@liujitcn/kratos-admin-system 0.0.28 → 0.0.31

package/dist/package/src/components/auditLog.ts

@@ -0,0 +1,46 @@
+import type { ColumnProps, EnumProps, SearchProps } from "@liujitcn/kratos-admin-core/components/ProTable/interface";
+
+/** 根据枚举值生成表格筛选项。 */
+export function createAuditEnumOptions(items: Array<[number, string]>): EnumProps[] {
+  return items.map(([value, label]) => ({ value, label }));
+}
+
+/** 根据枚举值查找展示文案。 */
+export function auditEnumLabel(options: EnumProps[], value: unknown): string {
+  return options.find(item => item.value === value)?.label ?? String(value ?? "--");
+}
+
+/** 创建审计日志时间范围筛选项。 */
+export function auditDateSearch(t: (key: string) => string): SearchProps {
+  return {
+    el: "date-picker",
+    props: {
+      type: "daterange",
+      editable: false,
+      class: "!w-[240px]",
+      rangeSeparator: "~",
+      startPlaceholder: t("common.placeholder.start_date"),
+      endPlaceholder: t("common.placeholder.end_date"),
+      valueFormat: "YYYY-MM-DD"
+    }
+  };
+}
+
+/** 创建审计日志详情按钮列。 */
+export function auditDetailColumn(label: string, onClick: (id: number) => void): ColumnProps {
+  return {
+    prop: "detailAction",
+    label,
+    width: 100,
+    fixed: "right",
+    cellType: "actions",
+    actions: [
+      {
+        label,
+        type: "primary",
+        link: true,
+        onClick: scope => onClick(Number(scope.row.id))
+      }
+    ]
+  };
+}

package/dist/package/src/components/{dynamicTranslation.ts → dynamicI18n.ts}

@@ -1,17 +1,17 @@
 import { getEnabledBaseLanguages } from "@liujitcn/kratos-admin-system/api/system/base_language";
-import type { TranslationTargetType } from "@liujitcn/kratos-admin-system/rpc/system/admin/v1/base_i18n";
+import type { I18nTargetType } from "@liujitcn/kratos-admin-system/rpc/system/admin/v1/base_i18n";
 
-/** DynamicTranslationValue 动态资源单语言翻译编辑状态。 */
-export interface DynamicTranslationValue {
+/** DynamicI18nValue 动态资源单语言翻译编辑状态。 */
+export interface DynamicI18nValue {
   /** 语言代码。 */
   locale: string;
   text: string;
   id: number;
 }
 
-/** DynamicTranslationRecord 描述三类动态资源翻译共有字段。 */
-export interface DynamicTranslationRecord extends Omit<DynamicTranslationValue, "text"> {
-  target_type?: TranslationTargetType;
+/** DynamicI18nRecord 描述三类动态资源翻译共有字段。 */
+export interface DynamicI18nRecord extends Omit<DynamicI18nValue, "text"> {
+  target_type?: I18nTargetType;
   target_id?: number;
   name?: string;
   /** 兼容旧接口缓存中的字段名。 */
@@ -40,12 +40,12 @@ export function getLanguageLabel(locale: string): string {
   return language?.native_name || language?.language_name || locale;
 }
 
-/** normalizeDynamicTranslations 将后端翻译记录补齐为全部非主语言编辑状态。 */
-export function normalizeDynamicTranslations(
-  records: DynamicTranslationRecord[] | undefined,
+/** normalizeDynamicI18ns 将后端翻译记录补齐为全部非主语言编辑状态。 */
+export function normalizeDynamicI18ns(
+  records: DynamicI18nRecord[] | undefined,
   _textField: "title" | "name" | "label",
   locales: string[] = getEditableLanguageOptions().map(item => item.value)
-): DynamicTranslationValue[] {
+): DynamicI18nValue[] {
   return locales.map(locale => {
     const record = records?.find(item => item.locale === locale);
     return {
@@ -56,11 +56,11 @@ export function normalizeDynamicTranslations(
   });
 }
 
-/** serializeDynamicTranslations 将编辑状态转换回后端资源翻译结构。 */
-export function serializeDynamicTranslations(
-  values: DynamicTranslationValue[],
-  targetType: TranslationTargetType,
+/** serializeDynamicI18ns 将编辑状态转换回后端资源翻译结构。 */
+export function serializeDynamicI18ns(
+  values: DynamicI18nValue[],
+  targetType: I18nTargetType,
   targetId: number
-): Array<{ id: number; target_type: TranslationTargetType; target_id: number; locale: string; name: string }> {
+): Array<{ id: number; target_type: I18nTargetType; target_id: number; locale: string; name: string }> {
   return values.map(({ id, locale, text }) => ({ id, target_type: targetType, target_id: targetId, locale, name: text }));
 }

