ysk-server-shared 1.0.0 → 1.1.9

package/locales/zh-HK/backups.json

@@ -14,6 +14,7 @@
   "backupFiles": "備份檔",
   "projects": "專案",
   "lastAll": "上次全部",
+  "latestFile": "最新備份檔",
   "remote": "遠端",
   "withBackups": "有備份專案",
   "ops": "操作",
@@ -27,6 +28,10 @@
   "preview": "預覽",
   "restoreWeb": "還原網站檔案",
   "restoreFull": "完整還原",
+  "restoreFullTitle": "用此封存覆寫專案檔案與資料庫 — 請輸入檔名確認",
+  "restoreWebTitle": "只還原此封存的網站檔案",
+  "previewTitle": "預覽還原，不寫入",
+  "partialSkipped": "部分成功 — 有專案被略過",
   "delete": "刪除",
   "opsTitle": "操作",
   "opsHint": "0 個專案或全部略過 = 成功；真正有試過備而失敗先算失敗",
@@ -81,6 +86,7 @@
   "endpointOptional": "端點（可選）",
   "localMirror": "本機鏡像路徑",
   "remotePath": "遠端路徑",
+  "remotePathHint": "相對遠端用戶家目錄（或 SFTP chroot）。「.」即該家目錄。",
   "resticTitle": "Restic 增量備份",
   "resticDesc": "可選：系統路徑須有 Restic 指令。啟用後必須設定密碼（不會使用預設密碼）。",
   "enableRestic": "啟用 Restic",
@@ -108,8 +114,24 @@
   "cancel": "取消",
   "deleteFailed": "刪除失敗",
   "deleted": "已刪除",
-  "deleteTitle": "刪除備份檔？",
-  "deleteDesc": "永久刪除 {{name}}",
+  "deleteTitle": "移至回收區？",
+  "deleteDesc": "將 {{name}} 移至回收區。7 日後永久刪除。",
+  "tabTrash": "回收區",
+  "trashTitle": "回收區（{{count}}）",
+  "trashSub": "刪除的備份會在此保留 7 日，之後永久移除。",
+  "trashEmpty": "回收區是空的",
+  "trashEmptyDesc": "刪除的備份檔會在此保留 7 日。",
+  "trashRestore": "還原",
+  "trashPurge": "永久刪除",
+  "trashEmptyAll": "清空回收區",
+  "trashExpires": "到期 {{at}}",
+  "trashPurgeTitle": "永久刪除此備份？",
+  "trashPurgeDesc": "永久刪除 {{name}}。無法復原。",
+  "trashEmptyTitle": "清空回收區？",
+  "trashEmptyDescConfirm": "永久刪除 {{count}} 個備份檔。請輸入件數確認。",
+  "trashRestored": "已從回收區還原",
+  "trashPurged": "已永久刪除",
+  "trashedOk": "已移至回收區",
   "resticSafeTitle": "Restic 還原到安全目錄？",
   "resticSafeDesc": "還原 {{snapshot}} 到專案 {{project}} 的 .Restic-還原-* 目錄",
   "resticRestoreDone": "Restic 還原完成",
@@ -120,7 +142,7 @@
   "resticOverwriteDone": "Restic 覆寫 主目錄 完成",
   "opsResult": "操作結果",
   "filesTitle": "備份檔案 ({{count}})",
-  "filesSub": "管理目錄 封存 · 下載需登入 · 還原有 預覽試行／網站／完整",
+  "filesSub": "備份檔存在面板資料目錄。下載需登入；還原可先預覽，或只還原網站，或完整還原。",
   "backupAllBtn": "全部備份",
   "yes": "是",
   "no": "否",
@@ -129,5 +151,18 @@
   "remotePushSub": "本地 封存 成功後可推送到 SFTP、本機路徑或 S3",
   "accessKey": "存取金鑰",
   "secretKey": "密鑰",
-  "overwriteConfirmHint": "輸入 OVERWRITE 確認覆寫"
+  "overwriteConfirmHint": "輸入 OVERWRITE 確認覆寫",
+  "testRemote": "測試目的地",
+  "testRemoteHint": "會連線遠端主機並寫入測試檔，並非只讀探測。",
+  "testRemoteDone": "遠端探測完成",
+  "testRemoteFailed": "遠端探測失敗",
+  "resticRepoPh": "面板資料目錄／restic 庫",
+  "testDisabledHint": "請先開啟遠端推送才可測試。",
+  "identityId": "出站 SSH 身份",
+  "identityHint": "優先使用。與 /security SSH 同一金鑰庫。密碼需 sshpass。",
+  "identityNone": "無 — 用密碼或本機預設金鑰",
+  "skippedListHint": "以下專案被略過：",
+  "skippedPendingOs": "已略過 — 待建立系統用戶（主目錄不存在）",
+  "goLogs": "開啟日誌",
+  "goAbout": "備份說明"
 }

package/locales/zh-HK/btTracker.json

@@ -8,11 +8,19 @@
   "installed": "已安裝",
   "start": "啟動",
   "stop": "停止",
+  "stopTitle": "停止 Tracker — 會中斷做種與下載",
+  "stopDesc": "運行中的 Torrent 會停止 announce。對等節點會斷線，直至再次啟動。",
+  "fillPublicHost": "使用 {{host}}",
+  "fillPublicHostTitle": "把目前面板主機名填入公開 announce 主機",
   "refresh": "重新整理",
   "settings": "設定",
   "httpPort": "HTTP／WS 埠",
   "udpPort": "UDP 埠",
   "listenHost": "監聽",
+  "listenHostHint": "0.0.0.0 會聽全部位址。若不必對外，請改綁 127.0.0.1。",
+  "listenAllWarn": "Tracker 正綁定全部位址。防火牆關閉時等同對公網開放。可改綁 127.0.0.1，或在防火牆限制該埠。",
+  "bindLoopback": "只綁 127.0.0.1",
+  "bindAll": "0.0.0.0（全部）",
   "wsEnabled": "WebSocket",
   "wsEnabledHint": "",
   "autostart": "開機自啟",
@@ -21,25 +29,35 @@
   "publicAnnounceHostHint": "",
   "maxSeeds": "做種上限",
   "seederPorts": "Peer 埠",
-  "seederPortsHint": "",
+  "seederPortMin": "Peer 埠起始",
