ysk-server-shared 1.0.0

package/locales/en/softwareLifecycle.json

@@ -0,0 +1,61 @@
+{
+  "kindInstall": "Install",
+  "kindUninstall": "Uninstall",
+  "dockBusy": "{{kind}} · {{title}}",
+  "dockFail": "Failed · {{title}}",
+  "dockDone": "Done · {{title}}",
+  "minimize": "Minimize",
+  "liveLog": "Live log",
+  "uninstall": "Uninstall…",
+  "uninstallTitle": "Uninstall {{name}}",
+  "impactIntro": "These components and services will be affected. Review carefully before continuing.",
+  "nothingInstalled": "Nothing installed for this feature.",
+  "packagesList": "Packages: {{list}}",
+  "noPackages": "No apt packages listed",
+  "unitsList": "Services: {{list}}",
+  "dataPolicy": "Data policy",
+  "policyKeep": "Keep config & data",
+  "policyPurge": "Purge config & data (dangerous)",
+  "purgeWarning": "Purge permanently deletes configuration and data directories. This cannot be undone easily.",
+  "keepHint": "Packages will be removed; configuration and data directories are kept on disk.",
+  "summaryLine": "{{packages}} package(s), {{units}} service unit(s) will be processed.",
+  "doubleConfirmIntro": "Double confirmation is required for uninstall.",
+  "ackLabel": "I understand services may stop and I have read the impact list.",
+  "typePhrase": "Type {{phrase}} to confirm",
+  "confirmUninstall": "Confirm uninstall",
+  "protected": "Protected",
+  "readyHint": "Required software is installed. You can uninstall from here if needed.",
+  "readyTitle": "Software ready",
+  "jobInProgress": "Another install/uninstall is already running",
+  "uninstallDone": "Uninstall finished",
+  "uninstallFailed": "Uninstall failed",
+  "impact": {
+    "sitesDown": "Public sites may go offline",
+    "reverseProxy": "Reverse proxy will stop",
+    "phpBackend": "PHP backend may stop",
+    "mailOutbound": "Outbound mail will stop",
+    "mailInbound": "Inbound mail will stop",
+    "mailQueue": "Mail queue tools unavailable",
+    "mailDkim": "DKIM signing will stop",
+    "database": "Database service will stop",
+    "dataLossPurge": "Purge deletes data directories",
+    "cache": "Cache service will stop",
+    "firewall": "Host firewall will be removed",
+    "intrusion": "Intrusion blocking will stop",
+    "ftp": "FTPS service will stop",
+    "dns": "DNS server will stop",
+    "vpn": "VPN services will stop",
+    "vnc": "VNC services will stop",
+    "controlPlane": "Control plane runtime (protected)",
+    "generic": "Related services may stop",
+    "purgeData": "Data paths will be deleted",
+    "protectedSkipped": "Protected components are skipped",
+    "runtimeStack": "All panel-managed versions of this runtime will be removed"
+  },
+  "requestCancel": "Request cancel",
+  "cancelling": "Cancelling…",
+  "dockCancelling": "Cancelling · {{title}}",
+  "dockCancelled": "Cancelled · {{title}}",
+  "cancelHint": "Cancel requested. The client stopped listening; the host may finish the current apt/step. Re-probe status after a moment.",
+  "cancelledToast": "Operation cancelled (client stopped streaming)"
+}

package/locales/en/sqlEngineHealth.json

@@ -0,0 +1,31 @@
+{
+  "finding": {
+    "package_missing": "Server package for {{flavor}} is not installed.",
+    "client_missing": "SQL client tools are not installed.",
+    "frozen_marker": "Debian freeze marker present (mode: {{mode}}). Daemon start is blocked until released.",
+    "datadir_uninitialized": "Data directory has no system catalog — needs initialization.",
+    "config_flavor_mismatch": "my.cnf points at the wrong engine for {{flavor}} ({{path}}).",
+    "residual_foreign_plugins": "Residual config/plugins from the other SQL engine can crash this daemon.",
+    "unit_failed": "Service unit {{unit}} is failed.",
+    "unit_not_active": "Service unit {{unit}} is {{active}} (not active).",
+    "port_conflict": "Port 3306 is in use while this engine is down (possible conflict)."
+  },
+  "action": {
+    "stop_unit": "Stop service unit",
+    "clear_frozen": "Clear freeze marker",
+    "sanitize_config": "Align my.cnf and disable foreign engine plugins",
+    "init_datadir": "Initialize empty data directory",
+    "reset_failed": "Reset failed unit state",
+    "enable_unit": "Enable service at boot",
+    "start_unit": "Start service",
+    "verify_active": "Verify service is active"
+  },
+  "note": {
+    "alreadyHealthy": "SQL engine already healthy — no repair needed.",
+    "needsConfirm": "Repair needs confirmation ({{count}} steps: {{findings}}).",
+    "installPackageFirst": "Install {{flavor}} server package first, then repair.",
+    "stepFailed": "Repair step {{action}} failed: {{detail}}",
+    "repairOk": "Repair complete — {{unit}} is active.",
+    "repairIncomplete": "Repair finished but unit is still {{active}}."
+  }
+}

