ysk-server-shared 1.1.24 → 1.1.26

package/locales/zh-CN/notes.json

@@ -1,7 +1,11 @@
 {
+  "agents": {
+    "sessionNotFound": "找不到 session：{{sessionId}}"
+  },
   "notFound": "找不到",
   "needPath": "请指定路径",
   "needName": "请填写名称",
+  "needHost": "请填写主机",
   "needDomain": "请填写域名",
   "needProjectName": "请填写项目名称",
   "needServerIp": "请指定服务器 IP",
@@ -37,6 +41,10 @@
   "cdn": {
     "siteNotFound": "找不到 CDN 站点",
     "nodeMissing": "节点不存在",
+    "loopbackOriginRemote": "来源是 127.0.0.1 — 这是该主机，而不是远程边缘。设置可达的源IP或bind_ip。",
+    "originRemoteRewrite": "远程边缘将使用可达源 {{url}} 而不是环回。",
+    "originRemoteUnknown": "来源是环回，并且没有已知的公共/LAN IP 或bind_ip — apply 将拒绝远程边缘，直到设置为止。",
+    "needSshOrFleet": "远程边缘需要出站 SSH 身份（或用户名）或 /agents 队列会话。仅健康 URL 不适用传输。",
     "probe": {
       "timeout": "连接超时 {{ms}}ms（{{detail}}）。对端可能被防火墙挡住。",
       "dns": "DNS 查询失败（{{detail}}）。",
@@ -44,40 +52,42 @@
       "tls": "TLS 验证失败（{{detail}}）。",
       "unreach": "主机不可达 {{ms}}ms（{{detail}}）。",
       "http": "HTTP 探活失败 {{ms}}ms（{{detail}}）。"
-    },
-    "loopbackOriginRemote": "来源是 127.0.0.1 — 这是该主机，而不是远程边缘。设置可达的源IP或bind_ip。",
-    "needSshOrFleet": "远程边缘需要出站 SSH 身份（或用户名）或 /agents 队列会话。仅健康 URL 不适用传输。",
-    "originRemoteRewrite": "远程边缘将使用可达源 {{url}} 而不是环回。",
-    "originRemoteUnknown": "来源是环回，并且没有已知的公共/LAN IP 或bind_ip — apply 将拒绝远程边缘，直到设置为止。"
+    }
   },
   "backup": {
     "testUnsaved": "正在测试未保存的表单（尚未写入设置）。",
+    "testIdentity": "ssh (identity) to {{spec}} ok",
+    "sshAuthFailed": "SSH 密钥或密码被拒绝（公钥）。选择出站身份或安装 sshpass。",
+    "remotePathIsFile": "远程路径 {{path}} 是一个文件。使用目录。",
+    "remoteMkdirFailed": "无法创建远程目录：{{detail}}",
+    "sidecarPushed": "还推送了 SQL sidecar {{name}}",
     "fileNotFound": "找不到备份文件",
     "resticNoPassword": "restic 已启用但未设置 password",
     "resticNotInPath": "restic 不在 PATH",
     "dbEnvUnreadable": "无法读取 .db.env，跳过 SQL 导出。",
     "dbEnvNoName": ".db.env 没有数据库名称，跳过 SQL 导出。",
     "targetOutside": "还原目标必须在项目家目录或公开文件根目录之内。",
-    "testIdentity": "ssh (identity) to {{spec}} ok",
-    "sshAuthFailed": "SSH 密钥或密码被拒绝（公钥）。选择出站身份或安装 sshpass。",
-    "remotePathIsFile": "远程路径 {{path}} 是一个文件。使用目录。",
-    "remoteMkdirFailed": "无法创建远程目录：{{detail}}",
-    "sidecarPushed": "还推送了 SQL sidecar {{name}}",
     "controlPlaneDryRun": "仅预览 - 没有写任何东西。在面板中，使用“恢复”并确认要写入的短语。",
     "controlPlaneNeedConfirm": "完全控制平面恢复需要确认短语 RESTORE-CONTROL-PLANE。",
     "controlPlaneRestartAfter": "恢复成功后重新启动API。",
-    "movedToTrash": "Moved {{name}} to the recycle bin. Permanent delete after {{days}} days.",
-    "restoreNameExists": "Cannot restore {{name}} — a live archive with that name already exists.",
-    "restoredFromTrash": "Restored {{name}} from the recycle bin.",
-    "trashEmptied": "Permanently deleted {{n}} archive(s) from the recycle bin.",
-    "partialOk": "Partial success — {{n}} project(s) skipped"
+    "movedToTrash": "已将 {{name}} 移至回收区。{{days}} 日后永久删除。",
+    "restoreNameExists": "无法还原 {{name}} — 已有同名备份档。",
+    "restoredFromTrash": "已从回收区还原 {{name}}。",
+    "trashEmptied": "已从回收区永久删除 {{n}} 个备份档。",
+    "partialOk": "部分成功 — 略过 {{n}} 个专案"
+  },
+  "health": {
+    "portListening": "埠 {{port}} 正在监听",
+    "portNotListening": "埠 {{port}} 未在监听",
+    "httpOk": "HTTP 正常 {{status}}",
+    "httpFail": "HTTP 失败：{{detail}}"
   },
   "redis": {
     "cliMissing": "未安装 redis-cli",
-    "requirepassAlreadySet": "Redis already has requirepass — not overwritten.",
-    "requirepassApplied": "requirepass applied at runtime",
-    "requirepassApplyFailed": "Could not CONFIG SET requirepass (will rely on restart + conf)",
-    "generatedRequirepass": "Generated Redis password (shown once): {{password}}"
+    "requirepassAlreadySet": "Redis 已有 requirepass — 未覆写。",