+  "seederPortMax": "Peer 埠結束",
+  "seederPortsHint": "本機做種使用的埠範圍（含上下限，常見 6881–6889）。",
   "saveSettings": "儲存",
   "applyHint": "",
   "torrents": "Torrent",
   "torrentsEmpty": "暫無 Torrent",
-  "torrentsEmptyHint": "於「檔案」建立 BT 分享",
+  "torrentsEmptyHint": "加入 .torrent，或於「檔案」建立 BT 分享",
   "torrentsDesc": "",
   "colName": "名稱",
-  "colHash": "Hash",
+  "colHash": "哈希值",
   "colSeeds": "種子",
   "colLeechers": "下載",
   "colStatus": "狀態",
-  "announceUrls": "Announce",
+  "announceUrls": "宣告",
   "announceDesc": "",
   "copy": "複製",
   "copied": "已複製",
   "statsTorrents": "Torrent",
-  "statsPeers": "Peers",
+  "statsLibrary": "資料庫",
+  "statsLibraryHint": "面板資料庫／檔案分享的 Torrent 列",
+  "statsTrackerLeftover": "Tracker 雜湊不在資料庫",
+  "statsTrackerLeftoverHint": "本機 Tracker 有 announce、但不在 Torrent 資料庫列的雜湊。清單見 Tracker 分頁。",
+  "leftoverHashesTitle": "Tracker 殘留雜湊",
+  "publicHostMissingLive": "Tracker 已在聽，但未設定公開 announce 主機。外網對等節點找不到此種子。",
+  "leftoverHashesHint": "唯讀。這些 announce 不是資料庫或分享列。",
+  "statsPeers": "同行",
   "statsAnnounces": "Announce",
+  "statsAnnouncesHint": "Tracker 行程收到的 announce 次數",
   "statsJobs": "任務",
   "openShares": "分享",
   "needExecute": "需要 YSK_EXECUTE 綁定埠",
@@ -103,7 +121,7 @@
   "exposureTitle": "網絡存取",
   "protoHttp": "HTTP",
   "protoWs": "WS",
-  "protoUdp": "UDP",
+  "protoUdp": "UDP協定",
   "saveOk": "已儲存",
   "saveOkRestart": "已儲存 — 請重啟 Tracker 套用埠",
   "startedOk": "已啟動",
@@ -115,5 +133,69 @@
   "udpPortSameHttp": "同 HTTP（{{port}}）",
   "udpPortClassic": "6969",
   "portSuggest8000": "8000",
-  "announceHostUnset": "—"
+  "announceHostUnset": "未設定",
+  "tabTrackers": "Tracker",
+  "addTorrent": "加入 Torrent",
+  "addTorrentTitle": "加入 Torrent",
+  "addTorrentHint": "上傳 .torrent 或貼上 magnet，再選擇儲存資料夾。檔案未齊會用 WebTorrent 下載，齊了就做種。",
+  "dropTorrent": "將 .torrent 拖放到此處",
+  "chooseFile": "或選擇檔案",
+  "magnetLabel": "磁鐵",
+  "magnetPlaceholder": "磁鐵:?xt=甕:btih:…",
+  "inspect": "讀取",
+  "extraTrackersPreview": "將額外向 {{n}} 個常用 Tracker announce",
+  "saveLocation": "儲存位置",
+  "saveRootPublic": "公開檔案",
+  "newFolder": "新資料夾",
+  "destPreview": "將寫入",
+  "startDownload": "開始下載",
+  "filterDownloading": "下載中",
+  "filterPaused": "已暫停",
+  "filterError": "錯誤",
+  "emptyDrop": "將 .torrent 拖放到此處，或選擇檔案",
+  "emptyHint": "下載會寫入你指定的資料夾；檔案已齊就直接做種。引擎是 WebTorrent，不會另外安裝下載軟件。",
+  "pause": "暫停",
+  "resume": "繼續",
+  "openFolder": "開啟資料夾",
+  "remove": "移除",
+  "removeKeep": "移除並保留檔案",
+  "removeDelete": "移除並刪除檔案",
+  "removeConfirm": "要從資料庫移除此 Torrent？",
+  "kindShare": "分享",
+  "filesInTorrent": "個檔案",
+  "extraTrackersDesc": "這裏是額外 announce。資料庫下載／做種與檔案 BT 分享都會一併通知這些 Tracker。不會取代 .torrent 原有清單，亦不會令本機 Tracker 對外開放。",
+  "extraTrackersEmpty": "未有常用 Tracker。加入 http(s)／udp／ws(s) announce URL 才可靠外站尋找 peers。",
+  "extraTrackerAdd": "加入",
+  "extraTrackerUrl": "公佈網址",
+  "extraTrackerApply": "套用到現有做種",
+  "extraTrackerApplyOk": "已套用常用 Tracker",
+  "extraEnabled": "啟用",
+  "extraTrackerBad": "URL 必須以 http://、https://、udp://、ws:// 或 wss:// 開頭",
+  "extraTrackerDup": "清單已有此 URL",
+  "extraTrackerLimit": "最多 32 個常用 Tracker",
+  "addOk": "已加入資料庫",
+  "savedTo": "儲存",
+  "folderEmpty": "沒有子資料夾",
+  "needTorrentFile": "請選擇 .torrent 檔",
+  "torrentTooBig": ".torrent 大於 8 MiB",
+  "seedStatusDownloading": "下載中",
+  "seedStatusChecking": "檢查中",
+  "seedStatusPaused": "已暫停",
+  "seedStatusQueued": "排隊中",
+  "swarmLeftover": "Tracker 紀錄另有 {{count}} 個 announce（不是資料庫 Torrent 列；來源不同）",
+  "addSourceSection": "來源",
+  "addSourceFile": "檔案",
+  "addSourceMagnet": "磁鐵",
+  "previewSection": "預覽",
+  "saveRoot": "根目錄",
+  "clearFile": "清除檔案",
+  "extraTrackersTitle": "額外 announce",
