ysk-server-shared 1.0.0 → 1.1.0

package/locales/zh-CN/notes.json

@@ -30,16 +30,42 @@
   },
   "ssh": {
     "identityNotFound": "找不到 identity",
-    "registrationNotFound": "找不到登记"
+    "registrationNotFound": "找不到登记",
+    "keyOkNologin": "Key accepted. Account has no login shell (nologin) — use SFTP. Treated as PASS.",
+    "keyOkSftp": "SSH shell 被拒绝后，SFTP pwd 成功。"
   },
   "cdn": {
     "siteNotFound": "找不到 CDN 站点",
-    "nodeMissing": "节点不存在"
+    "nodeMissing": "节点不存在",
+    "probe": {
+      "timeout": "连接超时 {{ms}}ms（{{detail}}）。对端可能被防火墙挡住。",
+      "dns": "DNS 查询失败（{{detail}}）。",
+      "refused": "连接被拒 {{ms}}ms（{{detail}}）。端口未开或单向封锁。",
+      "tls": "TLS 验证失败（{{detail}}）。",
+      "unreach": "主机不可达 {{ms}}ms（{{detail}}）。",
+      "http": "HTTP 探活失败 {{ms}}ms（{{detail}}）。"
+    },
+    "loopbackOriginRemote": "来源是 127.0.0.1 — 这是该主机，而不是远程边缘。设置可达的源IP或bind_ip。",
+    "needSshOrFleet": "远程边缘需要出站 SSH 身份（或用户名）或 /agents 队列会话。仅健康 URL 不适用传输。",
+    "originRemoteRewrite": "远程边缘将使用可达源 {{url}} 而不是环回。",
+    "originRemoteUnknown": "来源是环回，并且没有已知的公共/LAN IP 或bind_ip — apply 将拒绝远程边缘，直到设置为止。"
   },
   "backup": {
+    "testUnsaved": "正在测试未保存的表单（尚未写入设置）。",
     "fileNotFound": "找不到备份文件",
     "resticNoPassword": "restic 已启用但未设置 password",
-    "resticNotInPath": "restic 不在 PATH"
+    "resticNotInPath": "restic 不在 PATH",
+    "dbEnvUnreadable": "无法读取 .db.env，跳过 SQL 导出。",
+    "dbEnvNoName": ".db.env 没有数据库名称，跳过 SQL 导出。",
+    "targetOutside": "还原目标必须在项目家目录或公开文件根目录之内。",
+    "testIdentity": "ssh (identity) to {{spec}} ok",
+    "sshAuthFailed": "SSH 密钥或密码被拒绝（公钥）。选择出站身份或安装 sshpass。",
+    "remotePathIsFile": "远程路径 {{path}} 是一个文件。使用目录。",
+    "remoteMkdirFailed": "无法创建远程目录：{{detail}}",
+    "sidecarPushed": "还推送了 SQL sidecar {{name}}",
+    "controlPlaneDryRun": "仅预览 - 没有写任何东西。在面板中，使用“恢复”并确认要写入的短语。",
+    "controlPlaneNeedConfirm": "完全控制平面恢复需要确认短语 RESTORE-CONTROL-PLANE。",
+    "controlPlaneRestartAfter": "恢复成功后重新启动API。"
   },
   "redis": {
     "cliMissing": "未安装 redis-cli"
@@ -83,7 +109,8 @@
     "pathOutsideSandbox": "路径超出沙箱范围：{{target}}",
     "notFoundRel": "找不到：{{relPath}}",
     "fileNotFoundRel": "找不到文件：{{relPath}}",
-    "notFoundFrom": "找不到：{{fromPath}}"
+    "notFoundFrom": "找不到：{{fromPath}}",
+    "alreadyExists": "已有同名项目：{{name}}"
   },
   "dns": {
     "needZoneServerIp": "请填写 zone 与 server IP",
@@ -123,7 +150,10 @@
   },
   "db": {
     "needExecuteCreate": "服务器未开启系统变更权限，无法在管理面板创建数据库",
-    "dryRunMysql": "dry-run：未创建数据库。加 --execute 且 YSK_EXECUTE=1 才真正 provision"
+    "dryRunMysql": "dry-run：未创建数据库。加 --execute 且 YSK_EXECUTE=1 才真正 provision",
+    "remoteNoCreds": "未存账号／密码——只测 TCP（登记 ≠ 已登录）。",
+    "remoteReachable": "TCP {{host}}:{{port}} 可达（{{ms}}ms）。",
+    "remoteUnreachable": "TCP {{host}}:{{port}} 关闭或被过滤（{{ms}}ms）。"
   },
   "net": {
     "invalidIface": "接口名称无效",
@@ -201,10 +231,20 @@
     "security": "安全",
     "binaries": "二进制／软件包",
     "hosting": "托管",
-    "dns": "DNS",
+    "dns": "域名系统",
     "email": "邮件",
     "isolation": "项目隔离",
-    "ops": "运维"
+    "ops": "运维",
+    "runtimesNode": "Node.js",
+    "runtimesPhp": "PHP",
+    "runtimesPython": "Python",
+    "runtimesGo": "Go",
+    "pm2": "PM2",
+    "runtimesNodeFix": "从 /runtimes/node 安装 Node",
+    "runtimesPhpFix": "从 /runtimes/php 安装 PHP",
