{
  "nav.diagnostics": "Server Diagnostics",
  "nav.hash": "Hash & Checksum",
  "nav.overview": "Overview",
  "nav.terminal": "Terminal",
  "nav.servers": "Servers",
  "nav.updates": "Updates",
  "nav.plugins": "Modules",
  "nav.settings": "Settings",
  "nav.aria": "Main navigation",
  "vault.storage": "ENCRYPTED LOCAL STORAGE",
  "vault.unlockTitle": "Unlock Server Manager",
  "vault.unlockIntro": "Enter the master password. The password is not stored.",
  "vault.password": "Master password",
  "vault.confirmPassword": "Confirm password",
  "vault.unlock": "Unlock",
  "vault.forgot": "Forgot password / reset vault",
  "vault.resetIrreversible": "Reset cannot be undone",
  "vault.resetDescription": "All server profiles, saved host fingerprints, and other encrypted data will be deleted. Installed modules and update settings will remain.",
  "vault.resetInstruction": "Type SMAZAT to confirm",
  "vault.cancel": "Cancel",
  "vault.resetAction": "Delete data and reset password",
  "app.newArchitecture": "NEW ARCHITECTURE",
  "app.initializing": "Initializing…",
  "app.lock": "Lock",
  "app.coreRunning": "Core is running",
  "overview.cleanTitle": "A clean foundation for the new application",
  "overview.cleanDescription": "Separated services, restricted IPC, module runtime, and a secure update channel.",
  "overview.coreApi": "Core API",
  "overview.coreApiDescription": "Stable application contract",
  "overview.dataSchema": "Data schema",
  "overview.dataSchemaDescription": "Versioned user storage",
  "overview.installedPlugins": "Installed modules",
  "overview.noToolsNeeded": "Core works without Tools",
  "overview.currentSlice": "CURRENT SLICE",
  "overview.sliceTitle": "Vault + profiles + SSH terminal",
  "overview.sliceDescription": "Working connection with mandatory host-key verification and a separate SessionManager.",
  "terminal.ping": "Ping",
  "terminal.sshRtt": "SSH RTT",
  "terminal.latencyUnavailable": "Unavailable",
  "terminal.latencyMeaning": "Ping: ICMP echo from this computer (3 samples, median). SSH RTT: request and reply on the existing SSH connection (3 samples, median).",
  "terminal.measuring": "measuring…",
  "terminal.pingLoss": "loss {loss} %",
  "terminal.pingTimeout": "no reply – a firewall may block ICMP",
  "terminal.pingDenied": "ICMP denied by the system (Local Network permission / policy)",
  "terminal.pingUnreachable": "target unreachable for ICMP",
  "terminal.pingUnsupported": "ping is not available on this system",
  "terminal.pingError": "ping failed",
  "terminal.sshRttTransport": "SSH transport (keepalive request/response)",
  "terminal.sshRttCommand": "command over SSH including server processing",
  "terminal.title": "Interactive terminal",
  "terminal.disconnected": "Disconnected",
  "terminal.connecting": "Connecting…",
  "terminal.connected": "Connected",
  "terminal.connectionError": "Connection error",
  "terminal.error": "Error",
  "terminal.server": "Server",
  "terminal.selectServer": "Select a server…",
  "terminal.password": "Password",
  "terminal.sshPassword": "SSH password",
  "terminal.passphrase": "Passphrase (optional)",
  "terminal.keyPassphrase": "Key passphrase",
  "terminal.connect": "Connect",
  "terminal.disconnect": "Disconnect",
  "terminal.noProfile": "Create a server profile first.",
  "terminal.aria": "SSH terminal",
  "terminal.libraryMissing": "Terminal library is unavailable.",
  "terminal.welcome": "Select a server and start the SSH connection.",
  "terminal.connectingTo": "Connecting to {target}…",
  "terminal.passwordAuth": "password authentication",
  "terminal.vaultLocked": "Vault was locked.",
  "profiles.eyebrow": "ENCRYPTED PROFILES",
  "profiles.title": "Server management",
  "profiles.new": "New server",
  "profiles.none": "No server has been saved yet.",
  "profiles.name": "Name",
  "profiles.namePlaceholder": "Production server",
  "profiles.host": "Host / IP",
  "profiles.port": "Port",
  "profiles.user": "User",
  "profiles.auth": "Authentication",
  "profiles.authPassword": "Password when connecting",
  "profiles.authKey": "Private key",
  "profiles.privateKey": "Private key",
  "profiles.selectFile": "Select a file…",
  "profiles.select": "Select",
  "profiles.save": "Save profile",
  "profiles.delete": "Delete",
  "profiles.key": "key",
  "profiles.password": "password",
  "profiles.saved": "Profile was saved.",
  "profiles.deleteConfirm": "Delete this server profile?",
