIDER_REQUEST_ERROR × classe × HTTP status). 403 is never "the key is wrong" (E7). */
+    'error.provider.rateLimited.what': 'The model provider is limiting requests (HTTP 429); TALOS retried and then stopped.',
+    'error.provider.rateLimited.todo': 'Wait a moment and send the message again, or pick another model with /model.',
+    'error.provider.rateLimited.todoKnown': 'Wait {seconds} s and send the message again, or pick another model with /model.',
+    /* R5a lane R (Q-R5-6): the provider asked for a wait longer than the 60 s TALOS waits by itself, so it did not retry. */
+    'error.provider.rateLimited.whatLongWait': 'The model provider is limiting requests (HTTP 429) and asked TALOS to wait {seconds} s, longer than it waits by itself.',
+    'error.provider.credential.what': 'The model provider refused the credentials or the access (HTTP 401 or 403).',
+    'error.provider.credential.todo': 'Check that the key is valid and may use this model.',
+    'error.provider.unauthorized.what': 'The model provider rejected the API key (HTTP 401).',
+    'error.provider.unauthorized.todo': 'Replace the key with `talos provider set-key {id}`.',
+    'error.provider.forbidden.what': 'The model provider denied access to this model or action (HTTP 403).',
+    'error.provider.forbidden.todo': 'Check on the provider\'s site that your account may use this model, or pick another model with /model.',
+    'error.provider.notFound.what': 'The model provider does not know this model or address (HTTP 404).',
+    'error.provider.notFound.todo': 'Check the model with /model or `talos model list`, then send the message again.',
+    'error.provider.notAccepted.what': 'The model provider did not accept the request (for example an unknown model, HTTP 400 or 404).',
+    'error.provider.notAccepted.todo': 'Check the model with /model or `talos model list`, then send the message again.',
+    'error.provider.credit.what': 'The model provider account has no credit left for this request.',
+    'error.provider.credit.todo': 'Add credit on the provider\'s site, or pick another model with /model.',
+    'error.provider.network.what': 'TALOS could not reach the model provider, or the connection dropped.',
+    'error.provider.network.todo': 'Check the network connection and send the message again.',
+    'error.provider.timeout.what': 'The model provider did not answer in time.',
+    'error.provider.timeout.todo': 'Send the message again; if it keeps happening, pick another model with /model.',
+    'error.provider.serverError.what': 'The model provider had an internal error (HTTP 5xx).',
+    'error.provider.serverError.todo': 'Try again in a moment; the problem is on the provider\'s side.',
+    'error.provider.streamCut.what': 'The model provider\'s answer stopped halfway.',
+    'error.provider.streamCut.todo': 'Send the message again.',
+    'error.provider.context.what': 'The conversation is too long for this model.',
+    'error.provider.context.todo': 'Start a new session, or pick a model with a larger context with /model.',
+    /* Run outcomes (RunError.code). The stop point comes from the CLI's own state, never from the kernel text (E15). */
+    /* R3 Q-R3-8: a person's interrupt is neutral: `Interrupted · <stop point>` (the stop point is R2's words). */
+    'error.run.interrupted.what': 'Interrupted',
+    'error.run.interruptedWhile.what': 'Interrupted · {while}',
+    'error.run.while.answering': 'while the model was answering',
+    'error.run.while.approval': 'while TALOS was waiting for your approval for {tool}',
+    'error.run.while.tool': 'while {tool} was running',
+    'error.run.noAnswer.what': 'The model stopped without an answer.',
+    'error.run.noAnswer.todo': 'Send the message again, or pick another model with /model.',
+    'error.run.turnsExhausted.what': 'TALOS used all its turns without finishing the task.',
+    'error.run.turnsExhausted.todo': 'Send "continue" to go on, or split the task into smaller steps.',
+    'error.run.repetition.what': 'The model asked for the same tool call again and again, so TALOS stopped it.',
+    'error.run.repetition.todo': 'Send the message again, or pick another model with /model.',
+    'error.run.premiseDenied.what': 'TALOS stopped because a premise of the task turned out to be false.',
+    'error.run.premiseDenied.todo': 'Check the task description and send it again.',
+    'error.code.PROVIDER_FALLBACK_BUSY.what': 'Another answer of this session is still running.',
+    'error.code.PROVIDER_FALLBACK_BUSY.todo': 'Wait for it to finish, or press Esc to stop it.',
