ysk-server-shared 1.1.24 → 1.1.26

package/locales/en/validators.json

@@ -130,7 +130,7 @@
     "disk": "Disk"
   },
   "cli": {
-    "usage": "Usage: ysk-server validators list|chains|disk|get|status|logs|create|start|stop|restart|clear|upgrade|set-version|versions|policy|mithril|prune|switch-network|snapshot|compose|settings|producer-keys|producer-detach [--chain C] [--network N] [--profile P] [--el EL] [--cl CL] [--el-tag T] [--cl-tag T] [--node-tag T] [--client ID] [--tag T] [--data-path P] [--rpc-port N] [--id ID] [--upgrade POLICY] [--confirm TOKEN] [--kes-file P] [--vrf-file P] [--opcert-file P] [--accept-low-disk] [--accept-low-mem] [--accept-mainnet] [--refresh] [--execute] [--json]"
+    "usage": "Usage: ysk-server validators list|chains|disk|get|status|checklist|logs|create|start|stop|restart|clear|upgrade|set-version|versions|policy|mithril|prune|switch-network|snapshot|compose|compose-write|rewrite-compose|software|pull|leftover-remove|stats|settings|producer-keys|producer-detach|near-account [--chain C] [--network N] [--profile P] [--el EL] [--cl CL] [--el-tag T] [--cl-tag T] [--node-tag T] [--client ID] [--tag T] [--data-path P] [--rpc-port N] [--id ID] [--path PATH] [--file PATH] [--image REF] [--upgrade POLICY] [--confirm TOKEN] [--kes-file P] [--vrf-file P] [--opcert-file P] [--accept-low-disk] [--accept-low-mem] [--accept-mainnet] [--refresh] [--execute] [--json]"
   },
   "clients": {
     "el": "Execution client",
@@ -191,7 +191,9 @@
     "producerTooLarge": "That key file is larger than 64 KiB",
     "producerBadType": "That file is not a KES key, VRF key, or operational certificate",
     "producerEmpty": "Provide at least one of kes, vrf, or opcert",
-    "switchNeedDetachProducer": "Detach producer keys before switching network"
+    "switchNeedDetachProducer": "Detach producer keys before switching network",
+    "nearAccountInvalid": "Pool name must be a short slug (or the full {pool}{factory} account).",
+    "nearKeyMissing": "validator_key.json is missing or has no public_key. Start the node and wait for neard init."
   },
   "notes": {
     "beta": "This feature is Beta. Host changes need root and YSK_EXECUTE=1.",
@@ -229,7 +231,9 @@
     "producerDetached": "Hot keys removed; compose rewritten as relay",
     "dryDelete": "Delete is dry-run. Pass --execute and YSK_EXECUTE=1.",
     "deleted": "Node deleted",
-    "leftoverRemoved": "Removed leftover {{path}}"
+    "leftoverRemoved": "Removed leftover {{path}}",
+    "dryNearAccount": "Would set account_id to {{account}} (pass --execute). Secret is never changed.",
+    "nearAccountWrote": "Set account_id to {{account}}. Secret was not changed. Restart the node if it is running."
   },
   "create": "Create node",
   "wizard": {
@@ -394,31 +398,59 @@
     "blsPending": "BLS credentials appear after the node answers RPC.",
     "copyAll": "Copy all",
     "copyNamed": "Copy {{label}}",
+    "nearStakeKey": "Stake public key",
+    "nearStakeKeyPending": "Appears after first start (neard init). RPC not ready does not mean the key is missing.",
+    "nearAccountId": "Key file account_id",
+    "nearAccountIdPending": "Often empty until you set it to {{pool}}{{suffix}} after the pool exists. The panel writes only this field — never secret_key.",
+    "nearFactory": "Staking-pool factory",
+    "nearPublicAddr": "Public P2P (peers)",
+    "nearPublicAddrPending": "Appears after first start writes WAN:{{port}} into config.json.",
+    "nearCreateCommand": "create_staking_pool command",
+    "nearPointing": "The pool contract does not take this server’s IP. It stores this node’s stake public key. Peers use the Public P2P row above (host port {{port}}). RPC stays on localhost.",
+    "nearAccountIdHint": "After the pool exists, set account_id here (do not edit the file by hand). The panel never writes secret_key.",
+    "cosmosPubkey": "Consensus public key",
+    "cosmosPubkeyPending": "Appears after gaiad init writes priv_validator_key.json. RPC not ready does not mean the key is missing.",
+    "cosmosChainId": "chain-id",
+    "cosmosP2p": "Public P2P (external_address)",
+    "cosmosP2pPending": "Appears after first start writes tcp://WAN:{{port}} into config.toml.",
+    "ethBeacon": "Beacon API (localhost)",
+    "ethBeaconPending": "Beacon HTTP on this host. Point a validator client you run yourself at this URL — this compose has no VC.",
+    "cosmosCreateCommand": "create-validator command",
