ysk-server-shared 1.0.0 → 1.1.9

package/locales/zh-CN/notes.json

@@ -30,19 +30,53 @@
   },
   "ssh": {
     "identityNotFound": "找不到 identity",
-    "registrationNotFound": "找不到登记"
+    "registrationNotFound": "找不到登记",
+    "keyOkNologin": "Key accepted. Account has no login shell (nologin) — use SFTP. Treated as PASS.",
+    "keyOkSftp": "SSH shell 被拒绝后，SFTP pwd 成功。"
   },
   "cdn": {
     "siteNotFound": "找不到 CDN 站点",
-    "nodeMissing": "节点不存在"
+    "nodeMissing": "节点不存在",
+    "probe": {
+      "timeout": "连接超时 {{ms}}ms（{{detail}}）。对端可能被防火墙挡住。",
+      "dns": "DNS 查询失败（{{detail}}）。",
+      "refused": "连接被拒 {{ms}}ms（{{detail}}）。端口未开或单向封锁。",
+      "tls": "TLS 验证失败（{{detail}}）。",
+      "unreach": "主机不可达 {{ms}}ms（{{detail}}）。",
+      "http": "HTTP 探活失败 {{ms}}ms（{{detail}}）。"
+    },
+    "loopbackOriginRemote": "来源是 127.0.0.1 — 这是该主机，而不是远程边缘。设置可达的源IP或bind_ip。",
+    "needSshOrFleet": "远程边缘需要出站 SSH 身份（或用户名）或 /agents 队列会话。仅健康 URL 不适用传输。",
+    "originRemoteRewrite": "远程边缘将使用可达源 {{url}} 而不是环回。",
+    "originRemoteUnknown": "来源是环回，并且没有已知的公共/LAN IP 或bind_ip — apply 将拒绝远程边缘，直到设置为止。"
   },
   "backup": {
+    "testUnsaved": "正在测试未保存的表单（尚未写入设置）。",
     "fileNotFound": "找不到备份文件",
     "resticNoPassword": "restic 已启用但未设置 password",
-    "resticNotInPath": "restic 不在 PATH"
+    "resticNotInPath": "restic 不在 PATH",
+    "dbEnvUnreadable": "无法读取 .db.env，跳过 SQL 导出。",
+    "dbEnvNoName": ".db.env 没有数据库名称，跳过 SQL 导出。",
+    "targetOutside": "还原目标必须在项目家目录或公开文件根目录之内。",
+    "testIdentity": "ssh (identity) to {{spec}} ok",
+    "sshAuthFailed": "SSH 密钥或密码被拒绝（公钥）。选择出站身份或安装 sshpass。",
+    "remotePathIsFile": "远程路径 {{path}} 是一个文件。使用目录。",
+    "remoteMkdirFailed": "无法创建远程目录：{{detail}}",
+    "sidecarPushed": "还推送了 SQL sidecar {{name}}",
+    "controlPlaneDryRun": "仅预览 - 没有写任何东西。在面板中，使用“恢复”并确认要写入的短语。",
+    "controlPlaneNeedConfirm": "完全控制平面恢复需要确认短语 RESTORE-CONTROL-PLANE。",
+    "controlPlaneRestartAfter": "恢复成功后重新启动API。",
+    "movedToTrash": "Moved {{name}} to the recycle bin. Permanent delete after {{days}} days.",
+    "restoreNameExists": "Cannot restore {{name}} — a live archive with that name already exists.",
+    "restoredFromTrash": "Restored {{name}} from the recycle bin.",
+    "trashEmptied": "Permanently deleted {{n}} archive(s) from the recycle bin."
   },
   "redis": {
-    "cliMissing": "未安装 redis-cli"
+    "cliMissing": "未安装 redis-cli",
+    "requirepassAlreadySet": "Redis already has requirepass — not overwritten.",
+    "requirepassApplied": "requirepass applied at runtime",
+    "requirepassApplyFailed": "Could not CONFIG SET requirepass (will rely on restart + conf)",
+    "generatedRequirepass": "Generated Redis password (shown once): {{password}}"
   },
   "nginx": {
     "reloaded": "nginx 已 reload",
@@ -65,7 +99,8 @@
     "vsftpdStarted": "vsftpd 已启动",
     "openPortsStep": "防火墙端口（需手动）",
     "openPortsReminder": "请在主机防火墙和云安全组放行 TCP：{{ports}}。套用 FTPS 不会代你开端口。",
-    "openPortsPasvHint": "若登录成功但列目录 LIST 超时，多半是 PASV 数据端口被挡——要开齐 PASV 范围，不是只开 21。"
+    "openPortsPasvHint": "若登录成功但列目录 LIST 超时，多半是 PASV 数据端口被挡——要开齐 PASV 范围，不是只开 21。",
+    "publicPlaintextBlocked": "Refusing to start public FTP without FTPS. Bind to this host only, enable FTPS with a certificate, or confirm PLAINTEXT to expose cleartext on the public address."