+    "requirepassApplied": "已在执行中套用 requirepass",
+    "requirepassApplyFailed": "无法 CONFIG SET requirepass（将靠重启与设定档）",
+    "generatedRequirepass": "已产生 Redis 密码（只显示一次）：{{password}}"
   },
   "nginx": {
     "reloaded": "nginx 已 reload",
@@ -86,11 +96,11 @@
     "managedDir": "管理配置目录：{{path}}",
     "includeHint": "在 Nginx 加入：include {{path}}/*.conf;",
     "removedOrphan": "已删除幽灵 Nginx conf {{path}}",
+    "keptLiveSsl": "保留 {{path}} 的 HTTPS 区块（受管范本没有 listen 443）",
     "orphanCleanupFailed": "清理幽灵 Nginx conf 失败：{{detail}}",
     "settingsWritten": "已写入 Nginx 全局 snippet",
     "settingsNeedExecute": "应用需 YSK_EXECUTE",
-    "reloadFailed": "nginx reload 失败",
-    "keptLiveSsl": "Kept live HTTPS block in {{path}} (managed template had no listen 443)"
+    "reloadFailed": "nginx reload 失败"
   },
   "ssl": {
     "requestCert": "申请证书"
@@ -102,7 +112,7 @@
     "openPortsStep": "防火墙端口（需手动）",
     "openPortsReminder": "请在主机防火墙和云安全组放行 TCP：{{ports}}。套用 FTPS 不会代你开端口。",
     "openPortsPasvHint": "若登录成功但列目录 LIST 超时，多半是 PASV 数据端口被挡——要开齐 PASV 范围，不是只开 21。",
-    "publicPlaintextBlocked": "Refusing to start public FTP without FTPS. Bind to this host only, enable FTPS with a certificate, or confirm PLAINTEXT to expose cleartext on the public address."
+    "publicPlaintextBlocked": "拒绝在未启用 FTPS 时对外启动 FTP。请改为仅本机监听、选凭证启用 FTPS，或输入 PLAINTEXT 确认后才公开明文服务。"
   },
   "deploy": {
     "nodeMissingIsolated": "隔离部署找不到 Node：{{path}} — 请先安装 Node {{version}} toolchain 再部署。拒绝写入会 203/EXEC 的 unit。",
@@ -158,18 +168,18 @@
     "applyDigFail": "conf 已注册但 dig 仍空/REFUSED — 不标 applied",
     "applySyncIncomplete": "PowerDNS bind 同步未完 — 仅写盘。请检查 EXECUTE/root 或 pdns 日志",
     "writeOnlyHint": "仅写了 zone 文件 — 需 load/apply 挂 named.conf 才会应答",
-    "noActiveUnit": "No active named/bind9/pdns unit",
-    "pdnsUnitRestarts": "pdns unit state/restarts: {{detail}}",
-    "port53LoopbackOnly": "Port 53 is only on loopback (systemd-resolved 127.0.0.53) — not a product authoritative nameserver",
-    "port53Closed": "Port 53 is not listening (UDP/TCP)",
-    "udp53NotPublic": "UDP/53 is not listening on a public address",
-    "tcp53NotPublic": "TCP/53 is not listening on a public address",
-    "noManagedZones": "No managed zone files under dataDir/dns/zones",
-    "pdnsListZones": "PowerDNS list-zones: {{n}}",
-    "lookupIgnoredAt": "dig is unavailable — @{{server}} was ignored. Not using the system resolver as that server’s answer.",
+    "noActiveUnit": "没有运行中的 named／bind9／pdns 单元",
+    "pdnsUnitRestarts": "pdns 单元状态／重启次数：{{detail}}",
+    "port53LoopbackOnly": "53 埠只绑在 loopback（systemd-resolved 127.0.0.53）— 不是产品权威 nameserver",
+    "port53Closed": "53 埠未在听（UDP／TCP）",
+    "udp53NotPublic": "UDP/53 未绑公网位址",
+    "tcp53NotPublic": "TCP/53 未绑公网位址",
+    "noManagedZones": "dataDir/dns/zones 没有管理中的 zone 档",
+    "pdnsListZones": "PowerDNS list-zones：{{n}}",
+    "lookupIgnoredAt": "dig 不可用 — 已忽略 @{{server}}。不会把系统 resolver 当成该服务器的答案。",
     "digNotInstalled": "dig 未安装",
     "digEmpty": "dig 无答案",
-    "localAOk": "local A {{name}} → {{ip}}"
+    "localAOk": "本机 A {{name}} → {{ip}}"
   },
   "db": {
     "needExecuteCreate": "服务器未开启系统变更权限，无法在管理面板创建数据库",
@@ -217,13 +227,10 @@
     "postqueueSetgidBroken": "Postfix 队列工具失败：main.cf 中 setgid_group 为空。应设为 postdrop（有 YSK_EXECUTE 时面板会尝试自动修复）。",
     "postqueueMailDown": "Postfix 未运行（showq 不可用）。有 YSK_EXECUTE 时面板会尝试启动 — 请检查软件分页或 systemctl status postfix。",
     "postqueueSpoolMissing": "Postfix 队列目录缺失（例如 hold/）。有 YSK_EXECUTE 时面板会尝试创建 spool 并启动 Postfix。",
-    "invalidDomain": "Enter a valid mail domain",
-    "invalidServerIp": "Enter a valid server IP",
