ysk-server-shared 1.0.0 → 1.1.9

package/locales/en/backups.json

@@ -14,6 +14,7 @@
   "backupFiles": "Backup files",
   "projects": "Projects",
   "lastAll": "Last all",
+  "latestFile": "Latest archive",
   "remote": "Remote",
   "withBackups": "Projects with backups",
   "ops": "Actions",
@@ -27,6 +28,10 @@
   "preview": "Preview",
   "restoreWeb": "Restore web",
   "restoreFull": "Full restore",
+  "restoreFullTitle": "Overwrite project files and databases from this archive — type the file name to confirm",
+  "restoreWebTitle": "Restore website files only from this archive",
+  "previewTitle": "Preview restore without writing",
+  "partialSkipped": "Partial — some projects skipped",
   "delete": "Delete",
   "opsTitle": "Actions",
   "opsHint": "0 projects or all skipped = success;",
@@ -81,6 +86,7 @@
   "endpointOptional": "Endpoint (optional)",
   "localMirror": "Local mirror path",
   "remotePath": "Remote path",
+  "remotePathHint": "Relative to the remote user’s home (or SFTP chroot). “.” is that home.",
   "resticTitle": "Restic incremental",
   "resticDesc": "Optional; restic on PATH. Password required when enabled (no default)",
   "enableRestic": "Enable restic",
@@ -108,8 +114,24 @@
   "cancel": "Cancel",
   "deleteFailed": "Delete failed",
   "deleted": "Deleted",
-  "deleteTitle": "Delete backup file?",
-  "deleteDesc": "Permanently delete {{name}}",
+  "deleteTitle": "Move backup to recycle bin?",
+  "deleteDesc": "Move {{name}} to the recycle bin. Permanent delete after 7 days.",
+  "tabTrash": "Recycle bin",
+  "trashTitle": "Recycle bin ({{count}})",
+  "trashSub": "Deleted archives stay here for 7 days, then they are removed permanently.",
+  "trashEmpty": "Recycle bin is empty",
+  "trashEmptyDesc": "Deleted backup files appear here for 7 days.",
+  "trashRestore": "Restore",
+  "trashPurge": "Delete forever",
+  "trashEmptyAll": "Empty recycle bin",
+  "trashExpires": "Expires {{at}}",
+  "trashPurgeTitle": "Permanently delete this backup?",
+  "trashPurgeDesc": "Permanently delete {{name}}. This cannot be undone.",
+  "trashEmptyTitle": "Empty recycle bin?",
+  "trashEmptyDescConfirm": "Permanently delete {{count}} archive(s). Type the count to confirm.",
+  "trashRestored": "Restored from recycle bin",
+  "trashPurged": "Permanently deleted",
+  "trashedOk": "Moved to recycle bin",
   "resticSafeTitle": "restic restore to safe directory?",
   "resticSafeDesc": "Restore {{snapshot}} to project {{project}} .restic-restore-* directory",
   "resticRestoreDone": "restic restore complete",
@@ -120,7 +142,7 @@
   "resticOverwriteDone": "restic overwrite home complete",
   "opsResult": "Ops result",
   "filesTitle": "Backup files ({{count}})",
-  "filesSub": "Management-dir tar · download needs login · restore: dry-run / web / full",
+  "filesSub": "Archives live in the panel data directory. Download needs a login. Restore can preview, restore the site only, or restore everything.",
   "backupAllBtn": "Backup all",
   "yes": "Yes",
   "no": "No",
@@ -129,5 +151,18 @@
   "remotePushSub": "After local tar succeeds, push to SFTP, local path, or S3",
   "accessKey": "Access Key",
   "secretKey": "Secret Key",
-  "overwriteConfirmHint": "Type OVERWRITE to confirm overwrite"
+  "overwriteConfirmHint": "Type OVERWRITE to confirm overwrite",
+  "testRemote": "Test destination",
+  "testRemoteHint": "Connects to the remote host and writes a small probe file. Not read-only.",
+  "testRemoteDone": "Remote probe finished",
+  "testRemoteFailed": "Remote probe failed",
+  "resticRepoPh": "Panel data directory / restic-repo",
+  "testDisabledHint": "Turn on remote push before testing.",
+  "identityId": "Outbound SSH identity",
+  "identityHint": "Preferred. Same vault as /security SSH. Password needs sshpass.",
+  "identityNone": "None — password or default key",
+  "skippedListHint": "These projects were skipped:",
+  "skippedPendingOs": "Skipped — OS user / home not provisioned",
+  "goLogs": "Open logs",
+  "goAbout": "Backup notes"
 }

package/locales/en/btTracker.json

@@ -8,11 +8,19 @@
   "installed": "Installed",
   "start": "Start",
   "stop": "Stop",
+  "stopTitle": "Stop the tracker — seeding and downloads will interrupt",
+  "stopDesc": "Running torrents stop announcing. Peers disconnect until you start the tracker again.",
+  "fillPublicHost": "Use {{host}}",
