release-2.9.0 (#1532)

* fix(macos): skip single-instance lock in Mac App Store builds (#1454)

fix(macos): skip single-instance lock in Mac App Store builds

* Fix/backend optional sharp (#1455)

Fix/backend optional sharp

* feat: issue #1218 (#1218)

https://github.com/Termix-SSH/Support/issues/1218

* feat: Add option to use saved global custom theme under Connection Defaults (#1209)

https://github.com/Termix-SSH/Support/issues/1209

* feat: Add Fleet Sharing functionality to the UI (#1228)

https://github.com/Termix-SSH/Support/issues/1228

* feat: Add a list view to the Docker management page (#1237)

https://github.com/Termix-SSH/Support/issues/1237

* feat: issue #1264 (#1264)

https://github.com/Termix-SSH/Support/issues/1264

* feat: 2FA With FortiToken (#1288)

https://github.com/Termix-SSH/Support/issues/1288

* feat: Allow to disable showing paths to folders (#1274)

https://github.com/Termix-SSH/Support/issues/1274

* feat: Sync Network Graph between Desktop and Remote Server (#1245)

https://github.com/Termix-SSH/Support/issues/1245

* feat: Version Number on offline servers (#1291)

https://github.com/Termix-SSH/Support/issues/1291

* feat: Support OrbStack Docker socket path on macOS / Fix "Docker is not installed" on mac... (#1302)

https://github.com/Termix-SSH/Support/issues/1302

* feat: Sidebar host click should focus existing tab instead of opening a new connection (#1289)

https://github.com/Termix-SSH/Support/issues/1289

* fix: Search in side bar shows overlapping hosts when grouped by tags (#1303)

https://github.com/Termix-SSH/Support/issues/1303

* fix: I can't send a file on its own. (#1304)

https://github.com/Termix-SSH/Support/issues/1304

* fix: sudo password not autofilling (#1248)

https://github.com/Termix-SSH/Support/issues/1248

* fix: node-MainThread (#1300)

https://github.com/Termix-SSH/Support/issues/1300

* fix: Tunnel authentication with shared credentials (#1295)

https://github.com/Termix-SSH/Support/issues/1295

* fix: host key updates not syncing, metrics 404 race on first connect

Host key writes never bumped updatedAt so sync never picked them up.
Also retry the first metrics fetch briefly instead of failing right away.

* chore: increment ver

* feat: add category and icon fields to plugin manifest schema

* ci(deps): bump the github-actions group with 2 updates (#1458)

Bumps the github-actions group with 2 updates: [crowdin/github-action](https://github.com/crowdin/github-action) and [actions/github-script](https://github.com/actions/github-script).


Updates `crowdin/github-action` from 2 to 3
- [Release notes](https://github.com/crowdin/github-action/releases)
- [Commits](https://github.com/crowdin/github-action/compare/v2...v3)

Updates `actions/github-script` from 7 to 9
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v7...v9)

---
updated-dependencies:
- dependency-name: crowdin/github-action
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-dev): bump the dev-patch-updates group with 13 updates (#1459)

Bumps the dev-patch-updates group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [@codemirror/commands](https://github.com/codemirror/commands) | `6.11.0` | `6.11.1` |
| [@codemirror/search](https://github.com/codemirror/search) | `6.7.1` | `6.7.2` |
| [@codemirror/view](https://github.com/codemirror/view) | `6.43.9` | `6.43.12` |
| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.5` | `14.6.7` |
| [@types/ssh2](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ssh2) | `1.15.5` | `1.15.6` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.0` | `6.1.1` |
| [cytoscape](https://github.com/cytoscape/cytoscape.js) | `3.34.1` | `3.34.3` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.4` | `0.5.7` |
| [i18next](https://github.com/i18next/i18next) | `26.4.0` | `26.4.2` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.8` |
| [react-i18next](https://github.com/i18next/react-i18next) | `17.0.12` | `17.0.14` |


Updates `@codemirror/commands` from 6.11.0 to 6.11.1
- [Changelog](https://github.com/codemirror/commands/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/commands/commits)

Updates `@codemirror/search` from 6.7.1 to 6.7.2
- [Changelog](https://github.com/codemirror/search/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/search/commits)

Updates `@codemirror/view` from 6.43.9 to 6.43.12
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/view/commits)

Updates `@testing-library/dom` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/testing-library/dom-testing-library/releases)
- [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/dom-testing-library/compare/v10.4.1...v10.4.2)

Updates `@testing-library/react` from 16.3.2 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/react-testing-library/compare/v16.3.2...v16.3.3)

Updates `@testing-library/user-event` from 14.6.5 to 14.6.7
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/user-event/compare/v14.6.5...v14.6.7)

Updates `@types/ssh2` from 1.15.5 to 1.15.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/ssh2)

Updates `@vitejs/plugin-react` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.1/packages/plugin-react)

Updates `cytoscape` from 3.34.1 to 3.34.3
- [Release notes](https://github.com/cytoscape/cytoscape.js/releases)
- [Commits](https://github.com/cytoscape/cytoscape.js/compare/v3.34.1...v3.34.3)

Updates `eslint-plugin-react-refresh` from 0.5.4 to 0.5.7
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/compare/v0.5.4...v0.5.7)

Updates `i18next` from 26.4.0 to 26.4.2
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next/compare/v26.4.0...v26.4.2)

Updates `prettier` from 3.9.6 to 3.9.8
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.9.6...3.9.8)

Updates `react-i18next` from 17.0.12 to 17.0.14
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/react-i18next/compare/v17.0.12...v17.0.14)

---
updated-dependencies:
- dependency-name: "@codemirror/commands"
  dependency-version: 6.11.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: "@codemirror/search"
  dependency-version: 6.7.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: "@codemirror/view"
  dependency-version: 6.43.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: "@testing-library/dom"
  dependency-version: 10.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: "@types/ssh2"
  dependency-version: 1.15.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: cytoscape
  dependency-version: 3.34.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: i18next
  dependency-version: 26.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: prettier
  dependency-version: 3.9.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: react-i18next
  dependency-version: 17.0.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump the prod-patch-updates group with 6 updates (#1461)

Bumps the prod-patch-updates group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.10` | `3.14.13` |
| [compression](https://github.com/expressjs/compression) | `1.8.1` | `1.8.2` |
| [jose](https://github.com/panva/jose) | `6.2.9` | `6.2.12` |
| [jszip](https://github.com/Stuk/jszip) | `3.10.1` | `3.10.2` |
| [socks](https://github.com/JoshGlazebrook/socks) | `2.8.9` | `2.8.10` |
| [undici](https://github.com/nodejs/undici) | `8.10.0` | `8.10.2` |


Updates `@tanstack/react-virtual` from 3.14.10 to 3.14.13
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.13/packages/react-virtual)

Updates `compression` from 1.8.1 to 1.8.2
- [Release notes](https://github.com/expressjs/compression/releases)
- [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md)
- [Commits](https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2)

Updates `jose` from 6.2.9 to 6.2.12
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/panva/jose/compare/v6.2.9...v6.2.12)

Updates `jszip` from 3.10.1 to 3.10.2
- [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md)
- [Commits](https://github.com/Stuk/jszip/compare/v3.10.1...v3.10.2)

Updates `socks` from 2.8.9 to 2.8.10
- [Release notes](https://github.com/JoshGlazebrook/socks/releases)
- [Commits](https://github.com/JoshGlazebrook/socks/compare/2.8.9...2.8.10)

Updates `undici` from 8.10.0 to 8.10.2
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v8.10.0...v8.10.2)

---
updated-dependencies:
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-patch-updates
- dependency-name: compression
  dependency-version: 1.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-patch-updates
- dependency-name: jose
  dependency-version: 6.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-patch-updates
- dependency-name: jszip
  dependency-version: 3.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-patch-updates
- dependency-name: socks
  dependency-version: 2.8.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-patch-updates
- dependency-name: undici
  dependency-version: 8.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* feat: add plugin worker protocol, bootstrap and plugin_storage table

Worker-side ctx proxy plus the message envelope it talks over, and the
per-plugin key/value table behind ctx.storage with migrations for all
three dialects. Rows cascade with the plugin so uninstalling leaves
nothing behind.

* feat: add allowlisted host view for plugins

An allowlist rather than a list of fields to strip. A blocklist rots:
the moment a new secret-bearing column lands on SSHHost it starts
leaking silently. With an allowlist a new field stays invisible to
plugins until someone adds it here on purpose.

* feat: add plugin loader with manifest validation and crash restart

Validates an unpacked plugin, spawns a worker_threads worker and manages
activate/deactivate/crash-restart with backoff, disabling after three
tries.

The crash counter clears only after a plugin stays up past a stability
window, not on activation. Clearing it on activation let a plugin that
activates cleanly and then dies restart forever, because every attempt
looked like the first.

loader.ts documents what the worker boundary does and does not buy you.
Node's permission model is process-wide, not per-worker, so it cannot be
enabled for plugin workers alone and is not claimed here.

* feat: route internal events through a shared plugin event bus

Formalises three ad-hoc publish paths that already existed:
automation-events.ts, metrics/automation-bridge.ts and the
hostSessionStatus singleton, now the host.session.status topic.

Both invariants the old code relied on are preserved. Publishing stays
fire-and-forget, so a failing subscriber cannot disturb a metrics poll or
a host delete. The automations engine subscribes to the bus at scheduler
start instead of being imported ad hoc, which keeps the edge
one-directional: automations may import repositories, hosts modules must
not import automations.

* feat: add plugin ctx broker with permission gate and audit

Every ctx call a plugin makes is checked against its granted
capabilities, performed by the main thread, then audited. A capability
must be both declared in the manifest and granted in the database, so
widening a plugin's reach always needs a new manifest the user can see,
never just a database row.

Audit attribution is set by the broker, not the plugin. The plugin
supplies only the details, so it cannot forge the actor.

fix: stop plugin workers seeing plaintext credentials in error messages

A failing ctx.ssh.connect handed the worker the raw error from deep in
the SSH stack, which embeds the connect config. The worker received, in
full:

  Authentication failed for root using password <SECRET>

where <SECRET> was the host's real plaintext password. Any plugin with
ssh.exec could read it by catching the error, defeating the whole point
of the handle-based ssh API.

Errors crossing the boundary are now sanitised. Only PluginFacingError
and PluginPermissionError, both authored here, reach a plugin verbatim;
anything else becomes a generic message and the real one goes to the
log. This uses a marker class rather than matching on message text,
because matching would start leaking again the moment an upstream error
happened to contain a familiar phrase.

Covered by credential-isolation.test.ts, which plants a sentinel in
every secret-bearing field and asserts it appears in no message the
worker ever receives.

* feat: dispatch plugin HTTP routes and wire the runtime into startup

ctx.http.route now registers a real router on the /plugin-api/:pluginId
dispatcher, replacing its stub 404. A plugin never touches the Express
req/res: it gets a plain summary and returns a plain object, so sockets
and session cookies stay on this side of the boundary. Authorization and
cookie headers are not forwarded.

Plugins load last in the start-up sequence, after the server is fully
wired, and are terminated before the database on shutdown so none can
outlive it. A plugin that fails to load cannot stop the backend.

fix: correct the nginx plugin-api location regex

The pattern was ^/plugin-api/(/.*)?$, which needs a double slash and so
never matched /plugin-api/<id>/<route>. Every other block in the file
uses ^/prefix(/.*)?$. Left alone, plugin routes would work in dev and
404 only behind Docker.

* fix: update stale SFTP transfer test for single file destination paths

The test still asserted transferToHost was called with the destination
directory "/srv". Commit 7727fa09 (#1304) deliberately changed a single
file transfer to send the full destination path including the filename,
so the correct expectation is "/srv/remote-1.txt". The code was right
and the test was left behind.

* feat: ship the ssh terminal as a first-party in-process plugin

Adds a hardcoded process:transport-owner tier so the terminal can own its
WebSocket server and ssh2 clients, which cannot cross the worker boundary.

* feat: ship docker as a first-party in-process plugin

Moves docker backend and frontend into plugins/docker/, alongside
ssh-terminal. Adds a host editor tab seam, a dashboard card registry,
and a build step to compile plugin backends into dist.

* feat: ship host metrics as a first-party in-process plugin

* fix: harden plugin auth and add per-request identity for ctx calls

Require auth on /plugin-api, gate plugin enable/grant/revoke routes
behind admin.plugins.manage, and thread the calling user through
worker ctx.hosts/ctx.ssh calls instead of always using the install
owner. Also adds the plugin permissions grant/revoke UI.

* feat: ship the AI assistant as a first-party in-process plugin

Moves src/backend/ai and its routes into plugins/ai, mounted through a
small /ai dispatcher instead of its own port. Moves the ai-enabled and
ai-private-endpoints settings routes out of user-settings-routes.ts
into the plugin too, so it has no leftover core dependents.

* fix: remove compiled plugin JS left behind in plugins/ after build

copy-bundled-plugins.cjs compiled and rewrote plugin backend TS in
place, copied it to dist/plugins, but never deleted the .js it had
just emitted next to the .ts sources. Those files shadowed the real
source for vitest/tsx and had import paths rewritten for the dist
layout, so tests failed with "Cannot find module" once a local build
had run. Affects docker, host-metrics and ai, not just this one.

* feat: add a permission-gated backend service registry for plugins

* feat: add a permission-gated UI action registry and action slots for plugins

Moves the terminal toolbar's hardwired AI button into a slot the ssh-terminal
plugin offers and the ai plugin fills, gated on ai.services.use.

* feat: add cross-plugin secret references gated by the provider's RBAC permission

* feat: move proxmox discovery/import/sync into a first-party plugin

* feat: move remote desktop (RDP/VNC/Telnet) into a first-party plugin

Relocates guacamole backend/frontend source and tests into
plugins/remote-desktop, following the ssh-terminal/docker pattern.

* feat: wire remote-desktop plugin into core and rename i18n keys

Repoints core consumers (dispatcher, collab, session-sharing, tab
utils) at the plugin, adds isTabTypeAvailable gating for rdp/vnc/
telnet, widens hostCapability to accept an array, and renames the
guacamole i18n namespace to remoteDesktop.

* feat: move fleets into a first-party plugin

* feat: move automations into a first-party plugin

* feat: remove legacy alert rules, superseded by automations

Alert rules already auto-migrate into automations on boot and the old
engine stands down after. Deletes the rule/firing tables, routes, UI,
and AI tools; keeps notification channels since automations still use
them. Also fixes automations' notify step, which still called the
deleted repository.

* feat: move network topology into a first-party plugin

* feat: move tailscale device discovery and settings into a plugin

Adds plugins/tailscale/ with a devices sidebar tab, admin settings
section, and re-auth dialog. Host Metrics tailscale manager card and
SSH re-auth banner parsing stay in core.

* feat: move workspaces into a first-party plugin

* feat: move web endpoint into a first-party plugin

* feat: collapse plugin runtime to one tier behind a plugin SDK

* feat: make each plugin an npm workspace built by a termix-plugin CLI

* feat: give plugins their own tables, migrations and sync entities

* feat: serve plugin http and websockets from one mount instead of ports

* feat: namespace plugin permissions and keep them valid when a plugin is off

* feat: give plugins their own settings and one settings screen

* feat: load plugin frontends at runtime and remove plugin ids from the shell

* fix: mock the ai status fetch in its activate test

* feat: add auth extension points and one ssh connect pipeline

* feat: rebuild workspaces as the reference plugin

* fix: gate second factors after SSO/LDAP behind an admin setting

* feat: convert network-topology to a full plugin (B1)

* feat: move snippets backend and tables into a plugin (B2)

* feat: point core frontend snippets pickers at the plugin (B2)

* feat: add the snippets plugin (B2)

* feat: wire ai, automations, fleets and ssh-terminal to snippets (B2)

* feat: finish the tailscale plugin, including SSH auth (B3)

* feat: finish the fleets plugin, add ctx.hosts and host-commands SDK (B4)

* chore: update proxmox and host-metrics locale files for B5

* chore: regenerate drizzle migration journals for B5

* feat: add ctx.hosts create/update to the SDK, host-metrics drops proxmox

* feat: move proxmox node stats and collectors into the proxmox plugin

* feat: drop proxmox host columns, use plugin settings instead

* feat: finish the fleets plugin, add ctx.hosts and host-commands SDK (B4)

* feat: convert file manager into a plugin

* feat: convert ssh tunnels into a plugin

* feat: finish the web-endpoint plugin, add ctx.desktop (B8)

* feat: move the terminal fully into the ssh-terminal plugin (B9)

* feat: convert tmux monitoring into a plugin (B10)

* feat: convert serial console into the serial plugin

* feat: move session sharing and collab rooms into a plugin (B12)

* feat: turn session recording into a plugin (B13)

* feat: finish the remote-desktop plugin (B14)

* feat: finish the host-metrics plugin, move host status into core (B16)

* feat: finish the docker plugin (B15)

* feat: finish the automations plugin (B17)

* feat: finish the ai plugin (B18)

* feat: finish the homepage plugin, move service links and canvas out of core (B19)

* feat: convert wake-on-lan into a plugin (B20)

* feat: convert secret-sources into a plugin (B20)

* feat: move totp and passkeys into plugins (C1)

* feat: move sso and ldap logins into plugins (C2)

* feat: move opkssh and warpgate into plugins (C3)

* feat: move step-ca into a plugin (C4)

* feat: move vault ssh signing into a plugin (C5)

* feat: move termix identity into a plugin (C6)

* feat: move acme certificate automation into a plugin (C7)

* fix: finish 2.9.0 plugin moves and get every check green

* chore: lock the plugin boundary and remove 2.9.0 leftovers

* fix: harden the plugin runtime after the 2.9.0 security review

* feat: add plugin packing, signing, pinned trust and tmxplug bundling

* test: prove 2.8 to 2.9.0 upgrade is lossless and fix what it caught

* fix: give bundled plugin backends a real require for CJS deps

* feat: improve UI loading time and jitter

* feat: show credential sharing inline in the sidebar like host sharing

* feat: tailscale add host and copy ip, fix outbound fetch hang and plugin ESM warning

* feat: unify alerts into one plugin, channels, rules and inbox

* feat: rebuild desktop sync as linked server accounts, fix packaged plugin bundles and UI scaling

* fix: set blacksmith builder cache-key to stop broken gha cache fallback

* fix: link plugin-sdk workspace before npm ci in docker deps stage

* fix: link every plugin workspace before npm ci in docker deps stage

* fix(host-metrics): exclude image and firmware filesystems (#1469)

* fix(host-metrics): exclude image and firmware filesystems

* fix(ci): build plugin SDK before dependent checks

* fix(mysql): keep plugin settings scope indexes within limits

* test(mysql): refresh reviewed plugin upgrade SQL

* fix(hosts): normalize imported jump host references (#1470)

* fix(hosts): normalize imported jump host references

* fix(ci): build plugin SDK before dependent checks

* fix(mysql): keep plugin settings scope indexes within limits

* test(mysql): refresh reviewed plugin upgrade SQL

* fix(ci): build plugin SDK and repair MySQL settings migration (#1471)

* fix(ci): build plugin SDK before dependent checks

* fix(mysql): keep plugin settings scope indexes within limits

* test(mysql): refresh reviewed plugin upgrade SQL

* fix(file-manager): keep inline rename consistent (#1476)

* fix(ci): build plugin SDK before dependent checks

* fix(mysql): keep plugin settings scope indexes within limits

* test(mysql): refresh reviewed plugin upgrade SQL

* fix(file-manager): keep inline rename consistent

* fix(dashboard): reuse translated host status labels (#1475)

* fix(ci): build plugin SDK before dependent checks

* fix(mysql): keep plugin settings scope indexes within limits

* test(mysql): refresh reviewed plugin upgrade SQL

* fix(dashboard): reuse translated host status labels

* docs(api): clarify local and remote version fields (#1474)

* fix(ci): build plugin SDK before dependent checks

* fix(mysql): keep plugin settings scope indexes within limits

* test(mysql): refresh reviewed plugin upgrade SQL

* docs(api): clarify local and remote version fields

* fix(file-manager): preserve selected backgrounds on hover (#1473)

* fix(ci): build plugin SDK before dependent checks

* fix(mysql): keep plugin settings scope indexes within limits

* test(mysql): refresh reviewed plugin upgrade SQL

* fix(file-manager): preserve selection feedback on hover

* test(ui): await dialog focus cleanup before teardown

* fix(file-manager): restore Ctrl/Cmd+F file search (#1472)

* fix(ci): build plugin SDK before dependent checks

* fix(mysql): keep plugin settings scope indexes within limits

* test(mysql): refresh reviewed plugin upgrade SQL

* fix(file-manager): focus file search with Ctrl or Cmd F

* fix: keep rounded-full circular in production builds

* fix(file-manager): cancel uploads and stop remote writes (#1477)

* fix(file-manager): cancel uploads and stop remote writes

* test(css): exercise the configured PostCSS plugin chain

* fix(file-manager): apply compact density to directory tree (#1478)

* fix(file-manager): apply compact density to directory tree

* test(css): exercise the configured PostCSS plugin chain

* fix(file-manager): preserve font sizes in compact mode (#1480)

* fix(file-manager): preserve font sizes in compact mode

* test(css): exercise the configured PostCSS plugin chain

* fix(file-manager): prioritize file names in narrow lists (#1483)

* fix(file-manager): prioritize file names in narrow lists

* test(css): exercise the configured PostCSS plugin chain

* test(identity): preserve full Ed25519 public keys in fixtures

* test(remote-desktop): always mutate ciphertext in tamper test

* fix(remote-desktop): probe the saved host guacd endpoint (#1481)

* fix(remote-desktop): probe the saved host guacd endpoint

* test(css): exercise the configured PostCSS plugin chain

* test(identity): preserve full Ed25519 public keys in fixtures

* fix(homepage): check allowlisted private service reachability (#1479)

* fix(homepage): check allowlisted private service reachability

* test(css): exercise the configured PostCSS plugin chain

* fix(remote-desktop): stop unsolicited clipboard read prompts (#1482)

* fix(remote-desktop): read clipboard only on explicit paste

* test(css): exercise the configured PostCSS plugin chain

* test(identity): preserve full Ed25519 public keys in fixtures

* test(remote-desktop): always mutate ciphertext in tamper test

* chore: simplify plugin readmes, changelogs and manifest descriptions

* fix: keep plugins loaded after signing in from the login screen

* fix(file-manager): accept OS file drops over existing rows (#1484)

* fix(file-manager): accept OS file drops over existing rows

* test(file-manager): target the file label in drop tests

* test(css): exercise the configured PostCSS plugin chain

* test(identity): preserve full Ed25519 public keys in fixtures

* test(remote-desktop): always mutate ciphertext in tamper test

* fix(file-manager): pipeline SFTP download reads (#1485)

* feat: add plugin sdk build to beta release

* fix: make link-store secret check immune to random base64 matches

* fix(ldap): preserve the directory-provided bind DN (#1486)

* fix: compute beta changes across dev branches and move the beta tag

* chore: untrack plugin sdk ARCHITECTURE.md

* chore: remove references to plugin sdk ARCHITECTURE.md

* feat: merge host editor terminal tabs into one owned by ssh-terminal

* feat: add descriptions to plugin host enable toggles

* fix(file-manager): show download progress in file viewers (#1487)

* fix(electron): signal backend readiness over IPC (#1488)