package/locales/en/sqlEngineSwitch.json

@@ -0,0 +1,82 @@
+{
+  "title": "Switch to {{target}}",
+  "subtitle": "Replace {{from}} with {{to}}. Only one SQL server is allowed on this host.",
+  "confirm": "Confirm switch and migrate",
+  "success": "SQL engine switched and data migrated",
+  "bannerHint": "If the other engine is already installed, you must confirm an exclusive switch (uninstall",
+  "flowAria": "SQL engine switch direction",
+  "from": "Current",
+  "to": "Target",
+  "calloutTitle": "Hard to undo without backups",
+  "calloutBody": "{{from}} packages are removed only after a successful export",
+  "sectionImpact": "What will happen",
+  "sectionLimits": "Limitations and risks",
+  "dbListTitle": "Databases to migrate ({{count}})",
+  "dbMigrateBadge": "{{count}} user database(s)",
+  "dbEmptyBadge": "No user databases",
+  "noUserDbs": "No user databases detected (system schemas only). The server engine will still be replaced.",
+  "tableCount": "{{count}} table(s)",
+  "ackLabel": "I understand the engines are exclusive. Uninstall {{from}} and migrate data to {{to}}.",
+  "phraseLabel": "Type {{phrase}} to confirm",
+  "phraseMismatch": "Phrase does not match. Type SWITCH exactly.",
+  "warn": {
+    "replace_engine": "Uninstall {{from}} and install {{to}}.",
+    "exclusive": "MySQL and MariaDB cannot run together as servers on one host (exclusive).",
+    "uninstall_packages": "Current SQL server packages will be removed from the system.",
+    "logical_dump": "User databases are logical-exported then imported. System schemas are not copied as files.",
+    "dialect_risk": "MariaDB- or MySQL-specific SQL may fail on import.",
+    "no_replication": "Replication settings, plugins, and binary logs are not migrated.",
+    "root_auth": "Root socket or password authentication may need reconfiguration after the switch.",
+    "no_user_dbs": "No user databases detected — only engine packages will change.",
+    "has_user_dbs": "{{count}} user database(s) will be exported and imported."
+  },
+  "note": {
+    "needsSwitch": "This host already runs {{other}}. MySQL and MariaDB are exclusive — confirm switch (export → uninstall other → install → import).",
+    "invalidTarget": "Invalid target (mysql or mariadb only).",
+    "badConfirmPhrase": "Confirm phrase must be exactly SWITCH.",
+    "needAck": "You must acknowledge exclusive switch (MySQL or MariaDB, not both).",
+    "switchNotNeeded": "Switch not needed — use normal install.",
+    "migrateDataRequired": "Data migration must be enabled when user databases exist.",
+    "dumpFailed": "Export failed — source {{source}} left running. {{detail}}",
+    "datadirBackupFailed": "Datadir backup failed — aborted before uninstall. Try starting the source service manually.",
+    "waitFailed": "Target service did not become ready. Backup: {{dumpPath}}. Old datadir: {{datadir}}. Manual recovery required.",
+    "incomplete": "Switch incomplete. Export retained at {{dumpPath}}. Old datadir at {{datadir}}. Do not purge again blindly.",
+    "switched": "Switched {{from}} → {{to}}. Imported {{imported}}/{{total}} database(s).",
+    "dumpPath": "Logical export path: {{path}}",
+    "datadirBackup": "Old datadir backup: {{path}} (remove when satisfied: rm -rf {{path}})",
+    "grantsExported": "Grants exported ({{detail}})",
+    "frozenDetected": "MySQL/MariaDB is FROZEN (not an apt failure). Path {{path}} (mode: {{mode}}). The package may be installed but the daemon refuses to start after an engine switch or downgrade. Clear freeze and re-init empty datadir if safe. Snippet: {{snippet}}",
+    "frozenCleared": "Removed freeze marker {{path}}.",
+    "frozenClearFailed": "Could not remove freeze marker {{path}} — remove manually as root.",
+    "datadirNotEmptySkipInit": "Data directory already has system tables — skipped re-initialize.",
+    "datadirInitialized": "Initialized empty data directory for {{flavor}}.",
+    "datadirInitFailed": "Failed to initialize data directory: {{detail}}",
+    "unitNotActive": "Unit {{unit}} is {{active}} (expected active).",
+    "nginxPortConflict": "Nginx unit not active — Apache may still bind public :80; rebind Apache to 127.0.0.1:8080, then restart Nginx.",
+    "nginxConfigFailed": "nginx -t failed: {{detail}}",
+    "frozenShort": "FROZEN ({{mode}}) — daemon blocked; unfreeze and repair required.",
+    "unfreezeNeedsConfirm": "Confirm required to unfreeze (frozen={{frozen}}, emptyDatadir={{empty}}). POST with confirm:true.",
+    "unfreezeOk": "Service {{unit}} is active after unfreeze repair.",
+    "unfreezeStartFailed": "Still not active after unfreeze: {{detail}}",
+    "unfreezePrompt": "Click “Unfreeze and repair” to clear FROZEN and re-init empty datadir.",
+    "configSanitized": "SQL config aligned for {{flavor}} (my.cnf → {{target}}). MariaDB plugin remnants disabled when targeting MySQL.",
+    "configSanitizeFailed": "Failed to sanitize SQL config: {{detail}}"
+  },
+  "step": {
+    "dump": "Export {{db}}",
+    "exportGrants": "Export grants",
+    "stop": "Stop {{unit}}",
+    "backupDatadir": "Backup datadir",
+    "purge": "Uninstall {{pkg}}",
+    "wait": "Wait for {{unit}}",
+    "importDb": "Import {{db}}",
+    "importGrants": "Import grants",
+    "verify": "Verify",
+    "preflight": "Preflight",
+    "confirm": "Confirm",
+    "clearFrozen": "Clear MySQL FROZEN",
+    "initDatadir": "Initialize empty datadir",
+    "startUnit": "Start {{unit}}",
+    "sanitizeConfig": "Sanitize my.cnf / residual plugins"
+  }
+}

