ysk-server-shared 1.1.24 → 1.1.26

package/locales/zh-CN/vnc.json

@@ -119,6 +119,8 @@
   },
   "installHint": "TigerVNC → noVNC；XFCE 可选",
   "needTigerVnc": "需 TigerVNC",
+  "needXfceFirst": "需先安装 XFCE",
+  "needSessionRunning": "工作阶段未运行 — 请先启动",
   "needNovnc": "需 noVNC",
   "needXfce": "XFCE（可选）",
   "needViewer": "Viewer（可选）",
@@ -171,6 +173,14 @@
   "start": "启动",
   "stop": "停止",
   "startAfterCreate": "创建后启动",
+  "hostnameBroken": "此主机无法解析自己的主机名（{{hostname}}）。工作阶段会启动失败。",
+  "hostnameBrokenIdle": "Hostname {{hostname}} does not resolve on this host. Fix /etc/hosts before you create a session.",
+  "hostnameFix": "把主机名写入 /etc/hosts",
+  "hostnameFixTitle": "附加此行到 /etc/hosts？",
+  "hostnameFixDesc": "{{line}}",
+  "hostnameFixDone": "已更新 /etc/hosts 主机名",
+  "startAfterCreateBlocked": "主机名可解析后才可启用",
+  "startHostnameBlocked": "主机名可解析后才可启动。请先使用「把主机名写入 /etc/hosts」。",
   "colName": "名称",
   "colLinuxUser": "Linux 用户",
   "colDisplay": "Display／端口",
@@ -202,6 +212,10 @@
   "deleteAccountC3User": "将一并删除 Linux 用户与 home（userdel -r）",
   "deleteAccountC3Keep": "将保留系统上的 Linux 用户",
   "removeLinuxUser": "一并删除 Linux 用户和家目录",
+  "deleteKeepUserWarn": "将留下孤立 Linux 用户，需自行清理。",
+  "bindRfbLine": "RFB {{bind}} :{{port}}",
+  "bindNovncLine": "noVNC 127.0.0.1:{{port}}",
+  "bindNovncHint": "noVNC 只听本机。桌面经面板代理，除非 RFB 绑全部界面，否则不是公网桌面。",
   "connection": "连接",
   "connectionTitle": "连入材料",
   "connectionDesc": "客户端如何连到 {{name}}",
@@ -245,19 +259,5 @@
   "editClientTitle": "编辑远程客户端",
   "editClientDesc": "更新连接路径、主机与可选已存密码。",
   "clientUpdated": "已更新客户端配置",
-  "rememberNeedPassword": "请先填密码。",
-  "needXfceFirst": "Install XFCE first",
-  "needSessionRunning": "Session is not running — start it first",
-  "deleteKeepUserWarn": "The Linux user will stay on the host as an orphan. You must clean it up later.",
-  "bindRfbLine": "RFB {{bind}} :{{port}}",
-  "bindNovncLine": "noVNC 127.0.0.1:{{port}}",
-  "bindNovncHint": "noVNC listens on localhost. The desktop is reached through this panel, not the public internet, unless RFB bind is all interfaces.",
-  "hostnameBroken": "This host cannot resolve its own hostname ({{hostname}}). Session start will fail.",
-  "hostnameFix": "Write hostname to /etc/hosts",
-  "hostnameFixTitle": "Append this line to /etc/hosts?",
-  "hostnameFixDesc": "{{line}}",
-  "hostnameFixDone": "Hostname /etc/hosts updated",
-  "startAfterCreateBlocked": "主机名可解析后才可启用",
-  "startHostnameBlocked": "主机名可解析后才可启动。请先使用「把主机名写入 /etc/hosts」。",
-  "hostnameBrokenIdle": "Hostname {{hostname}} does not resolve on this host. Fix /etc/hosts before you create a session."
