ysk-server-shared 1.0.0 → 1.1.0

package/locales/en/btTracker.json

@@ -8,11 +8,19 @@
   "installed": "Installed",
   "start": "Start",
   "stop": "Stop",
+  "stopTitle": "Stop the tracker — seeding and downloads will interrupt",
+  "stopDesc": "Running torrents stop announcing. Peers disconnect until you start the tracker again.",
+  "fillPublicHost": "Use {{host}}",
+  "fillPublicHostTitle": "Fill the current panel hostname as the public announce host",
   "refresh": "Refresh",
   "settings": "Settings",
   "httpPort": "HTTP / WS port",
   "udpPort": "UDP port",
   "listenHost": "Listen",
+  "listenHostHint": "0.0.0.0 listens on every address. Prefer 127.0.0.1 unless peers must reach this host.",
+  "listenAllWarn": "Tracker is bound to all addresses. With the firewall off this is public. Bind 127.0.0.1 for local-only, or restrict the port in the firewall.",
+  "bindLoopback": "127.0.0.1 only",
+  "bindAll": "0.0.0.0 (all)",
   "wsEnabled": "WebSocket",
   "wsEnabledHint": "",
   "autostart": "Autostart",
@@ -21,12 +29,14 @@
   "publicAnnounceHostHint": "",
   "maxSeeds": "Max seeds",
   "seederPorts": "Peer ports",
-  "seederPortsHint": "",
+  "seederPortMin": "Peer port start",
+  "seederPortMax": "Peer port end",
+  "seederPortsHint": "Inclusive range used by the local seeder (typically 6881–6889).",
   "saveSettings": "Save",
   "applyHint": "",
   "torrents": "Torrents",
   "torrentsEmpty": "No torrents",
-  "torrentsEmptyHint": "Create a BT share in Files",
+  "torrentsEmptyHint": "Add a .torrent, or create a BT share in Files",
   "torrentsDesc": "",
   "colName": "Name",
   "colHash": "Hash",
@@ -38,8 +48,13 @@
   "copy": "Copy",
   "copied": "Copied",
   "statsTorrents": "Torrents",
+  "statsLibrary": "Library",
+  "statsLibraryHint": "Torrents in the panel library / file shares",
+  "statsTrackerLeftover": "Leftover (not in library)",
+  "statsTrackerLeftoverHint": "Hashes the local tracker has announced that are not torrent-library rows. Extra announce URLs are on the Trackers tab.",
   "statsPeers": "Peers",
   "statsAnnounces": "Announces",
+  "statsAnnouncesHint": "Announce requests seen by the tracker process",
   "statsJobs": "Jobs",
   "openShares": "Shares",
   "needExecute": "YSK_EXECUTE required to bind ports",
@@ -115,5 +130,69 @@
   "udpPortSameHttp": "Same HTTP ({{port}})",
   "udpPortClassic": "6969",
   "portSuggest8000": "8000",
-  "announceHostUnset": "—"
+  "announceHostUnset": "Not set",
+  "tabTrackers": "Trackers",
+  "addTorrent": "Add torrent",
+  "addTorrentTitle": "Add torrent",
+  "addTorrentHint": "Upload a .torrent or paste a magnet. Choose a Files folder. WebTorrent downloads missing files and seeds when complete.",
+  "dropTorrent": "Drop a .torrent here",
+  "chooseFile": "or choose a file",
+  "magnetLabel": "Magnet",
+  "magnetPlaceholder": "magnet:?xt=urn:btih:…",
+  "inspect": "Read",
+  "extraTrackersPreview": "Will also announce to {{n}} extra tracker(s)",
+  "saveLocation": "Save location",
+  "saveRootPublic": "Public files",
+  "newFolder": "New folder",
+  "destPreview": "Will write to",
+  "startDownload": "Start download",
+  "filterDownloading": "Downloading",
+  "filterPaused": "Paused",
+  "filterError": "Error",
+  "emptyDrop": "Drop a .torrent here, or choose a file",
+  "emptyHint": "Files go in the folder you pick. If they are already complete, this host seeds. Engine: WebTorrent — no extra download software.",
+  "pause": "Pause",
+  "resume": "Resume",
+  "openFolder": "Open folder",
+  "remove": "Remove",
+  "removeKeep": "Remove, keep files",
+  "removeDelete": "Remove and delete files",
+  "removeConfirm": "Remove this torrent from the library?",
+  "kindShare": "Share",
+  "filesInTorrent": "files",
+  "extraTrackersDesc": "Extra announce URLs. Library download/seed and file-share seeds use them in addition to the .torrent list. This does not open the local tracker to arbitrary swarms.",
+  "extraTrackersEmpty": "No extra trackers. Add HTTP(S), UDP, or WS(S) announce URLs so this host can find peers.",
+  "extraTrackerAdd": "Add",
+  "extraTrackerUrl": "Announce URL",
+  "extraTrackerApply": "Apply to current seeds",
+  "extraTrackerApplyOk": "Applied extra trackers",
+  "extraEnabled": "On",
+  "extraTrackerBad": "URL must start with http://, https://, udp://, ws://, or wss://",
+  "extraTrackerDup": "Already listed",
+  "extraTrackerLimit": "Maximum 32 extra trackers",
+  "addOk": "Added to library",
+  "savedTo": "Save",
+  "folderEmpty": "No subfolders",
+  "needTorrentFile": "Choose a .torrent file",
+  "torrentTooBig": ".torrent larger than 8 MiB",
+  "seedStatusDownloading": "Downloading",
+  "seedStatusChecking": "Checking",
+  "seedStatusPaused": "Paused",
+  "seedStatusQueued": "Queued",
+  "swarmLeftover": "Tracker has {{count}} announce(s) not in the library",
+  "addSourceSection": "Source",
+  "addSourceFile": "File",
+  "addSourceMagnet": "Magnet",
+  "previewSection": "Preview",
+  "saveRoot": "Root",
+  "clearFile": "Clear file",
+  "extraTrackersTitle": "Extra announce",
+  "extraTrackersEmptyTitle": "No extra trackers yet",
+  "extraEnabledCount": "{{count}} enabled",
+  "extraApplyHint": "Enable at least one tracker to apply to current seeds",
+  "destMode": "How to use this folder",
+  "seedExisting": "Seed existing files",
+  "downloadNewFolder": "Download into a new folder",
+  "destFileConflict": "A file named {{name}} already exists here. Pick another folder, or seed the existing file if it matches.",
+  "waitingPeers": "Waiting for peers. If the files are already on this host, add again and choose Seed existing files."