+    "cosmosCreateJson": "validator.json (gaiad v28)",
+    "copyFailed": "Copy failed",
+    "solIdentity": "Identity pubkey",
+    "solIdentityPending": "Appears after RPC answers getIdentity. This process is --no-voting until you add a vote account yourself.",
+    "adaP2pPort": "Relay P2P port",
+    "adaP2pPending": "Advertise this host’s public IPv4 (or DNS) and this port in the pool registration certificate. topology.json localRoots is for your own block producer. This panel does not probe WAN.",
     "notPosTitle": "Not proof-of-stake",
     "notPosBody": "Bitcoin here is a full or pruned node. There is no staking wallet on this page.",
     "eth": {
-      "model": "Deposit 32 ETH on the official launchpad. Signing keystore is not a withdrawal key.",
+      "model": "This compose runs execution + beacon only — not a validator client. Deposit 32 ETH on the official launchpad.",
       "min": "32 ETH + gas",
       "wallets": "MetaMask, Ledger, Trezor — only on the official launchpad",
-      "panel": "Runs the execution and consensus clients",
+      "panel": "Runs EL + beacon. RPC and beacon API on localhost. No validator client in compose.",
+      "honesty": "This instance is execution + beacon only. There is no validator client in the compose file. Copying a keystore into the beacon data directory will not start attesting. The deposit contract does not take this server’s IP.",
       "yskDoes": [
-        "Install and start the execution and consensus clients.",
-        "Show disk, peers, and upgrade status."
+        "Install and start the execution and beacon clients.",
+        "Show disk, peers, and upgrade status.",
+        "Does not run a validator client and does not load a signing keystore."
       ],
       "youDo": [
-        "Create the keystore and withdrawal address yourself.",
-        "Deposit 32 ETH on the official launchpad.",
-        "Copy the keystore into this node’s data directory."
+        "Create the keystore and withdrawal address yourself on the official launchpad or with staking-deposit-cli.",
+        "Deposit 32 ETH on the launchpad for this network.",
+        "Run a validator client yourself (not this compose) against this instance’s localhost beacon API."
       ],
       "steps": [
-        "Offline, use the official launchpad or staking-deposit-cli. Set the withdrawal address to your own ETH wallet.",
-        "On the official launchpad, deposit 32 ETH (keep extra for gas).",
-        "Copy the keystore file into this node’s data directory yourself. The panel never uploads or stores it.",
-        "Watch sync, disk, and upgrade badges on this page."
+        "Wait until execution and beacon are synced.",
+        "Open the official launchpad for this network (Hoodi or Mainnet on this page). Sepolia has no launchpad button here.",
+        "Offline, generate the keystore (staking-deposit-cli). Set the withdrawal address to your own ETH wallet.",
+        "Deposit 32 ETH on the launchpad (keep extra for gas).",
+        "Run a validator client yourself against the beacon URL on this card (example: lighthouse vc --beacon-nodes). This compose has no VC — putting a keystore in the beacon datadir does not attest."
       ],
       "never": [
         "Never give your seed phrase or withdrawal key to anyone, including this panel.",
-        "Never upload a signing keystore to a hosted cloud."
+        "Never upload a signing keystore to a hosted cloud.",
+        "Do not expect this page to attest after you copy a keystore into the beacon datadir."
       ]
     },
     "avax": {
@@ -435,10 +467,10 @@
         "Add the validator from Core using this node’s NodeID and BLS proof."
       ],
       "steps": [
-        "Wait until this node is synced.",
-        "Copy the NodeID, BLS public key, and BLS proof of possession shown on the instance page.",
-        "In Core web (Staking → Validate), or with Ledger via Core, register on the P-Chain.",
-        "Mainnet needs at least 2,000 AVAX, a 14-day minimum period, and a fee reserve."
+        "Wait until this node is synced and the NodeID / BLS rows appear (RPC).",
+        "Copy NodeID, BLS public key, and BLS proof of possession.",
+        "In Core web (Staking → Validate), or with Ledger via Core, register on the P-Chain. The transaction does not take a server IP.",
+        "Mainnet needs at least 2,000 AVAX, a 14-day minimum period, and a fee reserve. Fuji is 1 AVAX."
