ysk-server-shared 1.0.0

package/locales/en/geo.json

@@ -0,0 +1,151 @@
+{
+  "continents": {
+    "AS": "Asia",
+    "EU": "Europe",
+    "NA": "North America",
+    "SA": "South America",
+    "AF": "Africa",
+    "OC": "Oceania",
+    "AN": "Antarctica"
+  },
+  "countries": {
+    "CN": "China",
+    "HK": "Hong Kong",
+    "MO": "Macao",
+    "TW": "Taiwan",
+    "JP": "Japan",
+    "KR": "South Korea",
+    "KP": "North Korea",
+    "SG": "Singapore",
+    "MY": "Malaysia",
+    "TH": "Thailand",
+    "VN": "Vietnam",
+    "PH": "Philippines",
+    "ID": "Indonesia",
+    "IN": "India",
+    "AU": "Australia",
+    "NZ": "New Zealand",
+    "US": "United States",
+    "CA": "Canada",
+    "MX": "Mexico",
+    "BR": "Brazil",
+    "AR": "Argentina",
+    "GB": "United Kingdom",
+    "IE": "Ireland",
+    "DE": "Germany",
+    "FR": "France",
+    "NL": "Netherlands",
+    "BE": "Belgium",
+    "CH": "Switzerland",
+    "AT": "Austria",
+    "SE": "Sweden",
+    "NO": "Norway",
+    "DK": "Denmark",
+    "FI": "Finland",
+    "PL": "Poland",
+    "CZ": "Czechia",
+    "ES": "Spain",
+    "PT": "Portugal",
+    "IT": "Italy",
+    "RU": "Russia",
+    "UA": "Ukraine",
+    "TR": "Turkey",
+    "IL": "Israel",
+    "AE": "UAE",
+    "SA": "Saudi Arabia",
+    "EG": "Egypt",
+    "ZA": "South Africa",
+    "NG": "Nigeria",
+    "PK": "Pakistan",
+    "BD": "Bangladesh",
+    "IR": "Iran",
+    "IQ": "Iraq",
+    "RO": "Romania",
+    "BG": "Bulgaria",
+    "HU": "Hungary",
+    "GR": "Greece",
+    "LT": "Lithuania",
+    "LV": "Latvia",
+    "EE": "Estonia",
+    "BY": "Belarus",
+    "KZ": "Kazakhstan",
+    "UZ": "Uzbekistan",
+    "CL": "Chile",
+    "CO": "Colombia",
+    "PE": "Peru",
+    "VE": "Venezuela",
+    "CU": "Cuba",
+    "SC": "Seychelles",
+    "PA": "Panama"
+  },
+  "regions": {
+    "CN-BJ": "Beijing",
+    "CN-SH": "Shanghai",
+    "CN-TJ": "Tianjin",
+    "CN-CQ": "Chongqing",
+    "CN-GD": "Guangdong",
+    "CN-ZJ": "Zhejiang",
+    "CN-JS": "Jiangsu",
+    "CN-SD": "Shandong",
+    "CN-HN": "Henan",
+    "CN-HB": "Hubei",
+    "CN-HU": "Hunan",
+    "CN-SC": "Sichuan",
+    "CN-HE": "Hebei",
+    "CN-FJ": "Fujian",
+    "CN-AH": "Anhui",
+    "CN-JX": "Jiangxi",
+    "CN-LN": "Liaoning",
+    "CN-JL": "Jilin",
+    "CN-HL": "Heilongjiang",
+    "CN-SX": "Shanxi",
+    "CN-SN": "Shaanxi",
+    "CN-GS": "Gansu",
+    "CN-QH": "Qinghai",
+    "CN-HA": "Hainan",
+    "CN-YN": "Yunnan",
+    "CN-GZ": "Guizhou",
+    "CN-GX": "Guangxi",
+    "CN-NX": "Ningxia",
+    "CN-XJ": "Xinjiang",
+    "CN-XZ": "Tibet",
+    "CN-NM": "Inner Mongolia",
+    "TW-TPE": "Taipei",
+    "TW-TXG": "Taichung",
+    "TW-KHH": "Kaohsiung",
+    "HK-HK": "Hong Kong",
+    "MO-MO": "Macao",
+    "US-CA": "CA",
+    "US-NY": "NY",
+    "US-TX": "TX",
+    "US-FL": "FL",
+    "US-WA": "WA",
+    "US-IL": "IL",
+    "US-VA": "VA",
+    "US-OR": "OR",
+    "US-GA": "GA",
+    "US-NJ": "NJ",
+    "US-MA": "MA",
+    "US-OH": "OH",
+    "US-PA": "PA",
+    "US-AZ": "AZ",
+    "US-CO": "CO",
+    "US-NC": "NC",
+    "US-MI": "MI",
+    "US-NV": "NV",
+    "JP-13": "Tokyo",
+    "JP-27": "Osaka",
+    "JP-14": "Kanagawa",
+    "JP-23": "Aichi",
+    "KR-11": "Seoul",
+    "KR-26": "Busan",
+    "SG-01": "SG",
+    "AU-NSW": "NSW",
+    "AU-VIC": "VIC",
+    "GB-ENG": "ENG",
+    "DE-BE": "BE",
+    "DE-BY": "BY",
+    "RU-MOW": "MOW",
+    "RU-SPE": "SPE"
+  }
+}

