ysk-server-shared 1.1.24 → 1.1.26

package/locales/zh-CN/protection.json

@@ -31,8 +31,8 @@
     "notApplied": "未套用到系统（需 root + YSK_EXECUTE=1）— 已记到管理设置",
     "nginxWritten": "已写入 Nginx 限速管理檔",
     "f2bWritten": "已写入 fail2ban 管理設定",
-    "hintDropped": "Internal protection hint omitted",
-    "nginxLimits": "Will write Nginx rate-limit snippet"
+    "hintDropped": "已略过内部防护提示",
+    "nginxLimits": "将写入 Nginx 限速片段"
   },
   "rel": {
     "justNow": "刚刚",
@@ -55,6 +55,10 @@
   "autoBanAutomation": "自動 ban：{{onOff}}（{{mode}}）",
   "automationSaved": "已保存自动化设置",
   "statFirewall": "防火墙",
+  "statSuspects": "可疑IP",
+  "statSuspectsSplit": "可操作 {{actionable}}／全部 {{total}}",
+  "suspectActionableCount": "可操作 IP {{count}}",
+  "scoreBasisHint": "威胁评分使用防火墙、fail2ban 禁止量和请求率信号——与英特尔嫌疑人列表的计数不同。",
   "statAutoBan": "自動 ban",
   "statApply": "系统套用",
   "statActiveBans": "活跃封禁",
@@ -74,6 +78,12 @@
   "reapply": "重新套用",
   "nginxLimits": "Nginx 限速",
   "notWritten": "未写",
+  "modeValue": {
+    "normal": "正常",
+    "degraded": "降级",
+    "ddos-protection": "DDoS 防护",
+    "offline": "离线"
+  },
   "mode": "模式",
   "controlPlane": "控制面",
   "canApply": "可套用",
@@ -181,6 +191,10 @@
   "dbReady": "库就绪",
   "stale": "过旧",
   "older7d": ">7 日",
+  "freshnessNa": "不适用",
+  "freshnessMissing": "无库",
+  "freshnessStale": "过旧",
+  "freshnessFresh": "最新",
   "lastSuccess": "上次成功",
   "downloaded": "已下载",
   "missing": "缺失",
@@ -235,10 +249,21 @@
   "sectionAutoBan": "② 自動封禁",
   "unban": "解封",
   "ban": "封禁",
+  "banConfirmTitle": "封禁 {{ip}}？",
+  "banConfirmMethod": "方法：{{method}}",
+  "banConfirmUntilUnban": "会一直维持，直至你解除封禁（或 fail2ban 到期）。",
+  "banConfirmDesc": "此 IP 会在主机上被封锁。请确认不是目前面板或工作阶段来源。",
+  "wlRemovedUndo": "已从白名单移除 {{ip}}。5 秒内可复原。",
+  "undo": "复原",
+  "banSelectedConfirmTitle": "封禁已选 {{count}} 个 IP？",
+  "banSelectedConfirmDesc": "以下地址会在主机上被封锁：{{ips}}",
   "save": "保存",
   "yes": "是",
   "no": "否",
   "oneClickSuggested": "一键套用建议档",
+  "stackApply": "套用防護組合（UFW、fail2ban、建議檔）",
+  "stackApplyDone": "已要求套用防護組合",
+  "stackApplyHint": "會啟用 UFW 並套用 fail2ban 與建議防護檔。遠端面板請先確認不會把自己鎖在外面。",
   "viewPresets": "检视防护档",
   "suspectIpsCount": "可疑 IP {{count}}",
   "goBans": "去封禁",
@@ -295,6 +320,11 @@
   "noSecondJail": "（不在这里再做第二套 jail 編輯）。",
   "autoBanWhitelistTitle": "自動 ban 白名单",
   "autoBanWhitelistDesc": "防護中心 auto-ban 豁免（会同步 fail2ban ignoreip.txt）。完整 ignoreip 在 fail2ban 工具 → 白名单。",
+  "ufwOff": "UFW（未启用）",
+  "ufwOffHint": "UFW 未运行 — 可用目标是 fail2ban。",
+  "whitelistSyncHint": "面板 {{n}} 条 · fail2ban ignoreip 同步：{{sync}}",
+  "whitelistSyncOn": "开",
+  "whitelistSyncOff": "关（两边清单可能不一致）",
   "ignoreipWhitelist": "ignoreip 白名单",
   "notSetSuggestAdmin": "未设置（建议加入你的管理 IP）",
   "moreItems": "… 还有 {{n}} 项 · 見 fail2ban 白名单",
@@ -308,6 +338,11 @@
   "fullLogsAt": "完整 nginx／auth log 请到",
   "logCenter": "日志中心",
   "colScore": "分",
+  "colHits": "次数",
+  "col429": "429",
+  "topIpsTitle": "热点 IP",
+  "hitsCount": "{{n}} 次",
+  "sampleWindowHint": "计数来自当前 access 与 auth 样本窗口，不是完整日志文件。",