 }

package/locales/en/cdn.json

@@ -30,8 +30,58 @@
   "confWritten": "Conf written ({{status}})",
   "partialFail": "Not fully successful ({{status}}) — see notes",
   "statNodes": "Nodes",
+  "hitNoStats": "No edge stats yet",
+  "loopbackOriginBlocked": "Will not apply loopback origin {{url}} to a remote edge. Set a reachable origin first.",
+  "applyFailedHint": "Apply failed — see notes below",
+  "applyStatus": {
+    "draft": "Draft",
+    "planned": "Planned",
+    "applying": "Applying",
+    "applied": "Applied",
+    "failed": "Failed",
+    "partial": "Partial"
+  },
   "statSites": "Sites",
+  "pillNodesSites": "{{n}} nodes · {{s}} sites",
+  "statOnline": "Online",
+  "statHit": "Hit rate",
+  "hitUnknown": "Unknown",
+  "lastHealthHint": "Last probe {{at}} · {{ok}}",
+  "lastHealthNever": "Not probed yet — run Probe",
+  "lastHealthFail": "probe failed",
+  "healthLoopNeedSites": "Add a site first",
+  "nodeStatus": {
+    "online": "online",
+    "offline": "offline",
+    "draining": "draining",
+    "unknown": "unknown"
+  },
   "recentNotes": "Recent notes",
+  "previewOnlyNote": "Preview only — nothing was written to the edges.",
+  "statByRegion": "Region: ",
+  "statByApply": "Apply status: ",
+  "col": {
+    "origin": "Origin",
+    "edges": "Edges",
+    "apply": "Apply",
+    "dns": "DNS",
+    "edgesOnline": "Edges online / applied",
+    "dnsRr": "CDN DNS records"
+  },
+  "mode": {
+    "origin_pull": "Origin pull",
+    "reverse_proxy": "Reverse proxy",
+    "static_edge": "Static edge"
+  },
+  "dnsStrategy": {
+    "multi_a": "Multiple A records",
+    "cname": "CNAME",
+    "geo": "Geo"
+  },
+  "edgesOnlineApplied": "{{online}}/{{total}} online · {{applied}} applied",
+  "hitMiss": "Hits {{hits}} / misses {{misses}}",
+  "cacheBytes": "Cache ≈ {{n}} B",
+  "hitRateUnknown": "No access log with cache status and no cache directory, so hit rate cannot be estimated.",
   "edgeConfPreview": "Nginx edge conf preview",
   "tabs": {
     "nodes": "Nodes",
@@ -40,11 +90,41 @@
     "about": "About"
   },
   "nodesTitle": "CDN nodes ({{count}})",
-  "nodesDesc": "Register control / origin / edge / dns. Probe updates status.",
+  "nodesDesc": "Register control-plane, origin, edge, and DNS nodes. Probe refreshes status.",
+  "offlineHint": "Offline — probe failed. Remove the node if it is leftover.",
   "colName": "Name",
   "colRole": "Role",
   "colStatus": "Status",
   "clearDrain": "Clear drain",
+  "drain": "Drain",
+  "drainTitle": "Stop sending new CDN traffic to this edge",
+  "drainDesc": "Drain “{{name}}”? Existing connections stay until they finish.",
+  "drainLastTitle": "This is the last edge — drain will leave every site without an edge",
+  "drainLastDesc": "“{{name}}” is the only edge. Drain it and all sites have no edge.",
+  "clearDrainTitle": "Accept new traffic on this edge again",
+  "clearDrainDesc": "Clear drain on “{{name}}”?",
+  "deleteNodeTitle": "Delete this CDN edge",
+  "deleteLastNodeTitle": "Delete the last edge — all sites will have no edge",
+  "purge": "Purge",
+  "previewTitle": "Preview nginx config (no write)",
+  "writeConfTitle": "Write edge nginx config files",
+  "applyEdgesTitle": "Apply this site to edges (writes nginx)",
+  "purgeTitle": "Purge cache on edges",
+  "dnsSyncTitle": "Write CDN DNS records",
+  "probeDnsTitle": "Probe edges and DNS (read-only)",
+  "distSslTitle": "Copy TLS materials to edges",
+  "leIssueTitle": "Issue a Let’s Encrypt certificate and distribute it",
+  "deleteSiteTitle": "Delete this CDN site",
+  "siteOpConfirmGeneric": "Run this action on “{{name}}”?",
+  "siteOpConfirmDesc": "Site “{{name}}” · {{action}}. This can change nginx, DNS, or certificates.",
+  "siteOpConfirm": {
+    "apply": "Apply this site to edges?",
+    "render": "Write nginx config for this site?",
+    "purge": "Purge cache for this site?",
+    "dns-sync": "Sync DNS for this site?",
+    "dist": "Distribute TLS to edges?",
+    "issue": "Issue Let’s Encrypt and distribute?"
