@succsoft/succapp 5.0.6 → 5.0.7

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # CHANGELOG
 
+## 5.0.7(2026-08-17)
+
+- 修复批量 clone 文件时 Node 内置 Undici 可能在响应流背压与服务器关闭连接同时发生时触发断言并终止进程的问题；SuccApp 改用显式固定的已修复 Undici，并将 CLI 最低 Node.js 版本提升到 22.19.0。
+- 新增 `db connector list/show` 和 `db source template`，可从目标服务器发现可用的数据库连接器、查看各连接器所需配置，并按连接器提供的默认配置生成不含秘密值的数据源 JSON 模板；`db source create --help --json` 同时提示 AI Agent 阅读工作区内的 SuccApp 文档并返回相关命令。
+- 新增 `succapp server recyclebin search`，支持按项目、路径或名称、文件类型和删除时间搜索当前用户可见的回收站资源，并返回删除时间、删除人和回收站记录 ID 等结构化信息。
+- 新增 `succapp server cluster list/show`，支持按健康级别查看当前启动的集群节点、持续刷新状态，并按节点 ID 和展示范围读取节点运行及诊断信息；节点列表排除已经 shutdown 的历史节点，节点详情复用 `server info` 的分范围布局，避免冗长诊断值破坏表格可读性。
+- 新增 `succapp server thread list/show/dump/cancel` 命令面和 Dev Tool v2 客户端契约；`thread list` 保持紧凑摘要，`thread dump` 返回未截断的调用堆栈，并同样支持按 JVM 原始状态、`--working` 和 `--sql` 组合筛选；线程 ID 与取消序号保持十进制字符串，取消操作必须同时提供当前取消序号和 `--force`，旧服务器会明确提示尚不支持该诊断能力。
+- 新增 `succapp server tech-log` 命令组，可按节点列出、增量跟随和下载技术日志，并查看、热更新、重置 logger 级别或向集群应用当前 Logback 配置；日志读取和级别维护复用系统设置控制台能力，危险级别和集群覆盖要求显式 `--force`。
+- 新增 `succapp server thread top`；服务端只返回当前或指定节点的一次性线程、内存和 GC 原始采样，客户端负责轮询、有界累计并分析 CPU 热点、长期锁阻塞、SQL/I/O 等待以及内存和 GC 变化；系统设置线程页面直接消费同一采样结构；`--cluster=all` 由客户端并发采样各节点，Ctrl+C 输出已取得的部分报告；human 输出压缩百分比和诊断上下文，空 GC/诊断表不再占位，`--quiet` 仅保留最终报告。
+- 优化 OAuth2 浏览器登录，统一使用标准 `client_id`、授权码和刷新令牌协议，并在授权成功后跳转到 SuccApp 完成页。
+- 优化服务器启动期间的错误提示，所有 SuccApp 命令统一显示服务器尚未就绪和重试建议，不再退化成无法分类的 HTTP 或响应格式错误。
+- 修复 SuccApp for VS Code 可能把包含 `.succapp/state.json` 的普通目录误识别为工作区的问题。
+- 统一 SuccApp CLI、SuccApp for VS Code、虚拟文件系统协议和产品图标中的品牌名称为 SuccApp。
+
 ## 5.0.6(2026-07-18)
 
 - 新增 `db source probe <datasource>`，支持验证已有数据源连接；`db source test` 同时支持已有数据源和 JSON 配置，并统一返回 schema、数据库版本和驱动等结构化连接信息。

package/README.md

@@ -12,6 +12,8 @@ SuccApp 的核心思路是把页面、仪表板、报表、数据模型、程序
 
 SuccApp CLI 面向终端、脚本和 AI Agent，命令名为 `succapp`。它适合初始化工作区、连接服务器、查询状态、查看 diff、拉取和推送元数据、读取文件历史、解析页面地址、查询数据库结构，并用 `--json` 输出结构化结果。需要人工阅读结构化结果时，可以使用 `--pretty-json` 输出格式化 JSON。
 
+SuccApp CLI 需要 Node.js 22.19.0 或更高版本。
+
 Install:
 
 ```bash

package/dist/cli/l10n/bundle.l10n.json

@@ -1,11 +1,26 @@
 {
 	"common.err.unexpected": "Unexpected error.",
-	"err.workspace.required": "Please open a workspace before using SuccApp commands.",
+	"err.workspace.required": "No SuccApp workspace is available. Open an existing SuccApp workspace or initialize the current folder first.",
 	"err.workspace.activeFileRequired": "Open a file before {actionName}.",
 	"err.base.cancel": "Cancelled.",
 	"err.net.connectionFailed": "Cannot connect to server: {url}{causeMessage}",
 	"err.net.connectionFailed.desc": "Check the server address and network connection, then retry or log in again.",
+	"err.cluster.nodeUnavailable": "Cluster node {clusterNode} is unavailable.",
+	"err.cluster.nodeUnavailable.desc": "The node may not be running, may have left the current cluster, or may be unreachable. Check its status and network connection, then retry.",
+	"err.server.notReady": "Server is not ready",
+	"err.server.notReady.desc": "The server has not completed startup and initialization.",
+	"err.server.notReady.hint": "Wait a moment and retry. If this persists, check the server status and logs.",
+	"err.server.capabilityUnsupported": "Server {serverUrl} does not support capability {capability}.",
+	"err.server.capabilityUnsupported.desc": "Upgrade the server to a version that provides this Dev Tool capability, then retry.",
+	"err.server.clusterNodeNotFound": "Cluster node {nodeId} is not in the current snapshot.",
+	"err.server.clusterNodeNotFound.desc": "Run 'succapp server cluster list' first to confirm the node ID.",
+	"err.server.threadNotFound": "Thread {threadId} no longer exists.",
+	"err.server.threadNotFound.desc": "Run 'succapp server thread list' again to obtain a current thread snapshot.",
+	"err.server.threadTaskChanged": "The cancelable task on thread {threadId} has changed.",
+	"err.server.threadTaskChanged.desc": "Inspect the thread again and use its current cancel serial.",
+	"err.server.threadNotCancelable": "Thread {threadId} has no cancelable product task.",
 	"err.login.notlogin": "Authentication failed, please log in again",
+	"err.login.notlogin.hint": "Log in again, then retry the command.",
 	"err.login.busy": "The system is busy. Please try later!",
 	"err.login.busy.desc": "Possible causes include license limits on sessions or users, or database connection/query failures.",
 	"err.oauth2.tokenExpired": "OAuth2 access token expired.",
@@ -48,6 +63,7 @@
 	"err.meta.projectExist": "A project with the same name already exists.",
 	"err.meta.projectname.illegal": "Invalid project name. Use letters, numbers, and underscores only, and keep it within 16 characters.",
 	"err.meta.projectname.reservedwords": "This project name is reserved by the system.",
+	"err.file.invalidPath": "Invalid or unsafe file path: {path}",
 	"err.file.notFound": "Path does not exist: {path}",
 	"err.file.notDirectory": "Path is not a directory: {path}",
 	"err.workspace.sameServerUrl": "New server URL must be different from the current URL.",
@@ -74,6 +90,7 @@
 	"err.workspace.issue.E407": "SuccApp docs skill files are missing",