+    /* Tool refusals, worded from the permission `via` of the receipt (the Italian `motivo` is kernel text). */
+    'error.refused.notApproved': 'Not run: you did not approve it.',
+    'error.refused.toolOff': 'Not run: this tool is turned off for this session.',
+    'error.refused.readOnly': 'Not run: the session is read-only.',
+    'error.refused.research': 'Not run: a deep research may only save its own report.',
+    'error.refused.workspaceWrite': 'Not run: this session may only write files inside the workspace.',
+    'error.refused.stopped': 'Not run: you stopped the run while TALOS was asking.',
+    'error.refused.noRecovery': 'Not run: this command cannot be undone, so TALOS never runs it.',
+    'error.refused.checkpoint': 'Not run: TALOS could not save a checkpoint before the change.',
+    'error.refused.generic': 'Not run: the action was refused.',
+    /* R5a lane R (S10, gate finding 15): who decided that a tool did not run. `person` only when the person was asked. */
+    'error.denial.person': 'Not run: you did not approve it.',
+    'error.denial.rule': 'Not run: denied by the rule {rule}.',
+    'error.denial.ruleScoped': 'Not run: denied by the rule {rule} ({scope} settings).',
+    'error.denial.ruleUnnamed': 'Not run: denied by a permission rule.',
+    'error.denial.because': 'Not run: {reason}',
+    'error.denial.reason.unsupportedShell': 'TALOS cannot check this command part by part (unsupported shell composition), so it never runs it.',
+    'error.denial.reason.pathOutside': 'the file is outside the project.',
+    'error.denial.reason.planMode': 'plan mode allows only read-only actions.',
+    'error.denial.reason.noAsking': 'this mode never asks, and the action needs approval.',
+    'error.denial.reason.autoDenied': 'the automatic classifier refused it.',
+    /* R5a lane R (S10): the kernel's refusal sentences in English, on the screen's copy only (kernel-map.ts). */
+    'error.refusalReason.notApproved': 'the approval request was answered no.',
+    'error.refusalReason.readOnly': 'the session is read-only: no write, command or document is allowed right now.',
+    'error.refusalReason.toolOff': '{tool} is turned off for this session.',
+    'error.refusalReason.research': 'a deep research may read, search and browse, and write only its own report, so {tool} is not allowed.',
+    'error.refusalReason.researchPath': 'a research report is saved only in that research\'s folder, and {path} is not inside it.',
+    'error.refusalReason.workspaceTool': 'this session may only write files inside the workspace, so {tool} is not allowed.',
+    'error.refusalReason.workspacePath': '{path} is not inside the current workspace, and this session may only write inside it.',
+    'error.refusalReason.noChannel': '{tool} needs approval, but this session has no way to ask for it.',
+    'error.refusalReason.stoppedAsking': 'stopped at your request while TALOS was waiting for your approval for {tool}.',
+    'error.refusalReason.noPath': '(no path)',
+    'error.notice.keyRefused': 'The {provider} key was refused by the provider and is paused. Check it with `talos provider list`.',
+    'error.notice.switchRateLimited': '{from} is limiting requests: continuing with {to} · model {model}',
+    'error.notice.switchNotAnswering': '{from} is not answering: continuing with {to} · model {model}',
+    /* R3 Q-R3-8 (R3-INT): the kernel's stop and timeout sentences in a tool result, shown in English (display only). */
+    'error.toolStop.whileRunning': 'Interrupted while it was running.',
+    'error.toolStop.notRun': 'Interrupted before it started; this tool was not run.',
+    'error.toolStop.timedOut': 'Stopped after {seconds} seconds: it did not finish by itself.',
+    'error.warning.untranslated': 'TALOS reported a notice that has no English text yet.',
+    'error.warning.untranslatedWhere': 'the full notice is in `talos logs`',
+    /* Mapped codes (CLI and kernel). */
+    'error.code.PROJECT_TRUST_REQUIRED.what': 'This folder is not trusted, so TALOS did not load its instructions or tools.',
+    'error.code.PROJECT_TRUST_REQUIRED.todo': 'Review it with `talos project status`, then trust it with `talos project trust`.',
+    'error.code.PROJECT_TRUST_INVALIDATED.what': 'This folder changed since you trusted it, so TALOS did not load the change.',
+    'error.code.PROJECT_TRUST_INVALIDATED.todo': 'Review it with `talos project status`, then trust it again with `talos project trust`.',
+    'error.code.PROJECT_TRUST.where': 'talos project status',
