ysk-server-shared 1.0.0 → 1.1.0

package/locales/zh-CN/cdn.json

@@ -115,5 +115,91 @@
   "deleteNodeDesc": "将删除 CDN 节点「{{name}}」。",
   "deleteSiteDesc": "将删除 CDN 站点「{{name}}」。",
   "deleteSiteC1": "站点策略与边缘关联",
-  "deleteSiteC2": "已下发的 nginx 配置需另行清理或重新应用"
+  "deleteSiteC2": "已下发的 nginx 配置需另行清理或重新应用",
+  "statOnline": "线上",
+  "statOffline": "离线 {{n}}",
+  "statHitRate": "命中率 {{v}}",
+  "hitNoStats": "尚无边缘统计",
+  "loopbackOriginBlocked": "不会把回环 origin {{url}} 写到远端边缘。请先改成可达的 origin。",
+  "applyFailedHint": "套用失败 — 见下方说明",
+  "applyStatus": {
+    "draft": "草稿",
+    "planned": "已计划",
+    "applying": "套用中",
+    "applied": "已套用",
+    "failed": "失败",
+    "partial": "部分"
+  },
+  "drain": "流走",
+  "drainTitle": "停止向此边缘发送新的 CDN 流量",
+  "drainDesc": "排空“{{name}}”？现有连接将保留直至完成。",
+  "drainLastTitle": "这是最后一个边缘——排水将使每个站点都没有边缘",
+  "drainLastDesc": "“{{name}}”是唯一的边缘。将其排干后，所有站点都没有边缘。",
+  "clearDrainTitle": "再次在此边缘接受新流量",
+  "clearDrainDesc": "清理“{{name}}”上的排水管吗？",
+  "deleteNodeTitle": "删除此 CDN 边缘",
+  "deleteLastNodeTitle": "删除最后一条边——所有站点都将没有边",
+  "purge": "清除",
+  "previewTitle": "预览 nginx 配置（不写）",
+  "writeConfTitle": "编写边缘 nginx 配置文件",
+  "applyEdgesTitle": "将此站点应用到边缘（写入 nginx）",
+  "purgeTitle": "清除边缘缓存",
+  "dnsSyncTitle": "写入CDN DNS记录",
+  "probeDnsTitle": "探测边缘和 DNS（只读）",
+  "distSslTitle": "将 TLS 材质复制到边缘",
+  "leIssueTitle": "颁发 Let’s Encrypt 证书并分发",
+  "deleteSiteTitle": "删除此 CDN 站点",
+  "siteOpConfirmGeneric": "对“{{name}}”运行此操作吗？",
+  "siteOpConfirmDesc": "站点“{{name}}”·{{action}}。这可以更改 nginx、DNS 或证书。",
+  "siteOpConfirm": {
+    "apply": "将这个网站应用到边缘？",
+    "render": "为这个站点编写 nginx 配置吗？",
+    "purge": "清除该网站的缓存吗？",
+    "dns-sync": "同步此站点的 DNS 吗？",
+    "dist": "将 TLS 分发到边缘？",
+    "issue": "问题让我们加密并分发？"
+  },
+  "pillNodesSites": "{{n}} 个节点 · {{s}} 个站点",
+  "statHit": "命中率",
+  "hitUnknown": "未知",
+  "lastHealthHint": "最后一次探测 {{at}} · {{ok}}",
+  "lastHealthNever": "尚未探测 — 运行 Probe",
+  "lastHealthFail": "探测失败",
+  "healthLoopNeedSites": "先添加站点",
+  "nodeStatus": {
+    "online": "在线的",
+    "offline": "离线",
+    "draining": "排水",
+    "unknown": "未知"
+  },
+  "statOnlineOf": "线上 {{n}}/{{total}}",
+  "statDraining": "Draining {{n}}",
+  "localTest": "local / test",
+  "colRegion": "Region",
+  "previewOnlyNote": "Preview only — nothing was written to the edges.",
+  "statByRegion": "Region: ",
+  "statByApply": "Apply status: ",
+  "col": {
+    "origin": "Origin",
+    "edges": "Edges",
+    "apply": "Apply",
+    "dns": "DNS",
+    "edgesOnline": "Edges online / applied",
+    "dnsRr": "CDN DNS records"
+  },
+  "mode": {
+    "origin_pull": "Origin pull",
+    "reverse_proxy": "Reverse proxy",
+    "static_edge": "Static edge"
+  },
+  "dnsStrategy": {
+    "multi_a": "Multiple A records",
+    "cname": "CNAME",
+    "geo": "Geo"
+  },
+  "edgesOnlineApplied": "{{online}}/{{total}} online · {{applied}} applied",
+  "hitMiss": "Hits {{hits}} / misses {{misses}}",
+  "cacheBytes": "Cache ≈ {{n}} B",
+  "hitRateUnknown": "No access log with cache status and no cache directory, so hit rate cannot be estimated.",
+  "offlineHint": "Offline — probe failed. Remove the node if it is leftover."
 }