+  "extraTrackersEmptyTitle": "尚未加入額外 announce",
+  "extraEnabledCount": "{{count}} 條已啟用",
+  "extraApplyHint": "至少啟用一條才可套用到現有做種",
+  "destMode": "此資料夾的用法",
+  "seedExisting": "使用現有檔案做種",
+  "downloadNewFolder": "下載到新資料夾",
+  "destFileConflict": "此處已有檔案 {{name}}。請另選資料夾；若檔案就是此 Torrent 的內容，請選「使用現有檔案做種」。",
+  "waitingPeers": "正在等待 peers。若檔案已在此主機，請重新加入並選「使用現有檔案做種」。"
 }

package/locales/zh-HK/catalog.json

@@ -3,7 +3,7 @@
     "vsftpd": "vsftpd（FTPS）",
     "db_util": "db-util（FTP 用戶資料庫）",
     "nginx": "Nginx",
-    "certbot": "Certbot（Let's Encrypt）",
+    "certbot": "Certbot (Let's Encrypt)",
     "mysql_client": "MySQL／MariaDB 客戶端",
     "mysql_server": "MySQL 伺服器",
     "mariadb_server": "MariaDB 伺服器",
@@ -23,7 +23,7 @@
     "python": "Python",
     "go": "Go",
     "rust": "Rust",
-    "chromium": "Chromium／Chrome"
+    "chromium": "Chromium / Chrome"
   },
   "php": {
     "session": "工作階段",

package/locales/zh-HK/cdn.json

@@ -30,8 +30,64 @@
   "confWritten": "已寫入 設定檔（{{status}}）",
   "partialFail": "未全部成功（{{status}}）— 見 notes",
   "statNodes": "節點",
+  "hitNoStats": "尚無邊緣統計",
+  "loopbackOriginBlocked": "不會把回環 origin {{url}} 寫到遠端邊緣。請先改成可達的 origin。",
+  "applyFailedHint": "套用失敗",
+  "applyFailedNoNote": "沒有存下失敗原因。請再套用一次以記錄錯誤。",
+  "applyStatus": {
+    "draft": "草稿",
+    "planned": "已計劃",
+    "applying": "套用中",
+    "applied": "已套用",
+    "failed": "失敗",
+    "partial": "部分成功"
+  },
   "statSites": "站點",
-  "recentNotes": "最近 notes",
+  "statApplyFailed": "套用失敗",
+  "pillNodesSites": "節點 {{n}} · 站點 {{s}}",
+  "statOnline": "線上",
+  "statOnlineOf": "線上 {{n}}/{{total}}",
+  "colRegion": "區域",
+  "statDraining": "排空中 {{n}}",
+  "statHit": "命中率",
+  "localTest": "本機／測試",
+  "hitUnknown": "未知",
+  "lastHealthHint": "上次探活 {{at}} · {{ok}}",
+  "lastHealthNever": "尚未探活 — 請按「探活」",
+  "lastHealthFail": "探活失敗",
+  "healthLoopNeedSites": "請先新增站點",
+  "nodeStatus": {
+    "online": "在線",
+    "offline": "離線",
+    "draining": "排空中",
+    "unknown": "未知"
+  },
+  "recentNotes": "最近記錄",
+  "previewOnlyNote": "本次僅預覽，未寫入邊緣。",
+  "statByRegion": "區域：",
+  "statByApply": "套用狀態：",
+  "col": {
+    "origin": "來源站",
+    "edges": "邊緣數",
+    "apply": "套用狀態",
+    "dns": "DNS",
+    "edgesOnline": "邊緣 線上／已套用",
+    "dnsRr": "CDN DNS 記錄"
+  },
+  "mode": {
+    "origin_pull": "回源拉取",
+    "reverse_proxy": "反向代理",
+    "static_edge": "靜態邊緣"
+  },
+  "dnsStrategy": {
+    "multi_a": "多 A 記錄",
+    "cname": "CNAME",
+    "geo": "地區"
+  },
+  "edgesOnlineApplied": "線上 {{online}}/{{total}} · 已套用 {{applied}}",
+  "hitMiss": "命中 {{hits}}／未命中 {{misses}}",
+  "cacheBytes": "快取約 {{n}} B",
+  "hitRateUnknown": "找不到含快取狀態的存取日誌，也沒有快取目錄，因此無法估算命中率。",
   "edgeConfPreview": "Nginx 邊緣 設定檔 預覽",
   "tabs": {
     "nodes": "節點",
@@ -40,11 +96,41 @@
     "about": "說明"
   },
   "nodesTitle": "CDN 節點（{{count}}）",
-  "nodesDesc": "登記 control / origin / 邊緣 / dns。探活更新 狀態。",
+  "nodesDesc": "登記控制面／來源站／邊緣／DNS。探活會更新狀態。",
+  "offlineHint": "離線／探活失敗。若是測試殘留，可刪除此節點。",
   "colName": "名稱",
   "colRole": "角色",
   "colStatus": "狀態",
   "clearDrain": "解除 drain",
+  "drain": "排空流量",
+  "drainTitle": "停止向此邊緣派新流量",
+  "drainDesc": "Drain「{{name}}」？現有連線會待完結。",
+  "drainLastTitle": "這是最後一個邊緣 — Drain 後所有站點沒有邊緣可用",
+  "drainLastDesc": "「{{name}}」是唯一邊緣。Drain 後所有站點沒有邊緣。",
+  "clearDrainTitle": "恢復此邊緣接收新流量",
+  "clearDrainDesc": "解除「{{name}}」的 drain？",
+  "deleteNodeTitle": "刪除此 CDN 邊緣",
+  "deleteLastNodeTitle": "刪除最後一個邊緣 — 所有站點將沒有邊緣",
+  "purge": "清除",
+  "previewTitle": "預覽 nginx 設定（不寫檔）",
+  "writeConfTitle": "寫入邊緣 nginx 設定檔",
+  "applyEdgesTitle": "套用此站點到邊緣（會寫 nginx）",
+  "purgeTitle": "清除邊緣快取",
+  "dnsSyncTitle": "寫入 CDN DNS 記錄",