-    "mailboxLocalPartInvalid": "Mailbox local-part may only use letters, digits, . _ + -",
-    "passwordTooShort": "Password must be at least 8 characters"
-  },
-  "agents": {
-    "sessionNotFound": "找不到 session：{{sessionId}}"
+    "invalidDomain": "请输入有效邮件域名",
+    "invalidServerIp": "请输入有效服务器 IP",
+    "mailboxLocalPartInvalid": "邮箱本机部分只可用英文字母、数字与 . _ + -",
+    "passwordTooShort": "密码至少 8 个字元"
   },
   "software": {
     "startUnit": "启动 {{u}}",
@@ -282,6 +289,44 @@
   "probe": "探测",
   "install": "安装",
   "port": "端口",
+  "git": {
+    "missingBin": "git 不在路径上",
+    "auth": "认证失败。添加部署密钥或 HTTPS 令牌。",
+    "hostkey": "SSH 主机密钥验证失败。确认并固定主机密钥。",
+    "dirty": "工作树有 {{count}} 个本地更改。拉动被阻止。",
+    "diverged": "无法快进。如果您打算丢弃本地 Git 历史记录，请重置为远程引用。",
+    "missingRef": "该分支、标签或提交不在远程上。",
+    "shallow": "这个克隆很浅。在固定旧提交之前获取完整历史记录。",
+    "notRepo": "app/ 还不是 Git 存储库。",
+    "diffEmpty": "没有未暂存的差异（受保护的 .env 被排除）。",
+    "unrelated": "无关的历史。仅在确认后重新克隆 - 自定义文件将丢失。",
+    "lock": "Git index.lock 存在。仅当没有 git 进程正在运行时才将其删除。",
+    "disk": "磁盘已满或超出配额。",
+    "timeout": "Git 超时。",
+    "network": "与远程通信时出现网络错误。",
+    "lfs": "此存储库使用 Git LFS 并且 git-lfs 不可用。",
+    "submodule": "子模块更新失败。",
+    "unknown": "吉特失败了。查看命令输出。",
+    "fetchOk": "从原产地获取。",
+    "checkoutOk": "签出{{ref}}。",
+    "resetOk": "硬重置为{{ref}}。",
+    "envRestored": "从控制平面恢复了 app/.env。",
+    "needPinHost": "SSH 主机密钥未固定。在克隆或获取之前扫描并固定它。",
+    "tokenSaved": "已存储 HTTPS 令牌（不再显示）。",
+    "tokenCleared": "HTTPS 令牌已删除。",
+    "tokenInvalid": "令牌必须至少包含 8 个字符。",
+    "deployKeyCreated": "已创建部署密钥。在 Git 主机上添加公钥。",
+    "deployKeyCleared": "部署与该项目分离的密钥。",
+    "hostPinned": "{{host}} 的固定 SSH 主机密钥。",
+    "hostUnpinned": "清除固定的 SSH 主机密钥。",
+    "hostScanFailed": "ssh-keyscan 没有返回该主机的密钥。",
+    "hookEnabled": "入站 Git 挂钩已打开。自行将 URL 粘贴到 GitHub、Gitea 或 GitLab 中。",
+    "hookDisabled": "入站 Git 挂钩已关闭。 URL 将不会同步。",
+    "hookSecretOnce": "现在复制这个钩子秘密。它不再显示。",
+    "refsNeedUrl": "首先输入 Git URL。",
+    "refsOk": "已加载 {{branches}} 分支和 {{tags}} 标签。",
+    "refsEmpty": "远程没有发布任何分支或标签。"
+  },
   "auto": {
     "n0001": "状态：applied",
     "n0002": "找不到用户",
@@ -2796,7 +2841,27 @@
     "noHostLinesOrEmpty": "主机 crontab 无额外非 YSK 行（或空白）。",
     "installReplacesYskOnly": "安装只更新带 YSK 标记的任务；其他主机任务已合并保留。",
     "hostScanNeedRoot": "读取其他用户 crontab 需要控制面以 root 运行；目前只能列出控制面自身 crontab。",
-    "hostScanSkipUser": "跳过用户 {{user}}（无权读取）"
+    "hostScanSkipUser": "跳过用户 {{user}}（无权读取）",
+    "hostUserInvalid": "crontab 用户无效。",
+    "hostScheduleInvalid": "主机 cron 排程无效。",
+    "hostLineNotJob": "该 crontab 行不是工作。",
+    "hostLineMissing": "找不到对应的 crontab 行（主机 crontab 可能已变更）。",
+    "hostLineDuplicate": "该工作行出现 {{count}} 次；请先改成唯一的一行。",
+    "hostReadFailed": "无法读取 crontab：{{detail}}",
+    "hostWriteFailed": "写入 crontab 失败：{{detail}}",
+    "hostRewriteNeedExecute": "写入主机 crontab 需要 root 与 YSK_EXECUTE=1。目前只是预览。",
+    "hostRewriteNeedRoot": "修改其他用户的 crontab 需要控制面以 root 执行。",
+    "hostPreview": "下一行：{{line}}",
+    "hostPreviewDelete": "下一步：移除该行。",
+    "hostRewritten": "已写入 {{user}} 的 crontab。",
+    "hostRunNeedExecute": "试跑主机 cron 指令需要 YSK_EXECUTE=1。",
+    "hostRan": "已用 {{user}} 试跑主机 cron 指令。",
+    "hostAdoptNeedExecute": "把主机行纳入面板需要 YSK_EXECUTE=1（否则安装时会重复）。",
+    "hostAdopted": "主机行已标 # ysk:{{id}} 并登记到面板。",
+    "hostConfirmMismatch": "确认内容必须与指令相同。",
+    "hostAdoptOnlyInstallUser": "只能纳入“安装到系统”会写入的 crontab（root／本进程用户）。其他用户安装时会重复。",
+    "hostAdoptEnableFirst": "请先启用该主机行，再纳入面板。",
+    "hostPercentNewline": "crontab 把未跳脱的 % 当成换行。日期格式请写 \\%Y（或不要用 %）。"
   },
   "dbBrowser": {
     "pmaInstalled": "已安装 phpMyAdmin → {{path}}",
@@ -2895,6 +2960,8 @@
     "openvpnComing": "OpenVPN 完整流程將於後續版本提供。",
     "outlineComing": "Outline／Shadowsocks 將於後續版本提供。",