+  "rememberNeedPassword": "请先填密码。"
 }

package/locales/zh-CN/vpn.json

@@ -58,9 +58,17 @@
   "listenPortTcp": "监听端口（TCP）",
   "endpoint": "公开端点",
   "endpointHint": "客户端连入的公网 host:port",
+  "ddnsFill": "使用 DDNS 主机名称",
+  "ddnsFilled": "已用 DDNS 填入 Endpoint 主机。现有 peers 未改动。",
+  "ddnsFillEmpty": "尚无 DDNS 主要主机名称。请先到 DNS 的 DDNS 分页新增。",
   "ensureServer": "应用服务器",
   "openFirewall": "开端口 {{port}}/{{proto}}",
   "presets": "常用端口",
+  "portHint": {
+    "51820": "默认 WireGuard 监听端口",
+    "51821": "备用 WireGuard 侦听端口",
+    "51822": "第二个备用 WireGuard 侦听端口"
+  },
   "proto": "协议",
   "protoUdp": "UDP协议",
   "protoTcp": "传输控制协议",
@@ -74,6 +82,24 @@
   "peerNameHint": "可用英文字母、数字、. _ -，不可有空格、／或 !",
   "peerNameInvalid": "不可使用空格、／或 !。请改为 {{preview}}，或自行修改名称。",
   "addPeer": "+ 新增",
+  "installEngineFirst": "首先安装VPN引擎",
+  "needServerRunning": "请先套用并启动 {{engine}} 服务器",
+  "engineSummarySoftware": "{{installed}} 已安装 · {{running}} 运行中",
+  "privateKeyOnce": "客户端私钥只在此显示一次。请立即下载或复制，之后无法复原。",
+  "showPrivateKey": "显示私钥",
+  "hidePrivateKey": "隐藏私钥",
+  "deletePeerTitle": "删除对等端 {{name}}？",
+  "deletePeerDesc": "将移除 {{name}}（{{address}}）。客户端会立即断线，配置无法恢复。WireGuard 服务器保持运行。",
+  "deleteClientTitle": "删除 OpenVPN 客户端 {{name}}？",
+  "deleteClientDesc": "将移除 {{name}}（{{address}}）。该客户端会立即断线，配置无法恢复。OpenVPN 服务器保持运行。",
+  "deleteKeyTitle": "删除 Shadowsocks 密钥 {{name}}？",
+  "deleteKeyDesc": "将移除访问密钥 {{name}}（{{address}}）。使用此密钥的客户端会断线。Shadowsocks 服务器保持运行。",
+  "deleteResult": "已移除 {{name}}。",
+  "portInvalid": "监听端口须为 1 至 65535 的整数。",
+  "portRequired": "请填写监听端口。",
+  "importInvalid": "未能识别为 WireGuard 或 OpenVPN 客户端配置。",
+  "qrFailed": "未能生成此配置的二维码。请改为下载或复制文本。",
+  "cfgTitle": "配置 — {{name}}",
   "addPeerWg": "+ 新增 peer",
   "addPeerOvpn": "+ 新增客户端",
   "addPeerSs": "+ 新增密钥",
@@ -133,31 +159,5 @@
     "cidrInvalid": "请填写有效的 CIDR，例如 192.168.1.0/24。"
   },
   "engineNotInstalled": "此主机尚未安装此 VPN 引擎。",
-  "serverNotListening": "服务器单元未在运行。UDP/TCP {{port}} 可能未监听。",
-  "installEngineFirst": "首先安装VPN引擎",
-  "portHint": {
-    "51820": "默认 WireGuard 监听端口",
-    "51821": "备用 WireGuard 侦听端口",
-    "51822": "第二个备用 WireGuard 侦听端口"
-  },
-  "needServerRunning": "{{engine}} is not running — apply the server first",
-  "engineSummarySoftware": "{{installed}} installed · {{running}} running",
-  "privateKeyOnce": "The client private key is shown only here. Download or copy it now — it cannot be recovered later.",
-  "showPrivateKey": "Show private key",
-  "hidePrivateKey": "Hide private key",
-  "deletePeerTitle": "删除对等端 {{name}}？",
-  "deletePeerDesc": "将移除 {{name}}（{{address}}）。客户端会立即断线，配置无法恢复。WireGuard 服务器保持运行。",
-  "deleteClientTitle": "删除 OpenVPN 客户端 {{name}}？",
-  "deleteClientDesc": "将移除 {{name}}（{{address}}）。该客户端会立即断线，配置无法恢复。OpenVPN 服务器保持运行。",
-  "deleteKeyTitle": "删除 Shadowsocks 密钥 {{name}}？",
-  "deleteKeyDesc": "将移除访问密钥 {{name}}（{{address}}）。使用此密钥的客户端会断线。Shadowsocks 服务器保持运行。",
-  "deleteResult": "已移除 {{name}}。",
-  "portInvalid": "监听端口须为 1 至 65535 的整数。",
-  "portRequired": "请填写监听端口。",
-  "importInvalid": "未能识别为 WireGuard 或 OpenVPN 客户端配置。",
-  "qrFailed": "未能生成此配置的二维码。请改为下载或复制文本。",
-  "cfgTitle": "配置 — {{name}}",
-  "ddnsFill": "Use DDNS hostname",
-  "ddnsFilled": "Filled endpoint host from DDNS. Peers are unchanged.",
-  "ddnsFillEmpty": "No DDNS primary hostname yet. Add one on the DNS DDNS tab."