+  },
   "emptyNodesTitle": "No CDN nodes yet",
   "emptyNodesDesc": "Use “+ Add node” to register an edge, then create sites.",
   "sitesTitle": "CDN sites ({{count}})",
@@ -115,5 +195,25 @@
   "deleteNodeDesc": "Deletes CDN node \"{{name}}\".",
   "deleteSiteDesc": "Deletes CDN site \"{{name}}\".",
   "deleteSiteC1": "Site policy and edge associations",
-  "deleteSiteC2": "Applied nginx configs may need separate cleanup or re-apply"
+  "deleteSiteC2": "Applied nginx configs may need separate cleanup or re-apply",
+  "statOnline": "Online",
+  "statOnlineOf": "Online {{n}}/{{total}}",
+  "colRegion": "Region",
+  "statDraining": "Draining {{n}}",
+  "statOffline": "Offline {{n}}",
+  "pillNodesSites": "{{n}} nodes · {{s}} sites",
+  "statHit": "Hit rate",
+  "localTest": "local / test",
+  "hitUnknown": "Unknown",
+  "lastHealthHint": "Last probe {{at}} · {{ok}}",
+  "lastHealthNever": "Not probed yet — run Probe",
+  "lastHealthFail": "probe failed",
+  "healthLoopNeedSites": "Add a site first",
+  "nodeStatus": {
+    "online": "online",
+    "offline": "offline",
+    "draining": "draining",
+    "unknown": "unknown"
+  },
+  "statHitRate": "Hit rate {{v}}"
 }

package/locales/en/cli.json

@@ -12,7 +12,7 @@
   },
   "help": {
     "blurb": "Control plane CLI — prefer --json for AI agents.\nDocs: docs/agent/README.md · docs/cli/reference.md · docs/agent/commands.json",
-    "main": "{{product}} ({{cli}}) v{{version}}\n\nControl plane CLI — prefer --json for AI agents.\nDocs: docs/agent/README.md · docs/cli/reference.md · docs/agent/commands.json\n\nUsage:\n  {{cli}} <command> [options]\n\nCommands:\n  setup                 Init dataDir + admin\n  update                Self-update check/apply\n  serve                 HTTP API + Web UI\n  system unit-install   Install ysk-server.service [--enable]\n  tools                 List tools; tools run --tool <name> [--dry-run]\n  ask                   NL → AI plan [--execute]\n  projects              list|get|create|deploy|stop|health|backup|template\n  backup                all|list|status|restore|delete|schedule|control-plane|settings|restic\n  templates             App templates\n  hosting               nginx|dns|db|firewall helpers\n  dns                   zone|zones (AI alias → hosting dns-*)\n  logs                  sources|query|journal|overview\n  host                  overview|metrics (read-only)\n  nginx                 status|list|test|sync\n  ssl                   list|get (certificates)\n  db-cluster            list|get|create|plan (HA plan-first)\n  ssh-key               list|create|import|public|export|install|delete (SSH identity vault)\n  ssh-2fa               list|enroll|confirm|install|pam|retire (SSH login TOTP ≠ panel 2FA)\n  services              Host service matrix (systemctl probe)\n  defense | protection  status|ban|unban|whitelist\n  security              status|sessions|api-keys (2FA flags · session revoke · API keys)\n  cdn                   nodes|sites|render|apply|purge|probe|dashboard|health-loop|from-project\n  agents                runtimes|fleet list|commands|register (panel + edge)\n  agent run             Outbound fleet poller (experimental)\n  store                 status|export|import|migrate (json|sqlite|postgres document backends)\n  files                 list|read|write|mkdir|rm|stat|rename|copy|move|chmod|trash|shares (sandbox)\n  cron                  list|create|delete|enable|disable|run|install|status\n  email                 domains|mailboxes|deliverability|bootstrap|dns (panel parity)\n  health                Local mode snapshot or --url http://host:port/health\n  readiness | doctor    Production readiness (honest)\n  migrate               inventory|host|post|status|resume (full host migrate)\n  version | help\n\nGlobal:\n  --json                JSON stdout (AI)\n  --data-dir PATH\n  --config PATH\n  --help | --version\n\nExit: 0 ok · 1 error · 2 validation · 3 blocked · 4 not found · 5 host error\n\nSafety:\n  Dangerous ops default to dry-run (plan only).\n  Pass --execute (alias --apply) + env YSK_EXECUTE=1 to mutate host.\n\nExamples:\n  {{cli}} readiness --json\n  {{cli}} host --json\n  {{cli}} nginx status --json\n  {{cli}} ssl list --json\n  {{cli}} projects get --id UUID --json\n  {{cli}} defense ban --ip 1.2.3.4 --json          # dry-run plan\n  {{cli}} projects list --json\n  {{cli}} logs query --source journal: --lines 100 --json\n  {{cli}} tools --json"