+    'error.code.SANDBOX_REQUIRED_UNAVAILABLE.what': 'The Windows sandbox is not available, so the command did not run.',
+    'error.code.SANDBOX_REQUIRED_UNAVAILABLE.todo': 'See what is missing in the sandbox section of `talos doctor`.',
+    'error.code.MXC_BACKEND_UNAVAILABLE.what': 'The Windows sandbox could not be started for this command.',
+    'error.code.MXC_BACKEND_UNAVAILABLE.todo': 'See the sandbox section of `talos doctor`.',
+    /* R3 Q-R3-20: quitting stops a sandbox check still running; it gives no result and is never saved. */
+    'error.code.PROCESS_TREE_PROBE_ABORTED.what': 'The sandbox check was stopped because TALOS was closing, so it gave no result.',
+    'error.code.PROCESS_TREE_PROBE_ABORTED.todo': 'Nothing to do: TALOS checks the sandbox again the next time it starts.',
+    'error.code.ABORT_ERR.what': 'This was stopped before it finished.',
+    'error.code.ABORT_ERR.todo': 'Run it again if you still need it.',
+    'error.code.RULE_COMMAND_UNSUPPORTED.what': 'This command cannot be split into parts TALOS can judge, so no rule is saved for it.',
+    'error.code.RULE_COMPOUND_COMMAND.what': 'A command made of several parts is not remembered as a rule.',
+    'error.code.RULE_UNREADABLE.what': 'The rule for this request could not be read back, so it is not saved.',
+    'error.code.RULE_MATCHES_NOTHING.what': 'The rule for this request would not match the request itself, so it is not saved.',
+    'error.code.RULE.todo': '"Allow always" answers for this session only; approve it again next time.',
+    'error.code.PERMISSION_RULE_INVALID.what': 'A permission rule in the configuration is not valid, so TALOS did not start.',
+    'error.code.PERMISSION_RULE_INVALID.todo': 'Fix or remove the rule in the file named below.',
+    'error.code.RULE_STORE_INVALID.what': 'The project permission settings are not a valid list.',
+    'error.code.RULE_STORE_INVALID.todo': 'Fix the "permissions" entry of the project configuration.',
+    'error.code.FORGE_PACKAGE_SCHEMA_INVALID.what': 'The forged tool package is not valid.',
+    'error.code.FORGE_PACKAGE_SCHEMA_INVALID.todo': 'Check the package against the forge schema, then try again.',
+    'error.code.KEYMAP_INVALID.what': 'The key map in the configuration is not valid.',
+    'error.code.KEYMAP_INVALID.todo': 'Fix the keymap entry of the configuration.',
+    /* R2 integration (lane K codes, gate E13): the credential-store resolver and its configuration key. */
+    'error.code.CREDENTIAL_STORE_INVALID.what': 'The credential store TALOS was asked to use is not one it knows.',
+    'error.code.CREDENTIAL_STORE_INVALID.todo': 'Set TALOS_CREDENTIAL_STORE (or credentials.store in the configuration) to system or memory.',
+    'error.code.CREDENTIAL_STORE_REAL_IN_TEST.what': 'A test profile asked for the real system credential store, so TALOS refused to open it.',
+    'error.code.CREDENTIAL_STORE_REAL_IN_TEST.todo': 'Use TALOS_CREDENTIAL_STORE=memory for tests; the real store is never opened under a test profile.',
+    'error.code.CONFIG_INVALID_CREDENTIAL_STORE.what': 'The credentials.store setting in the configuration is not valid.',
+    'error.code.CONFIG_INVALID_CREDENTIAL_STORE.todo': 'Set credentials.store to system or memory, or remove it.',
+    'error.code.PROJECT_CREDENTIAL_STORE_IGNORED.what': 'The project configuration tried to choose where TALOS keeps your keys, so that setting was ignored.',
+    'error.code.PROJECT_CREDENTIAL_STORE_IGNORED.todo': 'Set credentials.store in your user or project-user configuration, or use TALOS_CREDENTIAL_STORE.',
+    'error.code.CONFIG_INVALID_CREDENTIALS.what': 'The credentials section of the configuration is not valid.',
+    'error.code.CONFIG_INVALID_CREDENTIALS.todo': 'Make credentials an object with a store of system or memory, or remove it.',
+    'error.code.config.where': 'talos config show',
+    'error.code.PROVIDER_STORE_UNAVAILABLE.what': 'The Windows credential store is not available.',
+    'error.code.PROVIDER_STORE_UNAVAILABLE.todo': 'See the credential store line of `talos doctor`.',
+    'error.code.PROVIDER_KEY_REQUIRED.what': 'No key was entered.',
+    'error.code.PROVIDER_KEY_REQUIRED.todo': 'Enter a key before saving it.',
+    'error.code.PROVIDER_KEY_INVALID.what': 'The key is not valid (empty, too long, or with line breaks).',
+    'error.code.PROVIDER_KEY_INVALID.todo': 'Paste the key again, on one line.',
+    'error.code.PROVIDER_KEY_NOT_FOUND.what': 'That key is no longer stored.',
+    'error.code.PROVIDER_KEY_NOT_FOUND.todo': 'Reload the provider list.',