   "banShort": "封",
   "vhostLimits": "Vhost 限速",
   "eventStream": "事件流",
@@ -347,17 +382,15 @@
   "plusCity": "+ 城市 {{v}}",
   "lastTickPrefix": "· 上次 {{t}}",
   "nextTickPrefix": "· 下轮 {{t}}",
-  "stackApply": "套用防護組合（UFW、fail2ban、建議檔）",
-  "stackApplyDone": "已要求套用防護組合",
-  "stackApplyHint": "會啟用 UFW 並套用 fail2ban 與建議防護檔。遠端面板請先確認不會把自己鎖在外面。",
   "cannotBanSelf": "不可封锁 {{ip}} — 这是本机、你的登录 IP 或 ignoreip",
   "selfIp": "本主机",
   "selfHostIp": "主机IP",
   "selfLoginIp": "您的登录IP",
   "showZeroScore": "显示 0 分",
   "hideZeroScore": "隐藏 0 分",
-  "freshnessNa": "不适用",
   "geoDraftOnly": "政策未启用 — 保存只写草稿，Nginx 不会执行，直到你勾选启用。",
+  "geoNeedDb": "GeoIP 数据库丢失 - 首先更新 MMDB 文件",
+  "uaNeedZones": "请先设定 Cloudflare zone",
   "selectAllCountriesWarn": "封锁名单模式下全选全部国家？这可能把本机与你的登录所在地一并封锁。",
   "badgeRecommendPreset": "以目前威胁水平，建议改用更强预设",
   "badgeAutomationOn": "自动化已开启",
@@ -371,42 +404,9 @@
   "dbReadyHint": "已有 MMDB 文件",
   "dbNotReadyHint": "请先下载 GeoIP 数据库",
   "staleHint": "上次成功更新是否已超过 7 日",
-  "statSuspects": "可疑IP",
-  "scoreBasisHint": "威胁评分使用防火墙、fail2ban 禁止量和请求率信号——与英特尔嫌疑人列表的计数不同。",
-  "geoNeedDb": "GeoIP 数据库丢失 - 首先更新 MMDB 文件",
-  "colHits": "次数",
-  "col429": "429",
-  "topIpsTitle": "热点 IP",
-  "hitsCount": "{{n}} 次",
-  "sampleWindowHint": "计数来自当前 access 与 auth 样本窗口，不是完整日志文件。",
-  "statSuspectsSplit": "{{actionable}} actionable / {{total}} listed",
-  "suspectActionableCount": "Actionable IPs {{count}}",
-  "uaNeedZones": "Set a Cloudflare zone first",
-  "banConfirmTitle": "Ban {{ip}}?",
-  "banConfirmDesc": "This IP will be blocked on the host. Confirm it is not a current panel or session address.",
-  "ufwOff": "UFW (off)",
-  "ufwOffHint": "UFW is not active — fail2ban is the usable target.",
-  "whitelistSyncHint": "{{n}} panel entries · fail2ban ignoreip sync: {{sync}}",
-  "whitelistSyncOn": "on",
-  "whitelistSyncOff": "off (lists may differ)",
-  "draftBadge": "Draft",
-  "banIsSelf": "This IP matches the current panel source or this host.",
-  "banNotSelf": "This IP is not the current panel source.",
-  "geoSourceLocal": "Local GeoIP library (sapics + DB-IP)",
-  "nginxPreviewHint": "Nginx snippet this preset would write (preview only):",
-  "modeValue": {
-    "normal": "Normal",
-    "degraded": "Degraded",
-    "ddos-protection": "DDoS protection",
-    "offline": "Offline"
-  },
-  "wlRemovedUndo": "Removed {{ip}} from the allow list. Undo within 5 seconds.",
-  "undo": "Undo",
-  "banSelectedConfirmTitle": "Ban {{count}} selected IPs?",
-  "banSelectedConfirmDesc": "These addresses will be blocked on the host: {{ips}}",
-  "freshnessMissing": "No database",
-  "freshnessStale": "Stale",
-  "freshnessFresh": "Current",
-  "banConfirmMethod": "Method: {{method}}",
-  "banConfirmUntilUnban": "Stays banned until you unban it (or fail2ban expiry)."
+  "draftBadge": "草稿",
+  "banIsSelf": "此 IP 是目前面板来源或本机。",
+  "banNotSelf": "此 IP 不是目前面板来源。",
+  "geoSourceLocal": "本机 GeoIP 库（sapics + DB-IP）",
+  "nginxPreviewHint": "此预设会写入的 Nginx 片段（仅预览）："
 }