* fix(split-screen): allow layout creation without randomUUID (#1490)

* fix(split-screen): allow layout creation without randomUUID

* test(credentials): avoid flaky Ed25519 key generation

* fix(sidebar): remeasure visible rows after density changes (#1489)

* fix(sidebar): remeasure visible rows after density changes

* test(credentials): avoid flaky Ed25519 key generation

* feat(split-screen): redesign split screen with free-form panes and pane picker

* feat(sidebar): add host click behavior setting, default to always opening a new tab

* feat(snippets): redesign panel to match the host list

* fix(session-recording): stop session logs panel from refetching in a loop

* feat(snippets): bring back sharing, target hosts and drag reorder

* feat(ssh-terminal): add toolbar position, start state, display and fade host settings

* feat(ssh-terminal): add host setting to turn off password prompt auto-fill

* fix(ai): stop streams getting cut off and keep tool steps across messages

* feat: improve quick connect system using plugin api

* fix: proxmox guest sync, startup snippet sync, drop dead cloudflare ssh transport

* feat: move terminal settings, look and ssh tools into ssh-terminal plugin

* feat: move snippets, keybinding actions and macros out of core into plugins

* feat: store rdp, vnc and telnet logins in a generic per-protocol table

* feat: type the plugin host record, move plugin strings out of core and add lint checks

* feat: replace core homepage widget registry with generic extension points

* feat: plugins only see their own host settings in the browser

* feat: harden plugin api for separate repos, signed updates and generic external login

* fix: keep plugin css below core utilities and version plugin assets by their css

* fix: load and save plugin host settings in the editor and tighten settings row spacing

* feat: redesign user host defaults system

* fix(remote-desktop): release held keys on focus loss (#1498)

* fix(session-sharing): replace local presentation after takeover (#1500)

* fix(file-manager): refresh disk usage with directory listing (#1503)

* fix(ssh-terminal): preserve input order during local echo reconciliation (#1505)

* feat(remote-desktop): expose display zoom controls for RDP (#1514)

* fix(file-manager): restore text selection and copying in Markdown previews (#1518)

* fix(sidebar): keep compact host addresses visible (#1524)

* fix(hosts): preserve plugin settings when reopening the editor (#1499)

* fix(ssh-terminal): close owner sockets when presentations unmount (#1501)

* fix(session-sharing): synchronize shared SSH terminal dimensions (#1502)

* fix(session-sharing): show participant presence in member terminals (#1504)

* fix(ai): sync provider configuration and keys across linked devices (#1506)

* feat(ssh-terminal): add a duplicate tab action (#1510)

* feat(file-manager): allow disabling move-to-trash confirmation (#1511)

* feat(file-manager): default to the remote login directory (#1512)

* feat(homepage): synchronize canvas layouts across devices (#1515)

* fix(shortcuts): prevent accidental double-Shift palette activation (#1519)

* feat(tmux-monitor): add a unified multi-host view (#1520)

* fix(electron): allow explicit quit with active connections (#1522)

* feat: reconnect all disconnected terminal tabs (#1523)

* fix(hosts): preserve recording and sharing settings in the dev editor (#1509)

* fix(database): preserve RDP domain during startup backfill (#1497)

* feat(sidebar): add keyboard type-ahead search for hosts (#1516)

* feat(automations): add per-host maintenance mode and recurring schedules (#1521)

* feat(tmux): add a per-host mouse toggle and preserve remote configuration (#1513)

* fix(session-sharing): use the linked server for desktop meetings and links (#1507)

* fix(tunnels): support TOTP for client tunnels and jump hosts (#1508)

* fix: type errors and lint failures from merged plugin prs

* feat(installer): make the Windows desktop shortcut optional (#1517)

* fix: ship the plugin sdk and serialport in desktop builds

* fix: prefer ipv4 when resolving ssh host names (#1365)

* fix: readable terminal selection with the light theme (#1319)

* fix: build desktop session share links on the linked server (#1350)

* fix: show meeting guests to members and hide the roster from guests (#1353)

* fix: reliable file manager saves with sudo prompt and no base64 guessing (#1335)

* fix: show disk usage for the mount being browsed (#1347)

* fix: load the linux tray icon reliably and log tray failures (#1332)

* fix: cover the gnome close path in the desktop quit test (#1332)

* fix: prompt for jump host TOTP in terminal, file manager and metrics (#1312)

* feat: optional auto reconnect for dropped ssh sessions (#1321)

* feat: tighter compact host rows with inline tags (#1325)

* feat: bring back the alert feed homepage widget

* feat: pick target terminals for snippets again

* feat: share button on connection tabs again

* feat: recent servers list when linking the desktop app

* feat: list the fixed app shortcuts in keyboard shortcuts

* fix: translate hardcoded toasts and drop em dashes from ui text

* fix: translate leftover hardcoded ui text

* fix: toolbar files button opens at the shell directory again

* fix: show the remote desktop note under connection origin again

* chore: openapi docs for host metrics manager routes

* chore: openapi docs for undocumented routes and fix two broken doc blocks

* fix: declare terminal.listSessions use for snippet targets

* revert: drop the alert feed widget, the notification center replaces it

* feat: restore the alert feed homepage widget

* fix: quick connect fills the host address from plugin auth editors like tailscale

* fix: docker container logs use the base background color

* chore: fix dependabot alerts and apply safe npm upgrades

* fix: proxmox stats tab reads its switch from plugin host settings

* fix: count plugin ssh logins toward host status and stop showing reachable as a warning

* fix: hide the built-in source pill in the host editor

* fix: host status shows online when the port answers and only warns on a failed login

* fix: drop the top border on the split layout menu

* fix: host defaults tabs sit where the host editor puts them and skip plugins with nothing to default

* fix: remote desktop auth method labels and notes for vnc and telnet

* fix: add description to the web endpoint enable switch

* fix: crowdin sync and pretranslate for plugin locales, run plugin tests on release

* feat: move telemetry out of core into a usage statistics plugin

* fix: recent activity card no longer cuts off host names early

* fix: remove duplicate top border on split screen menu

* fix: redesign session log player controls, fix tooltip overlap and drop dot separators

* fix: file manager and sftp text showing raw i18n keys

* fix: onboarding rerunning for existing users after upgrading

* fix: fleet detail buttons overflowing the sidebar

* fix: session log player scrolling off screen horizontally

* fix: network graph lag when adding hosts and on every render

* fix: maintenance index name, shared host read only view and badge polling

* fix: meeting tabs, workspace tab merging, rail panels as tabs and general ui lag

* chore: update release notes

* fix: remote desktop tabs reconnecting on every tab switch

* fix: build plugin sdk before linting in release workflow

* chore: lint, format, and bump version to 2.9.0

* chore: skip crowdin pre-translate in release for now

* chore: sync Crowdin translations for 2.9.0

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Koi <38512047+datlt4@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: ZacharyZcR <zacharyzcr1984@gmail.com>

plugins/acme-ssl/CHANGELOG.md

@@ -0,0 +1,7 @@
+# Changelog
+
+## 1.0.0
+
+First release, bundled with Termix 2.9.0.
+
+Gets the HTTPS certificate Termix serves from Let's Encrypt or another ACME provider and renews it before it expires. Supports the HTTP challenge and the Cloudflare DNS challenge.

plugins/acme-ssl/README.md

@@ -0,0 +1,41 @@
+# ACME Certificates
+
+Gets and renews the Termix HTTPS certificate from Let's Encrypt or another ACME provider.
+
+## Features
+
+- Gets a certificate from Let's Encrypt, Let's Encrypt staging or any ACME directory URL.
+- Checks twice a day and renews when there is no certificate, the current one is self-signed, it does not cover the domain or it expires within 30 days.
+- Swaps in the new certificate without a restart.
+- Shows the current certificate and the last attempt, with a button to request one now.
+
+## Setup
+
+Pick a challenge type:
+
+- HTTP: the provider fetches `http://<domain>/.well-known/acme-challenge/...`, so port 80 must reach Termix.
+- DNS (Cloudflare): needs a Cloudflare API token with Zone:DNS:Edit. Works when port 80 is closed.
+
+If you turn this plugin off, Termix keeps serving the current certificate but nothing renews it. Admin Settings > HTTPS certificate warns you before it expires. Uploading your own certificate is still done there.
+
+## Settings
+
+### Admin
+
+- Renew automatically: turn automatic renewal on or off.
+- Domain and Email: the domain to cover and the contact email for the provider.
+- Certificate authority: Let's Encrypt, Let's Encrypt staging or a custom ACME directory URL.
+- Challenge type: HTTP or DNS (Cloudflare).
+- Cloudflare API token: used by the DNS challenge. Stored encrypted.
+
+## Permissions
+
+- `acme-ssl.manage`: Manage ACME certificates. Only admins have it by default.
+
+## Development
+
+```bash
+npm run build      # build into dist/
+npm run test       # run this plugin's tests
+npm run typecheck  # type-check this plugin
+```

plugins/acme-ssl/locales/en.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Manage ACME certificates",
+      "description": "See the certificate status and request a new certificate now."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renew automatically",
+      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
+    },
+    "domain": {
+      "label": "Domain",
+      "description": "The public domain name for the certificate.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "Email",
+      "description": "Contact email for the ACME account and expiry notices.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Certificate authority",
+      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Custom ACME directory"
+    },
+    "directoryUrl": {
+      "label": "ACME directory URL",
+      "description": "Only for a custom certificate authority. Must be an https URL."
+    },
+    "challengeType": {
+      "label": "Challenge type",
+      "description": "How to prove you own the domain.",
+      "http": "HTTP - needs port 80 reachable from the internet",
+      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "Scoped token with Zone:DNS:Edit permission for your domain."
+    }
+  },
+  "status": {
+    "title": "Certificate status",
+    "none": "No certificate",
+    "names": "Covers {{names}}",
+    "issuer": "Issued by {{issuer}}",
+    "expires": "Expires {{date}}",
+    "lastIssued": "Last issued {{date}}",
+    "lastError": "Last attempt failed: {{error}}",
+    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
+    "request": "Request certificate now",
+    "requesting": "Requesting certificate...",
+    "issued": "Certificate issued and installed"
+  }
+}

plugins/acme-ssl/locales/translated/af_ZA.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Bestuur ACME-sertifikate",
+      "description": "Sien die sertifikaatstatus en versoek nou 'n nuwe sertifikaat."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Hernu outomaties",
+      "description": "Kontroleer twee keer per dag en kry 'n nuwe sertifikaat wanneer daar geen is nie, dit nie die domein dek nie, of dit binne 30 dae verval."
+    },
+    "domain": {
+      "label": "Domein",
+      "description": "Die publieke domeinnaam vir die sertifikaat.",
+      "placeholder": "termix.voorbeeld.com"
+    },
+    "email": {
+      "label": "E-pos",
+      "description": "Kontak-e-posadres vir die ACME-rekening en vervalkennisgewings.",
+      "placeholder": "admin@voorbeeld.com"
+    },
+    "provider": {
+      "label": "Sertifikaatowerheid",
+      "description": "Waar om die sertifikaat te kry. Gebruik staging om te toets sonder om Let's Encrypt-tarieflimiete te bereik.",
+      "letsencrypt": "Kom ons enkripteer",
+      "letsencryptStaging": "Kom ons enkripteer (opvoering)",
+      "custom": "Pasgemaakte ACME-gids"
+    },
+    "directoryUrl": {
+      "label": "ACME-gids-URL",
+      "description": "Slegs vir 'n persoonlike sertifikaatowerheid. Moet 'n https-URL wees."
+    },
+    "challengeType": {
+      "label": "Uitdagingsoort",
+      "description": "Hoe om te bewys dat jy die domein besit.",
+      "http": "HTTP - benodig poort 80 wat vanaf die internet bereikbaar is",
+      "cloudflare": "DNS (Cloudflare) - benodig 'n Cloudflare API-token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API-token",
+      "description": "Omvangryke token met Zone:DNS:Wysig toestemming vir jou domein."
+    }
+  },
+  "status": {
+    "title": "Sertifikaatstatus",
+    "none": "Geen sertifikaat nie",
+    "names": "Omslae {{names}}",
+    "issuer": "Uitgereik deur {{issuer}}",
+    "expires": "Vervaldatum {{date}}",
+    "lastIssued": "Laas uitgereik {{date}}",
+    "lastError": "Laaste poging het misluk: {{error}}",
+    "missing": "Stel die domein, e-posadres en die velde wat jou uitdagingsoort benodig, en stoor dit dan voordat jy 'n sertifikaat aanvra.",
+    "request": "Versoek nou 'n sertifikaat",
+    "requesting": "Versoek sertifikaat...",
+    "issued": "Sertifikaat uitgereik en geïnstalleer"
+  }
+}

plugins/acme-ssl/locales/translated/ar_SA.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "إدارة شهادات ACME",
+      "description": "اطلع على حالة الشهادة واطلب شهادة جديدة الآن."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "يتم التجديد تلقائياً",
+      "description": "تحقق مرتين في اليوم واحصل على شهادة جديدة عندما لا تكون هناك شهادة، أو عندما لا تغطي النطاق، أو عندما تنتهي صلاحيتها في غضون 30 يومًا."
+    },
+    "domain": {
+      "label": "النطاق",
+      "description": "اسم النطاق العام للشهادة.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "البريد الإلكتروني",
+      "description": "البريد الإلكتروني للتواصل بخصوص حساب ACME وإشعارات انتهاء الصلاحية.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "المرجع المصدق (CA)",
+      "description": "من أين أحصل على الشهادة؟ استخدم بيئة الاختبار لإجراء الاختبارات دون تجاوز حدود معدل Let's Encrypt.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (مرحلة تجريبية)",
+      "custom": "دليل ACME مخصص"
+    },
+    "directoryUrl": {
+      "label": "رابط دليل ACME",
+      "description": "مخصص فقط لهيئة إصدار شهادات مخصصة. يجب أن يكون عنوان URL من نوع https."
+    },
+    "challengeType": {
+      "label": "نوع التحدي",
+      "description": "كيفية إثبات ملكيتك للنطاق.",
+      "http": "بروتوكول HTTP - يتطلب منفذ 80 يمكن الوصول إليه من الإنترنت",
+      "cloudflare": "نظام أسماء النطاقات (Cloudflare) - يتطلب رمز API من Cloudflare"
+    },
+    "cloudflareToken": {
+      "label": "رمز واجهة برمجة تطبيقات Cloudflare",
+      "description": "رمز مقيد بصلاحية Zone:DNS:Edit للنطاق الخاص بك."
+    }
+  },
+  "status": {
+    "title": "حالة الشهادة",
+    "none": "لا توجد شهادة",
+    "names": "يغطي {{names}}",
+    "issuer": "صادر عن {{issuer}}",
+    "expires": "تنتهي في {{date}}",
+    "lastIssued": "آخر إصدار {{date}}",
+    "lastError": "فشلت المحاولة الأخيرة: {{error}}",
+    "missing": "قم بتعيين النطاق والبريد الإلكتروني والحقول التي يحتاجها نوع التحدي الخاص بك، ثم احفظ التغييرات قبل طلب الشهادة.",
+    "request": "اطلب الشهادة الآن",
+    "requesting": "جارٍ طلب الشهادة...",
+    "issued": "تم إصدار الشهادة وتركيبها"
+  }
+}

plugins/acme-ssl/locales/translated/bg_BG.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Управление на ACME сертификати",
+      "description": "Вижте състоянието на сертификата и заявете нов сертификат сега."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Подновяване автоматично",
+      "description": "Проверявайте два пъти на ден и получавайте нов сертификат, когато няма такъв, не покрива домейна или изтича в рамките на 30 дни."
+    },
+    "domain": {
+      "label": "Домейн",
+      "description": "Публичното домейн име за сертификата.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "Имейл",
+      "description": "Контактен имейл за ACME акаунта и известия за изтичане.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Сертифициращ орган",
+      "description": "Къде да взема сертификата. Използвайте етапно тестване, за да не се достигат ограниченията на скоростта на Let's Encrypt.",
+      "letsencrypt": "Нека криптираме",
+      "letsencryptStaging": "Нека криптираме (подготовка)",
+      "custom": "Персонализирана ACME директория"
+    },
+    "directoryUrl": {
+      "label": "URL адрес на директорията на ACME",
+      "description": "Само за персонализиран сертифициращ орган. Трябва да е https URL адрес."
+    },
+    "challengeType": {
+      "label": "Тип предизвикателство",
+      "description": "Как да докажете, че притежавате домейна.",
+      "http": "HTTP - изисква порт 80, достъпен от интернет",
+      "cloudflare": "DNS (Cloudflare) - изисква Cloudflare API токен"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API токен",
+      "description": "Ограничен токен с разрешение Zone:DNS:Edit за вашия домейн."
+    }
+  },
+  "status": {
+    "title": "Състояние на сертификата",
+    "none": "Няма сертификат",
+    "names": "Обхваща {{names}}",
+    "issuer": "Издадено от {{issuer}}",
+    "expires": "Изтича {{date}}",
+    "lastIssued": "Последно издадено {{date}}",
+    "lastError": "Последният опит не беше успешен: {{error}}",
+    "missing": "Задайте домейна, имейла и полетата, необходими за вашия тип предизвикателство, след което ги запазете, преди да заявите сертификат.",
+    "request": "Заявете сертификат сега",
+    "requesting": "Заявка за сертификат...",
+    "issued": "Сертификат издаден и инсталиран"
+  }
+}

plugins/acme-ssl/locales/translated/bn_BD.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Manage ACME certificates",
+      "description": "See the certificate status and request a new certificate now."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renew automatically",
+      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
+    },
+    "domain": {
+      "label": "Domain",
+      "description": "The public domain name for the certificate.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "Email",
+      "description": "Contact email for the ACME account and expiry notices.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Certificate authority",
+      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Custom ACME directory"
+    },
+    "directoryUrl": {
+      "label": "ACME directory URL",
+      "description": "Only for a custom certificate authority. Must be an https URL."
+    },
+    "challengeType": {
+      "label": "Challenge type",
+      "description": "How to prove you own the domain.",
+      "http": "HTTP - needs port 80 reachable from the internet",
+      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "Scoped token with Zone:DNS:Edit permission for your domain."
+    }
+  },
+  "status": {
+    "title": "Certificate status",
+    "none": "No certificate",
+    "names": "Covers {{names}}",
+    "issuer": "Issued by {{issuer}}",
+    "expires": "Expires {{date}}",
+    "lastIssued": "Last issued {{date}}",
+    "lastError": "Last attempt failed: {{error}}",
+    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
+    "request": "Request certificate now",
+    "requesting": "Requesting certificate...",
+    "issued": "Certificate issued and installed"
+  }
+}

plugins/acme-ssl/locales/translated/ca_ES.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Gestionar certificats ACME",
+      "description": "Consulta l'estat del certificat i sol·licita'n un de nou ara."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renovar automàticament",
+      "description": "Revisa dues vegades al dia i aconsegueix un certificat nou quan no n'hi ha cap, no cobreix el domini o caduca en 30 dies."
+    },
+    "domain": {
+      "label": "Domini",
+      "description": "El nom de domini públic del certificat.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "Correu electrònic",
+      "description": "Correu electrònic de contacte per al compte ACME i avisos de caducitat.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Autoritat de certificació",
+      "description": "On s'obté el certificat. Utilitzeu la configuració estadística per fer proves sense arribar als límits de velocitat de Let's Encrypt.",
+      "letsencrypt": "Xifrem",
+      "letsencryptStaging": "Xifrem (posada en escena)",
+      "custom": "Directori ACME personalitzat"
+    },
+    "directoryUrl": {
+      "label": "URL del directori ACME",
+      "description": "Només per a una autoritat de certificació personalitzada. Ha de ser una URL https."
+    },
+    "challengeType": {
+      "label": "Tipus de repte",
+      "description": "Com demostrar que ets el propietari del domini.",
+      "http": "HTTP: necessita que el port 80 sigui accessible des d'Internet",
+      "cloudflare": "DNS (Cloudflare): necessita un token d'API de Cloudflare"
+    },
+    "cloudflareToken": {
+      "label": "Token de l'API de Cloudflare",
+      "description": "Token amb àmbit i permís Zone:DNS:Edit per al vostre domini."
+    }
+  },
+  "status": {
+    "title": "Estat del certificat",
+    "none": "Sense certificat",
+    "names": "Cobertes {{names}}",
+    "issuer": "Publicat per {{issuer}}",
+    "expires": "Caduca {{date}}",
+    "lastIssued": "Última emissió {{date}}",
+    "lastError": "Últim intent fallit: {{error}}",
+    "missing": "Definiu el domini, el correu electrònic i els camps que necessita el vostre tipus de repte i, a continuació, deseu-ho abans de sol·licitar un certificat.",
+    "request": "Sol·licita el certificat ara",
+    "requesting": "Sol·licitant certificat...",
+    "issued": "Certificat emès i instal·lat"
+  }
+}

plugins/acme-ssl/locales/translated/cs_CZ.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Správa certifikátů ACME",
+      "description": "Zkontrolujte stav certifikátu a požádejte o nový certifikát."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Automaticky obnovit",
+      "description": "Kontrolujte dvakrát denně a požádejte o nový certifikát, pokud žádný neexistuje, pokud se nevztahuje na danou doménu nebo pokud jeho platnost vyprší do 30 dnů."
+    },
+    "domain": {
+      "label": "Doména",
+      "description": "Název veřejné domény pro certifikát.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "E-mail",
+      "description": "Kontaktní e-mail pro účet ACME a oznámení o vypršení platnosti.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Certifikační autorita",
+      "description": "Kde získat certifikát. Použijte staging k testování bez překročení limitů rychlosti Let's Encrypt.",
+      "letsencrypt": "Pojďme šifrovat",
+      "letsencryptStaging": "Pojďme šifrovat (příprava)",
+      "custom": "Vlastní adresář ACME"
+    },
+    "directoryUrl": {
+      "label": "URL adresáře ACME",
+      "description": "Pouze pro vlastní certifikační autoritu. Musí se jednat o URL adresu typu https."
+    },
+    "challengeType": {
+      "label": "Typ výzvy",
+      "description": "Jak prokázat, že jste vlastníkem domény.",
+      "http": "HTTP - vyžaduje dostupnost portu 80 z internetu",
+      "cloudflare": "DNS (Cloudflare) – vyžaduje token Cloudflare API"
+    },
+    "cloudflareToken": {
+      "label": "Token API Cloudflare",
+      "description": "Token s vymezeným rozsahem a oprávněním Zóna:DNS:Úpravy pro vaši doménu."
+    }
+  },
+  "status": {
+    "title": "Stav certifikátu",
+    "none": "Žádný certifikát",
+    "names": "Kryty {{names}}",
+    "issuer": "Vydáno uživatelem {{issuer}}",
+    "expires": "Platnost vyprší {{date}}",
+    "lastIssued": "Naposledy vydáno {{date}}",
+    "lastError": "Poslední pokus se nezdařil: {{error}}",
+    "missing": "Před vyžádáním certifikátu nastavte doménu, e-mail a pole, která váš typ výzvy vyžaduje, a poté je uložte.",
+    "request": "Vyžádejte si certifikát nyní",
+    "requesting": "Žádost o certifikát...",
+    "issued": "Certifikát vydán a nainstalován"
+  }
+}