 	"err.lock.busy": "Cannot {attemptedCommand}: workspace scope {conflictScope} is held by another process.",
 	"err.lock.busy.desc": "Stop the running process and retry; locks left by crashed processes are cleaned up automatically on the next attempt.",
+	"err.lock.busy.hint": "Wait for the running SuccApp process to finish, then retry.",
 	"err.lock.compromised": "Workspace lock was taken over by another process; the current {attemptedCommand} has been aborted.",
 	"err.lock.compromised.desc": "Run 'succapp workspace status' to verify consistency before retrying.",
 	"err.workspace.activeConnectionRequired": "Cannot {actionName} without an active server connection.",
@@ -102,6 +119,10 @@
 	"err.cli.missingInput.hintWithSources": "Provide {sources} and retry.",
 	"err.cli.conflictingInputs": "Conflicting inputs: {inputs}.",
 	"err.cli.conflictingInputs.hint": "Use only one of these inputs and retry.",
+	"err.cli.conflictingInputs.tailCursorPair": "Use --from and --log-file together.",
+	"err.cli.conflictingInputs.tailCursorPair.hint": "Copy both fields from the previous one-shot 'succapp server tech-log tail --json' result.",
+	"err.cli.conflictingInputs.tailInterval": "--interval requires --follow.",
+	"err.cli.conflictingInputs.tailInterval.hint": "Add --follow, or remove --interval for a one-shot read.",
 	"err.cli.invalidUrl": "Invalid URL for {input}: {value}.",
 	"err.cli.invalidUrl.hint": "Provide a full http:// or https:// URL.",
 	"err.cli.invalidPositiveInteger": "{input} must be a positive integer: {value}.",
@@ -109,6 +130,8 @@
 	"err.cli.invalidNonNegativeIntegerRange": "{input} must be an integer from {min} to {max}: {value}.",
 	"err.cli.invalidChoice": "Invalid value for {input}: {value}.",
 	"err.cli.invalidChoice.hint": "Expected one of: {allowedValues}.",
+	"err.cli.invalidChoice.namedLogger": "Invalid logger name: {value}.",
+	"err.cli.invalidChoice.namedLogger.hint": "Use an exact named logger; root and wildcards are not allowed.",
 	"err.cli.invalidKeyValue": "Invalid key=value for {input}: {value}.",
 	"err.cli.invalidKeyValue.hint": "Use key=value.",
 	"err.cli.invalidNonEmptyKeyValue": "Invalid key=value for {input}: {value}.",
@@ -122,6 +145,8 @@
 	"err.cli.unconfiguredServer": "Server is not configured in the current workspace: {value}.",
 	"err.cli.serverMismatch": "Server does not match the active workspace server: {value}.",
 	"err.cli.serverMismatch.hint": "Expected active server: {expected}.",
+	"err.cli.serverCapabilityUnavailable": "The active server does not provide this capability: {capability}.",
+	"err.cli.serverCapabilityUnavailable.hint": "Upgrade the server to a compatible version, then retry.",
 	"err.cli.unsupportedAuthFlow": "Authentication flow is not implemented yet: {authType}.",
 	"err.cli.unsupportedAuthFlow.hint": "Use 'succapp auth login --pat <url>' and enter the PAT when prompted. Piped stdin is still supported for scripts.",
 	"err.cli.invalidExtensionName": "Invalid extension name: {value}.",
@@ -138,6 +163,12 @@
 	"err.cli.confirmationRequired.outputOverwrite": "The output file already exists and would be overwritten.",
 	"err.cli.confirmationRequired.outputOverwrite.desc": "Output file: {path}",
 	"err.cli.confirmationRequired.outputOverwrite.hint": "Confirm that overwriting this file is expected, then pass {flag}.",
+	"err.cli.confirmationRequired.threadTaskCancel": "Requesting task cancellation requires confirmation.",
+	"err.cli.confirmationRequired.threadTaskCancel.hint": "Inspect the current thread and cancel serial, then pass {flag}.",
+	"err.cli.confirmationRequired.logLevel": "Setting {logger} to {level} may produce excessive logs.",
+	"err.cli.confirmationRequired.logLevel.hint": "Review the target logger and impact, then pass {flag}.",
+	"err.cli.confirmationRequired.logCluster": "Applying the Logback configuration will replace the complete configuration on all reachable cluster nodes.",
+	"err.cli.confirmationRequired.logCluster.hint": "Review the source configuration and target cluster, then pass {flag}.",
 	"err.cli.confirmationRequired.cloneOverwrite": "Cloning would overwrite existing local workspace project(s): {projectNames}.",
 	"err.cli.confirmationRequired.cloneOverwrite.hint": "Confirm the local project can be overwritten, then pass {flag}.",
 	"err.cli.confirmationRequired.projRemove": "Removing local workspace project(s) requires confirmation: {projectNames}.",
@@ -151,6 +182,9 @@
 	"err.db.nonReadOnlySql.hint": "Review the SQL impact, then run 'succapp db exec {flag}'.",
 	"err.net.httpStatusUnexpected": "Unexpected HTTP response status",
 	"err.net.httpStatusUnexpected.desc": "The remote service returned an HTTP status that the caller cannot classify. Check the error details or contact the administrator.",
+	"err.permission.denied": "Permission denied",
+	"err.permission.denied.desc": "The current account does not have permission to perform this operation.",
+	"err.permission.denied.hint": "Ask an administrator to grant the required permission, or retry with an authorized account.",
 	"workspace.compat.connectedServerAppears": "The connected server appears older than this workspace's recorded baseline. You may have connected to the wrong server.",