   },
   "deploy": {
     "nodeMissingIsolated": "隔离部署找不到 Node：{{path}} — 请先安装 Node {{version}} toolchain 再部署。拒绝写入会 203/EXEC 的 unit。",
@@ -83,7 +118,8 @@
     "pathOutsideSandbox": "路径超出沙箱范围：{{target}}",
     "notFoundRel": "找不到：{{relPath}}",
     "fileNotFoundRel": "找不到文件：{{relPath}}",
-    "notFoundFrom": "找不到：{{fromPath}}"
+    "notFoundFrom": "找不到：{{fromPath}}",
+    "alreadyExists": "已有同名项目：{{name}}"
   },
   "dns": {
     "needZoneServerIp": "请填写 zone 与 server IP",
@@ -119,11 +155,24 @@
     "applyDigOk": "PowerDNS BIND：list-zones + dig OK",
     "applyDigFail": "conf 已注册但 dig 仍空/REFUSED — 不标 applied",
     "applySyncIncomplete": "PowerDNS bind 同步未完 — 仅写盘。请检查 EXECUTE/root 或 pdns 日志",
-    "writeOnlyHint": "仅写了 zone 文件 — 需 load/apply 挂 named.conf 才会应答"
+    "writeOnlyHint": "仅写了 zone 文件 — 需 load/apply 挂 named.conf 才会应答",
+    "noActiveUnit": "No active named/bind9/pdns unit",
+    "pdnsUnitRestarts": "pdns unit state/restarts: {{detail}}",
+    "port53LoopbackOnly": "Port 53 is only on loopback (systemd-resolved 127.0.0.53) — not a product authoritative nameserver",
+    "port53Closed": "Port 53 is not listening (UDP/TCP)",
+    "udp53NotPublic": "UDP/53 is not listening on a public address",
+    "tcp53NotPublic": "TCP/53 is not listening on a public address",
+    "noManagedZones": "No managed zone files under dataDir/dns/zones",
+    "pdnsListZones": "PowerDNS list-zones: {{n}}",
+    "lookupIgnoredAt": "dig is unavailable — @{{server}} was ignored. Not using the system resolver as that server’s answer.",
+    "localAOk": "local A {{name}} → {{ip}}"
   },
   "db": {
     "needExecuteCreate": "服务器未开启系统变更权限，无法在管理面板创建数据库",
-    "dryRunMysql": "dry-run：未创建数据库。加 --execute 且 YSK_EXECUTE=1 才真正 provision"
+    "dryRunMysql": "dry-run：未创建数据库。加 --execute 且 YSK_EXECUTE=1 才真正 provision",
+    "remoteNoCreds": "未存账号／密码——只测 TCP（登记 ≠ 已登录）。",
+    "remoteReachable": "TCP {{host}}:{{port}} 可达（{{ms}}ms）。",
+    "remoteUnreachable": "TCP {{host}}:{{port}} 关闭或被过滤（{{ms}}ms）。"
   },
   "net": {
     "invalidIface": "接口名称无效",
@@ -201,10 +250,20 @@
     "security": "安全",
     "binaries": "二进制／软件包",
     "hosting": "托管",
-    "dns": "DNS",
+    "dns": "域名系统",
     "email": "邮件",
     "isolation": "项目隔离",
-    "ops": "运维"
+    "ops": "运维",
+    "runtimesNode": "Node.js",
+    "runtimesPhp": "PHP",
+    "runtimesPython": "Python",
+    "runtimesGo": "Go",
+    "pm2": "PM2",
+    "runtimesNodeFix": "从 /runtimes/node 安装 Node",
+    "runtimesPhpFix": "从 /runtimes/php 安装 PHP",
+    "runtimesPythonFix": "从 /runtimes/python 安装 Python",
+    "runtimesGoFix": "从 /runtimes/go 安装 Go",
+    "pm2Fix": "从 Node 运行时页面安装 PM2"
   },
   "needAdmin": "需要管理员权限",
   "notInstalled": "未安装",
@@ -477,7 +536,7 @@
     "n0259": "domain 必填",
     "n0260": "domain 找不到",
     "n0261": "dovecot reload 失败或服务未裝（sieve 檔已寫；唔標假 reload 成功）",
-    "n0262": "dry-run fleet dispatch（未入佇列）",
+    "n0262": "预览试行机群派送（未入队列）",
     "n0263": "dry-run peer push 計劃（未 scp）",
     "n0264": "dry-run remote install（未 ssh）",
     "n0265": "dry-run transfer 完成（略過 full bootstrap）",
@@ -614,7 +673,7 @@
     "n0396": "python3 可执行檔",
     "n0397": "queued ≠ edge 已 purge",
     "n0398": "queued ≠ edge 已 reload — agent 需拉取並执行 cdn.edge.apply",
-    "n0399": "queued ≠ edge 已执行 — Agents 紀錄睇 exit/JSON",