     "needExecuteServer": "VPN 伺服器設定需 root 與 YSK_EXECUTE=1。",
+    "serverStopped": "已停止 {{engine}} 伺服器。",
+    "serverStopFailed": "無法停止 {{engine}} 伺服器：{{detail}}",
     "needExecuteClient": "VPN 客戶端連線需 root 與 YSK_EXECUTE=1。",
     "keygenFailed": "WireGuard 金鑰產生失敗（是否已安裝 wg？）。",
     "serverKeysCreated": "已建立 WireGuard 伺服器金鑰。",
@@ -2904,6 +2971,7 @@
     "peerCreated": "已建立客戶端「{{name}}」。",
     "peerNotFound": "找不到客戶端。",
     "peerRemoved": "已移除 {{name}}。",
+    "peersSynced": "已在运行中的 WireGuard 界面重新载入对等端，未重启服务器。",
     "setEndpointHint": "請設定公開端點（host:port），手機客戶端才能連上。",
     "invalidConf": "此文件不是有效的 VPN 客户端配置。请使用 WireGuard 或 OpenVPN 客户端配置文件。",
     "clientImported": "已匯入設定檔「{{name}}」。",
@@ -2933,15 +3001,21 @@
     "accessReconnectHint": "已连接的客户端请断开再连，才会使用新路由",
     "ovpnNatDurable": "安装 OpenVPN NAT/转发以便重新启动 (systemd ExecStartPost)。",
     "clientFullTunnelProtect": "检测到全隧道客户端 (AllowedIPs 0.0.0.0/0)。应用主机保护，以便面板/SSH 回复保留在 LAN NIC 上。",
-    "clientFullTunnelHint": "提示：仅对于分割访问，请在conf中将AllowedIPs设置为VPN/LAN CIDR（而不是0.0.0.0/0），然后重新连接。",
-    "serverStopped": "已停止 {{engine}} 伺服器。",
-    "serverStopFailed": "無法停止 {{engine}} 伺服器：{{detail}}",
-    "peersSynced": "Peer list reloaded on the running WireGuard interface."
+    "clientFullTunnelHint": "提示：仅对于分割访问，请在conf中将AllowedIPs设置为VPN/LAN CIDR（而不是0.0.0.0/0），然后重新连接。"
   },
   "vnc": {
     "needInstall": "请安装 {{stack}}",
     "needExecute": "未启用 YSK_EXECUTE — 无法安装软件包或创建 Linux 用户。",
     "needRoot": "非 root — 无法 useradd 或应用 vncserver。",
+    "hostnameResolves": "主机名 {{hostname}} 可解析。",
+    "hostnameUnresolvable": "此主机无法解析自己的主机名（{{hostname}}）。修好 /etc/hosts 之前，VNC 工作阶段会启动失败。",
+    "hostnameAlreadyResolves": "主机名 {{hostname}} 已可解析 — 未改 /etc/hosts。",
+    "hostnameWouldAppend": "将会附加到 /etc/hosts：{{line}}",
+    "hostnameAppended": "已附加到 /etc/hosts：{{line}}",
+    "hostnameAppendFailed": "无法写入 /etc/hosts：{{detail}}",
+    "hostnameAliasPresent": "主机名 {{hostname}} 已在 /etc/hosts 列为完整别名 — 未再附加。",
+    "hostnameStillUnresolvable": "已写入 /etc/hosts，但 {{hostname}} 仍无法解析。请确认 nsswitch 的 hosts 包含 files。",
+    "skipStartHostname": "未启动 display — 请先修好主机名解析。",
     "novncAssetsOnly": "已找到 noVNC 网页资源；仍缺 websockify 可执行文件。",
     "viewerNeedExecute": "要在浏览器打开本机 VNC 桌面，需要 root 并启用 YSK_EXECUTE",
     "browserSessionReady": "浏览器 VNC 会话已就绪：{{name}}",
@@ -2975,10 +3049,12 @@
     "userdelBlocked": "无权限刪除 Linux 用戶 {{user}}（需 root + YSK_EXECUTE）",
     "userAlreadyGone": "Linux 用戶 {{user}} 已不存在",
     "userdelFailed": "userdel {{user}} 失败：{{detail}}",
+    "userdelLeftover": "面板账号已删，但 Linux 用户 {{user}} 仍在主机。请到用户页或主机再清。",
     "userDeleted": "已删除 Linux 用戶 {{user}}",
     "passwordTooShort": "VNC 密碼至少 6 個字符",
     "passwordWrittenOnly": "密碼只記在控制面（需 root + YSK_EXECUTE 才vncpasswd）",
     "passwordFailed": "写入 VNC 密碼失败：{{detail}}",
+    "passwordNeedTiger": "找不到 vncpasswd。请先安装 TigerVNC（tigervnc-standalone-server）再设定密码。",
     "passwordSet": "已為 {{user}} 設定 VNC 密碼",
     "passwordUpdated": "已更新 {{name}} 的密碼",
     "passwordMetaOnly": "密碼暂只记元資料，待系统应用",
@@ -2988,6 +3064,7 @@
     "xstartupWritten": "已写入 {{path}}",
     "sessionStartBlocked": "无权限启动 VNC session（需 root + YSK_EXECUTE）",
     "sessionStartFailed": "启动 display :{{display}} 失败：{{detail}}",
+    "sessionStartHostname": "启动 display :{{display}} 失败：此主机无法解析自己的主机名。请把主机名写入 /etc/hosts（或修正 DNS）后再启动工作阶段。",
     "sessionStarted": "已为 {{user}} 启动 :{{display}}（端口 {{port}}）",
     "sessionStartUnverified": "启动命令成功但 RFB 端口尚未监听",
     "sessionAlreadyRunning": "{{user}} 的 VNC 已在运行（:{{display}} / 端口 {{port}}）",
@@ -3031,20 +3108,8 @@
     "sessionStartCwd": "VNC 启动失败：工作目录会话用户无权访问（display :{{display}}）。已改为从 HOME 启动。",