 	"workspace.compat.serverVersion": "Server version: {0} < {1}",
 	"workspace.extension.progress.create.done": "Created extension {0}.",
@@ -217,7 +251,7 @@
 	"cli.cmd.root.summary": "SuccApp command line interface.",
 	"cli.host.localeFallback": "Locale {0} is not available; using default messages.",
 	"cli.opt.help": "Show this help.",
-	"cli.opt.json": "Write NDJSON for scripts; content output uses Base64.",
+	"cli.opt.json": "Write NDJSON for scripts; binary content results use Base64.",
 	"cli.opt.locale": "Use the given locale for CLI messages.",
 	"cli.opt.lockTimeout": "Wait for a workspace lock before failing.",
 	"cli.opt.logLevel": "Set log level: trace, debug, info, warn, or error.",
@@ -286,9 +320,25 @@
 	"cli.cmd.db.sqlUpdateCount": "SQL update count: {0}",
 	"cli.cmd.db.query.empty": "Query succeeded; 0 rows returned.",
 	"cli.cmd.db.tableOrQueryConflict": "Pass either <table> or --query/--query-file, not both.",
+	"cli.cmd.db.connector.title": "Database connector",
+	"cli.cmd.db.connector.summary": "discover available server database connectors",
+	"cli.cmd.db.connector.desc": "Discover the database connectors available on the active server and inspect their connector-specific configuration fields.",
+	"cli.cmd.db.connector.connector": "Connector",
+	"cli.cmd.db.connector.displayName": "Display name",
+	"cli.cmd.db.connector.dbKind": "Database kind",
+	"cli.cmd.db.connector.required": "Required",
+	"cli.cmd.db.connector.defaultValue": "Default",
+	"cli.cmd.db.connector.secret": "secret",
+	"cli.cmd.db.connector.list.summary": "List database connectors available on the server.",
+	"cli.cmd.db.connector.list.desc": "List the database connectors available for datasource creation on the active server.",
+	"cli.cmd.db.connector.show.summary": "Show the configuration fields supported by a database connector.",
+	"cli.cmd.db.connector.show.desc": "Show common and connector-specific datasource configuration fields, safe defaults, and the JDBC URL template reported by the active server.",
+	"cli.cmd.db.connector.show.connector": "Database connector ID reported by db connector list.",
 	"cli.cmd.db.source.title": "Database source",
 	"cli.cmd.db.source.summary": "inspect and manage database sources",
 	"cli.cmd.db.source.desc": "Inspect and manage database sources.",
+	"cli.cmd.db.source.*.config": "Read datasource configuration JSON from a file, or use - for stdin.",
+	"cli.cmd.db.source.*.test": "Test the connection before saving.",
 	"cli.cmd.db.source.list.summary": "List visible data sources.",
 	"cli.cmd.db.source.list.desc": "List data sources visible to the active SuccApp server session.",
 	"cli.cmd.db.source.list.empty": "No data sources are available.",
@@ -300,16 +350,14 @@
 	"cli.cmd.db.source.test.summary": "Test connectivity for an existing datasource or an unsaved JSON configuration.",
 	"cli.cmd.db.source.test.desc": "Validate connectivity for an existing datasource, or for a JSON configuration without saving it. Both modes return the logical default schema, database versions, and JDBC driver details.",
 	"cli.cmd.db.source.test.datasource": "Name of the existing datasource to test.",
-	"cli.cmd.db.source.test.config": "Read datasource configuration JSON from a file, or use - for stdin.",
+	"cli.cmd.db.source.template.summary": "Generate a safe datasource JSON template for a server connector.",
+	"cli.cmd.db.source.template.desc": "Generate a datasource configuration template for a connector on the active server. The template uses the connector's defaults and never contains a password or other secret value.",
+	"cli.cmd.db.source.template.connector": "Database connector ID reported by db connector list.",
 	"cli.cmd.db.source.create.summary": "Create a datasource.",
-	"cli.cmd.db.source.create.desc": "Create a datasource from a JSON configuration.",
-	"cli.cmd.db.source.create.config": "Read datasource configuration JSON from a file, or use - for stdin.",
-	"cli.cmd.db.source.create.test": "Test the connection before saving.",
+	"cli.cmd.db.source.create.desc": "Create a datasource from a JSON configuration. In a SuccApp workspace, AI agents should first read .agents/skills/succapp-docs/SKILL.md and follow its index to the datasource metadata and connector configuration documentation.",
 	"cli.cmd.db.source.create.created": "Created data source: {0}",
 	"cli.cmd.db.source.update.summary": "Update a datasource.",
 	"cli.cmd.db.source.update.desc": "Update a datasource from a JSON configuration.",
-	"cli.cmd.db.source.update.config": "Read datasource configuration JSON from a file, or use - for stdin.",
-	"cli.cmd.db.source.update.test": "Test the connection before saving.",
 	"cli.cmd.db.source.update.updated": "Updated data source: {0}",
 	"cli.cmd.db.source.remove.summary": "Delete a datasource.",
 	"cli.cmd.db.source.remove.desc": "Delete a datasource after explicit confirmation.",
@@ -334,19 +382,16 @@
 	"cli.cmd.db.table.describe.summary": "Describe a database table.",
 	"cli.cmd.db.table.describe.desc": "Describe columns and metadata for a database table.",
 	"cli.cmd.db.table.describe.schema": "Schema name.",
+	"cli.cmd.db.*.file": "Read SQL from a file.",