plugins/acme-ssl/locales/translated/da_DK.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Administrer ACME-certifikater",
+      "description": "Se certifikatstatussen, og anmod om et nyt certifikat nu."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Forny automatisk",
+      "description": "Tjek to gange om dagen, og få et nyt certifikat, hvis der ikke er noget, det ikke dækker domænet, eller det udløber inden for 30 dage."
+    },
+    "domain": {
+      "label": "Domæne",
+      "description": "Det offentlige domænenavn for certifikatet.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "E-mail",
+      "description": "Kontakt-e-mailadresse for ACME-kontoen og udløbsmeddelelser.",
+      "placeholder": "admin@eksempel.com"
+    },
+    "provider": {
+      "label": "Certifikatmyndighed",
+      "description": "Hvor kan man få certifikatet? Brug staging til at teste uden at nå Let's Encrypt-hastighedsgrænserne.",
+      "letsencrypt": "Lad os kryptere",
+      "letsencryptStaging": "Lad os kryptere (staging)",
+      "custom": "Brugerdefineret ACME-mappe"
+    },
+    "directoryUrl": {
+      "label": "ACME-katalogets URL",
+      "description": "Kun for en brugerdefineret certifikatmyndighed. Skal være en https-URL."
+    },
+    "challengeType": {
+      "label": "Udfordringstype",
+      "description": "Sådan beviser du, at du ejer domænet.",
+      "http": "HTTP - kræver port 80, der kan nås fra internettet",
+      "cloudflare": "DNS (Cloudflare) - kræver et Cloudflare API-token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API-token",
+      "description": "Scoped-token med Zone:DNS:Rediger-tilladelse for dit domæne."
+    }
+  },
+  "status": {
+    "title": "Certifikatstatus",
+    "none": "Intet certifikat",
+    "names": "Dækker {{names}}",
+    "issuer": "Udstedt af {{issuer}}",
+    "expires": "Udløber {{date}}",
+    "lastIssued": "Sidst udstedt {{date}}",
+    "lastError": "Sidste forsøg mislykkedes: {{error}}",
+    "missing": "Angiv domæne, e-mail og de felter, som din udfordringstype kræver, og gem derefter, før du anmoder om et certifikat.",
+    "request": "Anmod om certifikat nu",
+    "requesting": "Anmoder om certifikat...",
+    "issued": "Certifikat udstedt og installeret"
+  }
+}

plugins/acme-ssl/locales/translated/de_DE.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "ACME-Zertifikate verwalten",
+      "description": "Prüfen Sie den Zertifikatsstatus und fordern Sie jetzt ein neues Zertifikat an."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Automatische Verlängerung",
+      "description": "Prüfen Sie zweimal täglich, ob ein Zertifikat vorhanden ist, ob das aktuelle Zertifikat die Domain nicht abdeckt oder ob es innerhalb von 30 Tagen abläuft."
+    },
+    "domain": {
+      "label": "Domain",
+      "description": "Der öffentliche Domainname für das Zertifikat.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "E-Mail",
+      "description": "Kontakt-E-Mail-Adresse für das ACME-Konto und Benachrichtigungen zum Ablaufdatum.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Zertifizierungsstelle",
+      "description": "Wo Sie das Zertifikat erhalten. Nutzen Sie die Staging-Umgebung, um zu testen, ohne die Ratenbegrenzungen von Let's Encrypt zu erreichen.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (Staging)",
+      "custom": "Benutzerdefiniertes ACME-Verzeichnis"
+    },
+    "directoryUrl": {
+      "label": "ACME-Verzeichnis-URL",
+      "description": "Nur für eine benutzerdefinierte Zertifizierungsstelle. Muss eine HTTPS-URL sein."
+    },
+    "challengeType": {
+      "label": "Herausforderungstyp",
+      "description": "Wie Sie nachweisen, dass Sie die Domain besitzen.",
+      "http": "HTTP – benötigt Port 80, der aus dem Internet erreichbar sein muss.",
+      "cloudflare": "DNS (Cloudflare) – benötigt ein Cloudflare-API-Token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API-Token",
+      "description": "Bereichsbezogener Token mit Zone:DNS:Edit-Berechtigung für Ihre Domain."
+    }
+  },
+  "status": {
+    "title": "Zertifikatsstatus",
+    "none": "Kein Zertifikat",
+    "names": "Cover {{names}}",
+    "issuer": "Herausgegeben von {{issuer}}",
+    "expires": "Läuft ab {{date}}",
+    "lastIssued": "Zuletzt ausgestellt {{date}}",
+    "lastError": "Letzter Versuch fehlgeschlagen: {{error}}",
+    "missing": "Legen Sie die Domain, die E-Mail-Adresse und die Felder fest, die Ihr Herausforderungstyp benötigt, und speichern Sie die Einstellungen, bevor Sie ein Zertifikat anfordern.",
+    "request": "Zertifikat jetzt anfordern",
+    "requesting": "Zertifikat wird angefordert...",
+    "issued": "Zertifikat ausgestellt und installiert"
+  }
+}

plugins/acme-ssl/locales/translated/el_GR.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Διαχείριση πιστοποιητικών ACME",
+      "description": "Δείτε την κατάσταση του πιστοποιητικού και ζητήστε ένα νέο πιστοποιητικό τώρα."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Αυτόματη ανανέωση",
+      "description": "Ελέγχετε δύο φορές την ημέρα και λαμβάνετε ένα νέο πιστοποιητικό όταν δεν υπάρχει, δεν καλύπτει τον τομέα ή λήγει εντός 30 ημερών."
+    },
+    "domain": {
+      "label": "Πεδίο ορισμού",
+      "description": "Το όνομα δημόσιου τομέα για το πιστοποιητικό.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "E-mail",
+      "description": "Ηλεκτρονική διεύθυνση ηλεκτρονικού ταχυδρομείου επικοινωνίας για τον λογαριασμό ACME και τις ειδοποιήσεις λήξης.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Αρχή έκδοσης πιστοποιητικών",
+      "description": "Πού να λάβετε το πιστοποιητικό. Χρησιμοποιήστε τη σταδιακή επεξεργασία για να δοκιμάσετε χωρίς να υπερβείτε τα όρια ρυθμού του Let's Encrypt.",
+      "letsencrypt": "Ας κρυπτογραφήσουμε",
+      "letsencryptStaging": "Ας κρυπτογραφήσουμε (σταδιοποίηση)",
+      "custom": "Προσαρμοσμένος κατάλογος ACME"
+    },
+    "directoryUrl": {
+      "label": "URL καταλόγου ACME",
+      "description": "Μόνο για μια προσαρμοσμένη αρχή έκδοσης πιστοποιητικών. Πρέπει να είναι μια διεύθυνση URL https."
+    },
+    "challengeType": {
+      "label": "Τύπος πρόκλησης",
+      "description": "Πώς να αποδείξετε ότι είστε ο κάτοχος του domain.",
+      "http": "HTTP - χρειάζεται θύρα 80 προσβάσιμη από το διαδίκτυο",
+      "cloudflare": "DNS (Cloudflare) - χρειάζεται ένα διακριτικό API Cloudflare"
+    },
+    "cloudflareToken": {
+      "label": "Διακριτικό API Cloudflare",
+      "description": "Διακριτικό πεδίου εφαρμογής με δικαίωμα Zone:DNS:Edit για τον τομέα σας."
+    }
+  },
+  "status": {
+    "title": "Κατάσταση πιστοποιητικού",
+    "none": "Δεν υπάρχει πιστοποιητικό",
+    "names": "Καλύμματα {{names}}",
+    "issuer": "Εκδόθηκε από {{issuer}}",
+    "expires": "Λήγει {{date}}",
+    "lastIssued": "Τελευταία έκδοση {{date}}",
+    "lastError": "Η τελευταία προσπάθεια απέτυχε: {{error}}",
+    "missing": "Ορίστε τον τομέα, το email και τα πεδία που χρειάζεται ο τύπος της πρόκλησής σας και, στη συνέχεια, αποθηκεύστε το, πριν ζητήσετε πιστοποιητικό.",
+    "request": "Ζητήστε πιστοποιητικό τώρα",
+    "requesting": "Αίτημα πιστοποιητικού...",
+    "issued": "Έκδοση και εγκατάσταση πιστοποιητικού"
+  }
+}

plugins/acme-ssl/locales/translated/es_ES.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Gestionar certificados ACME",
+      "description": "Consulte el estado del certificado y solicite uno nuevo ahora."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renovación automática",
+      "description": "Compruebe dos veces al día y obtenga un nuevo certificado si no tiene ninguno, si no cubre el dominio o si caduca en los próximos 30 días."
+    },
+    "domain": {
+      "label": "Dominio",
+      "description": "El nombre de dominio público para el certificado.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "Correo electrónico",
+      "description": "Correo electrónico de contacto para la cuenta ACME y avisos de vencimiento.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Autoridad de certificación",
+      "description": "Dónde obtener el certificado. Utilice el entorno de pruebas para realizar pruebas sin alcanzar los límites de uso de Let's Encrypt.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (en fase de pruebas)",
+      "custom": "Directorio ACME personalizado"
+    },
+    "directoryUrl": {
+      "label": "URL del directorio ACME",
+      "description": "Solo para una autoridad de certificación personalizada. Debe ser una URL HTTPS."
+    },
+    "challengeType": {
+      "label": "Tipo de desafío",
+      "description": "Cómo demostrar que usted es el propietario del dominio.",
+      "http": "HTTP: necesita que el puerto 80 sea accesible desde Internet.",
+      "cloudflare": "DNS (Cloudflare): requiere un token de API de Cloudflare."
+    },
+    "cloudflareToken": {
+      "label": "Token de API de Cloudflare",
+      "description": "Token con permiso Zone:DNS:Edit limitado para tu dominio."
+    }
+  },
+  "status": {
+    "title": "Estado del certificado",
+    "none": "Sin certificado",
+    "names": "Portadas {{names}}",
+    "issuer": "Emitido por {{issuer}}",
+    "expires": "Caduca {{date}}",
+    "lastIssued": "Última emisión {{date}}",
+    "lastError": "Último intento fallido: {{error}}",
+    "missing": "Configure el dominio, el correo electrónico y los campos que requiere su tipo de desafío, luego guarde los cambios y, a continuación, solicite un certificado.",
+    "request": "Solicita tu certificado ahora",
+    "requesting": "Solicitando certificado...",
+    "issued": "Certificado emitido e instalado"
+  }
+}

plugins/acme-ssl/locales/translated/fi_FI.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Hallinnoi ACME-sertifikaatteja",
+      "description": "Tarkista varmenteen tila ja pyydä uusi varmenne nyt."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Uudista automaattisesti",
+      "description": "Tarkista kahdesti päivässä ja hanki uusi varmenne, jos sitä ei ole, se ei kata verkkotunnusta tai se vanhenee 30 päivän kuluessa."
+    },
+    "domain": {
+      "label": "Verkkotunnus",
+      "description": "Varmenteen julkinen verkkotunnus.",
+      "placeholder": "termix.esimerkki.com"
+    },
+    "email": {
+      "label": "Sähköposti",
+      "description": "ACME-tilin yhteystiedot ja vanhenemisilmoitukset.",
+      "placeholder": "admin@esimerkki.com"
+    },
+    "provider": {
+      "label": "Varmentaja",
+      "description": "Mistä varmenteen saa? Käytä testausympäristöä Let's Encrypt -nopeusrajoitusten ylittämättä.",
+      "letsencrypt": "Salataanpa",
+      "letsencryptStaging": "Let's Encrypt (vaiheistus)",
+      "custom": "Mukautettu ACME-hakemisto"
+    },
+    "directoryUrl": {
+      "label": "ACME-hakemiston URL-osoite",
+      "description": "Vain mukautetulle varmentajalle. URL-osoitteen on oltava https."
+    },
+    "challengeType": {
+      "label": "Haasteen tyyppi",
+      "description": "Kuinka todistaa omistavasi verkkotunnuksen.",
+      "http": "HTTP - vaatii portin 80, johon internetistä voi päästä käsiksi",
+      "cloudflare": "DNS (Cloudflare) – vaatii Cloudflare API -tunnuksen"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API -tunnus",
+      "description": "Laajuusaluetunnus, jolla on Zone:DNS:Edit-käyttöoikeus verkkotunnuksellesi."
+    }
+  },
+  "status": {
+    "title": "Sertifikaatin tila",
+    "none": "Ei todistusta",
+    "names": "Kannet {{names}}",
+    "issuer": "Myöntäjä {{issuer}}",
+    "expires": "Vanhenee {{date}}",
+    "lastIssued": "Viimeksi myönnetty {{date}}",
+    "lastError": "Viimeisin yritys epäonnistui: {{error}}",
+    "missing": "Aseta verkkotunnus, sähköpostiosoite ja haastetyyppisi tarvitsemat kentät ja tallenna ne ennen varmenteen pyytämistä.",
+    "request": "Pyydä todistus nyt",
+    "requesting": "Pyydetään varmennetta...",
+    "issued": "Sertifikaatti myönnetty ja asennettu"
+  }
+}

plugins/acme-ssl/locales/translated/fr_FR.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Gérer les certificats ACME",
+      "description": "Consultez l'état du certificat et demandez un nouveau certificat dès maintenant."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renouvellement automatique",
+      "description": "Vérifiez deux fois par jour et obtenez un nouveau certificat s'il n'y en a pas, s'il ne couvre pas le domaine ou s'il expire dans les 30 jours."
+    },
+    "domain": {
+      "label": "Domaine",
+      "description": "Le nom de domaine public pour le certificat.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "E-mail",
+      "description": "Adresse électronique de contact pour le compte ACME et les avis d'expiration.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Autorité de certification",
+      "description": "Où obtenir le certificat ? Utilisez un environnement de test pour effectuer des tests sans atteindre les limites de requêtes de Let's Encrypt.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (phase de test)",
+      "custom": "Répertoire ACME personnalisé"
+    },
+    "directoryUrl": {
+      "label": "URL du répertoire ACME",
+      "description": "Uniquement pour une autorité de certification personnalisée. Doit être une URL HTTPS."
+    },
+    "challengeType": {
+      "label": "Type de défi",
+      "description": "Comment prouver que vous êtes propriétaire du domaine.",
+      "http": "HTTP – nécessite que le port 80 soit accessible depuis Internet",
+      "cloudflare": "DNS (Cloudflare) - nécessite un jeton d'API Cloudflare"
+    },
+    "cloudflareToken": {
+      "label": "Jeton d'API Cloudflare",
+      "description": "Jeton limité avec l'autorisation Zone:DNS:Edit pour votre domaine."
+    }
+  },
+  "status": {
+    "title": "Statut du certificat",
+    "none": "Aucun certificat",
+    "names": "Couvertures {{names}}",
+    "issuer": "Émis par {{issuer}}",
+    "expires": "Expire le {{date}}",
+    "lastIssued": "Dernière émission le {{date}}",
+    "lastError": "Dernière tentative échouée : {{error}}",
+    "missing": "Configurez le domaine, l'adresse e-mail et les champs requis par votre type de défi, puis enregistrez, avant de demander un certificat.",
+    "request": "Demandez votre certificat dès maintenant",
+    "requesting": "Demande de certificat en cours...",
+    "issued": "Certificat délivré et installé"
+  }
+}

plugins/acme-ssl/locales/translated/he_IL.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "ניהול אישורי ACME",
+      "description": "ראה את סטטוס האישור ובקש אישור חדש כעת."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "חידוש אוטומטי",
+      "description": "בדקו פעמיים ביום וקבלו תעודה חדשה אם אין, אם היא לא מכסה את הדומיין, או אם היא פגה תוך 30 יום."
+    },
+    "domain": {
+      "label": "תְחוּם",
+      "description": "שם התחום הציבורי עבור התעודה.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "אֶלֶקטרוֹנִי",
+      "description": "כתובת דוא\"ל ליצירת קשר עבור חשבון ACME והודעות תפוגה.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "רשות אישורים",
+      "description": "היכן ניתן להשיג את האישור. השתמשו ב-staging כדי לבדוק מבלי להגיע למגבלות התעריף של Let's Encrypt.",
+      "letsencrypt": "בואו נצפין",
+      "letsencryptStaging": "בואו נצפין (שלבי)",
+      "custom": "ספריית ACME מותאמת אישית"
+    },
+    "directoryUrl": {
+      "label": "כתובת אתר של ספריית ACME",
+      "description": "רק עבור רשות אישורים מותאמת אישית. חייבת להיות כתובת URL מסוג https."
+    },
+    "challengeType": {
+      "label": "סוג האתגר",
+      "description": "איך להוכיח שאתה הבעלים של הדומיין.",
+      "http": "HTTP - דורש גישה לפורט 80 מהאינטרנט",
+      "cloudflare": "DNS (Cloudflare) - דורש אסימון API של Cloudflare"
+    },
+    "cloudflareToken": {
+      "label": "אסימון API של Cloudflare",
+      "description": "אסימון בטווח עם הרשאת עריכה של אזור:DNS: עבור הדומיין שלך."
+    }
+  },
+  "status": {
+    "title": "סטטוס התעודה",
+    "none": "אין תעודה",
+    "names": "כריכות {{names}}",
+    "issuer": "הונפק על ידי {{issuer}}",
+    "expires": "פג תוקף {{date}}",
+    "lastIssued": "הוצאה אחרונה {{date}}",
+    "lastError": "ניסיון אחרון נכשל: {{error}}",
+    "missing": "הגדר את הדומיין, האימייל והשדות הנדרשים עבור סוג האתגר שלך, ולאחר מכן שמור, לפני בקשת האישור.",
+    "request": "בקשת תעודה עכשיו",
+    "requesting": "מבקש תעודה...",
+    "issued": "תעודה הונפקה והותקנה"
+  }
+}

plugins/acme-ssl/locales/translated/hi_IN.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Manage ACME certificates",
+      "description": "See the certificate status and request a new certificate now."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renew automatically",
+      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
+    },
+    "domain": {
+      "label": "डोमेन",
+      "description": "प्रमाणपत्र के लिए सार्वजनिक डोमेन नाम।",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "ईमेल",
+      "description": "Contact email for the ACME account and expiry notices.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "प्रमाणपत्र प्राधिकरण",
+      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Custom ACME directory"
+    },
+    "directoryUrl": {
+      "label": "ACME directory URL",
+      "description": "Only for a custom certificate authority. Must be an https URL."
+    },
+    "challengeType": {
+      "label": "Challenge type",
+      "description": "How to prove you own the domain.",
+      "http": "HTTP - needs port 80 reachable from the internet",
+      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "आपके डोमेन के लिए Zone:DNS:Edit अनुमति वाला स्कोप्ड टोकन।"
+    }
+  },
+  "status": {
+    "title": "Certificate status",
+    "none": "कोई प्रमाणपत्र नहीं",
+    "names": "Covers {{names}}",
+    "issuer": "Issued by {{issuer}}",
+    "expires": "{{date}} को समाप्त होगा",
+    "lastIssued": "अंतिम जारी: {{date}}",
+    "lastError": "Last attempt failed: {{error}}",
+    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
+    "request": "Request certificate now",
+    "requesting": "प्रमाणपत्र अनुरोध किया जा रहा है...",
+    "issued": "Certificate issued and installed"
+  }
+}

plugins/acme-ssl/locales/translated/hu_HU.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "ACME tanúsítványok kezelése",
+      "description": "Tekintse meg a tanúsítvány állapotát, és igényeljen új tanúsítványt most."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Automatikus megújítás",
+      "description": "Naponta kétszer ellenőrizd, és szerezz be új tanúsítványt, ha nincs még tanúsítvány, ha nem fedi le a domaint, vagy ha 30 napon belül lejár."
+    },
+    "domain": {
+      "label": "Domain",
+      "description": "A tanúsítvány nyilvános domainneve.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "Email",
+      "description": "Az ACME fiókkal és a lejárati értesítésekkel kapcsolatos elérhetőségi e-mail cím.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Tanúsítványkibocsátó",
+      "description": "Hol lehet beszerezni a tanúsítványt? Használjon előzetes tesztelést a Let's Encrypt sebességkorlátainak elérése nélkül.",
+      "letsencrypt": "Titkosítsunk",
+      "letsencryptStaging": "Titkosítsuk (előkészítés)",
+      "custom": "Egyéni ACME címtár"
+    },
+    "directoryUrl": {
+      "label": "ACME könyvtár URL-címe",
+      "description": "Csak egyéni hitelesítésszolgáltató esetén. Https URL-címnek kell lennie."
+    },
+    "challengeType": {
+      "label": "Kihívás típusa",
+      "description": "Hogyan bizonyíthatod, hogy te vagy a domain tulajdonosa?",
+      "http": "HTTP – internetről elérhető 80-as port szükséges",
+      "cloudflare": "DNS (Cloudflare) – Cloudflare API token szükséges"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "Hatókörbe tartozó token Zóna:DNS:Szerkesztés engedéllyel a domainhez."
+    }
+  },
+  "status": {
+    "title": "Tanúsítvány állapota",
+    "none": "Nincs tanúsítvány",
+    "names": "Borítók {{names}}",
+    "issuer": "Kibocsátó: {{issuer}}",
+    "expires": "Lejár {{date}}",
+    "lastIssued": "Utolsó kiadás {{date}}",
+    "lastError": "Utolsó kísérlet sikertelen: {{error}}",
+    "missing": "Állítsa be a domaint, az e-mail címet és a kihívástípushoz szükséges mezőket, majd mentse el a beállításokat a tanúsítvány igénylése előtt.",
+    "request": "Igényeljen tanúsítványt most",
+    "requesting": "Tanúsítvány kérése...",
+    "issued": "Tanúsítvány kiállítva és telepítve"
+  }
+}

plugins/acme-ssl/locales/translated/id_ID.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Manage ACME certificates",
+      "description": "See the certificate status and request a new certificate now."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renew automatically",
+      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
+    },
+    "domain": {
+      "label": "Domain",
+      "description": "The public domain name for the certificate.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "Email",
+      "description": "Contact email for the ACME account and expiry notices.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Certificate authority",
+      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Custom ACME directory"
+    },
+    "directoryUrl": {
+      "label": "ACME directory URL",
+      "description": "Only for a custom certificate authority. Must be an https URL."
+    },
+    "challengeType": {
+      "label": "Challenge type",
+      "description": "How to prove you own the domain.",
+      "http": "HTTP - needs port 80 reachable from the internet",
+      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "Scoped token with Zone:DNS:Edit permission for your domain."
+    }
+  },
+  "status": {
+    "title": "Certificate status",
+    "none": "No certificate",
+    "names": "Covers {{names}}",
+    "issuer": "Issued by {{issuer}}",
+    "expires": "Expires {{date}}",
+    "lastIssued": "Last issued {{date}}",
+    "lastError": "Last attempt failed: {{error}}",
+    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
+    "request": "Request certificate now",
+    "requesting": "Requesting certificate...",
+    "issued": "Certificate issued and installed"
+  }
+}