package/locales/zh-CN/cli.json

@@ -12,7 +12,7 @@
   },
   "help": {
     "blurb": "控制平面 CLI — AI agent 请优先用 --json。\n文档：docs/agent/README.md · docs/cli/reference.md · docs/agent/commands.json",
-    "main": "{{product}} ({{cli}}) v{{version}}\n\n控制平面 CLI — AI agent 请优先用 --json。\n文件：docs/agent/README.md · docs/cli/reference.md · docs/agent/commands.json\n\n用法：\n  {{cli}} <command> [options]\n\n命令：\n  setup                 初始化 dataDir + 管理员\n  update                自我更新检查／套用\n  serve                 HTTP API + Web UI\n  system unit-install   安装 ysk-server.service [--enable]\n  tools                 工具列表；tools run --tool <name> [--dry-run]\n  ask                   自然语言 → AI 计划 [--execute]\n  projects              list|get|create|deploy|stop|health|backup|template\n  backup                all|list|status|restore|delete|schedule|control-plane|settings|restic\n  templates             应用范本\n  hosting               nginx|dns|db|firewall 辅助\n  dns                   zone|zones（AI 别名 → hosting dns-*）\n  logs                  sources|query|journal|overview\n  host                  overview|metrics（唯读）\n  nginx                 status|list|test|sync\n  ssl                   list|get（憑证）\n  db-cluster            list|get|create|plan（HA 先计划）\n  ssh-key               list|create|import|public|export|install|delete（SSH 身分库）\n  ssh-2fa               list|enroll|confirm|install|pam|retire（SSH 登入 TOTP ≠ 面板 2FA）\n  services              主机服務矩阵（systemctl 探测）\n  defense | protection  status|ban|unban|whitelist\n  security              status|sessions|api-keys（2FA · 撤销工作阶段 · API 金钥）\n  cdn                   nodes|sites|render|apply|purge|probe|dashboard|health-loop|from-project\n  agents                runtimes|fleet list|commands|register（面板 + 边缘）\n  agent run             外送 fleet 轮询（实验）\n  store                 status|export|import|migrate（json|sqlite|postgres document 后端）\n  files                 list|read|write|mkdir|rm|stat|rename|copy|move|chmod|trash|shares（沙箱）\n  cron                  list|create|delete|enable|disable|run|install|status\n  email                 domains|mailboxes|deliverability|bootstrap|dns（面板对等）\n  health                本机模式快照或 --url http://host:port/health\n  readiness | doctor    生产就绪（诚实）\n  migrate               inventory|host|post|status|resume（整机迁移）\n  version | help\n\n全域：\n  --json                JSON 标准输出（AI）\n  --data-dir PATH\n  --config PATH\n  --help | --version\n\n结束码：0 成功 · 1 错误 · 2 验证 · 3 阻挡 · 4 找不到 · 5 主机错误\n\n安全：\n  危险操作预设 dry-run（只出计划）。\n  传 --execute（别名 --apply）+ 环境变数 YSK_EXECUTE=1 才改主机。\n\n例子：\n  {{cli}} readiness --json\n  {{cli}} host --json\n  {{cli}} nginx status --json\n  {{cli}} ssl list --json\n  {{cli}} projects get --id UUID --json\n  {{cli}} defense ban --ip 1.2.3.4 --json          # dry-run 计划\n  {{cli}} projects list --json\n  {{cli}} logs query --source journal: --lines 100 --json\n  {{cli}} tools --json"
+    "main": "{{product}} ({{cli}}) v{{version}}\n\n控制平面 CLI — AI agent 请优先用 --json。\n文件：docs/agent/README.md · docs/cli/reference.md · docs/agent/commands.json\n\n用法：\n  {{cli}} <command> [options]\n\n命令：\n  setup                 初始化 dataDir + 管理员\n  update                自我更新检查／套用\n  serve                 HTTP API + Web UI\n  system unit-install   安装 ysk-server.service [--enable]\n  tools                 工具列表；tools run --tool <name> [--dry-run]\n  ask                   自然语言 → AI 计划 [--execute]\n  projects              list|get|create|deploy|stop|health|backup|template\n  backup                all|list|status|restore|delete|schedule|control-plane|settings|restic\n  templates             应用范本\n  hosting               nginx|dns|db|firewall 辅助\n  dns                   zone|zones（AI 别名 → hosting dns-*）\n  logs                  sources|query|journal|overview\n  host                  overview|metrics（唯读）\n  nginx                 status|list|test|sync\n  ssl                   list|get（憑证）\n  db-cluster            list|get|create|plan（HA 先计划）\n  ssh-key               list|create|import|public|export|install|delete（SSH 身分库）\n  ssh-2fa               list|enroll|confirm|install|pam|retire（SSH 登入 TOTP ≠ 面板 2FA）\n  services              主机服務矩阵（systemctl 探测）\n  defense | protection  status|ban|unban|whitelist\n  security              status|sessions|api-keys（2FA · 撤销工作阶段 · API 金钥）\n  cdn                   nodes|sites|render|apply|purge|probe|dashboard|health-loop|from-project\n  agents                runtimes|fleet list|commands|register（面板 + 边缘）\n  agent run             外送 fleet 轮询（实验）\n  store                 status|export|import|migrate（json|sqlite|postgres document 后端）\n  files                 list|read|write|mkdir|rm|stat|rename|copy|move|chmod|trash|shares（沙箱）\n  cron                  list|create|delete|enable|disable|run|install|status\n  email                 domains|mailboxes|deliverability|bootstrap|dns（面板对等）\n  health                本机模式快照或 --url http://host:port/health\n  readiness | doctor    生产就绪（诚实）\n  migrate               inventory|host|post|status|resume（整机迁移）\n  validators            list|chains|disk|get (Beta)\n  docker                status|ps|images|compose|prune (engine)\n  version | help\n\n全域：\n  --json                JSON 标准输出（AI）\n  --data-dir PATH\n  --config PATH\n  --help | --version\n\n结束码：0 成功 · 1 错误 · 2 验证 · 3 阻挡 · 4 找不到 · 5 主机错误\n\n安全：\n  危险操作预设 dry-run（只出计划）。\n  传 --execute（别名 --apply）+ 环境变数 YSK_EXECUTE=1 才改主机。\n\n例子：\n  {{cli}} readiness --json\n  {{cli}} host --json\n  {{cli}} nginx status --json\n  {{cli}} ssl list --json\n  {{cli}} projects get --id UUID --json\n  {{cli}} defense ban --ip 1.2.3.4 --json          # dry-run 计划\n  {{cli}} projects list --json\n  {{cli}} logs query --source journal: --lines 100 --json\n  {{cli}} tools --json"