+    'error.code.PROVIDER_POOL_FULL.what': 'This provider already has eight keys.',
+    'error.code.PROVIDER_POOL_FULL.todo': 'Remove a key before adding another one.',
+    'error.code.PROVIDER_RUNTIME_INVALID.what': 'The provider settings are not valid (address, models, command or time limit).',
+    'error.code.PROVIDER_RUNTIME_INVALID.todo': 'Fix the provider settings, then test them.',
+    'error.code.PROVIDER_RUNTIME_UNAVAILABLE.what': 'The provider settings could not be saved.',
+    'error.code.PROVIDER_RUNTIME_UNAVAILABLE.todo': 'Check that the TALOS data folder is writable.',
+    'error.code.PROVIDER_KEY_MISSING.what': 'No API key is available for this provider.',
+    'error.code.PROVIDER_KEY_MISSING.todo': 'Add one with `talos provider set-key <id>`.',
+    'error.code.MODEL_IMAGE_NOT_SUPPORTED.what': 'The selected model does not accept images.',
+    'error.code.MODEL_IMAGE_NOT_SUPPORTED.todo': 'Pick a model with vision with /model.',
+    'error.code.LOCAL_RUNTIME_NOT_READY.what': 'The local model engine is not running.',
+    'error.code.LOCAL_RUNTIME_NOT_READY.todo': 'Start the local engine, or pick another model with /model.',
+    'error.code.RUNTIME_NOT_AVAILABLE.what': 'No model runtime is available for this session.',
+    'error.code.RUNTIME_NOT_AVAILABLE.todo': 'Pick a provider and a model with /provider and /model.',
+    'error.code.NOT_FOUND.what': 'The session was not found.',
+    'error.code.CANCELLED.what': 'Cancelled.',
+    'error.code.TALOS_RUNTIME_NOT_FOUND.what': 'TALOS could not find its runtime files.',
+    'error.code.TALOS_RUNTIME_NOT_FOUND.todo': 'Reinstall TALOS, or run it from its install folder.',
+    'error.code.CLI_USAGE_ERROR.what': 'The command line is not valid.',
+    'error.code.PROVIDER_UNREACHABLE.what': 'TALOS could not reach the model provider.',
+    'error.code.PROVIDER_UNREACHABLE.todo': 'Check the network and the provider address, then try again.',
+    'error.code.PATH_NOT_ALLOWED.what': 'This path is outside the folders TALOS may use.',
+    'error.code.PATH_NOT_ALLOWED.todo': 'Use a path inside the project folder.',
+    'error.code.PLAN_MODE_READ_ONLY.what': 'Plan mode is read-only, so nothing was changed.',
+    'error.code.PLAN_MODE_READ_ONLY.todo': 'Switch out of plan mode to make changes.',
+    'error.code.SESSION_NOT_FOUND.what': 'That session was not found.',
+    /* R5b D1: /export with a word that is neither a format nor a file. */
+    'error.code.EXPORT_USAGE.what': 'That is not a format TALOS can export to.',
+    'error.code.EXPORT_USAGE.todo': 'Use /export md, /export json or /export jsonl, optionally with a file name.',
+    'error.code.EXECUTION_BACKEND_UNAVAILABLE.what': 'No isolation backend is available, so the command did not run.',
+    'error.code.EXECUTION_BACKEND_UNAVAILABLE.todo': 'See the sandbox section of `talos doctor`.',
+    'error.code.RUN_TIMEOUT.what': 'The run went past its time limit and was stopped.',
+    'error.code.RUN_TIMEOUT.todo': 'Give it more time with --timeout, or split the task into smaller steps.',
+    /* R5a lane R: the R5 configuration keys (Q-R5-3, Q-R5-7, Q-R5-9) and the models.dev size bound (gate E7). */
+    'error.code.CONFIG_INVALID_MODELS.what': 'A model override in the configuration is not valid.',
+    'error.code.CONFIG_INVALID_MODELS.todo': 'Write it as "models": {"provider:model": {"contextWindow": 131072}}.',
+    'error.code.CONFIG_INVALID_MODEL_WINDOW.what': 'A model\'s context window or output limit in the configuration is not a number of tokens TALOS can use.',
+    'error.code.CONFIG_INVALID_MODEL_WINDOW.todo': 'Use a whole number between 1024 and 10000000, with the output limit below the window.',
+    'error.code.CONFIG_INVALID_BUSY_INPUT.what': 'The busy-input mode in the configuration is not one TALOS knows.',
+    'error.code.CONFIG_INVALID_BUSY_INPUT.todo': 'Use queue, steer or interrupt.',
+    'error.code.CONFIG_INVALID_REASONING_DISPLAY.what': 'The reasoning display setting in the configuration is not one TALOS knows.',
+    'error.code.CONFIG_INVALID_REASONING_DISPLAY.todo': 'Use collapsed or visible.',
+    'error.code.PROJECT_MODELS_IGNORED.what': 'The project configuration tried to set a model\'s context window, so that setting was ignored.',
+    'error.code.PROJECT_MODELS_IGNORED.todo': 'Set models in your user or project-user configuration.',
+    'error.code.CONFIG_INVALID_CATALOG.what': 'The configuration’s catalog section is not valid: it accepts only modelsDev, true or false.',
+    'error.code.CONFIG_INVALID_CATALOG.todo': 'Run talos config set catalog.modelsDev false (or true), or remove the catalog section.',