package/locales/en/ssl.json

@@ -0,0 +1,103 @@
+{
+  "status": {
+    "uploaded": "Uploaded",
+    "issued": "Issued",
+    "planned": "In progress",
+    "failed": "Failed",
+    "missing": "Files missing",
+    "ready": "Ready",
+    "processing": "In progress"
+  },
+  "step": {
+    "ok": "Done",
+    "blocked": "Cannot run",
+    "failed": "Failed",
+    "skipped": "Skipped"
+  },
+  "pillCount": "{{count}} cert(s)",
+  "statCerts": "Certificates",
+  "statWithFiles": "With files",
+  "statBindings": "Bindings",
+  "statFailed": "Failed",
+  "requestLe": "Request Let’s Encrypt",
+  "openLetsEncryptLog": "Open letsencrypt.log in Log Center",
+  "uploadCert": "+ Upload certificate",
+  "certbotNotInstalled": "Certbot is not installed",
+  "leFailNxdomain": "DNS has no record for {{domain}} (NXDOMAIN) — Let's Encrypt cannot validate without a public A/AAAA.",
+  "leFailNxdomainHint": "Add an A record for {{domain}} to this server’s public IP in DNS, write the zone, confirm",
+  "leFailDns": "DNS error resolving {{domain}} (SERVFAIL or similar).",
+  "leFailDnsHint": "Check nameservers and that the zone is published to the public internet.",
+  "leFailHttp01": "{{domain}} resolves, but HTTP-01 failed (port 80 unreachable or wrong response).",
+  "leFailHttp01Hint": "Open port 80, ensure nginx listens on 80, and that {{domain}} points at this host",
+  "leFailRateLimit": "Let's Encrypt rate limit hit.",
+  "leFailRateLimitHint": "Wait and retry, or avoid repeated requests for the same name.",
+  "leFailCaa": "CAA records block Let's Encrypt for {{domain}}.",
+  "leFailCaaHint": "Add a CAA allowing letsencrypt.org, or remove the blocking CAA.",
+  "leFailChallenge": "Let's Encrypt domain validation failed ({{domain}}).",
+  "leFailChallengeHint": "Confirm DNS A record and port 80 reachability, then retry; see letsencrypt.log.",
+  "leFailUnknown": "Let's Encrypt request failed ({{domain}}).",
+  "leFailUnknownHint": "Open letsencrypt.log for details.",
+  "leFailRawTail": "Technical detail (excerpt): {{snippet}}",
+  "requestFailedWhy": "Why it failed",
+  "requestFailedNext": "Next steps",
+  "retryRequest": "Retry request",
+  "retryRequestFor": "Retry request for {{domain}}",
+  "retryInTableHint": "Retry from the failed domain row in the list below",
+  "bindingsTitle": "Bindings & renewal",
+  "autoRenewLabel": "Auto-renewal",
+  "autoRenewYes": "Enabled",
+  "autoRenewNo": "Not enabled / unconfirmed",
+  "autoRenewYesDetail": "Renewal mechanism detected: {{source}}. Let's Encrypt certs should renew before expiry when certbot is healthy.",
+  "autoRenewNoDetail": "No enabled certbot.timer or renew cron found. Enable certbot.timer or certs will expire unless you renew manually.",