   },
   "usage": {
     "tools": {
@@ -602,7 +602,7 @@
         "--name": {
           "name": {
             "--domain": {
-              "66e857": "用法： ysk-server projects create --name <name> [--domain d] [--runtime node|php|static|python|go|rust] [--template id]\n"
+              "66e857": "用法： ysk-server projects create --name <name> [--domain d] [--runtime node|php|static|python|go|rust] [--template id] [--create-dns] [--create-mail] [--server-ip A.B.C.D] [--server-ipv6 ADDR]\n"
             }
           }
         }
@@ -638,7 +638,7 @@
         "get": {
           "create": {
             "deploy": {
-              "253b48": "用法： ysk-server projects list|get|create|deploy|git-deploy|stop|backup|template|health [options]\n  deploy --id UUID [--entry f] [--port N] [--fpm|--builtin] [--reload]\n  git-deploy --id UUID [--git-url URL] [--branch B] [--no-redeploy]\n"
+              "253b48": "用法： ysk-server projects list|get|create|deploy|git-deploy|stop|backup|template|ftp|health [options]\n  deploy --id UUID [--entry f] [--port N] [--fpm|--builtin] [--reload]\n  git-deploy --id UUID [--git-url URL] [--branch B] [--no-redeploy]\n  ftp --id UUID --password P [--user NAME] [--home app|root]\n"
             }
           }
         }
@@ -882,7 +882,7 @@
           },
           "status": {
             "bans": {
-              "a8d96b": "用法： {{CLI_NAME}} defense status|bans|suspects|ban|unban|whitelist|stack-apply|fail2ban|firewall|timeline|presets [--json]\n` +\n          `  bans [--q text] [--source fail2ban|panel|ufw|auto]\n` +\n          `  suspects [--q text]\n` +\n          `  stack-apply [--execute]   # UFW + fail2ban + current preset\n` +\n          `  fail2ban | firewall       # deep probes (honest)\n` +\n          `  timeline [--limit N] [--q text]\n` +\n          `  presets                   # list + activePreset\n"
+              "a8d96b": "用法： {{CLI_NAME}} defense status|bans|suspects|ban|unban|whitelist|stack-apply|fail2ban|firewall|timeline|presets [--json]\n  bans [--q text] [--source fail2ban|panel|ufw|auto]\n  suspects [--q text]\n  stack-apply [--execute]   # UFW + fail2ban + current preset\n  fail2ban | firewall       # deep probes (honest)\n  timeline [--limit N] [--q text]\n  presets                   # list + activePreset\n"
             }
           }
         }
@@ -1048,7 +1048,7 @@
       }
     },
     "x": {
-      "972912": "用法：\n  ysk-server migrate inventory [--data-dir PATH] --json\n  ysk-server migrate host --target root@IP [--identity-file PATH|--identity-id ID|--password PW] --execute [--maintenance] [--force-wipe-target]\n  ysk-server migrate post --job ID --data-dir PATH --execute   # on target\n  ysk-server migrate status [--job ID]\n  ysk-server migrate resume --job ID --execute\n"
+      "972912": "用法：\n  ysk-server migrate inventory [--data-dir PATH] --json\n  ysk-server migrate host --target root@IP [--identity-file PATH|--identity-id ID|--password PW] --execute [--maintenance] [--force-wipe-target]\n  ysk-server migrate post --job ID --data-dir PATH --execute   # 在目标机\n  ysk-server migrate status [--job ID]\n  ysk-server migrate resume --job ID --execute\n  ysk-server migrate orphan-homes [--data-dir PATH] --json\n  ysk-server migrate orphan-homes --path /home/ysk-server-UUID --confirm PATH --execute\n"
     },
     "hostingHelp": "用法：ysk-server hosting <sub>\n  危险操作默认 dry-run；加 --execute（+ YSK_EXECUTE=1）才真正应用\n  nginx | nginx-sync [--execute]\n  redis-provision | postgres-provision | mysql-provision [--execute]\n  dns-zone --zone X --ip A.B.C.D [--ipv6 X:X::X] [--validate] [--reload]\n  dns-zones | powerdns-status | powerdns-install [--install|--execute]\n  powerdns-load --zone X --ip A.B.C.D [--load|--execute]\n  email-apply --domain X [--install|--execute]\n  email-mailbox --domain X --local user [--password P] [--ip A.B.C.D] [--system]\n  ftps-apply --domain X [--install|--execute]\n  runtimes | runtime-install --kind node|php|python|go|rust --version V [--install|--execute]\n  dovecot-passdb --domain X | --all\n  webmail-apply --domain webmail.example.com [--download]\n  public-files --domain files.example.com [--reload]\n  email-bootstrap --domain example.com --ip A.B.C.D [--install|--execute]\n  email-deliverability --domain example.com   # PTR/DNSBL/warmup 诚实报告\n  firewall-apply [--smtp] [--execute]\n",
     "logsQuery": "用法：{{CLI_NAME}} logs query --source <id> [--lines N] [--grep G] [--since 1h] [--priority err]\n  source 例：journal:  journal:nginx.service  file:syslog  project:<uuid>\n  {{CLI_NAME}} logs sources --json\n  {{CLI_NAME}} logs journal [--unit nginx.service] --json\n"