+    /* R5b (R5a open 4): the Context Engine's failures a person can meet, in English, with what to do. */
+    'error.code.CTX_CONTEXT_OVERFLOW.what': 'This conversation is too big for the model’s context window, even after compaction.',
+    'error.code.CTX_CONTEXT_OVERFLOW.todo': 'Run /compact or start a new conversation with /clear. If the model’s window is larger than TALOS measured, set it: talos config set models.<provider:model>.contextWindow <tokens>.',
+    'error.code.CTX_TRUNCATED_SUMMARY.what': 'The summary that compacts this conversation was cut off before it finished.',
+    'error.code.CTX_TRUNCATED_SUMMARY.todo': 'Try again; if it keeps happening, choose a model with more output room, or set models.<provider:model>.maxOutputTokens.',
+    'error.code.CTX_SUMMARY_RESPONSE_INVALID.what': 'The summary the model sent back to compact this conversation could not be read.',
+    'error.code.CTX_SUMMARY_RESPONSE_INVALID.todo': 'Try again; if it keeps happening, choose another model for this conversation.',
+    'error.code.CTX_SEGMENT_TOO_LARGE.what': 'Part of this conversation is too large to summarise with this model.',
+    'error.code.CTX_SEGMENT_TOO_LARGE.todo': 'Start a new conversation with /clear, or choose a model with a larger context window.',
+    /* Desktop CE alignment (2026-09-25): the other Context Engine codes a turn or /compact can end with
+       (context-engine/src/engine.mjs, summary.mjs, profiles.mjs). */
+    'error.code.CTX_INVALID_SUMMARY.what': 'The summary the model wrote to compact this conversation was not in the form TALOS asked for, so it was not used.',
+    'error.code.CTX_INVALID_SUMMARY.todo': 'Automatic compaction waits a while before trying again; /compact tries now. If it keeps happening, choose another model for this conversation.',
+    'error.code.CTX_EMPTY_SUMMARY.what': 'The model sent back an empty summary, so this conversation was not compacted.',
+    'error.code.CTX_EMPTY_SUMMARY.todo': 'Try /compact again; if it keeps happening, choose another model for this conversation.',
+    'error.code.CTX_NO_REDUCTION.what': 'The summary did not make this conversation smaller, so the previous context stays in use.',
+    'error.code.CTX_NO_REDUCTION.todo': 'Start a new conversation with /clear, or choose a model with a larger context window.',
+    'error.code.CTX_NOTHING_TO_COMPACT.what': 'There is nothing to compact yet: the conversation has no earlier exchanges to summarise.',
+    'error.code.CTX_NOTHING_TO_COMPACT.todo': 'Nothing to do; compaction becomes possible once the conversation grows.',
+    'error.code.CTX_CONTEXT_TOO_SMALL.what': 'The model’s context window is too small for TALOS’s instructions and the room it keeps for the answer.',
+    'error.code.CTX_CONTEXT_TOO_SMALL.todo': 'Choose a model with a larger window. If its window is larger than TALOS measured, set it: talos config set models.<provider:model>.contextWindow <tokens>.',
+    'error.code.CTX_COMPACTION_FAILED.what': 'Compacting this conversation did not work; the previous context stays in use.',
+    'error.code.CTX_COMPACTION_FAILED.todo': 'Try /compact again; if it keeps happening, start a new conversation with /clear.',
+    'error.code.CTX_JOB_INTERRUPTED.what': 'A compaction was interrupted because the TALOS process running it stopped; nothing was changed.',
+    'error.code.CTX_JOB_INTERRUPTED.todo': 'Nothing to fix: the next request or /compact starts it again.',
+    /* P12: a session whose context archive no longer matches its history (before 0.2.0 an interrupted tool turn could
+       cause it). Nothing is lost; the way on is a new session that carries the conversation. */
+    /* P21: OpenRouter sign-in. */
+    'error.code.LOGIN_REQUIRES_TTY.what': 'Signing in needs an interactive terminal.',
+    'error.code.LOGIN_REQUIRES_TTY.todo': 'Run talos provider login openrouter in a terminal, or save a key with talos provider set-key openrouter.',
+    'error.code.PROVIDER_LOGIN_UNSUPPORTED.what': 'Only OpenRouter offers a sign-in; other providers use a key.',
+    'error.code.PROVIDER_LOGIN_UNSUPPORTED.todo': 'Save a key with talos provider set-key <provider>.',
+    'error.code.PROVIDER_LOGIN_UNAVAILABLE.what': 'The OpenRouter sign-in is not available in this installation.',
+    'error.code.PROVIDER_LOGIN_UNAVAILABLE.todo': 'Save a key with talos provider set-key openrouter.',
+    'error.code.OAUTH_CALLBACK_UNAVAILABLE.what': 'TALOS could not listen for OpenRouter on this machine.',