+  "renewSourceCron": "panel/system cron",
+  "renewTimerEnabled": "systemd timer enabled: {{unit}}",
+  "renewTimerDisabled": "Found {{unit}} but it is not enabled (systemctl enable --now {{unit}})",
+  "renewTimerInstalledUnknown": "Host has {{unit}} unit file; confirm systemctl enable --now",
+  "renewTimerActive": "{{unit}} is active",
+  "renewViaCron": "Found {{count}} cron job(s) mentioning certbot/renew",
+  "renewNone": "No certbot.timer or LE renew cron registered",
+  "expiresUnknown": "Unknown",
+  "expiresUnknownHint": "Certificate file unreadable (permissions/path);",
+  "expiresInDays": "in {{n}} days",
+  "expiresAt": " · Expires {{date}}",
+  "projectsAt": " · Projects: {{names}}",
+  "mailAt": " · Mail: {{domains}}",
+  "noBindings": "No project/mail bindings detected",
+  "certsTitle": "Certificates ({{count}})",
+  "colDomain": "Domain",
+  "colProvider": "Source",
+  "providerUpload": "Upload",
+  "colLocalFiles": "Local files",
+  "filesYes": "Yes",
+  "filesNo": "No",
+  "colExpires": "Expires",
+  "colStatus": "Status",
+  "emptyTitle": "No certificates yet",
+  "emptyDesc": "Use “Upload certificate” or “Request Let’s Encrypt” above",
+  "uploadTitle": "Upload certificate",
+  "uploadDesc": "Paste PEM content; the panel writes files on the server",
+  "domainHint": "Primary domain for this cert, e.g. example.com",
+  "fullchainLabel": "Certificate chain (fullchain)",
+  "fullchainHint": "PEM with server cert and intermediate CA",
+  "privkeyLabel": "Private key (privkey)",
+  "privkeyHint": "Private key PEM matching the certificate — keep it secret",
+  "uploadHint": "Upload only writes files;",
+  "leTitle": "Request Let’s Encrypt",
+  "leDesc": "The panel requests the cert on the server — no manual certbot",
+  "requestCert": "Request certificate",
+  "domainLeHint": "Apex/domain or *.example.com wildcard",
+  "domainLePlaceholder": "example.com or *.example.com",
+  "emailLabel": "Contact email",
+  "emailHint": "For Let’s Encrypt expiry notices; leave empty to use admin@domain",
+  "leDns01Hint": "Wildcards use dns-01: the panel starts a certbot manual challenge — complete the TXT recor",
+  "leHttp01Hint": "Normal domains use http-01 (nginx plugin)",
+  "deleteTitle": "Delete certificate?",
+  "deleteDesc": "Removes cert files and registration for {{domain}}.",
+  "savedCert": "Saved certificate for {{domain}}",
+  "uploadFailed": "Upload failed",
+  "requestBlocked": "Cannot complete certificate request in the admin panel",
+  "requestDone": "Certificate request completed",
+  "requestFailed": "Certificate request did not succeed",
+  "applyFailed": "Request failed",
+  "deletedCert": "Deleted {{domain}}"
+}