package/dist/package/src/locales/README.md

@@ -1,12 +1,13 @@
 # 管理端 System 语言包
 
-本目录提供 System 管理业务模块的页面、AI、个人中心、基础资料和代码生成等业务文案。语言包由同级 `../module.ts` 导入，随 `systemAdminModule` 注册；管理端启动时由 core 的 `registerLocaleMessages` 合并，System 页面和组件通过 `t()` 或 `useLocaleStore()` 使用 `system.*` 键。
+本目录提供 System 管理业务模块的页面、AI、个人中心安全设置、开放授权客户端、基础资料和代码生成等业务文案。语言包由同级 `../module.ts` 导入，随 `systemAdminModule` 注册；管理端启动时由 core 的 `registerLocaleMessages` 合并，System 页面和组件通过 `t()` 或 `useLocaleStore()` 使用 `system.*` 键。
 
 | 文件 | 用途 | 使用位置 |
 | --- | --- | --- |
 | `zh-CN.json` | System 模块简体中文固定 UI 默认语言包，也是所有语言键集合和占位符校验基准。 | 管理端固定文案默认语言及缺失翻译回退。 |
 | `zh-TW.json` | System 模块繁体中文语言包。 | 管理端切换为繁体中文时由 Vue I18n 使用。 |
 | `en-US.json` | System 模块英文语言包。 | 管理端切换为英文时由 Vue I18n 使用。 |
+| `ja-JP.json` | System 模块日文语言包。 | 管理端切换为日文时由 Vue I18n 使用。 |
 
 ## 命名空间与使用位置
 
@@ -16,11 +17,12 @@
 | `system.ai.*` | AI 会话、消息流、重试和错误提示。 | `src/views/ai/**`、`src/api/base/ai_message.ts`。 |
 | `system.profile.*` | 个人资料、安全设置和用户中心导航。 | `src/views/profile/**`、`src/module.ts` 的用户菜单。 |
 | `system.base.*` | 区域、配置、部门、字典、岗位、角色、租户、用户等基础管理页面。 | `src/views/base/**`。 |
+| `system.base.oauth_client.*` | 开放授权客户端字段、凭据和 API 选择。 | `src/views/base/oauth-client/**`。 |
 | `system.code.gen.*` | 代码生成配置、预览、列配置和多语言编辑。 | `src/views/tool/code-gen/**`。 |
-| `system.translation.*` | 动态翻译编辑、草稿生成和语言包状态。 | `src/components/DynamicTranslationEditor.vue`、代码生成语言编辑组件。 |
+| `system.i18n.*` | 动态翻译编辑、草稿生成和语言包状态。 | `src/components/DynamicI18nEditor.vue`、代码生成语言编辑组件。 |
 
 语言包由生成的 `generated.ts` 传入 `systemAdminModule.messages`，由 core 的 `registerLocaleMessages` 校验语言键集合、命名空间和占位符后注册到 Vue I18n；业务代码统一使用 `t('system....')` 或 `useLocaleStore()` 读取。
 
 语言键按文案归属使用 `common.` 或 `system.` 命名空间；语言包保持标准 JSON，不在文件内写注释。
 
-新增语言的完整文件清单和迁移流程见[国际化语言扩展指南](../../../../../../docs/国际化语言扩展指南.md)。
+新增语言的完整文件清单和迁移流程见[国际化语言扩展指南](../../../../../../../docs/国际化语言扩展指南.md)。