package/locales/zh-CN/common.json

@@ -35,6 +35,7 @@
   "noData": "没有数据",
   "input": "输入",
   "pleaseEnter": "请输入 {{value}}",
+  "required": "必填",
   "about": "说明",
   "operation": "操作",
   "delete": "删除",
@@ -121,5 +122,11 @@
   "show": "顯示",
   "done": "完成",
   "next": "下一步",
-  "previous": "上一步"
+  "previous": "上一步",
+  "all": "全部",
+  "showPassword": "展示",
+  "hidePassword": "隐藏",
+  "more": "更多的",
+  "redirectedTo": "已转到 {{to}}（原为 {{from}}）",
+  "unavailable": "Not available right now"
 }

package/locales/zh-CN/cron.json

@@ -135,5 +135,34 @@
   "sourceHost": "主机",
   "noHostJobs": "此范围没有 crontab 任务",
   "hostPartial": "无法完整读取所有用户 crontab（需要 root）",
-  "pendingInstall": "待安装到系统（{{count}}）"
+  "pendingInstall": "待安装到系统（{{count}}）",
+  "hourRange": "小时必须介于 0–23。",
+  "minuteRange": "分钟必须介于 0–59。",
+  "hoursCommon": "常用小时",
+  "hoursAll": "全部小时",
+  "invalidExpr": "不是有效的 5 栏 cron 表达式。",
+  "needCommand": "请填写指令。",
+  "needUser": "请选择专案或系统用户。",
+  "hostCounts": "主机行数",
+  "hostCountsVal": "{{ysk}} · 其他 {{other}} · 合计 {{total}}",
+  "hostYskYes": "已有面板行",
+  "hostYskNo": "尚无面板行",
+  "emptyHostCrontab": "用户 {{user}} 尚未有 crontab。",
+  "writtenOnHost": "Written",
+  "registeredJobsChip": "Registered",
+  "registeredVsWritten": "Registered in the panel vs written to host crontab",
+  "installPreviewTitle": "Preview before installing to system crontab",
+  "installPreviewDesc": "This merges the YSK block into the host crontab. Existing non-YSK lines stay.",
+  "installPreviewMerge": "Install writes a YSK Server crontab merge block. It does not replace the whole crontab.",
+  "installPreviewEmpty": "No pending managed jobs — install still refreshes the YSK block.",
+  "editJobTitle": "Edit job",
+  "editJobDesc": "Changes stay in the panel until you install to the system crontab.",
+  "saveJob": "Save (management only)",
+  "panelLines": "Panel lines",
+  "otherLines": "Other lines",
+  "totalLines": "Total",
+  "writtenOnHostHint": "Lines already written to the host crontab",
+  "registeredJobsHint": "Jobs registered in the panel (including pending install)",
+  "pendingInstallCount": "{{n}} pending install",
+  "systemJobBadge": "No project · system user"
 }

package/locales/zh-CN/dashboard.json

@@ -54,7 +54,7 @@
   "criticalCount": " · 严重 {{count}}",
   "warnCount": " · 警告 {{count}}",
   "applyAuditBadge": "套用 audit · ok {{ok}} · warn {{warn}} · bad {{bad}}",
-  "executeBadge": "执行{{状态}}",
+  "executeBadge": "系统变更 {{state}}",
   "executeLabel": "系统变更",
   "go": "前往",
   "open": "打开",
@@ -85,7 +85,7 @@
   "runtime": "运行环境",
   "runtimeHint": "决定默认 runtime 版本与部署方式",
   "runtimeVersion": "运行环境版本",
-  "versionHint": "写入项目 runtime_version",
+  "versionHint": "会写入项目的运行环境版本设定",
   "serverIpv4": "服务器 IPv4",
   "serverIpv4Hint": "DNS A／邮件 SPF",
   "serverIpv4Ph": "此主机公网 IPv4",
@@ -107,5 +107,24 @@
   "noNotifs": "暂无通知",
   "noNotifsDesc": "系统告警与待办会显示于此",
   "applyAuditTitle": "套用状态审计",
-  "applyAuditDesc": "好的 {{ok}} · 警告 {{warn}} · 不好 {{bad}}"
+  "applyAuditDesc": "好的 {{ok}} · 警告 {{warn}} · 不好 {{bad}}",
+  "barTitle": "{{count}} 条主机提示",
+  "levelCritical": "严重",
+  "levelWarn": "警告",
+  "levelInfo": "信息",
+  "colTitle": "提示",
+  "colDetail": "详情",
+  "colSource": "来源",
+  "notifSearch": "搜索通知",
+  "notifAll": "全部",
+  "notifDismiss": "隐藏",
+  "goFix": "前往处理",
+  "needDomainFirst": "请先填域名",
+  "serviceAria": "{{name}}: {{state}}",
+  "sev": {
+    "ok": "OK",
+    "warn": "Warning",
+    "bad": "Problem"
+  },
+  "publicNo2fa": "This panel listens on all interfaces and your admin account has no 2FA."
 }