+    "runtimesPythonFix": "从 /runtimes/python 安装 Python",
+    "runtimesGoFix": "从 /runtimes/go 安装 Go",
+    "pm2Fix": "从 Node 运行时页面安装 PM2"
   },
   "needAdmin": "需要管理员权限",
   "notInstalled": "未安装",
@@ -477,7 +517,7 @@
     "n0259": "domain 必填",
     "n0260": "domain 找不到",
     "n0261": "dovecot reload 失败或服务未裝（sieve 檔已寫；唔標假 reload 成功）",
-    "n0262": "dry-run fleet dispatch（未入佇列）",
+    "n0262": "预览试行机群派送（未入队列）",
     "n0263": "dry-run peer push 計劃（未 scp）",
     "n0264": "dry-run remote install（未 ssh）",
     "n0265": "dry-run transfer 完成（略過 full bootstrap）",
@@ -614,7 +654,7 @@
     "n0396": "python3 可执行檔",
     "n0397": "queued ≠ edge 已 purge",
     "n0398": "queued ≠ edge 已 reload — agent 需拉取並执行 cdn.edge.apply",
-    "n0399": "queued ≠ edge 已执行 — Agents 紀錄睇 exit/JSON",
+    "n0399": "queued ≠ edge 已执行 — Agents 纪录看 exit/JSON",
     "n0400": "realpath 快取大小",
     "n0401": "realpath 快取秒數",
     "n0402": "reapply 需要 YSK_EXECUTE=1",
@@ -1340,7 +1380,7 @@
     "n1120": "無暫停域名 — map 為空（系統应用後會 postmap 空檔）",
     "n1121": "無有效 IP",
     "n1122": "無模組時政策仍可用於嫌疑人 auto-ban enrich",
-    "n1123": "无法 ban 到系統：需 YSK_EXECUTE；已記到面板 ban 清單",
+    "n1123": "無法封鎖到主機：未開啟系統變更權限。面板清單沒有新增。",
     "n1124": "无法 dump Redis：缺 redis-cli",
     "n1125": "无法 dump：服务器未开启系統变更权限",
     "n1126": "无法 fan-out：未开启系統变更权限",
@@ -1810,7 +1850,7 @@
     "n1590": "靜態網站",
     "n1591": "非 root — useradd／systemd／nginx 系統路径受限",
     "n1592": "非受限 seccomp 需要明確指定 runAsUser",
-    "n1593": "面板請求/分",
+    "n1593": "公开请求／分钟",
     "n1594": "面板连接即將中斷；可用「取消排程」撤回（若仍在線）",
     "n1595": "面板非 root",
     "n1596": "預覽可用 apply:false",
@@ -1828,6 +1868,8 @@
     "n1608": "验证碼无效",
     "n1609": "验证通过",
     "n1610": "未刷新套件索引（未开 YSK_EXECUTE）— 仅显示 apt list；开启 EXECUTE 才运行 apt-get update",
+    "n1611": "UFW 已關閉：user.rules 有 {{n}} 條永久拒規則，但核心未強制執行。",
+    "n1612": "UFW 已關閉。拒絕規則只會寫入 user.rules，核心不會丟棄封包。請先啟用 UFW。不會自動開啟。",
     "t0001": "listenPort 无效：{{v0}}",
     "t0002": "已還原版本 {{v0}}",
     "t0003": "文件過大（>{{v0}} bytes）",
@@ -2081,7 +2123,7 @@
     "t0251": "{{v0}} 安装未完成",
     "t0252": "{{v0}} 服務已启动",
     "t0253": "启动失败：{{v0}}",
-    "t0254": "不支援的 Node.js 版本 {{v0}}；可用主版本：{{v1}}",
+    "t0254": "支持 Node.js 版本 {{v0}}；可用版本：{{v1}}",
     "t0255": "不支援的 PHP 版本 {{v0}}；可用：{{v1}}",
     "t0256": "不支援的 Python 版本 {{v0}}；可用：{{v1}}",
     "t0257": "不支援的 Go 版本 {{v0}}；可用：{{v1}}",
@@ -2203,12 +2245,12 @@
     "t0373": "项目「{{v0}}」隔離",
     "t0374": "已複製到本機路径 {{v0}}",
     "t0375": "身份 {{v0}}：{{v1}}",
-    "t0376": "已 scp（identity）到 {{v0}}",
-    "t0377": "scp(identity) 失败: {{v0}}",
-    "t0378": "已 scp 到 {{v0}}",
-    "t0379": "scp 失败: {{v0}}",
-    "t0380": "已 scp 到 {{v0}}",
-    "t0381": "scp 失败: {{v0}}（可設 backup remote identityId）",
+    "t0376": "sftp（身份密钥）连到 {{v0}} 成功",
+    "t0377": "sftp（身份密钥）失败：{{v0}}",
+    "t0378": "sftp 连到 {{v0}} 成功",
+    "t0379": "sftp 失败：{{v0}}",
+    "t0380": "sftp 连到 {{v0}} 成功",
+    "t0381": "sftp 失败：{{v0}}（可设置备份 remote identityId）",
     "t0382": "已上傳 S3 {{v0}}",
     "t0383": "S3 失败: {{v0}}",
     "t0384": "政策已開：{{v0}}/{{v1}} admin 已啟用 2FA",
@@ -2216,7 +2258,7 @@
     "t0386": "{{v0}} 在 PATH",
     "t0387": "{{v0}} 找不到",
     "t0388": "請於系統安装 {{v0}}，或於面板软件／runtime 安装",
-    "t0389": "可用主版本：{{v0}}",
+    "t0389": "可用版本：{{v0}}",
