ysk-omni 1.0.0

package/public/admin/i18n.js

@@ -0,0 +1,2442 @@
+/** Admin i18n — default: system zh* → zh-Hant, else en; manual choice wins. */
+const LANG_KEY = 'gog_admin_lang';
+
+const dict = {
+  en: {
+    brand: 'YSK Omni',
+    brandSub: 'Admin Panel',
+    loginTitle: 'Admin',
+    loginLabel: 'API Key',
+    loginOtpLabel: 'One-time login code',
+    loginBtn: 'Sign in',
+    loginCmdHint: 'Get a key in terminal:',
+    loginOtpHint: 'Generate a code in terminal (required every login):',
+    loginOtpExpiry: 'Code expires in 5 minutes and can be used only once.',
+    loginOtpFail: 'Invalid or expired code',
+    loginLostKey: 'Lost old key? Create a new admin key (plaintext is not stored).',
+    loginCopy: 'Copy',
+    loginCopied: 'Copied',
+    needKey: 'Enter API key',
+    needOtp: 'Enter the one-time code from the terminal',
+    logout: 'Log out',
+    shell: {
+      menu: 'Open menu',
+      closeMenu: 'Close menu',
+    },
+    nav: {
+      dashboard: 'Dashboard',
+      chat: 'Chat',
+      chats: 'Chat logs',
+      keys: 'API Keys',
+      documents: 'Documents',
+      media: 'Media',
+      audit: 'Audit Logs',
+      settings: 'Safety',
+      apiFeatures: 'API features',
+      usage: 'Usage & Limits',
+      ddos: 'DDoS Center',
+      queue: 'Queue',
+      pm2: 'PM2',
+      system: 'System',
+    },
+    queue: {
+      title: 'Chat queue',
+      subtitle: 'Pause, drain, requeue, and tune concurrency.',
+      paused: 'Paused',
+      running: 'Consuming',
+      drain: 'Drain mode',
+      mode: 'Mode',
+      modeOff: 'Disabled',
+      depth: 'Depth',
+      queued: 'Queued',
+      leased: 'Leased',
+      activeJobs: 'Running',
+      dead: 'Dead letter',
+      oldest: 'Oldest wait',
+      concurrency: 'Per-key / global',
+      worker: 'In-process workers',
+      workerInstance: 'Worker instance',
+      workerInstanceHint: 'This process’s consumer ID (lease owner). Changes on restart.',
+      kpiActiveSub: '{n} active in this process',
+      consumer: 'Consumer',
+      admission: 'Admission',
+      accepting: 'Accepting jobs',
+      pause: 'Pause',
+      resume: 'Resume',
+      drainBtn: 'Drain',
+      undrain: 'Stop drain',
+      savePolicy: 'Save policy',
+      refresh: 'Refresh',
+      jobs: 'Jobs',
+      tabOverview: 'Overview',
+      tabJobs: 'Jobs',
+      tabPolicy: 'Policy',
+      jobsMeta: '{n} matching',
+      cancel: 'Cancel',
+      requeue: 'Requeue',
+      purgeDead: 'Purge DLQ & old jobs',
+      purgeTitle: 'Purge finished jobs?',
+      purgeConfirm:
+        'Deletes all dead-letter (DLQ) jobs now, plus succeeded / failed / cancelled jobs finished more than 24 hours ago.',
+      purgeConfirmBtn: 'Delete',
+      purgeDoneTitle: 'Purge complete',
+      purgeDoneMsg: 'Deleted {n} job(s).',
+      cancelConfirm: 'Cancel this job? If it is running, cancellation is cooperative.',
+      empty: 'No jobs match this filter',
+      enabled: 'Queue enabled',
+      masterOn: 'Queue on',
+      masterOff: 'Queue off',
+      masterHint: 'Master switch for the durable chat queue. Applies immediately.',
+      disabledBanner:
+        'Queue is disabled — new chat requests bypass the queue and run immediately (subject to concurrency limits).',
+      globalConcurrency: 'Global concurrency',
+      perKeyConcurrency: 'Per-key concurrency',
+      maxDepth: 'Max queue depth',
+      maxDepthKey: 'Max per key',
+      fairness: 'Fairness',
+      fifo: 'Global FIFO',
+      wrr: 'Weighted round-robin',
+      playgroundPriority: 'Playground priority (lower first)',
+      defaultPriority: 'Default priority',
+      leaseMs: 'Lease (ms)',
+      maxWaitMs: 'Max wait (ms)',
+      filterTitle: 'Filter jobs',
+      filterHint: 'Filter by status. Auto-refreshes.',
+      filterStatus: 'Status',
+      allStatuses: 'All statuses',
+      filterDead: 'Dead letter (DLQ)',
+      filterQueued: 'Queued',
+      filterRunning: 'Running / leased',
+      filterFailed: 'Failed',
+      filterSucceeded: 'Succeeded',
+      filterCancelled: 'Cancelled',
+      errorCol: 'Error',
+      priorityBtn: 'Priority',
+      priorityPh: 'Priority (0–1000, lower first)',
+      dlqTitle: 'Dead letter queue',
+      dlqHint: 'Jobs that exhausted retries — requeue or purge when ready.',
+      viewDlq: 'View DLQ',
+      statusPanel: 'Runtime status',
+      statusPanelHint: 'Live consumer, admission, and worker identity. Auto-refreshes every few seconds.',
+      policyTitle: 'Queue policy',
+      policyHint: 'Pick a scheme or fine-tune values. Save to apply. Editing pauses auto-refresh.',
+      presetTitle: 'Policy schemes',
+      presetHint: 'One-click presets. Active = matches form · Saved = currently stored.',
+      presetRelaxed: 'Relaxed',
+      presetBalanced: 'Balanced',
+      presetStrict: 'Strict',
+      presetCustom: 'Custom',
+      presetRelaxedHint:
+        'Higher concurrency and deeper queues — better for multi-key playgrounds and burst traffic.',
+      presetBalancedHint:
+        'Default production balance: fair round-robin, moderate depth, one job per key.',
+      presetStrictHint:
+        'Tight limits + global FIFO — protects the host when traffic is untrusted or resource is scarce.',
+      presetCustomHint: 'Values do not match a built-in scheme. Adjust fields or pick a scheme above.',
+      presetActiveLabel: 'Active: {name}',
+      presetFormLabel: 'Draft: {name}',
+      presetTagActive: 'Active',
+      presetTagDraft: 'Draft',
+      presetTagSaved: 'Saved',
+      hintGlobalConc: 'Max jobs running at once across all keys',
+      hintPerKeyConc: 'Max concurrent jobs for a single API key',
+      hintMaxDepth: 'Reject new jobs when total queue is full',
+      hintMaxDepthKey: 'Reject when this key has too many waiting/running jobs',
+      hintFairness: 'WRR shares capacity across keys; FIFO is global order by priority/time',
+      hintLease: 'How long a worker holds a job before reclaim',
+      hintMaxWait: 'Client wait timeout while queued',
+      colJob: 'Job / request',
+      colSource: 'Source',
+      colStatus: 'Status',
+      colModel: 'Model',
+      colPri: 'Pri',
+      colKey: 'API key',
+      colTry: 'Try',
+      colTime: 'Queued',
+      stQueued: 'queued',
+      stLeased: 'leased',
+      stRunning: 'running',
+      stSucceeded: 'succeeded',
+      stFailed: 'failed',
+      stDead: 'dead',
+      stCancelled: 'cancelled',
+      srcV1: 'API',
+      srcPlayground: 'Playground',
+      kpiDepthSub: '{q} queued · {l} leased',
+      kpiQueuedSub: 'Waiting for a worker',
+      kpiDeadSub: 'Exhausted attempts',
+      kpiOldestSub: 'Head of queue wait',
+      wait: 'Wait',
+      started: 'Started',
+      cancelReq: 'Cancel requested',
+    },
+    chat: {
+      title: 'Chat',
+      new: 'New chat',
+      send: 'Send',
+      stop: 'Stop',
+      stopped: 'stopped',
+      placeholder: 'Message… (Enter to send, Shift+Enter newline)',
+      keyMode: 'API key',
+      keySelect: 'API key',
+      useSessionKey: 'Signed-in admin key',
+      useCustomKey: 'Custom key',
+      customKey: 'Key',
+      includeReasoning: 'Show reasoning',
+      reasoning: 'Thinking',
+      needKey: 'Enter or select an API key',
+      attach: 'Upload',
+      attachLibrary: 'From library',
+      attachHint: 'Drop files anywhere on this page, upload, or pick from library',
+      dropTitle: 'Drop files to attach',
+      dropHint: 'Release to upload — same formats as the attach button',
+      formatsLabel: 'Formats',
+      formatsHint:
+        'txt, md, csv, json, xml, html, pdf, images (png/jpg/webp/gif), code (js/ts/py/go/rs/java/c/cpp/css/yml/sql/sh…)',
+      formatsReject: 'Unsupported type: {name}. Allowed: {formats}',
+      libraryTitle: 'Previously uploaded files',
+      librarySubtitle: 'Select files owned by the current API key (same formats as upload).',
+      librarySearch: 'Search by name…',
+      libraryEmpty: 'No matching files for this key',
+      libraryAdd: 'Add selected',
+      librarySelected: '{n} selected',
+      libraryAlready: 'Already attached',
+      libraryLoadFail: 'Could not load documents',
+      uploading: 'Uploading…',
+      uploadFail: 'Upload failed',
+      uploadProgress: 'Uploading {name}',
+      uploadProgressMulti: 'Uploading {name} ({i}/{n})',
+      emptyTitle: 'Start a conversation',
+      emptyHint:
+        'Send a message or attach files. Choose an image, video, or speech model to generate media in the conversation.',
+      needContent: 'Type a message or attach at least one file',
+      tooManyFiles: 'Too many files (max 10 per message)',
+      fileOnlyPrompt: 'Please review the attached files.',
+      removeFile: 'Remove',
+      docs: 'Attachments',
+      you: 'You',
+      assistant: 'Assistant',
+      streaming: 'Streaming…',
+      emptyReply: '(empty reply)',
+      systemPrompt: 'System prompt',
+      systemPlaceholder: 'Optional system instructions for the model…',
+      systemHint: 'Sent as a system message on every turn. Not shown in the chat bubbles.',
+      history: 'History',
+      historyEmpty: 'No saved conversations yet',
+      historySearch: 'Search topics…',
+      historyOpen: 'Show history',
+      historyClose: 'Close history',
+      rename: 'Rename',
+      renamePh: 'Conversation topic',
+      untitled: 'Untitled chat',
+      deleteConversation: 'Delete',
+      deleteConfirm: 'Delete this conversation? This cannot be undone.',
+      saveFail: 'Could not save conversation',
+      loadFail: 'Could not load conversation',
+      historyPrev: 'Previous',
+      historyNext: 'Next',
+      historyPage: 'Page {n} / {total}',
+      msgs: '{n} messages',
+      compress: 'Summarize for context',
+      compressConfirm:
+        'Generate a conversation summary for later turns? Your full chat history stays on screen. Only the model context is shortened. This uses one model call.',
+      compressing: 'Summarizing…',
+      compressNeedMore:
+        'Need at least 3 messages (or 2 long ones) to summarize. Continue chatting, then try again.',
+      compressFail: 'Could not create summary',
+      compressNeedSummary: 'Create a summary first (Summarize for context).',
+      compressedBadge: 'Summary',
+      compressOk: 'Summary ready — full history kept. Context mode set to summary.',
+      compressBusy: 'Wait for the current reply to finish',
+      compressResultTitle: 'Conversation summary',
+      compressView: 'View summary',
+      summaryMeta: 'Created: {when} · Based on {n} messages',
+      ctxPolicyTitle: 'Model context',
+      ctxRemark:
+        'Full messages stay visible. This only controls what is sent to the model next.',
+      ctxMode: 'Context',
+      ctxModeFull: 'Full history',
+      ctxModeSummary: 'Summary + recent',
+      ctxModeRecent: 'Recent only',