package/locales/zh-CN/publicFiles.json

@@ -12,13 +12,21 @@
   "siteSettings": "站点设置",
   "siteSettingsDesc": "写入管理 conf；套用时可尝试 reload Nginx（套用后才可连）",
   "serverNameHint": "Nginx server_name，例如 files.example.com",
+  "notes": {
+    "noManagedConf": "尚无托管 Nginx 配置 — 单击“应用”",
+    "notSynced": "托管conf存在，但不在/etc/nginx/conf.d下——使用YSK_EXECUTE再次以root身份申请"
+  },
   "quotaMiB": "配额（MiB）",
   "quotaHint": "可选；限制公开目录总量",
   "unlimited": "不限",
+  "quotaInvalid": "请输入正整数 MiB，或选“不限”。",
+  "serverNameRequired": "请填写服务器名称。",
+  "serverNameInvalid": "请用主机名、万用字元或 IP，不可含空白或标点。",
   "applyHint": "套用成功只代表设置已写入；DNS、SSL 与防火墙需另行就绪才会对外服务。",
   "appliedOk": "已套用公开文件站点",
   "applyReload": "套用并重载 Nginx",
   "statusLive": "Nginx 已生效",
+  "statusDraft": "草稿／待套用",
   "statusManagedOnly": "仅管理档",
   "statusNotApplied": "未套用",
   "nginxLive": "已在 conf.d",
@@ -26,27 +34,19 @@
   "openSite": "打开网站",
   "notLiveHint": "域名 404 多数是 conf 只写在 dataDir、未复制到 /etc/nginx/conf.d，或未 reload。请用 root + YSK_EXECUTE 再套用。未签发 SSL 前请用 http:// 打开。",
   "diskRoot": "磁盘根目录",
+  "executeFlag": "执行",
+  "asRoot": "根目录",
   "filesInRoot": "条目数",
   "managedConf": "管理 conf",
   "systemConf": "系统 conf.d",
-  "notes": {
-    "noManagedConf": "尚无托管 Nginx 配置 — 单击“应用”",
-    "notSynced": "托管conf存在，但不在/etc/nginx/conf.d下——使用YSK_EXECUTE再次以root身份申请"
-  },
   "autoindex": "目录列表（autoindex）",
   "liveSystemConf": "现行系统配置：{{path}}",
   "publicRootNote": "公开根目录：{{path}}",
   "applyConfirmTitle": "套用公开文件站点？",
   "applyConfirmDesc": "写入 Nginx server_name {{name}} 并重载 Nginx。",
   "serverNameMismatch": "现行配置为 {{live}}；表单为 {{draft}}。套用后会覆盖。",
-  "executeFlag": "Execute",
-  "asRoot": "Root",
-  "statusDraft": "Draft / not applied",
-  "liveName": "Live name",
-  "draftName": "Draft name",
-  "draftUnapplied": "This draft is not applied. Nginx still serves the live name.",
-  "discardDraft": "Discard draft",
-  "quotaInvalid": "Enter a whole number of MiB, or choose Unlimited.",
-  "serverNameRequired": "Enter a server name.",
-  "serverNameInvalid": "Use a hostname, wildcard, or IP — no spaces or punctuation."
+  "liveName": "生效名称",
+  "draftName": "草稿名称",
+  "draftUnapplied": "此草稿尚未套用。Nginx 仍以生效名称对外。",
+  "discardDraft": "舍弃草稿"
 }

package/locales/zh-CN/rbac.json

@@ -102,12 +102,12 @@
   "capabilitiesHint": "勾选此角色可用的功能。橙点表示与系统默认不同。",
   "enabledCount": "已开 {{enabled}}／{{total}}",
   "bandAboveMax": "高于最高等级",
+  "roleUnavailable": "此角色不可用",
   "dirtyHint": "已自定义（与系统默认不同）",
   "unsaved": "未储存",
   "unsavedHint": "此角色有未储存变更",
   "nothingToSave": "没有要储存的变更",
   "saveRole": "储存「{{role}}」政策",
   "discardTitle": "舍弃变更？",
-  "discardDesc": "未保存的权限变更将会舍弃。",
-  "roleUnavailable": "Not available for this role"
+  "discardDesc": "未保存的权限变更将会舍弃。"
 }