+	"cli.cmd.db.*.schema": "SQL execution schema.",
+	"cli.cmd.db.*.timeout": "SQL timeout in seconds. Defaults to 30.",
 	"cli.cmd.db.query.summary": "Execute a read-only SQL query.",
 	"cli.cmd.db.query.desc": "Execute SQL through Dev Tool v2. SuccApp CLI only allows read-only queries.",
-	"cli.cmd.db.query.file": "Read SQL from a file.",
-	"cli.cmd.db.query.schema": "SQL execution schema.",
-	"cli.cmd.db.query.timeout": "SQL timeout in seconds. Defaults to 30.",
 	"cli.cmd.db.query.maxRows": "Maximum returned row count.",
 	"cli.cmd.db.query.nonReadOnlySql": "db query only allows read-only SQL. Use db exec for write or schema changes; add --force only after confirming the impact.",
 	"cli.cmd.db.query.sqlOrFileConflict": "Pass SQL either as <sql> or --file, not both.",
 	"cli.cmd.db.exec.summary": "Execute any SQL.",
 	"cli.cmd.db.exec.desc": "Execute SQL through Dev Tool v2. Write or schema changes require explicit confirmation.",
-	"cli.cmd.db.exec.file": "Read SQL from a file.",
-	"cli.cmd.db.exec.schema": "SQL execution schema.",
-	"cli.cmd.db.exec.timeout": "SQL timeout in seconds. Defaults to 30.",
 	"cli.cmd.db.exec.maxRows": "Limit returned rows for result sets.",
 	"cli.cmd.db.exec.force": "Confirm SQL marked dangerous by safety analysis.",
 	"cli.cmd.db.exec.dangerousSql": "Dangerous SQL was blocked. Review the impact before rerunning with --force.{0}",
@@ -359,13 +404,11 @@
 	"cli.cmd.db.import.mode": "Import mode. Defaults to append; truncate and replace must be passed explicitly.",
 	"cli.cmd.db.import.dryRun": "Validate import without writing rows.",
 	"cli.cmd.db.import.schema": "Table schema.",
-	"cli.cmd.db.import.timeout": "SQL timeout in seconds. Defaults to 30.",
 	"cli.cmd.db.export.summary": "Export table data or a query result as CSV.",
 	"cli.cmd.db.export.desc": "Export table data or a query result as CSV.",
 	"cli.cmd.db.export.query": "Export a query result instead of table data.",
 	"cli.cmd.db.export.queryFile": "Read export query SQL from a file.",
 	"cli.cmd.db.export.schema": "Table schema or SQL execution schema.",
-	"cli.cmd.db.export.timeout": "SQL timeout in seconds. Defaults to 30.",
 	"cli.cmd.db.export.output": "Write CSV output to a local file.",
 	"cli.cmd.db.export.force": "Overwrite the output file if it already exists.",
 	"cli.cmd.db.export.exportedData": "Exported data to {0}",
@@ -391,6 +434,182 @@
 	"cli.cmd.server.cache.clean.desc": "Clean a server-side system cache entry by <name>, or all caches with --all.",
 	"cli.cmd.server.cache.clean.all": "Clean all server cache entries.",
 	"cli.cmd.server.cache.clean.cleaned": "Server cache cleaned: {1} ({0})",
+	"cli.cmd.server.cluster.title": "Server cluster",
+	"cli.cmd.server.cluster.summary": "inspect server cluster nodes",
+	"cli.cmd.server.cluster.desc": "Inspect cluster membership, health, network state, and runtime diagnostics.",
+	"cli.cmd.server.cluster.list.summary": "List server cluster nodes.",
+	"cli.cmd.server.cluster.list.desc": "List the same cluster node data used by the server system-settings page.",
+	"cli.cmd.server.cluster.list.health": "Only include nodes with this health severity: ok, warning, error, or unknown.",
+	"cli.cmd.server.cluster.list.watch": "Continuously refresh the cluster status until interrupted.",
+	"cli.cmd.server.cluster.list.interval": "Set the watch refresh interval in milliseconds (3000 to 60000). Requires --watch.",
+	"cli.cmd.server.cluster.list.empty": "No cluster nodes match the current filter.",
+	"cli.cmd.server.cluster.list.updatedAt": "Updated: {0}",
+	"cli.cmd.server.cluster.show.summary": "Show one server cluster node.",
+	"cli.cmd.server.cluster.show.desc": "Show an exact cluster node by ID using the same scoped information layout as server info.",
+	"cli.cmd.server.cluster.show.scope": "Show only the selected human-output details. Repeat or use comma-separated values: product, sys, inspect, jvm, env, all.",
+	"cli.cmd.server.cluster.show.all": "Show all human-output detail scopes.",
+	"cli.cmd.server.cluster.out.name": "Name",
+	"cli.cmd.server.cluster.out.role": "Role",
+	"cli.cmd.server.cluster.out.health": "Health",
+	"cli.cmd.server.cluster.out.current": "Current",
+	"cli.cmd.server.cluster.out.master": "Master",
+	"cli.cmd.server.cluster.out.heartbeat": "Heartbeat age",
+	"cli.cmd.server.cluster.out.latency": "Latency",
+	"cli.cmd.server.cluster.out.sessions": "Sessions",
+	"cli.cmd.server.cluster.out.startedAt": "Started",
+	"cli.cmd.server.cluster.out.licensePermitted": "Cluster license permitted",
+	"cli.cmd.server.cluster.out.channelPort": "Channel port",
+	"cli.cmd.server.cluster.out.networkState": "Network state",
+	"cli.cmd.server.cluster.out.processId": "Process ID",
+	"cli.cmd.server.cluster.out.osUser": "OS user",
+	"cli.cmd.server.cluster.out.processors": "Processors",
+	"cli.cmd.server.cluster.out.jvmCpu": "JVM CPU",
+	"cli.cmd.server.cluster.out.systemCpu": "System CPU",
+	"cli.cmd.server.cluster.out.jvmMaxMemory": "JVM max memory",
+	"cli.cmd.server.cluster.out.physicalMemory": "Physical memory",
+	"cli.cmd.server.cluster.out.physicalFreeMemory": "Free physical memory",
+	"cli.cmd.server.cluster.out.diskTotal": "Disk total",