     "desktopRestarted": "应用桌面配置文件并重新启动会话 ({{desktop}})。重新连接 VNC/noVNC。",
     "desktopNeedsStart": "桌面配置文件 {{desktop}} 写入 xstartup。启动会话以进行申请。",
-    "passwordNeedTiger": "找不到 vncpasswd。请先安装 TigerVNC（tigervnc-standalone-server）再设定密码。",
     "linuxUserRolledBack": "VNC 密码失败后已删除遗留 Linux 用户 {{user}}。",
-    "linuxUserOrphan": "VNC 密码失败后无法删除遗留 Linux 用户 {{user}}。",
-    "sessionStartHostname": "Failed to start display :{{display}}: this host cannot resolve its own hostname. Add the hostname to /etc/hosts (or fix DNS) then start the session again.",
-    "userdelLeftover": "Panel account removed, but Linux user {{user}} is still on the host. Remove it from Users or the host.",
-    "hostnameResolves": "Hostname {{hostname}} resolves.",
-    "hostnameUnresolvable": "This host cannot resolve its own hostname ({{hostname}}). VNC session start will fail until /etc/hosts is fixed.",
-    "hostnameAlreadyResolves": "Hostname {{hostname}} already resolves — /etc/hosts unchanged.",
-    "hostnameWouldAppend": "Would append to /etc/hosts: {{line}}",
-    "hostnameAppended": "Appended to /etc/hosts: {{line}}",
-    "hostnameAppendFailed": "Could not write /etc/hosts: {{detail}}",
-    "skipStartHostname": "Did not start the display — fix hostname resolution first.",
-    "hostnameAliasPresent": "Hostname {{hostname}} is already an exact /etc/hosts alias — not appended again.",
-    "hostnameStillUnresolvable": "Wrote /etc/hosts but {{hostname}} still does not resolve. Confirm nsswitch hosts includes files."
+    "linuxUserOrphan": "VNC 密码失败后无法删除遗留 Linux 用户 {{user}}。"
   },
   "apache": {
     "needServerName": "需要域名",
@@ -3120,6 +3185,11 @@
     "orphanRmFailed": "无法删除孤立主目录：{{detail}}",
     "orphanRemoved": "已删除孤立项目主目录 {{path}}。"
   },
+  "publicFiles": {
+    "liveConf": "生效 Nginx 配置文件：{{path}}",
+    "publicRoot": "公开根目录：{{path}}",
+    "confNameStale": "配置文件 {{file}} 与当前 server_name {{serverName}} 不一致。请再套用公用文件以改名。"
+  },
   "leftover": {
     "staleCliTitle": "遗留旧版 CLI",
     "staleCli": "仍有旧 CLI：{{path}}（产品版本 {{version}}）。PATH 可能优先使用它。移除：rm -f {{path}}",
@@ -3132,58 +3202,20 @@
     "dovecotTitle": "Dovecot TLS 指向不存在的证书",
     "dovecot": "Dovecot ssl_cert 指向不存在的 {{path}}。overlay 不会改成 ssl=no。签发邮件证书后套用邮件 TLS。",
     "overlayDoesNotHeal": "产品 overlay 不会改写 nginx、Apache、vsftpd 或 Dovecot。请用列出的套用命令（root + YSK_EXECUTE=1）。",
-    "readinessTitle": "overlay 后主机遗留",
-    "readinessClean": "未检测到 Apache 默认站、缺 nginx catch-all、vsftpd 失败或旧 CLI。",
+    "executeStaleCli": "请加 --execute（root + YSK_EXECUTE=1）以移除残留 CLI。",
+    "executeMissingTls": "请加 --execute（root + YSK_EXECUTE=1）以关闭缺证 TLS，让 vsftpd／Dovecot 可以启动。",
+    "executeGeneric": "请加 --execute（root + YSK_EXECUTE=1）以套用上述遗留清理。",
     "staleCliRemoved": "已移除残留 CLI {{path}}。",
     "staleCliRemoveFailed": "无法移除残留 CLI {{path}}：{{detail}}",
     "vsftpdSslOff": "因 FTPS 证书文件不存在，已将 vsftpd 设为 ssl_enable=NO 并重新启动。",
     "dovecotSslOff": "因 {{path}} 不存在，已将 Dovecot 设为 ssl=no 并重新启动。",
-    "nginxRemoved": "Removed leftover nginx conf {{path}}.",
-    "nginxNotLeftover": "Not a leftover public-files conf — refuse delete.",
-    "nginxUnusedKeep": "000-default is unused, not leftover — not deleted.",
-    "nginxSystemCopy": "System copy still present: {{path}}. Needs YSK_EXECUTE + root to remove.",
-    "nginxReloadFailed": "nginx -t or reload failed after removing {{path}}.",
-    "executeStaleCli": "Pass --execute (root + YSK_EXECUTE=1) to remove stale CLI bins.",
-    "executeMissingTls": "Pass --execute (root + YSK_EXECUTE=1) to disable missing-cert TLS so vsftpd/Dovecot can start.",
-    "executeGeneric": "Pass --execute (root + YSK_EXECUTE=1) to apply leftover cleanup for the findings above."