+    "n0399": "queued ≠ edge 已执行 — Agents 纪录看 exit/JSON",
     "n0400": "realpath 快取大小",
     "n0401": "realpath 快取秒數",
     "n0402": "reapply 需要 YSK_EXECUTE=1",
@@ -1340,7 +1399,7 @@
     "n1120": "無暫停域名 — map 為空（系統应用後會 postmap 空檔）",
     "n1121": "無有效 IP",
     "n1122": "無模組時政策仍可用於嫌疑人 auto-ban enrich",
-    "n1123": "无法 ban 到系統：需 YSK_EXECUTE；已記到面板 ban 清單",
+    "n1123": "無法封鎖到主機：未開啟系統變更權限。面板清單沒有新增。",
     "n1124": "无法 dump Redis：缺 redis-cli",
     "n1125": "无法 dump：服务器未开启系統变更权限",
     "n1126": "无法 fan-out：未开启系統变更权限",
@@ -1810,7 +1869,7 @@
     "n1590": "靜態網站",
     "n1591": "非 root — useradd／systemd／nginx 系統路径受限",
     "n1592": "非受限 seccomp 需要明確指定 runAsUser",
-    "n1593": "面板請求/分",
+    "n1593": "公开请求／分钟",
     "n1594": "面板连接即將中斷；可用「取消排程」撤回（若仍在線）",
     "n1595": "面板非 root",
     "n1596": "預覽可用 apply:false",
@@ -1828,6 +1887,8 @@
     "n1608": "验证碼无效",
     "n1609": "验证通过",
     "n1610": "未刷新套件索引（未开 YSK_EXECUTE）— 仅显示 apt list；开启 EXECUTE 才运行 apt-get update",
+    "n1611": "UFW 已關閉：user.rules 有 {{n}} 條永久拒規則，但核心未強制執行。",
+    "n1612": "UFW 已關閉。拒絕規則只會寫入 user.rules，核心不會丟棄封包。請先啟用 UFW。不會自動開啟。",
     "t0001": "listenPort 无效：{{v0}}",
     "t0002": "已還原版本 {{v0}}",
     "t0003": "文件過大（>{{v0}} bytes）",
@@ -2081,7 +2142,7 @@
     "t0251": "{{v0}} 安装未完成",
     "t0252": "{{v0}} 服務已启动",
     "t0253": "启动失败：{{v0}}",
-    "t0254": "不支援的 Node.js 版本 {{v0}}；可用主版本：{{v1}}",
+    "t0254": "支持 Node.js 版本 {{v0}}；可用版本：{{v1}}",
     "t0255": "不支援的 PHP 版本 {{v0}}；可用：{{v1}}",
     "t0256": "不支援的 Python 版本 {{v0}}；可用：{{v1}}",
     "t0257": "不支援的 Go 版本 {{v0}}；可用：{{v1}}",
@@ -2203,12 +2264,12 @@
     "t0373": "项目「{{v0}}」隔離",
     "t0374": "已複製到本機路径 {{v0}}",
     "t0375": "身份 {{v0}}：{{v1}}",
-    "t0376": "已 scp（identity）到 {{v0}}",
-    "t0377": "scp(identity) 失败: {{v0}}",
-    "t0378": "已 scp 到 {{v0}}",
-    "t0379": "scp 失败: {{v0}}",
-    "t0380": "已 scp 到 {{v0}}",
-    "t0381": "scp 失败: {{v0}}（可設 backup remote identityId）",
+    "t0376": "sftp（身份密钥）连到 {{v0}} 成功",
+    "t0377": "sftp（身份密钥）失败：{{v0}}",
+    "t0378": "sftp 连到 {{v0}} 成功",
+    "t0379": "sftp 失败：{{v0}}",
+    "t0380": "sftp 连到 {{v0}} 成功",
+    "t0381": "sftp 失败：{{v0}}（可设置备份 remote identityId）",
     "t0382": "已上傳 S3 {{v0}}",
     "t0383": "S3 失败: {{v0}}",
     "t0384": "政策已開：{{v0}}/{{v1}} admin 已啟用 2FA",
@@ -2216,7 +2277,7 @@
     "t0386": "{{v0}} 在 PATH",
     "t0387": "{{v0}} 找不到",
     "t0388": "請於系統安装 {{v0}}，或於面板软件／runtime 安装",
-    "t0389": "可用主版本：{{v0}}",
+    "t0389": "可用版本：{{v0}}",
     "t0390": "使用率約 {{v0}}%（總 {{v1}} MB）",
     "t0391": "使用率約 {{v0}}%（{{v1}}）",
     "t0392": "於服務矩陣启动 {{v0}}",
@@ -2465,7 +2526,7 @@
     "t0635": "无法探测 {{v0}}",
     "t0636": "來源 {{v0}} · {{v1}}",
     "t0637": "项目 {{v0}} · 信箱 {{v1}} · DB {{v2}} · Redis {{v3}}",
-    "t0638": "需安装软件 {{v0}} 項 · homes {{v1}}",
+    "t0638": "需安装软件 {{v0}} 项 · homes {{v1}}",
     "t0639": "cutover 主機名 {{v0}}",
     "t0640": "警告 {{v0}} 則（請審閱）",
     "t0641": "已產生臨時密钥 {{v0}}",
@@ -2552,7 +2613,7 @@
     "t0722": "originShieldNodeId={{v0}} 不存在 — 忽略 shield",
     "t0723": "{{v0}}: 有 SSH 目標 — 使用 SSH 同步应用（略過 fleet 佇列）",
     "t0724": "fleet 无法入佇列（blocked={{v0}}）— 提供 enqueue 或改用 SSH",
-    "t0725": "fleet 已入佇列 {{v0}} edge — queued ≠ agent 已 nginx reload；睇 Agents 指令紀錄",
+    "t0725": "fleet 已入队列 {{v0}} edge — queued ≠ agent 已 nginx reload；查看 Agents 指令纪录",
