zigmini 0.8.0-beta.5 → 0.8.0-beta.7

package/src/cli/setup.ts

@@ -2,16 +2,16 @@ import { chmodSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync
 import { randomBytes } from "node:crypto";
 import { homedir } from "node:os";
 import { dirname, join, resolve } from "node:path";
-import { engine } from "../engine/index.ts";
+import { engine, ENGINE_PACKAGE } from "../engine/index.ts";
 import { installEngine } from "../engine/install.ts";
 import { ensureInstallRules, INSTALL_RULES_FILE } from "../agent-rules.ts";
-import { DECLINED_MESSAGE, ensureConsent, EXIT_DECLINED, loadNotice, type PermissionNotice } from "../consent/consent.ts";
+import { ensureConsent, EXIT_DECLINED, loadNotice, type PermissionNotice } from "../consent/consent.ts";
 import { type InstallKind, installKind } from "../runtime/install-kind.ts";
 import { agentDir as defaultAgentDir, providerCount } from "../model-accounts.ts";
 import type { Env, RuntimePaths } from "../runtime/paths.ts";
 import { writeVoiceSetting } from "../voice-setting.ts";
 import { parseConfigEnv, startCommand, systemContext, systemDeps } from "./launchd.ts";
-import { apkFailureLine, apkQr, enrollmentQr, pairFailureLine } from "./pair.ts";
+import { isLanguage, LANGUAGE_QUESTION, type Language, localize, message, resolveLanguage, saveLanguage } from "./messages.ts";
 import { SYSTEM_NETWORK, type Network } from "../enroll.ts";
 import {
 	ACCESS_CHOICES, type AccessChoice, type AccessRecord, appPortEnv, isAccessChoice, parseDomain, pingAccess, type PingResult, proxyGuide, readAccess,
@@ -38,21 +38,24 @@ export interface SetupOptions {
 	readonly domain?: string;
 	readonly notionTokenFile?: string;
 	readonly agentDir?: string;
+	readonly lang?: Language;
 }
 
 export interface Platform { readonly platform: string; readonly arch: string; readonly bunVersion: string }
 
 export interface SetupDeps {
+	readonly lang?: Language;
 	readonly platform: Platform;
 	readonly env: Env;
 	readonly paths: RuntimePaths;
 	readonly bunPath: string;
 	readonly installEngine: (options: { home: string; acceptLicense: boolean; engineOnly: boolean; confirmLicense?: (summary: string, path: string) => Promise<boolean> }) => Promise<string>;
+	readonly globalOmoVersion: () => Promise<string | null>;
+	readonly installGlobalOmo: (version: string) => Promise<void>;
+	/** The executable checked or installed above; injected installers may keep the plain omo command. */
+	readonly globalOmoCommand?: () => string;
+	readonly providerCount: (agent: string) => number;
 	readonly start: () => Promise<number>;
-	/** The phone enrollment QR text after the services are up (plan Todo 15); rejects when the gateway gives no token. */
-	readonly enrollQr: () => Promise<string>;
-	/** The app download QR shown before the enrollment QR (plan Todo 20); rejects when the gateway serves no APK. */
-	readonly apkQr: () => Promise<string>;
 	readonly prompt: (question: string) => Promise<string | null>;
 	readonly network: Network;
 	readonly tailscale: () => TailscaleRun;
@@ -67,10 +70,10 @@ export interface SetupDeps {
 	readonly err: (text: string) => void;
 }
 
-const VALUE_FLAGS = { "--access": "access", "--domain": "domain", "--notion-token-file": "notionTokenFile", "--agent-dir": "agentDir" } as const;
+const VALUE_FLAGS = { "--access": "access", "--domain": "domain", "--notion-token-file": "notionTokenFile", "--agent-dir": "agentDir", "--lang": "lang" } as const;
 const BOOLEAN_FLAGS = { "--non-interactive": "nonInteractive", "--accept-license": "acceptLicense", "--engine-only": "engineOnly" } as const;
 