       ],
       "never": [
         "Do not send AVAX to this panel.",
@@ -449,129 +481,234 @@
       "model": "Operate a stake pool with offline cold / KES / VRF keys — not a browser wallet tap.",
       "min": "Pledge is your choice (see official docs)",
       "wallets": "Official stake-pool tooling (cold keys stay offline)",
-      "panel": "Runs cardano-node",
-      "yskDoes": ["Run cardano-node and Mithril snapshot restore where offered."],
+      "panel": "Runs cardano-node as a relay first; hot keys can be attached on this page.",
+      "honesty": "This instance starts as a relay. On-chain pool registration uses cold keys you keep offline. Peers and topology use this host’s public IPv4 and the P2P port shown here — the panel does not probe WAN.",
+      "yskDoes": [
+        "Run cardano-node and Mithril snapshot restore where offered.",
+        "Attach KES, VRF, and opcert when you provide them. Cold keys are refused."
+      ],
       "youDo": [
         "Generate pool keys offline.",
-        "Register the pool using official Cardano documentation."
+        "Register the pool with the official Cardano CLI. Put this host’s public IPv4 or DNS and the relay P2P port into the pool registration certificate.",
+        "Attach KES, VRF, and opcert on this page. Do not upload cold keys."
       ],
       "steps": [
         "Read the official operate-a-stake-pool guide.",
         "Generate cold, KES, and VRF keys on an offline machine.",
-        "Register the pool on-chain from those keys.",
-        "On this instance page, attach KES, VRF, and the operational certificate. Do not upload cold keys."
+        "Register the pool on-chain. Advertise the relay in that certificate (--pool-relay-ipv4 or DNS + the P2P port on this card). Public discovery is the certificate, not topology.json.",
+        "On this instance page, attach KES, VRF, and the operational certificate. Cold keys are refused.",
+        "topology.json localRoots is for your own block producer (advertise: false). This panel does not look up the WAN address."
       ],
       "never": [
         "Do not treat this as a MetaMask one-click stake.",
-        "Do not store cold keys on the validator host."
+        "Do not store cold keys on the validator host.",
+        "Do not expect editing topology.json alone to register the relay on-chain."
       ]
     },
     "near": {
-      "model": "Stake from your NEAR account into a staking pool contract.",
-      "min": "See official validator docs",
+      "model": "Create a staking-pool contract at the official factory. The contract stores this node’s public key — not the server IP.",
+      "min": "See official validator docs (30 NEAR to create the pool, plus stake)",
       "wallets": "Official NEAR wallet / lockup",
-      "panel": "Runs neard",
-      "yskDoes": ["Run neard and show disk / sync."],
-      "youDo": ["Stake from your NEAR account to your pool using official docs."],
+      "panel": "Runs neard; form fills create_staking_pool; after the pool exists, writes account_id only.",
+      "yskDoes": [
+        "Run neard with RPC on localhost and P2P on 24567.",
+        "After init, show the stake public key, public P2P address, and factory.",
+        "Fill create_staking_pool from pool name + owner + public key. After the pool exists, write account_id only — never secret_key, never the transaction."
+      ],
+      "youDo": [
+        "Start the node and wait for the public key on this page.",
+        "Enter pool name and owner, then copy the command.",
+        "Sign create_staking_pool from your own NEAR wallet or near-cli.",
+        "Return here and set account_id. Stake from your wallet into that pool."
+      ],
       "steps": [
-        "Bring the node to sync.",
-        "Follow official NEAR validator documentation.",
-        "Stake from your own wallet or lockup into the pool."
+        "Start the node and wait for neard init so the public key appears (RPC not ready is not the same as missing keys).",
+        "Enter the pool short name and owner account. Copy the filled create_staking_pool command.",
+        "From your wallet, call the factory (testnet pool.f863973.m0 / mainnet poolv1.near) with 30 NEAR for storage. The command uses --accountId; if your near CLI expects --account_id, follow that CLI’s --help.",
+        "After the pool exists, use Set account_id on this page (confirm = instance id). Do not edit validator_key.json by hand.",
+        "Restart if the node is already running. Wait until RPC answers and the node is synced before staking large amounts. Peers use Public P2P — the contract does not take an IP."
       ],
-      "never": ["Do not paste a seed phrase into this panel."]