+    "main": "{{product}} ({{cli}}) v{{version}}\n\nControl plane CLI — prefer --json for AI agents.\nDocs: docs/agent/README.md · docs/cli/reference.md · docs/agent/commands.json\n\nUsage:\n  {{cli}} <command> [options]\n\nCommands:\n  setup                 Init dataDir + admin\n  update                Self-update check/apply\n  serve                 HTTP API + Web UI\n  system unit-install   Install ysk-server.service [--enable]\n  stack                 plans|bundles|status|install|uninstall\n  tools                 List tools; tools run --tool <name> [--dry-run]\n  ask                   NL → AI plan [--execute]\n  projects              list|get|create|deploy|stop|health|backup|template\n  users                 list|create|totp\n  packages              list\n  rbac                  list|show\n  audit                 list\n  backup                all|list|status|restore|delete|schedule|control-plane|settings|restic\n  templates             App templates\n  hosting               nginx|dns|db|firewall helpers\n  dns                   zone|zones|lookup\n  logs                  sources|query|journal|overview\n  host                  overview|metrics (read-only)\n  nginx                 status|list|test|sync\n  ssl                   list|get (certificates)\n  db-cluster            list|get|create|plan (HA plan-first)\n  ssh-key               list|create|import|public|export|install|delete (SSH identity vault)\n  ssh-2fa               list|enroll|confirm|install|pam|retire (SSH login TOTP ≠ panel 2FA)\n  services              Host service matrix (systemctl probe)\n  defense | protection  status|ban|unban|whitelist\n  security              status|sessions|api-keys (2FA flags · session revoke · API keys)\n  cdn                   nodes|sites|render|apply|purge|probe|dashboard|health-loop|from-project\n  agents                runtimes|fleet list|commands|register (panel + edge)\n  agent run             Outbound fleet poller (experimental)\n  store                 status|export|import|migrate (json|sqlite|postgres document backends)\n  files                 list|read|write|mkdir|rm|stat|rename|copy|move|chmod|trash|shares (sandbox)\n  cron                  list|create|delete|enable|disable|run|install|status\n  email                 domains|mailboxes|deliverability|bootstrap|dns (panel parity)\n  health                Local mode snapshot or --url http://host:port/health\n  notifications         list\n  readiness | doctor    Production readiness (honest)\n  migrate               inventory|host|post|status|resume|orphan-homes (full host migrate)\n  vpn                   WireGuard / OpenVPN\n  vnc                   accounts|clients|share\n  apache                sites|settings\n  network               ifaces|exposure|real-ip\n  real-ip               CDN Real IP\n  updates               inventory|apply\n  software              list|install|uninstall\n  db                    MySQL / MariaDB / PostgreSQL\n  redis                 status|keys|get|set\n  ftp                   accounts|status\n  runtimes              list|install\n  bt-tracker            status|settings\n  validators            list|chains|disk|get (Beta)\n  docker                status|ps|images|compose|prune (engine)\n  version | help\n\nGlobal:\n  --json                JSON stdout (AI)\n  --data-dir PATH       also --data-dir=PATH or YSK_DATA_DIR\n  --config PATH\n  --locale CODE         CLI language (default en). Also YSK_LOCALE.\n                        Codes: en zh-HK zh-CN ja ko hi es ar fr bn pt id ur\n  --limit N --offset N  Slice large JSON lists (software / updates / host metrics / rbac)\n  --help | --version\n\nExit: 0 ok · 1 error · 2 validation · 3 blocked · 4 not found · 5 host error\n\nSafety:\n  Dangerous ops default to dry-run (plan only).\n  Pass --execute (alias --apply) + env YSK_EXECUTE=1 to mutate host.\n  Command names and flags are always English. --locale only translates messages.\n\nExamples:\n  {{cli}} readiness --json\n  {{cli}} host --json\n  {{cli}} nginx status --json\n  {{cli}} ssl list --json\n  {{cli}} projects get --id UUID --json\n  {{cli}} defense ban --ip 1.2.3.4 --json          # dry-run plan\n  {{cli}} projects list --json\n  {{cli}} --locale=zh-HK help\n  {{cli}} logs query --source journal: --lines 100 --json\n  {{cli}} tools --json"
   },
   "usage": {
     "tools": {
@@ -602,7 +602,7 @@
         "--name": {
           "name": {
             "--domain": {
-              "66e857": "Usage: ysk-server projects create --name <name> [--domain d] [--runtime node|php|static|python|go|rust] [--template id]\n"
+              "66e857": "Usage: ysk-server projects create --name <name> [--domain d] [--runtime node|php|static|python|go|rust] [--template id] [--git-url URL] [--branch B] [--create-dns] [--create-mail] [--server-ip A.B.C.D] [--server-ipv6 ADDR]\n"