package/locales/zh-CN/readiness.json

@@ -25,12 +25,24 @@
   "checkFailed": "就绪检查失败",
   "gatePass": "门槛通过 · {{pct}}%",
   "gateFail": "尚未达标 · {{pct}}%",
+  "gateBlocked": "未通过／有阻挡 {{n}}",
   "executeOn": "已开",
   "executeOff": "未开",
   "blockers": "阻挡",
+  "blockersHint": "「阻挡」是「缺少」中的关键项，不是额外检查。",
+  "requireAdminTotp": "要求管理员双重验证政策",
+  "listenBind": "监听位址",
+  "item": {
+    "admin2fa": "管理员双重验证"
+  },
+  "dataDirPerms": "面板资料目录权限",
+  "mode750": "权限 750",
+  "totalChecks": "全部检查",
+  "totalChecksHint": "就绪＋降级＋缺少＝此总数。阻挡是缺少项里的关键子集。",
   "probing": "探测中…",
   "reprobe": "重新探测",
   "exportReport": "导出报告",
+  "exportStarted": "正在下載 {{name}}",
   "firstBlocker": "处理首个阻挡",
   "viewRecommended": "查看建议项",
   "loadingProbe": "正在探测主机能力…",
@@ -109,11 +121,10 @@
   "fixDone": "已修复 dataDir 权限（chmod 750）",
   "fixDoneWebUi": "已构建／安装 Web 界面",
   "rootLabel": "超级用户",
-  "exportStarted": "正在下載 {{name}}",
-  "blockersHint": "「阻挡」是「缺少」中的关键项，不是额外检查。",
   "techDetails": "技术细节",
   "missingOwner": "未分配面板所有者（包配额归属）",
   "notOsProvisioned": "操作系统用户/主目录尚未配置",
+  "isolationPendingOs": "与专案状态相同：待建立系统用户。请到隔离分页建立系统用户与主目录。",
   "ondrejNone": "未检测到 ondrej Launchpad PHP 源",
   "ondrejFound": "发现旧版 ondrej/php 源与packages.sury.org 冲突：{{paths}}",
   "ondrejTitle": "PHP apt源（ondrej残差）",
@@ -127,16 +138,5 @@
   "leftoverDovecot": "Dovecot TLS 指出缺少证书",
   "leftoverOther": "主机剩余物",
   "leftoverApply": "剩余的适用",
-  "isolationOwnerDegrades": "缺少owner_user_id会影响程序包配额属性 - 状态已降级，未就绪。",
-  "totalChecks": "All checks",
-  "totalChecksHint": "Ready + degraded + missing = this total. Blockers are the critical missing subset.",
-  "requireAdminTotp": "require admin 2FA policy",
-  "listenBind": "listen address",
-  "item": {
-    "admin2fa": "Admin two-factor"
-  },
-  "dataDirPerms": "panel data-directory permissions",
-  "mode750": "mode 750",
-  "gateBlocked": "Not passed · {{n}} missing",
-  "isolationPendingOs": "Same as project status: OS user pending. Open Isolation to provision the system user and home."
+  "isolationOwnerDegrades": "缺少owner_user_id会影响程序包配额属性 - 状态已降级，未就绪。"
 }

package/locales/zh-CN/redis.json

@@ -28,6 +28,8 @@
   "keysCountSuffix": " · {{n}} 个鍵",
   "searchPlaceholder": "搜索鍵名，例如 user:* 或 *",
   "searchKeys": "搜索鍵",
+  "scanHint": "使用 SCAN，不是 KEYS。最多回传 {{n}} 个键 — 大型库勿用 *。",
+  "scanCapped": "只显示首 {{n}} 个符合项。",
   "rows": "{{n}} 筆",
   "content": "内容",
   "noMatchingKeys": "沒有符合的鍵",
@@ -56,6 +58,8 @@
   "addKey": "新增鍵",
   "dbLabel": "数据库 {{i}}",
   "keysInDb": " · {{n}} 个鍵",
+  "dbOptionKeys": "数据库 {{i}} · {{n}} 个键",
+  "dbOptionEmpty": "数据库 {{i}} · 空",
   "dbRange": "共 {{n}} 个庫（0–{{max}}）。",
   "serviceLink": "在服务设置加減数量",
   "dbsWithData": "有资料的庫（快捷）",
@@ -67,25 +71,21 @@
   "refPath": "参考：{{path}}",
   "dbEmptyMark": " · 空",
   "noRequirepass": "保护模式已开，但 requirepass 为空或未读到 — 实际无密码。",
+  "insecureShort": "不安全（无密码）",
   "setRequirepass": "设定密码",
+  "generateRequirepass": "产生并套用密码",
+  "generateRequirepassTitle": "产生 Redis 密码？",
+  "generateRequirepassDesc": "会写入 requirepass 并重启 Redis。密码只显示一次。主机变更需要 EXECUTE。",
+  "generateRequirepassDone": "已套用 Redis 密码",
+  "generatedOnce": "已产生密码（只显示一次）：{{password}}",
   "rdbOnlyLossHint": "AOF 关闭且 RDB 开启。重启或崩溃可能丢失最近写入。",
-  "dirDataContainer": "/data (container)",
+  "dirDataContainer": "/data（容器）",
   "dirHostDefault": "/var/lib/redis",
   "dirDefaultInstance": "/var/lib/redis/default",
-  "dirDataWarn": "/data is usually a container path; this panel cannot confirm it exists.",
+  "dirDataWarn": "/data 多用于容器；面板无法确认此主机是否存在该路径。",
   "saveOff": "禁用快照（不推荐）",
   "saveOffWarn": "空保存字符串会关闭 RDB 快照。如果 AOF 也关闭，则崩溃可能会丢失所有数据。",
   "dirMoveWarn": "更改目录不会移动 dump.rdb / AOF。下次启动将按原样使用新路径。",
   "passwordUnset": "未在服务上设置",
-  "passwordSetHidden": "设置（未显示）",
-  "scanHint": "Uses SCAN, not KEYS. Returns at most {{n}} keys — avoid * on huge databases.",
-  "scanCapped": "Showing the first {{n}} matches.",
-  "dbOptionKeys": "DB {{i}} · {{n}} keys",
-  "dbOptionEmpty": "DB {{i}} · empty",
-  "insecureShort": "No password",
-  "generateRequirepass": "Generate and apply password",
-  "generateRequirepassTitle": "Generate a Redis password?",
-  "generateRequirepassDesc": "Writes requirepass and restarts Redis. The password is shown once. Host change needs EXECUTE.",
-  "generateRequirepassDone": "Redis password applied",
-  "generatedOnce": "Generated password (shown once): {{password}}"
+  "passwordSetHidden": "设置（未显示）"
 }