+    'error.code.OAUTH_CALLBACK_UNAVAILABLE.todo': 'Sign in with the code instead: talos provider login openrouter --paste.',
+    'error.code.OAUTH_CANCELLED.what': 'The sign-in was cancelled.',
+    'error.code.OAUTH_CANCELLED.todo': 'Start it again when you are ready.',
+    'error.code.OAUTH_CODE_MISSING.what': 'That is not a code from OpenRouter.',
+    'error.code.OAUTH_CODE_MISSING.todo': 'Paste the code OpenRouter shows, or the whole address the browser landed on.',
+    'error.code.OAUTH_DENIED.what': 'The sign-in was cancelled in the browser.',
+    'error.code.OAUTH_DENIED.todo': 'Start it again and allow access on the OpenRouter page.',
+    'error.code.OAUTH_TIMEOUT.what': 'The sign-in took longer than 10 minutes.',
+    'error.code.OAUTH_TIMEOUT.todo': 'Start it again; the code OpenRouter gives lasts 10 minutes.',
+    'error.code.CTX_HISTORY_DIVERGED.what': 'This conversation no longer matches its saved context, so TALOS stopped before sending anything. Nothing was lost.',
+    'error.code.CTX_HISTORY_DIVERGED.todo': 'Continue it in a new session with /fork (it keeps the whole conversation), or start fresh with /clear.',
+    'error.where.context': '/context shows the window TALOS measured and how compaction is set.',
+    'error.code.MODELS_DEV_TOO_LARGE.what': 'The models.dev catalogue answered with more data than TALOS accepts, so it was not used.',
+    'error.code.MODELS_DEV_TOO_LARGE.todo': 'Nothing to do: model windows come from the other sources until the next try.',
+};

package/dist/i18n/en/firstrun.js

@@ -0,0 +1,101 @@
+/* R4 lane F: first run — trust, boot, setup lines, loaded files, provider and model lists (gate E11, Q-R4-1…4, 13). */
+export const firstrun = {
+    /* Q-R4-4: the boot says that a key skips it. */
+    'firstrun.boot.skipHint': 'Press any key to skip',
+    /* The boot's status line past the reveal (moved from boot-sequence.ts, same words: test/tui/boot-no-keypress.test.ts reads them). */
+    'firstrun.boot.waiting': 'runtime synchronization…',
+    'firstrun.boot.failed': 'startup failed',
+    /* Q-R4-1…3: the trust question, drawn before anything is loaded (the words that were inline in project-trust-prompt.ts). */
+    'firstrun.trust.title': 'Trust this folder?',
+    'firstrun.trust.titleChanged': 'Trust the changed folder snapshot?',
+    'firstrun.trust.heading': 'TALOS · {title}',
+    'firstrun.trust.plain': 'TALOS will read, edit and run files in this folder, as your permission mode allows.',
+    'firstrun.trust.reason.untrusted': 'This folder contains project instructions or executable resources that TALOS has not trusted yet.',
+    'firstrun.trust.reason.fingerprint': 'A file in the previously trusted project snapshot changed on disk.',
+    'firstrun.trust.reason.set': 'The set of files in the previously trusted project snapshot changed on disk.',
+    'firstrun.trust.reason.identity': 'A project resource no longer matches the identity of this folder.',
+    'firstrun.trust.reason.nested': 'A nested repository boundary changed around project resources. Review the boundary explicitly before trusting it.',
+    'firstrun.trust.reason.other': 'The previously trusted project snapshot changed ({reason}).',
+    'firstrun.trust.files.one': '1 project file covered by this decision ({detail})',
+    'firstrun.trust.files.other': '{count} project files covered by this decision ({detail})',
+    'firstrun.trust.more': 'and {count} more',
+    'firstrun.trust.nested': 'Nested repository boundaries included in this snapshot:',
+    'firstrun.trust.nestedCount.one': '1 nested repository boundary is included in this snapshot.',
+    'firstrun.trust.nestedCount.other': '{count} nested repository boundaries are included in this snapshot.',
+    'firstrun.trust.session': 'This is your home folder or a drive root: the decision lasts for this session only.',
+    'firstrun.trust.choice.cancel': 'Cancel',
+    'firstrun.trust.choice.trust': 'Trust this folder',
+    'firstrun.trust.choice.trustSession': 'Trust this folder for this session',
+    'firstrun.trust.choice.parent': 'Trust the parent folder ({path})',
+    'firstrun.trust.keys': 'Arrows choose · Enter confirms · Esc cancels',
+    /* Q-R4-10 (gate E10): what a local engine said when TALOS read its installed models. */
+    'firstrun.models.live.one': 'Live list from {label}: 1 model installed.',
+    'firstrun.models.live.other': 'Live list from {label}: {count} models installed.',
+    'firstrun.models.empty': '{label} is running but has no models installed. Install one in {label}, then open /model again.',