package/locales/en/hostBrowse.json

@@ -0,0 +1,128 @@
+{
+  "tabBrowse": "Browse",
+  "subtitle": "Browse the internet or LAN via this host. Targets never see your desktop browser identity.",
+  "modeInternet": "Internet",
+  "modeIntranet": "Intranet",
+  "modeHint": "Internet blocks private IPs; Intranet allows LAN targets. Both block cloud metadata.",
+  "urlPlaceholder": "https://example.com or 192.168.1.1",
+  "go": "Go",
+  "back": "Back",
+  "forward": "Forward",
+  "reload": "Reload",
+  "stop": "Stop",
+  "clearCookies": "Clear cookies",
+  "closeSession": "Close session",
+  "copyUrl": "Copy URL",
+  "newSession": "New session",
+  "privacyOn": "Privacy on",
+  "viaHost": "via host",
+  "emptyTitle": "Host-mediated browse",
+  "emptyBody": "Enter a URL. DNS, TLS, and egress use this server — not your browser. Cookies stay in a server-side jar.",
+  "ssrfBlocked": "Blocked by security policy (SSRF / mode)",
+  "loadFailed": "Fetch failed on host",
+  "sessionReady": "Session ready",
+  "noSession": "No session",
+  "statusLine": "{{status}} · {{ms}}ms · {{type}} · via host",
+  "cookies": "Cookies",
+  "latency": "Latency",
+  "locked": "HTTPS",
+  "insecure": "HTTP",
+  "loading": "Loading…",
+  "modeSwitchHint": "Switching mode opens a new session and clears cookies.",
+  "copied": "URL copied",
+  "downloadHint": "Non-HTML response — open content frame or navigate again.",
+  "engineLabel": "Engine",
+  "engineProxy": "Proxy",
+  "engineBrowser": "Real browser",
+  "engineSwitchHint": "Switching engine opens a new session.",
+  "needChrome": "Real browser needs system Chrome/Chromium (or set YSK_HOST_BROWSE_CHROME). Using proxy otherwise.",
+  "needChromeFallback": "Chrome unavailable — switched to proxy engine.",
+  "liveError": "Live stream failed",
+  "liveWaiting": "Connecting host browser…",
+  "tabSettings": "Settings",
+  "softwareNeeded": "Chromium / Chrome required for real browser engine",
+  "softwareHint": "One-click installs distro Chromium via apt. Google Chrome binary is also detected if already present. Requires root + YSK_EXECUTE=1.",
+  "goInstallChrome": "Open Software tab",
+  "settingsIntro": "These panel settings override process environment variables for Host Browse.",
+  "settingsEngine": "Default engine",
+  "engineAuto": "Auto",
+  "settingsChromePath": "Chrome / Chromium path",
+  "settingsChromePathHint": "Empty = auto-detect. Example: /usr/bin/google-chrome",
+  "settingsLoopback": "Allow loopback in intranet mode (127.0.0.1)",
+  "settingsNoSandbox": "Chromium --no-sandbox (containers only)",
+  "settingsSave": "Save settings",
+  "settingsSaved": "Host Browse settings saved",
+  "envHintsTitle": "Process env (read-only; panel settings take precedence when set)",
+  "stream": {
+    "label": "Quality",
+    "smooth": "Smooth",
+    "balanced": "Balanced",
+    "sharp": "Sharp"
+  },
+  "zoom": {
+    "label": "Zoom",
+    "fit": "Fit",
+    "fill": "Fill"
+  },
+  "retryNav": "Retry navigation",
+  "retryLive": "Reconnect stream",
+  "tryProxy": "Switch to proxy engine",
+  "err": {