     "t0390": "使用率約 {{v0}}%（總 {{v1}} MB）",
     "t0391": "使用率約 {{v0}}%（{{v1}}）",
     "t0392": "於服務矩陣启动 {{v0}}",
@@ -2465,7 +2507,7 @@
     "t0635": "无法探测 {{v0}}",
     "t0636": "來源 {{v0}} · {{v1}}",
     "t0637": "项目 {{v0}} · 信箱 {{v1}} · DB {{v2}} · Redis {{v3}}",
-    "t0638": "需安装软件 {{v0}} 項 · homes {{v1}}",
+    "t0638": "需安装软件 {{v0}} 项 · homes {{v1}}",
     "t0639": "cutover 主機名 {{v0}}",
     "t0640": "警告 {{v0}} 則（請審閱）",
     "t0641": "已產生臨時密钥 {{v0}}",
@@ -2552,7 +2594,7 @@
     "t0722": "originShieldNodeId={{v0}} 不存在 — 忽略 shield",
     "t0723": "{{v0}}: 有 SSH 目標 — 使用 SSH 同步应用（略過 fleet 佇列）",
     "t0724": "fleet 无法入佇列（blocked={{v0}}）— 提供 enqueue 或改用 SSH",
-    "t0725": "fleet 已入佇列 {{v0}} edge — queued ≠ agent 已 nginx reload；睇 Agents 指令紀錄",
+    "t0725": "fleet 已入队列 {{v0}} edge — queued ≠ agent 已 nginx reload；查看 Agents 指令纪录",
     "t0726": "fleetAgentId={{v0}} — 需要控制面 fleet enqueue（API 會注入）；或改填 SSH 做同步应用",
     "t0727": "找不到 conf：{{v0}}",
     "t0728": "讀 conf 失败：{{v0}}",
@@ -2627,7 +2669,14 @@
     "t0797": "timezone 失败: {{v0}}",
     "tScoreFrom": "分数={{score}} · 由 {{from}} 切换",
     "appliedTag": "（已应用）",
-    "writtenTag": "（只写文件）"
+    "writtenTag": "（只写文件）",
+    "selfDestMissing": "找不到运行中安装目录（systemd ExecStart 或运行中 cli.js）",
+    "selfDestUnwritable": "无法写入运行中安装目录 {{v0}}",
+    "selfApplied": "已将 {{v0}} 应用到 {{v1}}",
+    "selfVerifyFail": "应用后版本文件未包含 {{v0}}",
+    "selfDownloadFail": "无法下载或解压官方套件 {{v0}}：{{v1}}",
+    "selfOverlayFail": "官方套件未能应用到运行中目录：{{v0}}",
+    "selfUpgradeHint": "面板套用失败。请以 root 执行：curl -fsSL https://raw.githubusercontent.com/yanshekki/ysk-server/main/install.sh | bash -s -- --upgrade"
   },
   "tpl": {
     "deleted": "已删除 {{name}}",
@@ -2857,7 +2906,10 @@
     "accessReconnectHint": "已连接的客户端请断开再连，才会使用新路由",
     "ovpnNatDurable": "安装 OpenVPN NAT/转发以便重新启动 (systemd ExecStartPost)。",
     "clientFullTunnelProtect": "检测到全隧道客户端 (AllowedIPs 0.0.0.0/0)。应用主机保护，以便面板/SSH 回复保留在 LAN NIC 上。",
-    "clientFullTunnelHint": "提示：仅对于分割访问，请在conf中将AllowedIPs设置为VPN/LAN CIDR（而不是0.0.0.0/0），然后重新连接。"
+    "clientFullTunnelHint": "提示：仅对于分割访问，请在conf中将AllowedIPs设置为VPN/LAN CIDR（而不是0.0.0.0/0），然后重新连接。",
+    "serverStopped": "已停止 {{engine}} 伺服器。",
+    "serverStopFailed": "無法停止 {{engine}} 伺服器：{{detail}}",
+    "peersSynced": "Peer list reloaded on the running WireGuard interface."
   },
   "vnc": {
     "needInstall": "请安装 {{stack}}",
@@ -2951,7 +3003,12 @@
     "clientDeleted": "已删除客户端配置",
     "sessionStartCwd": "VNC 启动失败：工作目录会话用户无权访问（display :{{display}}）。已改为从 HOME 启动。",
     "desktopRestarted": "应用桌面配置文件并重新启动会话 ({{desktop}})。重新连接 VNC/noVNC。",
-    "desktopNeedsStart": "桌面配置文件 {{desktop}} 写入 xstartup。启动会话以进行申请。"
+    "desktopNeedsStart": "桌面配置文件 {{desktop}} 写入 xstartup。启动会话以进行申请。",
+    "passwordNeedTiger": "找不到 vncpasswd。请先安装 TigerVNC（tigervnc-standalone-server）再设定密码。",
+    "linuxUserRolledBack": "VNC 密码失败后已删除遗留 Linux 用户 {{user}}。",
+    "linuxUserOrphan": "VNC 密码失败后无法删除遗留 Linux 用户 {{user}}。",
+    "sessionStartHostname": "Failed to start display :{{display}}: this host cannot resolve its own hostname. Add the hostname to /etc/hosts (or fix DNS) then start the session again.",
+    "userdelLeftover": "Panel account removed, but Linux user {{user}} is still on the host. Remove it from Users or the host."