             }
           }
         }
@@ -620,7 +620,7 @@
         "--id": {
           "id": {
             "--git-url": {
-              "a513f5": "Usage: ysk-server projects git-deploy --id ID [--git-url URL] [--branch main] [--no-redeploy] [--depth 1] [--entry f]\n"
+              "a513f5": "Usage: ysk-server projects git-deploy --id ID [--git-url URL] [--branch|--ref main] [--no-redeploy] [--depth 1] [--entry f]\n"
             }
           }
         }
@@ -638,7 +638,7 @@
         "get": {
           "create": {
             "deploy": {
-              "253b48": "Usage: ysk-server projects list|get|create|deploy|git-deploy|stop|backup|template|health [options]\n  deploy --id UUID [--entry f] [--port N] [--fpm|--builtin] [--reload]\n  git-deploy --id UUID [--git-url URL] [--branch B] [--no-redeploy]\n"
+              "253b48": "Usage: ysk-server projects list|get|create|deploy|git-deploy|git|stop|backup|template|ftp|health [options]\n  deploy --id UUID [--entry f] [--port N] [--fpm|--builtin] [--reload]\n  git-deploy --id UUID [--git-url URL] [--branch|--ref B] [--no-redeploy]\n  git status|log|fetch|checkout|reset|auth|hook|deploy --id UUID [--ref R] [--unshallow] [--yes]\n  git auth --id UUID --token T|--deploy-key|--pin-host\n  git hook --id UUID --enable|--rotate|--disable\n  ftp --id UUID --password P [--user NAME] [--home app|root]\n"
             }
           }
         }
@@ -882,7 +882,7 @@
           },
           "status": {
             "bans": {
-              "a8d96b": "Usage: {{CLI_NAME}} defense status|bans|suspects|ban|unban|whitelist|stack-apply|fail2ban|firewall|timeline|presets [--json]\n` +\n          `  bans [--q text] [--source fail2ban|panel|ufw|auto]\n` +\n          `  suspects [--q text]\n` +\n          `  stack-apply [--execute]   # UFW + fail2ban + current preset\n` +\n          `  fail2ban | firewall       # deep probes (honest)\n` +\n          `  timeline [--limit N] [--q text]\n` +\n          `  presets                   # list + activePreset\n"
+              "a8d96b": "Usage: {{CLI_NAME}} defense status|bans|suspects|ban|unban|whitelist|stack-apply|fail2ban|firewall|timeline|presets [--json]\n  bans [--q text] [--source fail2ban|panel|ufw|auto]\n  suspects [--q text]\n  stack-apply [--execute]   # UFW + fail2ban + current preset\n  fail2ban | firewall       # deep probes (honest)\n  timeline [--limit N] [--q text]\n  presets                   # list + activePreset\n"
             }
           }
         }
@@ -904,7 +904,7 @@
         "--username": {
           "u": {
             "--password": {
-              "7145c7": "Usage: ysk-server users create --username <u> --password <p> [--role operator|viewer|admin] [--package-id id]\n"
+              "7145c7": "Usage: ysk-server users create --username <u> --password <p> [--role operator|viewer|admin] [--package-id id] [--locale zh-HK]\n"
             }
           }
         }
@@ -1048,7 +1048,7 @@
       }
     },
     "x": {
-      "972912": "Usage:\n  ysk-server migrate inventory [--data-dir PATH] --json\n  ysk-server migrate host --target root@IP [--identity-file PATH|--identity-id ID|--password PW] --execute [--maintenance] [--force-wipe-target]\n  ysk-server migrate post --job ID --data-dir PATH --execute   # on target\n  ysk-server migrate status [--job ID]\n  ysk-server migrate resume --job ID --execute\n"
+      "972912": "Usage:\n  ysk-server migrate inventory [--data-dir PATH] --json\n  ysk-server migrate host --target root@IP [--identity-file PATH|--identity-id ID|--password PW] --execute [--maintenance] [--force-wipe-target]\n  ysk-server migrate post --job ID --data-dir PATH --execute   # on target\n  ysk-server migrate status [--job ID]\n  ysk-server migrate resume --job ID --execute\n  ysk-server migrate orphan-homes [--data-dir PATH] --json\n  ysk-server migrate orphan-homes --path /home/ysk-server-UUID --confirm PATH --execute\n"
     },
     "hostingHelp": "Usage: ysk-server hosting <sub>\n  Dangerous ops default dry-run; add --execute (+ YSK_EXECUTE=1) to apply\n  nginx | nginx-sync [--execute]\n  redis-provision | postgres-provision | mysql-provision [--execute]\n  dns-zone --zone X --ip A.B.C.D [--ipv6 X:X::X] [--validate] [--reload]\n  dns-zones | powerdns-status | powerdns-install [--install|--execute]\n  powerdns-load --zone X --ip A.B.C.D [--load|--execute]\n  email-apply --domain X [--install|--execute]\n  email-mailbox --domain X --local user [--password P] [--ip A.B.C.D] [--system]\n  ftps-apply --domain X [--install|--execute]\n  runtimes | runtime-install --kind node|php|python|go|rust --version V [--install|--execute]\n  dovecot-passdb --domain X | --all\n  webmail-apply --domain webmail.example.com [--download]\n  public-files --domain files.example.com [--reload]\n  email-bootstrap --domain example.com --ip A.B.C.D [--install|--execute]\n  email-deliverability --domain example.com   # PTR/DNSBL/warmup pack (honest)\n  firewall-apply [--smtp] [--execute]\n",