+  "serverNotListening": "服务器单元未在运行。UDP/TCP {{port}} 可能未监听。"
 }

package/locales/zh-HK/cli.json

@@ -12,7 +12,7 @@
   },
   "help": {
     "blurb": "控制平面 命令列 — 人工智能 代理 請優先用 --json。\n文件：docs/代理/README.md · docs/cli/reference.md · docs/代理/commands.json",
-    "main": "YSK Server 命令列。指令與旗標一律為英文；--locale 只翻譯說明文字。\n\n{{product}} ({{cli}}) v{{version}}\n\nControl plane CLI — prefer --json for AI agents.\nDocs: docs/agent/README.md · docs/cli/reference.md · docs/agent/commands.json\n\nUsage:\n  {{cli}} <command> [options]\n\nCommands:\n  setup                 Init dataDir + admin\n  update                Self-update check/apply\n  serve                 HTTP API + Web UI\n  system unit-install   Install ysk-server.service [--enable]\n  stack                 plans|bundles|status|install|uninstall\n  tools                 List tools; tools run --tool <name> [--dry-run]\n  ask                   NL → AI plan [--execute]\n  projects              list|get|create|deploy|stop|health|backup|template\n  users                 list|create|totp\n  packages              list\n  rbac                  list|show\n  audit                 list\n  backup                all|list|status|restore|delete|schedule|control-plane|settings|restic\n  templates             App templates\n  hosting               nginx|dns|db|firewall helpers\n  dns                   zone|zones|lookup\n  logs                  sources|query|journal|overview\n  host                  overview|metrics (read-only)\n  nginx                 status|list|test|sync\n  ssl                   list|get (certificates)\n  db-cluster            list|get|create|plan (HA plan-first)\n  ssh-key               list|create|import|public|export|install|delete (SSH identity vault)\n  ssh-2fa               list|enroll|confirm|install|pam|retire (SSH login TOTP ≠ panel 2FA)\n  services              Host service matrix (systemctl probe)\n  defense | protection  status|ban|unban|whitelist\n  security              status|sessions|api-keys (2FA flags · session revoke · API keys)\n  cdn                   nodes|sites|render|apply|purge|probe|dashboard|health-loop|from-project\n  agents                runtimes|fleet list|commands|register (panel + edge)\n  agent run             Outbound fleet poller (experimental)\n  store                 status|export|import|migrate (json|sqlite|postgres document backends)\n  files                 list|read|write|mkdir|rm|stat|rename|copy|move|chmod|trash|shares (sandbox)\n  cron                  list|create|delete|enable|disable|run|install|status\n  email                 domains|mailboxes|deliverability|bootstrap|dns (panel parity)\n  health                Local mode snapshot or --url http://host:port/health\n  notifications         list\n  readiness | doctor    Production readiness (honest)\n  migrate               inventory|host|post|status|resume|orphan-homes (full host migrate)\n  vpn                   WireGuard / OpenVPN\n  vnc                   accounts|clients|share\n  apache                sites|settings\n  network               ifaces|exposure|real-ip\n  real-ip               CDN Real IP\n  updates               inventory|apply\n  software              list|install|uninstall\n  db                    MySQL / MariaDB / PostgreSQL\n  redis                 status|keys|get|set\n  ftp                   accounts|status\n  runtimes              list|install\n  bt-tracker            status|settings\n  validators            list|chains|disk|get (Beta)\n  docker                status|ps|images|compose|prune (engine)\n  version | help\n\nGlobal:\n  --json                JSON stdout (AI)\n  --data-dir PATH       also --data-dir=PATH or YSK_DATA_DIR\n  --config PATH\n  --locale CODE         CLI language (default en). Also YSK_LOCALE.