package/locales/zh-CN/runtime.json

@@ -75,6 +75,10 @@
   "globalPhpIniDesc": "每一列一个设置值（表单）。写入管理档后可「应用到系统」或于项目部署注入 pool",
   "managePath": "管理档路径",
   "loading": "加载中",
+  "probing": "探测中",
+  "noBinaryPath": "没有二进制路径",
+  "hostDefaultError": "主机预设不可用",
+  "pm2Tick": "{{at}} · 专案 {{projects}} · PM2 {{pm2}} · 运行 {{run}}",
   "cannotLoadSettings": "无法加载设置表",
   "reloadFailed": "重新加载失败",
   "sensitive": "敏感设置，请小心",
@@ -92,6 +96,7 @@
   "demoVhost": "系统工具：示范 vhost / Pool",
   "demoVhostDesc": "高级／调试用；日常开站请到 项目 → 部署",
   "domain": "网域",
+  "domainRequired": "套用 vhost 前请填写有效网域。",
   "vhostServerName": "虚拟主机 server_name",
   "poolName": "Pool 名称",
   "poolNameHint": "手填识别名（示范）；项目路径会用 ysks_* 用户",
@@ -116,6 +121,9 @@
   "tuneLoadFailed": "加载调校失败",
   "availableCount": "{{n}} 可用",
   "notDetected": "未探测到",
+  "binaryPath": "二进制路径",
+  "targetMissing": "目标版本未安装",
+  "targetMissingHint": "目标 {{version}} 不在本机。请改绑已安装的版本，或先安装此版本。",
   "target": "目标",
   "tune": "调校",
   "loadedShort": "已载",
@@ -161,6 +169,8 @@
   "demoNotBind": "（手填 pool 名），不会自动绑项目隔離。php.ini 全局预设请用「php.ini」分页。",
   "applyOkWritten": "应用成功 = 文件已写入（written）。生产请优先用项目部署，确保 User=项目 Linux 用户。",
   "applyPhpVhost": "应用 PHP vhost / pool",
+  "applyPhpVhostTitle": "需要确认 - 写入池/虚拟主机文件",
+  "applyPhpVhostDesc": "将写入 {{pool}} 池和 {{domain}} 虚拟主机。重新加载服务：{{reload}}。",
   "reprobeTools": "重新探测工具",
   "pressReprobe": "按「重新探测工具」加载",
   "installNodeLabel": "安装 Node {{v}}",
@@ -199,7 +209,7 @@
         "description": "显示错误、记录与报告等级"
       },
       "opcache": {
-        "title": "OPcache",
+        "title": "OP缓存",
         "description": "字节码缓存"
       },
       "security": {
@@ -343,7 +353,7 @@
     "options": {
       "sessionFiles": "文件",
       "sessionRedis": "Redis",
-      "sessionMemcached": "Memcached",
+      "sessionMemcached": "内存缓存",
       "errorReportingProd": "生产建议（E_ALL 除 deprecated/strict）",
       "errorReportingAll": "全部（E_ALL）",
       "errorReportingQuiet": "较安静（除 NOTICE/DEPRECATED）",
@@ -415,6 +425,7 @@
   "pm2": {
     "title": "PM2 进程列表",
     "desc": "只读 pm2 jlist（面板用户的 PM2_HOME）。实时 SSE 每 2 秒刷新。",
+    "glossary": "PM2＝进程管理器；SSE＝即时日志／清单串流。",
     "live": "实时",
     "installed": "PM2 已装",
     "version": "pm2 版本",
@@ -471,18 +482,25 @@
     "actStop": "停止",
     "actReload": "重新加载",
     "pm2ActionsHint": "PM2 操作只作用于面板用户的进程列表。",
-    "noteUnparsed": "PM2 list could not be parsed (empty or unexpected output).",
-    "notePanelUserOnly": "PM2 list is for the panel process user only.",
-    "noteProjectUnits": "{{n}} YSK project unit(s) listed",
-    "glossary": "PM2 = process manager; SSE = live stream."
+    "noteUnparsed": "无法解析 PM2 list（输出空白或格式不符）。",
+    "notePanelUserOnly": "PM2 list 只显示面板行程用户的程序。",
+    "noteProjectUnits": "列出 {{n}} 个 YSK 专案单元"
   },
   "recordedInstalled": "记录已装 {{v}}",
   "remoteSourceSuffix": "（{{source}}）",