-export function parseSetupArgs(argv: readonly string[]): SetupOptions | string {
+export function parseSetupArgs(argv: readonly string[], lang: Language = "en"): SetupOptions | string {
 	const options: Record<string, string | boolean> = { nonInteractive: false, acceptLicense: false, engineOnly: false };
 	for (let i = 0; i < argv.length; i++) {
 		const flag = argv[i]!;
@@ -78,18 +81,19 @@ export function parseSetupArgs(argv: readonly string[]): SetupOptions | string {
 			options[BOOLEAN_FLAGS[flag as keyof typeof BOOLEAN_FLAGS]] = true;
 			continue;
 		}
-		if (!(flag in VALUE_FLAGS)) return `알 수 없는 옵션: ${flag}`;
+		if (!(flag in VALUE_FLAGS)) return message(lang, "unknownOption", { flag });
 		const value = argv[i + 1];
-		if (value === undefined || value === "" || value.startsWith("--")) return `${flag} 에 값이 필요합니다`;
-		if (/[\0\n\r]/.test(value)) return `${flag} 값에 줄바꿈이나 NUL 문자를 쓸 수 없습니다`;
+		if (value === undefined || value === "" || value.startsWith("--")) return message(lang, "missingValue", { flag });
+		if (/[\0\n\r]/.test(value)) return message(lang, "badValue", { flag });
 		options[VALUE_FLAGS[flag as keyof typeof VALUE_FLAGS]] = value;
 		i++;
 	}
-	if (options.access !== undefined && !(ACCESS_CHOICES as readonly unknown[]).includes(options.access)) return `--access 는 ${ACCESS_CHOICES.join(", ")} 중 하나입니다`;
-	if (options.domain !== undefined && options.access !== "domain") return "--domain 은 --access domain 과 함께 씁니다";
-	if (options.access === "domain" && options.domain === undefined) return "--access domain 에는 --domain <https://주소> 가 필요합니다";
+	if (options.lang !== undefined && !isLanguage(options.lang)) return message(lang, "badLanguage");
+	if (options.access !== undefined && !(ACCESS_CHOICES as readonly unknown[]).includes(options.access)) return message(lang, "badAccess", { choices: ACCESS_CHOICES.join(", ") });
+	if (options.domain !== undefined && options.access !== "domain") return message(lang, "domainTogether");
+	if (options.access === "domain" && options.domain === undefined) return message(lang, "domainRequired");
 	if (typeof options.domain === "string") {
-		const domain = parseDomain(options.domain);
+		const domain = parseDomain(options.domain, lang);
 		if ("error" in domain) return domain.error;
 	}
 	return options as unknown as SetupOptions;
@@ -103,11 +107,11 @@ export function bunAtLeast(version: string, min: readonly [number, number] = MIN
 	return major > min[0] || (major === min[0] && minor >= min[1]);
 }
 
-export function platformProblem(platform: Platform): string | null {
+export function platformProblem(platform: Platform, lang: Language = "en"): string | null {
 	if (platform.platform !== "darwin" || platform.arch !== "arm64") {
-		return `zigmini는 Apple Silicon(arm64) 맥에서만 동작합니다. (이 기기: ${platform.platform} ${platform.arch})`;
+		return message(lang, "platform", { ...platform });
 	}
-	if (!bunAtLeast(platform.bunVersion)) return `zigmini에는 Bun ${MIN_BUN.join(".")} 이상이 필요합니다. (지금: ${platform.bunVersion}) \`bun upgrade\`로 올리세요.`;
+	if (!bunAtLeast(platform.bunVersion)) return message(lang, "bunVersion", { min: MIN_BUN.join("."), version: platform.bunVersion });
 	return null;
 }
 