+      "never": [
+        "Do not paste a seed phrase into this panel.",
+        "Do not put this server’s IP into the contract.",
+        "Do not expect the panel to send the create_staking_pool transaction."
+      ]
     },
     "cosmos": {
-      "model": "create-validator from your operator wallet. Consensus key stays on the node.",
-      "min": "See official Cosmos Hub docs",
+      "model": "create-validator from your operator wallet using this node’s consensus public key — not the server IP.",
+      "min": "See official Cosmos Hub docs (self-delegation in uatom)",
       "wallets": "Keplr or another Cosmos wallet you control",
-      "panel": "Runs gaiad",
-      "yskDoes": ["Run gaiad."],
+      "panel": "Runs gaiad v28; shows consensus pubkey; form fills validator.json + create-validator. Never writes priv_validator_key.json or broadcasts.",
+      "honesty": "This gaiad is v28 (JSON file). Hub docs still show flags — those fail here. The transaction stores this node’s consensus public key, not the server IP. Peers use Public P2P. RPC stays on localhost. This panel does not broadcast or read priv_key.",
+      "yskDoes": [
+        "Run gaiad with RPC on localhost and P2P on 26656. minimum-gas-prices is 0.005uatom.",
+        "After init, show the consensus public key, chain-id, and public P2P.",
+        "Fill validator.json and the gaiad v28 command from amount, moniker, and --from plus the consensus pubkey. Never write priv_validator_key.json or broadcast the transaction."
+      ],
       "youDo": [
-        "Keep the operator wallet yourself.",
-        "Broadcast create-validator from that wallet."
+        "Start the node and wait for the consensus public key on this page.",
+        "Enter amount, moniker, and --from. Copy validator.json, then the gaiad command.",
+        "Sign from Keplr or gaiad keys you control. Do not mix that mnemonic with the consensus key on this host."
       ],
       "steps": [
-        "Sync gaiad.",
-        "Keep the consensus key on this host only.",
-        "From Keplr (or equivalent), submit create-validator.",
-        "Monitor the node so it does not miss too many blocks."
+        "Start the node and wait for gaiad init so the consensus public key appears (RPC not ready is not the same as missing keys).",
+        "Enter self-delegation (1atom = 1 ATOM, or uatom), moniker, and --from. Copy validator.json then the gaiad command. This node is gaiad v28: JSON file, not the Hub docs’ flag form. chain-id is cosmoshub-4 on mainnet, provider on testnet.",
+        "The copied --gas-prices is 0.005uatom to match this node. Do not paste the Hub docs’ 0.0025uatom example or the flag-based create-validator.",
+        "Save validator.json and broadcast from your operator wallet. The transaction does not take a server IP. Peers use tcp://WAN:{{port}}.",
+        "Wait until RPC answers and the node is synced before bonding large amounts."
       ],
       "never": [
         "Do not mix the operator wallet mnemonic with the consensus key.",
-        "Do not enter wallet mnemonics here."
+        "Do not enter wallet mnemonics here.",
+        "Do not put this server’s IP into create-validator.",
+        "Do not paste the Hub docs’ --amount/--pubkey flags — this gaiad is v28 (validator.json).",
+        "Do not use 0.0025uatom gas on this node — the compose minimum is 0.005uatom."
       ]
     },
     "sol": {
-      "model": "Vote account, identity, and authorized withdrawer — created with official Solana tools.",
+      "model": "This compose runs Agave with --no-voting. Vote account and withdrawer are created with official Solana tools — not this panel.",
       "min": "See official operations docs (hardware and disk are heavy)",
       "wallets": "Official Solana CLI / wallet you control",
-      "panel": "Runs Agave; mainnet needs multiple tebibytes",
-      "yskDoes": ["Run the Agave client and warn about disk."],
-      "youDo": ["Create vote and withdrawer keys with official Solana tools."],
+      "panel": "Runs Agave as a catch-up node (--no-voting). Can show identity pubkey after RPC answers.",
+      "honesty": "This process is --no-voting. It will not vote or earn stake until you create a vote account with official Agave CLI and change how the process is started. This panel does not remove --no-voting.",
+      "yskDoes": [
+        "Run the Agave client and warn about disk.",
+        "Show the identity pubkey once RPC answers getIdentity.",
+        "Does not create a vote account and does not start voting."
+      ],
+      "youDo": [
+        "Create vote and authorized-withdrawer keys with official Solana tools on a machine you control.",
+        "Create the vote account with the official CLI, using this identity pubkey.",
+        "Only then run a voting validator — this compose stays --no-voting."