     "t0726": "fleetAgentId={{v0}} — 需要控制面 fleet enqueue（API 會注入）；或改填 SSH 做同步应用",
     "t0727": "找不到 conf：{{v0}}",
     "t0728": "讀 conf 失败：{{v0}}",
@@ -2627,7 +2688,14 @@
     "t0797": "timezone 失败: {{v0}}",
     "tScoreFrom": "分数={{score}} · 由 {{from}} 切换",
     "appliedTag": "（已应用）",
-    "writtenTag": "（只写文件）"
+    "writtenTag": "（只写文件）",
+    "selfDestMissing": "找不到运行中安装目录（systemd ExecStart 或运行中 cli.js）",
+    "selfDestUnwritable": "无法写入运行中安装目录 {{v0}}",
+    "selfApplied": "已将 {{v0}} 应用到 {{v1}}",
+    "selfVerifyFail": "应用后版本文件未包含 {{v0}}",
+    "selfDownloadFail": "无法下载或解压官方套件 {{v0}}：{{v1}}",
+    "selfOverlayFail": "官方套件未能应用到运行中目录：{{v0}}",
+    "selfUpgradeHint": "面板套用失败。请以 root 执行：curl -fsSL https://raw.githubusercontent.com/yanshekki/ysk-server/main/install.sh | bash -s -- --upgrade"
   },
   "tpl": {
     "deleted": "已删除 {{name}}",
@@ -2857,7 +2925,10 @@
     "accessReconnectHint": "已连接的客户端请断开再连，才会使用新路由",
     "ovpnNatDurable": "安装 OpenVPN NAT/转发以便重新启动 (systemd ExecStartPost)。",
     "clientFullTunnelProtect": "检测到全隧道客户端 (AllowedIPs 0.0.0.0/0)。应用主机保护，以便面板/SSH 回复保留在 LAN NIC 上。",
-    "clientFullTunnelHint": "提示：仅对于分割访问，请在conf中将AllowedIPs设置为VPN/LAN CIDR（而不是0.0.0.0/0），然后重新连接。"
+    "clientFullTunnelHint": "提示：仅对于分割访问，请在conf中将AllowedIPs设置为VPN/LAN CIDR（而不是0.0.0.0/0），然后重新连接。",
+    "serverStopped": "已停止 {{engine}} 伺服器。",
+    "serverStopFailed": "無法停止 {{engine}} 伺服器：{{detail}}",
+    "peersSynced": "Peer list reloaded on the running WireGuard interface."
   },
   "vnc": {
     "needInstall": "请安装 {{stack}}",
@@ -2951,7 +3022,21 @@
     "clientDeleted": "已删除客户端配置",
     "sessionStartCwd": "VNC 启动失败：工作目录会话用户无权访问（display :{{display}}）。已改为从 HOME 启动。",
     "desktopRestarted": "应用桌面配置文件并重新启动会话 ({{desktop}})。重新连接 VNC/noVNC。",
-    "desktopNeedsStart": "桌面配置文件 {{desktop}} 写入 xstartup。启动会话以进行申请。"
+    "desktopNeedsStart": "桌面配置文件 {{desktop}} 写入 xstartup。启动会话以进行申请。",
+    "passwordNeedTiger": "找不到 vncpasswd。请先安装 TigerVNC（tigervnc-standalone-server）再设定密码。",
+    "linuxUserRolledBack": "VNC 密码失败后已删除遗留 Linux 用户 {{user}}。",
+    "linuxUserOrphan": "VNC 密码失败后无法删除遗留 Linux 用户 {{user}}。",
+    "sessionStartHostname": "Failed to start display :{{display}}: this host cannot resolve its own hostname. Add the hostname to /etc/hosts (or fix DNS) then start the session again.",
+    "userdelLeftover": "Panel account removed, but Linux user {{user}} is still on the host. Remove it from Users or the host.",
+    "hostnameResolves": "Hostname {{hostname}} resolves.",
+    "hostnameUnresolvable": "This host cannot resolve its own hostname ({{hostname}}). VNC session start will fail until /etc/hosts is fixed.",
+    "hostnameAlreadyResolves": "Hostname {{hostname}} already resolves — /etc/hosts unchanged.",
+    "hostnameWouldAppend": "Would append to /etc/hosts: {{line}}",
+    "hostnameAppended": "Appended to /etc/hosts: {{line}}",
+    "hostnameAppendFailed": "Could not write /etc/hosts: {{detail}}",
+    "skipStartHostname": "Did not start the display — fix hostname resolution first.",
+    "hostnameAliasPresent": "Hostname {{hostname}} is already an exact /etc/hosts alias — not appended again.",
+    "hostnameStillUnresolvable": "Wrote /etc/hosts but {{hostname}} still does not resolve. Confirm nsswitch hosts includes files."