@@ -142,10 +146,61 @@ function quote(text: string): string {
 }
 
 /** Never throws: the engine's pinned launcher path (or the ZGW_OMO_BIN test candidate), whether or not it exists yet. */
-export function loginHint(agent: string, home: string, bunPath: string, env: Env): string {
+export function loginHint(agent: string, home: string, bunPath: string, env: Env, lang: Language = "en"): string {
 	const assignments = Object.entries(engine.env(agent)).map(([key, value]) => `${key}=${quote(value)}`).join(" ");
 	const bin = env.ZGW_OMO_BIN || join(home, "omo", "current", "node_modules", ".bin", "omo");
-	return `모델 계정에 로그인하세요: 터미널에서 \`env ${assignments} ${quote(bunPath)} ${quote(bin)}\`를 실행한 뒤 \`/login\`을 입력합니다.`;
+	return message(lang, "loginHint", { command: `env ${assignments} ${quote(bunPath)} ${quote(bin)}` });
+}
+
+/** Login uses stock OMO; the gateway continues to use its separate, patched engine. */
+export function stockOmoVersion(version = engine.pinnedVersion()): string {
+	return version.replace(/-zgw(?:\.\d+)?$/, "");
+}
+
+async function loginStep(options: SetupOptions, deps: SetupDeps, agent: string, dedicated: boolean): Promise<void> {
+	const lang = deps.lang ?? "en";
+	const version = stockOmoVersion();
+	let global = true;
+	try {
+		const current = await deps.globalOmoVersion();
+		let install = current === null;
+		if (current !== null && current !== version) {
+			if (!options.nonInteractive) {
+				const answer = await deps.prompt(message(lang, "globalOverwrite", { current, version }));
+				install = answer?.trim().toLowerCase() === "y";
+			}
+			if (!install) deps.out(message(lang, "globalKeep", { current, version }));
+		}
+		if (install) await deps.installGlobalOmo(version);
+		if (current === version || install) deps.out(message(lang, "globalDone", { version }));
+	} catch (error) {
+		global = false;
+		deps.err(message(lang, "globalFailed", { error: error instanceof Error ? error.message : String(error) }));
+	}
+	let providers = deps.providerCount(agent);
+	if (providers >= 1) {
+		deps.out(message(lang, "providers", { count: providers }));
+		return;
+	}
+	const command = quote(deps.globalOmoCommand?.() ?? "omo");
+	const hint = global
+		? message(lang, "loginHint", { command: dedicated ? `env OMO_CODING_AGENT_DIR=${quote(agent)} ${command}` : command })
+		: loginHint(agent, deps.paths.home, deps.bunPath, deps.env, lang);
+	deps.out(message(lang, "loginBlock", { hint }));
+	if (options.nonInteractive) return;
+	for (;;) {
+		const answer = await deps.prompt(message(lang, "loginWait"));
+		if (answer === null || answer.trim().toLowerCase() === "s") {
+			deps.out(message(lang, "loginWarning"));
+			return;
+		}
+		providers = deps.providerCount(agent);
+		if (providers >= 1) {
+			deps.out(message(lang, "providers", { count: providers }));
+			return;
+		}
+		deps.out(message(lang, "loginPending"));
+	}
 }
 
 function ensureDir(path: string, mode?: number): void {
@@ -159,116 +214,134 @@ function writeSecret(path: string, value: string): void {
 }
 