plugins/acme-ssl/locales/translated/it_IT.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Gestire i certificati ACME",
+      "description": "Verifica lo stato del certificato e richiedine uno nuovo ora."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Rinnovo automatico",
+      "description": "Controlla due volte al giorno e richiedi un nuovo certificato se non ne trovi uno, se non copre il dominio o se scade entro 30 giorni."
+    },
+    "domain": {
+      "label": "Dominio",
+      "description": "Il nome di dominio pubblico per il certificato.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "Email",
+      "description": "Indirizzo email per contattare l'account ACME e per ricevere avvisi di scadenza.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Autorità di certificazione",
+      "description": "Dove ottenere il certificato. Utilizza un ambiente di staging per effettuare dei test senza superare i limiti di frequenza di Let's Encrypt.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Elenco personalizzato ACME"
+    },
+    "directoryUrl": {
+      "label": "URL della directory ACME",
+      "description": "Solo per un'autorità di certificazione personalizzata. Deve essere un URL HTTPS."
+    },
+    "challengeType": {
+      "label": "Tipo di sfida",
+      "description": "Come dimostrare di essere il proprietario del dominio.",
+      "http": "HTTP - richiede che la porta 80 sia raggiungibile da Internet",
+      "cloudflare": "DNS (Cloudflare) - richiede un token API di Cloudflare"
+    },
+    "cloudflareToken": {
+      "label": "Token API di Cloudflare",
+      "description": "Token con autorizzazione Zone:DNS:Edit per il tuo dominio."
+    }
+  },
+  "status": {
+    "title": "Stato del certificato",
+    "none": "Nessun certificato",
+    "names": "Copertine {{names}}",
+    "issuer": "Emesso da {{issuer}}",
+    "expires": "Scade il {{date}}",
+    "lastIssued": "Ultimo rilascio il {{date}}",
+    "lastError": "Ultimo tentativo fallito: {{error}}",
+    "missing": "Imposta il dominio, l'indirizzo email e i campi richiesti dal tuo tipo di sfida, quindi salva prima di richiedere un certificato.",
+    "request": "Richiedi subito il certificato",
+    "requesting": "Richiesta certificato in corso...",
+    "issued": "Certificato rilasciato e installato"
+  }
+}

plugins/acme-ssl/locales/translated/ja_JP.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "ACME証明書を管理する",
+      "description": "証明書のステータスを確認し、新しい証明書を今すぐリクエストしてください。"
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "自動更新",
+      "description": "1日に2回確認し、証明書がない場合、ドメインをカバーしていない場合、または有効期限が30日以内に切れる場合は、新しい証明書を取得してください。"
+    },
+    "domain": {
+      "label": "ドメイン",
+      "description": "証明書の公開ドメイン名。",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "メールアドレス",
+      "description": "ACMEアカウントおよび有効期限通知に関する連絡先メールアドレス。",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "認証局",
+      "description": "証明書の入手方法。Let's Encryptのレート制限に抵触しないよう、ステージング環境を使用してテストしてください。",
+      "letsencrypt": "レッツ・エンクリプト",
+      "letsencryptStaging": "Let's Encrypt（ステージング環境）",
+      "custom": "カスタムACMEディレクトリ"
+    },
+    "directoryUrl": {
+      "label": "ACMEディレクトリURL",
+      "description": "カスタム認証局のみ対象です。URLはhttpsでなければなりません。"
+    },
+    "challengeType": {
+      "label": "チャレンジの種類",
+      "description": "ドメインの所有権を証明する方法。",
+      "http": "HTTP - インターネットからアクセス可能なポート80が必要です",
+      "cloudflare": "DNS（Cloudflare） - Cloudflare APIトークンが必要です"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare APIトークン",
+      "description": "ドメインに対するZone:DNS:Edit権限を持つスコープ付きトークン。"
+    }
+  },
+  "status": {
+    "title": "証明書のステータス",
+    "none": "証明書なし",
+    "names": "カバー {{names}}",
+    "issuer": "{{issuer}} によって発行されました",
+    "expires": "有効期限 {{date}}",
+    "lastIssued": "最終発行日 {{date}}",
+    "lastError": "最後の試行が失敗しました: {{error}}",
+    "missing": "証明書をリクエストする前に、ドメイン、メールアドレス、およびチャレンジタイプに必要なフィールドを設定して保存してください。",
+    "request": "今すぐ証明書を申請する",
+    "requesting": "証明書をリクエスト中...",
+    "issued": "証明書が発行され、インストールされました。"
+  }
+}

plugins/acme-ssl/locales/translated/ko_KR.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "ACME 인증서를 관리하세요",
+      "description": "인증서 상태를 확인하고 지금 바로 새 인증서를 신청하세요."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "자동으로 갱신됩니다",
+      "description": "하루에 두 번 확인하고, 인증서가 없거나, 도메인을 포함하지 않거나, 30일 이내에 만료되는 경우 새 인증서를 발급받으세요."
+    },
+    "domain": {
+      "label": "도메인",
+      "description": "인증서에 사용할 공개 도메인 이름입니다.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "이메일",
+      "description": "ACME 계정 및 만료 알림을 받을 수 있는 이메일 주소입니다.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "인증 기관",
+      "description": "인증서는 어디서 발급받나요? Let's Encrypt의 사용량 제한에 걸리지 않고 테스트하려면 스테이징 환경을 사용하세요.",
+      "letsencrypt": "렛츠인크립트",
+      "letsencryptStaging": "렛츠인크립트(스테이징)",
+      "custom": "사용자 지정 ACME 디렉토리"
+    },
+    "directoryUrl": {
+      "label": "ACME 디렉토리 URL",
+      "description": "사용자 지정 인증 기관에만 해당됩니다. URL은 HTTPS여야 합니다."
+    },
+    "challengeType": {
+      "label": "도전 유형",
+      "description": "도메인 소유권을 증명하는 방법.",
+      "http": "HTTP - 인터넷에서 접근 가능한 80번 포트가 필요합니다.",
+      "cloudflare": "DNS(클라우드플레어) - 클라우드플레어 API 토큰이 필요합니다."
+    },
+    "cloudflareToken": {
+      "label": "클라우드플레어 API 토큰",
+      "description": "도메인에 대한 Zone:DNS:Edit 권한이 있는 범위 지정 토큰입니다."
+    }
+  },
+  "status": {
+    "title": "인증서 상태",
+    "none": "인증서 없음",
+    "names": "{{names}}을 덮습니다.",
+    "issuer": "{{issuer}}에서 발행함",
+    "expires": "만료일: {{date}}",
+    "lastIssued": "마지막 발급일: {{date}}",
+    "lastError": "마지막 시도가 실패했습니다: {{error}}",
+    "missing": "인증서를 요청하기 전에 도메인, 이메일 및 인증 유형에 필요한 필드를 설정하고 저장하세요.",
+    "request": "지금 인증서를 요청하세요",
+    "requesting": "인증서 요청 중...",
+    "issued": "인증서가 발급 및 설치되었습니다."
+  }
+}

plugins/acme-ssl/locales/translated/nl_NL.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Beheer ACME-certificaten",
+      "description": "Bekijk de certificaatstatus en vraag nu een nieuw certificaat aan."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Automatisch verlengen",
+      "description": "Controleer tweemaal per dag en vraag een nieuw certificaat aan als er geen certificaat is, het huidige certificaat het domein niet dekt of het huidige certificaat binnen 30 dagen verloopt."
+    },
+    "domain": {
+      "label": "Domein",
+      "description": "De publieke domeinnaam voor het certificaat.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "E-mail",
+      "description": "Contact-e-mailadres voor het ACME-account en meldingen over vervaldatums.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Certificeringsinstantie",
+      "description": "Waar kan ik het certificaat verkrijgen? Gebruik een testomgeving om te testen zonder de limieten van Let's Encrypt te overschrijden.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (testomgeving)",
+      "custom": "Aangepaste ACME-directory"
+    },
+    "directoryUrl": {
+      "label": "ACME-directory-URL",
+      "description": "Alleen voor een aangepaste certificeringsinstantie. Moet een https-URL zijn."
+    },
+    "challengeType": {
+      "label": "Uitdagingstype",
+      "description": "Hoe bewijs je dat je de domeinnaam bezit?",
+      "http": "HTTP - vereist poort 80 die bereikbaar is vanaf internet.",
+      "cloudflare": "DNS (Cloudflare) - vereist een Cloudflare API-token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API-token",
+      "description": "Een scoped token met Zone:DNS:Edit-machtiging voor uw domein."
+    }
+  },
+  "status": {
+    "title": "Certificaatstatus",
+    "none": "Geen certificaat",
+    "names": "Omslagen {{names}}",
+    "issuer": "Uitgegeven door {{issuer}}",
+    "expires": "Verloopt {{date}}",
+    "lastIssued": "Laatst uitgegeven {{date}}",
+    "lastError": "Laatste poging mislukt: {{error}}",
+    "missing": "Stel het domein, het e-mailadres en de velden in die uw uitdagingstype vereist, sla de wijzigingen op en vraag vervolgens een certificaat aan.",
+    "request": "Vraag nu uw certificaat aan",
+    "requesting": "Certificaat aanvragen...",
+    "issued": "Certificaat afgegeven en geïnstalleerd"
+  }
+}

plugins/acme-ssl/locales/translated/no_NO.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Manage ACME certificates",
+      "description": "See the certificate status and request a new certificate now."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renew automatically",
+      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
+    },
+    "domain": {
+      "label": "Domain",
+      "description": "The public domain name for the certificate.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "E-post",
+      "description": "Contact email for the ACME account and expiry notices.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Certificate authority",
+      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Custom ACME directory"
+    },
+    "directoryUrl": {
+      "label": "ACME directory URL",
+      "description": "Only for a custom certificate authority. Must be an https URL."
+    },
+    "challengeType": {
+      "label": "Challenge type",
+      "description": "How to prove you own the domain.",
+      "http": "HTTP - needs port 80 reachable from the internet",
+      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "Scoped token with Zone:DNS:Edit permission for your domain."
+    }
+  },
+  "status": {
+    "title": "Certificate status",
+    "none": "No certificate",
+    "names": "Covers {{names}}",
+    "issuer": "Issued by {{issuer}}",
+    "expires": "Expires {{date}}",
+    "lastIssued": "Last issued {{date}}",
+    "lastError": "Last attempt failed: {{error}}",
+    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
+    "request": "Request certificate now",
+    "requesting": "Requesting certificate...",
+    "issued": "Certificate issued and installed"
+  }
+}

plugins/acme-ssl/locales/translated/pl_PL.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Manage ACME certificates",
+      "description": "See the certificate status and request a new certificate now."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renew automatically",
+      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
+    },
+    "domain": {
+      "label": "Domena",
+      "description": "Publiczna nazwa domeny certyfikatu.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "E-mail",
+      "description": "Contact email for the ACME account and expiry notices.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Urząd certyfikacji (CA)",
+      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Custom ACME directory"
+    },
+    "directoryUrl": {
+      "label": "ACME directory URL",
+      "description": "Only for a custom certificate authority. Must be an https URL."
+    },
+    "challengeType": {
+      "label": "Challenge type",
+      "description": "How to prove you own the domain.",
+      "http": "HTTP - needs port 80 reachable from the internet",
+      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "Token zakresowy z uprawnieniem Zone:DNS:Edit dla Twojej domeny."
+    }
+  },
+  "status": {
+    "title": "Certificate status",
+    "none": "Brak certyfikatu",
+    "names": "Covers {{names}}",
+    "issuer": "Issued by {{issuer}}",
+    "expires": "Wygasa {{date}}",
+    "lastIssued": "Ostatnio wystawiono {{date}}",
+    "lastError": "Last attempt failed: {{error}}",
+    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
+    "request": "Request certificate now",
+    "requesting": "Żądanie certyfikatu...",
+    "issued": "Certificate issued and installed"
+  }
+}

plugins/acme-ssl/locales/translated/pt_BR.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Manage ACME certificates",
+      "description": "See the certificate status and request a new certificate now."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renew automatically",
+      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
+    },
+    "domain": {
+      "label": "Domain",
+      "description": "The public domain name for the certificate.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "Email",
+      "description": "Contact email for the ACME account and expiry notices.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Certificate authority",
+      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Custom ACME directory"
+    },
+    "directoryUrl": {
+      "label": "ACME directory URL",
+      "description": "Only for a custom certificate authority. Must be an https URL."
+    },
+    "challengeType": {
+      "label": "Challenge type",
+      "description": "How to prove you own the domain.",
+      "http": "HTTP - needs port 80 reachable from the internet",
+      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "Scoped token with Zone:DNS:Edit permission for your domain."
+    }
+  },
+  "status": {
+    "title": "Certificate status",
+    "none": "No certificate",
+    "names": "Covers {{names}}",
+    "issuer": "Issued by {{issuer}}",
+    "expires": "Expires {{date}}",
+    "lastIssued": "Last issued {{date}}",
+    "lastError": "Last attempt failed: {{error}}",
+    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
+    "request": "Request certificate now",
+    "requesting": "Requesting certificate...",
+    "issued": "Certificate issued and installed"
+  }
+}

plugins/acme-ssl/locales/translated/pt_PT.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Manage ACME certificates",
+      "description": "See the certificate status and request a new certificate now."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renew automatically",
+      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
+    },
+    "domain": {
+      "label": "Domínio",
+      "description": "O nome de domínio público para o certificado.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "E-mail",
+      "description": "Contact email for the ACME account and expiry notices.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Autoridade de certificação",
+      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Custom ACME directory"
+    },
+    "directoryUrl": {
+      "label": "ACME directory URL",
+      "description": "Only for a custom certificate authority. Must be an https URL."
+    },
+    "challengeType": {
+      "label": "Challenge type",
+      "description": "How to prove you own the domain.",
+      "http": "HTTP - needs port 80 reachable from the internet",
+      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "Token com âmbito e permissão Zone:DNS:Edit para o seu domínio."
+    }
+  },
+  "status": {
+    "title": "Certificate status",
+    "none": "Sem certificado",
+    "names": "Covers {{names}}",
+    "issuer": "Issued by {{issuer}}",
+    "expires": "Expira a {{date}}",
+    "lastIssued": "Última emissão a {{date}}",
+    "lastError": "Last attempt failed: {{error}}",
+    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
+    "request": "Request certificate now",
+    "requesting": "A solicitar certificado...",
+    "issued": "Certificate issued and installed"
+  }
+}

plugins/acme-ssl/locales/translated/ro_RO.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Gestionați certificatele ACME",
+      "description": "Vedeți starea certificatului și solicitați un certificat nou acum."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Reînnoire automată",
+      "description": "Verificați de două ori pe zi și obțineți un certificat nou atunci când nu există, nu acoperă domeniul sau expiră în termen de 30 de zile."
+    },
+    "domain": {
+      "label": "Domeniu",
+      "description": "Numele de domeniu public pentru certificat.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "E-mail",
+      "description": "Adresă de e-mail de contact pentru contul ACME și notificări de expirare.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Autoritatea de certificare",
+      "description": "Unde se obține certificatul. Folosește staging-ul pentru a testa fără a atinge limitele de rată Let's Encrypt.",
+      "letsencrypt": "Să criptăm",
+      "letsencryptStaging": "Să criptăm (punct în scenă)",
+      "custom": "Director ACME personalizat"
+    },
+    "directoryUrl": {
+      "label": "URL-ul directorului ACME",
+      "description": "Numai pentru o autoritate de certificare personalizată. Trebuie să fie o adresă URL https."
+    },
+    "challengeType": {
+      "label": "Tipul de provocare",
+      "description": "Cum să dovedești că deții domeniul.",
+      "http": "HTTP - necesită ca portul 80 să fie accesibil de pe internet",
+      "cloudflare": "DNS (Cloudflare) - necesită un token API Cloudflare"
+    },
+    "cloudflareToken": {
+      "label": "Tokenul API Cloudflare",
+      "description": "Token cu scop specific și permisiune Zone:DNS:Edit pentru domeniul dvs."
+    }
+  },
+  "status": {
+    "title": "Starea certificatului",
+    "none": "Fără certificat",
+    "names": "Acoperă {{names}}",
+    "issuer": "Emis de {{issuer}}",
+    "expires": "Expiră la {{date}}",
+    "lastIssued": "Ultima emisiune {{date}}",
+    "lastError": "Ultima încercare a eșuat: {{error}}",
+    "missing": "Setați domeniul, adresa de e-mail și câmpurile necesare tipului dvs. de provocare, apoi salvați, înainte de a solicita un certificat.",
+    "request": "Solicitați certificatul acum",
+    "requesting": "Se solicită certificatul...",
+    "issued": "Certificat emis și instalat"
+  }
+}

plugins/acme-ssl/locales/translated/ru_RU.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Manage ACME certificates",
+      "description": "See the certificate status and request a new certificate now."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renew automatically",
+      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
+    },
+    "domain": {
+      "label": "Домен",
+      "description": "Общедоступное доменное имя для сертификата.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "Email",
+      "description": "Contact email for the ACME account and expiry notices.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Центр сертификации",
+      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Custom ACME directory"
+    },
+    "directoryUrl": {
+      "label": "ACME directory URL",
+      "description": "Only for a custom certificate authority. Must be an https URL."
+    },
+    "challengeType": {
+      "label": "Challenge type",
+      "description": "How to prove you own the domain.",
+      "http": "HTTP - needs port 80 reachable from the internet",
+      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "Токен с ограниченной областью действия и разрешением Zone:DNS:Edit для вашего домена."
+    }
+  },
+  "status": {
+    "title": "Certificate status",
+    "none": "Сертификат отсутствует",
+    "names": "Covers {{names}}",
+    "issuer": "Issued by {{issuer}}",
+    "expires": "Истекает {{date}}",
+    "lastIssued": "Последний выпуск {{date}}",
+    "lastError": "Last attempt failed: {{error}}",
+    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
+    "request": "Request certificate now",
+    "requesting": "Запрос сертификата...",
+    "issued": "Certificate issued and installed"
+  }
+}

plugins/acme-ssl/locales/translated/sr_SP.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Manage ACME certificates",
+      "description": "See the certificate status and request a new certificate now."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renew automatically",
+      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
+    },
+    "domain": {
+      "label": "Domain",
+      "description": "The public domain name for the certificate.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "Email",
+      "description": "Contact email for the ACME account and expiry notices.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Certificate authority",
+      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Custom ACME directory"
+    },
+    "directoryUrl": {
+      "label": "ACME directory URL",
+      "description": "Only for a custom certificate authority. Must be an https URL."
+    },
+    "challengeType": {
+      "label": "Challenge type",
+      "description": "How to prove you own the domain.",
+      "http": "HTTP - needs port 80 reachable from the internet",
+      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "Scoped token with Zone:DNS:Edit permission for your domain."
+    }
+  },
+  "status": {
+    "title": "Certificate status",
+    "none": "No certificate",
+    "names": "Covers {{names}}",
+    "issuer": "Issued by {{issuer}}",
+    "expires": "Expires {{date}}",
+    "lastIssued": "Last issued {{date}}",
+    "lastError": "Last attempt failed: {{error}}",
+    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
+    "request": "Request certificate now",
+    "requesting": "Requesting certificate...",
+    "issued": "Certificate issued and installed"
+  }
+}

plugins/acme-ssl/locales/translated/sv_SE.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Manage ACME certificates",
+      "description": "See the certificate status and request a new certificate now."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renew automatically",
+      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
+    },
+    "domain": {
+      "label": "Domain",
+      "description": "The public domain name for the certificate.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "Email",
+      "description": "Contact email for the ACME account and expiry notices.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Certificate authority",
+      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Custom ACME directory"
+    },
+    "directoryUrl": {
+      "label": "ACME directory URL",
+      "description": "Only for a custom certificate authority. Must be an https URL."
+    },
+    "challengeType": {
+      "label": "Challenge type",
+      "description": "How to prove you own the domain.",
+      "http": "HTTP - needs port 80 reachable from the internet",
+      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "Scoped token with Zone:DNS:Edit permission for your domain."
+    }
+  },
+  "status": {
+    "title": "Certificate status",
+    "none": "No certificate",
+    "names": "Covers {{names}}",
+    "issuer": "Issued by {{issuer}}",
+    "expires": "Expires {{date}}",
+    "lastIssued": "Last issued {{date}}",
+    "lastError": "Last attempt failed: {{error}}",
+    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
+    "request": "Request certificate now",
+    "requesting": "Requesting certificate...",
+    "issued": "Certificate issued and installed"
+  }
+}

plugins/acme-ssl/locales/translated/th_TH.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Manage ACME certificates",
+      "description": "See the certificate status and request a new certificate now."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renew automatically",
+      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
+    },
+    "domain": {
+      "label": "Domain",
+      "description": "The public domain name for the certificate.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "Email",
+      "description": "Contact email for the ACME account and expiry notices.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Certificate authority",
+      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Custom ACME directory"
+    },
+    "directoryUrl": {
+      "label": "ACME directory URL",
+      "description": "Only for a custom certificate authority. Must be an https URL."
+    },
+    "challengeType": {
+      "label": "Challenge type",
+      "description": "How to prove you own the domain.",
+      "http": "HTTP - needs port 80 reachable from the internet",
+      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "Scoped token with Zone:DNS:Edit permission for your domain."
+    }
+  },
+  "status": {
+    "title": "Certificate status",
+    "none": "No certificate",
+    "names": "Covers {{names}}",
+    "issuer": "Issued by {{issuer}}",
+    "expires": "Expires {{date}}",
+    "lastIssued": "Last issued {{date}}",
+    "lastError": "Last attempt failed: {{error}}",
+    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
+    "request": "Request certificate now",
+    "requesting": "Requesting certificate...",
+    "issued": "Certificate issued and installed"
+  }
+}

plugins/acme-ssl/locales/translated/tr_TR.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Manage ACME certificates",
+      "description": "See the certificate status and request a new certificate now."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renew automatically",
+      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
+    },
+    "domain": {
+      "label": "Alan Adı",
+      "description": "Sertifika için genel alan adı.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "E-posta",
+      "description": "Contact email for the ACME account and expiry notices.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Sertifika yetkilisi",
+      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Custom ACME directory"
+    },
+    "directoryUrl": {
+      "label": "ACME directory URL",
+      "description": "Only for a custom certificate authority. Must be an https URL."
+    },
+    "challengeType": {
+      "label": "Challenge type",
+      "description": "How to prove you own the domain.",
+      "http": "HTTP - needs port 80 reachable from the internet",
+      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "Alan adınız için Zone:DNS:Edit iznine sahip kapsamlı belirteç."
+    }
+  },
+  "status": {
+    "title": "Certificate status",
+    "none": "Sertifika yok",
+    "names": "Covers {{names}}",
+    "issuer": "Issued by {{issuer}}",
+    "expires": "Son kullanma: {{date}}",
+    "lastIssued": "Son veriliş: {{date}}",
+    "lastError": "Last attempt failed: {{error}}",
+    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
+    "request": "Request certificate now",
+    "requesting": "Sertifika isteniyor...",
+    "issued": "Certificate issued and installed"
+  }
+}

plugins/acme-ssl/locales/translated/uk_UA.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Manage ACME certificates",
+      "description": "See the certificate status and request a new certificate now."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renew automatically",
+      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
+    },
+    "domain": {
+      "label": "Domain",
+      "description": "The public domain name for the certificate.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "Email",
+      "description": "Contact email for the ACME account and expiry notices.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Certificate authority",
+      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Custom ACME directory"
+    },
+    "directoryUrl": {
+      "label": "ACME directory URL",
+      "description": "Only for a custom certificate authority. Must be an https URL."
+    },
+    "challengeType": {
+      "label": "Challenge type",
+      "description": "How to prove you own the domain.",
+      "http": "HTTP - needs port 80 reachable from the internet",
+      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "Scoped token with Zone:DNS:Edit permission for your domain."
+    }
+  },
+  "status": {
+    "title": "Certificate status",
+    "none": "No certificate",
+    "names": "Covers {{names}}",
+    "issuer": "Issued by {{issuer}}",
+    "expires": "Expires {{date}}",
+    "lastIssued": "Last issued {{date}}",
+    "lastError": "Last attempt failed: {{error}}",
+    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
+    "request": "Request certificate now",
+    "requesting": "Requesting certificate...",
+    "issued": "Certificate issued and installed"
+  }
+}