  "updates.eyebrow": "UPDATE REPOSITORY",
  "updates.title": "Core updates",
  "updates.installed": "Installed version",
  "updates.channel": "channel {channel}",
  "updates.ready": "Ready to check",
  "updates.integrityIntro": "Core verifies platform, architecture, size, SHA-512, and the OpenPGP signature.",
  "updates.check": "Check",
  "updates.download": "Download and verify",
  "updates.reveal": "Show file",
  "updates.alphaSecurity": "Alpha security mode",
  "updates.alphaDescription": "SHA-512 and the mandatory OpenPGP signature protect the installer. Installation does not start automatically, and the source is restricted to the allowed HTTPS domain.",
  "updates.downloaded": "Release v{version} was downloaded and verified",
  "updates.available": "Version {version} is available",
  "updates.availableFallback": "The update is ready to download and verify.",
  "updates.current": "You are using the current version",
  "updates.noNewer": "No newer release is available on the selected channel.",
  "updates.checking": "Checking…",
  "updates.checkingServer": "Checking update repository",
  "updates.tryingEndpoints": "Trying the allowed HTTPS endpoint…",
  "updates.checkFailed": "Update check failed",
  "updates.downloading": "Downloading…",
  "updates.downloadRejected": "Update was blocked",
  "plugins.eyebrow": "APPLICATION TOOLS",
  "plugins.title": "Manage modules",
  "plugins.install": "Install from catalog",
  "plugins.plugin": "Module",
  "plugins.version": "Version",
  "plugins.permissions": "Permissions",
  "plugins.none": "No modules yet",
  "plugins.first": "System Monitor will be first.",
  "plugins.noPermissions": "no permissions",
  "plugins.bundled": "Built in",
  "settings.eyebrow": "LOCAL CONFIGURATION",
  "settings.title": "Core settings",
  "settings.language": "Language",
  "settings.czech": "Čeština",
  "settings.german": "Deutsch",
  "settings.english": "English",
  "settings.updateChannel": "Update channel",
  "settings.autoCheck": "Check automatically at startup",
  "settings.allowedServers": "Allowed update servers",
  "settings.save": "Save settings",
  "settings.saved": "Saved",
  "vault.damagedMode": "RECOVER ENCRYPTED STORAGE",
  "vault.damagedTitle": "Vault is incomplete",
  "vault.damagedDescription": "One of the vault files is missing. Data will not be overwritten automatically.",
  "vault.setupMode": "INITIAL VAULT SETUP",
  "vault.lockedMode": "VAULT IS LOCKED",
  "vault.setupTitle": "Create master password",
  "vault.setupDescription": "Choose a master password between 4 and 64 characters. Encrypted data cannot be recovered without it.",
  "vault.lockedDescription": "The vault already exists. Enter its master password to access saved servers.",
  "vault.create": "Create vault",
  "vault.passwordLength": "The master password must contain 4 to 64 characters.",
  "vault.passwordMismatch": "Passwords do not match.",
  "vault.creating": "Creating…",
  "vault.unlocking": "Unlocking…",
  "vault.typeDelete": "Type SMAZAT exactly to confirm.",
  "vault.finalResetConfirm": "Final confirmation: delete all encrypted user data?",
  "vault.deleting": "Deleting…",
  "vault.resetDone": "Vault was reset. Create a new master password.",
  "ssh.unknownHost": "Server {host}:{port} is not trusted yet.\n\nSHA-256 fingerprint:\n{fingerprint}\n\nVerify the fingerprint through another channel. Save it and continue?",
  "ssh.trustFailed": "The host key could not be saved.",
  "ssh.keyChanged": "WARNING: The SSH host key changed. The connection was blocked.",
  "ssh.knownKey": "Known",
  "ssh.newKey": "New",
  "ssh.failed": "Connection failed.",
  "errors.unknown": "Unknown error",
  "errors.initialization": "Initialization error",
  "profiles.storePassword": "Store password in the encrypted vault",
  "profiles.storedPassword": "SSH password",
  "profiles.storePasswordPlaceholder": "Enter the password to store",
  "profiles.passwordStoredPlaceholder": "Password stored – leave empty to keep it",
  "profiles.passwordSecurity": "The password is stored only inside the encrypted vault.",
  "terminal.savedPasswordHint": "Optional – the password from the vault will be used",
  "ssh.changedHostConfirm": "WARNING: The SSH host key for {host}:{port} changed. This may be caused by a server reinstall, but it can also indicate an attack.\n\nKnown fingerprint:\n{knownFingerprint}\n\nNew fingerprint:\n{fingerprint}\n\nVerify the new fingerprint through another trusted channel. Replace the known fingerprint and reconnect?",