+    "LIVE_NO_FRAME": "Stream timed out: no frames received. Reconnect or retry navigation.",
+    "LIVE_WS_FAIL": "Live connection failed. Reconnect the stream.",
+    "SSRF_BLOCKED": "Target blocked by security policy.",
+    "BOT_CHALLENGE": "Target may require human verification or block automation. Complete the challenge on-screen if shown.",
+    "TIMEOUT": "Load timed out. Please retry.",
+    "DNS_FAIL": "DNS resolution failed.",
+    "TLS_FAIL": "TLS/SSL connection failed.",
+    "NAV_FAIL": "Navigation failed.",
+    "CHROME_LAUNCH": "Could not start host Chromium. Check install and no-sandbox settings.",
+    "SESSION_GONE": "Session expired. Navigate again.",
+    "NEED_CHROME": "Chrome/Chromium is required."
+  },
+  "home": "Home",
+  "bookmark": "Bookmark",
+  "bookmarks": "Bookmarks",
+  "history": "History",
+  "bookmarkToggled": "Bookmark updated",
+  "newTab": "New tab",
+  "fullscreen": "Fullscreen",
+  "mediaNote": "Real browser: video is streamed into the panel. Enable audio bridge in Settings to hear page audio (requires user gesture).",
+  "isolationNote": "Real browser creates an ephemeral Linux user for Chrome; leaving the page or idle timeout destroys that user.",
+  "resumeHint": "Resume previous session ({{count}} tabs)",
+  "resume": "Resume",
+  "resumeDismiss": "Dismiss",
+  "resumeDone": "Session resumed",
+  "settingsSafety": "Navigation safety",
+  "settingsSafetyHint": "Strict blocks more risky hosts; Relaxed allows broader intranet targets. Does not disable SSRF protections for cloud metadata.",
+  "safetyStrict": "Strict",
+  "safetyStandard": "Standard",
+  "safetyRelaxed": "Relaxed",
+  "settingsBlockHosts": "Blocked host suffixes",
+  "settingsBlockHostsHint": "One hostname or suffix per line (e.g. malware.test). Exact and suffix matches are blocked.",
+  "settingsAllowDangerousDownloads": "Allow high-risk downloads (exe / scripts)",
+  "settingsAudioBridge": "Bridge page audio to the panel",
+  "settingsAudioBridgeHint": "Streams host Chrome audio into this browser. Some sites need a click to unlock playback.",
+  "downloads": "Downloads",
+  "downloadsEmpty": "No downloads in this session",
+  "downloadReady": "Ready",
+  "downloadBlocked": "Blocked",
+  "downloadPending": "Pending",
+  "downloadFailed": "Failed",
+  "downloadSave": "Save",
+  "audioUnlock": "Enable sound",
+  "audioUnlockHint": "Click to unlock audio playback in this tab",
+  "audioUnlocked": "Audio unlocked",
+  "audioPlaying": "Audio playing",
+  "audioNeedsUnlock": "Audio needs unlock",
+  "audioBridgedHint": "Page audio is bridged from the host browser",
+  "audioNotBridged": "Audio off",
+  "audioNotBridgedHint": "Turn on audio bridge in Settings to hear the page",
+  "mediaPolicyTitle": "Media in real browser",
+  "mediaVideoLabel": "Video",
+  "mediaVideoDesc": "Rendered on the host and streamed as frames into the panel.",
+  "mediaAudioLabel": "Audio",
+  "mediaAudioDesc": "Optional bridge from host Chrome; may require unlock click.",
+  "mediaPolicyLabel": "Policy",
+  "mediaPolicyDesc": "Downloads and autoplay follow the safety and download settings above."
+}