plugins/acme-ssl/locales/translated/vi_VN.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Manage ACME certificates",
+      "description": "See the certificate status and request a new certificate now."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renew automatically",
+      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
+    },
+    "domain": {
+      "label": "Tên miền",
+      "description": "Tên miền công khai để cấp chứng chỉ.",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "Email",
+      "description": "Contact email for the ACME account and expiry notices.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "Cơ quan chứng thực",
+      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Custom ACME directory"
+    },
+    "directoryUrl": {
+      "label": "ACME directory URL",
+      "description": "Only for a custom certificate authority. Must be an https URL."
+    },
+    "challengeType": {
+      "label": "Challenge type",
+      "description": "How to prove you own the domain.",
+      "http": "HTTP - needs port 80 reachable from the internet",
+      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "Token có phạm vi với quyền Zone:DNS:Edit cho tên miền của bạn."
+    }
+  },
+  "status": {
+    "title": "Certificate status",
+    "none": "Không có chứng chỉ",
+    "names": "Covers {{names}}",
+    "issuer": "Issued by {{issuer}}",
+    "expires": "Hết hạn {{date}}",
+    "lastIssued": "Cấp lần cuối {{date}}",
+    "lastError": "Last attempt failed: {{error}}",
+    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
+    "request": "Request certificate now",
+    "requesting": "Đang yêu cầu chứng chỉ...",
+    "issued": "Certificate issued and installed"
+  }
+}

plugins/acme-ssl/locales/translated/zh_CN.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Manage ACME certificates",
+      "description": "See the certificate status and request a new certificate now."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renew automatically",
+      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
+    },
+    "domain": {
+      "label": "域名",
+      "description": "证书的公共域名。",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "邮箱",
+      "description": "Contact email for the ACME account and expiry notices.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "证书颁发机构",
+      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Custom ACME directory"
+    },
+    "directoryUrl": {
+      "label": "ACME directory URL",
+      "description": "Only for a custom certificate authority. Must be an https URL."
+    },
+    "challengeType": {
+      "label": "Challenge type",
+      "description": "How to prove you own the domain.",
+      "http": "HTTP - needs port 80 reachable from the internet",
+      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "具有您域名的 Zone:DNS:Edit 权限的限定作用域令牌。"
+    }
+  },
+  "status": {
+    "title": "Certificate status",
+    "none": "无证书",
+    "names": "Covers {{names}}",
+    "issuer": "Issued by {{issuer}}",
+    "expires": "过期于 {{date}}",
+    "lastIssued": "上次签发于 {{date}}",
+    "lastError": "Last attempt failed: {{error}}",
+    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
+    "request": "Request certificate now",
+    "requesting": "正在请求证书...",
+    "issued": "Certificate issued and installed"
+  }
+}

plugins/acme-ssl/locales/translated/zh_TW.json

@@ -0,0 +1,58 @@
+{
+  "permissions": {
+    "manage": {
+      "title": "Manage ACME certificates",
+      "description": "See the certificate status and request a new certificate now."
+    }
+  },
+  "settings": {
+    "autoRenew": {
+      "label": "Renew automatically",
+      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
+    },
+    "domain": {
+      "label": "網域",
+      "description": "憑證使用的公開網域名稱。",
+      "placeholder": "termix.example.com"
+    },
+    "email": {
+      "label": "電子郵件",
+      "description": "Contact email for the ACME account and expiry notices.",
+      "placeholder": "admin@example.com"
+    },
+    "provider": {
+      "label": "憑證授權中心",
+      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
+      "letsencrypt": "Let's Encrypt",
+      "letsencryptStaging": "Let's Encrypt (staging)",
+      "custom": "Custom ACME directory"
+    },
+    "directoryUrl": {
+      "label": "ACME directory URL",
+      "description": "Only for a custom certificate authority. Must be an https URL."
+    },
+    "challengeType": {
+      "label": "Challenge type",
+      "description": "How to prove you own the domain.",
+      "http": "HTTP - needs port 80 reachable from the internet",
+      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
+    },
+    "cloudflareToken": {
+      "label": "Cloudflare API token",
+      "description": "具有您網域 Zone:DNS:Edit 權限的限定範圍權杖。"
+    }
+  },
+  "status": {
+    "title": "Certificate status",
+    "none": "無憑證",
+    "names": "Covers {{names}}",
+    "issuer": "Issued by {{issuer}}",
+    "expires": "到期日 {{date}}",
+    "lastIssued": "上次簽發日期 {{date}}",
+    "lastError": "Last attempt failed: {{error}}",
+    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
+    "request": "Request certificate now",
+    "requesting": "請求憑證中...",
+    "issued": "Certificate issued and installed"
+  }
+}

plugins/acme-ssl/manifest.json

@@ -0,0 +1,122 @@
+{
+  "id": "acme-ssl",
+  "name": "ACME Certificates",
+  "version": "1.0.0",
+  "description": "Gets and renews the Termix HTTPS certificate from Let's Encrypt or another ACME provider.",
+  "author": {
+    "name": "Termix"
+  },
+  "license": "MIT",
+  "repository": "https://github.com/Termix-SSH/Termix",
+  "category": "Access & Security",
+  "icon": "Lock",
+  "engine": {
+    "termix": ">=2.9.0",
+    "api": "1"
+  },
+  "capabilities": [
+    "system:tls",
+    "kv:own",
+    "secrets:own",
+    "network:outbound",
+    "network:serve",
+    "notify:send",
+    "ui:surface"
+  ],
+  "contributes": {
+    "permissions": [
+      {
+        "name": "manage",
+        "titleKey": "permissions.manage.title",
+        "descriptionKey": "permissions.manage.description",
+        "defaultRoles": ["admin"]
+      }
+    ],
+    "settings": {
+      "admin": [
+        {
+          "key": "status",
+          "type": "custom",
+          "component": "status"
+        },
+        {
+          "key": "autoRenew",
+          "type": "boolean",
+          "labelKey": "settings.autoRenew.label",
+          "descriptionKey": "settings.autoRenew.description",
+          "default": false
+        },
+        {
+          "key": "domain",
+          "type": "string",
+          "labelKey": "settings.domain.label",
+          "descriptionKey": "settings.domain.description",
+          "placeholderKey": "settings.domain.placeholder",
+          "default": ""
+        },
+        {
+          "key": "email",
+          "type": "string",
+          "labelKey": "settings.email.label",
+          "descriptionKey": "settings.email.description",
+          "placeholderKey": "settings.email.placeholder",
+          "default": ""
+        },
+        {
+          "key": "provider",
+          "type": "select",
+          "labelKey": "settings.provider.label",
+          "descriptionKey": "settings.provider.description",
+          "default": "letsencrypt",
+          "options": [
+            {
+              "value": "letsencrypt",
+              "labelKey": "settings.provider.letsencrypt"
+            },
+            {
+              "value": "letsencrypt-staging",
+              "labelKey": "settings.provider.letsencryptStaging"
+            },
+            {
+              "value": "custom",
+              "labelKey": "settings.provider.custom"
+            }
+          ]
+        },
+        {
+          "key": "directoryUrl",
+          "type": "string",
+          "labelKey": "settings.directoryUrl.label",
+          "descriptionKey": "settings.directoryUrl.description",
+          "default": ""
+        },
+        {
+          "key": "challengeType",
+          "type": "select",
+          "labelKey": "settings.challengeType.label",
+          "descriptionKey": "settings.challengeType.description",
+          "default": "http-01",
+          "options": [
+            {
+              "value": "http-01",
+              "labelKey": "settings.challengeType.http"
+            },
+            {
+              "value": "dns-cloudflare",
+              "labelKey": "settings.challengeType.cloudflare"
+            }
+          ]
+        },
+        {
+          "key": "cloudflareToken",
+          "type": "secret",
+          "labelKey": "settings.cloudflareToken.label",
+          "descriptionKey": "settings.cloudflareToken.description"
+        }
+      ]
+    }
+  },
+  "locales": "locales",
+  "platforms": ["linux", "win32", "darwin"],
+  "desktop": "server"
+}

plugins/acme-ssl/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@termix-plugin/acme-ssl",
+  "private": true,
+  "version": "1.0.0",
+  "type": "module",
+  "scripts": {
+    "build": "termix-plugin build",
+    "test": "termix-plugin test",
+    "typecheck": "tsc -p .",
+    "validate": "termix-plugin validate"
+  },
+  "dependencies": {
+    "acme-client": "^5.4.0"
+  },
+  "devDependencies": {
+    "@termix/plugin-sdk": "^1.0.0",
+    "@testing-library/dom": "^10.4.2",
+    "@testing-library/react": "^16.3.3",
+    "@types/node": "^26.2.0",
+    "@types/react": "^19.2.18",
+    "@types/react-dom": "^19.2.4",
+    "jsdom": "^30.0.1",
+    "vitest": "^4.1.11"
+  },
+  "peerDependencies": {
+    "@termix/plugin-sdk": "^1.0.0",
+    "express": "^5.2.1",
+    "react": "^19.2.8",
+    "sonner": "^2.0.8"
+  }
+}

plugins/acme-ssl/src/backend/acme.ts

@@ -0,0 +1,217 @@
+/**
+ * Issuing a certificate with acme-client. Every request it makes goes through
+ * ctx.fetch, so ACME traffic gets core's outbound guard and audit like any
+ * other plugin request.
+ */
+
+import * as acme from "acme-client";
+import type { PluginContext, PluginFetch } from "@termix/plugin-sdk/backend";
+import { createTxtRecord } from "./cloudflare.js";
+import { directoryUrlFor, type AcmeSettings } from "./settings.js";
+
+const ACCOUNT_KEY = "account";
+const DNS_PROPAGATION_MS = 30_000;
+
+interface StoredAccount {
+  directoryUrl: string;
+  sealedKey: string;
+  url: string | null;
+}
+
+export interface IssuedCertificate {
+  certificate: string;
+  privateKey: string;
+}
+
+type AxiosLikeConfig = {
+  url?: string;
+  method?: string;
+  headers?: unknown;
+  data?: unknown;
+  timeout?: number;
+  validateStatus?: ((status: number) => boolean) | null;
+};
+
+function plainHeaders(headers: unknown): Record<string, string> {
+  const source =
+    headers && typeof (headers as { toJSON?: unknown }).toJSON === "function"
+      ? (headers as { toJSON: () => Record<string, unknown> }).toJSON()
+      : ((headers ?? {}) as Record<string, unknown>);
+  const out: Record<string, string> = {};
+  for (const [key, value] of Object.entries(source)) {
+    if (typeof value === "string" || typeof value === "number") {
+      out[key] = String(value);
+    }
+  }
+  return out;
+}
+
+/**
+ * An axios adapter over ctx.fetch. It settles the way axios' own adapters do,
+ * because acme-client's retry interceptor relies on a rejected error that
+ * carries the response.
+ */
+export function createFetchAdapter(
+  fetch: PluginFetch,
+  allowPrivateHosts: readonly string[] = [],
+) {
+  return async (config: AxiosLikeConfig) => {
+    const method = (config.method ?? "get").toUpperCase();
+    const response = await fetch(String(config.url), {
+      method,
+      headers: plainHeaders(config.headers),
+      body:
+        config.data == null
+          ? undefined
+          : typeof config.data === "string"
+            ? config.data
+            : JSON.stringify(config.data),
+      timeoutMs: config.timeout || 30_000,
+      allowPrivateHosts,
+    });
+    const headers: Record<string, string> = {};
+    response.headers.forEach((value, key) => {
+      headers[key] = value;
+    });
+    const result = {
+      data: method === "HEAD" ? "" : await response.text(),
+      status: response.status,
+      statusText: response.statusText,
+      headers,
+      config,
+      request: {},
+    };
+    const validate = config.validateStatus;
+    if (!result.status || !validate || validate(result.status)) return result;
+    throw Object.assign(
+      new Error(`Request failed with status code ${result.status}`),
+      {
+        isAxiosError: true,
+        code: result.status >= 500 ? "ERR_BAD_RESPONSE" : "ERR_BAD_REQUEST",
+        config,
+        response: result,
+      },
+    );
+  };
+}
+
+/** Private hosts a custom directory on the local network may use. */
+function privateHostsFor(settings: AcmeSettings): string[] {
+  if (settings.provider !== "custom") return [];
+  try {
+    return [new URL(settings.directoryUrl).hostname];
+  } catch {
+    return [];
+  }
+}
+
+async function loadAccount(
+  ctx: PluginContext,
+  directoryUrl: string,
+): Promise<{ key: string; url: string | null }> {
+  const stored = (await ctx.kv.get(ACCOUNT_KEY)) as StoredAccount | null;
+  if (stored && stored.directoryUrl === directoryUrl) {
+    const key = await ctx.secrets.unseal(stored.sealedKey);
+    if (key) return { key, url: stored.url };
+  }
+  const key = (await acme.crypto.createPrivateKey()).toString();
+  await ctx.kv.set(ACCOUNT_KEY, {
+    directoryUrl,
+    sealedKey: await ctx.secrets.seal(key),
+    url: null,
+  } satisfies StoredAccount);
+  return { key, url: null };
+}
+
+async function saveAccountUrl(
+  ctx: PluginContext,
+  directoryUrl: string,
+  url: string,
+): Promise<void> {
+  const stored = (await ctx.kv.get(ACCOUNT_KEY)) as StoredAccount | null;
+  if (!stored || stored.directoryUrl !== directoryUrl || stored.url === url) {
+    return;
+  }
+  await ctx.kv.set(ACCOUNT_KEY, { ...stored, url });
+}
+
+const sleep = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));
+
+/** Runs one ACME order for `settings.domain` and returns the new pair. */
+export async function issueCertificate(
+  ctx: PluginContext,
+  settings: AcmeSettings,
+  options: { propagationMs?: number } = {},
+): Promise<IssuedCertificate> {
+  const directoryUrl = directoryUrlFor(settings);
+  acme.axios.defaults.adapter = createFetchAdapter(
+    ctx.fetch,
+    privateHostsFor(settings),
+  ) as never;
+
+  const account = await loadAccount(ctx, directoryUrl);
+  const client = new acme.Client({
+    directoryUrl,
+    accountKey: account.key,
+    ...(account.url ? { accountUrl: account.url } : {}),
+  });
+
+  const [key, csr] = await acme.crypto.createCsr({
+    commonName: settings.domain,
+    altNames: [settings.domain],
+  });
+
+  const cleanups = new Map<string, () => void | Promise<void>>();
+  const certificate = await client.auto({
+    csr,
+    email: settings.email,
+    termsOfServiceAgreed: true,
+    // Checking our own answer first needs port 80 or DNS from inside the
+    // container, which often is not how the CA sees it.
+    skipChallengeVerification: true,
+    challengePriority:
+      settings.challengeType === "dns-cloudflare" ? ["dns-01"] : ["http-01"],
+    challengeCreateFn: async (authz, challenge, keyAuthorization) => {
+      if (challenge.type === "http-01") {
+        cleanups.set(
+          challenge.token,
+          await ctx.system.publishHttpChallenge(
+            challenge.token,
+            keyAuthorization,
+          ),
+        );
+        return;
+      }
+      if (challenge.type === "dns-01") {
+        cleanups.set(
+          challenge.token,
+          await createTxtRecord(
+            ctx.fetch,
+            settings.cloudflareToken,
+            `_acme-challenge.${authz.identifier.value}`,
+            keyAuthorization,
+          ),
+        );
+        await sleep(options.propagationMs ?? DNS_PROPAGATION_MS);
+        return;
+      }
+      throw new Error(
+        `Unsupported challenge type ${(challenge as { type: string }).type}`,
+      );
+    },
+    challengeRemoveFn: async (_authz, challenge) => {
+      const cleanup = cleanups.get(challenge.token);
+      cleanups.delete(challenge.token);
+      try {
+        await cleanup?.();
+      } catch (error) {
+        ctx.log.warn(
+          `Could not clean up the ${challenge.type} challenge: ${error instanceof Error ? error.message : String(error)}`,
+        );
+      }
+    },
+  });
+
+  await saveAccountUrl(ctx, directoryUrl, client.getAccountUrl());
+  return { certificate, privateKey: key.toString() };
+}

plugins/acme-ssl/src/backend/cloudflare.ts

@@ -0,0 +1,78 @@
+import type { PluginFetch } from "@termix/plugin-sdk/backend";
+
+const API = "https://api.cloudflare.com/client/v4";
+
+interface CloudflareEnvelope<T> {
+  success: boolean;
+  errors?: Array<{ message?: string }>;
+  result: T;
+}
+
+async function call<T>(
+  fetch: PluginFetch,
+  token: string,
+  path: string,
+  init: { method?: string; body?: unknown } = {},
+): Promise<T> {
+  const response = await fetch(`${API}${path}`, {
+    method: init.method ?? "GET",
+    headers: {
+      Authorization: `Bearer ${token}`,
+      "Content-Type": "application/json",
+    },
+    body: init.body === undefined ? undefined : JSON.stringify(init.body),
+  });
+  const payload = (await response
+    .json()
+    .catch(() => null)) as CloudflareEnvelope<T> | null;
+  if (!response.ok || !payload?.success) {
+    const reason =
+      payload?.errors
+        ?.map((error) => error.message)
+        .filter(Boolean)
+        .join("; ") || `HTTP ${response.status}`;
+    throw new Error(`Cloudflare API error: ${reason}`);
+  }
+  return payload.result;
+}
+
+/** The zone holding `name`, found by trying each parent domain. */
+export async function findZoneId(
+  fetch: PluginFetch,
+  token: string,
+  name: string,
+): Promise<string> {
+  const labels = name.replace(/\.$/, "").split(".");
+  for (let i = 0; i < labels.length - 1; i++) {
+    const candidate = labels.slice(i).join(".");
+    const zones = await call<Array<{ id: string; name: string }>>(
+      fetch,
+      token,
+      `/zones?name=${encodeURIComponent(candidate)}`,
+    );
+    const zone = zones.find((entry) => entry.name === candidate);
+    if (zone) return zone.id;
+  }
+  throw new Error(`No Cloudflare zone found for ${name}`);
+}
+
+/** Creates the TXT record and returns a function that deletes it. */
+export async function createTxtRecord(
+  fetch: PluginFetch,
+  token: string,
+  name: string,
+  content: string,
+): Promise<() => Promise<void>> {
+  const zoneId = await findZoneId(fetch, token, name);
+  const record = await call<{ id: string }>(
+    fetch,
+    token,
+    `/zones/${zoneId}/dns_records`,
+    { method: "POST", body: { type: "TXT", name, content, ttl: 120 } },
+  );
+  return async () => {
+    await call(fetch, token, `/zones/${zoneId}/dns_records/${record.id}`, {
+      method: "DELETE",
+    });
+  };
+}

plugins/acme-ssl/src/backend/index.ts

@@ -0,0 +1,50 @@
+import type { Router } from "express";
+import type { PluginContext } from "@termix/plugin-sdk/backend";
+import { issueCertificate } from "./acme.js";
+import {
+  CHECK_INTERVAL_MS,
+  createAcmeRunner,
+  watchSettings,
+  type IssueFn,
+} from "./runner.js";
+import { registerRoutes } from "./routes.js";
+
+/** `issue` is swapped out by tests; the plugin always uses acme-client. */
+export async function activateWith(ctx: PluginContext, issue: IssueFn) {
+  const runner = createAcmeRunner(ctx, issue);
+
+  await runner.syncRenewer();
+  watchSettings(ctx, () => {
+    runner
+      .syncRenewer()
+      .catch((error) =>
+        ctx.log.warn(
+          `Could not update the renewal registration: ${error instanceof Error ? error.message : String(error)}`,
+        ),
+      );
+  });
+
+  // The first check lands within a minute of boot, after core's boot-time
+  // settings migrations, so it also picks up settings moved from 2.8.
+  ctx.schedule.every(
+    CHECK_INTERVAL_MS,
+    async () => {
+      await runner.syncRenewer();
+      await runner.check();
+    },
+    { jitterMs: 60_000 },
+  );
+
+  registerRoutes(ctx, ctx.http.router<Router>(), runner);
+  return runner;
+}
+
+export async function activate(ctx: PluginContext) {
+  await activateWith(ctx, (pluginCtx, settings) =>
+    issueCertificate(pluginCtx, settings),
+  );
+}
+
+export async function deactivate() {
+  // Everything above was registered through ctx and is disposed by core.
+}

plugins/acme-ssl/src/backend/renewal.ts

@@ -0,0 +1,28 @@
+import type { PluginTlsStatus } from "@termix/plugin-sdk/backend";
+
+export const RENEW_BEFORE_MS = 30 * 86_400_000;
+
+export type RenewalReason = "missing" | "self-signed" | "domain" | "expiring";
+
+/**
+ * Whether the served certificate should be replaced for `domain`: there is
+ * none, it is core's self-signed one, it does not cover the domain, or it
+ * expires within 30 days.
+ */
+export function renewalReason(
+  status: PluginTlsStatus,
+  domain: string,
+  now: Date = new Date(),
+): RenewalReason | null {
+  const cert = status.certificate;
+  if (!cert) return "missing";
+  if (cert.selfSigned) return "self-signed";
+  const wanted = domain.toLowerCase();
+  if (!cert.names.some((name) => name.toLowerCase() === wanted)) {
+    return "domain";
+  }
+  if (new Date(cert.notAfter).getTime() - now.getTime() < RENEW_BEFORE_MS) {
+    return "expiring";
+  }
+  return null;
+}

plugins/acme-ssl/src/backend/routes.ts

@@ -0,0 +1,73 @@
+import type { Request, RequestHandler, Response, Router } from "express";
+import type { PluginContext } from "@termix/plugin-sdk/backend";
+import { AcmeNotConfiguredError, type AcmeRunner } from "./runner.js";
+import { missingSetting, readSettings } from "./settings.js";
+
+export function registerRoutes(
+  ctx: PluginContext,
+  router: Router,
+  runner: AcmeRunner,
+): void {
+  router.use(ctx.rbac.require("manage") as unknown as RequestHandler);
+
+  /**
+   * @openapi
+   * /plugin-api/acme-ssl/status:
+   *   get:
+   *     summary: ACME certificate status
+   *     description: The certificate core serves, whether ACME is configured, and the last issue attempt.
+   *     tags: [ACME Certificates]
+   *     responses:
+   *       200:
+   *         description: Status.
+   *       403:
+   *         description: Missing the acme-ssl.manage permission.
+   */
+  router.get("/status", async (_req: Request, res: Response) => {
+    const settings = await readSettings(ctx);
+    res.json({
+      tls: await ctx.system.tlsStatus(),
+      state: await runner.state(),
+      autoRenew: settings.autoRenew,
+      missing: missingSetting(settings),
+    });
+  });
+
+  /**
+   * @openapi
+   * /plugin-api/acme-ssl/request:
+   *   post:
+   *     summary: Request a certificate now
+   *     description: Runs an ACME order for the configured domain, installs the certificate and reloads HTTPS.
+   *     tags: [ACME Certificates]
+   *     responses:
+   *       200:
+   *         description: Certificate issued and installed.
+   *       400:
+   *         description: A required setting is missing.
+   *       403:
+   *         description: Missing the acme-ssl.manage permission.
+   *       500:
+   *         description: The ACME order failed.
+   */
+  router.post("/request", async (_req: Request, res: Response) => {
+    try {
+      const result = await runner.issue();
+      res.json({
+        success: true,
+        reloadMessage: result.reload.message,
+        tls: result.tls,
+        state: await runner.state(),
+      });
+    } catch (error) {
+      if (error instanceof AcmeNotConfiguredError) {
+        return res
+          .status(400)
+          .json({ error: error.message, missing: error.field });
+      }
+      const message = error instanceof Error ? error.message : String(error);
+      ctx.log.warn(`Certificate request failed: ${message}`);
+      res.status(500).json({ error: `Certificate request failed: ${message}` });
+    }
+  });
+}