   },
   "apache": {
     "needServerName": "需要域名",
@@ -3001,6 +3086,109 @@
     "startedDetached": "BT Tracker detached worker 已启动（pid {{pid}}，端口 {{port}}）",
     "runningDetached": "Tracker 以 detached worker 运行中（pid {{pid}}）",
     "jobQueued": "BT torrent 创建已排入队列（大型分享）",
-    "jobRunning": "正在创建 BT torrent"
+    "jobRunning": "正在创建 BT torrent",
+    "libraryAdded": "已将 {{name}} 加入 WebTorrent 资料库",
+    "libraryInspectFailed": "无法读取此 .torrent 或 magnet",
+    "libraryDup": "资料库已有此 Torrent",
+    "libraryDestBad": "保存位置不是有效的文件路径",
+    "libraryTorrentTooBig": ".torrent 文件大于 8 MiB",
+    "libraryNotFound": "找不到此资料库项目",
+    "libraryPaused": "已暂停",
+    "libraryResumed": "已继续",
+    "libraryRemoved": "已从资料库移除",
+    "libraryFilesRemoved": "已删除下载的文件",
+    "libraryRestoreDone": "资料库还原：已启动 {{started}}/{{attempted}}（失败 {{failed}}）",
+    "applyTrackersDone": "已向 {{n}} 个现有 announce 套用常用 Tracker",
+    "libraryNeedServe": "已保存。请在面板启动 ysk-server serve，WebTorrent 才会下载／做种。",
+    "libraryDestIsFile": "无法建立名为 {{name}} 的文件夹——该处已有同名文件。",
+    "librarySeedMissing": "此文件夹没有可做种的对应文件。",
+    "libraryWaitingPeers": "正在等待 peers。若文件已在此主机，请重新加入并选使用现有文件做种。"
+  },
+  "migrate": {
+    "orphanConfirm": "请输入完整孤立主目录路径以确认删除。",
+    "orphanStillInStore": "该主目录仍属于 store 内的项目。",
+    "orphanMissing": "磁盘没有此路径：{{path}}",
+    "orphanNeedExecute": "将删除孤立主目录 {{path}}。需 YSK_EXECUTE=1。",
+    "orphanRmFailed": "无法删除孤立主目录：{{detail}}",
+    "orphanRemoved": "已删除孤立项目主目录 {{path}}。"
+  },
+  "leftover": {
+    "staleCliTitle": "遗留旧版 CLI",
+    "staleCli": "仍有旧 CLI：{{path}}（产品版本 {{version}}）。PATH 可能优先使用它。移除：rm -f {{path}}",
+    "apacheDefaultTitle": "Apache 遗留默认站",
+    "apacheDefault": "Apache 000-default 仍占 :80。产品 overlay 不会停用。请在面板套用 Apache，或 hosting apache apply --execute。",
+    "nginxCatchAllTitle": "Nginx 缺 catch-all",
+    "nginxCatchAll": "/etc/nginx/conf.d 没有 ysk-000-default.conf。未知 SNI 可能落到其他站。请执行 projects nginx-sync --execute。",
+    "vsftpdTitle": "vsftpd 单元失败",
+    "vsftpd": "vsftpd 失败。overlay 不会重写 listen／listen_ipv6。请在面板套用 FTP。",
+    "dovecotTitle": "Dovecot TLS 指向不存在的证书",
+    "dovecot": "Dovecot ssl_cert 指向不存在的 {{path}}。overlay 不会改成 ssl=no。签发邮件证书后套用邮件 TLS。",
+    "overlayDoesNotHeal": "产品 overlay 不会改写 nginx、Apache、vsftpd 或 Dovecot。请用列出的套用命令（root + YSK_EXECUTE=1）。",
+    "readinessTitle": "overlay 后主机遗留",
+    "readinessClean": "未检测到 Apache 默认站、缺 nginx catch-all、vsftpd 失败或旧 CLI。",
+    "staleCliRemoved": "已移除残留 CLI {{path}}。",
+    "staleCliRemoveFailed": "无法移除残留 CLI {{path}}：{{detail}}",
+    "vsftpdSslOff": "因 FTPS 证书文件不存在，已将 vsftpd 设为 ssl_enable=NO 并重新启动。",
+    "dovecotSslOff": "因 {{path}} 不存在，已将 Dovecot 设为 ssl=no 并重新启动。",
+    "nginxRemoved": "Removed leftover nginx conf {{path}}.",
+    "nginxNotLeftover": "Not a leftover public-files conf — refuse delete.",
+    "nginxUnusedKeep": "000-default is unused, not leftover — not deleted.",
+    "nginxSystemCopy": "System copy still present: {{path}}. Needs YSK_EXECUTE + root to remove.",
+    "nginxReloadFailed": "nginx -t or reload failed after removing {{path}}.",
+    "executeStaleCli": "Pass --execute (root + YSK_EXECUTE=1) to remove stale CLI bins.",
+    "executeMissingTls": "Pass --execute (root + YSK_EXECUTE=1) to disable missing-cert TLS so vsftpd/Dovecot can start.",
+    "executeGeneric": "Pass --execute (root + YSK_EXECUTE=1) to apply leftover cleanup for the findings above."