 async function engineStep(options: SetupOptions, deps: SetupDeps): Promise<number> {
+	const lang = deps.lang ?? "en";
 	const confirmLicense = options.nonInteractive ? undefined : async (summary: string) => {
-		deps.out(`${summary}\n`);
-		const answer = await deps.prompt("엔진 라이선스에 동의하면 y를 입력하세요: ");
+		deps.out(`${localize(summary, lang)}\n`);
+		const answer = await deps.prompt(message(lang, "engineLicense"));
 		return answer?.trim().toLowerCase() === "y";
 	};
 	try {
 		const target = await deps.installEngine({ home: deps.paths.home, acceptLicense: options.acceptLicense, engineOnly: options.engineOnly, confirmLicense });
-		deps.out(`엔진: ${target} 설치와 기본 동작 확인을 마쳤습니다.\n`);
+		deps.out(message(lang, "engineDone", { target }));
 		return 0;
 	} catch (error) {
-		const message = error instanceof Error ? error.message : String(error);
-		deps.err(message === "engine_license_declined"
-			? "엔진 라이선스에 동의하지 않아 설치를 멈췄습니다. 비대화 설치는 --accept-license 가 필요합니다.\n"
-			: `엔진 설치 실패: ${message}\n`);
+		const detail = localize(error instanceof Error ? error.message : String(error), lang);
+		deps.err(detail === "engine_license_declined"
+			? message(lang, "engineDeclined")
+			: message(lang, "engineFailed", { error: detail }));
 		return EXIT_FAILED;
 	}
 }
 
 async function notionStep(options: SetupOptions, deps: SetupDeps): Promise<number> {
+	const lang = deps.lang ?? "en";
 	const file = deps.paths.notionTokenFile;
 	let token: string | null = null;
 	if (options.notionTokenFile !== undefined) {
 		try {
 			token = readFileSync(options.notionTokenFile, "utf8").trim();
 		} catch {
-			deps.err(`Notion 토큰 파일을 읽지 못했습니다: ${options.notionTokenFile}\n`);
+			deps.err(message(lang, "notionFile", { path: options.notionTokenFile }));
 			return EXIT_FAILED;
 		}
 	} else if (!options.nonInteractive && !existsSync(file)) {
-		token = (await deps.prompt("Notion 토큰(비우면 일정 기능 꺼짐): "))?.trim() ?? "";
+		token = (await deps.prompt(message(lang, "notionPrompt")))?.trim() ?? "";
 	}
 	if (token) {
 		ensureDir(dirname(file), 0o700);
 		writeSecret(file, token);
 	}
-	deps.out(`Notion 일정: ${existsSync(file) ? "켜짐(토큰 있음)" : "꺼짐(토큰 없음)"}\n`);
+	deps.out(message(lang, "notionState", { state: message(lang, existsSync(file) ? "tokenOn" : "tokenOff") }));
 	return 0;
 }
 
 /** The "외부 접속" step: a new choice is resolved and saved; without one, the saved choice is kept (or asked for interactively). */
 async function accessStep(options: SetupOptions, deps: SetupDeps): Promise<AccessRecord | null | number> {
+	const lang = deps.lang ?? "en";
 	let choice = options.access;
 	let domain = options.domain;
 	if (choice === undefined) {
 		const saved = readAccess(deps.paths.home);
 		if (saved !== null && saved !== "invalid") {
-			deps.out(`외부 접속: ${saved.choice} ${saved.url} (바꾸려면 --access)\n`);
+			deps.out(message(lang, "accessSaved", { ...saved }));
 			return saved;
 		}
 		if (options.nonInteractive) return null;
-		const answer = (await deps.prompt(`외부 접속을 고르세요 [${ACCESS_CHOICES.join("/")}, 비우면 맥 안에서만]: `))?.trim() ?? "";
+		const answer = (await deps.prompt(message(lang, "accessPrompt", { choices: ACCESS_CHOICES.join("/") })))?.trim() ?? "";
 		if (answer === "") {
-			deps.out("외부 접속: 고르지 않음(웹은 맥 안에서만 엽니다. 폰은 나중에 `zigmini setup --access`로 엽니다)\n");
+			deps.out(message(lang, "accessNone"));
 			return null;
 		}
 		if (!isAccessChoice(answer)) {
-			deps.err(`외부 접속은 ${ACCESS_CHOICES.join(", ")} 중 하나입니다: ${answer}\n`);
+			deps.err(message(lang, "accessInvalid", { choices: ACCESS_CHOICES.join(", "), answer }));
 			return EXIT_USAGE;
 		}
 		choice = answer;
-		if (choice === "domain") domain = (await deps.prompt("자기 도메인 주소(https://...): "))?.trim() ?? "";
+		if (choice === "domain") domain = (await deps.prompt(message(lang, "domainPrompt")))?.trim() ?? "";
 	}
-	const resolved = resolveAccess(choice, domain, deps.paths.ports.app, deps);
+	const resolved = resolveAccess(choice, domain, deps.paths.ports.app, deps, lang);
 	if (!resolved.ok) {
-		deps.err(`외부 접속을 정하지 못했습니다.\n${resolved.message}\n`);
+		deps.err(message(lang, "accessFailed", { error: resolved.message }));
 		return EXIT_FAILED;
 	}
 	writeAccess(deps.paths.home, resolved.record);
-	deps.out(`외부 접속: ${resolved.record.choice} ${resolved.record.url} (앱 포트 ${deps.paths.ports.app}, 폰 등록 QR이 이 주소를 씁니다)\n`);
+	deps.out(message(lang, "accessDone", { ...resolved.record, port: deps.paths.ports.app }));
 	return resolved.record;
 }
 