     "logsQuery": "Usage: {{CLI_NAME}} logs query --source <id> [--lines N] [--grep G] [--since 1h] [--priority err]\n  source examples: journal:  journal:nginx.service  file:syslog  project:<uuid>\n  {{CLI_NAME}} logs sources --json\n  {{CLI_NAME}} logs journal [--unit nginx.service] --json\n"

package/locales/en/common.json

@@ -1,4 +1,5 @@
 {
+  "all": "All",
   "cancel": "Cancel",
   "confirm": "Confirm",
   "refresh": "Refresh",
@@ -21,9 +22,12 @@
   "languageNative": "English",
   "language": "Language",
   "switchLanguage": "Switch language",
+  "showPassword": "Show",
+  "hidePassword": "Hide",
   "searchGlobal": "Search pages & resources…",
   "menu": "Menu",
   "processing": "Working…",
+  "unavailable": "Not available right now",
   "retry": "Retry",
   "success": "Success",
   "failed": "Failed",
@@ -35,7 +39,9 @@
   "noData": "No data",
   "input": "Input",
   "pleaseEnter": "Enter {{value}}",
+  "required": "Required",
   "about": "About",
+  "more": "More",
   "operation": "Actions",
   "delete": "Delete",
   "edit": "Edit",
@@ -121,5 +127,6 @@
   "show": "Show",
   "done": "Done",
   "next": "Next",
-  "previous": "Previous"
+  "previous": "Previous",
+  "redirectedTo": "Opened {{to}} (was {{from}})"
 }

package/locales/en/cron.json

@@ -135,5 +135,34 @@
   "sourceHost": "Host",
   "noHostJobs": "No crontab jobs in this scope",
   "hostPartial": "Could not read every user crontab (root required)",
-  "pendingInstall": "Pending install ({{count}})"
+  "pendingInstall": "Pending install ({{count}})",
+  "hourRange": "Hour must be 0–23.",
+  "minuteRange": "Minute must be 0–59.",
+  "hoursCommon": "Common hours",
+  "hoursAll": "All hours",
+  "invalidExpr": "Not a valid 5-field cron expression.",
+  "needCommand": "Command is required.",
+  "needUser": "Choose a project or a system user.",
+  "hostCounts": "Host lines",
+  "hostCountsVal": "{{ysk}} · other {{other}} · total {{total}}",
+  "hostYskYes": "panel lines present",
+  "hostYskNo": "no panel lines",
+  "emptyHostCrontab": "No crontab for {{user}}.",
+  "writtenOnHost": "Written",
+  "registeredJobsChip": "Registered",
+  "registeredVsWritten": "Registered in the panel vs written to host crontab",
+  "installPreviewTitle": "Preview before installing to system crontab",
+  "installPreviewDesc": "This merges the YSK block into the host crontab. Existing non-YSK lines stay.",
+  "installPreviewMerge": "Install writes a YSK Server crontab merge block. It does not replace the whole crontab.",
+  "installPreviewEmpty": "No pending managed jobs — install still refreshes the YSK block.",
+  "editJobTitle": "Edit job",
+  "editJobDesc": "Changes stay in the panel until you install to the system crontab.",
+  "saveJob": "Save (management only)",
+  "panelLines": "Panel lines",
+  "otherLines": "Other lines",
+  "totalLines": "Total",
+  "writtenOnHostHint": "Lines already written to the host crontab",
+  "registeredJobsHint": "Jobs registered in the panel (including pending install)",
+  "pendingInstallCount": "{{n}} pending install",
+  "systemJobBadge": "No project · system user"
 }

package/locales/en/dashboard.json

@@ -1,4 +1,10 @@
 {
+  "serviceAria": "{{name}}: {{state}}",
+  "sev": {
+    "ok": "OK",
+    "warn": "Warning",
+    "bad": "Problem"
+  },
   "title": "Dashboard",
   "health": "Health",
   "protection": "Protection mode",
@@ -55,7 +61,8 @@
   "warnCount": " · warn {{count}}",
   "applyAuditBadge": "Apply audit · ok {{ok}} · warn {{warn}} · bad {{bad}}",
   "executeBadge": "EXECUTE {{state}}",
-  "executeLabel": "EXECUTE",
+  "executeLabel": "System change",
+  "publicNo2fa": "This panel listens on all interfaces and your admin account has no 2FA.",
   "go": "Open",
   "open": "Open",
   "noCriticalWarn": "No critical or warning alerts",
@@ -85,27 +92,39 @@
   "runtime": "Runtime",
   "runtimeHint": "Sets default runtime version and deploy style",
   "runtimeVersion": "Runtime version",
-  "versionHint": "Stored as project runtime_version",
+  "versionHint": "Writes the project runtime version setting",
   "serverIpv4": "Server IPv4",
   "serverIpv4Hint": "DNS A / mail SPF",
   "serverIpv4Ph": "This host public IPv4",
   "serverIpv6": "Server IPv6 (optional)",
   "serverIpv6Hint": "Writes AAAA / ip6: when set",