+    'firstrun.models.down': '{label} is not answering at {address}. Start it, or change its address with /provider, then open /model again.',
+    'firstrun.models.unreadable': '{label} answered at {address}, but not with a list of models.',
+    'firstrun.models.knownOnly': 'The models below are the ones TALOS already knows; they are not verified.',
+    'firstrun.models.notInstalled.one': '1 configured model is not installed in {label}.',
+    'firstrun.models.notInstalled.other': '{count} configured models are not installed in {label}.',
+    'firstrun.models.chosenMissing': '{model} is chosen but {label} does not list it.',
+    /* Q-R4-13: the first frame's setup lines (the three steps moved from tui/onboarding.ts, same words) and what was loaded. */
+    'firstrun.setup.trust': 'Review and trust this project before starting.',
+    'firstrun.setup.provider': 'Choose a provider and add a usable key if needed.',
+    'firstrun.setup.model': 'Choose the model TALOS should use for this project.',
+    'firstrun.setup.key': 'The chosen provider has no usable key; add one.',
+    'firstrun.setup.loaded': 'Loaded {files}',
+    /* P17 (owner decisions 2026-09-26): the guided setup of the first launch, and /setup. */
+    'firstrun.setup.stepLine': 'Setup · Step {index} of {total} · {name} · Esc skips this step',
+    'firstrun.setup.stepLineOnly': 'Setup · Step {index} of {total} · {name}',
+    'firstrun.setup.stepName.trust': 'Trust',
+    'firstrun.setup.stepName.provider': 'Provider',
+    'firstrun.setup.stepName.key': 'Key or local engine',
+    'firstrun.setup.stepName.model': 'Model',
+    'firstrun.setup.trustHeading': 'TALOS · Setup · Step 1 of 4 · {title}',
+    'firstrun.setup.retryHint': 'R retries · Esc back to the providers',
+    'firstrun.setup.skipped': 'Setup skipped. /setup starts it again; /provider and /model change one thing.',
+    'firstrun.setup.ready': '✓ Ready · {model} · type your first message',
+    'firstrun.setup.readyHints': '/help commands · Shift+Tab permissions · /setup to change this',
+    /* Q-R4-11: the provider list marks the chosen provider and says whether a local engine is running. */
+    'firstrun.providers.chosen': 'chosen',
+    'firstrun.providers.running': 'running',
+    'firstrun.providers.notRunning': 'not running',
+    /* Q-R4-14 (a), gate E12: talos doctor's verdict. `ok` keeps its meaning; these words say whether a turn could run now. */
+    'firstrun.doctor.headlineReady': 'TALOS doctor: ready',
+    'firstrun.doctor.headlineAttention': 'TALOS doctor: needs attention — {reason}',
+    'firstrun.doctor.noProvider': 'no provider is chosen; choose one with /provider.',
+    'firstrun.doctor.noModel': 'no model of {provider} is chosen; choose one with /model.',
+    'firstrun.doctor.localDown': '{provider} is not answering at {address}; start it, or change its address with /provider.',
+    'firstrun.doctor.localDownNoAddress': '{provider} is not answering; start it, or set its address with /provider.',
+    'firstrun.doctor.checkFailed': 'the {check} check failed.',
+    /* R5b (owner 2026-09-24): the models.dev switch, as talos doctor says it. */
+    'firstrun.doctor.catalogOn': 'models.dev on: one request to {source} for model sizes and prices, cached {hours} h; talos config set catalog.modelsDev false turns it off',
+    'firstrun.doctor.catalogOffConfig': 'models.dev off (catalog.modelsDev false in the configuration): nothing is sent',
+    'firstrun.doctor.catalogOffEnvironment': 'models.dev off (TALOS_MODELS_DEV=off): nothing is sent',
+    'firstrun.doctor.catalogOffTest': 'models.dev off (test profile): nothing is sent',
+    'firstrun.doctor.unknown': 'TALOS could not tell whether a turn can run; see the lines below.',
+    /* R4 Q-R4-16 (a): the kernel probe's sentences, mapped by pinned templates (i18n/kernel-map.ts, KERNEL_PROBE_REASONS). */
+    'firstrun.probe.catalog.one': '{provider} answered with its model list: 1 model. No message was generated.',
+    'firstrun.probe.catalog.other': '{provider} answered with its model list: {count} models. No message was generated.',
+    'firstrun.probe.catalogFirstPage.one': '{provider} answered with its model list: 1 model on the first page. No message was generated.',
+    'firstrun.probe.catalogFirstPage.other': '{provider} answered with its model list: {count} models on the first page. No message was generated.',
+    'firstrun.probe.publicCatalog.one': '{provider} answered with its public model list: 1 model. The key was not checked, and no message was generated.',