+  "fillPublicHostTitle": "Fill the current panel hostname as the public announce host",
   "refresh": "Refresh",
   "settings": "Settings",
   "httpPort": "HTTP / WS port",
   "udpPort": "UDP port",
   "listenHost": "Listen",
+  "listenHostHint": "0.0.0.0 listens on every address. Prefer 127.0.0.1 unless peers must reach this host.",
+  "listenAllWarn": "Tracker is bound to all addresses. With the firewall off this is public. Bind 127.0.0.1 for local-only, or restrict the port in the firewall.",
+  "bindLoopback": "127.0.0.1 only",
+  "bindAll": "0.0.0.0 (all)",
   "wsEnabled": "WebSocket",
   "wsEnabledHint": "",
   "autostart": "Autostart",
@@ -21,12 +29,14 @@
   "publicAnnounceHostHint": "",
   "maxSeeds": "Max seeds",
   "seederPorts": "Peer ports",
-  "seederPortsHint": "",
+  "seederPortMin": "Peer port start",
+  "seederPortMax": "Peer port end",
+  "seederPortsHint": "Inclusive range used by the local seeder (typically 6881–6889).",
   "saveSettings": "Save",
   "applyHint": "",
   "torrents": "Torrents",
   "torrentsEmpty": "No torrents",
-  "torrentsEmptyHint": "Create a BT share in Files",
+  "torrentsEmptyHint": "Add a .torrent, or create a BT share in Files",
   "torrentsDesc": "",
   "colName": "Name",
   "colHash": "Hash",
@@ -38,8 +48,16 @@
   "copy": "Copy",
   "copied": "Copied",
   "statsTorrents": "Torrents",
+  "statsLibrary": "Library",
+  "statsLibraryHint": "Torrents in the panel library / file shares",
+  "statsTrackerLeftover": "Tracker hashes not in library",
+  "statsTrackerLeftoverHint": "Info-hashes the local tracker has announced that are not torrent-library rows. Listed on the Tracker tab.",
+  "leftoverHashesTitle": "Tracker leftover hashes",
+  "publicHostMissingLive": "Tracker is listening but public announce host is not set. Off-host peers cannot find this seed.",
+  "leftoverHashesHint": "Read-only. These announces are not library or share rows.",
   "statsPeers": "Peers",
   "statsAnnounces": "Announces",
+  "statsAnnouncesHint": "Announce requests seen by the tracker process",
   "statsJobs": "Jobs",
   "openShares": "Shares",
   "needExecute": "YSK_EXECUTE required to bind ports",
@@ -115,5 +133,69 @@
   "udpPortSameHttp": "Same HTTP ({{port}})",
   "udpPortClassic": "6969",
   "portSuggest8000": "8000",
-  "announceHostUnset": "—"
+  "announceHostUnset": "Not set",
+  "tabTrackers": "Trackers",
+  "addTorrent": "Add torrent",
+  "addTorrentTitle": "Add torrent",
+  "addTorrentHint": "Upload a .torrent or paste a magnet. Choose a Files folder. WebTorrent downloads missing files and seeds when complete.",
+  "dropTorrent": "Drop a .torrent here",
+  "chooseFile": "or choose a file",
+  "magnetLabel": "Magnet",
+  "magnetPlaceholder": "magnet:?xt=urn:btih:…",
+  "inspect": "Read",
+  "extraTrackersPreview": "Will also announce to {{n}} extra tracker(s)",
+  "saveLocation": "Save location",
+  "saveRootPublic": "Public files",
+  "newFolder": "New folder",
+  "destPreview": "Will write to",
+  "startDownload": "Start download",
+  "filterDownloading": "Downloading",
+  "filterPaused": "Paused",
+  "filterError": "Error",
+  "emptyDrop": "Drop a .torrent here, or choose a file",
+  "emptyHint": "Files go in the folder you pick. If they are already complete, this host seeds. Engine: WebTorrent — no extra download software.",
+  "pause": "Pause",
+  "resume": "Resume",
+  "openFolder": "Open folder",
+  "remove": "Remove",
+  "removeKeep": "Remove, keep files",
+  "removeDelete": "Remove and delete files",
+  "removeConfirm": "Remove this torrent from the library?",
+  "kindShare": "Share",
+  "filesInTorrent": "files",
+  "extraTrackersDesc": "Extra announce URLs. Library download/seed and file-share seeds use them in addition to the .torrent list. This does not open the local tracker to arbitrary swarms.",
+  "extraTrackersEmpty": "No extra trackers. Add HTTP(S), UDP, or WS(S) announce URLs so this host can find peers.",
+  "extraTrackerAdd": "Add",
+  "extraTrackerUrl": "Announce URL",
+  "extraTrackerApply": "Apply to current seeds",
+  "extraTrackerApplyOk": "Applied extra trackers",
+  "extraEnabled": "On",
+  "extraTrackerBad": "URL must start with http://, https://, udp://, ws://, or wss://",
+  "extraTrackerDup": "Already listed",
+  "extraTrackerLimit": "Maximum 32 extra trackers",
+  "addOk": "Added to library",
+  "savedTo": "Save",
+  "folderEmpty": "No subfolders",