package/dist/package/src/locales/en-US.json

@@ -1,6 +1,18 @@
 {
   "system.ai.request_failed_with_status": "AI assistant request failed ({status})",
   "system.profile.title": "Profile",
+  "system.base.oauth_client.resource": "OAuth client",
+  "system.base.oauth_client.action.copy_credentials": "Copy credentials",
+  "system.base.oauth_client.field.client_id": "Client ID",
+  "system.base.oauth_client.field.tenant": "Bound tenant",
+  "system.base.oauth_client.field.client_secret": "Client secret",
+  "system.base.oauth_client.field.client_name": "Client name",
+  "system.base.oauth_client.field.crypto_type": "Protocol encryption",
+  "system.base.oauth_client.field.crypto_key": "Protocol key",
+  "system.base.oauth_client.field.ip_whitelist": "IP allowlist",
+  "system.base.oauth_client.field.api": "Authorized APIs",
+  "system.base.oauth_client.value.available_api": "Available APIs",
+  "system.base.oauth_client.value.selected_api": "Authorized APIs",
   "system.base.area.action.create": "Create administrative area",
   "system.base.area.action.edit": "Edit administrative area",
   "system.base.area.field.name": "Area name",
@@ -51,6 +63,18 @@
   "system.base.config.message.rich_text_missing": "No rich text configured",
   "system.base.config.message.value_missing": "Not configured",
   "system.base.config.resource": "system configuration",
+  "system.base.login_policy.title": "Login policy",
+  "system.base.login_policy.description": "Restrict management logins by address, time, and device.",
+  "system.base.login_policy.enabled": "Enable policy",
+  "system.base.login_policy.hint": "IP values support exact addresses or CIDR. Enter multiple values on separate lines. Time windows use HH:MM-HH:MM.",
+  "system.base.login_policy.field.ip_blacklist": "IP blacklist",
+  "system.base.login_policy.field.ip_whitelist": "IP whitelist",
+  "system.base.login_policy.field.time_windows": "Blocked time windows",
+  "system.base.login_policy.field.device_blacklist": "Device blacklist",
+  "system.base.login_policy.field.device_whitelist": "Device whitelist",
+  "system.base.login_policy.placeholder.ip": "For example 192.0.2.10 or 192.0.2.0/24",
+  "system.base.login_policy.placeholder.time": "For example 22:00-06:00",
+  "system.base.login_policy.placeholder.device": "For example Chrome, iPhone, or a client device ID",
   "system.base.log.field.browser": "Browser",
   "system.base.log.field.client_id": "Client ID",
   "system.base.log.field.client_ip": "Client IP",
@@ -59,6 +83,7 @@
   "system.base.log.field.location": "Location",
   "system.base.log.field.method": "Request method",
   "system.base.log.field.operation": "Operation",
+  "system.base.log.field.audit_type": "Audit layer",
   "system.base.log.field.os": "Operating system",
   "system.base.log.field.path": "Request path",
   "system.base.log.field.reason": "Failure reason",
@@ -73,12 +98,19 @@
   "system.base.log.field.status_code": "Status code",
   "system.base.log.field.user_id": "User ID",
   "system.base.log.field.user_name": "Username",
+  "system.base.log.field.user_agent": "User agent",
   "system.base.log.section.basic": "Basic information",
   "system.base.log.section.client": "Client information",
   "system.base.log.section.request": "Request information",
   "system.base.log.section.user": "User information",
   "system.base.log.status.failed": "Failed",
   "system.base.log.status.success": "Succeeded",
+  "system.base.log.audit.unspecified": "Unclassified",
+  "system.base.log.audit.authentication": "Authentication",
+  "system.base.log.audit.authorization": "Authorization",
+  "system.base.log.audit.operation": "Business operation",
+  "system.base.log.audit.api": "API access",
+  "system.base.log.audit.system": "System",
   "system.base.log.title.detail": "System log details",
   "system.base.job.log.title.detail": "Scheduled job log details",
   "system.base.job.log.section.basic": "Basic information",
@@ -248,17 +280,17 @@
   "system.base.user.message.confirm_delete_selected": "Delete the selected users?",
   "system.base.user.message.delete_success": "User deleted",
   "system.base.user.message.delete_canceled": "User deletion canceled",
-  "system.base.translation.field.translations": "Translations",
-  "system.base.translation.field.name_translations": "Name translations",
-  "system.base.translation.field.value_translations": "Value translations",
-  "system.base.translation.placeholder.text": "Enter the {language} translation",
-  "system.base.translation.action.translate": "Translate",
-  "system.base.translation.action.batch_translate": "Translate all",
-  "system.base.translation.message.translate_success": "{language} translated",
-  "system.base.translation.message.translate_failed": "Failed to translate {language}",
-  "system.base.translation.message.batch_translate_success": "Translated {count} languages",
-  "system.base.translation.message.batch_translate_partial": "Translated {success} languages, {failed} failed",
-  "system.base.translation.message.batch_translate_failed": "Batch translation failed",
+  "system.base.i18n.field.i18ns": "Field i18n",
+  "system.base.i18n.field.name_i18ns": "Name field i18n",
+  "system.base.i18n.field.value_i18ns": "Value field i18n",
+  "system.base.i18n.placeholder.text": "Enter the {language} i18n",
+  "system.base.i18n.action.translate": "Translate",
+  "system.base.i18n.action.batch_translate": "Translate all",
+  "system.base.i18n.message.translate_success": "{language} translated",