+      ],
       "steps": [
         "Confirm this host has enough disk and IOPS (mainnet is typically 2 TiB+).",
-        "Follow official Solana operations documentation.",
-        "Create the vote account and authorized withdrawer yourself.",
-        "Point the running validator at those keys on disk."
+        "Wait until RPC answers, then copy the identity pubkey shown here.",
+        "Create vote and authorized-withdrawer keys with official Solana tools on a machine you control, then solana create-vote-account.",
+        "This compose keeps --no-voting. Creating a vote account does not make this process vote."
       ],
-      "never": ["Do not expect a browser wallet button in this panel."]
+      "never": [
+        "Do not expect a browser wallet button in this panel.",
+        "Do not paste identity or vote keypairs into this panel.",
+        "Do not expect this page to start voting after you create a vote account."
+      ]
     },
     "dot": {
-      "model": "Session keys from the node; bind them in Polkadot.js from your stash.",
+      "model": "This compose is a full node (no --validator). Session keys and setKeys are official Polkadot.js steps — not this panel.",
       "min": "See the official wiki",
       "wallets": "Polkadot.js",
-      "panel": "Runs the Polkadot client",
-      "yskDoes": ["Run polkadot and expose RPC on localhost."],
-      "youDo": ["Rotate session keys on the node and set them from Polkadot.js."],
+      "panel": "Runs polkadot as a full node. RPC on localhost. No --validator flag.",
+      "honesty": "This process is not started with --validator. The panel does not call author_rotateKeys (that would change the keystore). Becoming a validator needs the official node flag and a rotateKeys call you make against localhost RPC.",
+      "yskDoes": [
+        "Run polkadot and expose RPC on localhost.",
+        "Does not pass --validator and does not rotate session keys."
+      ],
+      "youDo": [
+        "Follow the official set-up-a-validator guide.",
+        "If you add --validator yourself, call rotateKeys on localhost RPC and bind the result in Polkadot.js from your stash."
+      ],
       "steps": [
-        "Sync the node.",
-        "Generate session keys on this host.",
-        "In Polkadot.js, set those keys on your stash / controller.",
-        "Follow the official validate guide for bonding."
+        "Sync this full node.",
+        "Read the official validate guide. This compose is not a validator process.",
+        "Do not paste the stash mnemonic here. If you later run with --validator, rotate keys yourself on http://127.0.0.1 (RPC port on this instance).",
+        "In Polkadot.js, set those session keys on your stash / controller, then follow official bonding steps."
       ],
-      "never": ["Do not paste the stash mnemonic into this panel."]
+      "never": [
+        "Do not paste the stash mnemonic into this panel.",
+        "Do not expect this page to generate session keys or to have started --validator."
+      ]
     },
     "sui": {
-      "model": "Follow official Sui validator operator docs with your operator wallet.",
+      "model": "This compose is a Sui fullnode (fullnode.yaml), not a validator node.",
       "min": "See official Sui docs",
       "wallets": "Official Sui operator wallet",
-      "panel": "Runs sui-node",
-      "yskDoes": ["Run the shipped sui-node image."],
-      "youDo": ["Complete registration using official Sui validator docs."],
+      "panel": "Runs sui-node as a fullnode. RPC on localhost.",
+      "honesty": "This process cannot sign as a Sui validator. Validator setup uses a different config and keys. Official validator docs are linked; this panel does not switch the node to validator mode.",
+      "yskDoes": [
+        "Run the shipped sui-node image as a fullnode."
+      ],
+      "youDo": [
+        "Use this instance as a fullnode.",
+        "To become a validator, follow official Sui validator docs on a validator config — not this compose."
+      ],
       "steps": [
-        "Sync sui-node.",
-        "Open the official validator operator guide.",
-        "Use your own operator wallet — not this panel — to register."
+        "Sync this fullnode.",
+        "Treat it as a fullnode: it re-executes checkpoints but does not sign consensus.",
+        "Open the official validator operator guide only if you are building a separate validator process."
       ],
-      "never": ["Do not send SUI to this panel."]
+      "never": [
+        "Do not send SUI to this panel.",
+        "Do not expect this fullnode process to register as a validator."