+  "needTorrentFile": "Choose a .torrent file",
+  "torrentTooBig": ".torrent larger than 8 MiB",
+  "seedStatusDownloading": "Downloading",
+  "seedStatusChecking": "Checking",
+  "seedStatusPaused": "Paused",
+  "seedStatusQueued": "Queued",
+  "swarmLeftover": "Tracker has {{count}} announce(s) not in the library",
+  "addSourceSection": "Source",
+  "addSourceFile": "File",
+  "addSourceMagnet": "Magnet",
+  "previewSection": "Preview",
+  "saveRoot": "Root",
+  "clearFile": "Clear file",
+  "extraTrackersTitle": "Extra announce",
+  "extraTrackersEmptyTitle": "No extra trackers yet",
+  "extraEnabledCount": "{{count}} enabled",
+  "extraApplyHint": "Enable at least one tracker to apply to current seeds",
+  "destMode": "How to use this folder",
+  "seedExisting": "Seed existing files",
+  "downloadNewFolder": "Download into a new folder",
+  "destFileConflict": "A file named {{name}} already exists here. Pick another folder, or seed the existing file if it matches.",
+  "waitingPeers": "Waiting for peers. If the files are already on this host, add again and choose Seed existing files."
 }

package/locales/en/cdn.json

@@ -30,8 +30,60 @@
   "confWritten": "Conf written ({{status}})",
   "partialFail": "Not fully successful ({{status}}) — see notes",
   "statNodes": "Nodes",
+  "hitNoStats": "No edge stats yet",
+  "loopbackOriginBlocked": "Will not apply loopback origin {{url}} to a remote edge. Set a reachable origin first.",
+  "applyFailedHint": "Apply failed",
+  "applyFailedNoNote": "No stored reason. Re-apply to capture the error.",
+  "applyStatus": {
+    "draft": "Draft",
+    "planned": "Planned",
+    "applying": "Applying",
+    "applied": "Applied",
+    "failed": "Failed",
+    "partial": "Partial"
+  },
   "statSites": "Sites",
+  "statApplyFailed": "Apply failed",
+  "pillNodesSites": "{{n}} nodes · {{s}} sites",
+  "statOnline": "Online",
+  "statHit": "Hit rate",
+  "hitUnknown": "Unknown",
+  "lastHealthHint": "Last probe {{at}} · {{ok}}",
+  "lastHealthNever": "Not probed yet — run Probe",
+  "lastHealthFail": "probe failed",
+  "healthLoopNeedSites": "Add a site first",
+  "nodeStatus": {
+    "online": "online",
+    "offline": "offline",
+    "draining": "draining",
+    "unknown": "unknown"
+  },
   "recentNotes": "Recent notes",
+  "previewOnlyNote": "Preview only — nothing was written to the edges.",
+  "statByRegion": "Region: ",
+  "statByApply": "Apply status: ",
+  "col": {
+    "origin": "Origin",
+    "edges": "Edges",
+    "apply": "Apply",
+    "dns": "DNS",
+    "edgesOnline": "Edges online / applied",
+    "dnsRr": "CDN DNS records"
+  },
+  "mode": {
+    "origin_pull": "Origin pull",
+    "reverse_proxy": "Reverse proxy",
+    "static_edge": "Static edge"
+  },
+  "dnsStrategy": {
+    "multi_a": "Multiple A records",
+    "cname": "CNAME",
+    "geo": "Geo"
+  },
+  "edgesOnlineApplied": "{{online}}/{{total}} online · {{applied}} applied",
+  "hitMiss": "Hits {{hits}} / misses {{misses}}",
+  "cacheBytes": "Cache ≈ {{n}} B",
+  "hitRateUnknown": "No access log with cache status and no cache directory, so hit rate cannot be estimated.",
   "edgeConfPreview": "Nginx edge conf preview",
   "tabs": {
     "nodes": "Nodes",
@@ -40,11 +92,41 @@
     "about": "About"
   },
   "nodesTitle": "CDN nodes ({{count}})",
-  "nodesDesc": "Register control / origin / edge / dns. Probe updates status.",
+  "nodesDesc": "Register control-plane, origin, edge, and DNS nodes. Probe refreshes status.",
+  "offlineHint": "Offline — probe failed. Remove the node if it is leftover.",
   "colName": "Name",
   "colRole": "Role",
   "colStatus": "Status",
   "clearDrain": "Clear drain",
+  "drain": "Drain",
+  "drainTitle": "Stop sending new CDN traffic to this edge",
+  "drainDesc": "Drain “{{name}}”? Existing connections stay until they finish.",
+  "drainLastTitle": "This is the last edge — drain will leave every site without an edge",
+  "drainLastDesc": "“{{name}}” is the only edge. Drain it and all sites have no edge.",
+  "clearDrainTitle": "Accept new traffic on this edge again",
+  "clearDrainDesc": "Clear drain on “{{name}}”?",
+  "deleteNodeTitle": "Delete this CDN edge",
+  "deleteLastNodeTitle": "Delete the last edge — all sites will have no edge",
+  "purge": "Purge",
+  "previewTitle": "Preview nginx config (no write)",
+  "writeConfTitle": "Write edge nginx config files",