+      ctxModeFullLabel: 'Sending full history to the model',
+      ctxModeSummaryLabel: 'Sending summary + last {n} messages',
+      ctxModeRecentLabel: 'Sending last {n} messages only',
+      ctxRecentN: 'Recent N',
+      ctxLongHint:
+        'Long thread detected — consider Summary or Recent to reduce tokens and lag.',
+      loadOlder: 'Load {n} earlier messages',
+      showMore: 'Show more',
+      showLess: 'Show less',
+      copy: 'Copy',
+      copied: 'Copied',
+      copyFail: 'Copy failed',
+    },
+    status: {
+      success: 'success',
+      error: 'error',
+      timeout: 'timeout',
+      pending: 'pending',
+      active: 'active',
+      finished: 'finished',
+      online: 'online',
+      stopped: 'stopped',
+    },
+    dash: {
+      title: 'Dashboard',
+      subtitle: 'Traffic, queue, safety, and protection at a glance.',
+      last24: 'Requests (24h)',
+      totalChat: 'Total chats',
+      success: 'Success',
+      errors: 'Errors / timeout',
+      docs: 'Documents',
+      keys: 'Active keys',
+      concurrent: 'Grok concurrency',
+      recent: 'Recent API chats',
+      empty: 'No data yet',
+      emptyModels: 'No model traffic in the last 24h',
+      updated: 'Updated',
+      refresh: 'Refresh',
+      viewAll: 'View all',
+      openDdos: 'DDoS center',
+      openSettings: 'Safety',
+      openQueue: 'Open queue',
+      kpi24h: 'Requests (24h)',
+      kpi24hSub: '{ok} ok · {err} errors',
+      kpiSuccessRate: 'Success rate (24h)',
+      kpiSuccessRateSub: 'All-time {all}%',
+      kpiErrors: 'Errors (24h)',
+      kpiErrorsSub: 'All-time {all}',
+      kpiKeys: 'API keys',
+      kpiKeysSub: 'Active / total',
+      kpiDocs: 'Documents',
+      kpiMedia: 'Media assets',
+      kpiMediaSub: '{n} in 24h',
+      kpiDocsSub: 'Stored files',
+      kpiConv: 'Playground threads',
+      kpiConvSub: '{n} updated in 24h',
+      kpiSessions: 'OTP sessions',
+      kpiSessionsSub: 'Active admin logins',
+      kpiConcurrent: 'Grok concurrency',
+      kpiConcurrentSub: 'Active / max slots',
+      kpiQueue: 'Chat queue',
+      kpiQueueSub: 'Depth · running / max · dead',
+      kpiQueueSubLive: '{run}/{max} run · {dead} dead{wait}',
+      kpiQueuePaused: 'Paused',
+      kpiQueueDrain: 'Drain',
+      kpiQueueOff: 'Disabled',
+      kpiSafe: 'Global safe',
+      kpiSafeOn: 'On',
+      kpiSafeOff: 'Off',
+      kpiSafeSub: '{tools} · turns {turns} · {model}',
+      kpiSafeSubEmpty: 'Settings unavailable',
+      queuePanel: 'Chat queue',
+      queueState: 'State',
+      queueLive: 'Live',
+      qQueued: 'Queued',
+      qRunning: 'Running',
+      qDead: 'Dead',
+      qSucceeded: 'Succeeded',
+      qWorker: 'Worker',
+      qWorkerActive: 'active slots',
+      qOldest: 'oldest wait',
+      qUnavailable: 'Queue stats unavailable',
+      safety: 'Safety settings',
+      globalSafe: 'Global safe mode',
+      safeTools: 'Tools',
+      safeTurns: 'Max turns',
+      safeTimeout: 'Timeout',
+      defaultModel: 'Default model',
+      safetyHint:
+        'Affects safe-mode keys and forced-safe traffic. Playground OTP sessions use agent mode unless global safe is on.',
+      protection: 'Protection',
+      autoBan: 'Auto-ban',
+      on: 'On',
+      off: 'Off',
+      ruleAuth: 'Auth',
+      ruleRate: '429',
+      ruleConn: 'Conn',
+      ruleVelocity: 'Velocity',
+      bans: 'Blacklist',
+      blocked: 'Blocked hits',
+      rateHits: 'Rate-limit hits',
+      liveConn: 'Live connections',
+      proxy: 'Proxy IP',
+      hops: 'hops',
+      limits: 'Key/IP limits',
+      models24h: 'Models (24h)',
+      runtime: 'Runtime',
+      port: 'Listen port',
+      defaultPort: 'default',
+      env: 'Environment',
+      authMode: 'Admin auth',
+      authOtp: 'OTP session',
+      encryption: 'Encryption',
+      ready: 'Ready',
+      notReady: 'Not ready',
+    },
+    chats: {
+      title: 'Chat history',
+      total: 'Total',
+      decrypt: 'Open a row to view decrypted content.',
+      search: 'Search',
+      searchPh: 'Request ID, key name, model…',
+      filterTitle: 'Search & filters',
+      filterHint: 'Filter, then open a row for full detail.',
+      status: 'Status',
+      allStatus: 'All statuses',
+      model: 'Model',
+      allModels: 'All models',
+      apiKey: 'API key',
+      allKeys: 'All keys',
+      from: 'From',
+      to: 'To',
+      mode: 'Mode',
+      allModes: 'All modes',
+      hasDocs: 'Has attachments',
+      filter: 'Apply filters',
+      reset: 'Reset',
+      request: 'Request',
+      prompt: 'Prompt',
+      response: 'Response',
+      time: 'Time',
+      attachments: 'Attachments',
+      page: 'Page',
+      prev: 'Previous',
+      next: 'Next',
+      perPage: 'Per page',
+      detail: 'Chat detail',
+      noAttach: 'No attachments',
+      openFile: 'Open / preview',
+      close: 'Close',
+      copyPrompt: 'Copy prompt',
+      copyContent: 'Copy content',
+      copySystem: 'Copy system prompt',
+      copyRawPrompt: 'Copy raw prompt',
+      duration: 'Duration',
+      stream: 'Stream',
+      reasoning: 'Reasoning / thought',
+      content: 'Content (output)',
+      raw: 'Raw stored response',
+      rawPrompt: 'Raw stored prompt',
+      userPrompt: 'User / conversation prompt',
+      systemPrompt: 'System prompt',
+      systemHint: 'Extracted from the stored prompt (system role messages).',
+      noSystem: 'No system prompt in this request.',
+      hasSystem: 'Has system',
+      none: '(none)',
+      file: 'file',
+      img: 'img',
+      previewFailed: 'Preview failed',
+    },
+    keys: {
+      title: 'API Keys',
+      new: 'New key',
+      searchPh: 'Name or key prefix…',
+      name: 'Name',
+      role: 'Role',
+      mode: 'Mode',
+      rate: 'Rate / min',
+      status: 'Status',
+      created: 'Created',
+      edit: 'Edit',
+      revoke: 'Revoke',
+      confirmRevoke: 'Revoke this key?',
+      empty: 'No keys',
+      usage24: '24h use',
+      maxTurns: 'Max turns',
+      timeoutMs: 'Timeout (ms)',
+      ipWhitelist: 'IP whitelist',
+      ipWhitelistHint: 'One IP or CIDR per line. Empty = allow all IPs.',
+      ipWhitelistCol: 'IP allow',
+      ipAll: 'All IPs',
+      keyOnce: 'Store this key securely — shown once:',
+      roleClient: 'client',
+      roleAdmin: 'admin',
+      roleClientBadge: 'client',
+      roleAdminBadge: 'admin',
+      modeSafe: 'safe (external)',
+      modeAgent: 'agent (full tools)',
+      modeSafeBadge: 'safe',
+      modeAgentBadge: 'agent',
+      ipCount: '{n} IPs',
+      ipPlaceholder: '127.0.0.1\n203.0.113.0/24',
+      allowedModels: 'Allowed models',
+      allowedModelsHint: 'Select models this key may use. Empty = no restriction. Users list them with GET /v1/models.',
+      allowedModelsCol: 'Models',
+      modelsAll: 'All models',
+      modelsCount: '{n} models',
+      modelsExtra: 'Additional model ids',
+      modelsExtraHint: 'One model id per line for ids not listed above.',
+      modelsPlaceholder: 'org/repo:Q4_K_M',
+    },
+    docs: {
+      title: 'Documents',
+      total: 'Total',
+      file: 'File',
+      mime: 'MIME',
+      size: 'Size',
+      time: 'Time',
+      storage: 'Storage',
+      storageDb: 'Database (encrypted)',
+      storageFs: 'Filesystem (encrypted)',
+      storageHint:
+        'Encrypted storage · DB under {dbMax}, files in {dir} · max {upMax}.',
+      download: 'Download',
+      downloadFail: 'Download failed',
+      binaryPreview:
+        'This is a binary file (e.g. PDF). Preview is not available — please use Download.',
+      delete: 'Delete',
+      confirmDel: 'Delete this document?',
+      detail: 'Document detail',
+      preview: 'Preview',
+      copy: 'Copy content',
+      empty: 'No documents',
+      searchPh: 'File name or MIME…',
+      page: 'Page',
+      prev: 'Previous',
+      next: 'Next',
+    },
+    audit: {
+      title: 'Audit logs',
+      searchPh: 'Action, resource, IP, key…',
+      time: 'Time',
+      action: 'Action',
+      resource: 'Resource',
+      key: 'Key',
+      meta: 'Meta',
+      empty: 'No logs',
+      id: 'ID',
+      // keys use _ instead of . so t('audit.actions.xxx') path lookup works
+      actions: {
+        chat_create: 'Chat create',
+        document_upload: 'Document upload',
+        document_delete: 'Document delete',
+        document_list: 'Document list',
+        document_read: 'Document read',
+        document_download: 'Document download',
+        api_key_create: 'API key create',
+        api_key_update: 'API key update',
+        api_key_delete: 'API key revoke',
+        api_key_list: 'API key list',
+        settings_update: 'Settings update',
+        chat_admin_view: 'Chat admin view',
+        system_update: 'System update',
+        system_update_check: 'Update check',
+        ip_ban: 'IP ban',
+        ip_unban: 'IP unban',
+        ddos_policy_update: 'DDoS policy update',
+        pm2_start: 'PM2 start',
+        pm2_stop: 'PM2 stop',
+        pm2_restart: 'PM2 restart',
+        pm2_reload: 'PM2 reload',
+        pm2_config: 'PM2 config',
+        pm2_switch: 'PM2 switch runner',
+        playground_chat: 'Playground chat',
+        playground_upload: 'Playground upload',
+      },
+      resources: {
+        document: 'Document',
+        chat: 'Chat',
+        api_key: 'API key',
+        settings: 'Settings',
+        system: 'System',
+        pm2: 'PM2',
+        playground: 'Playground',
+        ip: 'IP',
+      },
+      metaStorage: 'Storage',
+      metaAsKey: 'As key id',
+      metaAsKeyName: 'As key name',
+    },
+    settings: {
+      title: 'Safety settings',
+      hint: 'Global safe mode for all keys.',
+      globalSafe: 'Global safe mode',
+      globalSafeHint: 'On = all keys safe. Off = each key’s own mode.',
+      masterOn: 'Safe mode on',
+      masterOff: 'Safe mode off',
+      disabledBanner: 'Global safe is off — keys use their own safe/agent mode.',
+      tools: 'Tools mode',
+      toolsHint: 'none: no shell/web/write. readonly: read/search only.',
+      toolsNone: 'none',
+      toolsReadonly: 'readonly',
+      maxTurns: 'Max turns',
+      maxTurnsHint: 'Safe-mode steps. Chat 3–6 · API 8–12 · multi-step 15–40.',
+      timeout: 'Timeout (ms)',
+      timeoutHint: 'Safe-mode deadline. 60s–120s normal · 300s–600s long jobs.',
+      defaultModel: 'Default model',
+      defaultModelHint: 'When client omits model.',
+      modelSource: 'Grok CLI',
+      refreshModels: 'Refresh models',
+      panel: 'Admin Panel',
+      save: 'Save',
+      saved: 'Saved',
+      guideTitle: 'Presets',
+      guideIntro: 'Apply, then tweak if needed.',
+      guideApply: 'Apply',
+      guideActive: 'Applied',
+      guideApplyConfirm: 'Apply “{name}” and save? Current values will be replaced.',
+      guideApplied: 'Preset saved',
+      chipGlobalOn: 'Safe: On',