   },
   "apache": {
     "needServerName": "需要域名",
@@ -3001,6 +3058,101 @@
     "startedDetached": "BT Tracker detached worker 已启动（pid {{pid}}，端口 {{port}}）",
     "runningDetached": "Tracker 以 detached worker 运行中（pid {{pid}}）",
     "jobQueued": "BT torrent 创建已排入队列（大型分享）",
-    "jobRunning": "正在创建 BT torrent"
+    "jobRunning": "正在创建 BT torrent",
+    "libraryAdded": "已将 {{name}} 加入 WebTorrent 资料库",
+    "libraryInspectFailed": "无法读取此 .torrent 或 magnet",
+    "libraryDup": "资料库已有此 Torrent",
+    "libraryDestBad": "保存位置不是有效的文件路径",
+    "libraryTorrentTooBig": ".torrent 文件大于 8 MiB",
+    "libraryNotFound": "找不到此资料库项目",
+    "libraryPaused": "已暂停",
+    "libraryResumed": "已继续",
+    "libraryRemoved": "已从资料库移除",
+    "libraryFilesRemoved": "已删除下载的文件",
+    "libraryRestoreDone": "资料库还原：已启动 {{started}}/{{attempted}}（失败 {{failed}}）",
+    "applyTrackersDone": "已向 {{n}} 个现有 announce 套用常用 Tracker",
+    "libraryNeedServe": "已保存。请在面板启动 ysk-server serve，WebTorrent 才会下载／做种。",
+    "libraryDestIsFile": "无法建立名为 {{name}} 的文件夹——该处已有同名文件。",
+    "librarySeedMissing": "此文件夹没有可做种的对应文件。",
+    "libraryWaitingPeers": "正在等待 peers。若文件已在此主机，请重新加入并选使用现有文件做种。"
+  },
+  "migrate": {
+    "orphanConfirm": "请输入完整孤立主目录路径以确认删除。",
+    "orphanStillInStore": "该主目录仍属于 store 内的项目。",
+    "orphanMissing": "磁盘没有此路径：{{path}}",
+    "orphanNeedExecute": "将删除孤立主目录 {{path}}。需 YSK_EXECUTE=1。",
+    "orphanRmFailed": "无法删除孤立主目录：{{detail}}",
+    "orphanRemoved": "已删除孤立项目主目录 {{path}}。"
+  },
+  "leftover": {
+    "staleCliTitle": "遗留旧版 CLI",
+    "staleCli": "仍有旧 CLI：{{path}}（产品版本 {{version}}）。PATH 可能优先使用它。移除：rm -f {{path}}",
+    "apacheDefaultTitle": "Apache 遗留默认站",
+    "apacheDefault": "Apache 000-default 仍占 :80。产品 overlay 不会停用。请在面板套用 Apache，或 hosting apache apply --execute。",
+    "nginxCatchAllTitle": "Nginx 缺 catch-all",
+    "nginxCatchAll": "/etc/nginx/conf.d 没有 ysk-000-default.conf。未知 SNI 可能落到其他站。请执行 projects nginx-sync --execute。",
+    "vsftpdTitle": "vsftpd 单元失败",
+    "vsftpd": "vsftpd 失败。overlay 不会重写 listen／listen_ipv6。请在面板套用 FTP。",
+    "dovecotTitle": "Dovecot TLS 指向不存在的证书",
+    "dovecot": "Dovecot ssl_cert 指向不存在的 {{path}}。overlay 不会改成 ssl=no。签发邮件证书后套用邮件 TLS。",
+    "overlayDoesNotHeal": "产品 overlay 不会改写 nginx、Apache、vsftpd 或 Dovecot。请用列出的套用命令（root + YSK_EXECUTE=1）。",
+    "readinessTitle": "overlay 后主机遗留",
+    "readinessClean": "未检测到 Apache 默认站、缺 nginx catch-all、vsftpd 失败或旧 CLI。",
+    "staleCliRemoved": "已移除残留 CLI {{path}}。",
+    "staleCliRemoveFailed": "无法移除残留 CLI {{path}}：{{detail}}",
+    "vsftpdSslOff": "因 FTPS 证书文件不存在，已将 vsftpd 设为 ssl_enable=NO 并重新启动。",
+    "dovecotSslOff": "因 {{path}} 不存在，已将 Dovecot 设为 ssl=no 并重新启动。"
+  },
+  "git": {
+    "missingBin": "git 不在路径上",
+    "auth": "认证失败。添加部署密钥或 HTTPS 令牌。",
+    "hostkey": "SSH 主机密钥验证失败。确认并固定主机密钥。",
+    "dirty": "工作树有 {{count}} 个本地更改。拉动被阻止。",
+    "diverged": "无法快进。如果您打算丢弃本地 Git 历史记录，请重置为远程引用。",
+    "missingRef": "该分支、标签或提交不在远程上。",
+    "shallow": "这个克隆很浅。在固定旧提交之前获取完整历史记录。",
+    "notRepo": "app/ 还不是 Git 存储库。",
+    "unrelated": "无关的历史。仅在确认后重新克隆 - 自定义文件将丢失。",
+    "lock": "Git index.lock 存在。仅当没有 git 进程正在运行时才将其删除。",
+    "disk": "磁盘已满或超出配额。",
+    "timeout": "Git 超时。",
+    "network": "与远程通信时出现网络错误。",
+    "lfs": "此存储库使用 Git LFS 并且 git-lfs 不可用。",