   "serverIpv6Ph": "Public IPv6 (optional)",
+  "needDomainFirst": "Enter a domain first",
   "withDns": "Also create DNS zone",
   "withDnsDesc": "Needs domain; registration only — apply zone on DNS page",
   "withMail": "Also register mail domain",
   "withMailDesc": "Needs domain; install software & DNS on mail detail page",
-  "withDb": "Also draft MySQL database",
-  "withDbDesc": "Control-plane registration; apply on SQL engine page",
+  "withDb": "Also draft a database",
+  "withDbDesc": "Control-plane registration; apply on the SQL engine page",
   "wizardHint": "Quick create does not go live automatically",
   "wizardSubmit": "Create",
   "wizardOk": "Created",
   "wizardPartial": "Partially failed",
   "notifCenterTitle": "Notifications ({{count}})",
   "notifCenterDesc": "Critical {{critical}} · warn {{warn}} · info {{info}}",
-  "noNotifs": "No notifications",
+  "noNotifs": "No notifications. Recent audit events are on Overview.",
   "noNotifsDesc": "System alerts and todos appear here",
   "applyAuditTitle": "Apply status audit",
-  "applyAuditDesc": "ok {{ok}} · warn {{warn}} · bad {{bad}}"
+  "applyAuditDesc": "ok {{ok}} · warn {{warn}} · bad {{bad}}",
+  "barTitle": "{{count}} host alert(s)",
+  "levelCritical": "Critical",
+  "levelWarn": "Warning",
+  "levelInfo": "Info",
+  "colTitle": "Alert",
+  "colDetail": "Detail",
+  "colSource": "Source",
+  "notifSearch": "Search alerts",
+  "notifAll": "All",
+  "notifDismiss": "Hide",
+  "goFix": "Fix"
 }

package/locales/en/db.json

@@ -52,12 +52,26 @@
   "emptyDbInstallFirst": "Install {{engine}} via the banner, then Create database",
   "emptyDbCannotProvision": "Cannot create databases on the server right now",
   "emptyDbCreateHint": "Use Create database, then Apply",
+  "emptyDbHostHasRows": "The host already has databases that are not in this control-plane list.",
+  "registeredVsHostHint": "Registered in the panel / found on the host",
+  "registeredCount": "Registered",
+  "hostCount": "On host",
+  "registeredUsers": "Registered users",
+  "registeredUsersHint": "Panel registrations only — not every MySQL account",
+  "hostStillExists": "Still on host",
+  "expiresLabel": "Expires",
+  "dumpNeedRegistered": "Register a database in the panel first",
+  "dumpFirstDbTitle": "Export the first registered database",
+  "importNeedRegistered": "Register a database in the panel first",
+  "importLatestNeedConfirm": "Needs confirmation — imports into the registered database",
+  "hostHasUntracked": "{{count}} host databases are not registered in the panel",
+  "hostInventoryHint": "The table is control-plane rows only. Live names come from SHOW DATABASES.",
   "userList": "Users",
   "userListDesc": "Grant users access to databases",
   "createUserBtn": "+ Create user",
   "noUsersYet": "No users yet",
   "tempReadonlyUsers": "Temporary read-only users",
-  "tempReadonlyDesc": "Control plane marks expired after TTL;",
+  "tempReadonlyDesc": "Expired accounts are dropped from the server when this page loads (needs EXECUTE + root). Rows left below still exist on the host.",
   "dbName": "Database name",
   "ttlHours": "TTL (hours)",
   "ttlHoursHint": "Marked invalid after expiry",
@@ -66,7 +80,14 @@
   "expiresAt": "Expires",
   "revokeRegistration": "Revoke registration",
   "remoteDbHosts": "Remote database hosts",
-  "remoteDbHostsDesc": "Register connection targets (password not echoed back)",
+  "remoteDbHostsDesc": "Register connection targets (password not echoed back). Saved ≠ reachable until Test connection.",
+  "remoteTest": "Test connection",
+  "remoteTestDone": "Remote host probe finished",
+  "remoteTestOk": "reachable",
+  "remoteTestFail": "unreachable",
+  "remoteNotChecked": "not tested",
+  "remoteDeleteTitle": "Remove this registration only",
+  "remoteDeleteConfirm": "Remove registration {{name}}? The remote server is not changed.",
   "displayName": "Display name",
   "prodReplicaPlaceholder": "Production replica",
   "remoteHostSaved": "Remote host saved",
@@ -91,7 +112,7 @@
   "import": "Import",
   "importOk": "Import complete",
   "importFailed": "Import failed",
-  "deleteDbTitle": "Delete database registration?",
+  "deleteDbTitle": "Remove control-plane registration (does not DROP the server database)",
   "deleteDbDesc": "Removes control-plane record only; does not DROP the server database.",
   "deleteUserTitle": "Delete user registration?",
   "deleteUserDesc": "Removes control-plane record only.",
@@ -120,8 +141,11 @@
   "update": "Update",
   "alsoCreateRole": "Also create role",
   "cluster": {