package/locales/zh-CN/db.json

@@ -52,6 +52,9 @@
   "emptyDbInstallFirst": "请先使用上方横幅一键安装 {{engine}}，再用右上角「创建数据库」",
   "emptyDbCannotProvision": "目前无法在服务器创建数据库",
   "emptyDbCreateHint": "用右上角「创建数据库」新增；创建后请再按「应用」",
+  "emptyDbHostHasRows": "主機已有資料庫，但尚未在控制面登記。",
+  "hostHasUntracked": "主機另有 {{count}} 個未在面板登記的資料庫",
+  "hostInventoryHint": "列表只顯示控制面已登記的資料庫；即時名稱來自 SHOW DATABASES。",
   "userList": "用户列表",
   "userListDesc": "可为数据库授权用户",
   "createUserBtn": "+ 创建用户",
@@ -66,7 +69,12 @@
   "expiresAt": "到期",
   "revokeRegistration": "撤销登记",
   "remoteDbHosts": "远程数据库主机",
-  "remoteDbHostsDesc": "登记连接目标（密码不回显）",
+  "remoteDbHostsDesc": "登记连接目标（密码不回显）。未按「测试连接」前，已保存 ≠ 可达。",
+  "remoteTest": "测试连接",
+  "remoteTestDone": "远程主机探测完成",
+  "remoteTestOk": "可达",
+  "remoteTestFail": "不可达",
+  "remoteNotChecked": "未测试",
   "displayName": "显示名称",
   "prodReplicaPlaceholder": "生产从库",
   "remoteHostSaved": "已保存远程主机",
@@ -150,6 +158,9 @@
     "registrationDeleted": "已删除登记",
     "nodes": "节点",
     "remoteInstallPlan": "远程安装计划",
+    "fleetSession": "机群 agent session id",
+    "fleetSessionHint": "可选。到 /agents 复制 session UUID。填写后该对等节点走机群（不用 SSH）。留空则 scp。",
+    "fleetSessionPh": "Agents 页的 session UUID",
     "fleetSyncPlan": "Fleet sync 计划",
     "standaloneTitle": "目前：单机",
     "standaloneRepl": "未登记主从／流式。指定 primary/master + replica 后生成 conf 与脚本。",
@@ -217,7 +228,34 @@
     "probe": "探测",
     "name": "名称",
     "type": "类型",
-    "status": "状态"
+    "status": {
+      "healthy": "健康",
+      "planned": "计划",
+      "partial": "部分的",
+      "failed": "失败的",
+      "draft": "草稿",
+      "degraded": "降级",
+      "applied": "应用"
+    },
+    "engineNotInstalled": "此主机上未安装 {{engine}} - 请先安装它，或打开实际运行的引擎。",
+    "fleetSessionNone": "无 — 使用 SSH",
+    "fleetSessionOpenAgents": "打开 /agents 注册会话",
+    "createWizardTitle": "打开计划向导。需要本地 IP 和 ≥1 个对等点。仅写入面板工件（试运行）。在您申请之前不要重新启动发动机。",
+    "bootstrap": "引导程序",
+    "fleetApply": "车队申请",
+    "planTitle": "重新生成集群计划（不更改主机）",
+    "writeFileTitle": "在面板数据目录下写入管理文件（试运行）",
+    "probeLocalTitle": "仅探测该主机",
+    "probeAllTitle": "探查每一位注册会员",
+    "bootstrapTitle": "安装本地插件并引导第一个节点",
+    "remoteInstallPlanTitle": "预览远程安装（不执行）",
+    "downloadBundleTitle": "下载对等配置包 (.tar.gz)",
+    "pushPlanTitle": "预览推送到对等点（无 scp）",
+    "fleetSyncPlanTitle": "预览队列同步（不执行）",
+    "fleetApplyTitle": "队列适用于车队成员吗？",
+    "redirectedFromCluster": "You were redirected here from /cluster. This is the database cluster tab.",
+    "roleUnassigned": "No role assigned",
+    "standaloneOtherEngines": "This engine is standalone. Other engines have clusters: {{names}}."
   },
   "console": {
     "dataBrowse": "资料浏览",
@@ -257,7 +295,9 @@
     "reloadConfig": "重载设置",
     "disableBoot": "取消自启",
     "needRights": "需要系统变更权限与管理员身分。失败会显示原因，不会假装成功。",
-    "noneFetched": "— 未取得 —"
+    "noneFetched": "— 未取得 —",
+    "disableBootConfirm": "重新启动后引擎将不会启动，直到您再次启用它。",
+    "affectsProjects": "Sites and services that use this engine will be interrupted."
   },
   "expiresLabel": "到期",
   "importEntry": "入口: {{url}}",
@@ -283,5 +323,20 @@
   "unfreezeOk": "{{engine}} 修复完成",
   "startAfterUnfreeze": "启动服务（失败时会自动套用修复计划）",
   "serviceDownTitle": "数据库服务未运行",
-  "serviceDownBody": "服务异常。面板会诊断常见原因（冻结、配置残留、空白数据目录、端口冲突等）。数据目录为空：{{empty}}。请按「检查并修复服务」确认执行。"
+  "serviceDownBody": "服务异常。面板会诊断常见原因（冻结、配置残留、空白数据目录、端口冲突等）。数据目录为空：{{empty}}。请按「检查并修复服务」确认执行。",
+  "adoptHostDb": "登记 {{name}}",
+  "registeredVsHostHint": "已在面板登记 / 主机实测",
+  "dumpNeedRegistered": "请先在面板登记数据库",
+  "dumpFirstDbTitle": "导出第一个已登记数据库",
+  "importNeedRegistered": "请先在面板登记数据库",
+  "importLatestNeedConfirm": "需确认 — 会导入到已登记数据库",
+  "adoptHostDbTitle": "只在控制面登记名称，不改主机数据",
+  "cleanupExpiredTempUsersTitle": "清除已过期的面板临时用户",
+  "remoteDeleteTitle": "仅移除登记",
+  "remoteDeleteConfirm": "移除登记 {{name}}？远程服务器不会被改动。",
+  "registeredCount": "Registered",
+  "hostCount": "On host",
+  "registeredUsers": "Registered users",
+  "registeredUsersHint": "Panel registrations only — not every MySQL account",
+  "hostStillExists": "Still on host"
 }