+  "system.base.i18n.message.translate_failed": "Failed to translate {language}",
+  "system.base.i18n.message.batch_translate_success": "Translated {count} languages",
+  "system.base.i18n.message.batch_translate_partial": "Translated {success} languages, {failed} failed",
+  "system.base.i18n.message.batch_translate_failed": "Batch i18n failed",
   "system.base.menu.title.list": "Menus",
   "system.base.menu.action.create": "Create menu",
   "system.base.menu.action.edit": "Edit menu",
@@ -404,14 +436,12 @@
   "system.profile.value.private": "Private",
   "system.profile.security.title": "Security settings",
   "system.profile.security.nav_description": "Manage verification and security",
-  "system.profile.security.description": "Manage your password, phone verification, and profile completeness.",
+  "system.profile.security.description": "Manage your login password, phone verification, and multi-factor authentication.",
   "system.profile.security.value.account_normal": "Account status normal",
   "system.profile.security.field.login_password": "Login password",
   "system.profile.security.field.phone": "Bound phone",
   "system.profile.security.field.phone_number": "Phone number",
   "system.profile.security.field.code": "Verification code",
-  "system.profile.security.field.phone_verification": "Phone verification",
-  "system.profile.security.field.profile_completion": "Profile completeness",
   "system.profile.security.message.password_hint": "Update your password regularly to avoid using the same password for too long.",
   "system.profile.security.message.phone_bound": "Bound: {phone}",
   "system.profile.security.message.phone_unbound": "No phone number is currently bound.",
@@ -428,12 +458,39 @@
   "system.profile.security.action.unbind": "Unbind",
   "system.profile.security.action.send_code": "Send code",
   "system.profile.security.action.retry_after": "Retry in {seconds}s",
-  "system.profile.security.status.title": "Account status",
-  "system.profile.security.status.description": "Review verification status and profile completeness.",
   "system.profile.security.dialog.bind_phone": "Bind phone",
   "system.profile.security.dialog.confirm_unbind": "Unbind this sign-in method?\nSign-in method: {provider}",
   "system.profile.security.placeholder.phone": "Enter a phone number",
   "system.profile.security.placeholder.code": "Enter the verification code",
+  "system.profile.security.field.mfa": "Multi-factor authentication",
+  "system.profile.security.field.mfa_recovery_code": "Recovery code",
+  "system.profile.security.message.mfa_enabled": "Multi-factor authentication is enabled.",
+  "system.profile.security.message.mfa_enabled_method": "Multi-factor authentication is enabled ({method}).",
+  "system.profile.security.message.mfa_disabled": "Multi-factor authentication is disabled.",
+  "system.profile.security.message.mfa_method_totp": "TOTP",
+  "system.profile.security.message.mfa_method_webauthn": "WebAuthn",
+  "system.profile.security.message.mfa_webauthn_manage_hint": "Disabling WebAuthn requires a registered Passkey or recovery code; disable it before binding a new credential.",
+  "system.profile.security.message.mfa_disable_factor_required": "Enter a TOTP code or recovery code.",
+  "system.profile.security.message.mfa_setup_qr_alt": "Multi-factor authentication binding QR code",
+  "system.profile.security.message.mfa_uri_copied": "Binding address copied",
+  "system.profile.security.message.mfa_recovery_codes_warning": "Each code works once and will not be shown again after this dialog closes.",
+  "system.profile.security.message.mfa_recovery_codes_copied": "Recovery codes copied",
+  "system.profile.security.action.mfa_enable": "Enable",
+  "system.profile.security.action.mfa_disable": "Disable",
+  "system.profile.security.action.mfa_recovery": "Regenerate recovery codes",
+  "system.profile.security.action.mfa_next": "Next",
+  "system.profile.security.action.mfa_confirm": "Confirm binding",
+  "system.profile.security.action.mfa_show_uri": "Show backup binding address",
+  "system.profile.security.action.mfa_copy_uri": "Copy binding address",
+  "system.profile.security.action.mfa_copy_recovery_codes": "Copy recovery codes",
+  "system.profile.security.action.mfa_recovery_codes_confirm": "I saved them",
+  "system.profile.security.dialog.mfa_setup": "Bind multi-factor authentication",
+  "system.profile.security.dialog.mfa_disable": "Disable multi-factor authentication",
+  "system.profile.security.dialog.mfa_recovery": "Regenerate recovery codes",
+  "system.profile.security.dialog.mfa_recovery_codes": "Save MFA recovery codes",
+  "system.profile.security.placeholder.current_password": "Enter current password",
+  "system.profile.security.placeholder.mfa_code": "Enter the 6-digit code",
+  "system.profile.security.placeholder.mfa_recovery_code": "Enter recovery code (optional)",
   "system.profile.security.validation.phone": "Enter a valid phone number",
   "system.profile.password.title": "Change password",
   "system.profile.password.nav_description": "Update your login password",
@@ -455,6 +512,23 @@
   "system.profile.password.tip.strength_description": "Use a combination of uppercase and lowercase letters, numbers, and symbols.",
   "system.profile.password.tip.record_title": "Keep records current",
   "system.profile.password.tip.record_description": "When transferring an account, update the password custody record as well.",
+  "system.profile.session.title": "Login session",