+      chipGlobalOff: 'Safe: Off',
+      scLocalTitle: 'Local playground',
+      scLocalDesc: 'Full tools on your machine.',
+      scLocalDetail: 'Safe OFF · agent keys.',
+      scProdTitle: 'Public API',
+      scProdDesc: 'Least privilege for apps/customers.',
+      scProdDetail: 'Safe ON · tools none · turns 8–12 · 60–120s.',
+      scCodeTitle: 'Coding agent',
+      scCodeDesc: 'Trusted host only — edit & run.',
+      scCodeDetail: 'Safe OFF · agent keys.',
+      scReadTitle: 'Read-only',
+      scReadDesc: 'Explain/search code, no writes.',
+      scReadDetail: 'Safe ON · tools readonly · turns 8–15 · 120–180s.',
+      scChatTitle: 'Q&A only',
+      scChatDesc: 'Text answers, no tools.',
+      scChatDetail: 'Safe ON · tools none · turns 3–6 · 60s.',
+      scLongTitle: 'Long safe tasks',
+      scLongDesc: 'Many steps without max-turns fail.',
+      scLongDetail: 'Safe ON · none/readonly · turns 20–40 · 300–600s.',
+      dangerTitle: 'Danger zone',
+      disablePanel: 'Disable Admin Panel',
+      disablePanelConfirm:
+        'Disable panel and sign out? Re-enable: ysk-omni admin on',
+      disablePanelDone: 'Panel disabled. Re-enable: ysk-omni admin on',
+      panelOffHint: 'Turn off here. Re-enable on server: ysk-omni admin on',
+      panelStatus: 'Status',
+      panelOn: 'On',
+      panelOff: 'Off',
+    },
+    apiFeatures: {
+      title: 'API features',
+      intro: 'Toggle protocols & capabilities · applies in ~2s · no restart.',
+      tabProtocols: 'Protocols',
+      tabMedia: 'Media',
+      tabCaps: 'Capabilities',
+      tabEmu: 'Emulation',
+      kpiEnabled: 'Enabled',
+      kpiEnabledSub: 'Flags currently on',
+      groupMeta: '{on} / {n} enabled',
+      groupProtocols: 'Protocol surfaces',
+      groupMedia: 'Media APIs (OpenAI-compatible)',
+      groupCaps: 'Grok CLI capabilities',
+      groupEmu: 'Emulation & safety',
+      presetOpen: 'Preset: Open',
+      presetLocked: 'Preset: Locked',
+      presetDev: 'Preset: Dev',
+      presetConfirm:
+        'Apply feature preset “{name}”? This overwrites all API feature flags.',
+      flag: {
+        openaiChat: 'OpenAI Chat Completions',
+        openaiResponses: 'OpenAI Responses',
+        anthropicMessages: 'Anthropic Messages',
+        imagesApi: 'Images API',
+        filesOpenAiAlias: 'Files API alias',
+        videoApi: 'Videos API (async jobs)',
+        audioApi: 'Audio API (speech / STT)',
+        tools: 'Tools / function calling',
+        structuredOutput: 'Structured output (--json-schema)',
+        vision: 'Vision / image parts (--prompt-json)',
+        reasoningEffort: 'Reasoning effort',
+        webSearch: 'Web search tools',
+        subagents: 'Subagents',
+        planMode: 'Plan mode',
+        memory: 'Cross-session memory',
+        sessionResume: 'Session resume / continue',
+        bestOfN: 'best-of-n',
+        checkLoop: 'Self-check loop',
+        systemOverride: 'System prompt override',
+        rules: 'Extra rules',
+        permissionMode: 'Permission mode',
+        sandbox: 'Sandbox profile',
+        usageEstimate: 'Estimate token usage',
+        assistantsEmulation: 'Assistants-lite (local)',
+        strictSampling: 'Strict sampling (reject temperature…)',
+        forceDisableToolsInSafe: 'Force tool limits in safe mode',
+      },
+      hint: {
+        openaiChat: 'POST /v1/chat/completions',
+        openaiResponses: 'POST /v1/responses',
+        anthropicMessages: 'POST /v1/messages',
+        imagesApi: 'POST /v1/images/generations + /edits (agent key)',
+        filesOpenAiAlias: 'POST/GET /v1/files → documents + media store',
+        videoApi: 'POST /v1/videos + poll GET /v1/videos/:id',
+        audioApi: 'POST /v1/audio/speech + /transcriptions (needs provider)',
+        tools: 'Maps tools → Grok --tools + system tool list',
+        structuredOutput: 'response_format / json_schema',
+        vision: 'image_url content parts',
+        reasoningEffort: '--reasoning-effort',
+        webSearch: 'When off: --disable-web-search',
+        subagents: '--no-subagents when off',
+        planMode: '--no-plan when off',
+        memory: '--experimental-memory',
+        sessionResume: '--resume / --continue',
+        bestOfN: '--best-of-n (headless)',
+        checkLoop: '--check',
+        systemOverride: '--system-prompt-override',
+        rules: '--rules',
+        permissionMode: '--permission-mode',
+        sandbox: '--sandbox',
+        usageEstimate: 'Fill usage with char/4 estimates',
+        assistantsEmulation: 'Local /v1/assistants + /v1/threads',
+        strictSampling: '400 if temperature/top_p/stop sent',
+        forceDisableToolsInSafe: 'Keep safe-mode tool policy',
+      },
+    },
+    media: {
+      title: 'Media library',
+      intro: 'Studio, assets, and video jobs. Needs imagesApi / tools (videoApi for video).',
+      tabStudio: 'Studio',
+      tabAssets: 'Assets',
+      tabJobs: 'Jobs',
+      kpiAssetsSub: 'Stored media files',
+      kpiJobsSub: 'Video generation jobs',
+      kpiStudioSub: 'Generate, edit, or image-to-video',
+      assets: 'Assets',
+      jobs: 'Video jobs',
+      empty: 'No media assets yet',
+      jobsEmpty: 'No video jobs yet',
+      kind: 'Kind',
+      bytes: 'Size',
+      provider: 'Provider',
+      providerPh: 'Provider name…',
+      prompt: 'Prompt',
+      created: 'Created',
+      status: 'Status',
+      preview: 'Preview',
+      previewUnsupported: 'This format cannot be previewed in the browser. Please download the file.',
+      previewFail: 'Failed to load preview',
+      previewTruncated: 'preview truncated',
+      download: 'Download',
+      delete: 'Delete',
+      deleteConfirm: 'Soft-delete this media asset?',
+      allKinds: 'All kinds',
+      searchPh: 'Prompt, filename, MIME, provider, or ID…',
+      from: 'From',
+      to: 'To',
+      generate: 'Generate image',
+      generateTitle: 'Generate image',
+      studioTitle: 'Media studio',
+      studioHint:
+        'Create images, edit existing images, or start image-to-video jobs. Execution limits follow Safety settings. Requires imagesApi and tools (videoApi for video).',
+      generateHint:
+        'Uses Grok Imagine tools (image_gen, image_edit, image_to_video).',
+      generatePrompt: 'Prompt',
+      generatePromptPh: 'Describe the image you want to create…',
+      generateSize: 'Size',
+      aspectRatio: 'Aspect ratio',
+      aspectHint: 'Grok Imagine aspect_ratio values (not OpenAI pixel sizes)',
+      generateN: 'Count',
+      nHint: 'Grok does not batch n; the gateway runs sequential generations (1–4)',
+      generateKey: 'API key',
+      generateKeySession: 'Signed-in admin session',
+      generateSubmit: 'Generate',
+      generateBusy: 'Generating… this may take a minute',
+      generateOk: 'Image generated. See the assets list below.',
+      generateFail: 'Image generation failed',
+      generateNeedPrompt: 'Please enter a prompt',
+      modeGenerate: 'Generate',
+      modeEdit: 'Edit',
+      modeVideo: 'Video',
+      modelDefault: 'system default',
+      modelEmpty: 'No models reported by Grok CLI',
+      modelHint: 'All models from the local Grok CLI; system default is pre-selected',
+      editSubmit: 'Edit image',
+      editBusy: 'Editing…',
+      editOk: 'Image edited. See the assets list below.',
+      editNeedImage: 'Select or drop a source image to edit',
+      editImage: 'Source image',
+      editImageHint: 'Required for image_edit',
+      editPromptPh: 'Describe the changes to apply…',
+      videoSubmit: 'Create video job',
+      videoBusy: 'Queuing video job…',
+      videoOk: 'Video job queued. See the Jobs tab.',
+      videoDuration: 'Duration',
+      videoDurationHint: 'Grok image_to_video supports 6s or 10s only',
+      videoSource: 'Source frame (optional)',
+      videoSourceHint:
+        'Optional. If omitted, a frame is generated from the prompt first, then animated.',
+      videoNoSource: 'Auto-generate frame from prompt',
+      videoPromptPh: 'Describe camera motion and the shot…',
+      sourceTitle: 'Source image',
+      sourceHint:
+        'Drag and drop an image, choose a local file, or pick any image from Documents or Media assets.',
+      dropzoneAria: 'Drop zone for source image',
+      dropTitle: 'Drop an image here',
+      dropHint: 'Or choose a local file / pick from the system library',
+      dropTitleVideo: 'Drop a source frame (optional)',
+      dropHintVideo:
+        'Optional for video. Empty source generates a frame from the prompt first.',
+      pickFile: 'Choose file',
+      pickLibrary: 'System library',
+      clearSource: 'Clear',
+      sourceNeedImage: 'Please provide an image file (PNG, JPEG, WebP, GIF…)',
+      sourceKindUpload: 'Upload',
+      sourceKindAsset: 'Media asset',
+      sourceKindDocument: 'Document',
+      libraryTitle: 'Select source file',
+      librarySubtitle:
+        'Any image stored in Documents or Media assets on this gateway.',
+      libraryTabDocs: 'Documents',
+      libraryTabAssets: 'Media assets',
+      librarySearch: 'Search by name, MIME, or ID…',
+      libraryFormats: 'Images only (PNG, JPEG, WebP, GIF, …)',
+      libraryEmpty: 'No matching files',
+      librarySelect: 'Use selected',
+      libraryLoadFail: 'Failed to load library',
+    },
+    usage: {
+      title: 'Usage & anti-abuse',
+      window: 'Window',
+      requests: 'Requests',
+      success: 'Success',
+      errors: 'Errors',
+      errorRate: 'Error rate',
+      byModel: 'By model',
+      byKey: 'Per API key',
+      rateLimit: 'Limit / min',
+      util: 'Est. utilization',
+      limits: 'Gateway limits',
+      global: 'Global max / window',
+      ipMax: 'Unauth IP max',
+      burst: 'Chat burst (10s)',
+      block: 'Auth fail block threshold',
+      concurrent: 'Grok max concurrent',
+      refresh: 'Refresh',
+    },
+    ddos: {
+      title: 'DDoS control center',
+      tabPolicy: 'Policy',
+      tabLive: 'Traffic',
+      tabBlacklist: 'Blacklist',
+      tabEvents: 'Events',
+      live: 'Live connections',
+      recent: 'Recent requests',
+      blacklist: 'IP blacklist',
+      stats: 'Abuse stats',
+      refresh: 'Refresh',
+      pause: 'Pause auto-refresh',
+      resume: 'Resume auto-refresh',
+      ban: 'Ban IP',
+      unban: 'Unban',
+      banConfirm: 'Ban this IP?',
+      banWhitelistWarn: 'This IP is on the auto-ban whitelist. Ban anyway?',
+      unbanConfirm: 'Remove this IP from blacklist?',
+      ip: 'IP',
+      method: 'Method',
+      path: 'Path',
+      key: 'API key',
+      duration: 'Duration',
+      state: 'State',
+      ua: 'User-Agent',
+      reason: 'Reason',
+      source: 'Source',
+      expires: 'Expires',
+      permanent: 'Permanent',
+      addBan: 'Add ban',
+      ttl: 'TTL',
+      ttlPerm: 'Permanent',