+  "probeDnsTitle": "探測邊緣與 DNS（唯讀）",
+  "distSslTitle": "把 TLS 材料複製到邊緣",
+  "leIssueTitle": "申請 Let’s Encrypt 憑證並分發",
+  "deleteSiteTitle": "刪除此 CDN 站點",
+  "siteOpConfirmGeneric": "對「{{name}}」執行此操作？",
+  "siteOpConfirmDesc": "站點「{{name}}」· {{action}}。可能改動 nginx、DNS 或憑證。",
+  "siteOpConfirm": {
+    "apply": "套用此站點到邊緣？",
+    "render": "寫入此站點的 nginx 設定？",
+    "purge": "清除此站點快取？",
+    "dns-sync": "同步此站點 DNS？",
+    "dist": "分發 TLS 到邊緣？",
+    "issue": "申請 Let’s Encrypt 並分發？"
+  },
   "emptyNodesTitle": "尚未登記 CDN 節點",
   "emptyNodesDesc": "請使用右上角「+ 新增節點」登記 邊緣，再建立站點。",
   "sitesTitle": "CDN 站點（{{count}}）",
@@ -115,5 +201,7 @@
   "deleteNodeDesc": "將刪除 CDN 節點「{{name}}」。",
   "deleteSiteDesc": "將刪除 CDN 站點「{{name}}」。",
   "deleteSiteC1": "站點政策與邊緣關聯",
-  "deleteSiteC2": "已下發的 nginx 設定需另行清理或重新套用"
+  "deleteSiteC2": "已下發的 nginx 設定需另行清理或重新套用",
+  "statOffline": "離線 {{n}}",
+  "statHitRate": "命中率 {{v}}"
 }

package/locales/zh-HK/cli.json

@@ -2,17 +2,17 @@
   "unknownCommand": "未知命令：{{command}}\n執行 `{{cli}} help`",
   "usagePrefix": "用法：",
   "security": {
-    "help": "用法：ysk-server security 狀態\n ysk-server security sessions 列表|revoke|revoke-others [--用戶 U]\n ysk-server security api-keys 列表|建立|delete …",
-    "sessionsHelp": "用法：ysk-server security sessions 列表 [--用戶 U]\n ysk-server security sessions revoke --識別碼 PREFIX [--用戶 U]\n ysk-server security sessions revoke-others [--用戶 U] [--keep-權杖 T]",
-    "apiKeysHelp": "用法：ysk-server security api-keys 列表\n ysk-server security api-keys 建立 --名稱 N [--用戶 U] [--scope full|read]\n ysk-server security api-keys delete --識別碼 KEY_ID",
-    "noUser": "找不到用戶。請先建立管理員，或傳入 --用戶 <名稱|識別碼>",
+    "help": "用法：ysk-伺服器安全狀態\n       ysk-server 安全會話清單|撤銷|撤銷-其他 [--user U]\n       ysk-server 安全性 api 金鑰清單|建立|刪除 …",
+    "sessionsHelp": "用法：ysk-server 安全會話清單 [--user U]\n       ysk-server 安全會話撤銷 --id PREFIX [--user U]\n       ysk-伺服器安全會話撤銷其他 [--user U] [--keep-token T]",
+    "apiKeysHelp": "用法：ysk-server 安全 api 金鑰列表\n       ysk-server security api-keys create --name N [--user U] [--scope full|read]\n       ysk-伺服器安全 API 金鑰刪除 --id KEY_ID",
+    "noUser": "找不到用戶。請先建立管理員，或傳入 --user <名稱或識別碼>。",
     "tokenOnce": "權杖 只顯示一次 — 請妥善保存",
-    "sessionRevokeUsage": "用法：ysk-server security sessions revoke --識別碼 <sessionIdPrefix> [--用戶 U]",
-    "apiKeyDeleteUsage": "用法：ysk-server security api-keys delete --識別碼 KEY_ID"
+    "sessionRevokeUsage": "用法：ysk-server 安全會話撤銷 --id <sessionIdPrefix> [--user U]",
+    "apiKeyDeleteUsage": "用法：ysk-server security api-keys delete --id KEY_ID"
   },
   "help": {
     "blurb": "控制平面 命令列 — 人工智能 代理 請優先用 --json。\n文件：docs/代理/README.md · docs/cli/reference.md · docs/代理/commands.json",
-    "main": "{{product}} ({{cli}}) v{{version}}\n\n控制平面 命令列 — 人工智能 代理 請優先用 --json。\n文件：docs/代理/README.md · docs/cli/reference.md · docs/代理/commands.json\n\n用法：\n {{cli}} <command> [options]\n\n命令：\n setup 初始化 dataDir + 管理員\n update 自我更新檢查／套用\n serve HTTP 介面 + Web UI\n system 服務單元-安裝 安裝 ysk-server.service [--啟用]\n tools 工具列表；tools run --tool <名稱> [--預覽試行]\n ask 自然語言 → 人工智能 計劃 [--執行]\n 專案 列表|get|建立|deploy|stop|health|備份|template\n 備份 all|列表|狀態|還原|delete|schedule|control-plane|settings|Restic\n templates 應用範本\n hosting nginx|dns|db|firewall 輔助\n dns zone|zones（人工智能 別名 → hosting dns-*）\n 日誌 sources|query|系統日誌|overview\n 主機 overview|metrics（唯讀）\n nginx 狀態|列表|test|同步\n ssl 列表|get（憑證）\n db-叢集 列表|get|建立|計劃（HA 先計劃）\n ssh-金鑰 列表|建立|匯入|public|export|安裝|delete（遠端登入 身分庫）\n ssh-2fa 列表|enroll|confirm|安裝|pam|retire（遠端登入 登入 TOTP ≠ 面板 雙重驗證）\n services 主機服務矩陣（系統控制 探測）\n defense | protection 狀態|封鎖|unban|whitelist\n security 狀態|sessions|api-keys（雙重驗證 · 撤銷工作階段 · 介面 金鑰）\n cdn