+  },
+  "git": {
+    "missingBin": "git 不在路径上",
+    "auth": "认证失败。添加部署密钥或 HTTPS 令牌。",
+    "hostkey": "SSH 主机密钥验证失败。确认并固定主机密钥。",
+    "dirty": "工作树有 {{count}} 个本地更改。拉动被阻止。",
+    "diverged": "无法快进。如果您打算丢弃本地 Git 历史记录，请重置为远程引用。",
+    "missingRef": "该分支、标签或提交不在远程上。",
+    "shallow": "这个克隆很浅。在固定旧提交之前获取完整历史记录。",
+    "notRepo": "app/ 还不是 Git 存储库。",
+    "unrelated": "无关的历史。仅在确认后重新克隆 - 自定义文件将丢失。",
+    "lock": "Git index.lock 存在。仅当没有 git 进程正在运行时才将其删除。",
+    "disk": "磁盘已满或超出配额。",
+    "timeout": "Git 超时。",
+    "network": "与远程通信时出现网络错误。",
+    "lfs": "此存储库使用 Git LFS 并且 git-lfs 不可用。",
+    "submodule": "子模块更新失败。",
+    "unknown": "吉特失败了。查看命令输出。",
+    "fetchOk": "从原产地获取。",
+    "checkoutOk": "签出{{ref}}。",
+    "resetOk": "硬重置为{{ref}}。",
+    "envRestored": "从控制平面恢复了 app/.env。",
+    "needPinHost": "SSH 主机密钥未固定。在克隆或获取之前扫描并固定它。",
+    "tokenSaved": "已存储 HTTPS 令牌（不再显示）。",
+    "tokenCleared": "HTTPS 令牌已删除。",
+    "tokenInvalid": "令牌必须至少包含 8 个字符。",
+    "deployKeyCreated": "已创建部署密钥。在 Git 主机上添加公钥。",
+    "deployKeyCleared": "部署与该项目分离的密钥。",
+    "hostPinned": "{{host}} 的固定 SSH 主机密钥。",
+    "hostUnpinned": "清除固定的 SSH 主机密钥。",
+    "hostScanFailed": "ssh-keyscan 没有返回该主机的密钥。",
+    "hookEnabled": "入站 Git 挂钩已打开。自行将 URL 粘贴到 GitHub、Gitea 或 GitLab 中。",
+    "hookDisabled": "入站 Git 挂钩已关闭。 URL 将不会同步。",
+    "hookSecretOnce": "现在复制这个钩子秘密。它不再显示。",
+    "refsNeedUrl": "首先输入 Git URL。",
+    "refsOk": "已加载 {{branches}} 分支和 {{tags}} 标签。",
+    "refsEmpty": "远程没有发布任何分支或标签。",
+    "diffEmpty": "没有未暂存的差异（受保护的 .env 被排除）。"
+  },
+  "defense": {
+    "panelReqLabel": "面板请求数/分钟",
+    "panelReqExcluded": "经过身份验证的面板流量 - 此处显示，不计入威胁评分",
+    "tcpOk": "TCP {{target}} 可达",
+    "tcpFail": "TCP {{target}} 失败",
+    "dnsDegraded": "DNS 路径降级",
+    "reqRateHigh": "公开请求率 {{reqs}}/min ≥ {{threshold}}",
+    "ddosHeuristic": "高公共请求率加上边缘探测失败"
+  },
+  "publicFiles": {
+    "liveConf": "生效 Nginx 配置文件：{{path}}",
+    "publicRoot": "公开根目录：{{path}}",
+    "confNameStale": "配置文件 {{file}} 与当前 server_name {{serverName}} 不一致。请再套用公用文件以改名。"
   }
 }

package/locales/zh-CN/projects.json

@@ -62,7 +62,8 @@
     "deployTitle": "下一步：部署",
     "deployBody": "按上方「部署 PHP／部署」启动 runtime，或到「部署」分页用 Git。",
     "nginxTitle": "下一步：发布 Nginx",
-    "nginxBody": "到「网絡」分页或总览快捷操作发布 Nginx（可选 SSL）。"
+    "nginxBody": "到「网絡」分页或总览快捷操作发布 Nginx（可选 SSL）。",
+    "provisionOsAction": "Create system user"
   },
   "healthDetail": {
     "none": "尚未执行健康检查",
@@ -72,7 +73,12 @@
     "httpStatus": "HTTP",
     "latency": "延遲",
     "error": "错误",
-    "at": "检查时间"
+    "at": "检查时间",
+    "deployMode": "Deploy mode",
+    "edgeKind": "Edge",
+    "goLiveOk": "Go-live",
+    "goLiveAt": "Go-live at",
+    "degraded": "Degraded"
   },
   "railPhp": "PHP / 站点",
   "railStatic": "静态站",
@@ -506,11 +512,11 @@
     "node": "Node.js",
     "static": "静态",
     "python": "Python",
-    "go": "Go",
+    "go": "去",
     "rust": "Rust",
     "java": "Java",
     "kotlin": "Kotlin",
-    "bun": "Bun"
+    "bun": "包子"
   },
   "netCacheTitle": "缓存",