package/locales/en/stackWizard.json

@@ -0,0 +1,19 @@
+{
+  "purgeConfirm": "Confirm purge? Registered data paths (databases/mail) will be deleted permanently.",
+  "installedCount": "Installed {{installed}} · Missing {{missing}}",
+  "needRootExecute": "Live install/remove needs administrator rights and system-change permission. You can still dry-run.",
+  "modeInstall": "Install plan",
+  "modeUninstall": "Uninstall",
+  "plan": "Plan",
+  "customBundles": "Custom bundles",
+  "sqlExclusive": "SQL server (exclusive)",
+  "clamavOptional": "optional, large",
+  "componentsTitle": "Components to install",
+  "dryRun": "Dry-run preview",
+  "installNow": "Install now",
+  "uninstallHint": "Select bundles to remove",
+  "dataPolicy": "Data policy",
+  "keepData": "Keep data",
+  "purgeData": "Purge data",
+  "uninstallNow": "Uninstall now"
+}

package/locales/en/support.json

@@ -0,0 +1,28 @@
+{
+  "title": "Support",
+  "sub": "Creator, donate, and YSK Limited — free product, real help",
+  "creatorTitle": "Creator",
+  "creatorBody": "YSK Server is built as a free, honest single-host control plane for operators who want to own their stack. The project is maintained in the open; feedback and bug reports keep it sharp.",
+  "donateTitle": "Support / Donate",
+  "donateBody": "If YSK Server saves you time, consider sponsoring development. Every contribution helps keep the product free for everyone.",
+  "donateGithub": "GitHub Sponsors",
+  "donateOther": "Other ways to give",
+  "yskTitle": "YSK Limited",
+  "yskIntro": "Need hands-on help beyond the free panel? YSK Limited can assist with:",
+  "yskSvc1": "Server setup, hardening, and ongoing ops",
+  "yskSvc2": "Hosting stack design (web, mail, DNS, databases)",
+  "yskSvc3": "Migration, automation, and custom integration",
+  "yskSvc4": "Incident response and production readiness reviews",
+  "yskNoPrice": "No prices listed here — contact us for a conversation that fits your environment.",
+  "yskWebsite": "ysk.hk",
+  "helpTitle": "Having a problem?",
+  "helpBody": "Email us with your OS, install log path, and what you expected vs what happened. We read every message.",
+  "docsHint": "Full documentation lives in the repository under",
+  "donateLinktree": "Linktree",
+  "cryptoTitle": "Crypto / web3 handles",
+  "cryptoHint": "Send on the matching network only. Double-check the address before sending.",
+  "cryptoNetwork": "Network",
+  "cryptoAddress": "Address",
+  "copy": "Copy",
+  "copied": "Copied"
+}