+      ]
     },
     "aptos": {
-      "model": "Follow official Aptos staking / validator docs with your operator wallet.",
+      "model": "This compose is an Aptos public fullnode (role full_node), not a validator.",
       "min": "See official Aptos docs",
       "wallets": "Official Aptos operator wallet",
-      "panel": "Runs the Aptos validator image",
-      "yskDoes": ["Run the shipped Aptos image."],
-      "youDo": ["Stake and operate from official Aptos documentation."],
+      "panel": "Runs aptos-node as a public fullnode. RPC on localhost.",
+      "honesty": "Public fullnodes do not participate in consensus. A validator needs a different role, keys, and usually a validator fullnode. This panel does not switch the node to validator mode.",
+      "yskDoes": [
+        "Run the shipped Aptos image as a public fullnode."
+      ],
+      "youDo": [
+        "Use this instance as a public fullnode.",
+        "To run a validator, follow official Aptos validator-node docs — not this compose."
+      ],
       "steps": [
-        "Sync the node.",
-        "Read official Aptos staking documentation.",
-        "Use your own operator wallet to register."
+        "Sync this public fullnode.",
+        "Treat it as a PFN: it serves ledger data, it does not vote.",
+        "Open official validator docs only if you are building a separate validator + VFN pair."
       ],
-      "never": ["Do not enter operator keys in this panel."]
+      "never": [
+        "Do not enter operator keys in this panel.",
+        "Do not expect this fullnode process to register as a validator."
+      ]
     },
     "btc": {
       "model": "Not proof-of-stake. This is a Bitcoin full or pruned node.",
       "min": "—",
       "wallets": "Not applicable",
       "panel": "Runs bitcoind",
-      "yskDoes": ["Run a Bitcoin full or pruned node."],
-      "youDo": ["Use any Bitcoin wallet separately. Mining and Lightning are out of scope."],
+      "yskDoes": [
+        "Run a Bitcoin full or pruned node."
+      ],
+      "youDo": [
+        "Use any Bitcoin wallet separately. Mining and Lightning are out of scope."
+      ],
       "steps": [
         "Treat this instance as a Bitcoin node only.",
         "There is no staking deposit and no validator keystore."
       ],
-      "never": ["Do not look for a staking wallet on this page."]
-    }
+      "never": [
+        "Do not look for a staking wallet on this page."
+      ]
+    },
+    "nearPoolSlug": "Pool name",
+    "nearPoolSlugHint": "Short name only. The factory adds {{suffix}}.",
+    "nearOwner": "Owner account",
+    "nearOwnerHint": "NEAR account that signs create_staking_pool in your wallet. Not the node key.",
+    "nearPreview": "Command preview",
+    "nearWriteAccount": "Set account_id",
+    "nearWriteTitle": "Set validator_key.json account_id for {{id}}?",
+    "nearWriteDesc": "Writes only account_id on the existing key file. Does not send create_staking_pool. Does not touch secret_key.",
+    "nearWriteC1": "account_id becomes {{pool}}{{suffix}}",
+    "nearWriteC2": "The panel never signs the factory transaction",
+    "nearRestart": "Restart the node after writing",
+    "nearNeedKey": "Wait until the stake public key appears (neard init), then fill this form.",
+    "nearNeedSlug": "Enter a pool name to set account_id.",
+    "nearNeedOwner": "Enter the owner account to fill the command. Set account_id only needs the pool name.",
+    "cosmosPointing": "This gaiad is v28: copy validator.json, then create-validator validator.json. Hub docs still show flags — those fail here. The transaction uses this node’s consensus public key, not the server IP. Peers use Public P2P (host port {{port}}). Gas is 0.005uatom — not the Hub docs’ 0.0025uatom example.",
+    "avaxPointing": "P-Chain registration uses this NodeID and BLS proof, not the server IP. RPC stays on localhost. Register in Core (Staking → Validate).",
+    "ethVcCommand": "Validator client example (not in this compose)",
+    "ethVcHint": "Run a validator client yourself against this beacon URL. Importing a keystore into the beacon data directory does not attest.",
+    "cosmosAmount": "Self-delegation",
+    "cosmosAmountHint": "uatom, or 1atom for 1 ATOM. A bare 1 is 1 uatom — not 1 ATOM.",
+    "cosmosAmountParsed": "{{amount}} = {{atom}}",
+    "cosmosMoniker": "Moniker",
+    "cosmosFromKey": "--from key name",
+    "cosmosFromHint": "Local gaiad key name, or sign with Keplr. Not the consensus key on this host.",
+    "cosmosNeedPubkey": "Wait until the consensus public key appears (gaiad init), then fill this form.",
+    "cosmosNeedFields": "Enter amount, moniker, and --from to fill the command."