nodes|sites|render|套用|清除|探測|dashboard|health-loop|from-project\n agents 運行時s|機群 列表|commands|登記（面板 + 邊緣）\n 代理 run 外送 機群 輪詢（實驗）\n store 狀態|export|匯入|migrate（json|sqlite|postgres document 後端）\n 檔案 列表|read|write|mkdir|rm|stat|rename|copy|move|chmod|trash|shares（沙箱）\n 定時工作 列表|建立|delete|啟用|停用|run|安裝|狀態\n 電郵 domains|mailboxes|deliverability|初始化|dns（面板對等）\n health 本機模式快照或 --url http://主機:埠/health\n 就緒檢查 | doctor 生產就緒（誠實）\n migrate inventory|主機|post|狀態|resume（整機遷移）\n version | help\n\n全域：\n --json JSON 標準輸出（AI）\n --data-dir 路徑\n --config 路徑\n --help | --version\n\n結束碼：0 成功 · 1 錯誤 · 2 驗證 · 3 阻擋 · 4 找不到 · 5 主機錯誤\n\n安全：\n 危險操作預設 預覽試行（只出計劃）。\n 傳 --執行（別名 --套用）+ 環境變數 系統變更權限已開啟 才改主機。\n\n例子：\n {{cli}} 就緒檢查 --json\n {{cli}} 主機 --json\n {{cli}} nginx 狀態 --json\n {{cli}} ssl 列表 --json\n {{cli}} 專案 get --識別碼 UUID --json\n {{cli}} defense 封鎖 --ip 1.2.3.4 --json # 預覽試行 計劃\n {{cli}} 專案 列表 --json\n {{cli}} 日誌 query --source 系統日誌: --lines 100 --json\n {{cli}} tools --json"
+    "main": "YSK Server 命令列。指令與旗標一律為英文；--locale 只翻譯說明文字。\n\n{{product}} ({{cli}}) v{{version}}\n\nControl plane CLI — prefer --json for AI agents.\nDocs: docs/agent/README.md · docs/cli/reference.md · docs/agent/commands.json\n\nUsage:\n  {{cli}} <command> [options]\n\nCommands:\n  setup                 Init dataDir + admin\n  update                Self-update check/apply\n  serve                 HTTP API + Web UI\n  system unit-install   Install ysk-server.service [--enable]\n  stack                 plans|bundles|status|install|uninstall\n  tools                 List tools; tools run --tool <name> [--dry-run]\n  ask                   NL → AI plan [--execute]\n  projects              list|get|create|deploy|stop|health|backup|template\n  users                 list|create|totp\n  packages              list\n  rbac                  list|show\n  audit                 list\n  backup                all|list|status|restore|delete|schedule|control-plane|settings|restic\n  templates             App templates\n  hosting               nginx|dns|db|firewall helpers\n  dns                   zone|zones|lookup\n  logs                  sources|query|journal|overview\n  host                  overview|metrics (read-only)\n  nginx                 status|list|test|sync\n  ssl                   list|get (certificates)\n  db-cluster            list|get|create|plan (HA plan-first)\n  ssh-key               list|create|import|public|export|install|delete (SSH identity vault)\n  ssh-2fa               list|enroll|confirm|install|pam|retire (SSH login TOTP ≠ panel 2FA)\n  services              Host service matrix (systemctl probe)\n  defense | protection  status|ban|unban|whitelist\n  security              status|sessions|api-keys (2FA flags · session revoke · API keys)\n  cdn                   nodes|sites|render|apply|purge|probe|dashboard|health-loop|from-project\n  agents                runtimes|fleet list|commands|register (panel + edge)\n  agent run             Outbound fleet poller (experimental)\n  store                 status|export|import|migrate (json|sqlite|postgres document backends)\n  files                 list|read|write|mkdir|rm|stat|rename|copy|move|chmod|trash|shares (sandbox)\n  cron                  list|create|delete|enable|disable|run|install|status\n  email                 domains|mailboxes|deliverability|bootstrap|dns (panel parity)\n  health                Local mode snapshot or --url http://host:port/health\n  notifications         list\n  readiness | doctor    Production readiness (honest)\n  migrate               inventory|host|post|status|resume|orphan-homes (full host migrate)\n  vpn                   WireGuard / OpenVPN\n  vnc                   