package/locales/en/system.json

@@ -0,0 +1,186 @@
+{
+  "exportLoadFailed": "Failed to load export data",
+  "dryRunDone": "Dry-run complete (system unchanged)",
+  "rebuildDone": "Rebuild request finished — see ops result",
+  "exportWritten": "Export written / managed conf listed",
+  "rebuildFailed": "Rebuild failed",
+  "hostFallback": "Host",
+  "mem": "Memory",
+  "diskPeak": "Disk peak",
+  "exportRebuild": "Export / Rebuild",
+  "dnsCerts": "DNS / certs",
+  "editIdentity": "Edit identity",
+  "power": "Power",
+  "metrics": "Metrics",
+  "writeExports": "Write export directory",
+  "dryRunSync": "Dry-run sync",
+  "hostConsole": "Host console",
+  "loadingHost": "Loading host overview…",
+  "identity": "Identity",
+  "identityReadonly": "Read-only — needs YSK_EXECUTE + root to apply",
+  "identityTools": "Set hostname and timezone via system tools",
+  "hostnameHint": "System hostname",
+  "writable": "Writable",
+  "locked": "Locked",
+  "hostname": "Hostname",
+  "prettyName": "Pretty name",
+  "optional": "Optional",
+  "prettyPh": "Friendly display name",
+  "timezone": "Timezone",
+  "timezoneHint": "Choose an IANA timezone from the list (e.g. Asia/Hong_Kong)",
+  "timezoneSelect": "Select timezone",
+  "dns": "DNS",
+  "updated": "Updated",
+  "applyIdentity": "Apply identity",
+  "identitySetHostname": "Hostname set to {{name}}",
+  "identitySetPretty": "Pretty hostname set to {{name}}",
+  "identityClearPretty": "Pretty hostname cleared",
+  "identitySetTimezone": "Timezone set to {{tz}}",
+  "panelSsl": "Panel SSL",
+  "panelTls": {
+    "title": "Panel HTTPS",
+    "sub": "Control plane (ysk-server) serves TLS on listenPort; WebAuthn/Passkeys need HTTPS",
+    "domain": "Panel domain",
+    "domainHint": "Used for certificate issue/bind, e.g. demo.ysk.hk",
+    "email": "Let’s Encrypt email",
+    "status": "Status",
+    "enabled": "TLS enabled in config",
+    "disabled": "TLS off (HTTP)",
+    "serving": "This connection: HTTPS",
+    "servingHttp": "This connection: HTTP",
+    "expires": "Certificate expires",
+    "certPath": "Certificate path",
+    "issueEnable": "Issue cert & enable HTTPS",
+    "enableExisting": "Enable with existing cert",
+    "disable": "Disable panel HTTPS",
+    "needDomain": "Enter hostname / domain first",
+    "urlHint": "After restart open {{url}}",
+    "certMissing": "TLS enabled but cert/key files missing",
+    "restartToApply": "Restart ysk-server to apply HTTPS",
+    "noConfig": "config.json not found (start with --config)",
+    "usingExisting": "Using existing local certificate",
+    "usingLe": "Using Let’s Encrypt live paths",
+    "needCertFirst": "No certificate for {{domain}}; issue or upload first",
+    "configWritten": "Panel TLS settings written",
+    "disabledNote": "Panel TLS disabled",
+    "certAlreadyPresent": "Certificate already present; skipped re-issue",
+    "restartManual": "Restart manually: systemctl restart ysk-server",
+    "restarted": "ysk-server restarted",
+    "restartFailed": "Restart failed: {{detail}}",
+    "firewallHint": "If reaching from the internet, allow the panel port (default 9287/tcp)",
+    "restartNow": "Restart ysk-server immediately after",
+    "restartNowHint": "Drops this session;",
+    "restartConfirm": "Restart the panel service now? This connection may drop — reopen over HTTPS.",
+    "manualRestart": "Restart manually, then open {{url}}",
+    "reconnectHttps": "Service may have restarted. Reconnect at {{url}}.",
+    "leStrategies": "Panel cert: try webroot → nginx certonly → standalone (no --redirect)",
+    "leOk": "Let’s Encrypt certificate obtained for {{domain}}",
+    "leFailed": "Certificate request failed: {{detail}}",
+    "leHint": "Ensure DNS A points here and port 80 is reachable (or nginx serves the domain)",
+    "openFirewall": "If public: allow panel port {{port}}/tcp (Firewall → open port → 9287 Panel)"
+  },
+  "timeNtp": "Time & NTP",
+  "clockStatus": "System clock status",
+  "local": "Local",
+  "utc": "UTC",
+  "source": "Source",
+  "ntpService": "NTP service",
+  "ntpServiceActive": "Running",
+  "ntpServiceInactive": "Stopped",
+  "ntpServiceNa": "N/A",
+  "ntpSync": "Clock sync",
+  "ntpSyncedYes": "Synchronized",