+    "submodule": "子模块更新失败。",
+    "unknown": "吉特失败了。查看命令输出。",
+    "fetchOk": "从原产地获取。",
+    "checkoutOk": "签出{{ref}}。",
+    "resetOk": "硬重置为{{ref}}。",
+    "envRestored": "从控制平面恢复了 app/.env。",
+    "needPinHost": "SSH 主机密钥未固定。在克隆或获取之前扫描并固定它。",
+    "tokenSaved": "已存储 HTTPS 令牌（不再显示）。",
+    "tokenCleared": "HTTPS 令牌已删除。",
+    "tokenInvalid": "令牌必须至少包含 8 个字符。",
+    "deployKeyCreated": "已创建部署密钥。在 Git 主机上添加公钥。",
+    "deployKeyCleared": "部署与该项目分离的密钥。",
+    "hostPinned": "{{host}} 的固定 SSH 主机密钥。",
+    "hostUnpinned": "清除固定的 SSH 主机密钥。",
+    "hostScanFailed": "ssh-keyscan 没有返回该主机的密钥。",
+    "hookEnabled": "入站 Git 挂钩已打开。自行将 URL 粘贴到 GitHub、Gitea 或 GitLab 中。",
+    "hookDisabled": "入站 Git 挂钩已关闭。 URL 将不会同步。",
+    "hookSecretOnce": "现在复制这个钩子秘密。它不再显示。",
+    "refsNeedUrl": "首先输入 Git URL。",
+    "refsOk": "已加载 {{branches}} 分支和 {{tags}} 标签。",
+    "refsEmpty": "远程没有发布任何分支或标签。",
+    "diffEmpty": "没有未暂存的差异（受保护的 .env 被排除）。"
+  },
+  "defense": {
+    "panelReqLabel": "面板请求数/分钟",
+    "panelReqExcluded": "经过身份验证的面板流量 - 此处显示，不计入威胁评分",
+    "tcpOk": "TCP {{target}} 可达",
+    "tcpFail": "TCP {{target}} 失败",
+    "dnsDegraded": "DNS 路径降级",
+    "reqRateHigh": "公开请求率 {{reqs}}/min ≥ {{threshold}}",
+    "ddosHeuristic": "高公共请求率加上边缘探测失败"
+  },
+  "publicFiles": {
+    "liveConf": "生效 Nginx 配置文件：{{path}}",
+    "publicRoot": "公开根目录：{{path}}",
+    "confNameStale": "配置文件 {{file}} 与当前 server_name {{serverName}} 不一致。请再套用公用文件以改名。"
   }
 }

package/locales/zh-CN/projects.json

@@ -72,7 +72,12 @@
     "httpStatus": "HTTP",
     "latency": "延遲",
     "error": "错误",
-    "at": "检查时间"
+    "at": "检查时间",
+    "deployMode": "Deploy mode",
+    "edgeKind": "Edge",
+    "goLiveOk": "Go-live",
+    "goLiveAt": "Go-live at",
+    "degraded": "Degraded"
   },
   "railPhp": "PHP / 站点",
   "railStatic": "静态站",
@@ -506,11 +511,11 @@
     "node": "Node.js",
     "static": "静态",
     "python": "Python",
-    "go": "Go",
+    "go": "去",
     "rust": "Rust",
     "java": "Java",
     "kotlin": "Kotlin",
-    "bun": "Bun"
+    "bun": "包子"
   },
   "netCacheTitle": "缓存",
   "logsDeepAccess": "日志中心 · access",
@@ -523,7 +528,7 @@
   "railBun": "Bun 进程",
   "deployProcessManager": "进程管理",
   "deployProcessManagerSystemd": "systemd（推荐）",
-  "deployProcessManagerPm2": "颗粒物",
+  "deployProcessManagerPm2": "PM2",
   "proc_restart": "重启",
   "proc_stop": "停止",
   "proc_reload": "重新加载",
@@ -547,14 +552,130 @@
   "netPublishMaint": "维护",
   "sslNeedDomain": "请先填写域名，才能发布 Nginx / SSL。",
   "createTemplateMissing": "未載入 {{v0}} 範本；請重新整理或選「— 無 —」空白專案。",
-  "deleteDialogDesc": "將銷毀「{{v0}}」。此操作無法還原。",
+  "deleteDialogDesc": "將銷毀「{{name}}」。此操作無法還原。",
   "deleteWillStop": "停止 systemd / PM2 / 本機進程",
   "deleteWillWeb": "移除 Nginx conf、PHP-FPM pool、Apache vhost（如有）",
   "deleteWillOs": "刪除 Linux 用戶與 home 目錄（安全路徑）",
   "deleteKeepOs": "保留 home 與 Linux 用戶（僅面板移除）",
   "deleteWillDb": "從控制面資料庫移除專案",
   "deleteRemoveFilesDesc": "取消勾選則只從面板移除，檔案與系統用戶保留",
-  "deleteTypeNameHint": "請輸入「{{v0}}」",
+  "deleteTypeNameHint": "請輸入「{{name}}」",
   "deleteDnsWarn": "共享 DNS zone / 郵箱 domain 不會自動刪除。",
-  "manageInNginx": "在 Nginx 管理"
+  "manageInNginx": "在 Nginx 管理",
+  "advFtpHomeApp": "站点 app 目录",
+  "advFtpHomeRoot": "项目家目录（全部）",