+  "system.profile.session.nav_description": "View and revoke the current session",
+  "system.profile.session.description": "Review the current login source and token lifetime.",
+  "system.profile.session.action.refresh": "Refresh",
+  "system.profile.session.action.revoke_all": "Revoke all sessions",
+  "system.profile.session.status.active": "Current session active",
+  "system.profile.session.empty": "No active session",
+  "system.profile.session.field.client_ip": "Client IP",
+  "system.profile.session.field.device": "Login device",
+  "system.profile.session.field.issued_at": "Queried at",
+  "system.profile.session.field.expires_in": "Token lifetime",
+  "system.profile.session.confirm.title": "Revoke session",
+  "system.profile.session.confirm.revoke_all": "The current login will stop working immediately. Continue?",
+  "system.profile.session.message.revoked": "Session revoked",
+  "system.profile.session.value.less_than_minute": "Less than 1 minute",
+  "system.profile.session.value.hours_minutes": "{hours} hours {minutes} minutes",
+  "system.profile.session.value.minutes": "{minutes} minutes",
   "system.ai.chat.welcome_description": "Ask a question directly or upload attachments for analysis.",
   "system.ai.chat.welcome.morning": "Good morning, I am your general AI assistant",
   "system.ai.chat.welcome.afternoon": "Good afternoon, I am your general AI assistant",
@@ -489,6 +563,8 @@
   "system.ai.chat.title.recent_conversations": "Recent conversations",
   "system.ai.chat.title.assistant": "AI assistant",
   "system.ai.chat.field.input_tokens": "Input",
+  "system.ai.chat.field.request_payload": "Request",
+  "system.ai.chat.field.response_payload": "Response",
   "system.ai.chat.field.output_tokens": "Output",
   "system.ai.chat.field.cache_tokens": "Cache read",
   "system.ai.chat.field.total_tokens": "Total",
@@ -515,6 +591,9 @@
   "system.ai.chat.value.attachments_available": "Attachments available",
   "system.ai.chat.value.analyze_attachments": "Continue the analysis using the attachments",
   "system.ai.chat.value.new_conversation": "New conversation",
+  "system.sse.error.auth_expired": "SSE authentication has expired",
+  "system.sse.error.connection_failed": "SSE connection failed: {status}",
+  "system.sse.error.connection_closed": "SSE connection closed",
   "system.ai.chat.value.branch_title": "Branch: {title}",
   "system.ai.chat.placeholder.input": "Ask anything or upload attachments to continue",
   "system.ai.chat.placeholder.search_conversation": "Search conversations",
@@ -588,6 +667,7 @@
   "system.code.gen.component.password": "Password input",
   "system.code.gen.component.textarea": "Text area",
   "system.code.gen.component.input_number": "Number input",
+  "system.code.gen.component.color_picker": "Color picker",
   "system.code.gen.component.segmented": "Segmented control",
   "system.code.gen.component.switch": "Switch",
   "system.code.gen.component.checkbox": "Checkbox",
@@ -626,14 +706,14 @@
   "system.code.gen.validation.left_tree_parent_required": "Select the tree parent column",
   "system.code.gen.validation.left_tree_label_required": "Select the tree label column",
   "system.code.gen.validation.left_tree_value_required": "Select the tree value column",
-  "system.code.gen.i18n.field.translations": "Non-primary language descriptions",
+  "system.code.gen.i18n.field.i18ns": "Field i18n",
   "system.code.gen.i18n.action.edit_column": "Edit non-primary language field descriptions",
   "system.code.gen.i18n.status.complete": "Complete",
   "system.code.gen.i18n.status.missing": "Missing",
   "system.code.gen.i18n.message.missing": "Required before generation: {locales}",
   "system.code.gen.i18n.placeholder.comment": "Chinese source: {source}",
   "system.code.gen.i18n.placeholder.left_tree_comment": "Chinese tree source: {source}",
-  "system.code.gen.i18n.tooltip.table": "Maintain non-primary language descriptions used by generated pages, menus, and locale files. Incomplete drafts can be saved, but generation requires all translations.",
+  "system.code.gen.i18n.tooltip.table": "Maintain non-primary language descriptions used by generated pages, menus, and locale files. Incomplete drafts can be saved, but generation requires all i18ns.",
   "system.code.gen.table.title.create": "Create code generation table",
   "system.code.gen.table.title.edit": "Edit code generation table",
   "system.code.gen.table.field.name": "Business table",
@@ -685,7 +765,7 @@
   "system.code.gen.table.tooltip.left_tree_lazy": "Request children only when a node is expanded.",
   "system.code.gen.table.tooltip.gen_backend": "Generate Proto, backend Biz, Service, and registration code.",
   "system.code.gen.table.tooltip.gen_frontend": "Generate the frontend API, pages, and locale files for all supported languages.",
-  "system.code.gen.table.tooltip.gen_sql": "Synchronize page menus, button permissions, and translations for all supported languages.",
+  "system.code.gen.table.tooltip.gen_sql": "Synchronize page menus, button permissions, and i18ns for all supported languages.",
   "system.code.gen.table.tooltip.status": "Disabled configurations are read-only. Successful generation sets the status to generated.",
   "system.code.gen.table.tooltip.remark": "Visible to maintainers only and not used for generated names.",
   "system.code.gen.table.value.disabled_module": "{module} (disabled)",
@@ -881,7 +961,7 @@
   "system.code.gen.preview.message.create_success": "Created",