package/locales/zh-CN/dns.json

@@ -32,6 +32,8 @@
   "zonesTitle": "区域 ({{count}})",
   "zonesDesc": "创建区域后可写入／套用 zone",
   "createZone": "+ 创建区域",
+  "mailZonesMissing": "電郵網域尚未建立 DNS 區域：{{domains}}。",
+  "createMailZone": "建立郵件區域",
   "colZoneName": "区域名称",
   "colServerIp": "服务器 IP",
   "colTemplate": "模板",
@@ -212,5 +214,21 @@
   "aboutHealthTitle": "服务健康",
   "aboutHealthBody": "在「工具」探测 PowerDNS、修复绑定、开放 53 端口。",
   "aboutStackTitle": "软件版本",
-  "aboutStackBody": "在「软件」检查／更新 PowerDNS 套件。"
+  "aboutStackBody": "在「软件」检查／更新 PowerDNS 套件。",
+  "invalidZone": "区域名称无效。使用真实域名（例如 example.com）。",
+  "invalidIpv4": "IPv4 无效。每个八位位组必须为 0–255。",
+  "createMailZoneNow": "已建立邮件区域 {{domain}}",
+  "healNeedInstall": "PowerDNS 未安装 - 首先将其安装在“软件”选项卡上",
+  "applyNeedService": "DNS 服务未运行 — 在应用之前启动或安装它",
+  "deleteZoneNeedName": "删除此区域 - 您将输入区域名称进行确认",
+  "toolsFirewallTitle": "防火墙（UFW）",
+  "toolsFirewallHint": "允许或拒绝 53 端口。不会启动或停止 PowerDNS。",
+  "toolsUnitTitle": "PowerDNS 服务单元",
+  "toolsUnitHint": "systemd 单元 pdns — 启动、停止、重启、重载。",
+  "installConfirmTitle": "安装 PowerDNS？",
+  "installConfirmDesc": "会安装 pdns-server 并写入受管权威配置。需要 root 与 YSK_EXECUTE=1。",
+  "installConfirmConsequence": "安装并启动后，PowerDNS 会绑定 53 端口。",
+  "installPort53Busy": "53 端口已有程序在监听。未停止或修复该监听前，PowerDNS 可能无法绑定。",
+  "installPort53BusyConsequence": "请先修复绑定或停止其他监听，才可预期 53 端口有响应。",
+  "createZoneNeedValid": "Enter a valid zone name and IPv4 address"
 }