+  "ntpSyncedNo": "Not synchronized",
+  "ntpSyncedUnknown": "Unknown",
+  "ntpRequested": "NTP sync enable requested",
+  "ntpFailed": "Failed to enable NTP",
+  "enableNtp": "Enable NTP sync",
+  "network": "Network",
+  "networkSub": "Read-only · full netplan is not on this page",
+  "noIp": "Could not read IPs",
+  "storage": "Storage",
+  "metricsDetail": "Metrics detail",
+  "noDisk": "Could not read disks",
+  "avail": "Avail {{v}}",
+  "shortcuts": "Ops shortcuts",
+  "shortcutsAria": "Ops shortcuts",
+  "scServices": "Service matrix",
+  "scServicesD": "unit lifecycle",
+  "scUnit": "Control-plane unit",
+  "scUnitD": "Panel systemd unit",
+  "scReadiness": "Readiness",
+  "scReadinessD": "Production gate",
+  "scUpdates": "System updates",
+  "scUpdatesD": "Packages / CVE",
+  "scMetrics": "Host metrics",
+  "scMetricsD": "Load alerts",
+  "scLogs": "Log center",
+  "scLogsD": "journal / files",
+  "powerTitle": "Power (danger zone)",
+  "powerWarn": "Reboot/poweroff interrupts all services and the panel. The panel cannot power the host on — needs physical access or hypervisor.",
+  "unlocked": "Unlocked",
+  "powerCaps": "Needs YSK_EXECUTE=1 and root. Now EXECUTE={{exec}}, root={{root}}.",
+  "scheduledPower": "Scheduled poweroff/reboot detected",
+  "cancelScheduleHint": ". Use “Cancel schedule” to withdraw.",
+  "rebootHost": "Reboot host…",
+  "poweroffHost": "Power off…",
+  "cancelled": "Cancelled",
+  "cancelFailed": "Cancel failed",
+  "cancelSchedule": "Cancel schedule",
+  "confirmStrings": "Confirm with REBOOT / POWEROFF. Default delay ~1 min for poweroff and reboot (shutdown +N). Written to audit.",
+  "confirmReboot": "Confirm host reboot?",
+  "confirmPoweroff": "Confirm power off?",
+  "confirmRebootDesc": "All services and panel sessions will drop. Type REBOOT to confirm.",
+  "confirmPoweroffDesc": "Host will power off; panel cannot remote power-on. Type POWEROFF to confirm.",
+  "typeToUnlock": "Type {{need}} to unlock",
+  "confirmRebootBtn": "Confirm reboot",
+  "confirmPoweroffBtn": "Confirm power off",
+  "sentDisconnect": "Sent — connection will drop",
+  "powerFailed": "Power action failed",
+  "exportExplain": "Export = panel DB summary JSON. Rebuild = managed conf → /etc/nginx/conf.d + reload. Sync needs root + EXECUTE.",
+  "controlSummary": "Control-plane summary",
+  "controlSummarySub": "Live DB snapshot · preview / download / write to server",
+  "snapshotLoaded": "Summary loaded · {{at}}",
+  "previewSummary": "Preview summary",
+  "downloadedJson": "JSON downloaded to browser",
+  "downloadJson": "Download JSON",
+  "snapshotMeta": "Generated {{at}} · users {{users}} · packages {{packages}}",
+  "previewHint": "Click “Preview summary” to load the control-plane snapshot.",
+  "managedNotEtc": "dataDir/nginx/conf.d — not the same as applied under /etc",
+  "nFiles": "{{count}} files",
+  "noManaged": "No managed conf yet",
+  "noManagedDesc": "Appears after publishing project Nginx",
+  "readFailed": "Read failed",
+  "preview": "Preview",
+  "previewModalDesc": "Managed conf content (dataDir)",
+  "prevPage": "Previous",
+  "nextPage": "Next",
+  "pageOf": "Page {{page}} / {{total}} · {{count}} files",
+  "managedPager": "Managed conf pages",
+  "syncToSystem": "Sync to system",
+  "syncSub": "Copy to /etc/nginx/conf.d and reload — needs root + EXECUTE",
+  "syncReload": "Sync + reload",
+  "exportOnly": "Export only + list conf",
+  "dryRun": "Dry-run",
+  "dryRunNote": "Dry-run does not change the system.",
+  "exportHistory": "Server export history",
+  "exportHistorySub": "dataDir/exports · authenticated download",
+  "noExports": "No server export files yet",
+  "noExportsDesc": "Click “Write export directory” to create",
+  "downloaded": "Downloaded {{name}}",
+  "download": "Download",
+  "syncConfirmTitle": "Sync Nginx to system?",
+  "syncConfirmDesc": "Sync managed Nginx conf to /etc/nginx/conf",
+  "uptime": "Uptime",
+  "load1m": "Load 1m",
+  "executeLabel": "EXECUTE",
+  "rootLabel": "Root",
+  "managedLabel": "Managed",
+  "managedCount": "Managed",
+  "exportsCount": "Exports",
+  "managedNginxTitle": "Managed Nginx",
+  "exportPath": "Export path",
+  "mode": "Mode",
+  "managedConf": "Managed conf",
+  "dryRunFlag": "Dry-run"
+}