\n                        Codes: en zh-HK zh-CN ja ko hi es ar fr bn pt id ur\n  --limit N --offset N  Slice large JSON lists (software / updates / host metrics / rbac)\n  --help | --version\n\nExit: 0 ok · 1 error · 2 validation · 3 blocked · 4 not found · 5 host error\n\nSafety:\n  Dangerous ops default to dry-run (plan only).\n  Pass --execute (alias --apply) + env YSK_EXECUTE=1 to mutate host.\n  Command names and flags are always English. --locale only translates messages.\n\nExamples:\n  {{cli}} readiness --json\n  {{cli}} host --json\n  {{cli}} nginx status --json\n  {{cli}} ssl list --json\n  {{cli}} projects get --id UUID --json\n  {{cli}} defense ban --ip 1.2.3.4 --json          # dry-run plan\n  {{cli}} projects list --json\n  {{cli}} --locale=zh-HK help\n  {{cli}} logs query --source journal: --lines 100 --json\n  {{cli}} tools --json"
+    "main": "YSK Server 命令列。指令與旗標一律為英文；--locale 只翻譯說明文字。\n\n{{product}} ({{cli}}) v{{version}}\n\nControl plane CLI — prefer --json for AI agents.\nDocs: docs/agent/README.md · docs/cli/reference.md · docs/agent/commands.json\n\nUsage:\n  {{cli}} <command> [options]\n\nCommands:\n  setup                 Init dataDir + admin\n  update                Self-update check/apply\n  serve                 HTTP API + Web UI\n  system unit-install   Install ysk-server.service [--enable]\n  stack                 plans|bundles|status|install|uninstall\n  tools                 List tools; tools run --tool <name> [--dry-run]\n  ask                   NL → AI plan [--execute]\n  projects              list|get|create|deploy|stop|health|backup|template\n  users                 list|create|totp\n  packages              list\n  rbac                  list|show\n  audit                 list\n  backup                all|list|status|restore|delete|schedule|control-plane|settings|restic\n  templates             App templates\n  hosting               nginx|dns|db|firewall helpers\n  dns                   zone|zones|lookup|ddns\n  logs                  sources|query|journal|overview\n  host                  overview|metrics (read-only)\n  nginx                 status|list|test|sync\n  ssl                   list|get (certificates)\n  db-cluster            list|get|create|plan (HA plan-first)\n  ssh-key               list|create|import|public|export|install|delete (SSH identity vault)\n  ssh-2fa               list|enroll|confirm|install|pam|retire (SSH login TOTP ≠ panel 2FA)\n  services              Host service matrix (systemctl probe)\n  defense | protection  status|ban|unban|whitelist\n  security              status|sessions|api-keys (2FA flags · session revoke · API keys)\n  cdn                   nodes|sites|render|apply|purge|probe|dashboard|health-loop|from-project\n  agents                runtimes|fleet list|commands|register (panel + edge)\n  agent run             Outbound fleet poller (experimental)\n  store                 