   "nodePathYskMissingTitle": "受管 Node 路径未就绪",
   "nodePathYskMissing": "版本 {{version}} 的 YSK 受管 Node 尚未就绪。请重新探测或重新安装。",
+  "managedPathMissingTitle": "受管 {{name}} 路徑未就緒",
+  "managedPathMissing": "版本 {{version}} 的 YSK 受管 {{name}} 尚未就緒。請重新探測或重新安裝。",
   "nodePathUnsafeTitle": "Node 路径不安全",
   "nodePathUnsafe": "当前路径 {{path}} 不在受管目录；项目部署可能失败。",
   "recordedButProbeEmpty": "控制面曾记录安装 {{v}}，但主机探测未见可执行文件。不算已安装——请「重新探测」或重新安装。",
+  "installedLabel": "已安装",
+  "installedHint": "以主机探测为准，不是控制面纪录",
+  "targetHint": "此页将安装或钉选的版本",
+  "panelDefaultHint": "新建项目会优先使用面板默认 {{version}}（主机 CLI 可能不同）。",
+  "rebuildFromHost": "以主机为准重建记录",
+  "rebuiltFromHost": "已按主机探测更新记录",
   "tabTuning": "调校",
   "versionPlaceholder": "載入最新版本中，或手動輸入",
   "pluginsBundleWithRuntime": "選定工具會隨下方「安裝 runtime」一併安裝（只有一個安裝按鈕）。",
@@ -510,7 +528,6 @@
   "setPanelDefault": "设为面板默认",
   "alreadyPanelDefault": "面板默认 · {{version}}",
   "panelDefaultSaved": "已将面板默认设为 {{version}}",
-  "panelDefaultHint": "新建项目会优先使用面板默认 {{version}}（主机 CLI 可能不同）。",
   "panelDefaultExplain": "面板默认 = 新建站点／项目首选版本。主机默认 = 系统 CLI（php／python／node…）。",
   "stackReadyTitle": "{{name}} 堆栈已就绪",
   "softwareIntro": "管理已安装版本、主机 CLI 默认，以及新建项目优先使用的版本。",
@@ -529,15 +546,11 @@
   "fullVersion": "完整版本",
   "useListForDefaults": "要改主机／面板默认或移除此版本，请用上方列表。",
   "alreadyHostDefaultShort": "主机默认",
-  "managedPathMissingTitle": "受管 {{name}} 路徑未就緒",
-  "managedPathMissing": "版本 {{version}} 的 YSK 受管 {{name}} 尚未就緒。請重新探測或重新安裝。",
   "installRecordedCta": "前往软件分页安装 {{v}}",
-  "targetMissing": "目标版本未安装",
-  "targetMissingHint": "目标 {{version}} 不在本机。请改绑已安装的版本，或先安装此版本。",
   "needsInstall": "需安装",
   "needsInstallHint": "此版本未在本机。请先安装，或改选已安装的版本。",
   "unitBytes": "字节",
-  "headerSizeKb": "{{n}} KB",
+  "headerSizeKb": "{{n}}KB",
   "phpIniChipEmpty": "未载入 — 请打开 php.ini 分页",
   "phpFpmService": "PHP-FPM",
   "phpFpmServiceDesc": "启动、停止、重载或重启 PHP-FPM 单元",
@@ -545,18 +558,5 @@
   "rustupDefaultMissing": "rustup 未设默认工具链。请到「软件」分页设为 stable。",
   "rustupDefaultMissingShort": "没有默认工具链",
   "rustupSetDefaultHint": "设置默认工具链",
-  "uninstalledCountHint": "{{n}} 个版本未在本机",
-  "applyPhpVhostTitle": "需要确认 - 写入池/虚拟主机文件",
-  "applyPhpVhostDesc": "将写入 {{pool}} 池和 {{domain}} 虚拟主机。重新加载服务：{{reload}}。",
-  "binaryPath": "二进制路径",
-  "installedLabel": "Installed",
-  "installedHint": "Host probe result — not the control-plane record",
-  "targetHint": "Version this page will install or pin",
-  "rebuildFromHost": "Rebuild record from host",
-  "rebuiltFromHost": "Record refreshed from host probe",
-  "probing": "Probing…",
-  "noBinaryPath": "No binary path",
-  "hostDefaultError": "Host default unavailable",
-  "pm2Tick": "{{at}} · projects {{projects}} · PM2 {{pm2}} · running {{run}}",
-  "domainRequired": "Enter a valid domain before applying the vhost."
+  "uninstalledCountHint": "{{n}} 个版本未在本机"
 }