   },
   "alerts": {
     "diskTitle": "Validator disk critical",

package/locales/es/agents.json

@@ -3,6 +3,8 @@
   "body": "Instalación y supervisión de OpenClaw / Hermes / IonClaw; todas las llamadas a herramientas pasan por la lista permitida y la aprobación.",
   "status": {
     "running": "Correr",
+    "activating": "A partir de",
+    "stuck": "Empezar atascado",
     "connected": "En línea",
     "registered": "Sólo registrado",
     "stale": "Duro",
@@ -11,10 +13,19 @@
     "failed": "Fallido",
     "error": "Error",
     "unknown": "No investigado",
-    "fallback": "Desconocido",
-    "activating": "Starting",
-    "stuck": "Start stuck"
+    "fallback": "Desconocido"
   },
+  "cmdStatus": {
+    "queued": "En cola",
+    "acked": "Accionado",
+    "done": "Hecho",
+    "error": "Error"
+  },
+  "activatingStuckHint": "Activación durante más de 5 minutos: tratada como fallida. Consultar diario.",
+  "noOnlineAgents": "No hay agentes en línea",
+  "journal": "diario",
+  "writeUnit": "escribir unidad",
+  "writeUnitConfirm": "Escriba la unidad systemd para {{kind}} en /etc/systemd. El servicio no está iniciado ni habilitado.",
   "liveN": "{{count}} en línea",
   "registeredOnly": "Sólo registrado",
   "awaitProbe": "En espera de investigación",
@@ -26,6 +37,7 @@
   "expBanner": "Experimental.",
   "expBody": "Registro ≠ en línea. Las operaciones reales utilizan CLI:",
   "expDocs": "Documentos: repositorio",
+  "expEdge": "En un borde:",
   "expPayload": "; recomendación de carga útil del comando",
   "fleetCan": "Qué puede hacer la flota",
   "fleetCanDesc": "No es una lista vacía: capacidades reales del plano de control para nodos de borde",
@@ -39,6 +51,13 @@
   "capDeleteD": "Elimina la sesión y los mensajes relacionados.",
   "capStatus": "Estado",
   "capStatusD": "Solo registrado → en línea (latido) → obsoleto (>60 sin latido)",
+  "statusFlowTitle": "Flujo de estado",
+  "statusFlow": "Solo registrado → en línea → obsoleto (>60 s) → fuera de línea (desconectado). El filtro \"Sin conexión\" está desconectado.",
+  "colSession": "UUID de sesión",
+  "copySession": "Copiar UUID de sesión para clúster/CLI --session",
+  "staleFor": "Invisible {{age}}",
+  "commandTitle": "Poner en cola un comando para esta sesión",
+  "historyTitleShort": "Abrir historial de comandos (solo lectura)",
   "fleetTitle": "Flota ({{count}})",
   "fleetDesc": "Registro del plano de control · registrado ≠ nodo en línea",
   "registerPlus": "+ Registrar agente",
@@ -57,6 +76,7 @@
   "finishedAt": "Terminado {{at}}",
   "colCommand": "Dominio",
   "colResult": "Resumen de resultados",
+  "colExit": "Salida",
   "hasResult": "tiene resultado",
   "emptyCmds": "Aún no hay comandos",
   "emptyCmdsDesc": "Cola con “Comando”; permanece en cola hasta que el agente perimetral esté en línea",
@@ -72,6 +92,7 @@
   "pathExists": "existe",
   "pathMissing": "No instalado",
   "unitUnknown": "{{unit}} · desconocido",
+  "unitFallback": "unidad",
   "path": "Camino",
   "probe": "Sonda",
   "install": "Instalar",
@@ -129,27 +150,6 @@
   "labelAckCli": "reconocimiento + CLI JSON",
   "labelStdoutBody": "Cuerpo de salida estándar CLI",
   "resultOuterHint": "El resultado externo es CLI --json stdout.",
-  "statusFlowTitle": "Flujo de estado",
-  "statusFlow": "Solo registrado → en línea → obsoleto (>60 s) → fuera de línea (desconectado). El filtro \"Sin conexión\" está desconectado.",
-  "colSession": "UUID de sesión",
-  "copySession": "Copiar UUID de sesión para clúster/CLI --session",
-  "staleFor": "Invisible {{age}}",
-  "commandTitle": "Poner en cola un comando para esta sesión",
-  "historyTitleShort": "Abrir historial de comandos (solo lectura)",
-  "expEdge": "En un borde:",
-  "noteAllowlist": "Agent tool calls must pass the allowlist.",
-  "noteRbacCap": "Agent role is capped at write-low.",
-  "journal": "journal",
-  "activatingStuckHint": "Activating longer than 5 minutes — treated as failed. Check journal.",
-  "noOnlineAgents": "No agents online",
-  "cmdStatus": {
-    "queued": "Queued",
-    "acked": "Acked",
-    "done": "Done",
-    "error": "Error"
-  },
-  "colExit": "Exit",
-  "unitFallback": "unit",
-  "writeUnit": "Write unit",
-  "writeUnitConfirm": "Write the systemd unit for {{kind}} under /etc/systemd. The service is not started or enabled."