plugins/acme-ssl/src/backend/runner.ts

@@ -0,0 +1,173 @@
+import type {
+  PluginContext,
+  PluginTlsReloadResult,
+  PluginTlsStatus,
+} from "@termix/plugin-sdk/backend";
+import type { IssuedCertificate } from "./acme.js";
+import { renewalReason } from "./renewal.js";
+import {
+  SETTING_KEYS,
+  missingSetting,
+  readSettings,
+  type AcmeSettings,
+} from "./settings.js";
+
+export const CHECK_INTERVAL_MS = 12 * 60 * 60 * 1000;
+/** After a failed attempt, the scheduled check waits this long to retry. */
+export const RETRY_AFTER_MS = 6 * 60 * 60 * 1000;
+
+const STATE_KEY = "state";
+
+export interface AcmeState {
+  lastAttemptAt: string | null;
+  lastIssuedAt: string | null;
+  lastError: string | null;
+}
+
+export type IssueFn = (
+  ctx: PluginContext,
+  settings: AcmeSettings,
+) => Promise<IssuedCertificate>;
+
+export class AcmeNotConfiguredError extends Error {
+  constructor(readonly field: string) {
+    super(`ACME is not configured: ${field} is missing`);
+  }
+}
+
+export interface IssueResult {
+  tls: PluginTlsStatus;
+  reload: PluginTlsReloadResult;
+}
+
+export interface AcmeRunner {
+  state: () => Promise<AcmeState>;
+  /** Issues now, whatever the served certificate looks like. */
+  issue: () => Promise<IssueResult>;
+  /** The scheduled check: issues only when renewal is on and due. */
+  check: (now?: Date) => Promise<boolean>;
+  /** Registers or drops the renewer to match the current settings. */
+  syncRenewer: () => Promise<void>;
+}
+
+export function createAcmeRunner(
+  ctx: PluginContext,
+  issue: IssueFn,
+): AcmeRunner {
+  let running: Promise<IssueResult> | null = null;
+  let dropRenewer: (() => void) | null = null;
+
+  const state = async (): Promise<AcmeState> => {
+    const stored = (await ctx.kv.get(STATE_KEY)) as Partial<AcmeState> | null;
+    return {
+      lastAttemptAt: stored?.lastAttemptAt ?? null,
+      lastIssuedAt: stored?.lastIssuedAt ?? null,
+      lastError: stored?.lastError ?? null,
+    };
+  };
+
+  const record = async (patch: Partial<AcmeState>) => {
+    await ctx.kv.set(STATE_KEY, { ...(await state()), ...patch });
+  };
+
+  const runIssue = async (): Promise<IssueResult> => {
+    const settings = await readSettings(ctx);
+    const missing = missingSetting(settings);
+    if (missing) throw new AcmeNotConfiguredError(missing);
+
+    const attemptAt = new Date().toISOString();
+    try {
+      const issued = await issue(ctx, settings);
+      await ctx.system.writeTlsCertificate(
+        issued.certificate,
+        issued.privateKey,
+      );
+      const reload = await ctx.system.reloadTls();
+      await record({
+        lastAttemptAt: attemptAt,
+        lastIssuedAt: new Date().toISOString(),
+        lastError: null,
+      });
+      ctx.log.info(`Certificate issued for ${settings.domain}`);
+      return { tls: await ctx.system.tlsStatus(), reload };
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      await record({ lastAttemptAt: attemptAt, lastError: message });
+      throw error;
+    }
+  };
+
+  const runner: AcmeRunner = {
+    state,
+
+    issue: () => {
+      running ??= runIssue().finally(() => {
+        running = null;
+      });
+      return running;
+    },
+
+    check: async (now = new Date()) => {
+      const settings = await readSettings(ctx);
+      if (!settings.autoRenew || missingSetting(settings)) return false;
+
+      const last = await state();
+      if (
+        last.lastError &&
+        last.lastAttemptAt &&
+        now.getTime() - new Date(last.lastAttemptAt).getTime() < RETRY_AFTER_MS
+      ) {
+        return false;
+      }
+
+      const reason = renewalReason(
+        await ctx.system.tlsStatus(),
+        settings.domain,
+        now,
+      );
+      if (!reason) return false;
+
+      ctx.log.info(
+        `Renewing the certificate for ${settings.domain} (${reason})`,
+      );
+      try {
+        await runner.issue();
+        return true;
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        ctx.log.error(
+          "Certificate renewal failed",
+          error instanceof Error ? error : new Error(message),
+        );
+        await ctx.notify
+          .send({
+            title: `Certificate renewal failed for ${settings.domain}`,
+            body: message,
+            severity: "critical",
+            category: "acme-ssl.renewal_failed",
+            audience: "admins",
+            dedupeKey: `acme-ssl.renewal_failed:${settings.domain}`,
+          })
+          .catch(() => {});
+        return false;
+      }
+    },
+
+    syncRenewer: async () => {
+      const settings = await readSettings(ctx);
+      const wanted = settings.autoRenew && !missingSetting(settings);
+      if (wanted && !dropRenewer) {
+        dropRenewer = await ctx.system.registerTlsRenewer();
+      } else if (!wanted && dropRenewer) {
+        dropRenewer();
+        dropRenewer = null;
+      }
+    },
+  };
+
+  return runner;
+}
+
+export function watchSettings(ctx: PluginContext, onChange: () => void): void {
+  for (const key of SETTING_KEYS) ctx.settings.onChange(key, onChange);
+}

plugins/acme-ssl/src/backend/settings.ts

@@ -0,0 +1,77 @@
+import type { PluginContext } from "@termix/plugin-sdk/backend";
+
+export type AcmeProvider = "letsencrypt" | "letsencrypt-staging" | "custom";
+export type AcmeChallengeType = "http-01" | "dns-cloudflare";
+
+export interface AcmeSettings {
+  autoRenew: boolean;
+  domain: string;
+  email: string;
+  provider: AcmeProvider;
+  directoryUrl: string;
+  challengeType: AcmeChallengeType;
+  cloudflareToken: string;
+}
+
+export const SETTING_KEYS = [
+  "autoRenew",
+  "domain",
+  "email",
+  "provider",
+  "directoryUrl",
+  "challengeType",
+  "cloudflareToken",
+] as const;
+
+export const DIRECTORIES: Record<Exclude<AcmeProvider, "custom">, string> = {
+  letsencrypt: "https://acme-v02.api.letsencrypt.org/directory",
+  "letsencrypt-staging":
+    "https://acme-staging-v02.api.letsencrypt.org/directory",
+};
+
+const text = (value: unknown) =>
+  typeof value === "string" ? value.trim() : "";
+
+export async function readSettings(ctx: PluginContext): Promise<AcmeSettings> {
+  const all = await ctx.settings.getAll("admin");
+  const provider = text(all.provider);
+  const challengeType = text(all.challengeType);
+  return {
+    autoRenew: all.autoRenew === true,
+    domain: text(all.domain).toLowerCase(),
+    email: text(all.email),
+    provider:
+      provider === "letsencrypt-staging" || provider === "custom"
+        ? provider
+        : "letsencrypt",
+    directoryUrl: text(all.directoryUrl),
+    challengeType:
+      challengeType === "dns-cloudflare" ? challengeType : "http-01",
+    cloudflareToken: text(all.cloudflareToken),
+  };
+}
+
+export function directoryUrlFor(settings: AcmeSettings): string {
+  return settings.provider === "custom"
+    ? settings.directoryUrl
+    : DIRECTORIES[settings.provider];
+}
+
+/** The reason issuing cannot start, or null when everything is set. */
+export function missingSetting(settings: AcmeSettings): string | null {
+  if (!settings.domain) return "domain";
+  if (!settings.email) return "email";
+  if (
+    settings.provider === "custom" &&
+    !/^https:\/\//i.test(settings.directoryUrl)
+  ) {
+    return "directoryUrl";
+  }
+  if (
+    settings.challengeType === "dns-cloudflare" &&
+    !settings.cloudflareToken
+  ) {
+    return "cloudflareToken";
+  }
+  return null;
+}

plugins/acme-ssl/src/frontend/AcmeStatusSetting.tsx

@@ -0,0 +1,121 @@
+import { useCallback, useEffect, useState } from "react";
+import { toast } from "sonner";
+import {
+  usePluginApi,
+  useTranslation,
+  type SettingsComponentProps,
+} from "@termix/plugin-sdk/frontend";
+import { Button } from "@termix/plugin-sdk/ui";
+
+export interface AcmeStatus {
+  tls: {
+    enabled: boolean;
+    certificate: {
+      issuer: string;
+      names: string[];
+      notAfter: string;
+      selfSigned: boolean;
+    } | null;
+  };
+  state: {
+    lastAttemptAt: string | null;
+    lastIssuedAt: string | null;
+    lastError: string | null;
+  };
+  autoRenew: boolean;
+  missing: string | null;
+}
+
+function errorMessage(error: unknown): string {
+  const data = (error as { response?: { data?: { error?: string } } })?.response
+    ?.data;
+  if (data?.error) return data.error;
+  return error instanceof Error ? error.message : String(error);
+}
+
+export function AcmeStatusSetting({ running }: SettingsComponentProps) {
+  const { t } = useTranslation();
+  const api = usePluginApi();
+  const [status, setStatus] = useState<AcmeStatus | null>(null);
+  const [requesting, setRequesting] = useState(false);
+
+  const load = useCallback(async () => {
+    try {
+      const { data } = await api.get<AcmeStatus>("/status");
+      setStatus(data);
+    } catch {
+      setStatus(null);
+    }
+  }, [api]);
+
+  useEffect(() => {
+    if (running) void load();
+  }, [running, load]);
+
+  async function request() {
+    setRequesting(true);
+    try {
+      const { data } = await api.post<{ reloadMessage?: string }>("/request");
+      toast.success(t("status.issued"));
+      if (data.reloadMessage) toast.info(data.reloadMessage);
+    } catch (error) {
+      toast.error(errorMessage(error));
+    } finally {
+      setRequesting(false);
+      await load();
+    }
+  }
+
+  const cert = status?.tls.certificate;
+
+  return (
+    <div className="flex flex-col gap-2 border border-border bg-background/50 p-2">
+      <span className="text-xs font-medium">{t("status.title")}</span>
+      {cert ? (
+        <>
+          <span className="text-[10px] text-muted-foreground">
+            {t("status.names", { names: cert.names.join(", ") || "-" })}
+          </span>
+          <span className="text-[10px] text-muted-foreground">
+            {t("status.issuer", { issuer: cert.issuer })}
+          </span>
+          <span className="text-[10px] text-muted-foreground">
+            {t("status.expires", {
+              date: new Date(cert.notAfter).toLocaleDateString(),
+            })}
+          </span>
+        </>
+      ) : (
+        <span className="text-[10px] text-muted-foreground">
+          {t("status.none")}
+        </span>
+      )}
+      {status?.state.lastIssuedAt && (
+        <span className="text-[10px] text-muted-foreground">
+          {t("status.lastIssued", {
+            date: new Date(status.state.lastIssuedAt).toLocaleString(),
+          })}
+        </span>
+      )}
+      {status?.state.lastError && (
+        <span className="text-[10px] text-destructive">
+          {t("status.lastError", { error: status.state.lastError })}
+        </span>
+      )}
+      {status?.missing && (
+        <span className="text-[10px] text-muted-foreground">
+          {t("status.missing")}
+        </span>
+      )}
+      <Button
+        type="button"
+        variant="outline"
+        className="rounded-none self-start"
+        disabled={!running || requesting || !!status?.missing}
+        onClick={request}
+      >
+        {requesting ? t("status.requesting") : t("status.request")}
+      </Button>
+    </div>
+  );
+}

plugins/acme-ssl/src/frontend/index.tsx

@@ -0,0 +1,10 @@
+import type { TermixApp } from "@termix/plugin-sdk/frontend";
+import { AcmeStatusSetting } from "./AcmeStatusSetting";
+
+export function activate(app: TermixApp): void {
+  app.registerSettingsComponent("status", AcmeStatusSetting);
+}
+
+export function deactivate(): void {
+  // Registrations through app are disposed by core.
+}

plugins/acme-ssl/tests/backend/acme-ssl.test.ts

@@ -0,0 +1,269 @@
+import http from "node:http";
+import type { AddressInfo } from "node:net";
+import express, { type Router } from "express";
+import { afterEach, describe, expect, it, vi } from "vitest";
+import {
+  createMockCtx,
+  type MockPluginContext,
+} from "@termix/plugin-sdk/testing";
+import type {
+  PluginCapabilityError as CapabilityError,
+  PluginTlsCertificateInfo,
+  PluginTlsStatus,
+} from "@termix/plugin-sdk/backend";
+import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import manifestJson from "../../manifest.json";
+import { activateWith } from "../../src/backend/index.js";
+import { CHECK_INTERVAL_MS, RETRY_AFTER_MS } from "../../src/backend/runner.js";
+import { renewalReason } from "../../src/backend/renewal.js";
+
+const manifest = manifestJson as unknown as PluginManifest;
+const DAY = 86_400_000;
+
+const CONFIGURED = {
+  autoRenew: true,
+  domain: "termix.example.com",
+  email: "admin@example.com",
+};
+
+function cert(
+  overrides: Partial<PluginTlsCertificateInfo> = {},
+): PluginTlsCertificateInfo {
+  return {
+    subject: "CN=termix.example.com",
+    issuer: "CN=R11, O=Let's Encrypt",
+    names: ["termix.example.com"],
+    notBefore: new Date(Date.now() - 10 * DAY).toISOString(),
+    notAfter: new Date(Date.now() + 60 * DAY).toISOString(),
+    selfSigned: false,
+    fingerprint: "AA",
+    ...overrides,
+  };
+}
+
+const issue = vi.fn(async () => ({
+  certificate: "-----BEGIN CERTIFICATE-----new",
+  privateKey: "-----BEGIN PRIVATE KEY-----new",
+}));
+
+let servers: http.Server[] = [];
+
+afterEach(async () => {
+  issue.mockClear();
+  await Promise.all(
+    servers.map(
+      (s) => new Promise<void>((resolve) => s.close(() => resolve())),
+    ),
+  );
+  servers = [];
+});
+
+async function setup(
+  options: {
+    settings?: Record<string, unknown>;
+    certificate?: PluginTlsCertificateInfo | null;
+    permissions?: string[];
+    capabilities?: string[];
+    validateTls?: () => PluginTlsCertificateInfo;
+  } = {},
+) {
+  let router: Router | null = null;
+  const tlsStatus: Omit<PluginTlsStatus, "renewal"> = {
+    enabled: true,
+    certificate: options.certificate === undefined ? null : options.certificate,
+  };
+  const mock: MockPluginContext = createMockCtx({
+    pluginId: manifest.id,
+    manifest,
+    capabilities: options.capabilities ?? manifest.capabilities,
+    router: () => (router = express.Router()),
+    settings: options.settings,
+    permissions: options.permissions ?? ["manage"],
+    tlsStatus,
+    validateTls: options.validateTls,
+  });
+  const runner = await activateWith(mock.ctx, issue);
+
+  const app = express();
+  app.use((req, res, next) => router!(req, res, next));
+  const server = http.createServer(app);
+  servers.push(server);
+  await new Promise<void>((resolve) => server.listen(0, resolve));
+  const { port } = server.address() as AddressInfo;
+  const call = async (method: string, path: string) => {
+    const response = await fetch(`http://127.0.0.1:${port}${path}`, {
+      method,
+    });
+    return { status: response.status, body: await response.json() };
+  };
+  return { mock, runner, call };
+}
+
+describe("renewalReason", () => {
+  const status = (certificate: PluginTlsCertificateInfo | null) => ({
+    enabled: true,
+    certificate,
+    renewal: null,
+  });
+
+  it("renews when missing, self-signed, for another domain or expiring", () => {
+    expect(renewalReason(status(null), "termix.example.com")).toBe("missing");
+    expect(
+      renewalReason(status(cert({ selfSigned: true })), "termix.example.com"),
+    ).toBe("self-signed");
+    expect(renewalReason(status(cert()), "other.example.com")).toBe("domain");
+    expect(
+      renewalReason(
+        status(
+          cert({ notAfter: new Date(Date.now() + 10 * DAY).toISOString() }),
+        ),
+        "termix.example.com",
+      ),
+    ).toBe("expiring");
+    expect(renewalReason(status(cert()), "TERMIX.example.com")).toBeNull();
+  });
+});
+
+describe("scheduled renewal", () => {
+  it("checks on a 12 hour timer and renews an expiring certificate", async () => {
+    const { mock } = await setup({
+      settings: CONFIGURED,
+      certificate: cert({
+        notAfter: new Date(Date.now() + 5 * DAY).toISOString(),
+      }),
+    });
+    const job = mock.scheduled.find((entry) => entry.kind === "every");
+    expect(job?.ms).toBe(CHECK_INTERVAL_MS);
+
+    await mock.runScheduled();
+
+    expect(issue).toHaveBeenCalledOnce();
+    expect(mock.tls.writes).toEqual([
+      {
+        certificatePem: "-----BEGIN CERTIFICATE-----new",
+        privateKeyPem: "-----BEGIN PRIVATE KEY-----new",
+      },
+    ]);
+    const write = mock.tls.calls.indexOf("writeTlsCertificate");
+    expect(mock.tls.calls.indexOf("reloadTls")).toBeGreaterThan(write);
+    expect(mock.tls.reloads).toBe(1);
+  });
+
+  it("leaves a valid certificate alone", async () => {
+    const { mock } = await setup({ settings: CONFIGURED, certificate: cert() });
+    await mock.runScheduled();
+    expect(issue).not.toHaveBeenCalled();
+    expect(mock.tls.writes).toEqual([]);
+  });
+
+  it("does nothing and registers no renewer while renewal is off", async () => {
+    const { mock } = await setup({
+      settings: { ...CONFIGURED, autoRenew: false },
+    });
+    await mock.runScheduled();
+    expect(issue).not.toHaveBeenCalled();
+    expect(mock.tls.renewers).toBe(0);
+  });
+
+  it("registers as the renewer when configured and drops it when turned off", async () => {
+    const { mock } = await setup({ settings: CONFIGURED, certificate: cert() });
+    expect(mock.tls.renewers).toBe(1);
+    expect((await mock.ctx.system.tlsStatus()).renewal?.pluginId).toBe(
+      "acme-ssl",
+    );
+
+    await mock.ctx.settings.set("autoRenew", false);
+    await vi.waitFor(() => expect(mock.tls.renewers).toBe(0));
+  });
+
+  it("alerts every admin when a renewal fails", async () => {
+    const { mock, runner } = await setup({ settings: CONFIGURED });
+    issue.mockRejectedValueOnce(new Error("rate limited"));
+    expect(await runner.check()).toBe(false);
+    expect(mock.notifications).toEqual([
+      {
+        actor: undefined,
+        notification: expect.objectContaining({
+          body: "rate limited",
+          severity: "critical",
+          category: "acme-ssl.renewal_failed",
+          audience: "admins",
+        }),
+      },
+    ]);
+  });
+
+  it("waits before retrying after a failed attempt", async () => {
+    const { mock, runner } = await setup({ settings: CONFIGURED });
+    issue.mockRejectedValueOnce(new Error("rate limited"));
+    expect(await runner.check()).toBe(false);
+    expect((await runner.state()).lastError).toBe("rate limited");
+
+    expect(await runner.check()).toBe(false);
+    expect(issue).toHaveBeenCalledOnce();
+
+    expect(
+      await runner.check(new Date(Date.now() + RETRY_AFTER_MS + 1000)),
+    ).toBe(true);
+    expect(issue).toHaveBeenCalledTimes(2);
+    expect(mock.tls.reloads).toBe(1);
+  });
+
+  it("does not reload when core rejects the certificate", async () => {
+    const { mock, runner } = await setup({
+      settings: CONFIGURED,
+      validateTls: () => {
+        throw new Error("The certificate and private key do not match");
+      },
+    });
+    await expect(runner.issue()).rejects.toThrow(/do not match/);
+    expect(mock.tls.reloads).toBe(0);
+    expect((await runner.state()).lastError).toMatch(/do not match/);
+  });
+});
+
+describe("routes", () => {
+  it("reports status and issues on request", async () => {
+    const { call, mock } = await setup({ settings: CONFIGURED });
+    const status = await call("GET", "/status");
+    expect(status.status).toBe(200);
+    expect(status.body.missing).toBeNull();
+    expect(status.body.tls.certificate).toBeNull();
+
+    const issued = await call("POST", "/request");
+    expect(issued.status).toBe(200);
+    expect(issued.body.success).toBe(true);
+    expect(issued.body.tls.certificate).not.toBeNull();
+    expect(mock.tls.reloads).toBe(1);
+  });
+
+  it("answers 400 when a setting is missing", async () => {
+    const { call } = await setup({ settings: { domain: "a.example" } });
+    const result = await call("POST", "/request");
+    expect(result.status).toBe(400);
+    expect(result.body.missing).toBe("email");
+    expect(issue).not.toHaveBeenCalled();
+  });
+
+  it("refuses a user without acme-ssl.manage on every route", async () => {
+    const { call } = await setup({ settings: CONFIGURED, permissions: [] });
+    expect((await call("GET", "/status")).status).toBe(403);
+    expect((await call("POST", "/request")).status).toBe(403);
+    expect(issue).not.toHaveBeenCalled();
+  });
+});
+
+describe("capabilities", () => {
+  it("fails closed without system:tls", async () => {
+    await expect(
+      setup({
+        settings: CONFIGURED,
+        capabilities: manifest.capabilities.filter(
+          (capability) => capability !== "system:tls",
+        ),
+      }),
+    ).rejects.toMatchObject({
+      capability: "system:tls",
+    } satisfies Partial<CapabilityError>);
+  });
+});