+  "applyEdgesTitle": "Apply this site to edges (writes nginx)",
+  "purgeTitle": "Purge cache on edges",
+  "dnsSyncTitle": "Write CDN DNS records",
+  "probeDnsTitle": "Probe edges and DNS (read-only)",
+  "distSslTitle": "Copy TLS materials to edges",
+  "leIssueTitle": "Issue a Let’s Encrypt certificate and distribute it",
+  "deleteSiteTitle": "Delete this CDN site",
+  "siteOpConfirmGeneric": "Run this action on “{{name}}”?",
+  "siteOpConfirmDesc": "Site “{{name}}” · {{action}}. This can change nginx, DNS, or certificates.",
+  "siteOpConfirm": {
+    "apply": "Apply this site to edges?",
+    "render": "Write nginx config for this site?",
+    "purge": "Purge cache for this site?",
+    "dns-sync": "Sync DNS for this site?",
+    "dist": "Distribute TLS to edges?",
+    "issue": "Issue Let’s Encrypt and distribute?"
+  },
   "emptyNodesTitle": "No CDN nodes yet",
   "emptyNodesDesc": "Use “+ Add node” to register an edge, then create sites.",
   "sitesTitle": "CDN sites ({{count}})",
@@ -115,5 +197,25 @@
   "deleteNodeDesc": "Deletes CDN node \"{{name}}\".",
   "deleteSiteDesc": "Deletes CDN site \"{{name}}\".",
   "deleteSiteC1": "Site policy and edge associations",
-  "deleteSiteC2": "Applied nginx configs may need separate cleanup or re-apply"
+  "deleteSiteC2": "Applied nginx configs may need separate cleanup or re-apply",
+  "statOnline": "Online",
+  "statOnlineOf": "Online {{n}}/{{total}}",
+  "colRegion": "Region",
+  "statDraining": "Draining {{n}}",
+  "statOffline": "Offline {{n}}",
+  "pillNodesSites": "{{n}} nodes · {{s}} sites",
+  "statHit": "Hit rate",
+  "localTest": "local / test",
+  "hitUnknown": "Unknown",
+  "lastHealthHint": "Last probe {{at}} · {{ok}}",
+  "lastHealthNever": "Not probed yet — run Probe",
+  "lastHealthFail": "probe failed",
+  "healthLoopNeedSites": "Add a site first",
+  "nodeStatus": {
+    "online": "online",
+    "offline": "offline",
+    "draining": "draining",
+    "unknown": "unknown"
+  },
+  "statHitRate": "Hit rate {{v}}"
 }

package/locales/en/cli.json

@@ -12,7 +12,7 @@
   },
   "help": {
     "blurb": "Control plane CLI — prefer --json for AI agents.\nDocs: docs/agent/README.md · docs/cli/reference.md · docs/agent/commands.json",
-    "main": "{{product}} ({{cli}}) v{{version}}\n\nControl plane CLI — prefer --json for AI agents.\nDocs: docs/agent/README.md · docs/cli/reference.md · docs/agent/commands.json\n\nUsage:\n  {{cli}} <command> [options]\n\nCommands:\n  setup                 Init dataDir + admin\n  update                Self-update check/apply\n  serve                 HTTP API + Web UI\n  system unit-install   Install ysk-server.service [--enable]\n  tools                 List tools; tools run --tool <name> [--dry-run]\n  ask                   NL → AI plan [--execute]\n  projects              list|get|create|deploy|stop|health|backup|template\n  backup                all|list|status|restore|delete|schedule|control-plane|settings|restic\n  templates             App templates\n  hosting               nginx|dns|db|firewall helpers\n  dns                   zone|zones (AI alias → hosting dns-*)\n  logs                  sources|query|journal|overview\n  host                  overview|metrics (read-only)\n  nginx                 status|list|test|sync\n  ssl                   list|get (certificates)\n  db-cluster            list|get|create|plan (HA plan-first)\n  ssh-key               list|create|import|public|export|install|delete (SSH identity vault)\n  ssh-2fa               list|enroll|confirm|install|pam|retire (SSH login TOTP ≠ panel 2FA)\n  services              Host service matrix (systemctl probe)\n  defense | protection  status|ban|unban|whitelist\n  security              status|sessions|api-keys (2FA flags · session revoke · API keys)\n  cdn                   nodes|sites|render|apply|purge|probe|dashboard|health-loop|from-project\n  agents                runtimes|fleet list|commands|register (panel + edge)\n  agent run             Outbound fleet poller (experimental)\n  store                 status|export|import|migrate (json|sqlite|postgres document backends)\n  files                 list|read|write|mkdir|rm|stat|rename|copy|move|chmod|trash|shares (sandbox)\n  cron                  list|create|delete|enable|disable|run|install|status\n  email                 domains|mailboxes|deliverability|bootstrap|dns (panel parity)\n  health                Local mode snapshot or --url http://host:port/health\n  readiness | doctor    Production readiness (honest)\n  migrate               inventory|host|post|status|resume (full host migrate)\n  version | help\n\nGlobal:\n  --json                JSON stdout (AI)\n  --data-dir PATH\n  --config PATH\n  --help | --version\n\nExit: 0 ok · 1 error · 2 validation · 3 blocked · 4 not found · 5 host error\n\nSafety:\n  Dangerous ops default to dry-run (plan only).