package/locales/zh-CN/security.json

@@ -10,7 +10,11 @@
   "pill2faOff": "2FA 未启用",
   "stat2fa": "2FA",
   "statApi": "API",
+  "statApiSessions": "API 会话",
+  "revokeOtherTitle": "退出 {{n}} 个其他会话",
   "statSsh": "SSH",
+  "statSshValue": "金钥 {{keys}} · 已授权 {{auth}}",
+  "statSshHint": "出站身份／已授权登入金钥",
   "statPending": "待批",
   "on": "开",
   "off": "关",
@@ -57,6 +61,8 @@
   "reauthPassword": "重新验证密码",
   "reauthPasswordHint": "开始／重置 2FA 需要再输入密码（防 session 被盗）",
   "reauthPasswordRequired": "请先输入登录密码",
+  "needCurrentPassword": "请先输入目前密码",
+  "passwordMin8": "新密码至少 8 个字元",
   "totpSecretGenerated": "已生成密钥 — 请扫 QR 或复制密钥，再输入 App 6 位码确认",
   "reset2fa": "重新设置 2FA",
   "start2fa": "开始设置 2FA",
@@ -105,6 +111,7 @@
   "export2faBackup": "导出 2FA 加密备份",
   "fail2banSnippetMsg": "fail2ban 片段：{{written}} — {{notes}}",
   "generatefail2ban": "生成 fail2ban 片段",
+  "generateFail2ban": "产生 fail2ban 片段",
   "adminPolicyTitle": "管理员 2FA 政策",
   "adminPolicyDesc": "",
   "requireAdmin2fa": "要求管理员启用 2FA",
@@ -201,6 +208,8 @@
     "commentPlaceholder": "笔记本 / CI",
     "loginNeedProject": "请先创建项目。系统用户就绪后再绑公钥效果最佳。",
     "loginNeedPub": "请选择项目并粘贴以 ssh- 开头的公钥",
+    "loginNoProjects": "没有项目。在下面授权现有的 Linux 用户（root / tester）。写入/root/.ssh需要YSK_EXECUTE=1。",
+    "loginLinuxHint": "没有项目时使用。示例：root 或 tester。",
     "loginAdded": "已加入",
     "sshdTitle": "项目用户 SFTP（sshd）",
     "sshdDesc": "让 ysks_* / ysk_* 项目用户可用公钥 SFTP。未安装时，登录授权可能无效。",
@@ -324,6 +333,14 @@
     "ssh2faStep3": "写入 home",
     "ssh2faStep4": "系统安装 PAM 模块并合并片段（下方）",
     "pkgLabel": "软件包 {{name}}",
+    "pkgStatus": "套件 {{status}}",
+    "pamStatus": "帕姆{{status}}",
+    "kbdStatus": "sshd 键盘交互 {{status}}",
+    "light": {
+      "green": "正常",
+      "yellow": "需检查",
+      "red": "未就绪"
+    },
     "enrollForUser": "为用户登记 SSH 2FA",
     "ssh2faEmpty": "尚未为任何 Linux 用户开启 SSH 2FA",
     "ssh2faEmptyHint": "建议先用密钥登录；2FA 作第二道门。项目 SFTP-only 用户通常不需要 keyboard-interactive。",
@@ -374,17 +391,7 @@
     "strictDryRun": "严格模式预览",
     "errorNoDetail": "测试失败（无详情）",
     "strictBlocked": "套件或 PAM 未就绪，已停用套用 Strict。",
-    "privCloseWithoutAck": "已关闭。私钥不会再显示；若尚未保存，请立即重新生成。",
-    "loginNoProjects": "没有项目。在下面授权现有的 Linux 用户（root / tester）。写入/root/.ssh需要YSK_EXECUTE=1。",
-    "loginLinuxHint": "没有项目时使用。示例：root 或 tester。",
-    "pkgStatus": "Package {{status}}",
-    "pamStatus": "PAM {{status}}",
-    "kbdStatus": "sshd keyboard-interactive {{status}}",
-    "light": {
-      "green": "ok",
-      "yellow": "check",
-      "red": "missing"
-    }
+    "privCloseWithoutAck": "已关闭。私钥不会再显示；若尚未保存，请立即重新生成。"
   },
   "sessionsActive": "使用中",
   "sessionsOther": "其他设备",
@@ -409,7 +416,6 @@
   "mySecurityHint": "",
   "policyTotpHint": "全站政策：要求 admin 角色各自启用 2FA（每人自己扫码），不是共用同一组验证码。",
   "requireUser2fa": "要求所有面板用户启用 2FA",
-  "generateFail2ban": "产生 fail2ban 片段",
   "changePasswordTitle": "变更登录密码",
   "currentPassword": "目前密码",
   "newPassword": "新密码",
@@ -419,6 +425,11 @@
   "passwordChanged": "已更新密码。",
   "strictNeedsEnrolled": "至少一名管理员已开 2FA，才可开启 Strict。",
   "policyTotpNeedSelf": "请先在本帐号启用 2FA，否则确认码无法填写。",
+  "policyNoTotpHint": "This account has no 2FA yet — saving policy does not need a TOTP. Set up 2FA above if you want to require it for others.",
+  "policyNeedSelf2fa": "首先在此帐户上启用 2FA，然后使用 TOTP 代码进行确认",
+  "revokeAllDevicesTitle": "撤销每个记住的设备 - 您和其他管理员必须再次验证 2FA",
+  "sessionCli": "CLI",
+  "sessionApi": "API",
   "fail2banSnippetTitle": "fail2ban 片段",
   "fail2banSnippetEmpty": "没有写入片段。",
   "trustedDevicesTitle": "信任装置",
@@ -440,16 +451,5 @@
     "critical": "严重"
   },
   "confirmDeleteApiKey": "删除此 API 密钥？",
-  "confirmDeleteApiKeyDesc": "删除后「{{name}}」无法再验证。此操作无法复原。",
-  "policyNoTotpHint": "This account has no 2FA yet — saving policy does not need a TOTP. Set up 2FA above if you want to require it for others.",
-  "sessionCli": "CLI",
-  "sessionApi": "API",
-  "statApiSessions": "API 会话",
-  "revokeOtherTitle": "退出 {{n}} 个其他会话",
-  "policyNeedSelf2fa": "首先在此帐户上启用 2FA，然后使用 TOTP 代码进行确认",
-  "revokeAllDevicesTitle": "撤销每个记住的设备 - 您和其他管理员必须再次验证 2FA",
-  "statSshValue": "{{keys}} keys · {{auth}} authorized",
-  "statSshHint": "Outbound identities / authorized login keys",
-  "needCurrentPassword": "Enter the current password first",
-  "passwordMin8": "New password must be at least 8 characters"
+  "confirmDeleteApiKeyDesc": "删除后「{{name}}」无法再验证。此操作无法复原。"
 }