-  },
-  "git": {
-    "missingBin": "git 不在路径上",
-    "auth": "认证失败。添加部署密钥或 HTTPS 令牌。",
-    "hostkey": "SSH 主机密钥验证失败。确认并固定主机密钥。",
-    "dirty": "工作树有 {{count}} 个本地更改。拉动被阻止。",
-    "diverged": "无法快进。如果您打算丢弃本地 Git 历史记录，请重置为远程引用。",
-    "missingRef": "该分支、标签或提交不在远程上。",
-    "shallow": "这个克隆很浅。在固定旧提交之前获取完整历史记录。",
-    "notRepo": "app/ 还不是 Git 存储库。",
-    "unrelated": "无关的历史。仅在确认后重新克隆 - 自定义文件将丢失。",
-    "lock": "Git index.lock 存在。仅当没有 git 进程正在运行时才将其删除。",
-    "disk": "磁盘已满或超出配额。",
-    "timeout": "Git 超时。",
-    "network": "与远程通信时出现网络错误。",
-    "lfs": "此存储库使用 Git LFS 并且 git-lfs 不可用。",
-    "submodule": "子模块更新失败。",
-    "unknown": "吉特失败了。查看命令输出。",
-    "fetchOk": "从原产地获取。",
-    "checkoutOk": "签出{{ref}}。",
-    "resetOk": "硬重置为{{ref}}。",
-    "envRestored": "从控制平面恢复了 app/.env。",
-    "needPinHost": "SSH 主机密钥未固定。在克隆或获取之前扫描并固定它。",
-    "tokenSaved": "已存储 HTTPS 令牌（不再显示）。",
-    "tokenCleared": "HTTPS 令牌已删除。",
-    "tokenInvalid": "令牌必须至少包含 8 个字符。",
-    "deployKeyCreated": "已创建部署密钥。在 Git 主机上添加公钥。",
-    "deployKeyCleared": "部署与该项目分离的密钥。",
-    "hostPinned": "{{host}} 的固定 SSH 主机密钥。",
-    "hostUnpinned": "清除固定的 SSH 主机密钥。",
-    "hostScanFailed": "ssh-keyscan 没有返回该主机的密钥。",
-    "hookEnabled": "入站 Git 挂钩已打开。自行将 URL 粘贴到 GitHub、Gitea 或 GitLab 中。",
-    "hookDisabled": "入站 Git 挂钩已关闭。 URL 将不会同步。",
-    "hookSecretOnce": "现在复制这个钩子秘密。它不再显示。",
-    "refsNeedUrl": "首先输入 Git URL。",
-    "refsOk": "已加载 {{branches}} 分支和 {{tags}} 标签。",
-    "refsEmpty": "远程没有发布任何分支或标签。",
-    "diffEmpty": "没有未暂存的差异（受保护的 .env 被排除）。"
+    "readinessTitle": "overlay 后主机遗留",
+    "readinessClean": "未检测到 Apache 默认站、缺 nginx catch-all、vsftpd 失败或旧 CLI。",
+    "nginxRemoved": "已移除残留 nginx 设定 {{path}}。",
+    "nginxNotLeftover": "不是残留 public-files 设定 — 拒绝删除。",
+    "nginxUnusedKeep": "000-default 是未使用，不当残留 — 未删除。",
+    "nginxSystemCopy": "系统副本仍在：{{path}}。需要 YSK_EXECUTE + root 先可以移除。",
+    "nginxReloadFailed": "移除 {{path}} 后 nginx -t 或 reload 失败。"
   },
   "defense": {
     "panelReqLabel": "面板请求数/分钟",
@@ -3193,17 +3225,5 @@
     "dnsDegraded": "DNS 路径降级",
     "reqRateHigh": "公开请求率 {{reqs}}/min ≥ {{threshold}}",
     "ddosHeuristic": "高公共请求率加上边缘探测失败"
-  },
-  "publicFiles": {
-    "liveConf": "生效 Nginx 配置文件：{{path}}",
-    "publicRoot": "公开根目录：{{path}}",
-    "confNameStale": "配置文件 {{file}} 与当前 server_name {{serverName}} 不一致。请再套用公用文件以改名。"
-  },
-  "needHost": "Enter a host",
-  "health": {
-    "portListening": "Port {{port}} is listening",
-    "portNotListening": "Port {{port}} is not listening",
-    "httpOk": "HTTP OK {{status}}",
-    "httpFail": "HTTP failed: {{detail}}"
   }
 }

package/locales/zh-CN/opsResult.json

@@ -20,8 +20,8 @@
   "stepTuningApplied": "已应用运行时调校",
   "stepUnitWritten": "已写入 systemd 服务",
   "stepSystemdStartFailed": "systemd 启动失败 — 已降级为进程启动",
-  "portListening": "Port {{port}} is listening",
-  "portNotListening": "Port {{port}} is not listening",
-  "httpOk": "HTTP OK {{status}}",
-  "httpFail": "HTTP failed: {{detail}}"
+  "portListening": "埠 {{port}} 正在监听",
+  "portNotListening": "埠 {{port}} 未在监听",
+  "httpOk": "HTTP 正常 {{status}}",