+      ttl1h: '1 hour',
+      ttl24h: '24 hours',
+      ttl7d: '7 days',
+      activeConn: 'Active',
+      rateHits: 'Rate-limit hits',
+      blockedHits: 'Blocked hits',
+      autoBans: 'Auto bans',
+      topIps: 'Top IPs (recent)',
+      emptyLive: 'No active connections',
+      emptyBan: 'Blacklist is empty',
+      emptyEvents: 'No auto-ban events yet',
+      reasonPh: 'Optional reason',
+      banReasonDefault: 'manual from admin',
+      ipPlaceholder: '1.2.3.4',
+      policyTitle: 'Protection policy',
+      policyHint:
+        'All thresholds are live — no restart. Env values are only the initial defaults.',
+      autoOn: 'Auto-judgment ON',
+      autoOff: 'Auto-judgment OFF',
+      autoBanMaster: 'Enable automatic IP bans',
+      autoBanMasterHint: 'When off, rate limits still apply but IPs are never auto-banned.',
+      masterOn: 'Auto-ban on',
+      masterOff: 'Auto-ban off',
+      disabledBanner:
+        'Automatic IP bans are off — rate limits still apply, but IPs will not be auto-blacklisted.',
+      presetTitle: 'Policy profile',
+      presetHint: 'Pick a profile or edit fields — custom is detected automatically.',
+      presetRelaxed: 'Relaxed',
+      presetBalanced: 'Balanced',
+      presetStrict: 'Strict',
+      presetCustom: 'Custom',
+      presetActiveLabel: 'Active: {name}',
+      presetFormLabel: 'Form: {name} (unsaved)',
+      presetTagActive: 'Active',
+      presetTagDraft: 'Draft',
+      presetTagSaved: 'Saved',
+      presetActiveHint: 'Current profile: {name}. Click Save if you changed other fields.',
+      presetCustomHint:
+        'Values do not match Relaxed / Balanced / Strict — treated as Custom.',
+      presetUnsavedHint:
+        'Form shows {form}; server still has {saved}. Click Save policy to apply.',
+      savePolicy: 'Save policy',
+      resetPolicy: 'Reset to env defaults',
+      policySaved: 'Protection policy saved. Rate limiters reloaded.',
+      policyReset: 'Policy reset to environment defaults.',
+      confirmReset: 'Reset all DDoS policy fields to .env defaults?',
+      sectionProxy: 'Reverse proxy / CDN',
+      proxyHint:
+        'When traffic passes through nginx or Cloudflare, enable trust hops so bans, rate limits, and audit logs use the real client IP — not the proxy IP.',
+      proxyTrustHops: 'Trusted proxy hops',
+      proxyTrustHopsHint:
+        '0 = direct only (ignore headers). 1 = nginx or Cloudflare→app. 2 = Cloudflare→nginx→app.',
+      proxyIpSource: 'Client IP source',
+      proxyIpSourceHint:
+        'auto tries CF-Connecting-IP, then X-Real-IP, then X-Forwarded-For. Use “socket” only for direct connections.',
+      proxySrcAuto: 'Auto (recommended)',
+      proxySrcCf: 'Cloudflare (CF-Connecting-IP)',
+      proxySrcNginx: 'nginx (X-Real-IP)',
+      proxySrcXff: 'X-Forwarded-For only',
+      proxySrcSocket: 'TCP socket only (no proxy)',
+      trustedProxies: 'Trusted proxy IPs / CIDRs',
+      trustedProxiesHint:
+        'Only these peers may set CF-Connecting-IP / X-Real-IP / XFF. Default 127.0.0.1 — add your nginx/LB host if remote. Direct clients cannot spoof headers.',
+      sectionLimits: 'Rate limits',
+      sectionAuth: 'Failed authentication',
+      sectionRate: 'Rate-limit abuse (429)',
+      sectionConn: 'Connection flood',
+      sectionVelocity: 'Request velocity',
+      sectionEscalate: 'Repeat offender escalation',
+      sectionWhitelist: 'Auto-ban whitelist',
+      whitelistHint: 'One IP or CIDR per line. These IPs are never auto-banned.',
+      rateWindow: 'Window (sec)',
+      rateMaxKey: 'Max / key',
+      rateMaxIp: 'Max / IP (no key)',
+      burstWindow: 'Burst window (sec)',
+      burstMax: 'Burst max',
+      enableRule: 'Enabled',
+      threshold: 'Threshold',
+      windowSec: 'Window (sec)',
+      banMin: 'Ban duration (min)',
+      escalateAfter: 'Escalate after N auto-bans',
+      escalateMin: 'Escalated ban (min)',
+      maxConcurrent: 'Max concurrent / IP',
+      velocityMax: 'Max requests',
+      eventsTitle: 'Recent auto-ban events',
+      eventTime: 'When',
+      eventSource: 'Rule',
+      eventDuration: 'Ban for',
+      sources: {
+        manual: 'Manual',
+        'auto-auth': 'Auto · auth',
+        'auto-rate': 'Auto · 429',
+        'auto-conn': 'Auto · concurrent',
+        'auto-velocity': 'Auto · velocity',
+        'auto-escalate': 'Auto · escalated',
+      },
+    },
+    pm2: {
+      title: 'PM2 control',
+      tabRunner: 'Runner',
+      tabPort: 'Port',
+      tabConfig: 'Config',
+      tabLogs: 'Logs',
+      status: 'Process status',
+      start: 'Start with PM2',
+      stop: 'Stop PM2',
+      restart: 'Restart',
+      reload: 'Reload',
+      logs: 'Logs',
+      logsHint: 'Error log first',
+      clearLogs: 'Clear logs',
+      confirmClearLogs:
+        'Clear PM2 and ysk-omni log files? This cannot be undone (files are truncated).',
+      logsCleared: 'Cleared {n} log file(s).',
+      logsAutoTrim:
+        'Auto-trim over {maxMb} MB → keep last ~{keepKb} KB (on each log read).',
+      refresh: 'Refresh',
+      confirmStop: 'Stop the PM2 process?',
+      confirmRestart: 'Restart under PM2? Port will be handed over cleanly.',
+      unavailable: 'PM2 not available',
+      disabled: 'PM2 admin is disabled',
+      app: 'App name',
+      pid: 'PID',
+      uptime: 'Uptime',
+      memory: 'Memory',
+      cpu: 'CPU',
+      restarts: 'Restarts',
+      portBusy: 'Port in use',
+      port: 'Port',
+      portTitle: 'Listen port',
+      portHint:
+        'HTTP port for the gateway Admin UI and API. Changing the port updates .env and restarts the runner so the new port takes effect.',
+      fieldPort: 'Port',
+      portDefaultNote: 'Default is 3850. Valid range: 1–65535.',
+      savePort: 'Save port & restart',
+      useDefaultPort: 'Use default (3850)',
+      portInvalid: 'Enter a valid port number (1–65535).',
+      confirmPortChange:
+        'Change listen port to {port} and restart the gateway? You will need to open Admin on the new port (e.g. http://localhost:{port}/admin).',
+      portChangedMsg: 'Port updated: {from} → {to}.',
+      portSavedNeedRestart:
+        'Port {port} saved to .env. Restart the gateway for it to take effect.',
+      portAfterRestart:
+        'After restart, open Admin at http://localhost:{port}/admin',
+      hint: 'Run with PM2 or detached ysk-omni. Switch anytime here or via CLI.',
+      switchTitle: 'Runner',
+      switchHint: 'Only one runner should bind the port.',
+      currentRunner: 'Current runner',
+      runnerPm2: 'PM2',
+      runnerGctoac: 'ysk-omni (detached)',
+      runnerNone: 'Not running',
+      runnerUnknown: 'Unknown / mixed',
+      switchToPm2: 'Switch to PM2',
+      switchToGctoac: 'Switch to ysk-omni',
+      confirmSwitchPm2: 'Switch to PM2? Gateway restarts under PM2 in a few seconds.',
+      confirmSwitchGctoac: 'Switch to ysk-omni? Gateway restarts as a detached process in a few seconds.',
+      switchScheduled: 'Switch scheduled. Admin will refresh automatically in about 10 seconds.',
+      autoRefreshIn: 'This page will reload automatically in {n} seconds…',
+      autoRefreshNow: 'Reloading…',
+      omniPid: 'ysk-omni PID',
+      configTitle: 'PM2 config',
+      configHint: 'Saved to pm2.runtime.json and applied via ecosystem.config.cjs. Save & apply restarts PM2 if it is the active runner.',
+      saveConfig: 'Save & apply',
+      saveOnly: 'Save only',
+      resetConfig: 'Reset defaults',
+      confirmReset: 'Reset PM2 config to defaults?',
+      configSaved: 'Config saved',
+      fieldName: 'App name',
+      fieldScript: 'Script',
+      fieldCwd: 'Working directory (cwd)',
+      fieldInstances: 'Instances',
+      fieldExecMode: 'Exec mode',
+      fieldAutorestart: 'Autorestart',
+      fieldWatch: 'Watch',
+      fieldMaxMem: 'Max memory restart',
+      fieldMaxRestarts: 'Max restarts',
+      fieldMinUptime: 'Min uptime',
+      fieldRestartDelay: 'Restart delay (ms)',
+      fieldBackoff: 'Exp backoff restart delay (ms)',
+      fieldMergeLogs: 'Merge logs',
+      fieldTime: 'Log timestamps',
+      fieldErrorFile: 'Error log file',
+      fieldOutFile: 'Out log file',
+      fieldEnvExtra: 'Extra env (KEY=value per line)',
+      fieldPreferred: 'Preferred runner',
+      empty: 'App not in pm2 list',
+      modeFork: 'fork',
+      modeCluster: 'cluster',
+      phCwd: '(package root)',
+      phInstances: '1 or max',
+      phEnv: 'NODE_ENV=production',
+      statusOnline: 'online',
+      statusErrored: 'errored',
+      statusStopped: 'stopped',
+      // status API message keys
+      msgOk: 'OK',
+      msgDisabled: 'PM2 admin is disabled (PM2_ADMIN_ENABLED=false).',
+      msgBinaryMissing: 'pm2 not found on PATH. Install: npm install -g pm2',
+      msgNotInList:
+        'App "{app}" is not in the PM2 list — use Start with PM2 or Switch to PM2.',
+      msgPortGctoac:
+        'Port {port} is held by ysk-omni (pid {pid}). Use “Switch to PM2” to hand over.',
+      msgPortBusy: 'Port {port} is in use (pid {pids}).',
+      msgErrored:
+        'PM2 process errored — check logs / config, then Restart or fix port conflicts.',
+      msgBothRunners:
+        'Both runners detected; ysk-omni pid {pid} also holds resources. Prefer one via Switch.',
+      msgError: 'PM2 error: {error}',
+      msgSwitchPm2:
+        'Switching to PM2… The gateway will restart under PM2 in a few seconds.',
+      msgSwitchGctoac:
+        'Switching to ysk-omni… The gateway will restart as a detached process in a few seconds.',
+    },
+    system: {
+      title: 'System',
+      tabSoftware: 'Software',
+      tabPackage: 'Package',
+      tabEnv: 'Environment',
+      envHint: 'Runtime env & version snapshot.',
+      checkUpdate: 'Check for updates',
+      oneClick: 'Update package & restart',
+      selfUpdate: 'Package version',
+      selfHint: 'Compare versions · update package restarts the gateway.',
+      current: 'This install',
+      npm: 'npm latest',
+      github: 'GitHub latest',
+      install: 'Install channel',
+      confirmUpdate: 'Update the package and restart the gateway? API will be briefly unavailable.',
+      scheduled: 'Update scheduled. Refresh this page in ~30s.',
+      database: 'Database',
+      grokCli: 'Grok CLI',
+      concurrency: 'Concurrency',
+      runtime: 'Runtime health',
+      software: 'Required software',
+      softwareHint: 'Required tools and installed versions.',
+      softName: 'Software',
+      softLevel: 'Need',
+      softInstalled: 'Installed',
+      softVersion: 'Version',
+      softStatus: 'Status',
+      softDetail: 'Note',
+      levelRequired: 'Required',
+      levelRecommended: 'Recommended',
+      levelOptional: 'Optional',
+      levelBundled: 'Bundled',
+      softOk: 'OK',
+      softMissing: 'Missing',