+    'firstrun.probe.publicCatalog.other': '{provider} answered with its public model list: {count} models. The key was not checked, and no message was generated.',
+    'firstrun.probe.keyAccepted': '{provider} accepted the key.',
+    'firstrun.probe.unreachable': '{provider} could not be reached.',
+    'firstrun.probe.timeout': '{provider} did not answer within {seconds} seconds.',
+    'firstrun.probe.redirect': '{provider} answered with a redirect to another address, which TALOS does not follow. Check the address set for this provider.',
+    'firstrun.probe.keyRefused': '{provider} refused the key (HTTP {status}).',
+    'firstrun.probe.keyNotAccepted': '{provider} did not accept the key (HTTP 401).',
+    'firstrun.probe.accessDenied': "{provider} denied access (HTTP 403); check the key's permissions.",
+    'firstrun.probe.httpStatus': '{provider} answered HTTP {status}.',
+    'firstrun.probe.listNotFound': '{provider}: the model list was not found (HTTP 404); this answer does not show whether the key is valid.',
+    'firstrun.probe.noAddress': '{provider} has no address set.',
+    'firstrun.probe.noKey': 'No key is saved for {provider}.',
+    'firstrun.probe.minimalOk': '{provider} answered a one-token request; its model list was not checked.',
+    'firstrun.probe.invalidList': '{provider} answered HTTP {status} without a valid model list; the key was not checked.',
+    'firstrun.probe.invalidMessage': '{provider} answered HTTP {status} without a valid message; the key was not checked.',
+    'firstrun.probe.declaredError': '{provider} answered with an error, so the key is not confirmed.',
+    /* `talos project trust` in the home folder or a drive root (Q-R4-1: never saved). */
+    'firstrun.project.sessionOnly': 'Not saved: {path} is your home folder or a drive root, so TALOS asks about it at every start.',
+};

package/dist/i18n/en/providers.js

@@ -0,0 +1,37 @@
+/*
+ * R2 integration (D-05: "Agente esterno" in the provider list): English labels and descriptions for the kernel's provider
+ * registry (harness-ui/src/provider-registry.mjs, `etichetta`/`descrizione`, measured 2026-09-24: 4 of 29 labels and 25 of 29
+ * descriptions Italian). Keyed by provider id; a provider without an entry keeps the registry text, and
+ * `test/i18n/providers-english.test.ts` fails when that text is not English, so a new Italian entry cannot slip in.
+ */
+export const providers = {
+    'provider.esterno.label': 'External agent',
+    'provider.esterno.description': 'An agent installed on this computer.',
+    'provider.kimi.description': 'Kimi models, direct international connection.',
+    'provider.minimax.description': 'MiniMax models, direct international connection.',
+    'provider.qwen.description': 'Qwen models, direct international connection.',
+    'provider.zai.description': 'GLM models through the Z.AI direct API.',
+    'provider.openrouter.description': 'Aggregator: hundreds of models behind a single key.',
+    'provider.ollama.description': 'Local Ollama engine on this computer.',
+    'provider.lmstudio.description': 'Local LM Studio engine on this computer.',
+    'provider.groq.description': 'Models through Groq.',
+    'provider.cerebras.description': 'Models through Cerebras.',
+    'provider.mistral.description': 'Models through Mistral.',
+    'provider.together.description': 'Models through Together.',
+    'provider.fireworks.description': 'Models through Fireworks.',
+    'provider.deepinfra.description': 'Models through DeepInfra.',
+    'provider.novita.description': 'Models through Novita.',
+    'provider.nebius.description': 'Models through Nebius.',
+    'provider.xai.description': 'Models through xAI.',
+    'provider.ollama-cloud.description': 'Models through Ollama Cloud.',
+    'provider.huggingface.description': 'Hugging Face model inference, catalog and downloads.',
+    'provider.zai-anthropic.label': 'Z.AI (Anthropic endpoint)',
+    'provider.zai-anthropic.description': 'GLM models through the Z.AI coding plan endpoint.',
+    'provider.minimax-anthropic.label': 'MiniMax (Anthropic endpoint)',
+    'provider.minimax-anthropic.description': 'MiniMax models through the Anthropic-compatible endpoint (international access).',
+    'provider.azure.description': 'Models from your own Azure resource.',
+    'provider.bedrock.description': 'Models available in the chosen region.',
+    'provider.vertex.description': 'Models of the chosen project and region.',
+    'provider.local.label': 'Local engine (llama.cpp)',
+    'provider.local.description': 'The llama-server supervisor of this computer.',
+};