 /** A domain is checked only once the services are up; a failure keeps the install and points at the proxy and doctor. */
 async function domainCheckStep(access: AccessRecord | null, deps: SetupDeps): Promise<void> {
+	const lang = deps.lang ?? "en";
 	if (access?.choice !== "domain") return;
 	const result = await deps.ping(access.url);
 	if (result.ok) {
-		deps.out(`외부 접속 확인: ${access.url}/api/enroll/ping 응답 정상\n`);
+		deps.out(message(lang, "domainOk", { url: access.url }));
 		return;
 	}
-	deps.err(`경고: ${access.url} 에서 게이트웨이에 닿지 못했습니다(${result.detail}). 설치는 그대로 두었습니다.\n${proxyGuide(access.url, deps.paths.ports.app)}\n`);
+	deps.err(message(lang, "domainWarning", { url: access.url, detail: result.detail, guide: proxyGuide(access.url, deps.paths.ports.app, lang) }));
 }
 
 export async function runSetup(options: SetupOptions, deps: SetupDeps): Promise<number> {
-	const problem = platformProblem(deps.platform);
+	let lang = options.lang ?? resolveLanguage(deps.paths.home, deps.env);
+	if (!options.nonInteractive && options.lang === undefined) {
+		for (;;) {
+			const answer = await deps.prompt(LANGUAGE_QUESTION);
+			if (answer === null || answer.trim() === "") break;
+			if (answer.trim() === "1" || answer.trim() === "en") { lang = "en"; break; }
+			if (answer.trim() === "2" || answer.trim() === "ko") { lang = "ko"; break; }
+			deps.err(message(lang, "chooseLanguage"));
+		}
+	}
+	deps = { ...deps, lang };
+	const problem = platformProblem(deps.platform, lang);
 	if (problem !== null) {
 		deps.err(`${problem}\n`);
 		return EXIT_USAGE;
 	}
 	const { paths } = deps;
 	const consent = { home: paths.home, kind: deps.installKind, notice: deps.notice, zigminiVersion: deps.zigminiVersion, now: deps.now };
-	if (!await ensureConsent(consent, deps)) {
-		deps.err(`${DECLINED_MESSAGE}\n`);
+	if (!await ensureConsent(consent, { ...deps, out: (text) => deps.out(localize(text, lang)), prompt: (question) => deps.prompt(localize(question, lang)) })) {
+		deps.err(`${message(lang, "consentDeclined")}\n`);
 		return EXIT_DECLINED;
 	}
 	if (options.engineOnly) {
 		ensureDir(paths.omo);
-		return await engineStep(options, deps);
+		const code = await engineStep(options, deps);
+		if (code === 0) saveLanguage(paths.home, lang);
+		return code;
 	}
 