+  "advFtpManage": "打开 FTP 页",
+  "listDesc": "管理该主机上的站点。",
+  "resShell": "登录 shell",
+  "resSaveHint": "「储存并套用」会改主机。「仅存控制面」只记表单。「再套用」用已存值再写入系统。",
+  "resBashConfirmTitle": "允许互动式 bash？",
+  "resBashConfirmDesc": "这会让专案用户有互动登录 shell。只在需要以该用户 SSH 或终端机时才确认。",
+  "noPathSepHint": "名稱不可包含 / 或 \\。",
+  "createGitHint": "可选。会记在专案；到部署分页再 clone（建立时不会 clone）。",
+  "gitBranch": "分支",
+  "gitBranchHint": "分支或 tag。留空则用远端默认分支。首次 clone 为浅层（depth 1）。",
+  "gitLastRef": "上次同步：{{branch}} @ {{commit}}",
+  "gitConfirmTitle": "要 clone 到此专案？",
+  "gitConfirmBody": "若 app/ 仍是 Hello World 占位会先清除再 clone。非 YSK 模板的自定义文件会拒绝覆盖。",
+  "gitConfirmRemoteBody": "会把 origin 改为新网址再 pull。历史无关则失败；不会清除自定义文件。",
+  "runtimeActual": "实际 binary {{path}}",
+  "runtimeFallback": "所选 {{version}} 并未安装。进程实际使用 {{path}}。",
+  "gitSync": "同步",
+  "gitFetch": "拿来",
+  "gitCheckout": "查看",
+  "gitReset": "重置为远程",
+  "gitDeepen": "获取完整历史记录",
+  "gitLogTitle": "最近的提交",
+  "gitDirtyTitle": "本地更改阻止拉动",
+  "gitDirtyBody": "{{count}} 个文件与 Git（文件编辑或应用程序）不同。丢弃它们或中止。",
+  "gitDiscard": "丢弃本地文件",
+  "gitOpenFiles": "在文件中打开",
+  "gitNotCloned": "未克隆",
+  "gitClean": "干净的",
+  "gitDirty": "肮脏的",
+  "gitBehind": "落后于 {{count}}",
+  "gitAhead": "领先 {{count}}",
+  "gitDetached": "已固定",
+  "gitShallow": "浅的",
+  "gitMissing": "git 丢失",
+  "gitResetConfirmTitle": "重置很难远程？",
+  "gitResetConfirmBody": "这将丢弃本地 Git 历史记录和除 .env 之外的未跟踪文件，然后从控制平面恢复 .env。",
+  "gitHeads": "远程分支机构",
+  "gitToken": "HTTPS 令牌",
+  "gitTokenHint": "Personal access token. Stored encrypted; never written into the remote URL.",
+  "gitTokenPlaceholder": "ghp_... 或 glpat-...",
+  "gitTokenSet": "令牌集",
+  "gitSaveToken": "保存令牌",
+  "gitClearToken": "清除令牌",
+  "gitDeployKey": "部署公钥",
+  "gitDeployKeyHint": "将其添加为 Git 主机上的只读部署密钥。",
+  "gitDeployKeyOn": "部署密钥",
+  "gitMakeKey": "创建部署密钥",
+  "gitCopyPub": "复制公钥",
+  "gitClearKey": "清除部署密钥",
+  "gitKeyCopied": "公钥已复制",
+  "gitPinHost": "固定主机密钥",
+  "gitPinHostBody": "{{host}} 未固定。确认指纹，然后在 SSH 克隆之前进行固定。",
+  "gitHostUnpinned": "主机密钥未固定",
+  "gitHookTitle": "Inbound hook",
+  "gitHookHint": "请自行把上方完整 POST URL 贴到 GitHub／Gitea／GitLab（只接收 push）。不是 Slack。密钥用 HMAC 或 X-YSK-Git-Hook。只会同步本项目已选定的 ref。",
+  "gitHookOn": "Hook 已开",
+  "gitHookOff": "Hook 已关",
+  "gitHookEnable": "开启 hook",
+  "gitHookRotate": "更换 secret",
+  "gitHookDisable": "关闭 hook",
+  "gitHookSecretOnce": "请立即复制此 secret——离开页面后不会再显示。",
+  "gitHookCopyUrl": "复制 URL",
+  "gitHookCopySecret": "复制 secret",
+  "gitHookCopied": "已复制",
+  "gitHookSetup": "请在 Git 平台自行新增 webhook：Payload URL 用上方完整网址；Content type 用 application/json；事件只选 push；Secret 用启用时显示的值。",
+  "gitHookGithub": "GitHub：Settings → Webhooks → Add webhook。Content type 选 application/json。Events 选 Just the push event。GitHub.com 需要 HTTPS。",
+  "gitHookGitea": "Gitea：Settings → Webhooks → Add Webhook → Gitea。方法 POST。事件选 Push。",
+  "gitHookGitlab": "GitLab：Settings → Webhooks。Trigger 选 Push events。Secret token 填 hook secret（以 X-Gitlab-Token 传送）。",
+  "gitHookHonesty": "主机 systemd 必须设 YSK_EXECUTE=1，hook 才会真正 clone／部署。否则只回计划结果。",
+  "gitHookSkipOther": "其他分支的 push 会被忽略，只同步本项目的 ref。",
+  "gitAuthHttps": "HTTPS 令牌",
+  "gitAuthSsh": "SSH 部署密钥",
+  "gitLoadRefs": "加载分支",
+  "gitRefDefault": "远程默认",
+  "gitRefBranches": "分支机构",
+  "gitRefTags": "标签",