package/locales/en/listToolbar.json

@@ -0,0 +1,12 @@
+{
+  "searchPlaceholder": "Search…",
+  "searchAria": "Search list",
+  "clearSearch": "Clear search",
+  "clearAll": "Clear filters",
+  "resultCount": "{{count}} results",
+  "showingOf": "Showing {{shown}} of {{total}}",
+  "activeFilters": "{{count}} filters active",
+  "noResults": "No matches",
+  "noResultsHint": "Try another keyword or clear filters.",
+  "searching": "Searching…"
+}

package/locales/en/logViewer.json

@@ -0,0 +1,3 @@
+{
+  "banIpTitle": "Ban {{ip}} in Protection"
+}

package/locales/en/login.json

@@ -0,0 +1,14 @@
+{
+  "title": "Sign in to YSK Server",
+  "subtitle": "Server console",
+  "username": "Username",
+  "password": "Password",
+  "submit": "Sign in",
+  "failed": "Sign-in failed. Check username or password.",
+  "footer": "A product of YSK Limited",
+  "totpRequired": "2FA is enabled for this account. Enter the 6-digit code.",
+  "totpLabel": "Authentication code",
+  "totpHint": "6-digit code from your authenticator app",
+  "submitting": "Signing in…",
+  "sessionExpired": "Session expired; sign in again"
+}