+      softWarn: 'Warning',
+      envTitle: 'Environment',
+      up: 'Up',
+      down: 'Down',
+      yes: 'Yes',
+      no: 'No',
+      // Version badge meanings (top cards + package panel)
+      badgeUpdate: 'Update available',
+      badgeOk: 'Up to date',
+      badgeAhead: 'Newer than npm',
+      badgeUnknown: 'Unknown',
+      statusHintUpdate: 'A newer published version is available. Use “Update package & restart”.',
+      statusHintOk: 'This install matches the latest known release.',
+      statusHintAhead:
+        'Local version is newer than npm (typical for git / dev). “Update package” still pulls latest git commits if on the git channel.',
+      statusHintUnknown: 'Could not reach npm/GitHub to compare versions.',
+      checkResult: 'Version check',
+      channelGit: 'git (dev tree)',
+      channelNpmGlobal: 'npm global',
+      channelNpmLocal: 'npm local',
+      channelUnknown: 'unknown',
+      encryption: 'Encryption',
+      ready: 'Ready',
+      notReady: 'Not ready',
+      allRequiredOk: 'All required software present',
+      requiredMissing: 'Some required software is missing',
+    },
+    common: {
+      empty: 'No data',
+      active: 'active',
+      revoked: 'revoked',
+      save: 'Save',
+      cancel: 'Close',
+      loading: 'Loading…',
+      powered: 'Powered by',
+      actions: 'Actions',
+      yes: 'Yes',
+      no: 'No',
+      ok: 'OK',
+      confirm: 'Confirm',
+      notice: 'Notice',
+      confirmTitle: 'Please confirm',
+      dangerTitle: 'Confirm action',
+      apply: 'Apply',
+      reset: 'Reset',
+      search: 'Search',
+      prev: 'Previous',
+      next: 'Next',
+      perPage: 'Per page',
+      pagerTotal: 'Total {n}',
+      pagerPage: 'Page {n} / {total}',
+      filterTitle: 'Search & filters',
+      filterHint: 'Narrow results, then apply',
+      all: 'All',
+      requestFailed: 'Request failed',
+      featureOff: 'Off',
+      ms: '{n} ms',
+      perMin: '{n}/min',
+      minutes: '{n} min',
+      mb: '{n} MB',
+      percent: '{n}%',
+      ipLabel: 'IP',
+      uaLabel: 'UA',
+      httpStatus: 'HTTP',
+    },
+    /** API error.code → user-facing message (Admin SPA) */
+    errors: {
+      unauthorized: 'Invalid or missing credentials. Please sign in again.',
+      forbidden: 'You do not have permission for this action.',
+      not_found: 'The requested resource was not found.',
+      validation_error: 'Invalid request. Please check your input.',
+      rate_limit_exceeded: 'Rate limit exceeded. Please try again later.',
+      concurrency_limit_exceeded: 'Too many concurrent Grok jobs. Please wait and retry.',
+      internal_error: 'An internal server error occurred.',
+      engine_error: 'Grok CLI returned an error.',
+      engine_timeout: 'Grok CLI timed out.',
+      engine_not_available: 'Grok CLI is not available on this server.',
+      document_too_large: 'The document exceeds the maximum allowed size.',
+      document_type_not_allowed: 'This document type is not allowed.',
+      invalid_cwd: 'The working directory is not allowed.',
+      service_unavailable: 'The service is temporarily unavailable.',
+      queue_full: 'The chat queue is full. Please try again later.',
+      queue_draining: 'The chat queue is paused or draining.',
+      queue_wait_timeout: 'Timed out while waiting in the chat queue.',
+      queue_cancelled: 'The chat job was cancelled.',
+      media_not_supported: 'This media feature is not available or is disabled.',
+      media_provider_unavailable: 'The media provider is not available.',
+      media_generation_failed: 'Media generation failed.',
+      media_forbidden:
+        'Media generation is not allowed for this API key. Use an agent-mode key or an admin session.',
+      feature_disabled: 'This API feature is disabled.',
+      feature: {
+        imagesApi:
+          'Images API is disabled. Enable it under Admin → API features → Images API.',
+        videoApi:
+          'Video API is disabled. Enable it under Admin → API features → Videos API.',
+        audioApi:
+          'Audio API is disabled. Enable it under Admin → API features → Audio API.',
+        tools:
+          'Tools are disabled. Enable Tools under Admin → API features (required for image generation).',
+        filesOpenAiAlias:
+          'OpenAI Files API alias is disabled. Enable it under Admin → API features → Files API alias.',
+      },
+      media: {
+        agent_or_admin_required:
+          'Image generation requires an agent-mode API key or an admin session. Safe-mode keys cannot use image tools.',
+        source_required:
+          'Provide an image file, a media asset, or a document as the source.',
+        source_must_be_image:
+          'The selected source must be an image for edit or video generation.',
+        no_image_in_sandbox:
+          'Grok finished but no image file was found in the sandbox or this run\'s session images/. This is not an imagesApi or API-key problem.',
+        no_video_in_sandbox:
+          'Grok finished but no video file was found in the sandbox or this run\'s session.',
+        provider_no_edit: 'The current media provider does not support image edits.',
+      },
+    },
+  },
+  'zh-Hant': {
+    brand: 'YSK Omni',
+    brandSub: '管理面板',
+    loginTitle: '管理員登入',
+    loginLabel: 'API 金鑰',
+    loginOtpLabel: '一次性登入碼',
+    loginBtn: '登入',
+    loginCmdHint: '終端機取得 key：',
+    loginOtpHint: '每次登入請在終端機產生新碼：',
+    loginOtpExpiry: '登入碼 5 分鐘內有效，且只能使用一次。',
+    loginOtpFail: '登入碼無效或已過期',
+    loginLostKey: '舊 key 無法找回（只存 hash），請建立新的 admin key。',
+    loginCopy: '複製',
+    loginCopied: '已複製',
+    needKey: '請輸入 API 金鑰',
+    needOtp: '請輸入終端機產生的一次性登入碼',
+    logout: '登出',
+    shell: {
+      menu: '開啟選單',
+      closeMenu: '關閉選單',
+    },
+    nav: {
+      dashboard: '儀表板',
+      chat: '對話',
+      chats: '對話記錄',
+      keys: 'API 金鑰',
+      documents: '文件',
+      media: '媒體庫',
+      audit: '審計日誌',
+      settings: '安全設定',
+      apiFeatures: 'API 能力',
+      usage: '用量與防護',
+      ddos: 'DDoS 中心',
+      queue: '佇列',
+      pm2: 'PM2',
+      system: '系統狀態',
+    },
+    queue: {
+      title: '對話佇列',
+      subtitle: '暫停、排空、重新入隊，並調整併發。',
+      paused: '已暫停',
+      running: '消費中',
+      drain: '排空模式',
+      mode: '模式',
+      modeOff: '已停用',
+      depth: '佇列深度',
+      queued: '排隊中',
+      leased: '已認領',
+      activeJobs: '執行中',
+      dead: '死信',
+      oldest: '最長等待',
+      concurrency: '每 Key / 全域',
+      worker: '進程內 worker',
+      workerInstance: 'Worker 實例',
+      workerInstanceHint: '本進程消費者 ID（租約持有者）。重啟後會變更。',
+      kpiActiveSub: '本進程進行中 {n} 個',
+      consumer: '消費者',
+      admission: '接單',
+      accepting: '接受新單',
+      pause: '暫停消費',
+      resume: '恢復消費',
+      drainBtn: '排空',
+      undrain: '停止排空',
+      savePolicy: '儲存政策',
+      refresh: '重新整理',
+      jobs: '工作列表',
+      tabOverview: '總覽',
+      tabJobs: '工作列表',
+      tabPolicy: '政策',
+      jobsMeta: '共 {n} 筆',
+      cancel: '取消',
+      requeue: '重新入隊',
+      purgeDead: '清理死信與舊工作',
+      purgeTitle: '確認清理工作？',
+      purgeConfirm:
+        '會立即刪除全部死信（DLQ），以及完成已超過 24 小時的成功／失敗／取消工作。',
+      purgeConfirmBtn: '確認刪除',
+      purgeDoneTitle: '清理完成',
+      purgeDoneMsg: '已刪除 {n} 筆工作。',
+      cancelConfirm: '取消此工作？若正在執行，取消為協作式（cooperative）。',
+      empty: '沒有符合篩選的工作',
+      enabled: '啟用佇列',
+      masterOn: '佇列已開',
+      masterOff: '佇列已關',
+      masterHint: '對話佇列總開關，即時生效。',
+      disabledBanner:
+        '佇列已關閉 — 新對話會跳過排隊、即時執行（仍受併發上限約束）。',
+      globalConcurrency: '全域併發',
+      perKeyConcurrency: '每 Key 併發',
+      maxDepth: '全域佇列上限',
+      maxDepthKey: '每 Key 上限',
+      fairness: '公平策略',
+      fifo: '全域 FIFO',
+      wrr: '加權輪詢',
+      playgroundPriority: 'Playground 優先級（越小越先）',
+      defaultPriority: '預設優先級',
+      leaseMs: '租約（ms）',
+      maxWaitMs: '最長等待（ms）',
+      filterTitle: '篩選工作',
+      filterHint: '依狀態篩選。會自動重新整理。',
+      filterStatus: '狀態',
+      allStatuses: '全部狀態',
+      filterDead: '死信（DLQ）',
+      filterQueued: '排隊中',
+      filterRunning: '執行中 / 已認領',
+      filterFailed: '失敗',
+      filterSucceeded: '成功',
+      filterCancelled: '已取消',
+      errorCol: '錯誤',
+      priorityBtn: '優先級',
+      priorityPh: '優先級（0–1000，越小越先）',
+      dlqTitle: '死信佇列',
+      dlqHint: '已用盡重試次數 — 可重新入隊或清理。',
+      viewDlq: '查看死信',
+      statusPanel: '運行狀態',
+      statusPanelHint: '消費者、接單與 worker 實例即時狀態；每隔數秒自動重新整理。',
+      policyTitle: '佇列政策',
+      policyHint: '可先選方案再微調數值；儲存後生效。編輯時會暫停自動重新整理。',
+      presetTitle: '政策方案',
+      presetHint: '一鍵套用。Active＝表單目前值 · Saved＝已儲存。',
+      presetRelaxed: '寬鬆',
+      presetBalanced: '均衡',
+      presetStrict: '嚴格',
+      presetCustom: '自訂',
+      presetRelaxedHint:
+        '較高併發、較深佇列 — 適合多 key／Playground 與突發流量。',
+      presetBalancedHint:
+        '預設生產平衡：公平輪詢、中等深度、每 key 同時只跑 1 個。',
+      presetStrictHint:
+        '較低上限 + 全域 FIFO — 流量不可信或主機資源緊張時使用。',
+      presetCustomHint: '數值不符合內建方案。可繼續微調，或於上方選取一個方案。',
+      presetActiveLabel: '目前：{name}',
+      presetFormLabel: '草稿：{name}',
+      presetTagActive: '目前',
+      presetTagDraft: '草稿',
+      presetTagSaved: '已套用',
+      hintGlobalConc: '全域同時執行的工作上限',
+      hintPerKeyConc: '單一 API key 同時執行上限',
+      hintMaxDepth: '佇列總深度滿時拒收新單',
+      hintMaxDepthKey: '該 key 排隊／執行過多時拒收',
+      hintFairness: 'WRR 按 key 輪流；FIFO 按全域優先級與時間',
+      hintLease: 'Worker 持有工作多久未完成會被回收',
+      hintMaxWait: '客戶端排隊最長等待時間',
+      colJob: '工作 / 請求',
+      colSource: '來源',
+      colStatus: '狀態',
+      colModel: '模型',
+      colPri: '優先',
+      colKey: 'API 金鑰',
+      colTry: '嘗試',
+      colTime: '入隊時間',
+      stQueued: '排隊',
+      stLeased: '已認領',
+      stRunning: '執行中',
+      stSucceeded: '成功',
+      stFailed: '失敗',
+      stDead: '死信',
+      stCancelled: '已取消',
+      srcV1: 'API',
+      srcPlayground: 'Playground',
+      kpiDepthSub: '{q} 排隊 · {l} 認領',
+      kpiQueuedSub: '等待 worker',
+      kpiDeadSub: '重試已盡',
+      kpiOldestSub: '隊頭等待時間',
+      wait: '等待',
+      started: '開始',
+      cancelReq: '已請求取消',
+    },
+    chat: {
+      title: '對話',
+      new: '新對話',
+      send: '傳送',
+      stop: '停止',
+      stopped: '已停止',
+      placeholder: '輸入訊息…（Enter 傳送，Shift+Enter 換行）',
+      keyMode: 'API 金鑰',
+      keySelect: 'API 金鑰',
+      useSessionKey: '目前登入的 admin 金鑰',
+      useCustomKey: '自訂金鑰',
+      customKey: '金鑰',
+      includeReasoning: '顯示思考',
+      reasoning: '思考過程',
+      needKey: '請輸入或選擇 API 金鑰',
+      attach: '上傳',
+      attachLibrary: '從已上傳選擇',
+      attachHint: '可於本頁任意位置拖放檔案、上傳，或從已上傳庫挑選',
+      dropTitle: '放開以附加檔案',
+      dropHint: '放開即上傳 — 格式與「上傳」按鈕相同',
+      formatsLabel: '格式',
+      formatsHint:
+        'txt、md、csv、json、xml、html、pdf、圖片（png/jpg/webp/gif）、程式碼（js/ts/py/go/rs/java/c/cpp/css/yml/sql/sh…）',
+      formatsReject: '不支援的格式：{name}。允許：{formats}',
+      libraryTitle: '已上傳的檔案',