+	"cli.cmd.server.cluster.out.diskFree": "Disk free",
+	"cli.cmd.server.cluster.out.diskUsable": "Disk usable",
+	"cli.cmd.server.cluster.out.deployPath": "Deploy path",
+	"cli.cmd.server.cluster.out.lastReceivedAt": "Last received",
+	"cli.cmd.server.cluster.out.lastSentAt": "Last sent",
+	"cli.cmd.server.thread.title": "Server threads",
+	"cli.cmd.server.thread.summary": "inspect JVM threads",
+	"cli.cmd.server.thread.desc": "Inspect JVM thread snapshots and request cancellation of registered product tasks.",
+	"cli.cmd.server.thread.*.state": "Only include this JVM state: new, runnable, blocked, waiting, timed-waiting, or terminated.",
+	"cli.cmd.server.thread.*.working": "Only include threads that are currently doing work.",
+	"cli.cmd.server.thread.*.sql": "Only include threads that are currently executing SQL.",
+	"cli.cmd.server.thread.list.summary": "List JVM threads.",
+	"cli.cmd.server.thread.list.desc": "List JVM thread summaries without full stack traces.",
+	"cli.cmd.server.thread.list.cluster": "Run the query on one cluster node.",
+	"cli.cmd.server.thread.list.empty": "No JVM threads match the current filter.",
+	"cli.cmd.server.thread.dump.summary": "Capture a JVM thread dump.",
+	"cli.cmd.server.thread.dump.desc": "Capture matching JVM threads with untruncated stack traces.",
+	"cli.cmd.server.thread.dump.cluster": "Capture the thread dump from one cluster node.",
+	"cli.cmd.server.thread.dump.deadlocks.none": "Deadlocks: none",
+	"cli.cmd.server.thread.dump.deadlocks.found": "Deadlocks: {0}",
+	"cli.cmd.server.thread.dump.waitingLock": "waiting on {0}",
+	"cli.cmd.server.thread.dump.waitingLockOwned": "waiting on {0}, owned by thread #{1}",
+	"cli.cmd.server.thread.top.summary": "Sample JVM thread hotspots.",
+	"cli.cmd.server.thread.top.desc": "Poll raw CPU, thread, memory, and GC samples, then analyze them locally without retaining a server-side report.",
+	"cli.cmd.server.thread.top.cluster": "Sample one cluster node, or use all to poll every current member concurrently.",
+	"cli.cmd.server.thread.top.duration": "Set the client-side analysis window from 1s to 20s; use an ms or s suffix.",
+	"cli.cmd.server.thread.top.interval": "Set each server sampling window from 200ms to 2s; the analysis window must contain at least two samples.",
+	"cli.cmd.server.thread.top.refresh": "Set how often the live client-side report refreshes from 500ms to 5s.",
+	"cli.cmd.server.thread.top.limit": "Limit hotspot and stall-candidate rows from 1 to 50.",
+	"cli.cmd.server.thread.top.noProgress": "Suppress the live report and print only the final report.",
+	"cli.cmd.server.thread.top.nodeSummary": "Node {0}: sampled for {1}, {2} samples across {3} observed threads.",
+	"cli.cmd.server.thread.top.cpuSummary": "JVM process CPU: {0}; accounted Java-thread CPU: {1}.",
+	"cli.cmd.server.thread.top.memorySummary": "Memory: heap {0} (peak {1}, delta {2}); non-heap {3}; direct buffers {4}.",
+	"cli.cmd.server.thread.top.gcSummary": "GC time ratio over the sampling window: {0}.",
+	"cli.cmd.server.thread.top.clusterSummary": "Cluster nodes: {0}/{1} reported ({2}); client analysis window: {3}.",
+	"cli.cmd.server.thread.top.status.completed": "completed",
+	"cli.cmd.server.thread.top.status.partial": "partial",
+	"cli.cmd.server.thread.top.status.failed": "failed",
+	"cli.cmd.server.thread.top.reason.deadlock": "deadlock",
+	"cli.cmd.server.thread.top.reason.monitorBlocked": "monitor blocked",
+	"cli.cmd.server.thread.top.reason.sqlWait": "SQL wait",
+	"cli.cmd.server.thread.top.reason.ioWait": "I/O wait",
+	"cli.cmd.server.thread.top.reason.cpuIntensive": "CPU intensive",
+	"cli.cmd.server.thread.top.reason.hotLoop": "possible hot loop",
+	"cli.cmd.server.thread.top.warning.cpuUnavailable": "thread CPU time is unavailable",
+	"cli.cmd.server.thread.top.warning.threadLimit": "the client thread tracking limit was reached",
+	"cli.cmd.server.thread.top.warning.partialCluster": "some cluster samples are incomplete",
+	"cli.cmd.server.thread.top.warning.sampleFailed": "a sample failed: {0}",
+	"cli.cmd.server.thread.top.hotThreads": "Hot threads:",
+	"cli.cmd.server.thread.top.stallCandidates": "Long-running thread findings (diagnostic clues, not confirmed faults):",
+	"cli.cmd.server.thread.top.warnings": "Warnings: {0}",
+	"cli.cmd.server.thread.top.out.node": "Node",
+	"cli.cmd.server.thread.top.out.cpu": "CPU",
+	"cli.cmd.server.thread.top.out.processShare": "Process share",
+	"cli.cmd.server.thread.top.out.location": "Top frame",
+	"cli.cmd.server.thread.top.out.details": "Details",
+	"cli.cmd.server.thread.top.out.reason": "Reason",
+	"cli.cmd.server.thread.top.out.hits": "Hits",
+	"cli.cmd.server.thread.top.out.status": "Status",
+	"cli.cmd.server.thread.top.out.error": "Error",
+	"cli.cmd.server.thread.top.out.samples": "Samples",
+	"cli.cmd.server.thread.top.out.heap": "Heap",
+	"cli.cmd.server.thread.top.out.heapDelta": "Heap delta",
+	"cli.cmd.server.thread.top.out.collector": "Collector",
+	"cli.cmd.server.thread.top.out.gcCount": "Collections",
+	"cli.cmd.server.thread.top.out.gcTime": "GC time",
+	"cli.cmd.server.thread.show.summary": "Show one JVM thread.",