  "channels.all": "All",
  "updates.channelFilter": "Channel",
  "updates.install": "Launch installer",
  "updates.catalogEyebrow": "RELEASE CATALOG",
  "updates.catalogTitle": "Available releases",
  "updates.catalogBeforeCheck": "All compatible releases will appear here after checking.",
  "updates.catalogEmpty": "No compatible releases are available in this channel.",
  "updates.selectedLabel": "Selected",
  "updates.selectLabel": "Select",
  "updates.newerVersion": "A newer version v{version} is available",
  "updates.sameVersionNewerRelease": "A newer release of the same version v{version} is available",
  "updates.sameVersionCurrentRelease": "You are using the current release v{version}",
  "updates.sameVersionOlderRelease": "An older release of the same version v{version} is selected",
  "updates.olderVersion": "Older version v{version} selected",
  "updates.selected": "Release v{version} selected",
  "updates.publishedAt": "Published {date}",
  "updates.noneAvailable": "No release available",
  "updates.noCompatible": "The repository has no compatible release for this platform, architecture, and channel.",
  "updates.installConfirm": "Launch the verified installer for v{version}, published {date}?",
  "updates.installFailed": "The installer could not be launched",
  "updates.installFailure": "The installation could not be started or completed. The update was not installed.",
  "updates.downloadingAndVerifying": "Downloading and verifying…",
  "updates.verifyingSignature": "Verifying digital signature…",
  "updates.signatureVerified": "Digital signature verified",
  "updates.signatureFailure": "The update cannot be verified safely and will not be installed.",
  "plugins.checkCatalog": "Load web catalog",
  "plugins.checking": "Loading catalog…",
  "plugins.webCatalog": "WEB CATALOG",
  "plugins.available": "Available modules",
  "plugins.catalogBeforeCheck": "Load the catalog from an allowed update server first.",
  "plugins.catalogEmpty": "No compatible modules are available in the selected channel.",
  "plugins.open": "Open",
  "plugins.channelFilter": "Catalog channel",
  "plugins.remove": "Remove",
  "plugins.removeConfirm": "Remove the {name} module? Core settings and the vault will remain intact.",
  "plugins.installed": "Installed",
  "plugins.update": "Update",
  "plugins.installing": "Installing…",
  "plugins.installConfirm": "Install {name} v{version}?\n\nRequired permissions: {permissions}",
  "plugins.minimized": "Minimized modules",
  "plugins.restore": "Restore the {name} module",
  "plugins.restoreAction": "Click to restore",
  "settings.pluginChannel": "Module channel",
  "legal.eyebrow": "LEGAL INFORMATION",
  "legal.title": "Licenses and documentation",
  "legal.documentation": "Documentation",
  "legal.safetyCzech": "Operational safety and backups (CS)",
  "legal.safetyEnglish": "Operational safety and backups (EN)",
  "legal.safetyGerman": "Operational safety and backups (DE)",
  "legal.description": "CH-J Server Manager is provided under the CH-J Proprietary Software License 1.14. Third-party component licenses remain in effect.",
  "legal.application": "Application license",
  "legal.notice": "Copyright notice",
  "legal.thirdParty": "Third-party licenses",
  "legal.thirdPartyBundle": "Complete license package",
  "legal.electron": "Electron license",
  "legal.chromium": "Chromium licenses",
  "security.title": "Security",
  "security.enable": "Enable biometric unlock",
  "security.remove": "Disable and remove enrollment",
  "security.test": "Test system authentication",
  "security.autoLock": "Automatically lock after inactivity",
  "security.timeout": "Inactivity timeout",
  "security.never": "Never",
  "security.blur": "Lock when the application loses focus",
  "security.sensitive": "Require system authentication for sensitive operations",
  "security.scope": "Authentication protects profile deletion, module installation/removal, launching installers and resetting an unlocked Vault. Remote terminal commands do not require this additional authentication.",
  "security.lockEffect": "Locking disconnects active SSH sessions, closes modules and stops diagnostics.",
  "security.confirmPassword": "Master password to change locking rules",