plugins/acme-ssl/tests/backend/transport.test.ts

@@ -0,0 +1,102 @@
+import { describe, expect, it, vi } from "vitest";
+import type { PluginFetchInit } from "@termix/plugin-sdk/backend";
+import { createFetchAdapter } from "../../src/backend/acme.js";
+import { createTxtRecord } from "../../src/backend/cloudflare.js";
+
+describe("createFetchAdapter", () => {
+  it("sends acme-client requests through ctx.fetch", async () => {
+    const fetch = vi.fn(
+      async (_url: string, _init?: PluginFetchInit) =>
+        new Response('{"ok":true}', {
+          status: 201,
+          headers: { "replay-nonce": "n1", location: "https://ca/acct/1" },
+        }),
+    );
+    const adapter = createFetchAdapter(fetch, ["ca.internal"]);
+    const result = await adapter({
+      url: "https://ca.internal/new-acct",
+      method: "post",
+      headers: { "Content-Type": "application/jose+json" },
+      data: '{"payload":"x"}',
+      validateStatus: null,
+    });
+
+    expect(fetch).toHaveBeenCalledWith(
+      "https://ca.internal/new-acct",
+      expect.objectContaining({
+        method: "POST",
+        body: '{"payload":"x"}',
+        allowPrivateHosts: ["ca.internal"],
+        headers: { "Content-Type": "application/jose+json" },
+      }),
+    );
+    expect(result.status).toBe(201);
+    expect(result.data).toBe('{"ok":true}');
+    expect(result.headers["replay-nonce"]).toBe("n1");
+  });
+
+  it("rejects with the response attached when validateStatus says no", async () => {
+    const adapter = createFetchAdapter(
+      async () => new Response("slow down", { status: 429 }),
+    );
+    await expect(
+      adapter({ url: "https://ca/x", validateStatus: () => false }),
+    ).rejects.toMatchObject({
+      code: "ERR_BAD_REQUEST",
+      response: { status: 429, data: "slow down" },
+    });
+  });
+});
+
+describe("createTxtRecord", () => {
+  it("finds the zone by parent domain, creates the record and deletes it", async () => {
+    const calls: Array<{ url: string; method: string; body?: string }> = [];
+    const fetch = vi.fn(async (url: string, init?: PluginFetchInit) => {
+      calls.push({ url, method: init?.method ?? "GET", body: init?.body });
+      if (url.includes("/zones?name=example.com")) {
+        return Response.json({
+          success: true,
+          result: [{ id: "zone-1", name: "example.com" }],
+        });
+      }
+      if (url.includes("/zones?name=")) {
+        return Response.json({ success: true, result: [] });
+      }
+      if (init?.method === "POST") {
+        return Response.json({ success: true, result: { id: "rec-1" } });
+      }
+      return Response.json({ success: true, result: {} });
+    });
+
+    const remove = await createTxtRecord(
+      fetch,
+      "token",
+      "_acme-challenge.termix.example.com",
+      "digest",
+    );
+    const post = calls.find((call) => call.method === "POST")!;
+    expect(post.url).toContain("/zones/zone-1/dns_records");
+    expect(JSON.parse(post.body!)).toMatchObject({
+      type: "TXT",
+      name: "_acme-challenge.termix.example.com",
+      content: "digest",
+    });
+
+    await remove();
+    expect(calls.at(-1)).toMatchObject({
+      method: "DELETE",
+      url: expect.stringContaining("/zones/zone-1/dns_records/rec-1"),
+    });
+  });
+
+  it("surfaces the Cloudflare error message", async () => {
+    const fetch = async () =>
+      Response.json(
+        { success: false, errors: [{ message: "Invalid token" }] },
+        { status: 403 },
+      );
+    await expect(
+      createTxtRecord(fetch, "bad", "_acme-challenge.a.example", "d"),
+    ).rejects.toThrow(/Invalid token/);
+  });
+});

plugins/acme-ssl/tests/frontend/activate.test.tsx

@@ -0,0 +1,85 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { render, screen, waitFor } from "@testing-library/react";
+import {
+  renderWithApp,
+  type RenderedPluginApp,
+} from "@termix/plugin-sdk/testing";
+import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import * as plugin from "../../src/frontend/index";
+import manifestJson from "../../manifest.json";
+import locales from "../../locales/en.json";
+
+const api = vi.hoisted(() => ({
+  get: vi.fn(),
+  post: vi.fn(),
+}));
+
+vi.mock("@termix/plugin-sdk/frontend", async (importOriginal) => ({
+  ...(await importOriginal<typeof import("@termix/plugin-sdk/frontend")>()),
+  useTranslation: () => ({
+    t: (key: string, values?: Record<string, string>) =>
+      values ? `${key} ${Object.values(values).join(" ")}` : key,
+  }),
+  usePluginApi: () => api,
+}));
+
+const { AcmeStatusSetting } =
+  await import("../../src/frontend/AcmeStatusSetting");
+
+const manifest = manifestJson as unknown as PluginManifest;
+
+let rendered: RenderedPluginApp | null = null;
+
+afterEach(async () => {
+  await rendered?.deactivate();
+  rendered = null;
+  api.get.mockReset();
+});
+
+describe("acme-ssl activate", () => {
+  it("registers the status settings component and removes it on deactivate", async () => {
+    rendered = await renderWithApp(plugin, { manifest, locales });
+    expect(rendered.registered.settingsComponents()).toEqual(["status"]);
+    await rendered.deactivate();
+    expect(rendered.registered.settingsComponents()).toEqual([]);
+    rendered = null;
+  });
+});
+
+describe("AcmeStatusSetting", () => {
+  it("shows the served certificate and the last error", async () => {
+    api.get.mockResolvedValue({
+      data: {
+        tls: {
+          enabled: true,
+          certificate: {
+            issuer: "CN=R11",
+            names: ["termix.example.com"],
+            notAfter: "2030-01-01T00:00:00.000Z",
+            selfSigned: false,
+          },
+        },
+        state: {
+          lastAttemptAt: null,
+          lastIssuedAt: null,
+          lastError: "rate limited",
+        },
+        autoRenew: true,
+        missing: null,
+      },
+    });
+    render(
+      <AcmeStatusSetting
+        pluginId="acme-ssl"
+        values={{}}
+        setValue={() => {}}
+        running
+      />,
+    );
+    await waitFor(() =>
+      expect(screen.getByText("status.names termix.example.com")).toBeTruthy(),
+    );
+    expect(screen.getByText("status.lastError rate limited")).toBeTruthy();
+    expect(api.get).toHaveBeenCalledWith("/status");
+  });
+});

plugins/acme-ssl/tsconfig.json

@@ -0,0 +1,4 @@
+{
+  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
+  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
+}

plugins/acme-ssl/vitest.config.ts

@@ -0,0 +1,3 @@
+import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
+
+export default pluginVitestConfig(import.meta.url);

plugins/ai/CHANGELOG.md

@@ -0,0 +1,7 @@
+# Changelog
+
+## 1.0.0
+
+First release, bundled with Termix 2.9.0.
+
+Adds an AI assistant that can read your hosts, snippets, fleets, alerts and automations and suggest changes for you to approve. Works with Ollama, Anthropic, OpenAI, Google Gemini and any OpenAI compatible provider.

plugins/ai/README.md

@@ -0,0 +1,50 @@
+# AI Assistant
+
+An AI assistant that can read your hosts, snippets, fleets, alerts and automations, and suggest changes for you to approve.
+
+## Features
+
+- Chat with an assistant that can read your hosts, snippets, fleets, alerts, automations, workspaces, network graph and homepage.
+- The assistant suggests changes, and nothing is applied until you approve it.
+- Can run read-only diagnostic commands on a host if you allow it.
+- Open the assistant from the terminal toolbar with the current session as context.
+- Works with Ollama, Anthropic, OpenAI, Google Gemini and any OpenAI compatible provider.
+
+## Settings
+
+### Admin
+
+- AI assistant: let users turn the assistant on. While this is off it is hidden for everyone.
+- Allowed private AI hosts: hosts on your private network a provider may point at, such as a self-hosted Ollama.
+
+### User
+
+- Enable the AI assistant: turn the assistant on for yourself.
+- Allow read-only diagnostic commands: let the assistant run safe commands on your hosts.
+- Providers: the AI providers, models and API keys you use.
+
+### Host
+
+- Enable AI Assistant: allow the assistant to work with this host.
+
+## Permissions
+
+- `ai.use`: Open the assistant and ask it things. Admins and users have it by default.
+- `ai.manage_providers`: Add, edit and remove AI providers and their API keys. Admins and users have it by default.
+- `ai.apply_proposals`: Let the assistant carry out the changes it suggests. Admins and users have it by default.
+- `ai.services.use`: Let other features call the assistant for you. Admins and users have it by default.
+- `ai.secrets.share`: Let other features use the stored AI API key without seeing it. Admins and users have it by default.
+
+## Services
+
+Uses from other plugins:
+
+- `workspaces.saved`, `network-topology.graph`, `snippets.access`, `fleets.access`, `terminal.history`, `automations.access` and `homepage.items` to read your data. Each one is optional.
+
+## Development
+
+```bash
+npm run build      # build into dist/
+npm run test       # run this plugin's tests
+npm run typecheck  # type-check this plugin
+```

plugins/ai/locales/en.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Use the assistant",
+      "description": "Open the assistant and ask it things."
+    },
+    "manage_providers": {
+      "title": "Manage providers",
+      "description": "Add, edit and remove the AI providers and their API keys."
+    },
+    "apply_proposals": {
+      "title": "Apply proposals",
+      "description": "Let the assistant carry out the changes it suggests."
+    },
+    "services.use": {
+      "title": "Use AI from other features",
+      "description": "Other features may call the assistant on your behalf."
+    },
+    "secrets.share": {
+      "title": "Share the API key",
+      "description": "Other features may use the stored AI API key without seeing it."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "The AI assistant is turned off on this server.",
+    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI assistant",
+        "description": "Let users turn on the AI assistant. While this is off, the assistant is hidden and blocked for everyone."
+      },
+      "privateEndpoints": {
+        "label": "Allowed private AI hosts",
+        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Enable AI Assistant",
+        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistant",
+    "send": "Send",
+    "stop": "Stop",
+    "save": "Save",
+    "cancel": "Cancel",
+    "running": "running",
+    "approve": "Approve",
+    "reject": "Reject",
+    "inputPlaceholder": "Ask about your servers, or describe a change to propose",
+    "selectProvider": "Select a provider",
+    "providerSettings": "Provider settings",
+    "addProvider": "Add provider",
+    "editProvider": "Edit provider",
+    "removeProvider": "Remove provider",
+    "providerType": "Provider",
+    "providerLabel": "Name",
+    "providerLabelPlaceholder": "For example: Local Ollama",
+    "baseUrl": "Server address",
+    "apiKey": "API key",
+    "defaultModel": "Default model",
+    "defaultModelPlaceholder": "For example: llama3.1 or claude-opus-5",
+    "labelRequired": "Give this provider a name",
+    "providerSaveFailed": "Could not save the provider",
+    "providerUpdated": "Provider updated",
+    "providerDeleteFailed": "Could not remove the provider",
+    "privateEndpointHint": "Addresses on your private network need an administrator to allow the host first.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI compatible",
+    "toolArguments": "Input",
+    "toolResult": "Result",
+    "statusApplied": "Applied",
+    "statusRejected": "Rejected",
+    "proposalApplied": "Change applied",
+    "proposalApplyFailed": "Could not apply the change",
+    "proposalRejectFailed": "Could not reject the change",
+    "enableTitle": "Enable the AI assistant",
+    "enableDescription": "Let the assistant read your setup and suggest changes for you to approve.",
+    "readOnlyCommands": "Allow read-only diagnostic commands",
+    "readOnlyCommandsDescription": "The assistant may run a short list of safe commands like df and uptime without asking each time. Anything that changes a server is always proposed first.",
+    "modelDetectFailed": "Could not reach the provider, so this is a general list. You can type any model name.",
+    "modelCustom": "Enter a model name",
+    "modelRefresh": "Refresh list",
+    "modelPlaceholder": "Choose or type a model",
+    "attachHint": "Type @ to reference a host, snippet or automation. Changes are proposed for you to approve.",
+    "runCommandTitle": "Run command",
+    "assistant": "AI Assistant",
+    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
+    "terminalPanelPlaceholder": "Ask about this host...",
+    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
+    "runsInOpenTerminal": "Runs in your open terminal session.",
+    "runInTerminal": "Run",
+    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI assistant",
+    "aiIntro": "Termix can include an optional AI assistant. You can change this later in your settings.",
+    "aiSkipTitle": "Leave it off",
+    "aiSkipDesc": "Termix works as it does now. The assistant stays hidden.",
+    "aiEnableTitle": "Turn it on",
+    "aiEnableDesc": "Adds an assistant that reads your setup and suggests changes you approve. Needs a provider you supply, such as a local Ollama.",
+    "aiNote": "Nothing is sent anywhere until you add a provider and send a message."
+  },
+  "hosts": {
+    "docsLink": "View docs"
+  }
+}

plugins/ai/locales/translated/af_ZA.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Gebruik die assistent",
+      "description": "Maak die assistent oop en vra dit dinge."
+    },
+    "manage_providers": {
+      "title": "Bestuur verskaffers",
+      "description": "Voeg die KI-verskaffers en hul API-sleutels by, wysig en verwyder hulle."
+    },
+    "apply_proposals": {
+      "title": "Pas voorstelle toe",
+      "description": "Laat die assistent die veranderinge wat dit voorstel, uitvoer."
+    },
+    "services.use": {
+      "title": "Gebruik KI van ander funksies",
+      "description": "Ander funksies kan die assistent namens jou skakel."
+    },
+    "secrets.share": {
+      "title": "Deel die API-sleutel",
+      "description": "Ander funksies mag die gestoorde KI API-sleutel gebruik sonder om dit te sien."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "Die KI-assistent is afgeskakel op hierdie bediener.",
+    "providersNeedOptIn": "Skakel die KI-assistent hierbo aan om verskaffers by te voeg.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "KI-assistent",
+        "description": "Laat gebruikers die KI-assistent aanskakel. Terwyl dit af is, is die assistent vir almal versteek en geblokkeer."
+      },
+      "privateEndpoints": {
+        "label": "Toegelate private KI-gashere",
+        "description": "Gashere op jou privaat netwerk waarna gebruikers 'n verskaffer kan verwys, soos 'n self-gehoste Ollama. Plaas een gasheer op elke lyn."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Aktiveer KI-assistent",
+        "description": "Laat die KI-assistent toe om in hierdie gasheer se terminaal te help. Standaard afgeskakel, en KI moet steeds vir jou rekening geaktiveer word."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistent",
+    "send": "Stuur",
+    "stop": "Stop",
+    "save": "Stoor",
+    "cancel": "Kanselleer",
+    "running": "hardloop",
+    "approve": "Goedkeur",
+    "reject": "Verwerp",
+    "inputPlaceholder": "Vra oor jou bedieners, of beskryf 'n verandering om voor te stel",
+    "selectProvider": "Kies 'n verskaffer",
+    "providerSettings": "Verskafferinstellings",
+    "addProvider": "Voeg verskaffer by",
+    "editProvider": "Wysig verskaffer",
+    "removeProvider": "Verwyder verskaffer",
+    "providerType": "Verskaffer",
+    "providerLabel": "Naam",
+    "providerLabelPlaceholder": "Byvoorbeeld: Plaaslike Ollama",
+    "baseUrl": "Bedieneradres",
+    "apiKey": "API-sleutel",
+    "defaultModel": "Standaardmodel",
+    "defaultModelPlaceholder": "Byvoorbeeld: llama3.1 of claude-opus-5",
+    "labelRequired": "Gee hierdie verskaffer 'n naam",
+    "providerSaveFailed": "Kon nie die verskaffer stoor nie",
+    "providerUpdated": "Verskaffer opgedateer",
+    "providerDeleteFailed": "Kon nie die verskaffer verwyder nie",
+    "privateEndpointHint": "Adresse op jou private netwerk benodig eers 'n administrateur om die gasheer toe te laat.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Antropiese",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Tweeling",
+    "providerOpenaiCompatible": "OpenAI-versoenbaar",
+    "toolArguments": "Invoer",
+    "toolResult": "Resultaat",
+    "statusApplied": "Toegepas",
+    "statusRejected": "Verwerp",
+    "proposalApplied": "Verandering toegepas",
+    "proposalApplyFailed": "Kon nie die verandering toepas nie",
+    "proposalRejectFailed": "Kon nie die verandering verwerp nie",
+    "enableTitle": "Aktiveer die KI-assistent",
+    "enableDescription": "Laat die assistent jou opstelling lees en veranderinge voorstel wat jy kan goedkeur.",
+    "readOnlyCommands": "Laat leesalleen-diagnostiese bevele toe",
+    "readOnlyCommandsDescription": "Die assistent kan 'n kort lys veilige opdragte soos df en uptime uitvoer sonder om elke keer te vra. Enigiets wat 'n bediener verander, word altyd eerste voorgestel.",
+    "modelDetectFailed": "Kon nie die verskaffer bereik nie, so dit is 'n algemene lys. Jy kan enige modelnaam tik.",
+    "modelCustom": "Voer 'n modelnaam in",
+    "modelRefresh": "Verfris lys",
+    "modelPlaceholder": "Kies of tik 'n model",
+    "attachHint": "Tik @ om na 'n gasheer, brokkie of outomatisering te verwys. Veranderinge word voorgestel vir jou om goed te keur.",
+    "runCommandTitle": "Voer opdrag uit",
+    "assistant": "KI-assistent",
+    "terminalPanelEmpty": "Vra die assistent oor hierdie gasheer. Enigiets wat van status verander, benodig eers jou goedkeuring.",
+    "terminalPanelPlaceholder": "Vra oor hierdie gasheer...",
+    "noProvidersConfigured": "Geen KI-verskaffer is nog gekonfigureer nie. Voeg een by in die KI-assistent-oortjie.",
+    "runsInOpenTerminal": "Loop in jou oop terminaalsessie.",
+    "runInTerminal": "Hardloop",
+    "terminalContextPrefill": "Hier is my terminaaluitvoer:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Laat ander funksies jou KI-verskaffer API-sleutel vir hul eie versoeke gebruik. Die sleutel word nooit gekopieer nie, en jy kan dit te eniger tyd herroep."
+    }
+  },
+  "nav": {
+    "ai": "KI"
+  },
+  "onboarding": {
+    "aiTitle": "KI-assistent",
+    "aiIntro": "Termix kan 'n opsionele KI-assistent insluit. Jy kan dit later in jou instellings verander.",
+    "aiSkipTitle": "Los dit af",
+    "aiSkipDesc": "Termix werk soos dit nou doen. Die assistent bly versteek.",
+    "aiEnableTitle": "Skakel dit aan",
+    "aiEnableDesc": "Voeg 'n assistent by wat jou opstelling lees en veranderinge voorstel wat jy goedkeur. Benodig 'n verskaffer wat jy verskaf, soos 'n plaaslike Ollama.",
+    "aiNote": "Niks word êrens heen gestuur totdat jy 'n verskaffer byvoeg en 'n boodskap stuur nie."
+  },
+  "hosts": {
+    "docsLink": "Bekyk dokumente"
+  }
+}

plugins/ai/locales/translated/ar_SA.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "استخدم المساعد",
+      "description": "افتح المساعد واسأله ما تريد."
+    },
+    "manage_providers": {
+      "title": "إدارة الموفر",
+      "description": "أضف، عدّل، واحذف مزودي خدمات الذكاء الاصطناعي ومفاتيح واجهة برمجة التطبيقات الخاصة بهم."
+    },
+    "apply_proposals": {
+      "title": "تقديم المقترحات",
+      "description": "دع المساعد يقوم بتنفيذ التغييرات التي يقترحها."
+    },
+    "services.use": {
+      "title": "استخدم الذكاء الاصطناعي من ميزات أخرى",
+      "description": "قد تقوم ميزات أخرى بالاتصال بالمساعد نيابةً عنك."
+    },
+    "secrets.share": {
+      "title": "شارك مفتاح API",
+      "description": "قد تستخدم ميزات أخرى مفتاح واجهة برمجة تطبيقات الذكاء الاصطناعي المخزن دون رؤيته."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "تم إيقاف تشغيل مساعد الذكاء الاصطناعي على هذا الخادم.",
+    "providersNeedOptIn": "قم بتشغيل مساعد الذكاء الاصطناعي أعلاه لإضافة مزودي الخدمة.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "مساعد الذكاء الاصطناعي",
+        "description": "اسمح للمستخدمين بتفعيل مساعد الذكاء الاصطناعي. عند إيقاف تشغيله، يكون المساعد مخفيًا ومحظورًا عن الجميع."
+      },
+      "privateEndpoints": {
+        "label": "المضيفون الخاصون المسموح بهم للذكاء الاصطناعي",
+        "description": "المضيفون على شبكتك الخاصة الذين يمكن للمستخدمين توجيه مزود الخدمة إليهم، مثل Ollama المُستضاف ذاتيًا. ضع مضيفًا واحدًا على كل سطر."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "تفعيل مساعد الذكاء الاصطناعي",
+        "description": "اسمح للمساعد الذكي بالمساعدة في طرفية هذا المضيف. هذه الميزة معطلة افتراضيًا، ولا يزال يتعين تفعيلها لحسابك."
+      }
+    }
+  },
+  "ai": {
+    "title": "مساعد",
+    "send": "يرسل",
+    "stop": "التوقف",
+    "save": "حفظ",
+    "cancel": "إلغاء",
+    "running": "قيد التشغيل",
+    "approve": "يعتمد",
+    "reject": "يرفض",
+    "inputPlaceholder": "استفسر عن خوادمك، أو صف تغييرًا ترغب في اقتراحه.",
+    "selectProvider": "اختر مزود الخدمة",
+    "providerSettings": "إعدادات المزوّد",
+    "addProvider": "إضافة موفر",
+    "editProvider": "موفر التحرير",
+    "removeProvider": "إزالة الموفر",
+    "providerType": "مزود",
+    "providerLabel": "الاسم",
+    "providerLabelPlaceholder": "على سبيل المثال: أولاما المحلي",
+    "baseUrl": "عنوان الخادم",
+    "apiKey": "مفتاح API",
+    "defaultModel": "النموذج الافتراضي",
+    "defaultModelPlaceholder": "على سبيل المثال: llama3.1 أو claude-opus-5",
+    "labelRequired": "أعطِ هذا المزوّد اسمًا",
+    "providerSaveFailed": "تعذر حفظ بيانات المزوّد",
+    "providerUpdated": "تم تحديث المزوّد",
+    "providerDeleteFailed": "تعذر إزالة الموفر",
+    "privateEndpointHint": "تحتاج العناوين الموجودة على شبكتك الخاصة إلى موافقة المسؤول أولاً للسماح للمضيف بالوصول إليها.",
+    "providerOllama": "أولاما",
+    "providerAnthropic": "الأنثروبيك",
+    "providerOpenai": "أوبن إيه آي",
+    "providerGemini": "جوجل جيميني",
+    "providerOpenaiCompatible": "متوافق مع OpenAI",
+    "toolArguments": "إدخال",
+    "toolResult": "نتيجة",
+    "statusApplied": "مُطبَّق",
+    "statusRejected": "مرفوض",
+    "proposalApplied": "تم تطبيق التغيير",
+    "proposalApplyFailed": "تعذر تطبيق التغيير",
+    "proposalRejectFailed": "لم يكن بالإمكان رفض التغيير",
+    "enableTitle": "قم بتفعيل مساعد الذكاء الاصطناعي",
+    "enableDescription": "دع المساعد يقرأ إعداداتك ويقترح تغييرات لتوافق عليها.",
+    "readOnlyCommands": "السماح بأوامر التشخيص للقراءة فقط",
+    "readOnlyCommandsDescription": "قد يقوم المساعد بتشغيل قائمة مختصرة من الأوامر الآمنة مثل df و uptime دون الحاجة إلى طلب ذلك في كل مرة. ويتم اقتراح أي أمر يُغيّر حالة الخادم أولاً.",
+    "modelDetectFailed": "تعذر الوصول إلى المورّد، لذا فهذه قائمة عامة. يمكنك كتابة أي اسم طراز.",
+    "modelCustom": "أدخل اسم النموذج",
+    "modelRefresh": "تحديث القائمة",
+    "modelPlaceholder": "اختر أو اكتب طرازًا",
+    "attachHint": "اكتب @ للإشارة إلى مضيف أو مقتطف أو عملية آلية. سيتم اقتراح تغييرات عليك الموافقة عليها.",
+    "runCommandTitle": "تشغيل الأمر",
+    "assistant": "مساعد الذكاء الاصطناعي",
+    "terminalPanelEmpty": "استفسر من المساعد عن هذا المضيف. أي تغيير في حالته يتطلب موافقتك أولاً.",
+    "terminalPanelPlaceholder": "اسأل عن هذا المضيف...",
+    "noProvidersConfigured": "لم يتم إعداد أي موفر للذكاء الاصطناعي حتى الآن. أضف واحداً في علامة تبويب مساعد الذكاء الاصطناعي.",
+    "runsInOpenTerminal": "يتم تشغيله في جلسة الطرفية المفتوحة لديك.",
+    "runInTerminal": "تشغيل",
+    "terminalContextPrefill": "هذا هو ناتج الطرفية الخاص بي:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "اسمح للميزات الأخرى باستخدام مفتاح واجهة برمجة التطبيقات (API) الخاص بمزود الذكاء الاصطناعي لطلباتها الخاصة. لا يتم نسخ المفتاح مطلقًا، ويمكنك إلغاء هذا في أي وقت."
+    }
+  },
+  "nav": {
+    "ai": "الذكاء الاصطناعي"
+  },
+  "onboarding": {
+    "aiTitle": "مساعد الذكاء الاصطناعي",
+    "aiIntro": "يمكن أن يتضمن تطبيق Termix مساعدًا ذكيًا اختياريًا. يمكنك تغيير هذا الخيار لاحقًا من الإعدادات.",
+    "aiSkipTitle": "اتركه مغلقًا",
+    "aiSkipDesc": "يعمل برنامج Termix كما هو الآن. ويبقى المساعد مخفياً.",
+    "aiEnableTitle": "قم بتشغيله",
+    "aiEnableDesc": "يُضيف هذا البرنامج مساعدًا يقرأ إعداداتك ويقترح تغييرات توافق عليها. يتطلب ذلك مزود خدمة تُحدده بنفسك، مثل مزود خدمة Ollama محلي.",
+    "aiNote": "لن يتم إرسال أي شيء إلى أي مكان حتى تقوم بإضافة مزود خدمة وإرسال رسالة."
+  },
+  "hosts": {
+    "docsLink": "عرض المستندات"
+  }
+}