\n  Pass --execute (alias --apply) + env YSK_EXECUTE=1 to mutate host.\n\nExamples:\n  {{cli}} readiness --json\n  {{cli}} host --json\n  {{cli}} nginx status --json\n  {{cli}} ssl list --json\n  {{cli}} projects get --id UUID --json\n  {{cli}} defense ban --ip 1.2.3.4 --json          # dry-run plan\n  {{cli}} projects list --json\n  {{cli}} logs query --source journal: --lines 100 --json\n  {{cli}} tools --json"
+    "main": "{{product}} ({{cli}}) v{{version}}\n\nControl plane CLI — prefer --json for AI agents.\nDocs: docs/agent/README.md · docs/cli/reference.md · docs/agent/commands.json\n\nUsage:\n  {{cli}} <command> [options]\n\nCommands:\n  setup                 Init dataDir + admin\n  update                Self-update check/apply\n  serve                 HTTP API + Web UI\n  system unit-install   Install ysk-server.service [--enable]\n  stack                 plans|bundles|status|install|uninstall\n  tools                 List tools; tools run --tool <name> [--dry-run]\n  ask                   NL → AI plan [--execute]\n  projects              list|get|create|deploy|stop|health|backup|template\n  users                 list|create|totp\n  packages              list\n  rbac                  list|show\n  audit                 list\n  backup                all|list|status|restore|delete|schedule|control-plane|settings|restic\n  templates             App templates\n  hosting               nginx|dns|db|firewall helpers\n  dns                   zone|zones|lookup\n  logs                  sources|query|journal|overview\n  host                  overview|metrics (read-only)\n  nginx                 status|list|test|sync\n  ssl                   list|get (certificates)\n  db-cluster            list|get|create|plan (HA plan-first)\n  ssh-key               list|create|import|public|export|install|delete (SSH identity vault)\n  ssh-2fa               list|enroll|confirm|install|pam|retire (SSH login TOTP ≠ panel 2FA)\n  services              Host service matrix (systemctl probe)\n  defense | protection  status|ban|unban|whitelist\n  security              status|sessions|api-keys (2FA flags · session revoke · API keys)\n  cdn                   nodes|sites|render|apply|purge|probe|dashboard|health-loop|from-project\n  agents                runtimes|fleet list|commands|register (panel + edge)\n  agent run             Outbound fleet poller (experimental)\n  store                 status|export|import|migrate (json|sqlite|postgres document backends)\n  files                 list|read|write|mkdir|rm|stat|rename|copy|move|chmod|trash|shares (sandbox)\n  cron                  list|create|delete|enable|disable|run|install|status\n  email                 domains|mailboxes|deliverability|bootstrap|dns (panel parity)\n  health                Local mode snapshot or --url http://host:port/health\n  notifications         list\n  readiness | doctor    Production readiness (honest)\n  migrate               inventory|host|post|status|resume|orphan-homes (full host migrate)\n  vpn                   WireGuard / OpenVPN\n  vnc                   accounts|clients|share\n  apache                sites|settings\n  network               ifaces|exposure|real-ip\n  real-ip               CDN Real IP\n  updates               inventory|apply\n  software              list|install|uninstall\n  db                    MySQL / MariaDB / PostgreSQL\n  redis                 status|keys|get|set\n  ftp                   accounts|status\n  runtimes              list|install\n  bt-tracker            status|settings\n  validators            list|chains|disk|get (Beta)\n  docker                status|ps|images|compose|prune (engine)\n  version | help\n\nGlobal:\n  --json                JSON stdout (AI)\n  --data-dir PATH       also --data-dir=PATH or YSK_DATA_DIR\n  --config PATH\n  --locale CODE         CLI language (default en). Also YSK_LOCALE.