  "security.strong": "Keychain protects the key with the current Touch ID fingerprints. Changing fingerprints invalidates enrollment.",
  "security.convenience": "Convenience unlock: the app requires system authentication, but credential storage is not cryptographically bound to biometrics.",
  "security.enabled": "Biometric unlock enabled",
  "security.disabled": "Biometric unlock disabled",
  "security.testPassed": "System authentication succeeded",
  "biometrics.touch-id": "Unlock with Touch ID",
  "biometrics.windows-hello": "Unlock with Windows Hello",
  "biometrics.fprintd": "Unlock with fingerprint",
  "biometrics.BIOMETRIC_AVAILABLE": "System authentication available",
  "biometrics.BIOMETRIC_UNAVAILABLE": "System authentication unavailable",
  "biometrics.BIOMETRIC_NO_ENROLLMENT": "No fingerprint or Windows Hello enrolled",
  "biometrics.BIOMETRIC_CANCELLED": "Authentication cancelled",
  "biometrics.autoPrompt": "Confirm unlocking in the system dialog…",
  "biometrics.usePassword": "Enter the vault password or retry biometrics with the button.",
  "biometrics.BIOMETRIC_FAILED": "Authentication failed",
  "biometrics.BIOMETRIC_DEVICE_UNAVAILABLE": "Device temporarily unavailable",
  "biometrics.BIOMETRIC_ENROLLMENT_INVALIDATED": "Enrollment invalidated. Use the master password and enable biometric unlock again.",
  "biometrics.BIOMETRIC_MASTER_PASSWORD_REQUIRED": "Master password required",
  "biometrics.BIOMETRIC_TIMEOUT": "Authentication timed out",
  "biometrics.BIOMETRIC_KEYRING_UNAVAILABLE": "Secure desktop keyring unavailable",
  "biometrics.BIOMETRIC_CREDENTIAL_FAILED": "OS credential storage failed. Use the master password.",
  "biometrics.BIOMETRIC_INVALID_KEY": "Stored key is invalid. Use the master password.",
  "biometrics.BIOMETRIC_BUSY": "Another system authentication is in progress",
  "ssh.SSH_LOCAL_NETWORK_DENIED": "macOS denied network access. Allow CH-J Server Manager in System Settings → Privacy & Security → Local Network, then restart the app.",
  "ssh.SSH_MAC_NETWORK_UNREACHABLE": "Server unreachable from macOS. If SSH works in Terminal, check System Settings → Privacy & Security → Local Network → CH-J Server Manager, then restart the app. Also check connectivity and VPN.",
  "nav.reorderHelp": "Enable Edit order in the left menu to drag items.",
  "nav.drag": "Drag to reorder",
  "plugins.display": "Module placement",
  "plugins.visible": "Show in Modules",
  "plugins.hidden": "Hide",
  "plugins.navigation": "In left navigation",
  "transfer.import": "Import",
  "transfer.export": "Export",
  "transfer.format": "Export format",
  "transfer.selectedOnly": "Selected servers only",
  "transfer.secrets": "Only name, original host, username and port are transferred. No passwords, keys, tokens or their paths.",
  "transfer.preview": "Import preview",
  "transfer.authRequired": "Imported and updated profiles need authentication to be assigned again. Updating removes the previously stored password and key path.",
  "transfer.duplicate": "Duplicate",
  "transfer.duplicates": "When host, port and username match",
  "transfer.skip": "Skip",
  "transfer.update": "Update",
  "transfer.create": "Create new profile",
  "transfer.confirm": "Confirm import",
  "transfer.select": "Select {name} for export",
  "transfer.yes": "Yes",
  "transfer.summary": "Servers: {count} · Duplicates: {duplicates}",
  "transfer.imported": "Created: {created} · Updated: {updated} · Skipped: {skipped}",
  "transfer.exported": "Exported servers: {count}",
  "nav.sidebarModes": "Menu view",
  "nav.modeFull": "Icons and names",
  "nav.modeCompact": "Icons only",
  "nav.modeSplit": "Icons in two columns",
  "nav.resize": "Resize the menu (arrow keys, double-click = default)",
  "nav.hideSidebar": "Hide menu",
  "nav.showSidebar": "Show menu",
  "nav.editOrder": "Edit order",
  "plugins.description": "Choose which tools to show and keep in the left menu.",
  "plugins.show": "Show",
  "plugins.inMenu": "In menu",
  "plugins.more": "More modules and updates",
  "plugins.details": "Details",
  "chrome.collapse": "Collapse",
  "chrome.collapseDescription": "Collapse into the application's bottom bar",
  "native.privateKey.title": "Select an SSH private key",
  "native.privateKey.keys": "SSH private keys",
  "native.privateKey.all": "All files",
  "native.biometric.reason": "Verify your identity for CH-J Server Manager",
  "native.keys.saveTitle": "Save SSH key pair",
  "native.files.selectUpload": "Select files or folders to upload",