package/locales/zh-CN/docker.json

@@ -0,0 +1,247 @@
+{
+  "title": "Docker",
+  "subtitle": "在这台服务器安装 Docker Engine，并管理容器、映像、Volume 与验证者 Compose 堆栈。",
+  "refresh": "刷新",
+  "notInstalled": "未安装 Docker Engine。请在此页安装 docker.io 及 docker-compose-v2。",
+  "protected": "受保护",
+  "pruneConfirm": "输入 PRUNE 以确认清理 volume 或系统",
+  "settingsHint": "只开放安全的 daemon.json 选项。应用会写入文件并重启 docker.service。",
+  "cli": {
+    "usage": "用法：ysk-server docker status|ps|images|volumes|networks|df|logs|inspect|exec|start|stop|restart|rm|pull|run|prune|engine|compose [--image IMG] [--name N] [--preset version|help|hostname] [--bin BIN] [--project P] [--execute] [--json]"
+  },
+  "tab": {
+    "overview": "概览",
+    "containers": "容器",
+    "images": "映像",
+    "compose": "Compose",
+    "volumes": "Volume",
+    "networks": "网络",
+    "prune": "清理",
+    "settings": "设置",
+    "about": "说明"
+  },
+  "col": {
+    "engine": "引擎",
+    "containers": "容器",
+    "version": "版本",
+    "dataRoot": "数据目录",
+    "disk": "磁盘",
+    "validators": "验证者堆栈",
+    "name": "名称",
+    "image": "映像",
+    "status": "状态",
+    "ports": "端口",
+    "managed": "由面板管理",
+    "size": "大小",
+    "driver": "驱动",
+    "type": "类型",
+    "reclaimable": "可回收"
+  },
+  "state": {
+    "up": "运行中",
+    "down": "已停止",
+    "running": "Running",
+    "exited": "Exited",
+    "restarting": "Restarting",
+    "restartingCount": "Restarting · {{n}} times",
+    "paused": "Paused",
+    "created": "Created",
+    "dead": "Dead",
+    "removing": "Removing",
+    "unknown": "Unknown"
+  },
+  "actions": {
+    "start": "启动",
+    "stop": "停止",
+    "restart": "重启",
+    "remove": "删除",
+    "logs": "日志",
+    "inspect": "检查",
+    "exec": "执行（version）",
+    "run": "运行映像",
+    "pull": "拉取",
+    "up": "启动",
+    "down": "停止",
+    "createVolume": "创建 volume",
+    "createNetwork": "创建网络",
+    "pruneContainers": "清理容器",
+    "pruneImages": "清理映像",
+    "pruneVolumes": "清理 volume",
+    "pruneSystem": "系统清理",
+    "startEngine": "启动引擎",
+    "stopEngine": "停止引擎",
+    "restartEngine": "重启引擎",
+    "applyDaemon": "应用引擎设置"
+  },
+  "empty": {
+    "containers": "没有容器",
+    "images": "没有映像",
+    "compose": "没有 Compose 项目",
+    "volumes": "没有 volume",
+    "networks": "没有网络",
+    "composeDesc": "Projects come from validator nodes or Compose files already on this host. This page does not accept arbitrary YAML uploads.",
+    "composeCta": "Open validator nodes"
+  },
+  "logs": {
+    "empty": "没有日志",
+    "follow": "Follow"
+  },
+  "settings": {
+    "logMaxSize": "容器日志上限",
+    "liveRestore": "即时还原（引擎重启时保留容器）",
+    "mirrors": "Registry 镜像（每行一个网址）",
+    "insecure": "未加密 Registry（每行一个主机）"
+  },
+  "about": {
+    "body": "Docker 是 YSK Server 的一级主机服务，与 Nginx 同级。由面板用 Ubuntu docker.io + docker-compose-v2 安装。验证者节点以 yskval-* Compose 项目运行。",
+    "honesty": "变更主机需要 root 及 YSK_EXECUTE=1。默认是试运行。此页不是 Kubernetes。",
+    "validators": "打开验证者节点"
+  },
+  "alerts": {
+    "daemonTitle": "Docker 引擎未运行",
+    "daemonBody": "已安装 Docker，但 docker.service 未启动。验证者堆栈无法启动。"
+  },
+  "errors": {
+    "notInstalled": "未安装 Docker",
+    "daemonDown": "Docker 引擎未运行",
+    "needCompose": "需要 docker compose（v2 插件）",
+    "badImage": "映像名称无效",
+    "badName": "名称无效",
+    "badPort": "端口映射无效",
+    "badEnv": "环境变量无效",
+    "badVolume": "磁盘挂载无效",
+    "badNetwork": "网络无效",
+    "protectedNetwork": "不可以删除内建 Docker 网络",
+    "badRestart": "重启策略无效",
+    "badPrune": "清理范围无效",
+    "needPruneConfirm": "清理 volume 或系统需要 confirm=PRUNE",
+    "badDaemon": "引擎设置无效",
+    "composeMissing": "找不到这个项目的 Compose 文件",
+    "logsFailed": "读不到容器日志",
+    "mutateFailed": "Docker 命令失败",
+    "engineFailed": "无法控制 docker.service",
+    "badExec": "exec 只限允许清单内的二进制与预设（不可用 shell，不可开 TTY）",
+    "uninstallBusy": "请先停止由面板管理的容器（包括验证者堆栈）再卸载 Docker"
+  },
+  "notes": {
+    "dryMutate": "此为试运行。要改主机请加 --execute 及 YSK_EXECUTE=1。",
+    "dryPrune": "清理预览（未应用）。",