\n                        Codes: en zh-HK zh-CN ja ko hi es ar fr bn pt id ur\n  --limit N --offset N  Slice large JSON lists (software / updates / host metrics / rbac)\n  --help | --version\n\nExit: 0 ok · 1 error · 2 validation · 3 blocked · 4 not found · 5 host error\n\nSafety:\n  Dangerous ops default to dry-run (plan only).\n  Pass --execute (alias --apply) + env YSK_EXECUTE=1 to mutate host.\n  Command names and flags are always English. --locale only translates messages.\n\nExamples:\n  {{cli}} readiness --json\n  {{cli}} host --json\n  {{cli}} nginx status --json\n  {{cli}} ssl list --json\n  {{cli}} projects get --id UUID --json\n  {{cli}} defense ban --ip 1.2.3.4 --json          # dry-run plan\n  {{cli}} projects list --json\n  {{cli}} --locale=zh-HK help\n  {{cli}} logs query --source journal: --lines 100 --json\n  {{cli}} tools --json"
   },
   "usage": {
     "tools": {
@@ -602,7 +602,7 @@
         "--name": {
           "name": {
             "--domain": {
-              "66e857": "Usage: ysk-server projects create --name <name> [--domain d] [--runtime node|php|static|python|go|rust] [--template id]\n"
+              "66e857": "Usage: ysk-server projects create --name <name> [--domain d] [--runtime node|php|static|python|go|rust] [--template id] [--git-url URL] [--branch B] [--create-dns] [--create-mail] [--server-ip A.B.C.D] [--server-ipv6 ADDR]\n"
             }
           }
         }
@@ -620,7 +620,7 @@
         "--id": {
           "id": {
             "--git-url": {
-              "a513f5": "Usage: ysk-server projects git-deploy --id ID [--git-url URL] [--branch main] [--no-redeploy] [--depth 1] [--entry f]\n"
+              "a513f5": "Usage: ysk-server projects git-deploy --id ID [--git-url URL] [--branch|--ref main] [--no-redeploy] [--depth 1] [--entry f]\n"
             }
           }
         }
@@ -638,7 +638,7 @@
         "get": {
           "create": {
             "deploy": {
-              "253b48": "Usage: ysk-server projects list|get|create|deploy|git-deploy|stop|backup|template|health [options]\n  deploy --id UUID [--entry f] [--port N] [--fpm|--builtin] [--reload]\n  git-deploy --id UUID [--git-url URL] [--branch B] [--no-redeploy]\n"
+              "253b48": "Usage: ysk-server projects list|get|create|deploy|git-deploy|git|stop|backup|template|ftp|health [options]\n  deploy --id UUID [--entry f] [--port N] [--fpm|--builtin] [--reload]\n  git-deploy --id UUID [--git-url URL] [--branch|--ref B] [--no-redeploy]\n  git status|log|fetch|checkout|reset|auth|hook|deploy --id UUID [--ref R] [--unshallow] [--yes]\n  git auth --id UUID --token T|--deploy-key|--pin-host\n  git hook --id UUID --enable|--rotate|--disable\n  ftp --id UUID --password P [--user NAME] [--home app|root]\n"
             }
           }
         }
@@ -882,7 +882,7 @@
           },
           "status": {
             "bans": {
-              "a8d96b": "Usage: {{CLI_NAME}} defense status|bans|suspects|ban|unban|whitelist|stack-apply|fail2ban|firewall|timeline|presets [--json]\n` +\n          `  bans [--q text] [--source fail2ban|panel|ufw|auto]\n` +\n          `  suspects [--q text]\n` +\n          `  stack-apply [--execute]   # UFW + fail2ban + current preset\n` +\n          `  fail2ban | firewall       # deep probes (honest)\n` +\n          `  timeline [--limit N] [--q text]\n` +\n          `  presets                   # list + activePreset\n"
+              "a8d96b": "Usage: {{CLI_NAME}} defense status|bans|suspects|ban|unban|whitelist|stack-apply|fail2ban|firewall|timeline|presets [--json]\n  bans [--q text] [--source fail2ban|panel|ufw|auto]\n  suspects [--q text]\n  stack-apply [--execute]   # UFW + fail2ban + current preset\n  fail2ban | firewall       # deep probes (honest)\n  timeline [--limit N] [--q text]\n  presets                   # list + activePreset\n"
             }
           }
         }
@@ -904,7 +904,7 @@
         "--username": {
           "u": {
             "--password": {
-              "7145c7": "Usage: ysk-server users create --username <u> --password <p> [--role operator|viewer|admin] [--package-id id]\n"
+              "7145c7": "Usage: ysk-server users create --username <u> --password <p> [--role operator|viewer|admin] [--package-id id] [--locale zh-HK]\n"
             }
           }
         }
@@ -1048,7 +1048,7 @@
       }
     },
     "x": {