status|export|import|migrate (json|sqlite|postgres document backends)\n  files                 list|read|write|mkdir|rm|stat|rename|copy|move|chmod|trash|shares (sandbox)\n  cron                  list|create|update|delete|enable|disable|run|install|status|host\n  email                 domains|mailboxes|deliverability|bootstrap|dns (panel parity)\n  health                Local mode snapshot or --url http://host:port/health\n  notifications         list\n  readiness | doctor    Production readiness (honest)\n  migrate               inventory|host|post|status|resume|orphan-homes (full host migrate)\n  vpn                   WireGuard / OpenVPN\n  vnc                   accounts|clients|share\n  apache                sites|settings\n  network               ifaces|exposure|real-ip\n  real-ip               CDN Real IP\n  updates               inventory|apply\n  software              list|install|uninstall\n  db                    MySQL / MariaDB / PostgreSQL\n  redis                 status|keys|get|set\n  ftp                   accounts|status\n  runtimes              list|install\n  bt-tracker            status|settings\n  validators            list|chains|disk|get|checklist (Beta)\n  docker                status|ps|images|compose|prune (engine)\n  version | help\n\nGlobal:\n  --json                JSON stdout (AI)\n  --data-dir PATH       also --data-dir=PATH or YSK_DATA_DIR\n  --config PATH\n  --locale CODE         CLI language (default en). Also YSK_LOCALE.\n                        Codes: en zh-HK zh-CN ja ko hi es ar fr bn pt id ur\n  --limit N --offset N  Slice large JSON lists (software / updates / host metrics / rbac)\n  --help | --version\n\nExit: 0 ok · 1 error · 2 validation · 3 blocked · 4 not found · 5 host error\n\nSafety:\n  Dangerous ops default to dry-run (plan only).\n  Pass --execute (alias --apply) + env YSK_EXECUTE=1 to mutate host.\n  Command names and flags are always English. --locale only translates messages.\n\nExamples:\n  {{cli}} readiness --json\n  {{cli}} host --json\n  {{cli}} nginx status --json\n  {{cli}} ssl list --json\n  {{cli}} projects get --id UUID --json\n  {{cli}} defense ban --ip 1.2.3.4 --json          # dry-run plan\n  {{cli}} projects list --json\n  {{cli}} --locale=zh-HK help\n  {{cli}} logs query --source journal: --lines 100 --json\n  {{cli}} tools --json"
   },
   "usage": {
     "tools": {
@@ -115,7 +115,7 @@
         "--data-dir": {
           "path": {
             "--json": {
-              "0349e6": "用法： ysk-server 定時工作 <sub> [--data-dir 路徑] [--json]\n 列表 [--project-識別碼 識別碼] [--q TEXT]\n 建立 --schedule \"0 3 * * *\" --command CMD [--project-識別碼 識別碼] [--用戶 用戶]\n delete --識別碼 JOB_ID\n 啟用|停用 --識別碼 JOB_ID\n run --識別碼 JOB_ID # run-now (needs 系統變更權限已開啟)\n 安裝 # load managed 定時工作表 (needs 執行)\n 狀態 # 探測 managed 檔案 vs 主機 定時工作表\nHonesty: 安裝 已封鎖 without 系統變更權限已開啟 (檔案 still 已寫入)."
+              "0349e6": "用法： ysk-server cron <sub> [--data-dir PATH] [--json]\n  list [--project-id ID] [--q TEXT]\n  create --schedule \"0 3 * * *\" --command CMD [--project-id ID] [--user USER]\n  update --id JOB_ID [--schedule S] [--command CMD] [--user USER] [--project-id ID] [--enable|--disable]\n  delete --id JOB_ID\n  enable|disable --id JOB_ID\n  run --id JOB_ID              # run-now (needs YSK_EXECUTE=1)\n  install                     # load managed crontab (needs EXECUTE)\n  status                      # probe managed file vs host crontab\n  host [list] [--user USER] [--jobs-only]\n  host edit --user USER --old-schedule S --old-command C --schedule S --command C --execute\n  host disable|enable|delete|adopt --user USER --old-schedule S --old-command C --execute\n  host run --user USER --command C --execute\n誠實：未設定 YSK_EXECUTE=1 時，install 與 host 寫入會封鎖。\n"