 	for (const dir of [paths.home, paths.data, paths.logs, paths.omo, paths.sessions]) ensureDir(dir);
 	for (const dir of [paths.secrets, paths.run]) ensureDir(dir, 0o700);
-	deps.out(`홈 폴더: ${paths.home}\n`);
-	if (ensureInstallRules(paths.home)) deps.out(`이 설치의 규칙 파일: ${join(paths.home, INSTALL_RULES_FILE)} (비어 있음)\n`);
+	deps.out(message(lang, "home", { path: paths.home }));
+	if (ensureInstallRules(paths.home)) deps.out(message(lang, "rules", { path: join(paths.home, INSTALL_RULES_FILE) }));
 
 	if (!existsSync(paths.omoTokenFile)) writeSecret(paths.omoTokenFile, deps.randomToken());
 	chmodSync(paths.omoTokenFile, 0o600);
 
 	const engineCode = await engineStep(options, deps);
 	if (engineCode !== 0) return engineCode;
+	saveLanguage(paths.home, lang);
 
 	const configFile = join(paths.home, "config.env");
 	const text = existsSync(configFile) ? readFileSync(configFile, "utf8") : "";
@@ -276,16 +349,15 @@ export async function runSetup(options: SetupOptions, deps: SetupDeps): Promise<
 	try {
 		config = parseConfigEnv(text);
 	} catch (error) {
-		deps.err(`${(error as Error).message}\n`);
+		deps.err(`${localize((error as Error).message, lang)}\n`);
 		return EXIT_FAILED;
 	}
 
 	const dedicated = options.agentDir ?? config.ZGW_OMO_AGENT_DIR;
 	const agent = dedicated ? resolve(dedicated) : defaultAgentDir(deps.env);
 	if (options.agentDir !== undefined) ensureDir(agent, 0o700);
-	deps.out(`에이전트 폴더: ${agent}${dedicated ? " (전용)" : " (공유)"}\n`);
-	const providers = providerCount(agent);
-	deps.out(providers > 0 ? `모델 계정: 로그인됨(제공자 ${providers}개)\n` : `${loginHint(agent, paths.home, deps.bunPath, deps.env)}\n`);
+	deps.out(message(lang, "agent", { path: agent, kind: message(lang, dedicated ? "dedicated" : "shared") }));
+	await loginStep(options, deps, agent, Boolean(dedicated));
 
 	const notionCode = await notionStep(options, deps);
 	if (notionCode !== 0) return notionCode;
@@ -302,34 +374,26 @@ export async function runSetup(options: SetupOptions, deps: SetupDeps): Promise<
 	chmodSync(configFile, 0o600);
 
 	if (!existsSync(paths.voiceSettingFile)) writeVoiceSetting(paths.voiceSettingFile, false);
-	deps.out(`음성: ${readFileSync(paths.voiceSettingFile, "utf8").trim() === "off" ? "꺼짐" : "켜짐"} (웹·앱 설정에서 바꿉니다)\n`);
+	deps.out(message(lang, "voice", { state: message(lang, readFileSync(paths.voiceSettingFile, "utf8").trim() === "off" ? "off" : "on") }));
 
 	const started = await deps.start();
 	if (started !== 0) {
-		deps.err(`서비스 시작에 실패했습니다. \`zigmini status\`와 로그 폴더 ${paths.logs}를 확인하세요.\n`);
+		deps.err(message(lang, "startFailed", { path: paths.logs }));
 		return started;
 	}
-	deps.out(`설치를 마쳤습니다.\n  웹: http://127.0.0.1:${paths.ports.web}\n  상태 확인: zigmini status\n  멈추기: zigmini stop\n`);
+	deps.out(message(lang, "setupDone", { port: paths.ports.web }));
 	await domainCheckStep(access, deps);
-	await enrollStep(deps);
+	phoneStep(access, deps);
 	return 0;
 }
 