   "system.code.gen.preview.message.update_success": "Updated",
   "system.code.gen.preview.message.delete_success": "Deleted",
-  "system.code.gen.preview.message.missing_translations": "Complete these translations before generation: {items}",
+  "system.code.gen.preview.message.missing_i18ns": "Complete these i18ns before generation: {items}",
   "system.code.gen.preview.value.list_separator": ", ",
   "system.project.document.title.navigation": "Project document navigation",
   "system.project.document.placeholder.search": "Search projects or paths",
@@ -960,5 +1040,249 @@
   "system.runtime.log.status.loading": "Reading logs",
   "system.runtime.log.message.gap": "The live stream skipped {count} entries. Check the history file for the missing logs.",
   "system.runtime.log.message.file_changed": "The log file rotated or was truncated. Reading again from the end.",
-  "system.runtime.log.message.download_started": "Log file download started"
+  "system.runtime.log.message.download_started": "Log file download started",
+  "system.base.message.priority.normal": "Normal",
+  "system.base.message.priority.important": "Important",
+  "system.base.message.priority.urgent": "Urgent",
+  "system.base.message.content_format.plain": "Plain text",
+  "system.base.message.content_format.markdown": "Safe Markdown",
+  "system.base.message.audience.tenant": "All tenant users",
+  "system.base.message.audience.user": "User",
+  "system.base.message.audience.role": "Role",
+  "system.base.message.audience.dept": "Department",
+  "system.base.message.audience.post": "Position",
+  "system.base.message.status.draft": "Draft",
+  "system.base.message.status.scheduled": "Scheduled",
+  "system.base.message.status.publishing": "Delivering",
+  "system.base.message.status.published": "Published",
+  "system.base.message.status.revoked": "Revoked",
+  "system.base.message.field.category": "Category",
+  "system.base.message.field.title": "Title",
+  "system.base.message.field.content": "Content",
+  "system.base.message.field.content_format": "Content format",
+  "system.base.message.field.priority": "Priority",
+  "system.base.message.field.audience_type": "Audience type",
+  "system.base.message.field.audience_id": "Audience ID",
+  "system.base.message.field.user_id": "User ID",
+  "system.base.message.field.role_id": "Role ID",
+  "system.base.message.field.dept_id": "Department ID",
+  "system.base.message.field.post_id": "Position ID",
+  "system.base.message.field.include_children": "Include child departments",
+  "system.base.message.field.action_type": "Click action",
+  "system.base.message.field.scheduled_at": "Scheduled at",
+  "system.base.message.field.expires_at": "Expires at",
+  "system.base.message.field.action_target": "Action view key",
+  "system.base.message.field.delivered_total": "Delivered",
+  "system.base.message.field.recipient_total": "Recipients",
+  "system.base.message.field.matched_total": "Matched",
+  "system.base.message.field.inserted_total": "Inserted",
+  "system.base.message.field.attempt_count": "Attempts",
+  "system.base.message.field.last_error": "Last error",
+  "system.base.message.detail.title": "Message details",
+  "system.base.message.detail.action": "Details",
+  "system.base.message.action.retry": "Retry",
+  "system.base.message.validation.audience_id": "Enter an audience ID",
+  "system.base.message.action_type.none": "No action",
+  "system.base.message.action_type.view_key": "Open a page",
+  "system.base.message.tooltip.tenant": "Messages and recipients are isolated by tenant; the default tenant can send for a selected tenant",
+  "system.base.message.tooltip.category": "A category controls presentation and retention policy; it is not a content template",
+  "system.base.message.tooltip.title": "The short title shown in the recipient's inbox",
+  "system.base.message.tooltip.content": "The rich-text body recipients see when they open the message",
+  "system.base.message.tooltip.content_format": "Rich-text editing is currently supported",
+  "system.base.message.tooltip.priority": "Urgent messages are highlighted first in the inbox",
+  "system.base.message.tooltip.audience_type": "Choose which members of the tenant should receive the message",
+  "system.base.message.tooltip.audience_id": "Enter the numeric ID of a user, role, department, or position in the current tenant",
+  "system.base.message.tooltip.include_children": "For a department audience, also include members of all child departments",
+  "system.base.message.tooltip.action_type": "Choose what happens when a recipient clicks the message",
+  "system.base.message.tooltip.action_target": "Enter an admin view key, for example system/base/user/index",
+  "system.base.message.placeholder.tenant": "Select the message tenant",
+  "system.base.message.placeholder.category": "Select a tenant first, then choose a category",
+  "system.base.message.placeholder.title": "For example: System maintenance tonight",
+  "system.base.message.placeholder.content": "Enter the notification body using rich text",
+  "system.base.message.placeholder.audience_id": "Enter a numeric ID",
+  "system.base.message.placeholder.action_target": "For example: system/base/user/index",
+  "system.base.message.placeholder.scheduled_at": "Leave empty to publish immediately",
+  "system.base.message.placeholder.expires_at": "Optional; the message expires after this time",
+  "system.base.message.action.publish": "Publish",