  "native.files.saveDownload": "Save downloaded file",
  "native.files.selectDownloadDirectory": "Select a folder for the download",
  "native.files.saveArchive": "Save remote items as an archive",
  "native.profiles.importFilter": "JSON / CSV",
  "native.diagnostics.importFilter": "Diagnostics JSON",
  "terminal.layout": "Terminal layout",
  "terminal.single": "One terminal",
  "terminal.sideBySide": "Side by side",
  "terminal.stacked": "Stacked",
  "terminal.swap": "Swap terminals",
  "terminal.resize": "Resize terminals",
  "terminal.manualHost": "Enter host manually",
  "terminal.noJump": "No jump host",
  "terminal.jumpHost": "Jump host",
  "terminal.pingJump": "Ping is not measured through a jump host",
  "ssh.hopJump": "SSH hop: Jump host",
  "ssh.hopTarget": "SSH hop: Target",
  "ssh.jumpError": "Jump host {host}",
  "ssh.JUMP_CHANNEL_FAILED": "The jump host refused the forwarding channel.",
  "ssh.JUMP_LOOP": "The jump host route contains a loop.",
  "ssh.JUMP_TOO_DEEP": "The jump host route exceeds three hops.",
  "ssh.JUMP_PROFILE_NOT_FOUND": "The jump host profile was not found.",
  "ssh.SSH_TARGET_INVALID": "Select one saved server or enter a valid host, port, user and authentication.",
  "chrome.minimize": "Minimize",
  "chrome.maximize": "Maximize",
  "chrome.restore": "Restore",
  "chrome.close": "Close",
  "chrome.files": "Files",
  "chrome.folders": "Folders",
  "chrome.cancel": "Cancel",
  "chrome.discard": "Discard",
  "chrome.discardChanges": "Discard unsaved changes and close?",
  "availability.online": "Online",
  "availability.offline": "Offline",
  "availability.checking": "Checking…",
  "availability.unknown": "Unknown",
  "availability.unverified": "via jump – not verified",
  "availability.viaJump": "Checked through the jump host",
  "availability.lastSuccess": "Last success: {time}",
  "availability.lastAttempt": "Last attempt: {time}",
  "availability.reason.timeout": "The SSH port did not respond in time.",
  "availability.reason.refused": "The connection to the SSH port was refused.",
  "availability.reason.unreachable": "The address cannot be reached from this network.",
  "availability.reason.dns": "The DNS name could not be resolved.",
  "availability.reason.denied": "The operating system denied the connection (for example the Local Network permission).",
  "availability.reason.error": "The connection failed.",
  "availability.reason.noJumpSession": "This server is reached through a jump host. It can be checked only while an SSH session to the jump host is open.",
  "availability.reason.jumpDenied": "The jump host did not allow the check (TCP forwarding may be disabled).",
  "availability.settingsTitle": "Server availability",
  "availability.settingsEnabled": "Check server availability automatically",
  "availability.settingsInterval": "Check interval",
  "availability.settingsSeconds": "{seconds} s",
  "availability.refreshNow": "Refresh availability now",
  "availability.meaning": "Offline means the SSH port cannot be reached from this network; the server itself may still be running.",
  "module.description.chj.nginx-manager": "Secure NGINX configuration management over SSH: inventory, editor, nginx -t, backups, rollback, and graceful reload.",
  "module.description.chj.system-monitor": "CPU, network, disk, physical and virtual memory (swap/pagefile) overview for Linux and Windows, with swap and pagefile management through controlled Core operations.",
  "module.description.chj.hash-checksum": "Local file hashing, verification, comparison, and checksum manifests.",
  "module.description.chj.key-generator": "Local generation of SSH key pairs and random passwords through a restricted Core cryptographic capability.",
  "module.description.chj.file-manager": "Interactive SFTP file manager with Monaco editor, multiple transfers, and ZIP/TAR/TAR.GZ export.",
  "module.description.chj.log-viewer": "Secure viewing of the end of the CH-J Server Manager Core diagnostic log.",
  "module.description.chj.disks": "Graphical disk management for remote Linux servers over SSH (similar to GParted): disk map, partitions, file systems, LVM/LUKS, automatic expansion, and an operation queue through controlled Core operations.",
  "module.description.chj.users": "Management of Linux accounts, groups, sudo, SSH access, and Ed25519 keys through controlled Core operations and an active SSH session."
}