package/locales/en/logs.json

@@ -0,0 +1,135 @@
+{
+  "catSystem": "System files",
+  "catMail": "Mail",
+  "catSecurity": "Security",
+  "catApp": "App",
+  "catOther": "Other",
+  "journalService": "Journal unit",
+  "unavailable": "Unavailable",
+  "compressed": " · compressed",
+  "noLogFileYet": "(no log file yet)",
+  "afterDeploy": "Appears after deploy",
+  "logsLoaded": "Logs loaded",
+  "sseFailed": "SSE failed, falling back to poll",
+  "sseInterrupted": "SSE interrupted",
+  "settingsSaved": "Settings saved",
+  "exportedJsonl": "Exported JSONL",
+  "exported": "Exported",
+  "bookmarkSaved": "Bookmark saved",
+  "title": "Log center",
+  "fullAccess": "Full access",
+  "nonRoot": "Non-root",
+  "noExecute": "No EXECUTE",
+  "error": "Error",
+  "projectLog": "Project logs",
+  "filesCount": "{{count}} file(s)",
+  "tabExplore": "Explore",
+  "tabMaint": "Maintenance",
+  "tabSettings": "Settings",
+  "tabAbout": "About",
+  "sources": "Log sources",
+  "filterPlaceholder": "Filter unit / file…",
+  "filterSources": "Filter sources",
+  "noProjectLogs": "No project logs — appear after deploy",
+  "noMatchSources": "No matching sources",
+  "projectPrefix": "Project · ",
+  "timeRange": "Time range",
+  "unlimited": "Unlimited",
+  "priority": "Priority",
+  "all": "All",
+  "keywordIp": "Keyword / IP…",
+  "custom": "Custom",
+  "copied": "Copied",
+  "truncated": " · truncated",
+  "following": " · following",
+  "followingSse": " · following (SSE)",
+  "loadingSources": "Loading sources…",
+  "pickSource": "Pick a source on the left, or a shortcut · then Query",
+  "maintOverview": "Maintenance overview",
+  "executable": "Executable",
+  "restricted": "Restricted",
+  "needRootExecute": "Needs root+EXECUTE",
+  "retention": "Retention",
+  "retentionHint": "e.g. 7d · 14d · 30d",
+  "defaultLines": "Default lines",
+  "followInterval": "Follow interval",
+  "maxBytes": "Max bytes",
+  "maskSecrets": "Mask secrets",
+  "defaultVacuumDays": "Default vacuum days",
+  "d7": "7 days",
+  "d14": "14 days",
+  "d30": "30 days",
+  "d90": "90 days",
+  "journalAlerts": "Journal alerts",
+  "autoVacuum": "Auto vacuum",
+  "deleted": "Deleted",
+  "bookmarkDeleted": "Bookmark deleted",
+  "opsResult": "Ops result",
+  "saveBookmark": "Save bookmark",
+  "bookmarkNamePrompt": "Name for current query",
+  "query": "Query",
+  "follow": "Follow",
+  "export": "Export",
+  "vacuum": "Vacuum",
+  "loadFailed": "Failed to load",
+  "projectLogsLink": "Project → Logs",
+  "projectLogsDesc": " — per-site shortcut + deep link",
+  "queryFollow": "Query and follow",
+  "queryFollowDesc": "Default lines, follow interval, response cap on Explore",
+  "retentionAlerts": "Retention and alerts",
+  "retentionAlertsDesc": "vacuum defaults, journal disk alerts, auto-clean windows",
+  "dailyNeedRoot": "Daily (needs root + EXECUTE)",
+  "customAllow": "Custom allow paths",
+  "customAllowDesc": "Only /var/log or /run/log · reject .ssh, keys, /etc",
+  "pathsCount": "{{n}} path(s)",
+  "noCustomPaths": "No custom paths yet",
+  "bookmarks": "Bookmarks",
+  "bookmarksDesc": "Common Explore filters; open switches to Explore and applies source",
+  "noBookmarks": "No bookmarks — query on Explore then Save bookmark",
+  "settingsWriteNote": "Settings write to panel DB; auto vacuum checks window every 15 minutes.",
+  "saveSettings": "Save settings",
+  "vacuumDaysQ": "Vacuum time {{days}}?",
+  "vacuumSizeQ": "Vacuum size 500M?",
+  "vacuumDesc": "journalctl vacuum deletes old logs permanently.",
+  "vacuumRequested": "Vacuum requested",
+  "vacuumSizeRequested": "Vacuum size requested",
+  "scLogs": "Observe journal / files / projects",
+  "scProtection": "Incident response, auto ban (click IP)",
+  "shortcuts": "Shortcuts",
+  "projectsOnly": "Projects only",
+  "filesTitle": "{{n}} file(s)",
+  "bookmarksLabel": "Bookmarks",
+  "filter": "Filter",
+  "followSec": "Follow {{sec}}s",
+  "wrap": "Wrap",
+  "bookmark": "Bookmark",
+  "standby": "Idle",
+  "partialFail": "Partial / failed",
+  "lines": "{{n}} lines",
+  "followingSseDyn": " · following{{sse}}",
+  "ipBan": "IP → ban",
+  "vacuumNote": "Free systemd-journal disk. No EXECUTE → blocked, no fake success.",
+  "vacuumTime": "Vacuum time",
+  "vacuumHint": "Keep ≥7 days recommended; re-probe disk after.",
+  "logrotateStatus": "System logrotate status (read-only probe)",
+  "logrotateMissing": "No status file or unreadable — check logrotate package in services matrix",
+  "relatedOps": "Related ops",
+  "relatedOpsDesc": "Log observation vs incident response",
+  "scLogsLine": "Observe journal / files / projects",
+  "scProtLine": "Incident response, auto ban (click IP)",
+  "journalVacuumTitle": "Journal vacuum",
+  "journalSection": "Journal",
+  "sseLabel": "SSE",
+  "logrotateLabel": "logrotate",
+  "srcNginx": "nginx",
+  "srcSsh": "ssh",
+  "srcFail2ban": "fail2ban",
+  "srcAuthLog": "auth.log",
+  "srcNginxError": "nginx error",
+  "srcLetsEncrypt": "letsencrypt",
+  "groupJournal": "Journal",
+  "groupVarLog": "/var/log",
+  "prioErr": "err+",
+  "prioWarn": "warn+",
+  "prioInfo": "info+"
+}