   "logsDeepAccess": "日志中心 · access",
@@ -523,7 +529,7 @@
   "railBun": "Bun 进程",
   "deployProcessManager": "进程管理",
   "deployProcessManagerSystemd": "systemd（推荐）",
-  "deployProcessManagerPm2": "颗粒物",
+  "deployProcessManagerPm2": "PM2",
   "proc_restart": "重启",
   "proc_stop": "停止",
   "proc_reload": "重新加载",
@@ -547,14 +553,130 @@
   "netPublishMaint": "维护",
   "sslNeedDomain": "请先填写域名，才能发布 Nginx / SSL。",
   "createTemplateMissing": "未載入 {{v0}} 範本；請重新整理或選「— 無 —」空白專案。",
-  "deleteDialogDesc": "將銷毀「{{v0}}」。此操作無法還原。",
+  "deleteDialogDesc": "將銷毀「{{name}}」。此操作無法還原。",
   "deleteWillStop": "停止 systemd / PM2 / 本機進程",
   "deleteWillWeb": "移除 Nginx conf、PHP-FPM pool、Apache vhost（如有）",
   "deleteWillOs": "刪除 Linux 用戶與 home 目錄（安全路徑）",
   "deleteKeepOs": "保留 home 與 Linux 用戶（僅面板移除）",
   "deleteWillDb": "從控制面資料庫移除專案",
   "deleteRemoveFilesDesc": "取消勾選則只從面板移除，檔案與系統用戶保留",
-  "deleteTypeNameHint": "請輸入「{{v0}}」",
+  "deleteTypeNameHint": "請輸入「{{name}}」",
   "deleteDnsWarn": "共享 DNS zone / 郵箱 domain 不會自動刪除。",
-  "manageInNginx": "在 Nginx 管理"
+  "manageInNginx": "在 Nginx 管理",
+  "advFtpHomeApp": "站点 app 目录",
+  "advFtpHomeRoot": "项目家目录（全部）",
+  "advFtpManage": "打开 FTP 页",
+  "listDesc": "管理该主机上的站点。",
+  "resShell": "登录 shell",
+  "resSaveHint": "「储存并套用」会改主机。「仅存控制面」只记表单。「再套用」用已存值再写入系统。",
+  "resBashConfirmTitle": "允许互动式 bash？",
+  "resBashConfirmDesc": "这会让专案用户有互动登录 shell。只在需要以该用户 SSH 或终端机时才确认。",
+  "noPathSepHint": "名稱不可包含 / 或 \\。",
+  "createGitHint": "可选。会记在专案；到部署分页再 clone（建立时不会 clone）。",
+  "gitBranch": "分支",
+  "gitBranchHint": "分支或 tag。留空则用远端默认分支。首次 clone 为浅层（depth 1）。",
+  "gitLastRef": "上次同步：{{branch}} @ {{commit}}",
+  "gitConfirmTitle": "要 clone 到此专案？",
+  "gitConfirmBody": "若 app/ 仍是 Hello World 占位会先清除再 clone。非 YSK 模板的自定义文件会拒绝覆盖。",
+  "gitConfirmRemoteBody": "会把 origin 改为新网址再 pull。历史无关则失败；不会清除自定义文件。",
+  "runtimeActual": "实际 binary {{path}}",
+  "runtimeFallback": "所选 {{version}} 并未安装。进程实际使用 {{path}}。",
+  "gitSync": "同步",
+  "gitFetch": "拿来",
+  "gitCheckout": "查看",
+  "gitReset": "重置为远程",
+  "gitDeepen": "获取完整历史记录",
+  "gitLogTitle": "最近的提交",
+  "gitDirtyTitle": "本地更改阻止拉动",
+  "gitDirtyBody": "{{count}} 个文件与 Git（文件编辑或应用程序）不同。丢弃它们或中止。",
+  "gitDiscard": "丢弃本地文件",
+  "gitOpenFiles": "在文件中打开",
+  "gitNotCloned": "未克隆",
+  "gitClean": "干净的",
+  "gitDirty": "肮脏的",
+  "gitBehind": "落后于 {{count}}",
+  "gitAhead": "领先 {{count}}",
+  "gitDetached": "已固定",
+  "gitShallow": "浅的",
+  "gitMissing": "git 丢失",
+  "gitResetConfirmTitle": "重置很难远程？",
+  "gitResetConfirmBody": "这将丢弃本地 Git 历史记录和除 .env 之外的未跟踪文件，然后从控制平面恢复 .env。",
+  "gitHeads": "远程分支机构",
+  "gitToken": "HTTPS 令牌",
+  "gitTokenHint": "Personal access token. Stored encrypted; never written into the remote URL.",
+  "gitTokenPlaceholder": "ghp_... 或 glpat-...",
+  "gitTokenSet": "令牌集",
+  "gitSaveToken": "保存令牌",
+  "gitClearToken": "清除令牌",
+  "gitDeployKey": "部署公钥",
+  "gitDeployKeyHint": "将其添加为 Git 主机上的只读部署密钥。",
+  "gitDeployKeyOn": "部署密钥",
+  "gitMakeKey": "创建部署密钥",
+  "gitCopyPub": "复制公钥",