accounts|clients|share\n  apache                sites|settings\n  network               ifaces|exposure|real-ip\n  real-ip               CDN Real IP\n  updates               inventory|apply\n  software              list|install|uninstall\n  db                    MySQL / MariaDB / PostgreSQL\n  redis                 status|keys|get|set\n  ftp                   accounts|status\n  runtimes              list|install\n  bt-tracker            status|settings\n  validators            list|chains|disk|get (Beta)\n  docker                status|ps|images|compose|prune (engine)\n  version | help\n\nGlobal:\n  --json                JSON stdout (AI)\n  --data-dir PATH       also --data-dir=PATH or YSK_DATA_DIR\n  --config PATH\n  --locale CODE         CLI language (default en). Also YSK_LOCALE.\n                        Codes: en zh-HK zh-CN ja ko hi es ar fr bn pt id ur\n  --limit N --offset N  Slice large JSON lists (software / updates / host metrics / rbac)\n  --help | --version\n\nExit: 0 ok · 1 error · 2 validation · 3 blocked · 4 not found · 5 host error\n\nSafety:\n  Dangerous ops default to dry-run (plan only).\n  Pass --execute (alias --apply) + env YSK_EXECUTE=1 to mutate host.\n  Command names and flags are always English. --locale only translates messages.\n\nExamples:\n  {{cli}} readiness --json\n  {{cli}} host --json\n  {{cli}} nginx status --json\n  {{cli}} ssl list --json\n  {{cli}} projects get --id UUID --json\n  {{cli}} defense ban --ip 1.2.3.4 --json          # dry-run plan\n  {{cli}} projects list --json\n  {{cli}} --locale=zh-HK help\n  {{cli}} logs query --source journal: --lines 100 --json\n  {{cli}} tools --json"
   },
   "usage": {
     "tools": {
@@ -602,7 +602,7 @@
         "--name": {
           "name": {
             "--domain": {
-              "66e857": "用法： ysk-server 專案 建立 --名稱 <名稱> [--網域 d] [--運行時 node|php|static|python|go|rust] [--template 識別碼]"
+              "66e857": "用法： ysk-server projects create --name <name> [--domain d] [--runtime node|php|static|python|go|rust] [--template id] [--git-url URL] [--branch B] [--create-dns] [--create-mail] [--server-ip A.B.C.D] [--server-ipv6 ADDR]"
             }
           }
         }
@@ -620,7 +620,7 @@
         "--id": {
           "id": {
             "--git-url": {
-              "a513f5": "用法： ysk-server 專案 git-deploy --識別碼 識別碼 [--git-url URL] [--branch main] [--no-redeploy] [--depth 1] [--entry f]"
+              "a513f5": "用法： ysk-server 專案 git-deploy --識別碼 識別碼 [--git-url URL] [--branch|--ref main] [--no-redeploy] [--depth 1] [--entry f]"
             }
           }
         }
@@ -638,7 +638,7 @@
         "get": {
           "create": {
             "deploy": {
-              "253b48": "用法： ysk-server 專案 列表|get|建立|deploy|git-deploy|stop|備份|template|health [options]\n deploy --識別碼 UUID [--entry f] [--埠 N] [--fpm|--builtin] [--重新載入]\n git-deploy --識別碼 UUID [--git-url URL] [--branch B] [--no-redeploy]"
+              "253b48": "用法： ysk-server projects list|get|create|deploy|git-deploy|git|stop|backup|template|ftp|health [options]\n  deploy --id UUID [--entry f] [--port N] [--fpm|--builtin] [--reload]\n  git-deploy --id UUID [--git-url URL] [--branch|--ref B] [--no-redeploy]\n  git status|log|fetch|checkout|reset|auth|hook|deploy --id UUID [--ref R] [--unshallow] [--yes]\n  git auth --id UUID --token T|--deploy-key|--pin-host\n  git hook --id UUID --enable|--rotate|--disable\n  ftp --id UUID --password P [--user NAME] [--home app|root]\n"
             }
           }
         }
@@ -882,7 +882,7 @@
           },
           "status": {
             "bans": {