+      librarySubtitle: '選擇目前 API 金鑰名下的檔案（格式與上傳相同）。',
+      librarySearch: '依檔名搜尋…',
+      libraryEmpty: '此金鑰沒有符合的檔案',
+      libraryAdd: '加入所選',
+      librarySelected: '已選 {n} 個',
+      libraryAlready: '已附加',
+      libraryLoadFail: '無法載入檔案列表',
+      uploading: '上傳中…',
+      uploadFail: '上傳失敗',
+      uploadProgress: '正在上傳 {name}',
+      uploadProgressMulti: '正在上傳 {name}（{i}/{n}）',
+      emptyTitle: '開始對話',
+      emptyHint:
+        '輸入訊息或附加檔案。選擇圖像、影片或語音模型即可在對話中生成媒體。',
+      needContent: '請輸入訊息或至少附加一個檔案',
+      tooManyFiles: '檔案太多（每則訊息最多 10 個）',
+      fileOnlyPrompt: '請查看附加的檔案。',
+      removeFile: '移除',
+      docs: '附件',
+      you: '你',
+      assistant: '助理',
+      streaming: '串流中…',
+      emptyReply: '（無回覆內容）',
+      systemPrompt: '系統提示',
+      systemPlaceholder: '可選：模型系統指示（system 訊息）…',
+      systemHint: '每次傳送會以 system 角色附帶，不會顯示於對話氣泡。',
+      history: '歷史對話',
+      historyEmpty: '尚未有已儲存的對話',
+      historySearch: '搜尋主題…',
+      historyOpen: '顯示歷史',
+      historyClose: '關閉歷史',
+      rename: '重新命名',
+      renamePh: '對話主題',
+      untitled: '未命名對話',
+      deleteConversation: '刪除',
+      deleteConfirm: '確定刪除此對話？此操作無法還原。',
+      saveFail: '無法儲存對話',
+      loadFail: '無法載入對話',
+      historyPrev: '上一頁',
+      historyNext: '下一頁',
+      historyPage: '第 {n} / {total} 頁',
+      msgs: '{n} 則訊息',
+      compress: '產生語境摘要',
+      compressConfirm:
+        '為之後回合產生對話摘要以節省 token？畫面上的完整對話記錄不會被刪除或改寫，只影響傳送給模型的內容。此操作會呼叫模型一次。',
+      compressing: '正在產生摘要…',
+      compressNeedMore:
+        '至少需要 3 則訊息（或 2 則較長內容）才可產生摘要。請先繼續對話再試。',
+      compressFail: '無法產生摘要',
+      compressNeedSummary: '請先按「產生語境摘要」建立摘要。',
+      compressedBadge: '摘要',
+      compressOk: '摘要已就緒（完整記錄仍保留）。已切換為「摘要 + 最近訊息」模式。',
+      compressBusy: '請等待目前回覆完成',
+      compressResultTitle: '對話摘要',
+      compressView: '查看摘要',
+      summaryMeta: '產生時間：{when} · 依據 {n} 則訊息',
+      ctxPolicyTitle: '模型上下文',
+      ctxRemark:
+        '完整訊息仍顯示於對話區。此設定只控制下一次傳送給模型的內容。',
+      ctxMode: '上下文',
+      ctxModeFull: '完整記錄',
+      ctxModeSummary: '摘要 + 最近',
+      ctxModeRecent: '僅最近',
+      ctxModeFullLabel: '目前送出完整對話記錄',
+      ctxModeSummaryLabel: '目前送出摘要 + 最近 {n} 則',
+      ctxModeRecentLabel: '目前只送出最近 {n} 則',
+      ctxRecentN: '最近則數',
+      ctxLongHint:
+        '對話較長 — 建議改用「摘要 + 最近」或「僅最近」，以減少 token 並避免介面卡頓。',
+      loadOlder: '載入較早的 {n} 則訊息',
+      showMore: '顯示更多',
+      showLess: '收合',
+      copy: '複製',
+      copied: '已複製',
+      copyFail: '複製失敗',
+    },
+    status: {
+      success: '成功',
+      error: '錯誤',
+      timeout: '逾時',
+      pending: '處理中',
+      active: '進行中',
+      finished: '已完成',
+      online: '運行中',
+      stopped: '已停止',
+    },
+    dash: {
+      title: '儀表板',
+      subtitle: '流量、佇列、安全與防護一覽。',
+      last24: '最近 24h 請求',
+      totalChat: '總對話',
+      success: '成功',
+      errors: '錯誤/逾時',
+      docs: '文件',
+      keys: '活躍金鑰',
+      concurrent: 'Grok 併發',
+      recent: '最近 API 請求',
+      empty: '暫無資料',
+      emptyModels: '最近 24h 尚無模型用量',
+      updated: '更新於',
+      refresh: '重新整理',
+      viewAll: '查看全部',
+      openDdos: 'DDoS 中心',
+      openSettings: '安全設定',
+      openQueue: '開啟佇列',
+      kpi24h: '請求（24h）',
+      kpi24hSub: '{ok} 成功 · {err} 錯誤',
+      kpiSuccessRate: '成功率（24h）',
+      kpiSuccessRateSub: '全部時間 {all}%',
+      kpiErrors: '錯誤（24h）',
+      kpiErrorsSub: '全部時間 {all}',
+      kpiKeys: 'API 金鑰',
+      kpiKeysSub: '活躍 / 總數',
+      kpiDocs: '文件',
+      kpiMedia: '媒體資產',
+      kpiMediaSub: '24 小時 {n} 個',
+      kpiDocsSub: '已儲存檔案',
+      kpiConv: 'Playground 對話',
+      kpiConvSub: '24h 內更新 {n} 則',
+      kpiSessions: 'OTP 工作階段',
+      kpiSessionsSub: '目前有效的管理員登入',
+      kpiConcurrent: 'Grok 併發',
+      kpiConcurrentSub: '進行中 / 上限',
+      kpiQueue: '對話佇列',
+      kpiQueueSub: '深度 · 執行 / 上限 · 死信',
+      kpiQueueSubLive: '{run}/{max} 執行 · {dead} 死信{wait}',
+      kpiQueuePaused: '已暫停',
+      kpiQueueDrain: '排空',
+      kpiQueueOff: '已停用',
+      kpiSafe: '全域安全',
+      kpiSafeOn: '開',
+      kpiSafeOff: '關',
+      kpiSafeSub: '{tools} · turns {turns} · {model}',
+      kpiSafeSubEmpty: '無法讀取設定',
+      queuePanel: '對話佇列',
+      queueState: '狀態',
+      queueLive: '運作中',
+      qQueued: '排隊中',
+      qRunning: '執行中',
+      qDead: '死信',
+      qSucceeded: '已成功',
+      qWorker: 'Worker',
+      qWorkerActive: '活躍槽',
+      qOldest: '最舊等待',
+      qUnavailable: '無法取得佇列統計',
+      safety: '安全設定',
+      globalSafe: '全域安全模式',
+      safeTools: '工具',
+      safeTurns: '最大 turns',
+      safeTimeout: '逾時',
+      defaultModel: '預設模型',
+      safetyHint:
+        '影響 safe 模式金鑰與強制 safe 的流量。Playground OTP 預設 agent；開啟全域安全後會套用 safe 限制。',
+      protection: '防護狀態',
+      autoBan: '自動封鎖',
+      on: '開',
+      off: '關',
+      ruleAuth: '認證',
+      ruleRate: '429',
+      ruleConn: '並發',
+      ruleVelocity: '速率',
+      bans: '黑名單',
+      blocked: '已攔截',
+      rateHits: '限流次數',
+      liveConn: '即時連線',
+      proxy: '代理 IP',
+      hops: '層數',
+      limits: '金鑰/IP 上限',
+      models24h: '模型用量（24h）',
+      runtime: '運行環境',
+      port: '監聽連接埠',
+      defaultPort: '預設',
+      env: '環境',
+      authMode: '管理登入',
+      authOtp: 'OTP 工作階段',
+      encryption: '加密',
+      ready: '就緒',
+      notReady: '未就緒',
+    },
+    chats: {
+      title: '對話記錄',
+      total: '共',
+      decrypt: '點選列項可查看解密後內容。',
+      search: '搜尋',
+      searchPh: '請求 ID、金鑰名稱、模型…',
+      filterTitle: '搜尋與篩選',
+      filterHint: '篩選後點列項查看詳情。',
+      status: '狀態',
+      allStatus: '全部狀態',
+      model: '模型',
+      allModels: '全部模型',
+      apiKey: 'API 金鑰',
+      allKeys: '全部金鑰',
+      from: '由',
+      to: '至',
+      mode: '模式',
+      allModes: '全部模式',
+      hasDocs: '有附件',
+      filter: '套用篩選',
+      reset: '重設',
+      request: '請求',
+      prompt: '提示',
+      response: '回覆',
+      time: '時間',
+      attachments: '附件',
+      page: '頁',
+      prev: '上一頁',
+      next: '下一頁',
+      perPage: '每頁',
+      detail: '對話詳情',
+      noAttach: '無附件',
+      openFile: '開啟 / 預覽',
+      close: '關閉',
+      copyPrompt: '複製提示',
+      copyContent: '複製內容',
+      copySystem: '複製 system prompt',
+      copyRawPrompt: '複製原始 prompt',
+      duration: '耗時',
+      stream: '串流',
+      reasoning: '思考過程',
+      content: '輸出內容',
+      raw: '原始儲存回覆',
+      rawPrompt: '原始儲存 prompt',
+      userPrompt: '用戶／對話 prompt',
+      systemPrompt: 'System prompt',
+      systemHint: '從已儲存 prompt 中抽出 system 角色內容。',
+      noSystem: '此請求沒有 system prompt。',
+      hasSystem: '有 system',
+      none: '（無）',
+      file: '檔案',
+      img: '圖片',
+      previewFailed: '預覽失敗',
+    },
+    keys: {
+      title: 'API 金鑰',
+      new: '新增金鑰',
+      searchPh: '名稱或 key 前綴…',
+      name: '名稱',
+      role: '角色',
+      mode: '模式',
+      rate: '速率 / 分',
+      status: '狀態',
+      created: '建立',
+      edit: '編輯',
+      revoke: '撤銷',
+      confirmRevoke: '確定撤銷此金鑰？',
+      empty: '暫無',
+      usage24: '24h 用量',
+      maxTurns: '最大 turns',
+      timeoutMs: '逾時 (ms)',
+      ipWhitelist: 'IP 白名單',
+      ipWhitelistHint: '每行一個 IP 或 CIDR。留空 = 不限制 IP。',
+      ipWhitelistCol: 'IP 允許',
+      ipAll: '全部 IP',
+      keyOnce: '請妥善保存（明文只顯示一次）：',
+      roleClient: '用戶 (client)',
+      roleAdmin: '管理員 (admin)',
+      roleClientBadge: '用戶',
+      roleAdminBadge: '管理員',
+      modeSafe: 'safe（對外）',
+      modeAgent: 'agent（全能力）',
+      modeSafeBadge: '安全',
+      modeAgentBadge: '代理',
+      ipCount: '{n} 個 IP',
+      ipPlaceholder: '127.0.0.1\n203.0.113.0/24',
+      allowedModels: '可用模型',
+      allowedModelsHint: '勾選此金鑰可使用的模型。留空 = 不限制。用戶可透過 GET /v1/models 查詢可用模型清單。',
+      allowedModelsCol: '模型',
+      modelsAll: '全部模型',
+      modelsCount: '{n} 個模型',
+      modelsExtra: '其他模型 id',
+      modelsExtraHint: '每行一個模型 id，用於上方未列出的識別名稱。',
+      modelsPlaceholder: 'org/repo:Q4_K_M',
+    },
+    docs: {
+      title: '文件',
+      total: '共',
+      file: '檔名',
+      mime: '類型',
+      size: '大小',
+      time: '時間',
+      storage: '儲存位置',
+      storageDb: '資料庫（加密）',
+      storageFs: '檔案系統（加密）',
+      storageHint: '加密儲存 · 小於 {dbMax} 入 DB，其餘於 {dir} · 上限 {upMax}。',
+      download: '下載',
+      downloadFail: '下載失敗',
+      binaryPreview: '此為二進位檔（例如 PDF），無法在此預覽，請使用「下載」。',
+      delete: '刪除',
+      confirmDel: '確定刪除此文件？',
+      detail: '文件詳情',
+      preview: '預覽',
+      copy: '複製內容',
+      empty: '暫無',
+      searchPh: '檔名或 MIME…',
+      page: '頁',
+      prev: '上一頁',
+      next: '下一頁',
+    },
+    audit: {
+      title: '審計日誌',
+      searchPh: '動作、資源、IP、金鑰…',
+      time: '時間',
+      action: '動作',
+      resource: '資源',
+      key: '金鑰',
+      meta: '詳情',
+      empty: '暫無日誌',
+      id: '識別碼',
+      actions: {
+        chat_create: '建立對話',
+        document_upload: '上傳文件',
+        document_delete: '刪除文件',
+        document_list: '列出文件',
+        document_read: '讀取文件',
+        document_download: '下載文件',
+        api_key_create: '建立金鑰',
+        api_key_update: '更新金鑰',
+        api_key_delete: '撤銷金鑰',
+        api_key_list: '列出金鑰',
+        settings_update: '更新設定',
+        chat_admin_view: '管理員查看對話',
+        system_update: '系統更新',
+        system_update_check: '檢查更新',
+        ip_ban: '封鎖 IP',
+        ip_unban: '解除 IP 封鎖',
+        ddos_policy_update: 'DDoS 策略更新',
+        pm2_start: 'PM2 啟動',
+        pm2_stop: 'PM2 停止',
+        pm2_restart: 'PM2 重啟',
+        pm2_reload: 'PM2 重載',
+        pm2_config: 'PM2 設定',
+        pm2_switch: 'PM2 切換 runner',
+        playground_chat: '對話試玩',
+        playground_upload: '試玩上傳',
+      },
+      resources: {
+        document: '文件',
+        chat: '對話',
+        api_key: 'API 金鑰',
+        settings: '設定',
+        system: '系統',
+        pm2: 'PM2',
+        playground: '試玩',
+        ip: 'IP',
+      },
+      metaStorage: '儲存方式',
+      metaAsKey: '代行金鑰 ID',
+      metaAsKeyName: '代行金鑰名稱',
+    },
+    settings: {
+      title: '安全設定',
+      hint: '全域安全模式，套用至所有金鑰。',
+      globalSafe: '全域安全模式',
+      globalSafeHint: '開＝全部 safe。關＝跟各金鑰自身模式。',
+      masterOn: '安全模式：開',
+      masterOff: '安全模式：關',
+      disabledBanner: '全域安全已關 — 各金鑰用自身 safe／agent 設定。',
+      tools: '工具模式',
+      toolsHint: 'none：禁 shell／上網／寫入。readonly：只讀搜尋。',
+      toolsNone: 'none',
+      toolsReadonly: 'readonly',
+      maxTurns: '最大 turns',
+      maxTurnsHint: 'safe 步數。問答 3–6 · API 8–12 · 多步驟 15–40。',
+      timeout: '逾時（ms）',
+      timeoutHint: 'safe 時限。一般 60–120s · 長任務 300–600s。',
+      defaultModel: '預設模型',
+      defaultModelHint: '客戶端未指定 model 時使用。',
+      modelSource: 'Grok CLI',
+      refreshModels: '重新整理模型',
+      panel: '管理面板',
+      save: '儲存',
+      saved: '已儲存',
+      guideTitle: '建議預設',
+      guideIntro: '套用後可再微調。',
+      guideApply: '套用',
+      guideActive: '已應用',
+      guideApplyConfirm: '套用「{name}」並儲存？會覆寫目前數值。',
+      guideApplied: '已套用',
+      chipGlobalOn: '安全：開',
+      chipGlobalOff: '安全：關',
+      scLocalTitle: '本機試用',
+      scLocalDesc: '本機完整能力。',