+  "gitClearKey": "清除部署密钥",
+  "gitKeyCopied": "公钥已复制",
+  "gitPinHost": "固定主机密钥",
+  "gitPinHostBody": "{{host}} 未固定。确认指纹，然后在 SSH 克隆之前进行固定。",
+  "gitHostUnpinned": "主机密钥未固定",
+  "gitHookTitle": "Inbound hook",
+  "gitHookHint": "请自行把上方完整 POST URL 贴到 GitHub／Gitea／GitLab（只接收 push）。不是 Slack。密钥用 HMAC 或 X-YSK-Git-Hook。只会同步本项目已选定的 ref。",
+  "gitHookOn": "Hook 已开",
+  "gitHookOff": "Hook 已关",
+  "gitHookEnable": "开启 hook",
+  "gitHookRotate": "更换 secret",
+  "gitHookDisable": "关闭 hook",
+  "gitHookSecretOnce": "请立即复制此 secret——离开页面后不会再显示。",
+  "gitHookCopyUrl": "复制 URL",
+  "gitHookCopySecret": "复制 secret",
+  "gitHookCopied": "已复制",
+  "gitHookSetup": "请在 Git 平台自行新增 webhook：Payload URL 用上方完整网址；Content type 用 application/json；事件只选 push；Secret 用启用时显示的值。",
+  "gitHookGithub": "GitHub：Settings → Webhooks → Add webhook。Content type 选 application/json。Events 选 Just the push event。GitHub.com 需要 HTTPS。",
+  "gitHookGitea": "Gitea：Settings → Webhooks → Add Webhook → Gitea。方法 POST。事件选 Push。",
+  "gitHookGitlab": "GitLab：Settings → Webhooks。Trigger 选 Push events。Secret token 填 hook secret（以 X-Gitlab-Token 传送）。",
+  "gitHookHonesty": "主机 systemd 必须设 YSK_EXECUTE=1，hook 才会真正 clone／部署。否则只回计划结果。",
+  "gitHookSkipOther": "其他分支的 push 会被忽略，只同步本项目的 ref。",
+  "gitAuthHttps": "HTTPS 令牌",
+  "gitAuthSsh": "SSH 部署密钥",
+  "gitLoadRefs": "加载分支",
+  "gitRefDefault": "远程默认",
+  "gitRefBranches": "分支机构",
+  "gitRefTags": "标签",
+  "gitRefOther": "其他参考…",
+  "gitRefCustom": "提交或参考",
+  "gitRefsNeedUrl": "首先输入一个网址。",
+  "gitRefsNeedAuth": "保存令牌或部署密钥，然后加载分支。",
+  "gitRefsHint": "从远程加载。选择一个 — 不要打字。",
+  "gitHookSetupToggle": "这个怎么粘贴",
+  "gitHookOneLiner": "HMAC 或 X-YSK-Git-Hook。仅此项目的参考。",
+  "gitHookExecuteHint": "需要 YSK_EXECUTE=1 才能克隆或部署。",
+  "gitShowKey": "显示密钥",
+  "gitHideKey": "隐藏",
+  "gitBehindShort": "↓{{计数}}",
+  "gitAheadShort": "↑{{计数}}",
+  "gitDirtyShort": "肮脏 · {{count}}",
+  "gitFilesLink": "文件",
+  "gitTokenLaterHint": "HTTPS 令牌和克隆深度在创建后在项目“部署”选项卡上设置。",
+  "netForceHttpsOn": "发布边缘后，HTTP 将重定向到 HTTPS。",
+  "netForceHttpsOff": "不存储强制重定向。",
+  "netHttpsLiveNotForced": "存在边缘文件； HTTPS 可能已经可以工作。此框仅强制 HTTP→HTTPS。",
+  "gitSyncBlockedDirty": "同步将被禁用，直到本地更改被丢弃（重置）或文件与 Git 匹配为止。",
+  "gitViewDiff": "查看差异",
+  "gitBranchAfterUrl": "请先填写 Git 网址。留空则使用远端默认分支。",
+  "gitResetNeedConfirm": "需确认 — 会丢弃本机提交",
+  "openUrlNeedDomain": "首先设置一个域名 - 不要在浏览器中打开 127.0.0.1",
+  "needOsUser": "首先在“隔离”选项卡上创建系统用户",
+  "stopTitle": "停止该项目（systemd 单元和公共站点）",
+  "deployTitle": "部署此项目",
+  "httpStatsHint": "来自该项目的访问日志（最后一个示例）",
+  "httpStatsNone": "尚无项目访问日志",
+  "statStoppedOnly": "已停止",
+  "statReadyOnly": "准备好",
+  "netBoundCert": "已绑定证书",
+  "netBoundCertExpiry": "到期 {{at}}",
+  "netNoBoundCert": "此主机名磁盘上没有证书",
+  "netForceHttpsNeedCert": "强制 HTTPS 前，请先在 /ssl 为此域名签发证书。",
+  "goIsolation": "Open Isolation tab",
+  "netHstsNeedHttps": "Turn on force HTTPS first",
+  "homeMissing": "Home directory does not exist",
+  "homeMissingHint": "Same live probe as migrate inventory — create the system user on Isolation"
 }