-              "a8d96b": "用法： {{CLI_NAME}} defense 狀態|bans|suspects|封鎖|unban|whitelist|stack-套用|fail2ban|firewall|timeline|預設方案s [--json]\n` +\n ` bans [--q text] [--source fail2ban|面板|ufw|auto]\n` +\n ` suspects [--q text]\n` +\n ` stack-套用 [--執行] # UFW + fail2ban + current 預設方案\n` +\n ` fail2ban | firewall # deep probes (honest)\n` +\n ` timeline [--limit N] [--q text]\n` +\n ` 預設方案s # 列表 + active預設方案"
+              "a8d96b": "用法： {{CLI_NAME}} defense 狀態|bans|suspects|封鎖|unban|whitelist|stack-套用|fail2ban|firewall|timeline|預設方案s [--json]\n bans [--q text] [--source fail2ban|面板|ufw|auto]\n suspects [--q text]\n stack-套用 [--執行] # UFW + fail2ban + current 預設方案\n fail2ban | firewall # deep probes (honest)\n timeline [--limit N] [--q text]\n 預設方案s # 列表 + active預設方案"
             }
           }
         }
@@ -904,7 +904,7 @@
         "--username": {
           "u": {
             "--password": {
-              "7145c7": "用法： ysk-server users 建立 --username <u> --密碼 <p> [--role operator|viewer|管理員] [--套件-識別碼 識別碼]"
+              "7145c7": "用法： ysk-server users 建立 --username <u> --密碼 <p> [--role operator|viewer|管理員] [--套件-識別碼 識別碼] [--locale zh-HK]"
             }
           }
         }
@@ -1048,7 +1048,7 @@
       }
     },
     "x": {
-      "972912": "用法：\n ysk-server migrate inventory [--data-dir 路徑] --json\n ysk-server migrate 主機 --目標 管理員@IP [--identity-檔案 路徑|--identity-識別碼 識別碼|--密碼 PW] --執行 [--maintenance] [--force-wipe-目標]\n ysk-server migrate post --job 識別碼 --data-dir 路徑 --執行 # on 目標\n ysk-server migrate 狀態 [--job 識別碼]\n ysk-server migrate resume --job 識別碼 --執行"
+      "972912": "用法：\n  ysk-server migrate inventory [--data-dir PATH] --json\n  ysk-server migrate host --target root@IP [--identity-file PATH|--identity-id ID|--password PW] --execute [--maintenance] [--force-wipe-target]\n  ysk-server migrate post --job ID --data-dir PATH --execute   # 在目標機\n  ysk-server migrate status [--job ID]\n  ysk-server migrate resume --job ID --execute\n  ysk-server migrate orphan-homes [--data-dir PATH] --json\n  ysk-server migrate orphan-homes --path /home/ysk-server-UUID --confirm PATH --execute\n"
     },
     "hostingHelp": "用法：ysk-server hosting <sub>\n 危險操作預設 預覽試行；加 --執行（+ 系統變更權限已開啟）才真正套用\n nginx | nginx-同步 [--執行]\n redis-provision | postgres-provision | mysql-provision [--執行]\n dns-zone --zone X --ip A.B.C.D [--ipv6 X:X::X] [--validate] [--重新載入]\n dns-zones | powerdns-狀態 | powerdns-安裝 [--安裝|--執行]\n powerdns-load --zone X --ip A.B.C.D [--load|--執行]\n 電郵-套用 --網域 X [--安裝|--執行]\n 電郵-mailbox --網域 X --local 用戶 [--密碼 P] [--ip A.B.C.D] [--system]\n ftps-套用 --網域 X [--安裝|--執行]\n 運行時s | 運行時-安裝 --kind node|php|python|go|rust --version V [--安裝|--執行]\n dovecot-passdb --網域 X | --all\n webmail-套用 --網域 webmail.example.com [--下載]\n public-檔案 --網域 檔案.example.com [--重新載入]\n 電郵-初始化 --網域 example.com --ip A.B.C.D [--安裝|--執行]\n 電郵-deliverability --網域 example.com # PTR/DNSBL/warmup 誠實報告\n firewall-套用 [--smtp] [--執行]",
     "logsQuery": "用法：{{CLI_NAME}} 日誌 query --source <識別碼> [--lines N] [--grep G] [--since 1h] [--priority err]\n source 例：系統日誌: 系統日誌:nginx.service 檔案:syslog project:<uuid>\n {{CLI_NAME}} 日誌 sources --json\n {{CLI_NAME}} 日誌 系統日誌 [--unit nginx.service] --json"
@@ -1064,7 +1064,7 @@
     "--root": {
       "must": {
         "be": {
-          "a84834": "--root 必須係 public 或 project:<id>\n"
+          "a84834": "--root 必須是 public 或 project:<id>\n"
         }
       }
     },
@@ -1083,7 +1083,7 @@
     "action": {
       "must": {
         "be": {
-          "ba14c1": "action 必須係 list|add|remove\n"
+          "ba14c1": "action 必須是 list|add|remove\n"
         }
       }
     },

package/locales/zh-HK/common.json