+	"cli.cmd.server.thread.show.desc": "Show the current thread snapshot, authorized SQL details, and full stack trace.",
+	"cli.cmd.server.thread.show.cluster": "Read the thread from one cluster node.",
+	"cli.cmd.server.thread.show.stack": "Stack:",
+	"cli.cmd.server.thread.show.stackEmpty": "  (stack is no longer available)",
+	"cli.cmd.server.thread.cancel.summary": "Request cancellation of a JVM thread task.",
+	"cli.cmd.server.thread.cancel.desc": "Request cooperative cancellation of the registered product task that still matches the cancel serial.",
+	"cli.cmd.server.thread.cancel.cancelSerial": "Require the current cancel serial returned by thread list or show.",
+	"cli.cmd.server.thread.cancel.cluster": "Cancel the task on one cluster node.",
+	"cli.cmd.server.thread.cancel.force": "Confirm the cooperative cancellation request.",
+	"cli.cmd.server.thread.cancel.requested": "Cancellation requested for thread {0} on {1}.",
+	"cli.cmd.server.thread.out.id": "ID",
+	"cli.cmd.server.thread.out.working": "Working",
+	"cli.cmd.server.thread.out.state": "State",
+	"cli.cmd.server.thread.out.executingSql": "SQL",
+	"cli.cmd.server.thread.out.cancelable": "Cancelable",
+	"cli.cmd.server.thread.out.user": "User",
+	"cli.cmd.server.thread.out.elapsed": "Elapsed",
+	"cli.cmd.server.thread.out.name": "Name",
+	"cli.cmd.server.thread.out.description": "Description",
+	"cli.cmd.server.thread.out.taskSerial": "Task serial",
+	"cli.cmd.server.thread.out.cancelSerial": "Cancel serial",
+	"cli.cmd.server.thread.out.startedAt": "Started",
+	"cli.cmd.server.thread.out.datasource": "Datasource",
+	"cli.cmd.server.thread.out.logAvailable": "Log available",
+	"cli.cmd.server.techLog.title": "Server technical log",
+	"cli.cmd.server.techLog.summary": "inspect and manage server technical logs",
+	"cli.cmd.server.techLog.desc": "Inspect technical logs and manage runtime logger levels. These commands require access to the system-settings console.",
+	"cli.cmd.server.techLog.*.cluster": "Read from a named cluster node; omit for the current HTTP node. Find node names with 'succapp server cluster list'.",
+	"cli.cmd.server.techLog.list.summary": "List technical log files.",
+	"cli.cmd.server.techLog.list.desc": "List the same .log files shown by the server system-settings console. Requires console view permission.",
+	"cli.cmd.server.techLog.list.empty": "No technical log files are available on this node.",
+	"cli.cmd.server.techLog.tail.summary": "Read the technical log tail.",
+	"cli.cmd.server.techLog.tail.desc": "Read the active technical log using the system-settings cursor protocol. Requires console view permission. One-shot JSON keeps content as plain log text.",
+	"cli.cmd.server.techLog.tail.lines": "Keep this many lines from the initial log fragment (1 to 5000, default 200).",
+	"cli.cmd.server.techLog.tail.from": "Continue from a previous one-shot JSON result; requires --log-file.",
+	"cli.cmd.server.techLog.tail.logFile": "Use the log file from a previous one-shot JSON result; requires --from.",
+	"cli.cmd.server.techLog.tail.follow": "Continue polling and append new log content until interrupted with Ctrl+C.",
+	"cli.cmd.server.techLog.tail.interval": "Set the follow polling interval in milliseconds (500 to 60000). Requires --follow.",
+	"cli.cmd.server.techLog.tail.retry": "Temporary network error; retry {0} in {1} ms.",
+	"cli.cmd.server.techLog.download.summary": "Download a technical log file.",
+	"cli.cmd.server.techLog.download.desc": "Download a file returned by 'succapp server tech-log list'. Requires console log export permission.",
+	"cli.cmd.server.techLog.download.cluster": "Download from a named cluster node; omit for the current HTTP node. Find node names with 'succapp server cluster list'.",
+	"cli.cmd.server.techLog.download.file": "Use the exact file name returned by 'succapp server tech-log list'.",
+	"cli.cmd.server.techLog.download.output": "Write the log to this local file.",
+	"cli.cmd.server.techLog.download.force": "Overwrite the local output file if it exists.",
+	"cli.cmd.server.techLog.download.downloaded": "Downloaded technical log {0} to {1}",
+	"cli.cmd.server.techLog.level.title": "Technical log level",
+	"cli.cmd.server.techLog.level.summary": "inspect and manage logger levels",
+	"cli.cmd.server.techLog.level.desc": "Inspect, persist, hot-apply, and reset logger levels. These commands require system-settings console view permission.",
+	"cli.cmd.server.techLog.level.*.cluster": "Modify a named cluster node; omit for the current HTTP node. Find node names with 'succapp server cluster list'.",
+	"cli.cmd.server.techLog.level.list.summary": "List logger levels.",
+	"cli.cmd.server.techLog.level.list.desc": "List persisted and effective logger levels on the target node. Requires console view permission.",
+	"cli.cmd.server.techLog.level.list.cluster": "Read from a named cluster node; omit for the current HTTP node. Find node names with 'succapp server cluster list'.",
+	"cli.cmd.server.techLog.level.set.summary": "Set a logger level.",
+	"cli.cmd.server.techLog.level.set.desc": "Persist and hot-apply one logger level on the target node. Requires console view permission.",