+    "dryEngine": "引擎控制此为试运行。",
+    "dryDaemon": "将写入 /etc/docker/daemon.json 并重启 docker.service。",
+    "daemonWrote": "已写入 daemon.json",
+    "start": "已启动容器",
+    "stop": "已停止容器",
+    "restart": "已重启容器",
+    "remove": "已删除容器",
+    "ran": "已用映像启动容器",
+    "pulled": "已拉取映像",
+    "exec": "已执行允许清单内的 exec",
+    "imageRemoved": "已删除映像",
+    "volumeCreated": "已创建 volume",
+    "volumeRemoved": "已删除 volume",
+    "networkCreated": "已创建网络",
+    "networkRemoved": "已删除网络",
+    "pruned": "清理完成",
+    "compose": {
+      "up": "已启动 Compose 项目",
+      "down": "已停止 Compose 项目",
+      "restart": "已重启 Compose 项目",
+      "rm": "已删除 Compose 项目"
+    },
+    "engine": {
+      "start": "已启动 docker.service",
+      "stop": "已停止 docker.service",
+      "restart": "已重启 docker.service"
+    }
+  },
+  "needEngineTitle": "请先安装 Docker Engine",
+  "notInstalledValue": "未安装",
+  "nameHint": "字母、数字、下划线、点、连字符（最长 128）",
+  "volPlaceholder": "my-data",
+  "netPlaceholder": "my-net",
+  "runPorts": "发布端口",
+  "runPortsHint": "每行 host:container，例如 8080:80",
+  "runEnv": "环境变量",
+  "runEnvHint": "每行 KEY=value",
+  "runRestart": "重启策略",
+  "runNetwork": "网络",
+  "runVolumes": "Volume",
+  "runVolumesHint": "每行 volume:dest",
+  "runAdvancedHint": "多服务堆栈请用验证者节点，或主机上已有的 Compose 文件。",
+  "daemonConfirmTitle": "应用引擎设置？",
+  "daemonConfirmDesc": "会写入 daemon.json 并重启 docker.service。所有容器都会中断。",
+  "ui": {
+    "whatYouGet": "此页可以做什么",
+    "whatYouGetLead": "先安装 Docker Engine。之后可以运行单个容器、拉取映像，并查看本机已有的验证者 Compose 堆栈。",
+    "capEngine": "引擎",
+    "capEngineDesc": "一键安装 docker.io 及 docker-compose-v2。可在此页启动或停止 docker.service。",
+    "capWork": "容器与映像",
+    "capWorkDesc": "选择常用映像、拉取、运行，然后查看日志或检查容器。",
+    "capStacks": "验证者堆栈",
+    "capStacksDesc": "多服务堆栈是验证者 Compose 项目（yskval-*）。本页不接受上传 YAML。",
+    "cardEngine": "引擎",
+    "cardDisk": "磁盘",
+    "cardWork": "本机现况",
+    "compose": "Compose",
+    "cgroup": "cgroup",
+    "used": "已用",
+    "free": "可用",
+    "running": "运行中",
+    "images": "映像",
+    "volumes": "Volume",
+    "networks": "网络",
+    "goImages": "映像",
+    "goValidators": "验证者节点",
+    "imagePickHint": "请选择常用映像。只有需要其他参考名称时，才选「其他」。",
+    "imageCustom": "其他",
+    "driver": "驱动",
+    "driverLocalOnly": "本页只创建 local volume。",
+    "netDefaultDriver": "新建网络使用 Docker 默认的 bridge 驱动。",
+    "pruneWhat": "要清理什么",
+    "pruneAck": "我明白未使用的数据会被删除，并且无法还原",
+    "pruneAckDesc": "清理 volume 或整个系统无法还原。会按所选范围删除已停止的容器与未使用的映像。",
+    "pruneNow": "立即清理",
+    "useMirrors": "使用 Registry 源",
+    "useInsecure": "允许未加密 Registry",
+    "publishPorts": "向主机发布端口",
+    "attachVolume": "挂载 volume",
+    "setEnv": "设置环境变量",
+    "defaultNet": "默认",
+    "mountPath": "挂载路径",
+    "restartNo": "从不",
+    "restartUnless": "除非已停止",
+    "restartAlways": "始终",
+    "restartOnFail": "失败时",
+    "needAck": "清理前请先确认",
+    "scopeContainers": "已停止的容器",
+    "scopeImages": "未使用的映像",
+    "scopeVolumes": "未使用的 volume",
+    "scopeBuilder": "构建缓存",
+    "scopeSystem": "所有未使用项",
+    "noVolumesYet": "尚无 volume — 请先到 Volume 分页创建。",
+    "customPort": "其他主机端口",
+    "customPortHost": "主机端口",
+    "customPortContainer": "容器端口",
+    "pctUsed": "已用 {{n}}%",
+    "customPortHint": "1–65535。例如 9090 → 80。",
+    "pickBridge": "选择 bridge 网络"
+  },
+  "deleteTitle": "删除 {{id}}",
+  "deleteDesc": "此操作无法复原。",
+  "deleteC1": "会从这台主机移除该资源。",
+  "deleteComposeVal": "这是验证者堆栈 — 验证者实例会一并删除。",
+  "pruneTitle": "清理 Docker 资源",
+  "pruneDesc": "输入 PRUNE 以确认。已删除的数据无法复原。",
+  "pruneC1": "会删除所选范围内未使用的资源。",
+  "pruneC2": "Volume 与系统清理会永久删除未使用的数据卷。",
+  "pruneC3": "会移除此范围内已停止的容器或未使用映像。",
+  "df": {
+    "images": "Images",
+    "containers": "Containers",
+    "volumes": "Local volumes",
+    "builder": "Build cache",
+    "other": "Other"
+  },
+  "deleteRunningWarn": "This container is still running or restarting. It will be force-removed.",
+  "stopEngineDesc": "This stops the Docker engine and all {{n}} container(s) on this host."
+}