+  "gitRefOther": "其他参考…",
+  "gitRefCustom": "提交或参考",
+  "gitRefsNeedUrl": "首先输入一个网址。",
+  "gitRefsNeedAuth": "保存令牌或部署密钥，然后加载分支。",
+  "gitRefsHint": "从远程加载。选择一个 — 不要打字。",
+  "gitHookSetupToggle": "这个怎么粘贴",
+  "gitHookOneLiner": "HMAC 或 X-YSK-Git-Hook。仅此项目的参考。",
+  "gitHookExecuteHint": "需要 YSK_EXECUTE=1 才能克隆或部署。",
+  "gitShowKey": "显示密钥",
+  "gitHideKey": "隐藏",
+  "gitBehindShort": "↓{{计数}}",
+  "gitAheadShort": "↑{{计数}}",
+  "gitDirtyShort": "肮脏 · {{count}}",
+  "gitFilesLink": "文件",
+  "gitTokenLaterHint": "HTTPS 令牌和克隆深度在创建后在项目“部署”选项卡上设置。",
+  "netForceHttpsOn": "发布边缘后，HTTP 将重定向到 HTTPS。",
+  "netForceHttpsOff": "不存储强制重定向。",
+  "netHttpsLiveNotForced": "存在边缘文件； HTTPS 可能已经可以工作。此框仅强制 HTTP→HTTPS。",
+  "gitSyncBlockedDirty": "同步将被禁用，直到本地更改被丢弃（重置）或文件与 Git 匹配为止。",
+  "gitViewDiff": "查看差异",
+  "gitBranchAfterUrl": "请先填写 Git 网址。留空则使用远端默认分支。",
+  "gitResetNeedConfirm": "需确认 — 会丢弃本机提交",
+  "openUrlNeedDomain": "首先设置一个域名 - 不要在浏览器中打开 127.0.0.1",
+  "needOsUser": "首先在“隔离”选项卡上创建系统用户",
+  "stopTitle": "停止该项目（systemd 单元和公共站点）",
+  "deployTitle": "部署此项目",
+  "httpStatsHint": "来自该项目的访问日志（最后一个示例）",
+  "httpStatsNone": "尚无项目访问日志",
+  "statStoppedOnly": "已停止",
+  "statReadyOnly": "准备好",
+  "netBoundCert": "已绑定证书",
+  "netBoundCertExpiry": "到期 {{at}}",
+  "netNoBoundCert": "此主机名磁盘上没有证书",
+  "netForceHttpsNeedCert": "强制 HTTPS 前，请先在 /ssl 为此域名签发证书。",
+  "goIsolation": "Open Isolation tab",
+  "netHstsNeedHttps": "Turn on force HTTPS first",
+  "homeMissing": "Home directory does not exist",
+  "homeMissingHint": "Same live probe as migrate inventory — create the system user on Isolation"
 }

package/locales/zh-CN/protection.json

@@ -30,7 +30,9 @@
   "note": {
     "notApplied": "未套用到系统（需 root + YSK_EXECUTE=1）— 已记到管理设置",
     "nginxWritten": "已写入 Nginx 限速管理檔",
-    "f2bWritten": "已写入 fail2ban 管理設定"
+    "f2bWritten": "已写入 fail2ban 管理設定",
+    "hintDropped": "Internal protection hint omitted",
+    "nginxLimits": "Will write Nginx rate-limit snippet"
   },
   "rel": {
     "justNow": "刚刚",
@@ -344,5 +346,65 @@
   "plusRegion": "+ 省 {{v}}",
   "plusCity": "+ 城市 {{v}}",
   "lastTickPrefix": "· 上次 {{t}}",
-  "nextTickPrefix": "· 下轮 {{t}}"
+  "nextTickPrefix": "· 下轮 {{t}}",
+  "stackApply": "套用防護組合（UFW、fail2ban、建議檔）",
+  "stackApplyDone": "已要求套用防護組合",
+  "stackApplyHint": "會啟用 UFW 並套用 fail2ban 與建議防護檔。遠端面板請先確認不會把自己鎖在外面。",
+  "cannotBanSelf": "不可封锁 {{ip}} — 这是本机、你的登录 IP 或 ignoreip",
+  "selfIp": "本主机",
+  "selfHostIp": "主机IP",
+  "selfLoginIp": "您的登录IP",
+  "showZeroScore": "显示 0 分",
+  "hideZeroScore": "隐藏 0 分",
+  "freshnessNa": "不适用",
+  "geoDraftOnly": "政策未启用 — 保存只写草稿，Nginx 不会执行，直到你勾选启用。",
+  "selectAllCountriesWarn": "封锁名单模式下全选全部国家？这可能把本机与你的登录所在地一并封锁。",
+  "badgeRecommendPreset": "以目前威胁水平，建议改用更强预设",
+  "badgeAutomationOn": "自动化已开启",
+  "badgeBanCount": "目前封锁数",
+  "badgeGeoOn": "Geo 准入政策已启用",
+  "badgeGeoNotReady": "GeoIP 数据库尚未就绪",
+  "badgeIntelSignals": "目前计分的信号数",
+  "signalActive": "运行中",
+  "signalInactive": "未启用",
+  "signalJails": "{{n}} 个 jail",
+  "dbReadyHint": "已有 MMDB 文件",
+  "dbNotReadyHint": "请先下载 GeoIP 数据库",
+  "staleHint": "上次成功更新是否已超过 7 日",
+  "statSuspects": "可疑IP",
+  "scoreBasisHint": "威胁评分使用防火墙、fail2ban 禁止量和请求率信号——与英特尔嫌疑人列表的计数不同。",
+  "geoNeedDb": "GeoIP 数据库丢失 - 首先更新 MMDB 文件",