+	"cli.cmd.server.techLog.level.set.force": "Confirm TRACE or DEBUG after reviewing the operational impact.",
+	"cli.cmd.server.techLog.level.set.logger": "Use an exact named logger; root and wildcards are not allowed.",
+	"cli.cmd.server.techLog.level.set.level": "Use TRACE, DEBUG, INFO, or ERROR. Values are case-sensitive.",
+	"cli.cmd.server.techLog.level.set.updated": "Updated logger {0} to {1}",
+	"cli.cmd.server.techLog.level.reset.summary": "Reset a named logger level.",
+	"cli.cmd.server.techLog.level.reset.desc": "Remove a logger's explicit level so it inherits from its parent. Requires console view permission.",
+	"cli.cmd.server.techLog.level.reset.logger": "Use an exact named logger; root and wildcards are not allowed.",
+	"cli.cmd.server.techLog.level.reset.reset": "Reset logger level: {0}",
+	"cli.cmd.server.techLog.level.apply.summary": "Apply logger levels to the cluster.",
+	"cli.cmd.server.techLog.level.apply.desc": "Submit the current HTTP node's complete Logback configuration to reachable peers. Requires console view permission. Success confirms submission only, not per-node completion.",
+	"cli.cmd.server.techLog.level.apply.force": "Confirm replacing the complete Logback configuration on reachable cluster peers.",
+	"cli.cmd.server.techLog.level.apply.applied": "The Logback configuration was submitted to the cluster.",
+	"cli.cmd.server.techLog.out.file": "File",
+	"cli.cmd.server.techLog.out.size": "Size",
+	"cli.cmd.server.techLog.out.modified": "Modified",
+	"cli.cmd.server.techLog.out.logger": "Logger",
+	"cli.cmd.server.techLog.out.level": "Level",
+	"cli.cmd.server.techLog.out.configuredLevel": "Configured",
+	"cli.cmd.server.techLog.out.effectiveLevel": "Effective",
 	"cli.cmd.server.proj.title": "Server project",
 	"cli.cmd.server.proj.summary": "inspect server projects",
 	"cli.cmd.server.proj.desc": "Inspect server projects.",
@@ -404,6 +623,8 @@
 	"cli.cmd.server.file.title": "Server file",
 	"cli.cmd.server.file.summary": "inspect and operate server metadata files",
 	"cli.cmd.server.file.desc": "Inspect and operate server metadata files.",
+	"cli.cmd.server.file.*.file": "Read content from a local file.",
+	"cli.cmd.server.file.*.stdin": "Read content from stdin.",
 	"cli.cmd.server.file.badValue": "Invalid value for {0}: {1}",
 	"cli.cmd.server.file.expectedRevRequired": "{0} requires --expected-revision=<n> unless --force is used.",
 	"cli.cmd.server.file.fileOrStdinConflict": "Use either --file or --stdin, not both.",
@@ -438,6 +659,20 @@
 	"cli.cmd.server.file.search.nameHint": "File names match exactly without wildcards; wildcards are not added automatically.",
 	"cli.cmd.server.file.search.hasMore": "Only the {0} most relevant files are shown; add a project, directory, type, or more specific keyword to narrow the search.",
 	"cli.cmd.server.file.search.warningDetails": "Content was not checked; use --json for full details.",
+	"cli.cmd.server.recyclebin.title": "Server recycle bin",
+	"cli.cmd.server.recyclebin.summary": "Search files in the server recycle bin",
+	"cli.cmd.server.recyclebin.desc": "Search and inspect deleted files that are visible in server project recycle bins.",
+	"cli.cmd.server.recyclebin.search.summary": "Search server recycle bin files.",
+	"cli.cmd.server.recyclebin.search.desc": "Search visible files in a project recycle bin by keyword, path, type, or delete time.",
+	"cli.cmd.server.recyclebin.search.url": "Optional server URL. A lone non-URL first argument is treated as <project>.",
+	"cli.cmd.server.recyclebin.search.project": "Project name whose recycle bin should be searched.",
+	"cli.cmd.server.recyclebin.search.query": "Search keyword, full metadata path, or path glob.",
+	"cli.cmd.server.recyclebin.search.type": "Limit search to metadata type. Repeat or use comma-separated values.",
+	"cli.cmd.server.recyclebin.search.deletedAfter": "Only return files deleted at or after this time. Accepts epoch millis or ISO-8601.",
+	"cli.cmd.server.recyclebin.search.deletedBefore": "Only return files deleted at or before this time. Accepts epoch millis or ISO-8601.",
+	"cli.cmd.server.recyclebin.search.limit": "Return at most this many files. Defaults to 50; maximum is 1000.",
+	"cli.cmd.server.recyclebin.search.empty": "No matching recycle bin files in project {0}.",
+	"cli.cmd.server.recyclebin.search.hasMore": "Only {0} recycle bin files are shown; add a type, delete time range, or more specific keyword to narrow the search.",
 	"cli.cmd.server.file.locate.summary": "Locate a server file by metadata ID.",
 	"cli.cmd.server.file.locate.desc": "Resolve a metadata ID to the current server file path.",
 	"cli.cmd.server.file.locate.url": "Only print the server view or edit URL.",
@@ -468,12 +703,8 @@
 	"cli.cmd.server.file.history.limit": "Limit the number of history records.",
 	"cli.cmd.server.file.create.summary": "Create a server file.",
 	"cli.cmd.server.file.create.desc": "Create a server file and fail if it already exists.",
-	"cli.cmd.server.file.create.file": "Read content from a local file.",
-	"cli.cmd.server.file.create.stdin": "Read content from stdin.",
 	"cli.cmd.server.file.update.summary": "Update a server file.",