 /**
- * The last step: the app download QR, then the phone enrollment QR. The services are already up, so a failure here is a
- * hint, not a failed setup.
+ * Terminal font metrics can break QR scanning. Direct the user to the real web settings sections instead.
  */
-async function enrollStep(deps: SetupDeps): Promise<void> {
-	try {
-		deps.out(`\n${await deps.apkQr()}`);
-	} catch (error) {
-		deps.out(`${apkFailureLine(error)} 게이트웨이가 준비되면 \`zigmini pair --apk\`로 다시 만듭니다.\n`);
-	}
-	try {
-		deps.out(`\n${await deps.enrollQr()}`);
-	} catch (error) {
-		deps.out(`${pairFailureLine(error)} 게이트웨이가 준비되면 \`zigmini pair\`로 다시 만듭니다.\n`);
-	}
+function phoneStep(access: AccessRecord | null, deps: SetupDeps): void {
+	const lang = deps.lang ?? "en";
+	if (access === null) deps.out(`${message(lang, "setupAccessGuidance")}\n`);
+	deps.out(message(lang, "webQrGuide", { port: deps.paths.ports.web }));
 }
 
 async function* stdinLines(): AsyncGenerator<string> {
@@ -356,19 +420,40 @@ export function stdinPrompt(): (question: string) => Promise<string | null> {
 
 export function systemSetupDeps(zigminiVersion: string, env: Env = process.env): SetupDeps {
 	const ctx = systemContext(env);
+	let globalBin: string | null = null;
 	return {
 		platform: { platform: process.platform, arch: process.arch, bunVersion: Bun.version },
 		env,
 		paths: ctx.paths,
 		bunPath: ctx.bunPath,
 		installEngine: (options) => installEngine(options),
-		start: () => startCommand(systemDeps(), ctx),
-		enrollQr: () => enrollmentQr((url, init) => fetch(url, init), ctx.paths.ports.web, Date.now),
-		apkQr: () => apkQr((url, init) => fetch(url, init), ctx.paths.ports.web, Date.now),
+		globalOmoVersion: async () => {
+			const bin = env.BUN_INSTALL ? join(env.BUN_INSTALL, "bin/omo") : Bun.which("omo", { PATH: env.PATH });
+			if (!bin || !existsSync(bin)) return null;
+			const proc = Bun.spawn([ctx.bunPath, bin, "--version"], { env: { ...env }, stdout: "pipe", stderr: "pipe", signal: AbortSignal.timeout(10_000) });
+			const [code, stdout, stderr] = await Promise.all([proc.exited, new Response(proc.stdout).text(), new Response(proc.stderr).text()]);
+			const version = /^omo\s+(\S+)/.exec(stdout.trim())?.[1];
+			if (code !== 0 || version === undefined) throw new Error(stderr.trim() || "global_omo_version_unknown");
+			globalBin = bin;
+			return version;
+		},
+		installGlobalOmo: async (version) => {
+			const proc = Bun.spawn([ctx.bunPath, "add", "-g", `${ENGINE_PACKAGE}@${version}`], { env: { ...env }, stdout: "pipe", stderr: "pipe", signal: AbortSignal.timeout(180_000) });
+			const [code, stdout, stderr] = await Promise.all([proc.exited, new Response(proc.stdout).text(), new Response(proc.stderr).text()]);
+			if (code !== 0) throw new Error(stderr.trim() || stdout.trim() || `bun_add_exit_${code}`);
+			globalBin = join(env.BUN_INSTALL || join(env.HOME || homedir(), ".bun"), "bin/omo");
+		},
+		globalOmoCommand: () => globalBin === null || Bun.which("omo", { PATH: env.PATH }) === globalBin ? "omo" : globalBin,
+		providerCount,
+		start: () => {
+			const deps = systemDeps();
+			const lang = resolveLanguage(ctx.paths.home, env);
+			return startCommand({ ...deps, out: (text) => deps.out(localize(text, lang)), err: (text) => deps.err(localize(text, lang)) }, ctx);
+		},
 		prompt: stdinPrompt(),
 		network: SYSTEM_NETWORK,
 		tailscale: systemTailscale,
-		ping: (url) => pingAccess((target, init) => fetch(target, init), url),
+		ping: (url) => pingAccess((target, init) => fetch(target, init), url, undefined, resolveLanguage(ctx.paths.home, env)),
 		isDir: (path) => {
 			try {
 				return statSync(path).isDirectory();
@@ -387,10 +472,14 @@ export function systemSetupDeps(zigminiVersion: string, env: Env = process.env):
 }
 