+    "standaloneOtherEngines": "This engine is standalone. Other engines have clusters: {{names}}.",
+    "roleUnassigned": "No role assigned",
     "title": "Cluster",
-    "description": "Plan → write management → apply → probe → peer distribute / fleet. Default dry-run.",
+    "description": "Plan → write management files → apply → probe → distribute to peers / fleet. Default is dry-run (no host restart).",
+    "redirectedFromCluster": "You were redirected here from /cluster. This is the database cluster tab.",
     "kindGalera": "Simple Galera",
     "kindMysqlReplica": "MySQL primary/replica",
     "kindPgReplica": "PostgreSQL streaming replica",
@@ -150,10 +174,37 @@
     "registrationDeleted": "Registration deleted",
     "nodes": "Nodes",
     "remoteInstallPlan": "Remote install plan",
+    "fleetSession": "Fleet agent session id",
+    "fleetSessionHint": "Optional. Pick a registered fleet session (uses fleet, not SSH). Leave empty for SSH scp.",
+    "fleetSessionPh": "Agents page session UUID",
+    "fleetSessionNone": "None — use SSH",
+    "fleetSessionOpenAgents": "Open /agents to register a session",
+    "createWizardTitle": "Opens the plan wizard. Needs a local IP and ≥1 peer. Writes panel artifacts only (dry-run). Does not restart the engine until you apply.",
+    "bootstrap": "Bootstrap",
+    "fleetApply": "Fleet apply",
+    "planTitle": "Regenerate the cluster plan (no host change)",
+    "writeFileTitle": "Write management files under the panel data dir (dry-run)",
+    "probeLocalTitle": "Probe this host only",
+    "probeAllTitle": "Probe every registered member",
+    "bootstrapTitle": "Install local drop-in and bootstrap the first node",
+    "remoteInstallPlanTitle": "Preview remote install (no execute)",
+    "downloadBundleTitle": "Download peer conf bundle (.tar.gz)",
+    "pushPlanTitle": "Preview push to peer (no scp)",
+    "fleetSyncPlanTitle": "Preview fleet sync (no execute)",
+    "fleetApplyTitle": "Enqueue apply on fleet members?",
+    "status": {
+      "healthy": "Healthy",
+      "planned": "Planned",
+      "partial": "Partial",
+      "failed": "Failed",
+      "draft": "Draft",
+      "degraded": "Degraded",
+      "applied": "Applied"
+    },
     "fleetSyncPlan": "Fleet sync plan",
     "standaloneTitle": "Currently: standalone",
     "standaloneRepl": "No replica registered. Set primary/master + replica to generate conf and scripts.",
-    "standaloneHa": "No HA registered. Add peer nodes to generate conf plan, then bootstrap / join.",
+    "standaloneHa": "No HA registered. Add at least one peer, generate a conf plan, then bootstrap the first node and join the others.",
     "recentProbe": "Recent probe (local wsrep)",
     "probeRequired": "healthy requires a passing probe",
     "planPreview": "Plan preview",
@@ -200,6 +251,7 @@
     "remoteInstalled": "Remote installed",
     "fleetSynced": "Fleet sync queued",
     "fleetApplyQueued": "Fleet apply queued",
+    "engineNotInstalled": "{{engine}} is not installed on this host — install it first, or open the engine that is actually running.",
     "plan": "Plan",
     "writeFile": "Write files",
     "applyLocal": "Apply local",
@@ -216,8 +268,7 @@
     "delete": "Delete",
     "probe": "Probe",
     "name": "Name",
-    "type": "Type",
-    "status": "Status"
+    "type": "Type"
   },
   "console": {
     "dataBrowse": "Browse data",
@@ -225,6 +276,7 @@
     "realtime": "Live",
     "reload": "Reload",
     "needRestart": "Restart required",
+    "affectsProjects": "Sites and services that use this engine will be interrupted.",
     "lifecycle": "Lifecycle",
     "overview": "Overview",
     "actionDone": "{{action}} done",
@@ -256,6 +308,7 @@
     "installEngine": "Use the banner above to install {{title}}.",
     "reloadConfig": "Reload config",
     "disableBoot": "Disable on boot",
+    "disableBootConfirm": "The engine will not start after reboot until you enable it again.",
     "needRights": "Needs system-change rights and admin. Failures show reasons — never fake success.",
     "noneFetched": "— none —"
   },
@@ -283,5 +336,8 @@
   "unfreezeOk": "{{engine}} repair complete",
   "startAfterUnfreeze": "Start service (auto-runs repair plan on failure)",
   "serviceDownTitle": "Database service is down",
-  "serviceDownBody": "Service is unhealthy"
+  "serviceDownBody": "Service is unhealthy",
+  "adoptHostDb": "Register in panel (no create): {{name}}",
+  "adoptHostDbTitle": "Registers the name in the control plane only — does not change host data",
+  "cleanupExpiredTempUsersTitle": "Drops panel-issued temporary users that have expired"
 }