package/locales/en/metrics.json

@@ -0,0 +1,132 @@
+{
+  "alert": {
+    "memory_high": "Memory high",
+    "load_high": "Load high",
+    "disk_high": "Disk high"
+  },
+  "loadFailed": "Failed to load metrics",
+  "projectUsageFailed": "Failed to load project usage",
+  "procListFailed": "Process list failed",
+  "streamEnded": "Stream ended ({{reason}})",
+  "streamOpenFailed": "Could not open stream",
+  "signalFailed": "Signal failed",
+  "detailFailed": "Could not load details",
+  "alertCount": "{{count}} alert(s)",
+  "attention": "Needs attention",
+  "normal": "OK",
+  "disk": "Disk",
+  "alerts": "Alerts",
+  "auto5s": "Auto 5s",
+  "hostSettings": "Host settings",
+  "loading": "Loading metrics…",
+  "tabs": {
+    "overview": "Overview",
+    "live": "Live processes",
+    "disk": "Disk",
+    "projectUsage": "Project usage",
+    "alerts": "Alerts"
+  },
+  "load": "Load",
+  "min1": "1m",
+  "min5": "5m",
+  "min15": "15m",
+  "loadHint": "Relative to {{cpus}} CPUs; above 1.0× may queue.",
+  "memory": "Memory",
+  "total": "Total",
+  "available": "Available",
+  "mainDisk": "Root disk",
+  "path": "Path",
+  "diskReadFail": "Could not read disk",
+  "viewAllMounts": "View all {{count}} mounts →",
+  "nAlerts": "{{count}} alerts",
+  "details": "Details",
+  "noThresholdAlerts": "No memory / load / disk threshold alerts",
+  "projectDisk": "Project disk (real du)",
+  "viewAllProjectUsage": "View all project usage →",
+  "loadProjectDisk": "Load project disk usage (real du) →",
+  "followSse": "Follow (SSE)",
+  "interval": "Interval",
+  "sort": "Sort",
+  "rows": "Rows",
+  "onceQuery": "One-shot query",
+  "procSearchPh": "Search PID / USER / COMMAND",
+  "procSearchAria": "Search processes",
+  "filterAll": "All",
+  "filterMine": "Non-system",
+  "selectedN": "{{count}} selected",
+  "showOf": " · showing {{shown}}/{{total}}",
+  "topLoading": "Loading top summary… (/proc/stat dual sample)",
+  "topAria": "top summary",
+  "perCore": "Per-core",
+  "noPerCore": "No per-core data",
+  "uptimeDays": "{{d}} days, {{h}}:{{m}}",
+  "used": "Used",
+  "free": "Free",
+  "signal": "Signal",
+  "kill": "Kill",
+  "send": "Send",
+  "procDetail": "Process detail",
+  "refreshProc": "Refresh processes",
+  "noProcs": "No processes",
+  "noProcsFilter": "No processes match filters",
+  "mounts": "Mounts",
+  "fs": "Filesystem",
+  "mount": "Mount",
+  "size": "Size",
+  "usage": "Usage",
+  "project": "Project",
+  "quota": "Quota",
+  "ratio": "Share",
+  "unlimited": "Unlimited",
+  "noProjects": "No projects yet",
+  "noProjectsDesc": "Create a project to see real home usage here",