+  "httpFail": "HTTP 失败：{{detail}}"
 }

package/locales/zh-CN/projects.json

@@ -21,12 +21,15 @@
   "template": "範本（选填）",
   "templateNone": "— 无 —",
   "searchPlaceholder": "搜索名称、域名或 ID…",
+  "listDesc": "管理该主机上的站点。",
   "filterAll": "全部 runtime",
   "statTotal": "全部",
   "statRunning": "运行中",
   "statDegraded": "降级",
   "statUnhealthy": "異常",
   "statStopped": "停止 / 就緒",
+  "statStoppedOnly": "已停止",
+  "statReadyOnly": "准备好",
   "statPendingOs": "待 OS",
   "status": {
     "failed": "失败",
@@ -57,13 +60,13 @@
   },
   "next": {
     "pendingOsTitle": "系统用户尚未创建",
+    "provisionOsAction": "建立系统用户",
     "pendingOsBody": "此项目尚未创建獨立系统用户。",
     "pendingOsActions": "可繼續部署；完整隔離需以系统管理员权限执行。",
     "deployTitle": "下一步：部署",
     "deployBody": "按上方「部署 PHP／部署」启动 runtime，或到「部署」分页用 Git。",
     "nginxTitle": "下一步：发布 Nginx",
-    "nginxBody": "到「网絡」分页或总览快捷操作发布 Nginx（可选 SSL）。",
-    "provisionOsAction": "Create system user"
+    "nginxBody": "到「网絡」分页或总览快捷操作发布 Nginx（可选 SSL）。"
   },
   "healthDetail": {
     "none": "尚未执行健康检查",
@@ -74,11 +77,11 @@
     "latency": "延遲",
     "error": "错误",
     "at": "检查时间",
-    "deployMode": "Deploy mode",
-    "edgeKind": "Edge",
-    "goLiveOk": "Go-live",
-    "goLiveAt": "Go-live at",
-    "degraded": "Degraded"
+    "deployMode": "部署模式",
+    "edgeKind": "边缘",
+    "goLiveOk": "上线",
+    "goLiveAt": "上线时间",
+    "degraded": "降级"
   },
   "railPhp": "PHP / 站点",
   "railStatic": "静态站",
@@ -93,6 +96,15 @@
   "created": "已创建 {{name}}",
   "backToList": "返回项目列表",
   "openUrl": "开启网站",
+  "openUrlNeedDomain": "首先设置一个域名 - 不要在浏览器中打开 127.0.0.1",
+  "needOsUser": "首先在“隔离”选项卡上创建系统用户",
+  "goIsolation": "前往隔离分页",
+  "homeMissing": "主目录不存在",
+  "homeMissingHint": "与迁移盘点同一探测 — 请到隔离分页建立系统用户",
+  "stopTitle": "停止该项目（systemd 单元和公共站点）",
+  "deployTitle": "部署此项目",
+  "httpStatsHint": "来自该项目的访问日志（最后一个示例）",
+  "httpStatsNone": "尚无项目访问日志",
   "notFound": "找不到此项目",
   "home": "Home 目录",
   "env": "环境",
@@ -198,6 +210,7 @@
   "osUserIncomplete": "系统用户创建未完成",
   "saveLogDirsFailed": "保存 log 目录失败",
   "createName": "项目名称",
+  "noPathSepHint": "名稱不可包含 / 或 \\。",
   "createRuntime": "执行环境",
   "createRuntimeHint": "之后可在详情調整部署方式",
   "createVersion": "版本",
@@ -345,8 +358,16 @@
   "netHttpsDesc": "保存后请发布 Nginx。整站 301 会蓋过 proxy／PHP／static 内容",
   "netForceHttps": "强制使用 HTTPS",
   "netForceHttpsDesc": "HTTP → HTTPS（301）；需已有 SSL 证书并用 SSL 发布",
+  "netForceHttpsOn": "发布边缘后，HTTP 将重定向到 HTTPS。",
+  "netForceHttpsOff": "不存储强制重定向。",
+  "netBoundCert": "已绑定证书",
+  "netBoundCertExpiry": "到期 {{at}}",
+  "netNoBoundCert": "此主机名磁盘上没有证书",
+  "netForceHttpsNeedCert": "强制 HTTPS 前，请先在 /ssl 为此域名签发证书。",
+  "netHttpsLiveNotForced": "存在边缘文件； HTTPS 可能已经可以工作。此框仅强制 HTTP→HTTPS。",
   "netHsts": "启用 HSTS",
   "netHstsDesc": "浏览器记住只走 HTTPS（建议在强制 HTTPS 后开启）",
+  "netHstsNeedHttps": "请先启用强制 HTTPS",
   "netRedirectUrl": "整站重新导向网址",
   "netRedirectHint": "可留空。填写后整站 301 到此网址（例如搬站／apex→www）",
   "netBasicAuthTitle": "HTTP 基本认证（浏览器登录保护）",
@@ -513,9 +534,9 @@
     "static": "静态",
     "python": "Python",
     "go": "去",
-    "rust": "Rust",
-    "java": "Java",