-      "972912": "Usage:\n  ysk-server migrate inventory [--data-dir PATH] --json\n  ysk-server migrate host --target root@IP [--identity-file PATH|--identity-id ID|--password PW] --execute [--maintenance] [--force-wipe-target]\n  ysk-server migrate post --job ID --data-dir PATH --execute   # on target\n  ysk-server migrate status [--job ID]\n  ysk-server migrate resume --job ID --execute\n"
+      "972912": "Usage:\n  ysk-server migrate inventory [--data-dir PATH] --json\n  ysk-server migrate host --target root@IP [--identity-file PATH|--identity-id ID|--password PW] --execute [--maintenance] [--force-wipe-target]\n  ysk-server migrate post --job ID --data-dir PATH --execute   # on target\n  ysk-server migrate status [--job ID]\n  ysk-server migrate resume --job ID --execute\n  ysk-server migrate orphan-homes [--data-dir PATH] --json\n  ysk-server migrate orphan-homes --path /home/ysk-server-UUID --confirm PATH --execute\n"
     },
     "hostingHelp": "Usage: ysk-server hosting <sub>\n  Dangerous ops default dry-run; add --execute (+ YSK_EXECUTE=1) to apply\n  nginx | nginx-sync [--execute]\n  redis-provision | postgres-provision | mysql-provision [--execute]\n  dns-zone --zone X --ip A.B.C.D [--ipv6 X:X::X] [--validate] [--reload]\n  dns-zones | powerdns-status | powerdns-install [--install|--execute]\n  powerdns-load --zone X --ip A.B.C.D [--load|--execute]\n  email-apply --domain X [--install|--execute]\n  email-mailbox --domain X --local user [--password P] [--ip A.B.C.D] [--system]\n  ftps-apply --domain X [--install|--execute]\n  runtimes | runtime-install --kind node|php|python|go|rust --version V [--install|--execute]\n  dovecot-passdb --domain X | --all\n  webmail-apply --domain webmail.example.com [--download]\n  public-files --domain files.example.com [--reload]\n  email-bootstrap --domain example.com --ip A.B.C.D [--install|--execute]\n  email-deliverability --domain example.com   # PTR/DNSBL/warmup pack (honest)\n  firewall-apply [--smtp] [--execute]\n",
     "logsQuery": "Usage: {{CLI_NAME}} logs query --source <id> [--lines N] [--grep G] [--since 1h] [--priority err]\n  source examples: journal:  journal:nginx.service  file:syslog  project:<uuid>\n  {{CLI_NAME}} logs sources --json\n  {{CLI_NAME}} logs journal [--unit nginx.service] --json\n"

package/locales/en/common.json

@@ -1,4 +1,5 @@
 {
+  "all": "All",
   "cancel": "Cancel",
   "confirm": "Confirm",
   "refresh": "Refresh",
@@ -21,11 +22,15 @@
   "languageNative": "English",
   "language": "Language",
   "switchLanguage": "Switch language",
+  "showPassword": "Show",
+  "hidePassword": "Hide",
   "searchGlobal": "Search pages & resources…",
   "menu": "Menu",
   "processing": "Working…",
+  "unavailable": "Not available right now",
   "retry": "Retry",
   "success": "Success",
+  "ok": "OK",
   "failed": "Failed",
   "blocked": "Cannot run",
   "status": "Status",
@@ -35,7 +40,9 @@
   "noData": "No data",
   "input": "Input",
   "pleaseEnter": "Enter {{value}}",
+  "required": "Required",
   "about": "About",
+  "more": "More",
   "operation": "Actions",
   "delete": "Delete",
   "edit": "Edit",
@@ -121,5 +128,6 @@
   "show": "Show",
   "done": "Done",
   "next": "Next",
-  "previous": "Previous"
+  "previous": "Previous",
+  "redirectedTo": "Opened {{to}} (was {{from}})"
 }

package/locales/en/cron.json

@@ -76,6 +76,7 @@
   "hostNoYsk": "not installed or no YSK entries",
   "pressInstall": "Registered jobs are not on the system crontab yet — click Install to system.",
   "jobsTab": "Jobs ({{count}})",
+  "jobsTabPending": "Jobs ({{count}}) · pending {{pending}}",
   "registeredJobs": "Registered jobs ({{count}})",
   "jobsSub": "Management entries · Install to system after changes",
   "addJob": "+ Add job",
@@ -135,5 +136,36 @@
   "sourceHost": "Host",
   "noHostJobs": "No crontab jobs in this scope",
   "hostPartial": "Could not read every user crontab (root required)",
-  "pendingInstall": "Pending install ({{count}})"
+  "pendingInstall": "Pending install ({{count}})",
+  "pendingStale": "Not written to system crontab for {{days}} day(s) — it will not run.",
+  "willNotRun": "Not written to system crontab — will not run.",
+  "hourRange": "Hour must be 0–23.",
+  "minuteRange": "Minute must be 0–59.",
+  "hoursCommon": "Common hours",
+  "hoursAll": "All hours",
+  "invalidExpr": "Not a valid 5-field cron expression.",
+  "needCommand": "Command is required.",
+  "needUser": "Choose a project or a system user.",