+  "usageNote": "Usage from local du (not estimated). Quota is a control-plane soft limit; hard setquota needs apply-to-host.",
+  "thresholdAlerts": "Threshold alerts",
+  "alertsOkTitle": "All clear",
+  "alertsOkDesc": "No memory / load / disk threshold alerts.",
+  "cpu": "CPU",
+  "command": "Command",
+  "user": "User",
+  "clearSelection": "Clear selection",
+  "batchSignal": "Batch signal",
+  "liveHint": "Live process list (SSE or poll). Signals need root + YSK_EXECUTE.",
+  "signalTo": "Signal {{sig}} → PID {{pid}}",
+  "procAlive": "Process still alive (kill -0 ok)",
+  "procGone": "Process ended",
+  "procTable": "Processes ({{count}}{{more}})",
+  "procTableDesc": "ps list · select for TERM/KILL (needs YSK_EXECUTE)",
+  "selectAllAria": "Select all filtered",
+  "selectPidAria": "Select PID {{pid}}",
+  "controlPlane": "Control plane",
+  "detailShort": "Info",
+  "procUnavailable": "Could not get processes",
+  "noProcData": "No process data yet",
+  "noProcFilter": "No processes match filters",
+  "clickOnceOrFollow": "Run one-shot query or enable follow",
+  "liveFootnote": "Like SSH top: /proc/stat dual sample for %Cpu (per-core = top “1”), Mem/Swap, Tasks; process table from ps. Not an interactive PTY. Kill needs YSK_EXECUTE; PID 1 and control plane are protected by default.",
+  "forceKillTitle": "Force kill PID {{pid}} (SIGKILL)",
+  "sendSigTitle": "Send SIG{{sig}} to PID {{pid}}",
+  "forceKillDesc": "Cannot be caught; may lose data. Command: {{cmd}}",
+  "termDesc": "Process may clean up and exit. Command: {{cmd}}",
+  "forceKillBtn": "Force KILL",
+  "sendTermBtn": "Send TERM",
+  "procPidTitle": "Process PID {{pid}}",
+  "readingProc": "Reading /proc…",
+  "applyRenice": "Apply renice",
+  "reniceHint": "-20 highest · 19 lowest (needs EXECUTE)",
+  "noData": "No data",
+  "mountsTitle": "Disk mounts ({{count}})",
+  "mountsDesc": "Real df -P -B1 (tmpfs filtered)",
+  "noMounts": "No mount list",
+  "noMountsDesc": "df unavailable or filtered. Root disk still on Overview.",
+  "seeProjectUsage": "Project home usage is on the Project usage tab (real du · {{size}})",
+  "measuringDu": "Measuring project homes (du)…",
+  "projectUsageTitle": "Project disk usage ({{count}})",
+  "projectUsageDesc": "Real du · total {{total}} · {{at}}",
+  "projectUsageDescEmpty": "Run du on each project home_dir",
+  "remeasure": "Re-measure",
+  "usageNoteFull": "Usage from local du (not estimated). Quota is a control-plane soft limit; hard setquota needs apply-to-host.",
+  "sseNeedLogin": "Not logged in; cannot open SSE",
+  "sseSessionExpired": "Not logged in or session expired; cannot open SSE",
+  "sseHttpError": "stream HTTP {{status}}"
+}