-    "kotlin": "Kotlin",
+    "rust": "锈",
+    "java": "爪哇",
+    "kotlin": "科特林",
     "bun": "包子"
   },
   "netCacheTitle": "缓存",
@@ -566,15 +587,15 @@
   "advFtpHomeApp": "站点 app 目录",
   "advFtpHomeRoot": "项目家目录（全部）",
   "advFtpManage": "打开 FTP 页",
-  "listDesc": "管理该主机上的站点。",
   "resShell": "登录 shell",
   "resSaveHint": "「储存并套用」会改主机。「仅存控制面」只记表单。「再套用」用已存值再写入系统。",
   "resBashConfirmTitle": "允许互动式 bash？",
   "resBashConfirmDesc": "这会让专案用户有互动登录 shell。只在需要以该用户 SSH 或终端机时才确认。",
-  "noPathSepHint": "名稱不可包含 / 或 \\。",
   "createGitHint": "可选。会记在专案；到部署分页再 clone（建立时不会 clone）。",
+  "gitTokenLaterHint": "HTTPS 令牌和克隆深度在创建后在项目“部署”选项卡上设置。",
   "gitBranch": "分支",
   "gitBranchHint": "分支或 tag。留空则用远端默认分支。首次 clone 为浅层（depth 1）。",
+  "gitBranchAfterUrl": "请先填写 Git 网址。留空则使用远端默认分支。",
   "gitLastRef": "上次同步：{{branch}} @ {{commit}}",
   "gitConfirmTitle": "要 clone 到此专案？",
   "gitConfirmBody": "若 app/ 仍是 Hello World 占位会先清除再 clone。非 YSK 模板的自定义文件会拒绝覆盖。",
@@ -585,10 +606,13 @@
   "gitFetch": "拿来",
   "gitCheckout": "查看",
   "gitReset": "重置为远程",
+  "gitResetNeedConfirm": "需确认 — 会丢弃本机提交",
   "gitDeepen": "获取完整历史记录",
   "gitLogTitle": "最近的提交",
   "gitDirtyTitle": "本地更改阻止拉动",
   "gitDirtyBody": "{{count}} 个文件与 Git（文件编辑或应用程序）不同。丢弃它们或中止。",
+  "gitSyncBlockedDirty": "同步将被禁用，直到本地更改被丢弃（重置）或文件与 Git 匹配为止。",
+  "gitViewDiff": "查看差异",
   "gitDiscard": "丢弃本地文件",
   "gitOpenFiles": "在文件中打开",
   "gitNotCloned": "未克隆",
@@ -655,31 +679,7 @@
   "gitAheadShort": "↑{{计数}}",
   "gitDirtyShort": "肮脏 · {{count}}",
   "gitFilesLink": "文件",
-  "gitTokenLaterHint": "HTTPS 令牌和克隆深度在创建后在项目“部署”选项卡上设置。",
-  "netForceHttpsOn": "发布边缘后，HTTP 将重定向到 HTTPS。",
-  "netForceHttpsOff": "不存储强制重定向。",
-  "netHttpsLiveNotForced": "存在边缘文件； HTTPS 可能已经可以工作。此框仅强制 HTTP→HTTPS。",
-  "gitSyncBlockedDirty": "同步将被禁用，直到本地更改被丢弃（重置）或文件与 Git 匹配为止。",
-  "gitViewDiff": "查看差异",
-  "gitBranchAfterUrl": "请先填写 Git 网址。留空则使用远端默认分支。",
-  "gitResetNeedConfirm": "需确认 — 会丢弃本机提交",
-  "openUrlNeedDomain": "首先设置一个域名 - 不要在浏览器中打开 127.0.0.1",
-  "needOsUser": "首先在“隔离”选项卡上创建系统用户",
-  "stopTitle": "停止该项目（systemd 单元和公共站点）",
-  "deployTitle": "部署此项目",
-  "httpStatsHint": "来自该项目的访问日志（最后一个示例）",
-  "httpStatsNone": "尚无项目访问日志",
-  "statStoppedOnly": "已停止",
-  "statReadyOnly": "准备好",
-  "netBoundCert": "已绑定证书",
-  "netBoundCertExpiry": "到期 {{at}}",
-  "netNoBoundCert": "此主机名磁盘上没有证书",
-  "netForceHttpsNeedCert": "强制 HTTPS 前，请先在 /ssl 为此域名签发证书。",
-  "goIsolation": "Open Isolation tab",
-  "netHstsNeedHttps": "Turn on force HTTPS first",
-  "homeMissing": "Home directory does not exist",
-  "homeMissingHint": "Same live probe as migrate inventory — create the system user on Isolation",
-  "nameInvalid": "Use a lowercase name: start with a letter, then letters, digits, or hyphen (max 31).",
-  "deployVersionMissing": "Node {{version}} is not installed on this host. Pick an installed version, or install this version first.",
-  "deployUsedBinary": "Deploy used {{path}}"
+  "nameInvalid": "请用小写名称：以英文字母开头，其后可为字母、数字或连字号（最长 31 字）。",
+  "deployVersionMissing": "此主机未安装 Node {{version}}。请改选已安装的版本，或先安装此版本。",
+  "deployUsedBinary": "本次部署使用 {{path}}"
 }