 	"cli.cmd.server.file.update.desc": "Update an existing server file with revision protection by default.",
-	"cli.cmd.server.file.update.file": "Read content from a local file.",
-	"cli.cmd.server.file.update.stdin": "Read content from stdin.",
 	"cli.cmd.server.file.update.expectedRevision": "Only update when the server revision still matches.",
 	"cli.cmd.server.file.update.force": "Overwrite the current server content without revision protection.",
 	"cli.cmd.server.file.remove.summary": "Delete a server file.",
@@ -821,6 +1052,8 @@
 	"cli.out.header.command": "Command",
 	"cli.out.header.comment": "Comment",
 	"cli.out.header.default": "Default",
+	"cli.out.header.deleted": "Deleted",
+	"cli.out.header.deletedBy": "Deleted by",
 	"cli.out.header.description": "Description",
 	"cli.out.header.error": "Error",
 	"cli.out.header.extension": "Extension",
@@ -836,6 +1069,7 @@
 	"cli.out.header.null": "Null",
 	"cli.out.header.path": "Path",
 	"cli.out.header.project": "Project",
+	"cli.out.header.recyclebinId": "Recycle bin ID",
 	"cli.out.header.remote": "Remote path",
 	"cli.out.header.revision": "Revision",
 	"cli.out.header.schema": "Schema",
@@ -932,6 +1166,12 @@
 	"cli.input.password": "password",
 	"cli.input.projectName": "project name",
 	"cli.input.server": "server",
+	"cli.input.clusterNode": "cluster node",
+	"cli.input.threadId": "thread ID",
+	"cli.input.cancelSerial": "cancel serial",
+	"cli.input.techLogFile": "technical log file",
+	"cli.input.logger": "logger",
+	"cli.input.logLevel": "log level",
 	"cli.input.serverFilePath": "server file path",
 	"cli.input.settingsPatch": "settings patch",
 	"cli.input.settingsTarget": "settings target",
@@ -1182,9 +1422,9 @@
 	"vs.ui.remote.remoteServerFiles": "Remote server files are read-only in the Servers view. Use sync commands to edit local workspace files.",
 	"vs.ui.status.clickReconnectOr": "Click to reconnect or switch servers",
 	"vs.ui.status.clickSwitchServers": "Click to switch servers",
-	"vs.ui.status.initializingSuccBi": "Initializing SuccBI connection state",
-	"vs.ui.status.succBiDisconnected": "SuccBI: Disconnected",
-	"vs.ui.status.succBiInitializing": "SuccBI: Initializing",
+	"vs.ui.status.initializingSuccBi": "Initializing SuccApp connection state",
+	"vs.ui.status.succBiDisconnected": "SuccApp: Disconnected",
+	"vs.ui.status.succBiInitializing": "SuccApp: Initializing",
 	"vs.ui.status.switchServer": "Switch Server",
 	"vs.ui.vfs.remoteServerConnected": "Remote server is not connected: {0}.",
 	"vs.ui.vfs.remoteServerFiles": "Remote server files are read-only: {0}. Clone the project and sync local changes instead.",
@@ -1243,28 +1483,23 @@
 	"cli.cmd.model.indexes.summary": "List model indexes.",
 	"cli.cmd.model.indexes.desc": "List primary keys, business keys, and model indexes.",
 	"cli.cmd.model.indexes.empty": "This model has no indexes.",
+	"cli.cmd.model.*.select": "Select fields, separated by commas. Can be repeated.",
+	"cli.cmd.model.*.maxRows": "Maximum preview row count.",
+	"cli.cmd.model.*.query": "Query DSL JSON.",
+	"cli.cmd.model.*.queryFile": "Read Query DSL JSON from a file.",
+	"cli.cmd.model.*.stdin": "Read Query DSL JSON from stdin.",
 	"cli.cmd.model.select.summary": "Select rows from one model.",
 	"cli.cmd.model.select.desc": "Select rows from one .tbl model with SuccApp expression filters.",
-	"cli.cmd.model.select.select": "Select fields, separated by commas. Can be repeated.",
 	"cli.cmd.model.select.where": "Filter expression, for example STATUS='ACTIVE'.",
 	"cli.cmd.model.select.order": "Sort expression, for example CREATE_TIME desc.",
 	"cli.cmd.model.select.limit": "Maximum returned row count.",
-	"cli.cmd.model.select.maxRows": "Maximum preview row count.",
 	"cli.cmd.model.query.summary": "Query models with Query DSL.",
 	"cli.cmd.model.query.desc": "Query one or more .tbl models with Query DSL JSON.\n\nJSON type: succ.meta.dw.Query in query.d.ts.\nOnline DTS: https://docs.succapp.com/dev-types/types/meta/file-types/query.d.ts\nWorkspace DTS: .agents/skills/succapp-docs/dev-types/types/meta/file-types/query.d.ts",
-	"cli.cmd.model.query.query": "Query DSL JSON.",
-	"cli.cmd.model.query.queryFile": "Read Query DSL JSON from a file.",
-	"cli.cmd.model.query.stdin": "Read Query DSL JSON from stdin.",
-	"cli.cmd.model.query.maxRows": "Maximum preview row count.",
 	"cli.cmd.model.query.empty": "Query succeeded; 0 rows returned.",
 	"cli.cmd.model.export.summary": "Export model query results as CSV.",
 	"cli.cmd.model.export.desc": "Export one model or Query DSL result as CSV.",
-	"cli.cmd.model.export.select": "Select fields, separated by commas. Can be repeated.",
 	"cli.cmd.model.export.where": "Filter expression for single-model export.",
 	"cli.cmd.model.export.order": "Sort expression for single-model export.",
-	"cli.cmd.model.export.query": "Query DSL JSON.",
-	"cli.cmd.model.export.queryFile": "Read Query DSL JSON from a file.",
-	"cli.cmd.model.export.stdin": "Read Query DSL JSON from stdin.",
 	"cli.cmd.model.export.output": "Write CSV output to a local file.",
 	"cli.cmd.model.export.force": "Overwrite the output file if it already exists.",
 	"cli.cmd.model.export.exportedData": "Exported data to {0}",