 export async function setupCommand(argv: readonly string[], deps: () => SetupDeps, usage: string): Promise<number> {
-	const options = parseSetupArgs(argv);
+	const runtime = deps();
+	const at = argv.indexOf("--lang");
+	const requested = at < 0 ? undefined : argv[at + 1];
+	const lang = isLanguage(requested) ? requested : resolveLanguage(runtime.paths.home, runtime.env);
+	const options = parseSetupArgs(argv, lang);
 	if (typeof options === "string") {
-		process.stderr.write(`${options}\n\n${usage}`);
+		process.stderr.write(`${options}\n\n${localize(usage, lang)}`);
 		return EXIT_USAGE;
 	}
-	return await runSetup(options, deps());
+	return await runSetup(options, runtime);
 }

package/src/decisions.ts

@@ -1,5 +1,6 @@
 import { isDeepStrictEqual } from "node:util";
 import { decisionContext } from "./decision-context.ts";
+import { SecurityCheckError, type MessageGuard } from "./security-check.ts";
 import type { OmoEvent } from "./omo/client.ts";
 import type { ActionAnswerData, DecisionAnswerRequest, DecisionInfo, DecisionsPageData, DecisionUpdatedData } from "./protocol.ts";
 import { blockedMainQuestion, blockedQuestion, DecisionStoreError, RESUMABLE_CLOSED, Store, type Decision, type DecisionMethod, type DecisionSubmission, type StoredEvent } from "./store.ts";
@@ -35,6 +36,15 @@ export interface DecisionServiceOptions {
 	readonly receiptTimeoutMs?: number;
 	readonly onHistory?: (event: StoredEvent) => void;
 	readonly onError?: (error: unknown) => void;
+	/** Improvement 165: the security check of answer text (value, comment, free text of each question). */
+	readonly guard?: Pick<MessageGuard, "holdOrPass">;
+}
+
+function answerTexts(request: DecisionAnswerRequest): string[] {
+	if (!("response" in request)) return [];
+	const response = request.response as { value?: unknown; comment?: unknown; answers?: Record<string, { text?: unknown }> };
+	const texts = [response.value, response.comment, ...Object.values(response.answers ?? {}).map((answer) => answer.text)];
+	return texts.filter((text): text is string => typeof text === "string");
 }
 
 function record(value: unknown): value is Record<string, unknown> {
@@ -189,8 +199,14 @@ export class DecisionService {
 		return this.info(this.required(id));
 	}
 
-	answer(id: string, input: unknown): DecisionInfo {
+	answer(id: string, input: unknown, checked = false): DecisionInfo {
 		const request = parseDecisionAnswer(input);
+		if (!checked) {
+			const owner = this.store.getDecision(id)?.ownerConv ?? "main";
+			this.options.guard?.holdOrPass(owner, "answer", answerTexts(request), async () => {
+				this.answer(id, input, true);
+			});
+		}
 		this.refresh();
 		const before = this.required(id);
 		const binding = this.ports.liveBinding(before);
@@ -630,6 +646,9 @@ export class DecisionService {
 			}
 			return Response.json({ error: "method_not_allowed" }, { status: 405 });
 		} catch (error) {
+			if (error instanceof SecurityCheckError) {
+				return Response.json({ error: error.code, message: error.message, held: error.held }, { status: 422 });
+			}
 			if (error instanceof DecisionStoreError) {
 				return Response.json({
 					error: error.code, decision: error.decision ? this.info(error.decision) : null,