+  "system.base.message.action.cancel_schedule": "Cancel schedule",
+  "system.base.message.action.revoke": "Revoke",
+  "system.base.message.confirm.publish": "Publish this message?",
+  "system.base.message.confirm.revoke": "Revoke this message?",
+  "system.base.message_category.field.code": "Category code",
+  "system.base.message_category.field.name": "Category name",
+  "system.base.message_category.field.icon": "Icon",
+  "system.base.message_category.field.color": "Color",
+  "system.base.message_category.field.default_priority": "Default priority",
+  "system.base.message_category.field.retention_days": "Retention days",
+  "system.base.message_category.field.allow_archive": "Allow archive",
+  "system.base.message_category.field.allow_delete": "Allow delete",
+  "system.base.message_category.icon.bell": "Notification",
+  "system.base.message_category.icon.lock": "Security",
+  "system.base.message_category.icon.list": "Task list",
+  "system.base.message_category.icon.message": "Message",
+  "system.base.message_category.icon.info": "Information",
+  "system.base.message_category.icon.warning": "Warning",
+  "system.base.message_category.icon.success": "Success",
+  "system.base.message_category.icon.promotion": "Publishing",
+  "system.base.message_category.icon.setting": "Settings",
+  "system.base.message_category.icon.user": "User",
+  "system.base.message_category.icon.calendar": "Calendar",
+  "system.base.message_category.icon.chat": "Conversation",
+  "system.base.message_category.icon.analysis": "Analysis",
+  "system.base.message_category.tooltip.code": "A stable English identifier used by APIs and integrations",
+  "system.base.message_category.tooltip.name": "The category name shown in the inbox and message management",
+  "system.base.message_category.tooltip.icon": "Choose a preset icon to help recipients identify the message source",
+  "system.base.message_category.tooltip.color": "The accent color used for the inbox icon and unread marker",
+  "system.base.message_category.tooltip.default_priority": "The priority prefilled for new messages; it can be changed per message",
+  "system.base.message_category.tooltip.retention_days": "Messages are cleaned up after this many days; 0 uses the system default",
+  "system.base.message_category.tooltip.allow_archive": "When disabled, recipients cannot archive messages in this category",
+  "system.base.message_category.tooltip.allow_delete": "When disabled, recipients cannot delete messages in this category",
+  "system.base.message_category.placeholder.code": "For example: SYSTEM, SECURITY",
+  "system.base.message_category.placeholder.name": "For example: System messages",
+  "system.base.message_category.placeholder.icon": "Choose a preset icon",
+  "system.base.message_category.placeholder.sort": "Lower numbers appear first",
+  "system.base.message_category.placeholder.retention_days": "0 uses the system default",
+  "system.notification.title": "Message Center",
+  "system.notification.description": "View system notifications and business messages",
+  "system.notification.empty": "No messages",
+  "system.notification.view.inbox": "All messages",
+  "system.notification.view.unread": "Unread",
+  "system.notification.view.archived": "Archived",
+  "system.notification.field.read_status": "Read status",
+  "system.notification.field.sender": "Sender",
+  "system.notification.field.received_at": "Received at",
+  "system.notification.status.read": "Read",
+  "system.notification.status.unread": "Unread",
+  "system.notification.action.mark_unread": "Mark unread",
+  "system.notification.action.mark_all_read": "Mark all read",
+  "system.notification.action.archive": "Archive",
+  "system.notification.action.restore": "Restore",
+  "system.notification.action.view_all": "View all",
+  "system.base.audit.login.title.detail": "Login log details",
+  "system.base.audit.api.title.detail": "API access log details",
+  "system.base.audit.operation.title.detail": "Operation log details",
+  "system.base.audit.data_access.title.detail": "Data access log details",
+  "system.base.audit.permission.title.detail": "Permission log details",
+  "system.base.audit.policy.title.detail": "Policy evaluation log details",
+  "system.base.audit.field.id": "Log ID",
+  "system.base.audit.field.tenant_id": "Tenant ID",
+  "system.base.audit.field.tenant_code": "Tenant code",
+  "system.base.audit.field.user_id": "User ID",
+  "system.base.audit.field.user_name": "Username",
+  "system.base.audit.field.login_type": "Login type",
+  "system.base.audit.field.result": "Result",
+  "system.base.audit.field.reason_code": "Reason code",
+  "system.base.audit.field.reason": "Reason",
+  "system.base.audit.field.client_ip": "Client IP",
+  "system.base.audit.field.user_agent": "User agent",
+  "system.base.audit.field.device_id": "Device ID",
+  "system.base.audit.field.request_id": "Request ID",
+  "system.base.audit.field.trace_id": "Trace ID",
+  "system.base.audit.field.occurred_at": "Event time",
+  "system.base.audit.field.created_at": "Created at",
+  "system.base.audit.field.service_name": "Service",
+  "system.base.audit.field.operation": "Operation",
+  "system.base.audit.field.method": "Method",
+  "system.base.audit.field.path": "Path",
+  "system.base.audit.field.status_code": "Status code",
+  "system.base.audit.field.latency_ms": "Latency (ms)",
+  "system.base.audit.field.request_size": "Request size",
+  "system.base.audit.field.response_size": "Response size",