+  "noteAllowlist": "Las llamadas a la herramienta del agente deben pasar la lista de permitidos.",
+  "noteRbacCap": "La función del agente tiene un límite de escritura baja."
 }

package/locales/es/apache.json

@@ -1,6 +1,7 @@
 {
   "pageDesc": "Sitios Apache (proyectos PHP + independientes)",
   "pillSites": "{{count}} sitios",
+  "pillSitesSplit": "{{n}} sitios · {{leftover}} sobrantes",
   "listTitle": "Sitios ({{count}})",
   "emptyTitle": "Sin sitios",
   "createSite": "+ Crear sitio",
@@ -8,6 +9,7 @@
   "editTitle": "Editar sitio",
   "deleteTitle": "¿Eliminar sitio?",
   "deleteDesc": "¿Eliminar este sitio Apache?",
+  "stopSites": "{{n}} los sitios dejarán de responder HTTP.",
   "colServerName": "Nombre del servidor",
   "colSource": "Fuente",
   "colKind": "Tipo",
@@ -18,6 +20,8 @@
   "sourceProject": "Proyecto",
   "sourceStandalone": "Autónomo",
   "sourceArtifact": "En disco",
+  "sourceOrphan": "Sobrante",
+  "orphanSite": "Proyecto desaparecido",
   "openProject": "Abrir proyecto",
   "kindLabel": "Tipo",
   "kindProxy": "Apoderado",
@@ -26,6 +30,7 @@
   "upstreamLabel": "Río arriba",
   "rootLabel": "Raíz del documento",
   "sslLabel": "SSL",
+  "sslTerminatedUpstream": "TLS termina al frente de Nginx",
   "apply": "Aplicar",
   "notInstalled": "apache no instalado",
   "globalSettings": "Configuraciones globales",
@@ -49,15 +54,10 @@
   "removeArtifact": "Eliminar residuos",
   "removeArtifactTitle": "¿Eliminar configuración residual?",
   "removeArtifactDesc": "Elimine esta configuración de Apache no reclamada del directorio de datos del panel y desactive el sistema gemelo cuando sea posible. No elimina el proyecto.",
+  "removeArtifactHint": "Borra solo este conf residual en disco. No elimina el proyecto.",
   "previewConf": "Vista previa de configuración",
   "cleanupConflicts": "Limpiar los residuos del conflicto",
   "cleanupConflictsTitle": "¿Limpiar todos los residuos del conflicto?",
   "cleanupConflictsDesc": "Elimine todas las configuraciones de artefactos en el disco que entren en conflicto con un proyecto o un nombre de servidor independiente. Se mantienen las filas del proyecto.",
-  "artifactRemovedOk": "Configuración residual eliminada",
-  "sslTerminatedUpstream": "TLS termina al frente de Nginx",
-  "removeArtifactHint": "Borra solo este conf residual en disco. No elimina el proyecto.",
-  "sourceOrphan": "Leftover",
-  "orphanSite": "Project gone",
-  "pillSitesSplit": "{{n}} sites · {{leftover}} leftover",
-  "stopSites": "{{n}} site(s) will stop answering HTTP."
+  "artifactRemovedOk": "Configuración residual eliminada"
 }

package/locales/es/audit.json

@@ -23,8 +23,8 @@
     "project.suspend": "Suspender proyecto",
     "software.install": "instalar software",
     "software.update": "Actualizar software",
-    "backup.restore": "Backup restore",
-    "backup.run": "Backup run",
-    "backup.delete": "Backup deleted"
+    "backup.restore": "Restauración de copia de seguridad",
+    "backup.run": "Ejecución de copia de seguridad",
+    "backup.delete": "Copia de seguridad eliminada"
   }
 }