package/locales/en/migrate.json

@@ -0,0 +1,82 @@
+{
+  "tabInventory": "Inventory",
+  "tabTarget": "Target",
+  "tabRun": "Run",
+  "tabDone": "Done",
+  "refreshFailed": "Refresh failed",
+  "migrateIncomplete": "Migration incomplete",
+  "requestFailed": "Migration request failed",
+  "title": "Full-host migration",
+  "subtitle": "Source control plane → full copy to new host. Afterward only change public IP/DNS; accounts, paths, and projects stay the same.",
+  "inventorying": "Inventorying",
+  "inventoried": "Inventoried",
+  "inventoryFailed": "Inventory failed",
+  "pendingInventory": "Pending inventory",
+  "projects": "Projects",
+  "mailboxes": "Mailboxes",
+  "users": "Users",
+  "software": "Software",
+  "jobs": "Jobs",
+  "notFound": "Not found",
+  "wizard": "Migration wizard",
+  "jobLog": "Job history",
+  "about": "About",
+  "steps": "Migration steps",
+  "sourceInventory": "Source inventory",
+  "sourceInventoryDesc": "Read-only scan of control plane and project paths; does not modify the system",
+  "inventoryRunning": "Inventorying this host…",
+  "host": "Host",
+  "projectHome": "Projects / home",
+  "needSoftware": "Software to install",
+  "noInventory": "No inventory yet",
+  "noInventoryHint": "Use Refresh (top right) to scan host state and jobs",
+  "targetHost": "Target host",
+  "targetHostDesc": "Root SSH only; password is for this request only and is not stored",
+  "sshTarget": "SSH target",
+  "sshPort": "SSH port",
+  "targetDataDir": "Target dataDir",
+  "authMethod": "Auth method",
+  "rootPassword": "Root password",
+  "notPersisted": "Not persisted",
+  "outboundIdentity": "Outbound identity in vault",
+  "dryRun": "Dry-run precheck",
+  "startMigrate": "Start full-host migration",
+  "needSshTarget": "Enter SSH target",
+  "needMaintWindow": "Check maintenance window",
+  "needRootPassword": "Enter root password",
+  "needRequired": "Complete required fields",
+  "result": "Migration result",
+  "blocked": "Blocked",
+  "failed": "Failed",
+  "detail": "Details",
+  "jobsTitle": "Migration jobs ({{count}})",
+  "jobsDesc": "State under dataDir/migrate/;",
+  "phase": "Phase",
+  "target": "Target",
+  "updated": "Updated",
+  "notes": "Notes",
+  "noJobs": "No migration jobs yet",
+  "noJobsHint": "Jobs appear after a dry-run or full migration in the wizard.",
+  "confirmTitle": "Confirm full-host migration",
+  "confirmDesc": "Will rsync and bootstrap {{target}}",
+  "confirmStart": "Confirm start",
+  "cancel": "Cancel",
+  "success": "Success",
+  "unfilledTarget": "(no target)",
+  "restartApiHint": "If you just deployed a new version, restart the API (",
+  "afterRestart": ") then Refresh.",
+  "inventoryWarnings": "Inventory warnings ({{count}})",
+  "moreWarnings": "…and {{n}} more",
+  "authPassword": "root password (switch to key after temp key install)",
+  "authIdentity": "SSH identity vault identityId",
+  "authAgent": "Local default agent / key",
+  "confirmMaint": "Confirm maintenance window",
+  "confirmMaintDesc": "· Source briefly pauses for consistent dump (required for real migrate)",
+  "allowOverwrite": "Allow overwrite of existing YSK data on target",
+  "allowOverwriteDesc": "· Required if target already has ysk.json",
+  "dryRunOnly": "Dry-run only",
+  "dryRunOnlyDesc": "· Inventory + precheck only; no rsync or target writes",
+  "executeNote": "Host needs YSK_EXECUTE=1 and root API. After migrate, update DNS A/AAAA and check cloud firewall + mail PTR.",
+  "dnsCutover": "DNS cutover (manual)",
+  "dnsCutoverDesc": "Point A/AAAA for these names to the new public IP;"
+}