+  "system.base.audit.field.resource_type": "Resource type",
+  "system.base.audit.field.resource_id": "Resource ID",
+  "system.base.audit.field.resource_name": "Resource name",
+  "system.base.audit.field.action": "Action",
+  "system.base.audit.field.changed_fields": "Changed fields",
+  "system.base.audit.field.before_data": "Before data",
+  "system.base.audit.field.after_data": "After data",
+  "system.base.audit.field.access_type": "Access type",
+  "system.base.audit.field.data_source": "Data source",
+  "system.base.audit.field.table_name": "Table",
+  "system.base.audit.field.field_scope": "Field scope",
+  "system.base.audit.field.data_scope": "Data scope",
+  "system.base.audit.field.affected_rows": "Affected rows",
+  "system.base.audit.field.sensitive": "Sensitive data",
+  "system.base.audit.field.sql_text": "Masked SQL",
+  "system.base.audit.field.sql_digest": "SQL digest",
+  "system.base.audit.field.target_type": "Target type",
+  "system.base.audit.field.target_id": "Target ID",
+  "system.base.audit.field.target_name": "Target name",
+  "system.base.audit.field.old_value": "Previous permission",
+  "system.base.audit.field.new_value": "New permission",
+  "system.base.audit.field.engine": "Authorization engine",
+  "system.base.audit.field.evaluation_type": "Evaluation type",
+  "system.base.audit.field.resource": "Resource",
+  "system.base.audit.field.project": "Project",
+  "system.base.audit.field.decision": "Decision",
+  "system.base.audit.field.duration_ms": "Evaluation latency (ms)",
+  "system.base.audit.field.candidate_count": "Candidates",
+  "system.base.audit.field.matched_count": "Matched",
+  "system.base.audit.field.input_hash": "Input digest",
+  "system.base.audit.result.success": "Succeeded",
+  "system.base.audit.result.failure": "Failed",
+  "system.base.audit.result.error": "Error",
+  "system.base.audit.login_type.password": "Password login",
+  "system.base.audit.login_type.oauth": "OAuth login",
+  "system.base.audit.login_type.mfa": "MFA",
+  "system.base.audit.login_type.token_refresh": "Token refresh",
+  "system.base.audit.login_type.logout": "Logout",
+  "system.base.audit.operation_action.create": "Create",
+  "system.base.audit.operation_action.update": "Update",
+  "system.base.audit.operation_action.delete": "Delete",
+  "system.base.audit.operation_action.publish": "Publish",
+  "system.base.audit.operation_action.revoke": "Revoke",
+  "system.base.audit.operation_action.import": "Import",
+  "system.base.audit.operation_action.export": "Export",
+  "system.base.audit.operation_action.other": "Other",
+  "system.base.audit.access_type.list": "List",
+  "system.base.audit.access_type.detail": "Detail",
+  "system.base.audit.access_type.query": "Query",
+  "system.base.audit.access_type.export": "Export",
+  "system.base.audit.access_type.download": "Download",
+  "system.base.audit.access_type.import": "Import",
+  "system.base.audit.target_type.user": "User",
+  "system.base.audit.target_type.role": "Role",
+  "system.base.audit.target_type.menu": "Menu",
+  "system.base.audit.target_type.api": "API",
+  "system.base.audit.target_type.tenant": "Tenant",
+  "system.base.audit.permission_action.grant": "Grant",
+  "system.base.audit.permission_action.revoke": "Revoke",
+  "system.base.audit.permission_action.create": "Create",
+  "system.base.audit.permission_action.update": "Update",
+  "system.base.audit.permission_action.delete": "Delete",
+  "system.base.audit.permission_action.assign": "Assign",
+  "system.base.audit.policy_decision.allow": "Allow",
+  "system.base.audit.policy_decision.deny": "Deny",
+  "system.base.audit.policy_decision.error": "Error",
+  "system.base.audit.evaluation_type.is_authorized": "Single authorization",
+  "system.base.audit.evaluation_type.filter_pairs": "Resource filtering",
+  "system.base.audit.evaluation_type.filter_projects": "Project filtering",
+  "system.dashboard.title": "Dashboard",
+  "system.dashboard.updated_at": "Updated {time}",
+  "system.dashboard.overview": "Overview",
+  "system.dashboard.users": "Total users",
+  "system.dashboard.roles": "Total roles",
+  "system.dashboard.today_logins": "Today's logins",
+  "system.dashboard.today_operations": "Today's operations",
+  "system.dashboard.login_trend": "Login trend",
+  "system.dashboard.login_distribution": "Login results",
+  "system.dashboard.operation_distribution": "Operation actions",
+  "system.dashboard.load_failed": "Failed to load dashboard statistics",
+  "system.base.file.resource": "File asset",
+  "system.base.file.detail": "File asset details",
+  "system.base.file.confirm_delete": "Delete file \"{name}\" and its object?",
+  "system.base.file.field.name": "Original file name",
+  "system.base.file.field.path": "Storage path",
+  "system.base.file.field.extension": "Extension",
+  "system.base.file.field.mime": "MIME type",
+  "system.base.file.field.size": "File size",
+  "system.base.file.field.hash": "Content hash",
+  "system.base.file.field.tenant": "Tenant ID",
+  "system.base.file.field.url": "Access URL",
+  "system.base.login_policy.rules.title": "Targeted rules",
+  "system.base.login_policy.rules.description": "Override global login source restrictions by tenant code or username",
+  "system.base.login_policy.rules.add": "Add rule",
+  "system.base.login_policy.rules.target_type": "Target type",
+  "system.base.login_policy.rules.target_value": "Target value",
+  "system.base.login_policy.rules.enabled": "Enabled"
 }