package/locales/en/systemd.json

@@ -0,0 +1,94 @@
+{
+  "enabled": "Enabled",
+  "disabled": "Disabled",
+  "notInstalled": "Not installed",
+  "running": "Running",
+  "notRunning": "Not running",
+  "failed": "Failed",
+  "activating": "Activating",
+  "unitMissing": "Unit missing",
+  "loadFailed": "Failed to load",
+  "opFailed": "Operation failed",
+  "installedEnabled": "Installed and tried to enable",
+  "unitTemplateWritten": "Unit template written",
+  "writeTemplate": "Write management-dir template",
+  "writeTemplateDesc": "Creates ysk-server.service under dataDir/systemd (does not change /etc)",
+  "templateExists": "Management template already exists",
+  "installEnable": "Install to /etc/systemd and enable",
+  "installEnableDesc": "Copy unit → daemon-reload → enable --now",
+  "needExecuteRoot": "Needs YSK_EXECUTE and root",
+  "serviceNotRunning": "Service not running",
+  "serviceNotRunningHint": "Unit may be installed but inactive — try Install & enable or the services matrix",
+  "controlRunning": "Control-plane service running",
+  "unlockApply": "Unlock system apply capability",
+  "startAsRoot": "Start as root with YSK_EXECUTE=1",
+  "status": "Status",
+  "bootEnabled": "Start on boot",
+  "on": "On",
+  "off": "Off",
+  "yes": "Yes",
+  "no": "No",
+  "canInstall": "Installable",
+  "copyEnable": "Copy to /etc/systemd and enable --now",
+  "needExecuteRootShort": "Needs EXECUTE + root",
+  "probing": "Probing systemd status…",
+  "suggestedSteps": "Suggested steps",
+  "install": "Install",
+  "policy": "Policy",
+  "about": "About",
+  "exists": "Exists",
+  "missing": "Missing",
+  "notWritten": "Not written yet",
+  "related": "Related",
+  "opsResult": "Ops result",
+  "writeTemplateOnly": "Write template only",
+  "installAndEnable": "Install and enable",
+  "stepReport": "Step report",
+  "installEnableShort": "Install enable",
+  "cannotInstall": "Cannot install to system yet: needs ",
+  "andRoot": " and root. Write template still creates management files. See ",
+  "probeDetail": "Probe detail",
+  "probeDetailSub": "Live systemd state and unit files on disk",
+  "unit": "Unit",
+  "manageTemplate": "Management template",
+  "installOps": "Install actions",
+  "twoModes": "Two modes for different needs — pick by environment",
+  "writeOnlyTitle": "Write template only",
+  "writeOnlyBody": "Creates management-dir unit file. Good for review or prep without root.",
+  "willNotEnable": "Does not enable the service.",
+  "writeTemplateBtn": "Write template",
+  "installEnableTitle": "Install and enable",
+  "installEnableBody": "Copy to /etc/systemd/system, daemon-reload, enable --now. Needs root + EXECUTE.",
+  "policyWrite": "Write template only — dataDir only, not /etc",
+  "policyInstall": "Install and enable — cp + daemon-reload + enable",
+  "policyBlocked": "No EXECUTE or non-root → clearly blocked, no fake success",
+  "policyNotEqual": "Write template ≠ service enabled ≠ listening",
+  "shortcutPower": "EXECUTE / power",
+  "shortcutOther": "Other units",
+  "cannotInstallFull": "Cannot install to system yet: needs YSK_EXECUTE=1 and root. Write template still creates management files. See ",
+  "policyWriteFull": "Write template only — dataDir only, not /etc",
+  "policyNotEqualFull": "Write template ≠ service enabled ≠ listening",
+  "controlPlaneUnit": "Control-plane unit",
+  "kpiRuntime": "Runtime",
+  "kpiBoot": "Boot enable",
+  "kpiCaps": "Apply capability",
+  "capsReady": "Can install to system",
+  "capsBlocked": "Cannot apply",
+  "unitFiles": "Unit files",
+  "unitFilesSub": "System path vs panel-managed template (different roles)",
+  "systemUnitFile": "System unit (/etc)",
+  "systemUnitHint": "Unit systemd loads; appears after install & enable.",
+  "managedUnitFile": "Managed template (dataDir)",
+  "managedUnitHint": "Panel-written template — not the same as installed in /etc.",
+  "managedPathHint": "dataDir/systemd/ysk-server.service",
+  "fragmentPath": "Fragment path",
+  "fromSystemd": "From systemd",
+  "pid": "PID {{pid}}",
+  "nextAction": "Suggested next step",
+  "controlRunningHint": "systemctl is-active = active",
+  "aboutPolicyTitle": "Apply policy",
+  "aboutPolicySub": "Template write and system install are separate steps. Re-running after install is normal ops, not a missing step.",
+  "policyInstallFull": "Install & enable: copy to /etc/systemd/system, daemon-reload, enable --now. Needs root + EXECUTE.",
+  "policyBlockedTitle": "Blocked without privilege",
+  "policyNotEqualTitle": "States are not equivalent"
+}

package/locales/en/tabs.json

@@ -0,0 +1,7 @@
+{
+  "scrollLeft": "Scroll tabs left",
+  "scrollRight": "Scroll tabs right",
+  "about": "About",
+  "main": "Actions",
+  "stack": "Software"
+}