package/locales/zh-CN/serviceExposure.json

@@ -7,11 +7,22 @@
   "modePrivate": "仅本机",
   "modePublic": "公网",
   "modeRestricted": "受限",
+  "modeUndecided": "尚未設定",
+  "modePublicLive": "公网（实际监听）",
+  "summaryPublicLive": "正在听 {{bind}} — 全部界面可达。请确认存取模式；这不是仅本机。",
+  "modeLoading": "載入中",
   "summaryPrivate": "未对外开放防火墙端口。",
   "summaryPublic": "公网开放 · {{ports}}",
+  "summaryUndecided": "尚未確認存取模式（目錄建議：{{suggested}}）。",
+  "summaryNotEnforced": "防火牆未啟用，面板未強制開放或封鎖此埠。",
+  "roleSmtp": "SMTP 提交",
+  "roleImap": "IMAP／POP3 收件",
   "summaryRestricted": "受限 · {{count}} 个来源",
   "summaryFirewallOff": "主机防火墙：{{detail}} — UFW 未启用时规则不会生效。",
+  "summaryFirewallOffOnly": "主机防火墙未启用，埠规则不生效。",
   "outOfSync": "未同步",
+  "openButStopped": "端口打开 — 服务未运行",
+  "openNoTenants": "没有租户的公共港口",
   "firewallOff": "防火墙关闭",
   "ufwMissing": "未安装 UFW",
   "ufwInactive": "已关闭",
@@ -28,16 +39,5 @@
   "privateStartTitle": "要对外开放 {{service}} 吗？",
   "confirmAndStart": "确认并启动",
   "cloudSgNote": "仅主机防火墙 — 不会改云安全组（AWS／GCP／Azure）。",
-  "serviceNotInstalled": "此服務尚未安裝，防火牆規則不會生效。",
-  "modeUndecided": "尚未設定",
-  "modeLoading": "載入中",
-  "summaryUndecided": "尚未確認存取模式（目錄建議：{{suggested}}）。",
-  "summaryNotEnforced": "防火牆未啟用，面板未強制開放或封鎖此埠。",
-  "roleSmtp": "SMTP 提交",
-  "roleImap": "IMAP／POP3 收件",
-  "openButStopped": "端口打开 — 服务未运行",
-  "openNoTenants": "没有租户的公共港口",
-  "summaryFirewallOffOnly": "Host firewall is not enabled, so port rules are not enforced.",
-  "modePublicLive": "Public (live bind)",
-  "summaryPublicLive": "Listening on {{bind}} — reachable on all interfaces. Confirm access mode; this is not private."
+  "serviceNotInstalled": "此服務尚未安裝，防火牆規則不會生效。"
 }