+      scLocalDetail: '安全關 · agent 金鑰。',
+      scProdTitle: '對外 API',
+      scProdDesc: '產品端點，最小權限。',
+      scProdDetail: '安全開 · none · turns 8–12 · 60–120s。',
+      scCodeTitle: '程式代理',
+      scCodeDesc: '可信主機改檔／跑指令。',
+      scCodeDetail: '安全關 · agent 金鑰。',
+      scReadTitle: '只讀分析',
+      scReadDesc: '解碼／搜尋，不寫入。',
+      scReadDetail: '安全開 · readonly · turns 8–15 · 120–180s。',
+      scChatTitle: '純問答',
+      scChatDesc: '只回覆文字，不需使用工具。',
+      scChatDetail: '安全開 · none · turns 3–6 · 60s。',
+      scLongTitle: '長任務（safe）',
+      scLongDesc: '多步驟，減少 max turns 失敗。',
+      scLongDetail: '安全開 · none/readonly · turns 20–40 · 300–600s。',
+      dangerTitle: '危險操作',
+      disablePanel: '關閉管理面板',
+      disablePanelConfirm: '關閉面板並登出？重開：ysk-omni admin on',
+      disablePanelDone: '面板已關。重開：ysk-omni admin on',
+      panelOffHint: '此處可關閉。重開請在伺服器執行 ysk-omni admin on。',
+      panelStatus: '狀態',
+      panelOn: '開',
+      panelOff: '關',
+    },
+    apiFeatures: {
+      title: 'API 能力',
+      intro: '開關協議與能力 · 約 2 秒生效 · 無需重啟。',
+      tabProtocols: '協議',
+      tabMedia: '媒體',
+      tabCaps: '能力',
+      tabEmu: '模擬',
+      kpiEnabled: '已啟用',
+      kpiEnabledSub: '目前開啟的開關',
+      groupMeta: '已開 {on} / {n}',
+      groupProtocols: '協議表面',
+      groupMedia: '媒體 API（OpenAI 兼容）',
+      groupCaps: 'Grok CLI 能力',
+      groupEmu: '模擬與安全',
+      presetOpen: '預設：開放',
+      presetLocked: '預設：鎖定',
+      presetDev: '預設：開發',
+      presetConfirm: '套用能力預設「{name}」？會覆寫全部 API 開關。',
+      flag: {
+        openaiChat: 'OpenAI Chat Completions',
+        openaiResponses: 'OpenAI Responses',
+        anthropicMessages: 'Anthropic Messages',
+        imagesApi: 'Images API',
+        filesOpenAiAlias: 'Files API 別名',
+        videoApi: 'Videos API（異步 job）',
+        audioApi: 'Audio API（語音 / STT）',
+        tools: 'Tools / function calling',
+        structuredOutput: '結構化輸出 (--json-schema)',
+        vision: '視覺 / 圖片 (--prompt-json)',
+        reasoningEffort: '推理力度',
+        webSearch: '網絡搜尋工具',
+        subagents: '子代理',
+        planMode: 'Plan 模式',
+        memory: '跨 session 記憶',
+        sessionResume: '恢復 session',
+        bestOfN: 'best-of-n',
+        checkLoop: '自我檢查迴圈',
+        systemOverride: 'System prompt 覆寫',
+        rules: '額外 rules',
+        permissionMode: '權限模式',
+        sandbox: 'Sandbox profile',
+        usageEstimate: '估算 token usage',
+        assistantsEmulation: 'Assistants-lite（本機）',
+        strictSampling: '嚴格採樣（拒絕 temperature…）',
+        forceDisableToolsInSafe: 'Safe 模式強制工具限制',
+      },
+      hint: {
+        openaiChat: 'POST /v1/chat/completions',
+        openaiResponses: 'POST /v1/responses',
+        anthropicMessages: 'POST /v1/messages',
+        imagesApi: 'POST /v1/images/generations + /edits（要 agent key）',
+        filesOpenAiAlias: 'POST/GET /v1/files → documents + media',
+        videoApi: 'POST /v1/videos + poll GET /v1/videos/:id',
+        audioApi: 'POST /v1/audio/speech + /transcriptions（要 provider）',
+        tools: '映射 tools → Grok --tools',
+        structuredOutput: 'response_format / json_schema',
+        vision: 'image_url content parts',
+        reasoningEffort: '--reasoning-effort',
+        webSearch: '關閉時加 --disable-web-search',
+        subagents: '關閉時 --no-subagents',
+        planMode: '關閉時 --no-plan',
+        memory: '--experimental-memory',
+        sessionResume: '--resume / --continue',
+        bestOfN: '--best-of-n',
+        checkLoop: '--check',
+        systemOverride: '--system-prompt-override',
+        rules: '--rules',
+        permissionMode: '--permission-mode',
+        sandbox: '--sandbox',
+        usageEstimate: 'usage 用字元/4 估算',
+        assistantsEmulation: '本機 /v1/assistants + /v1/threads',
+        strictSampling: '帶 temperature 等則 400',
+        forceDisableToolsInSafe: '維持 safe 工具政策',
+      },
+    },
+    media: {
+      title: '媒體庫',
+      intro: '工作室、資產與影片工作。需 imagesApi／tools（影片另需 videoApi）。',
+      tabStudio: '工作室',
+      tabAssets: '資產',
+      tabJobs: '工作',
+      kpiAssetsSub: '已儲存的媒體檔案',
+      kpiJobsSub: '影片生成工作',
+      kpiStudioSub: '生成、編輯或圖生影片',
+      assets: '資產',
+      jobs: '影片工作',
+      empty: '尚無媒體資產',
+      jobsEmpty: '尚無影片工作',
+      kind: '類型',
+      bytes: '大小',
+      provider: '提供者',
+      providerPh: '提供者名稱…',
+      prompt: '提示詞',
+      created: '建立時間',
+      status: '狀態',
+      preview: '預覽',
+      previewUnsupported: '瀏覽器無法預覽此格式，請下載檔案後開啟。',
+      previewFail: '無法載入預覽',
+      previewTruncated: '預覽已截斷',
+      download: '下載',
+      delete: '刪除',
+      deleteConfirm: '確定要軟刪除此媒體資產？',
+      allKinds: '全部類型',
+      searchPh: '提示詞、檔名、MIME、提供者或 ID…',
+      from: '開始日期',
+      to: '結束日期',
+      generate: '生成圖片',
+      generateTitle: '生成圖片',
+      studioTitle: '媒體工作室',
+      studioHint:
+        '可生成圖片、編輯既有圖片，或建立圖生影片工作。執行限制依循安全設定。需啟用 imagesApi 與 tools（影片另需 videoApi）。',
+      generateHint: '透過 Grok Imagine 工具（image_gen、image_edit、image_to_video）。',
+      generatePrompt: '提示詞',
+      generatePromptPh: '描述你想生成的圖像…',
+      generateSize: '尺寸',
+      aspectRatio: '長寬比',
+      aspectHint: '採用 Grok Imagine 的 aspect_ratio（非 OpenAI 像素尺寸）',
+      generateN: '數量',
+      nHint: 'Grok 不支援批量 n；閘道會依序執行 1–4 次',
+      generateKey: 'API 金鑰',
+      generateKeySession: '目前登入的管理員工作階段',
+      generateSubmit: '生成',
+      generateBusy: '正在生成，可能需要一分鐘…',
+      generateOk: '已生成圖像，請見下方資產列表。',
+      generateFail: '圖像生成失敗',
+      generateNeedPrompt: '請輸入提示詞',
+      modeGenerate: '生成',
+      modeEdit: '編輯',
+      modeVideo: '影片',
+      modelDefault: '系統預設',
+      modelEmpty: '本機 Grok CLI 未回報模型',
+      modelHint: '列出本機 Grok CLI 全部模型，並預選系統預設',
+      editSubmit: '編輯圖像',
+      editBusy: '正在編輯…',
+      editOk: '已編輯圖像，請見下方資產列表。',
+      editNeedImage: '請選擇或拖放來源圖像後再編輯',
+      editImage: '來源圖像',
+      editImageHint: 'image_edit 必須提供來源圖像',
+      editPromptPh: '描述要套用的變更…',
+      videoSubmit: '建立影片工作',
+      videoBusy: '正在將影片工作加入佇列…',
+      videoOk: '影片工作已加入佇列，請見「影片工作」分頁。',
+      videoDuration: '時長',
+      videoDurationHint: 'Grok image_to_video 僅支援 6 秒或 10 秒',
+      videoSource: '來源幀（選填）',
+      videoSourceHint: '選填。若未提供，會先依提示詞生成畫面，再進行動畫。',
+      videoNoSource: '自動依提示詞生成畫面',
+      videoPromptPh: '描述鏡頭運動與畫面內容…',
+      sourceTitle: '來源圖像',
+      sourceHint: '可拖放圖像、選擇本機檔案，或從文件庫／媒體資產中挑選任一圖像。',
+      dropzoneAria: '來源圖像拖放區',
+      dropTitle: '將圖像拖放至此',
+      dropHint: '亦可選擇本機檔案，或從系統庫挑選',
+      dropTitleVideo: '拖放來源幀（選填）',
+      dropHintVideo: '影片可選填來源。未指定時，會先依提示詞生成畫面。',
+      pickFile: '選擇檔案',
+      pickLibrary: '系統庫',
+      clearSource: '清除',
+      sourceNeedImage: '請提供圖像檔（PNG、JPEG、WebP、GIF 等）',
+      sourceKindUpload: '上傳',
+      sourceKindAsset: '媒體資產',
+      sourceKindDocument: '文件',
+      libraryTitle: '選擇來源檔案',
+      librarySubtitle: '可選取本閘道「文件」或「媒體資產」中的任一圖像。',
+      libraryTabDocs: '文件',
+      libraryTabAssets: '媒體資產',
+      librarySearch: '依名稱、MIME 或 ID 搜尋…',
+      libraryFormats: '僅圖像（PNG、JPEG、WebP、GIF 等）',
+      libraryEmpty: '沒有符合的檔案',
+      librarySelect: '使用所選',
+      libraryLoadFail: '無法載入檔案庫',
+    },
+    usage: {
+      title: '用量與防濫用',
+      window: '統計區間',
+      requests: '請求數',
+      success: '成功',
+      errors: '錯誤',
+      errorRate: '錯誤率',
+      byModel: '按模型',
+      byKey: '按 API 金鑰',
+      rateLimit: '上限 / 分',
+      util: '估計使用率',
+      limits: 'Gateway 限流設定',
+      global: '全域上限 / 視窗',
+      ipMax: '未認證 IP 上限',
+      burst: '對話短窗 burst（10s）',
+      block: '認證失敗封鎖門檻',
+      concurrent: 'Grok 最大併發',
+      refresh: '重新整理',
+    },
+    ddos: {
+      title: 'DDoS 控制中心',
+      tabPolicy: '政策',
+      tabLive: '流量',
+      tabBlacklist: '黑名單',
+      tabEvents: '事件',
+      live: '即時連線',
+      recent: '最近請求',
+      blacklist: 'IP 黑名單',
+      stats: '濫用統計',
+      refresh: '重新整理',
+      pause: '暫停自動刷新',
+      resume: '恢復自動刷新',
+      ban: '封鎖 IP',
+      unban: '解除封鎖',
+      banConfirm: '確定封鎖此 IP？',
+      banWhitelistWarn: '此 IP 在自動封鎖白名單內。仍要手動封鎖？',
+      unbanConfirm: '確定從黑名單移除此 IP？',
+      ip: 'IP',
+      method: '方法',
+      path: '路徑',
+      key: 'API 金鑰',
+      duration: '耗時',
+      state: '狀態',
+      ua: '瀏覽器識別 (UA)',
+      reason: '原因',
+      source: '來源',
+      expires: '到期',
+      permanent: '永久',
+      addBan: '新增封鎖',
+      ttl: '有效期',
+      ttlPerm: '永久',
+      ttl1h: '1 小時',
+      ttl24h: '24 小時',
+      ttl7d: '7 日',
+      activeConn: '進行中',
+      rateHits: '限流次數',
+      blockedHits: '已封鎖攔截',
+      autoBans: '自動封鎖',
+      topIps: '熱門 IP（最近）',
+      emptyLive: '目前無進行中連線',
+      emptyBan: '黑名單為空',
+      emptyEvents: '尚無自動封鎖事件',
+      reasonPh: '可選原因',
+      banReasonDefault: '管理員手動封鎖',
+      ipPlaceholder: '1.2.3.4',
+      policyTitle: '防護策略',
+      policyHint: '所有門檻即時生效，無需重啟。環境變數僅作為初始預設值。',
+      autoOn: '自動判斷：開',
+      autoOff: '自動判斷：關',
+      autoBanMaster: '啟用自動封鎖 IP',
+      autoBanMasterHint: '關閉後仍會限流，但不會自動加入黑名單。',
+      masterOn: '自動封鎖：開',
+      masterOff: '自動封鎖：關',
+      disabledBanner:
+        '自動封鎖已關閉 — 仍會限流，但 IP 不會被自動加入黑名單。',
+      presetTitle: '防護方案',
+      presetHint: '點選預設方案，或自行改數值；系統會自動判斷是否為自訂。',
+      presetRelaxed: '寬鬆',
+      presetBalanced: '均衡',
+      presetStrict: '嚴格',
+      presetCustom: '自訂',
+      presetActiveLabel: '目前：{name}',
+      presetFormLabel: '表單：{name}（未儲存）',
+      presetTagActive: '使用中',
+      presetTagDraft: '草稿',
+      presetTagSaved: '已儲存',
+      presetActiveHint: '目前方案：{name}。若改動其他欄位請按「儲存策略」。',
+      presetCustomHint: '目前數值不屬於寬鬆／均衡／嚴格，已判定為「自訂」。',
+      presetUnsavedHint:
+        '表單顯示「{form}」，伺服器仍為「{saved}」。請按「儲存策略」先套用。',
+      savePolicy: '儲存策略',
+      resetPolicy: '重設為環境預設',
+      policySaved: '防護策略已儲存，限流器已重新載入。',
+      policyReset: '已重設為環境變數預設值。',
+      confirmReset: '確定將所有 DDoS 策略欄位重設為 .env 預設？',
+      sectionProxy: '反向代理 / CDN',
+      proxyHint:
+        '流量經 nginx 或 Cloudflare 時，請設定信任層數，令封鎖、限流、審計日誌使用真實用戶 IP，而非代理伺服器 IP。',
+      proxyTrustHops: '信任代理層數',
+      proxyTrustHopsHint:
+        '0 = 直連（忽略 header）。1 = nginx 或 Cloudflare→應用。2 = Cloudflare→nginx→應用。',
+      proxyIpSource: '客戶端 IP 來源',
+      proxyIpSourceHint:
+        'auto 會依序嘗試 CF-Connecting-IP、X-Real-IP、X-Forwarded-For。僅直連時先選「socket」。',
+      proxySrcAuto: '自動（建議）',
+      proxySrcCf: 'Cloudflare（CF-Connecting-IP）',
+      proxySrcNginx: 'nginx（X-Real-IP）',
+      proxySrcXff: '僅 X-Forwarded-For',
+      proxySrcSocket: '僅 TCP socket（無代理）',
+      trustedProxies: '可信代理 IP / CIDR',
+      trustedProxiesHint:
+        '只有這些 peer 才可設定 CF-Connecting-IP / X-Real-IP / XFF。預設 127.0.0.1（本機 nginx）。遠端代理請加入其 IP。直連客戶無法偽造 header。',
+      sectionLimits: '限流',
+      sectionAuth: '失敗認證',
+      sectionRate: '限流濫用（429）',
+      sectionConn: '連線洪水',
+      sectionVelocity: '請求速率',
+      sectionEscalate: '累犯升級',
+      sectionWhitelist: '自動封鎖白名單',
+      whitelistHint: '每行一個 IP 或 CIDR。白名單 IP 永不被自動封鎖。',
+      rateWindow: '視窗（秒）',