+  "colHits": "次数",
+  "col429": "429",
+  "topIpsTitle": "热点 IP",
+  "hitsCount": "{{n}} 次",
+  "sampleWindowHint": "计数来自当前 access 与 auth 样本窗口，不是完整日志文件。",
+  "statSuspectsSplit": "{{actionable}} actionable / {{total}} listed",
+  "suspectActionableCount": "Actionable IPs {{count}}",
+  "uaNeedZones": "Set a Cloudflare zone first",
+  "banConfirmTitle": "Ban {{ip}}?",
+  "banConfirmDesc": "This IP will be blocked on the host. Confirm it is not a current panel or session address.",
+  "ufwOff": "UFW (off)",
+  "ufwOffHint": "UFW is not active — fail2ban is the usable target.",
+  "whitelistSyncHint": "{{n}} panel entries · fail2ban ignoreip sync: {{sync}}",
+  "whitelistSyncOn": "on",
+  "whitelistSyncOff": "off (lists may differ)",
+  "draftBadge": "Draft",
+  "banIsSelf": "This IP matches the current panel source or this host.",
+  "banNotSelf": "This IP is not the current panel source.",
+  "geoSourceLocal": "Local GeoIP library (sapics + DB-IP)",
+  "nginxPreviewHint": "Nginx snippet this preset would write (preview only):",
+  "modeValue": {
+    "normal": "Normal",
+    "degraded": "Degraded",
+    "ddos-protection": "DDoS protection",
+    "offline": "Offline"
+  },
+  "wlRemovedUndo": "Removed {{ip}} from the allow list. Undo within 5 seconds.",
+  "undo": "Undo",
+  "banSelectedConfirmTitle": "Ban {{count}} selected IPs?",
+  "banSelectedConfirmDesc": "These addresses will be blocked on the host: {{ips}}",
+  "freshnessMissing": "No database",
+  "freshnessStale": "Stale",
+  "freshnessFresh": "Current"
 }

package/locales/zh-CN/publicFiles.json

@@ -28,5 +28,18 @@
   "diskRoot": "磁盘根目录",
   "filesInRoot": "条目数",
   "managedConf": "管理 conf",
-  "systemConf": "系统 conf.d"
+  "systemConf": "系统 conf.d",
+  "notes": {
+    "noManagedConf": "尚无托管 Nginx 配置 — 单击“应用”",
+    "notSynced": "托管conf存在，但不在/etc/nginx/conf.d下——使用YSK_EXECUTE再次以root身份申请"
+  },
+  "autoindex": "目录列表（autoindex）",
+  "liveSystemConf": "现行系统配置：{{path}}",
+  "publicRootNote": "公开根目录：{{path}}",
+  "applyConfirmTitle": "套用公开文件站点？",
+  "applyConfirmDesc": "写入 Nginx server_name {{name}} 并重载 Nginx。",
+  "serverNameMismatch": "现行配置为 {{live}}；表单为 {{draft}}。套用后会覆盖。",
+  "executeFlag": "Execute",
+  "asRoot": "Root",
+  "statusDraft": "Draft / not applied"
 }

package/locales/zh-CN/rbac.json

@@ -80,7 +80,13 @@
     "auditExport": "审计导出",
     "securityApiKeysAdmin": "API 密钥管理",
     "networkBrowse": "主機代瀏覽",
-    "networkVnc": "VNC 远程桌面管理"
+    "networkVnc": "VNC 远程桌面管理",
+    "validatorsRead": "验证者节点（读取）",
+    "validatorsManage": "验证者节点管理",
+    "validatorsWipe": "验证者节点清空数据",
+    "dockerRead": "Docker（读取）",
+    "dockerManage": "Docker 管理",
+    "dockerWipe": "Docker 删除／清理"
   },
   "aboutRoles": "角色说明（出厂默认）",
   "aboutRolesBody": "角色决定默认权限；用户可再覆盖个别能力。",
@@ -96,5 +102,12 @@
   "capabilitiesHint": "勾选此角色可用的功能。橙点表示与系统默认不同。",
   "enabledCount": "已开 {{enabled}}／{{total}}",
   "bandAboveMax": "高于最高等级",
-  "dirtyHint": "已自定义（与系统默认不同）"
+  "dirtyHint": "已自定义（与系统默认不同）",
+  "unsaved": "未储存",
+  "unsavedHint": "此角色有未储存变更",
+  "nothingToSave": "没有要储存的变更",
+  "saveRole": "储存「{{role}}」政策",
+  "discardTitle": "放弃未储存政策？",
+  "discardDesc": "转到另一个角色会丢弃未储存的权限变更。",
+  "roleUnavailable": "Not available for this role"
 }