+  "hostCounts": "Host lines",
+  "hostCountsVal": "{{ysk}} · other {{other}} · total {{total}}",
+  "hostYskYes": "panel lines present",
+  "hostYskNo": "no panel lines",
+  "emptyHostCrontab": "No crontab for {{user}}.",
+  "writtenOnHost": "Written",
+  "registeredJobsChip": "Registered",
+  "registeredVsWritten": "Registered in the panel vs written to host crontab",
+  "installPreviewTitle": "Preview before installing to system crontab",
+  "installPreviewDesc": "This merges the YSK block into the host crontab. Existing non-YSK lines stay.",
+  "installPreviewMerge": "Install writes a YSK Server crontab merge block. It does not replace the whole crontab.",
+  "installPreviewEmpty": "No pending managed jobs — install still refreshes the YSK block.",
+  "editJobTitle": "Edit job",
+  "editJobDesc": "Changes stay in the panel until you install to the system crontab.",
+  "saveJob": "Save (management only)",
+  "panelLines": "Panel lines",
+  "otherLines": "Other lines",
+  "totalLines": "Total",
+  "writtenOnHostHint": "Lines already written to the host crontab",
+  "registeredJobsHint": "Jobs registered in the panel (including pending install)",
+  "pendingInstallCount": "{{n}} pending install",
+  "systemJobBadge": "No project · system user"
 }

package/locales/en/dashboard.json

@@ -1,4 +1,10 @@
 {
+  "serviceAria": "{{name}}: {{state}}",
+  "sev": {
+    "ok": "OK",
+    "warn": "Warning",
+    "bad": "Problem"
+  },
   "title": "Dashboard",
   "health": "Health",
   "protection": "Protection mode",
@@ -38,10 +44,12 @@
   "readinessCheck": "Readiness:",
   "prodOk": "Production ready",
   "notFullyReady": "Not fully ready",
+  "readinessBlocked": "{{n}} blocker(s)",
   "modeScore": "Mode {{mode}} · score {{ready}}/{{total}}",
   "mode": {
     "degraded": "degraded",
-    "production_capable": "production ready",
+    "production_capable": "EXECUTE + root",
+    "blocked": "blocked",
     "normal": "normal"
   },
   "details": "Details",
@@ -55,7 +63,8 @@
   "warnCount": " · warn {{count}}",
   "applyAuditBadge": "Apply audit · ok {{ok}} · warn {{warn}} · bad {{bad}}",
   "executeBadge": "EXECUTE {{state}}",
-  "executeLabel": "EXECUTE",
+  "executeLabel": "System change",
+  "publicNo2fa": "This panel listens on all interfaces and your admin account has no 2FA.",
   "go": "Open",
   "open": "Open",
   "noCriticalWarn": "No critical or warning alerts",
@@ -85,27 +94,39 @@
   "runtime": "Runtime",
   "runtimeHint": "Sets default runtime version and deploy style",
   "runtimeVersion": "Runtime version",
-  "versionHint": "Stored as project runtime_version",
+  "versionHint": "Writes the project runtime version setting",
   "serverIpv4": "Server IPv4",
   "serverIpv4Hint": "DNS A / mail SPF",
   "serverIpv4Ph": "This host public IPv4",
   "serverIpv6": "Server IPv6 (optional)",
   "serverIpv6Hint": "Writes AAAA / ip6: when set",
   "serverIpv6Ph": "Public IPv6 (optional)",
+  "needDomainFirst": "Enter a domain first",
   "withDns": "Also create DNS zone",
   "withDnsDesc": "Needs domain; registration only — apply zone on DNS page",
   "withMail": "Also register mail domain",
   "withMailDesc": "Needs domain; install software & DNS on mail detail page",
-  "withDb": "Also draft MySQL database",
-  "withDbDesc": "Control-plane registration; apply on SQL engine page",
+  "withDb": "Also draft a database",
+  "withDbDesc": "Control-plane registration; apply on the SQL engine page",
   "wizardHint": "Quick create does not go live automatically",
   "wizardSubmit": "Create",
   "wizardOk": "Created",
   "wizardPartial": "Partially failed",
   "notifCenterTitle": "Notifications ({{count}})",
   "notifCenterDesc": "Critical {{critical}} · warn {{warn}} · info {{info}}",
-  "noNotifs": "No notifications",
+  "noNotifs": "No notifications. Recent audit events are on Overview.",
   "noNotifsDesc": "System alerts and todos appear here",
   "applyAuditTitle": "Apply status audit",
-  "applyAuditDesc": "ok {{ok}} · warn {{warn}} · bad {{bad}}"
+  "applyAuditDesc": "ok {{ok}} · warn {{warn}} · bad {{bad}}",
+  "barTitle": "{{count}} host alert(s)",
+  "levelCritical": "Critical",
+  "levelWarn": "Warning",
+  "levelInfo": "Info",
+  "colTitle": "Alert",
+  "colDetail": "Detail",
+  "colSource": "Source",
+  "notifSearch": "Search alerts",
+  "notifAll": "All",
+  "notifDismiss": "Hide",
+  "goFix": "Fix"
 }