             }
           }
         }

package/locales/zh-HK/cron.json

@@ -167,5 +167,33 @@
   "writtenOnHostHint": "已寫入主機 crontab 的行",
   "registeredJobsHint": "已在面板登記的工作（含待安裝）",
   "pendingInstallCount": "{{n}} 項待安裝",
-  "systemJobBadge": "未綁專案 · 系統用戶"
+  "systemJobBadge": "未綁專案 · 系統用戶",
+  "hostEdit": "修改",
+  "hostEditTitle": "修改主機 crontab 行",
+  "hostEditDesc": "立即寫入該用戶的線上 crontab。需要 root 與 YSK_EXECUTE=1。其他行不變。",
+  "hostSave": "寫入 crontab",
+  "hostSaveTitle": "寫入此 crontab 行？",
+  "hostSaveDesc": "會取代 {{user}} 的線上行。請輸入 EDIT 確認。",
+  "hostDisable": "停用",
+  "hostDisableTitle": "停用主機 crontab 行？",
+  "hostDisableDesc": "會把 {{user}} 該行改成註解。請輸入 DISABLE 確認。",
+  "hostEnable": "啟用",
+  "hostEnableTitle": "啟用主機 crontab 行？",
+  "hostEnableDesc": "會移除 {{user}} 該行的註解。請輸入 ENABLE 確認。",
+  "hostRunTitle": "試跑此主機指令一次？",
+  "hostRunDesc": "立即以 {{user}} 執行。不會改 crontab。請輸入 RUN 確認。",
+  "hostAdopt": "納入面板",
+  "hostAdoptTitle": "把此主機行納入面板？",
+  "hostAdoptDesc": "會在線上行加上 # ysk:id 並登記。下一輪安裝不會重複。請輸入 ADOPT 確認。",
+  "hostDeleteTitle": "移除主機 crontab 行？",
+  "hostDeleteDesc": "會移除 {{user}} 的線上行。請輸入該指令確認。",
+  "hostUserLocked": "crontab 擁有者（此處不能搬到其他用戶）",
+  "hostLinePreview": "將寫入的行",
+  "disabledJob": "已停用",
+  "confirmMismatch": "確認內容必須與指令相同。",
+  "writtenHost": "已寫入主機 crontab",
+  "adoptedHost": "已納入面板",
+  "keepDisabledHint": "此行已停用。儲存後仍保持註解。",
+  "currentLine": "現時",
+  "nextLine": "下一行"
 }

package/locales/zh-HK/notes.json

@@ -2841,7 +2841,27 @@
     "noHostLinesOrEmpty": "主機 crontab 無額外非 YSK 行（或空白）。",
     "installReplacesYskOnly": "安裝只更新帶 YSK 標記的工作；其他主機工作已合併保留。",
     "hostScanNeedRoot": "讀取其他用戶 crontab 需要控制面以 root 執行；目前僅能列出控制面自身 crontab。",
-    "hostScanSkipUser": "略過用戶 {{user}}（無權讀取）"
+    "hostScanSkipUser": "略過用戶 {{user}}（無權讀取）",
+    "hostUserInvalid": "crontab 用戶無效。",
+    "hostScheduleInvalid": "主機 cron 排程無效。",
+    "hostLineNotJob": "該 crontab 行不是工作。",
+    "hostLineMissing": "找不到對應的 crontab 行（主機 crontab 可能已變更）。",
+    "hostLineDuplicate": "該工作行出現 {{count}} 次；請先改成唯一的一行。",
+    "hostReadFailed": "無法讀取 crontab：{{detail}}",
+    "hostWriteFailed": "寫入 crontab 失敗：{{detail}}",
+    "hostRewriteNeedExecute": "寫入主機 crontab 需要 root 與 YSK_EXECUTE=1。目前只是預覽。",
+    "hostRewriteNeedRoot": "修改其他用戶的 crontab 需要控制面以 root 執行。",
+    "hostPreview": "下一行：{{line}}",
+    "hostPreviewDelete": "下一步：移除該行。",
+    "hostRewritten": "已寫入 {{user}} 的 crontab。",
+    "hostRunNeedExecute": "試跑主機 cron 指令需要 YSK_EXECUTE=1。",
+    "hostRan": "已用 {{user}} 試跑主機 cron 指令。",
+    "hostAdoptNeedExecute": "把主機行納入面板需要 YSK_EXECUTE=1（否則安裝時會重複）。",
+    "hostAdopted": "主機行已標 # ysk:{{id}} 並登記到面板。",
+    "hostConfirmMismatch": "確認內容必須與指令相同。",
+    "hostAdoptOnlyInstallUser": "只能納入「安裝到系統」會寫入的 crontab（root／本進程用戶）。其他用戶安裝時會重複。",
+    "hostAdoptEnableFirst": "請先啟用該主機行，再納入面板。",
+    "hostPercentNewline": "crontab 把未跳脫的 % 當成換行。日期格式請寫 \\%Y（或不要用 %）。"
   },
   "dbBrowser": {
     "pmaInstalled": "已安裝 phpMyAdmin → {{path}}",