+      rateMaxKey: '金鑰上限',
+      rateMaxIp: '未認證 IP 上限',
+      burstWindow: 'Burst 視窗（秒）',
+      burstMax: 'Burst 上限',
+      enableRule: '啟用',
+      threshold: '門檻',
+      windowSec: '視窗（秒）',
+      banMin: '封鎖時長（分）',
+      escalateAfter: '累計自動封鎖 N 次後升級',
+      escalateMin: '升級後封鎖（分）',
+      maxConcurrent: '每 IP 最大並發',
+      velocityMax: '最大請求數',
+      eventsTitle: '最近自動封鎖事件',
+      eventTime: '時間',
+      eventSource: '規則',
+      eventDuration: '封鎖時長',
+      sources: {
+        manual: '手動',
+        'auto-auth': '自動 · 認證',
+        'auto-rate': '自動 · 429',
+        'auto-conn': '自動 · 並發',
+        'auto-velocity': '自動 · 速率',
+        'auto-escalate': '自動 · 升級',
+      },
+    },
+    pm2: {
+      title: 'PM2 控制',
+      tabRunner: '運行方式',
+      tabPort: '連接埠',
+      tabConfig: '設定',
+      tabLogs: '日誌',
+      status: '進程狀態',
+      start: '用 PM2 啟動',
+      stop: '停止 PM2',
+      restart: '重啟',
+      reload: '重載',
+      logs: '日誌',
+      logsHint: '優先顯示錯誤日誌',
+      clearLogs: '清除日誌',
+      confirmClearLogs: '確定清除 PM2 與 ysk-omni 日誌檔？此操作無法復原（檔案會被清空）。',
+      logsCleared: '已清除 {n} 個日誌檔。',
+      logsAutoTrim: '超過 {maxMb} MB 會自動裁剪，只保留最後約 {keepKb} KB（每次讀取日誌時檢查）。',
+      refresh: '重新整理',
+      confirmStop: '確定停止 PM2 進程？',
+      confirmRestart: '確定以 PM2 重啟？會妥善移交 port。',
+      unavailable: 'PM2 不可用',
+      disabled: '已停用 PM2 管理',
+      app: '應用名稱',
+      pid: '進程 ID',
+      uptime: '運行時間',
+      memory: '記憶體',
+      cpu: 'CPU',
+      restarts: '重啟次數',
+      portBusy: '連接埠佔用中',
+      port: '連接埠',
+      portTitle: '監聽連接埠',
+      portHint:
+        'Gateway Admin 與 API 的 HTTP 連接埠。更改後會寫入 .env 並重啟進程，新連接埠才會生效。',
+      fieldPort: '連接埠',
+      portDefaultNote: '預設為 3850。有效範圍：1–65535。',
+      savePort: '儲存連接埠並重啟',
+      useDefaultPort: '使用預設（3850）',
+      portInvalid: '請輸入有效連接埠（1–65535）。',
+      confirmPortChange:
+        '將監聽連接埠改為 {port} 並重啟 Gateway？之後請用新連接埠開啟 Admin（例如 http://localhost:{port}/admin）。',
+      portChangedMsg: '連接埠已更新：{from} → {to}。',
+      portSavedNeedRestart: '連接埠 {port} 已寫入 .env。請重啟後才會生效。',
+      portAfterRestart: '重啟後請開啟 http://localhost:{port}/admin',
+      hint: '可用 PM2 或 ysk-omni 運行，可在此或 CLI 切換。',
+      switchTitle: '運行方式',
+      switchHint: '同一時間只應有一個進程綁定連接埠。',
+      currentRunner: '目前 runner',
+      runnerPm2: 'PM2',
+      runnerGctoac: 'ysk-omni（獨立進程）',
+      runnerNone: '未運行',
+      runnerUnknown: '未知／混合',
+      switchToPm2: '切換到 PM2',
+      switchToGctoac: '切換到 ysk-omni',
+      confirmSwitchPm2: '確定切換到 PM2？gateway 會在數秒內以 PM2 重啟。',
+      confirmSwitchGctoac: '確定切換到 ysk-omni？gateway 會在數秒內以獨立進程重啟。',
+      switchScheduled: '已排程切換。管理面板將在約 10 秒後自動重新整理。',
+      autoRefreshIn: '本頁將於 {n} 秒後自動重新載入…',
+      autoRefreshNow: '正在重新載入…',
+      omniPid: 'ysk-omni 進程 ID',
+      configTitle: 'PM2 設定',
+      configHint: '儲存至 pm2.runtime.json，經 ecosystem.config.cjs 套用。若目前用 PM2 運行，「儲存並套用」會重啟 PM2。',
+      saveConfig: '儲存並套用',
+      saveOnly: '只儲存',
+      resetConfig: '還原預設',
+      confirmReset: '確定將 PM2 設定還原為預設？',
+      configSaved: '設定已儲存',
+      fieldName: '應用名稱',
+      fieldScript: '啟動腳本',
+      fieldCwd: '工作目錄 (cwd)',
+      fieldInstances: '實例數',
+      fieldExecMode: '執行模式',
+      fieldAutorestart: '自動重啟',
+      fieldWatch: '檔案監視 (Watch)',
+      fieldMaxMem: '記憶體上限重啟',
+      fieldMaxRestarts: '最大重啟次數',
+      fieldMinUptime: '最短運行時間',
+      fieldRestartDelay: '重啟延遲 (ms)',
+      fieldBackoff: '指數退避延遲 (ms)',
+      fieldMergeLogs: '合併日誌',
+      fieldTime: '日誌時間戳',
+      fieldErrorFile: '錯誤日誌檔',
+      fieldOutFile: '輸出日誌檔',
+      fieldEnvExtra: '額外環境變數（每行 KEY=value）',
+      fieldPreferred: '偏好 runner',
+      empty: 'pm2 列表中找不到此應用',
+      modeFork: 'fork',
+      modeCluster: 'cluster',
+      phCwd: '（套件根目錄）',
+      phInstances: '1 或 max',
+      phEnv: 'NODE_ENV=production',
+      statusOnline: '運行中',
+      statusErrored: '錯誤',
+      statusStopped: '已停止',
+      msgOk: '正常',
+      msgDisabled: 'PM2 管理已停用（PM2_ADMIN_ENABLED=false）。',
+      msgBinaryMissing: '找不到 pm2，請執行：npm install -g pm2',
+      msgNotInList:
+        '應用「{app}」不在 PM2 列表中 — 請用「用 PM2 啟動」或「切換到 PM2」。',
+      msgPortGctoac:
+        '連接埠 {port} 正由 ysk-omni 佔用（pid {pid}）。請按「切換到 PM2」移交。',
+      msgPortBusy: '連接埠 {port} 被佔用（pid {pids}）。',
+      msgErrored:
+        'PM2 進程出錯 — 請查日誌／設定，然後重啟或處理連接埠衝突。',
+      msgBothRunners:
+        '偵測到兩個 runner；ysk-omni pid {pid} 仍佔用資源。請用「切換」只保留一個。',
+      msgError: 'PM2 錯誤：{error}',
+      msgSwitchPm2: '正在切換至 PM2… Gateway 將於數秒內以 PM2 重新啟動。',
+      msgSwitchGctoac:
+        '正在切換至 ysk-omni… Gateway 將於數秒內以獨立進程重新啟動。',
+    },
+    system: {
+      title: '系統狀態',
+      tabSoftware: '軟件',
+      tabPackage: '套件',
+      tabEnv: '環境',
+      envHint: '運行環境與版本快照。',
+      checkUpdate: '檢查更新',
+      oneClick: '更新套件並重啟',
+      selfUpdate: '套件版本',
+      selfHint: '對比版本 · 更新套件會重啟 gateway。',
+      current: '本機版本',
+      npm: 'npm 最新版',
+      github: 'GitHub 最新版',
+      install: '安裝渠道',
+      confirmUpdate: '確定更新套件並重啟 gateway？期間 API 會短暫中斷。',
+      scheduled: '已排程更新，請約 30 秒後重新整理頁面。',
+      database: '資料庫',
+      grokCli: 'Grok CLI',
+      concurrency: '併發',
+      runtime: '運行狀態',
+      software: '系統軟件',
+      softwareHint: '所需軟件與已安裝版本。',
+      softName: '軟件',
+      softLevel: '需求',
+      softInstalled: '已安裝',
+      softVersion: '版本',
+      softStatus: '狀態',
+      softDetail: '說明',
+      levelRequired: '必須',
+      levelRecommended: '建議',
+      levelOptional: '可選',
+      levelBundled: '內建',
+      softOk: '正常',
+      softMissing: '未安裝',
+      softWarn: '注意',
+      envTitle: '環境變數',
+      up: '正常',
+      down: '異常',
+      yes: '是',
+      no: '否',
+      badgeUpdate: '有新版本',
+      badgeOk: '已是最新',
+      badgeAhead: '新於 npm',
+      badgeUnknown: '無法比較',
+      statusHintUpdate: '發佈庫有較新版本，可按「更新套件並重啟」。',
+      statusHintOk: '本機版本與目前已知最新發佈版一致。',
+      statusHintAhead:
+        '本機版本比 npm 新（常見於 git／開發版）。若是 git 安裝，「更新套件」仍可拉取最新 commits。',
+      statusHintUnknown: '無法連上 npm／GitHub，未能比較版本。',
+      checkResult: '版本檢查結果',
+      channelGit: 'git（開發目錄）',
+      channelNpmGlobal: 'npm 全域',
+      channelNpmLocal: 'npm 本地',
+      channelUnknown: '未知',
+      encryption: '加密',
+      ready: '就緒',
+      notReady: '未就緒',
+      allRequiredOk: '必須軟件齊全',
+      requiredMissing: '有必須軟件缺失',
+    },
+    common: {
+      empty: '暫無資料',
+      active: '啟用',
+      revoked: '已撤銷',
+      save: '儲存',
+      cancel: '關閉',
+      loading: '載入中…',
+      powered: '技術支援',
+      actions: '操作',
+      yes: '是',
+      no: '否',
+      ok: '確定',
+      confirm: '確定',
+      notice: '提示',
+      confirmTitle: '請確認',
+      dangerTitle: '確認操作',
+      apply: '套用',
+      reset: '重設',
+      search: '搜尋',
+      prev: '上一頁',
+      next: '下一頁',
+      perPage: '每頁',
+      pagerTotal: '共 {n} 筆',
+      pagerPage: '第 {n} / {total} 頁',
+      filterTitle: '搜尋與篩選',
+      filterHint: '設定條件後按「套用」',
+      featureOff: '已關閉',
+      all: '全部',
+      requestFailed: '請求失敗',
+      ms: '{n} 毫秒',
+      perMin: '{n}/分',
+      minutes: '{n} 分鐘',
+      mb: '{n} MB',
+      percent: '{n}%',
+      ipLabel: 'IP',
+      uaLabel: 'UA',
+      httpStatus: 'HTTP',
+    },
+    /** API error.code → 使用者可見訊息（管理面板） */
+    errors: {
+      unauthorized: '憑證無效或缺失，請重新登入。',
+      forbidden: '你沒有執行此操作的權限。',
+      not_found: '找不到請求的資源。',
+      validation_error: '請求無效，請檢查輸入內容。',
+      rate_limit_exceeded: '已超過速率限制，請稍後再試。',
+      concurrency_limit_exceeded: 'Grok 並行工作過多，請稍候再試。',
+      internal_error: '伺服器發生內部錯誤。',
+      engine_error: 'Grok CLI 回傳錯誤。',
+      engine_timeout: 'Grok CLI 執行逾時。',
+      engine_not_available: '此伺服器無法使用 Grok CLI。',
+      document_too_large: '文件大小超過允許上限。',
+      document_type_not_allowed: '不允許此文件類型。',
+      invalid_cwd: '不允許使用此工作目錄。',
+      service_unavailable: '服務暫時無法使用。',
+      queue_full: '對話佇列已滿，請稍後再試。',
+      queue_draining: '對話佇列已暫停或正在排空。',
+      queue_wait_timeout: '在對話佇列中等待逾時。',
+      queue_cancelled: '對話工作已取消。',
+      media_not_supported: '此媒體功能不可用或已停用。',
+      media_provider_unavailable: '媒體提供者不可用。',
+      media_generation_failed: '媒體生成失敗。',
+      media_forbidden:
+        '此 API 金鑰不允許生成媒體。請使用 agent 模式金鑰或管理員工作階段。',
+      feature_disabled: '此 API 功能已停用。',
+      feature: {
+        imagesApi:
+          'Images API 已停用。請至「管理 → API 能力 → Images API」啟用。',
+        videoApi:
+          'Video API 已停用。請至「管理 → API 能力 → Videos API」啟用。',
+        audioApi:
+          'Audio API 已停用。請至「管理 → API 能力 → Audio API」啟用。',
+        tools:
+          'Tools 已停用。請至「管理 → API 能力」啟用 Tools（圖像生成需要）。',
+        filesOpenAiAlias:
+          'OpenAI Files API 別名已停用。請至「管理 → API 能力 → Files API 別名」啟用。',
+      },
+      media: {
+        agent_or_admin_required:
+          '圖像生成需要 agent 模式 API 金鑰或管理員工作階段。安全模式金鑰無法使用圖像工具。',
+        source_required: '請提供圖像檔、媒體資產或文件作為來源。',
+        source_must_be_image: '編輯或生成影片時，來源必須為圖像。',
+        no_image_in_sandbox:
+          'Grok 已結束，但沙箱及今次 run 對應的 session images/ 均未找到圖像檔。這不是 imagesApi 或 API 金鑰問題。',
+        no_video_in_sandbox:
+          'Grok 已結束，但沙箱及今次 run 對應的 session 均未找到影片檔。',
+        provider_no_edit: '目前媒體提供者不支援圖像編輯。',
+      },
+    },
+  },
+};
+
+function detectLocale() {
+  const saved = localStorage.getItem(LANG_KEY);
+  if (saved === 'en' || saved === 'zh-Hant') return saved;
+  const nav = (navigator.language || navigator.userLanguage || 'en').toLowerCase();
+  if (nav.startsWith('zh')) return 'zh-Hant';
+  return 'en';
+}
+
+let locale = detectLocale();
+
+export function getLocale() {
+  return locale;
+}
+
+export function setLocale(next) {
+  if (next !== 'en' && next !== 'zh-Hant') return;
+  locale = next;
+  localStorage.setItem(LANG_KEY, next);
+}
+
+export function t(path) {
+  const parts = path.split('.');
+  let cur = dict[locale] || dict.en;
+  for (const p of parts) {
+    if (cur && typeof cur === 'object' && p in cur) cur = cur[p];
+    else {
+      cur = dict.en;
+      for (const q of parts) {
+        if (cur && typeof cur === 'object' && q in cur) cur = cur[q];
+        else return path;
+      }
+      break;
+    }
+  }
+  return typeof cur === 'string' ? cur : path;
+}
+
+/** True if path resolves to a real string (not missing key). */
+export function hasT(path) {
+  return t(path) !== path;
+}
+
+/** t() with {name} placeholders: tf('keys.ipCount', { n: 3 }) */
+export function tf(path, vars = {}) {
+  let s = t(path);
+  for (const [k, v] of Object.entries(vars)) {
+    s = s.replaceAll(`{${k}}`, String(v));
+  }
+  return s;
+}
+
+export function langSwitchHtml() {
+  const aria = locale === 'zh-Hant' ? '語言' : 'Language';
+  return `
+  <div class="lang-switch" role="group" aria-label="${aria}">
+    <button type="button" data-lang="en" class="${locale === 'en' ? 'is-active' : ''}">EN</button>
+    <button type="button" data-lang="zh-Hant" class="${locale === 'zh-Hant' ? 'is-active' : ''}">中文</button>
+  </div>`;
+}