@@ -1,4 +1,5 @@
 {
+  "all": "全部",
   "cancel": "取消",
   "confirm": "確認",
   "refresh": "重新整理",
@@ -21,11 +22,15 @@
   "languageNative": "繁體中文",
   "language": "語言",
   "switchLanguage": "切換語言",
+  "showPassword": "顯示",
+  "hidePassword": "隱藏",
   "searchGlobal": "搜尋頁面與資源…",
   "menu": "選單",
   "processing": "處理中…",
+  "unavailable": "目前不可用",
   "retry": "再試",
   "success": "成功",
+  "ok": "正常",
   "failed": "失敗",
   "blocked": "無法執行",
   "status": "狀態",
@@ -35,7 +40,9 @@
   "noData": "沒有資料",
   "input": "輸入",
   "pleaseEnter": "請輸入 {{value}}",
+  "required": "必填",
   "about": "說明",
+  "more": "更多",
   "operation": "操作",
   "delete": "刪除",
   "edit": "編輯",
@@ -121,5 +128,6 @@
   "show": "顯示",
   "done": "完成",
   "next": "下一步",
-  "previous": "上一步"
+  "previous": "上一步",
+  "redirectedTo": "已轉到 {{to}}（原為 {{from}}）"
 }

package/locales/zh-HK/cron.json

@@ -58,7 +58,7 @@
   "cronExpr": "定時工作表 表達式",
   "cronExprHint": "五欄：分 時 日 月 週（0=日）",
   "cronExprPh": "定時工作表 表達式",
-  "needLinuxUser": "所選專案沒有 Linux 用戶 — 請先到專案資源建立系統用戶",
+  "needLinuxUser": "所選專案沒有 Linux 用戶 — 請先到專案「隔離」建立系統用戶",
   "boundProject": "已綁專案；執行用戶 {{user}}（指令會以 runuser 隔離）",
   "systemJob": "系統工作；執行用戶 {{user}}",
   "writtenManage": "已寫入管理 定時工作表（尚未安裝到系統）",
@@ -66,9 +66,9 @@
   "createdManageOnly": "已建立（僅管理檔）",
   "installedSystem": "已安裝到系統",
   "hostSynced": "系統已同步",
-  "hostNotInstalled": "未裝到系統",
+  "hostNotInstalled": "面板定時工作尚未寫入系統 crontab",
   "statusUnknown": "狀態未知",
-  "systemCrontab": "系統 定時工作表",
+  "systemCrontab": "面板 crontab 同步",
   "synced": "已同步",
   "managedLines": "管理行數",
   "jobsOnlyManage": "工作只寫在管理檔。系統 定時工作表",
@@ -76,6 +76,7 @@
   "hostNoYsk": "尚未安裝或無 YSK 項目",
   "pressInstall": "有已登記但未寫入系統的工作 — 請按「安裝到系統」。",
   "jobsTab": "工作 ({{count}})",
+  "jobsTabPending": "工作 ({{count}}) · 待安裝 {{pending}}",
   "registeredJobs": "已登記工作 ({{count}})",
   "jobsSub": "管理檔項目 · 改動後需「安裝到系統」才生效",
   "addJob": "+ 新增工作",
@@ -112,7 +113,7 @@
   "absPath": "建議絕對路徑",
   "commonCmds": "常用指令（{{runtime}}）",
   "actualPreview": "實際寫入 定時工作表（預覽）",
-  "noLinuxName": "此專案未有 Linux 用戶名 — 請到專案「資源」建立系統用戶後再試。",
+  "noLinuxName": "此專案未有 Linux 用戶名 — 請到專案「隔離」建立系統用戶後再試。",
   "afterCreate": "建立後：",
   "projectParen": "（專案 {{name}}）",
   "systemParen": "（系統級，未綁專案）",
@@ -135,5 +136,36 @@
   "sourceHost": "主機",
   "noHostJobs": "此範圍沒有 crontab 工作",
   "hostPartial": "無法完整讀取所有用戶 crontab（需要 root）",
-  "pendingInstall": "待安裝到系統（{{count}}）"
+  "pendingInstall": "待安裝到系統（{{count}}）",
+  "pendingStale": "已 {{days}} 日未寫入系統 crontab，不會執行。",
+  "willNotRun": "未寫入系統 crontab — 不會執行。",
+  "hourRange": "小時必須介乎 0–23。",
+  "minuteRange": "分鐘必須介乎 0–59。",
+  "hoursCommon": "常用小時",
+  "hoursAll": "全部小時",
+  "invalidExpr": "不是有效的 5 欄 cron 表達式。",
+  "needCommand": "請填寫指令。",
+  "needUser": "請選擇專案或系統用戶。",
+  "hostCounts": "主機行數",
+  "hostCountsVal": "{{ysk}} · 其他 {{other}} · 合共 {{total}}",
+  "hostYskYes": "已有面板行",
+  "hostYskNo": "尚無面板行",
+  "emptyHostCrontab": "用戶 {{user}} 尚未有 crontab。",
+  "writtenOnHost": "已寫入",
+  "registeredJobsChip": "已登記",
+  "registeredVsWritten": "已在面板登記 vs 已寫入主機 crontab",
+  "installPreviewTitle": "安裝到系統前預覽",
+  "installPreviewDesc": "會把 YSK 區塊合併入主機 crontab，不會覆寫非 YSK 行。",
+  "installPreviewMerge": "安裝會寫入 YSK Server crontab merge 區塊，不會整份取代 host crontab。",
+  "installPreviewEmpty": "沒有待安裝工作 — 仍會重新整理 YSK 區塊。",
+  "editJobTitle": "編輯工作",
+  "editJobDesc": "變更只寫入控制面，須再安裝到系統 crontab 才生效。",
+  "saveJob": "儲存（僅管理）",
+  "panelLines": "面板行",
+  "otherLines": "非面板行",
+  "totalLines": "合計",
+  "writtenOnHostHint": "已寫入主機 crontab 的行",
+  "registeredJobsHint": "已在面板登記的工作（含待安裝）",
+  "pendingInstallCount": "{{n}} 項待安裝",
+  "systemJobBadge": "未綁專案 · 系統用戶"
 }