plugins/ai/locales/translated/bg_BG.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Използвайте асистента",
+      "description": "Отворете асистента и го попитайте нещо."
+    },
+    "manage_providers": {
+      "title": "Управление на доставчици",
+      "description": "Добавяне, редактиране и премахване на доставчици на изкуствен интелект и техните API ключове."
+    },
+    "apply_proposals": {
+      "title": "Прилагане на предложения",
+      "description": "Нека асистентът извърши предложените от него промени."
+    },
+    "services.use": {
+      "title": "Използвайте изкуствен интелект от други функции",
+      "description": "Други функции може да извикат асистента от ваше име."
+    },
+    "secrets.share": {
+      "title": "Споделете API ключа",
+      "description": "Други функции могат да използват съхранения AI API ключ, без да го виждат."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "Асистентът с изкуствен интелект е изключен на този сървър.",
+    "providersNeedOptIn": "Включете AI асистента по-горе, за да добавите доставчици.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "Асистент с изкуствен интелект",
+        "description": "Позволете на потребителите да включат асистента с изкуствен интелект. Докато това е изключено, асистентът е скрит и блокиран за всички."
+      },
+      "privateEndpoints": {
+        "label": "Разрешени частни хостове с изкуствен интелект",
+        "description": "Хостове във вашата частна мрежа, към които потребителите могат да насочат доставчик, като например самостоятелно хостван Ollama. Поставете по един хост на всеки ред."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Активиране на AI асистент",
+        "description": "Разрешете на AI асистента да помага в терминала на този хост. Изключено по подразбиране и все още изисква AI да е активиран за вашия акаунт."
+      }
+    }
+  },
+  "ai": {
+    "title": "Асистент",
+    "send": "Изпрати",
+    "stop": "Спри",
+    "save": "Запазване",
+    "cancel": "Отказ",
+    "running": "бягане",
+    "approve": "Одобряване",
+    "reject": "Отхвърляне",
+    "inputPlaceholder": "Попитайте за вашите сървъри или опишете промяна, която да предложите",
+    "selectProvider": "Изберете доставчик",
+    "providerSettings": "Настройки на доставчика",
+    "addProvider": "Добавяне на доставчик",
+    "editProvider": "Редактиране на доставчика",
+    "removeProvider": "Премахване на доставчика",
+    "providerType": "Доставчик",
+    "providerLabel": "Име",
+    "providerLabelPlaceholder": "Например: Местна Олама",
+    "baseUrl": "Адрес на сървъра",
+    "apiKey": "API ключ",
+    "defaultModel": "Модел по подразбиране",
+    "defaultModelPlaceholder": "Например: llama3.1 или claude-opus-5",
+    "labelRequired": "Дайте име на този доставчик",
+    "providerSaveFailed": "Доставчикът не можа да бъде запазен",
+    "providerUpdated": "Доставчикът е актуализиран",
+    "providerDeleteFailed": "Доставчикът не можа да бъде премахнат",
+    "privateEndpointHint": "Адресите във вашата частна мрежа се нуждаят първо от администратор, който да разреши хоста.",
+    "providerOllama": "Олама",
+    "providerAnthropic": "Антропен",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Джемини",
+    "providerOpenaiCompatible": "Съвместим с OpenAI",
+    "toolArguments": "Вход",
+    "toolResult": "Резултат",
+    "statusApplied": "Приложено",
+    "statusRejected": "Отхвърлено",
+    "proposalApplied": "Промяната е приложена",
+    "proposalApplyFailed": "Промяната не можа да се приложи",
+    "proposalRejectFailed": "Промяната не можа да бъде отхвърлена",
+    "enableTitle": "Активирайте AI асистента",
+    "enableDescription": "Нека асистентът прочете настройката ви и предложи промени, които да одобрите.",
+    "readOnlyCommands": "Разрешаване на диагностични команди само за четене",
+    "readOnlyCommandsDescription": "Асистентът може да изпълни кратък списък с безопасни команди като df и uptime, без да пита всеки път. Всичко, което променя сървър, винаги се предлага първо.",
+    "modelDetectFailed": "Не можахме да се свържем с доставчика, така че това е общ списък. Можете да въведете име на произволен модел.",
+    "modelCustom": "Въведете име на модел",
+    "modelRefresh": "Обновяване на списъка",
+    "modelPlaceholder": "Изберете или въведете модел",
+    "attachHint": "Въведете @, за да се обърнете към хост, фрагмент или автоматизация. Предлагат се промени за одобрение.",
+    "runCommandTitle": "Изпълнете командата",
+    "assistant": "Асистент с изкуствен интелект",
+    "terminalPanelEmpty": "Попитайте асистента за този хост. Всичко, което променя състоянието, първо изисква вашето одобрение.",
+    "terminalPanelPlaceholder": "Попитайте за този домакин...",
+    "noProvidersConfigured": "Все още не е конфигуриран доставчик на ИИ. Добавете такъв в раздела „Асистент за ИИ“.",
+    "runsInOpenTerminal": "Изпълнява се във вашата отворена терминална сесия.",
+    "runInTerminal": "Бягане",
+    "terminalContextPrefill": "Ето изхода на моя терминал:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Позволете на други функции да използват вашия API ключ на доставчика на изкуствен интелект за свои собствени заявки. Ключът никога не се копира и можете да го отмените по всяко време."
+    }
+  },
+  "nav": {
+    "ai": "Изкуствен интелект"
+  },
+  "onboarding": {
+    "aiTitle": "Асистент с изкуствен интелект",
+    "aiIntro": "Termix може да включва опционален AI асистент. Можете да промените това по-късно в настройките си.",
+    "aiSkipTitle": "Остави го изключено",
+    "aiSkipDesc": "Termix работи както сега. Асистентът остава скрит.",
+    "aiEnableTitle": "Включете го",
+    "aiEnableDesc": "Добавя асистент, който чете настройките ви и предлага промени, които одобрявате. Необходим е доставчик, когото вие предоставяте, например местен Ollama.",
+    "aiNote": "Нищо не се изпраща никъде, докато не добавите доставчик и не изпратите съобщение."
+  },
+  "hosts": {
+    "docsLink": "Преглед на документи"
+  }
+}

plugins/ai/locales/translated/bn_BD.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Use the assistant",
+      "description": "Open the assistant and ask it things."
+    },
+    "manage_providers": {
+      "title": "Manage providers",
+      "description": "Add, edit and remove the AI providers and their API keys."
+    },
+    "apply_proposals": {
+      "title": "Apply proposals",
+      "description": "Let the assistant carry out the changes it suggests."
+    },
+    "services.use": {
+      "title": "Use AI from other features",
+      "description": "Other features may call the assistant on your behalf."
+    },
+    "secrets.share": {
+      "title": "Share the API key",
+      "description": "Other features may use the stored AI API key without seeing it."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "The AI assistant is turned off on this server.",
+    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI assistant",
+        "description": "Let users turn on the AI assistant. While this is off, the assistant is hidden and blocked for everyone."
+      },
+      "privateEndpoints": {
+        "label": "Allowed private AI hosts",
+        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Enable AI Assistant",
+        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistant",
+    "send": "Send",
+    "stop": "Stop",
+    "save": "Save",
+    "cancel": "Cancel",
+    "running": "running",
+    "approve": "Approve",
+    "reject": "Reject",
+    "inputPlaceholder": "Ask about your servers, or describe a change to propose",
+    "selectProvider": "Select a provider",
+    "providerSettings": "Provider settings",
+    "addProvider": "Add provider",
+    "editProvider": "Edit provider",
+    "removeProvider": "Remove provider",
+    "providerType": "Provider",
+    "providerLabel": "Name",
+    "providerLabelPlaceholder": "For example: Local Ollama",
+    "baseUrl": "Server address",
+    "apiKey": "API key",
+    "defaultModel": "Default model",
+    "defaultModelPlaceholder": "For example: llama3.1 or claude-opus-5",
+    "labelRequired": "Give this provider a name",
+    "providerSaveFailed": "Could not save the provider",
+    "providerUpdated": "Provider updated",
+    "providerDeleteFailed": "Could not remove the provider",
+    "privateEndpointHint": "Addresses on your private network need an administrator to allow the host first.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI compatible",
+    "toolArguments": "Input",
+    "toolResult": "Result",
+    "statusApplied": "Applied",
+    "statusRejected": "Rejected",
+    "proposalApplied": "Change applied",
+    "proposalApplyFailed": "Could not apply the change",
+    "proposalRejectFailed": "Could not reject the change",
+    "enableTitle": "Enable the AI assistant",
+    "enableDescription": "Let the assistant read your setup and suggest changes for you to approve.",
+    "readOnlyCommands": "Allow read-only diagnostic commands",
+    "readOnlyCommandsDescription": "The assistant may run a short list of safe commands like df and uptime without asking each time. Anything that changes a server is always proposed first.",
+    "modelDetectFailed": "Could not reach the provider, so this is a general list. You can type any model name.",
+    "modelCustom": "Enter a model name",
+    "modelRefresh": "Refresh list",
+    "modelPlaceholder": "Choose or type a model",
+    "attachHint": "Type @ to reference a host, snippet or automation. Changes are proposed for you to approve.",
+    "runCommandTitle": "Run command",
+    "assistant": "AI Assistant",
+    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
+    "terminalPanelPlaceholder": "Ask about this host...",
+    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
+    "runsInOpenTerminal": "Runs in your open terminal session.",
+    "runInTerminal": "Run",
+    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI assistant",
+    "aiIntro": "Termix can include an optional AI assistant. You can change this later in your settings.",
+    "aiSkipTitle": "Leave it off",
+    "aiSkipDesc": "Termix works as it does now. The assistant stays hidden.",
+    "aiEnableTitle": "Turn it on",
+    "aiEnableDesc": "Adds an assistant that reads your setup and suggests changes you approve. Needs a provider you supply, such as a local Ollama.",
+    "aiNote": "Nothing is sent anywhere until you add a provider and send a message."
+  },
+  "hosts": {
+    "docsLink": "View docs"
+  }
+}

plugins/ai/locales/translated/ca_ES.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Utilitza l'assistent",
+      "description": "Obre l'assistent i fes-li preguntes."
+    },
+    "manage_providers": {
+      "title": "Gestiona els proveïdors",
+      "description": "Afegiu, editeu i elimineu els proveïdors d'IA i les seves claus API."
+    },
+    "apply_proposals": {
+      "title": "Aplicar propostes",
+      "description": "Deixa que l'assistent dugui a terme els canvis que suggereixi."
+    },
+    "services.use": {
+      "title": "Utilitza la IA d'altres funcions",
+      "description": "Altres funcions poden trucar a l'assistent en nom teu."
+    },
+    "secrets.share": {
+      "title": "Comparteix la clau de l'API",
+      "description": "Altres funcions poden utilitzar la clau de l'API d'IA emmagatzemada sense veure-la."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "L'assistent d'IA està desactivat en aquest servidor.",
+    "providersNeedOptIn": "Activa l'assistent d'IA que hi ha a sobre per afegir proveïdors.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "Assistent d'IA",
+        "description": "Permet que els usuaris activin l'assistent d'IA. Mentre estigui desactivat, l'assistent està ocult i bloquejat per a tothom."
+      },
+      "privateEndpoints": {
+        "label": "Amfitrions d'IA privats permesos",
+        "description": "Amfitrions de la vostra xarxa privada als quals els usuaris poden dirigir un proveïdor, com ara un Ollama autoallotjat. Poseu un amfitrió a cada línia."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Activa l'Assistent d'IA",
+        "description": "Permet que l'assistent d'IA ajudi al terminal d'aquest amfitrió. Desactivat per defecte, però encara cal que la IA estigui activada per al teu compte."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistent",
+    "send": "Enviar",
+    "stop": "Atura",
+    "save": "Desa",
+    "cancel": "Cancel·la",
+    "running": "corrent",
+    "approve": "Aprova",
+    "reject": "Rebutja",
+    "inputPlaceholder": "Pregunteu pels vostres cambrers o descriviu un canvi que vulgueu proposar",
+    "selectProvider": "Seleccioneu un proveïdor",
+    "providerSettings": "Configuració del proveïdor",
+    "addProvider": "Afegeix un proveïdor",
+    "editProvider": "Edita el proveïdor",
+    "removeProvider": "Elimina el proveïdor",
+    "providerType": "Proveïdor",
+    "providerLabel": "Nom",
+    "providerLabelPlaceholder": "Per exemple: Ollama local",
+    "baseUrl": "Adreça del servidor",
+    "apiKey": "Clau API",
+    "defaultModel": "Model per defecte",
+    "defaultModelPlaceholder": "Per exemple: llama3.1 o claude-opus-5",
+    "labelRequired": "Doneu un nom a aquest proveïdor",
+    "providerSaveFailed": "No s'ha pogut desar el proveïdor",
+    "providerUpdated": "Proveïdor actualitzat",
+    "providerDeleteFailed": "No s'ha pogut eliminar el proveïdor",
+    "privateEndpointHint": "Les adreces de la vostra xarxa privada necessiten primer que un administrador permeti l'accés a l'amfitrió.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Antròpic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Bessons",
+    "providerOpenaiCompatible": "Compatible amb OpenAI",
+    "toolArguments": "Entrada",
+    "toolResult": "Resultat",
+    "statusApplied": "Aplicat",
+    "statusRejected": "Rebutjat",
+    "proposalApplied": "Canvi aplicat",
+    "proposalApplyFailed": "No s'ha pogut aplicar el canvi",
+    "proposalRejectFailed": "No s'ha pogut rebutjar el canvi",
+    "enableTitle": "Activa l'assistent d'IA",
+    "enableDescription": "Deixa que l'assistent llegeixi la teva configuració i et suggereixi canvis perquè els aprovis.",
+    "readOnlyCommands": "Permetre ordres de diagnòstic de només lectura",
+    "readOnlyCommandsDescription": "L'assistent pot executar una llista curta d'ordres segures com ara df i uptime sense preguntar cada vegada. Qualsevol cosa que canviï un servidor sempre es proposa primer.",
+    "modelDetectFailed": "No s'ha pogut contactar amb el proveïdor, per tant, aquesta és una llista general. Podeu escriure qualsevol nom de model.",
+    "modelCustom": "Introduïu un nom de model",
+    "modelRefresh": "Actualitza la llista",
+    "modelPlaceholder": "Trieu o escriviu un model",
+    "attachHint": "Escriviu @ per fer referència a un host, fragment o automatització. Es proposen canvis perquè els aprovi.",
+    "runCommandTitle": "Executa l'ordre",
+    "assistant": "Assistent d'IA",
+    "terminalPanelEmpty": "Pregunta a l'assistent sobre aquest amfitrió. Qualsevol cosa que canviï d'estat necessita primer la teva aprovació.",
+    "terminalPanelPlaceholder": "Pregunta per aquest amfitrió...",
+    "noProvidersConfigured": "Encara no hi ha cap proveïdor d'IA configurat. Afegeix-ne un a la pestanya Assistent d'IA.",
+    "runsInOpenTerminal": "S'executa a la sessió de terminal oberta.",
+    "runInTerminal": "Corre",
+    "terminalContextPrefill": "Aquí teniu la sortida del meu terminal:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Permet que altres funcions utilitzin la clau de l'API del proveïdor d'IA per a les seves pròpies sol·licituds. La clau no es copia mai i pots revocar-la en qualsevol moment."
+    }
+  },
+  "nav": {
+    "ai": "IA"
+  },
+  "onboarding": {
+    "aiTitle": "Assistent d'IA",
+    "aiIntro": "Termix pot incloure un assistent d'IA opcional. Pots canviar-ho més tard a la configuració.",
+    "aiSkipTitle": "Deixa-ho fora",
+    "aiSkipDesc": "Termix funciona com ho fa ara. L'assistent roman ocult.",
+    "aiEnableTitle": "Engega-ho",
+    "aiEnableDesc": "Afegeix un assistent que llegeix la configuració i suggereix els canvis que aproveu. Necessita un proveïdor que subministreu, com ara un Ollama local.",
+    "aiNote": "No s'envia res enlloc fins que no afegiu un proveïdor i envieu un missatge."
+  },
+  "hosts": {
+    "docsLink": "Veure documents"
+  }
+}

plugins/ai/locales/translated/cs_CZ.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Použijte asistenta",
+      "description": "Otevřete asistenta a zeptejte se ho na něco."
+    },
+    "manage_providers": {
+      "title": "Spravovat poskytovatele",
+      "description": "Přidávejte, upravujte a odebírejte poskytovatele umělé inteligence a jejich klíče API."
+    },
+    "apply_proposals": {
+      "title": "Použít návrhy",
+      "description": "Nechte asistenta provést změny, které navrhuje."
+    },
+    "services.use": {
+      "title": "Používejte umělou inteligenci z jiných funkcí",
+      "description": "Jiné funkce mohou zavolat asistenta za vás."
+    },
+    "secrets.share": {
+      "title": "Sdílení klíče API",
+      "description": "Jiné funkce mohou používat uložený klíč API AI, aniž by ho viděly."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "Asistent s umělou inteligencí je na tomto serveru vypnutý.",
+    "providersNeedOptIn": "Zapněte výše uvedeného asistenta s umělou inteligencí a přidejte poskytovatele.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "Asistent s umělou inteligencí",
+        "description": "Umožněte uživatelům zapnout asistenta s umělou inteligencí. Pokud je tato funkce vypnutá, asistent je skrytý a blokovaný pro všechny."
+      },
+      "privateEndpoints": {
+        "label": "Povolení soukromí hostitelé s umělou inteligencí",
+        "description": "Hostitelé ve vaší privátní síti, na které mohou uživatelé odkazovat poskytovatele, například Ollama hostovaná na vlastním serveru. Na každý řádek uveďte jednoho hostitele."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Povolit asistenta s umělou inteligencí",
+        "description": "Povolit asistentovi s umělou inteligencí pomáhat v terminálu tohoto hostitele. Ve výchozím nastavení vypnuto, ale stále vyžaduje, aby byla pro váš účet povolena umělá inteligence."
+      }
+    }
+  },
+  "ai": {
+    "title": "Asistent",
+    "send": "Poslat",
+    "stop": "Zastávka",
+    "save": "Uložit",
+    "cancel": "Zrušit",
+    "running": "běh",
+    "approve": "Schvalovat",
+    "reject": "Odmítnout",
+    "inputPlaceholder": "Zeptejte se na své servery nebo popište změnu, kterou chcete navrhnout",
+    "selectProvider": "Vyberte poskytovatele",
+    "providerSettings": "Nastavení poskytovatele",
+    "addProvider": "Přidat poskytovatele",
+    "editProvider": "Upravit poskytovatele",
+    "removeProvider": "Odebrat poskytovatele",
+    "providerType": "Poskytovatel",
+    "providerLabel": "Jméno",
+    "providerLabelPlaceholder": "Například: Místní Ollama",
+    "baseUrl": "Adresa serveru",
+    "apiKey": "Klíč API",
+    "defaultModel": "Výchozí model",
+    "defaultModelPlaceholder": "Například: llama3.1 nebo claude-opus-5",
+    "labelRequired": "Zadejte tomuto poskytovateli název",
+    "providerSaveFailed": "Nepodařilo se uložit poskytovatele",
+    "providerUpdated": "Poskytovatel aktualizován",
+    "providerDeleteFailed": "Nepodařilo se odebrat poskytovatele",
+    "privateEndpointHint": "Adresy ve vaší privátní síti vyžadují, aby je správce nejprve povolil hostiteli.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Antropický",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "Kompatibilní s OpenAI",
+    "toolArguments": "Vstup",
+    "toolResult": "Výsledek",
+    "statusApplied": "Aplikovaný",
+    "statusRejected": "Odmítnuto",
+    "proposalApplied": "Změna použita",
+    "proposalApplyFailed": "Změnu se nepodařilo použít",
+    "proposalRejectFailed": "Změnu se nepodařilo odmítnout",
+    "enableTitle": "Povolte asistenta s umělou inteligencí",
+    "enableDescription": "Nechte asistenta přečíst si vaše nastavení a navrhnout změny ke schválení.",
+    "readOnlyCommands": "Povolit diagnostické příkazy pouze pro čtení",
+    "readOnlyCommandsDescription": "Asistent může spustit krátký seznam bezpečných příkazů, jako například df a uptime, aniž by se pokaždé ptal. Vše, co mění server, je vždy navrženo jako první.",
+    "modelDetectFailed": "Nepodařilo se mi spojit s poskytovatelem, toto je obecný seznam. Můžete zadat libovolný název modelu.",
+    "modelCustom": "Zadejte název modelu",
+    "modelRefresh": "Obnovit seznam",
+    "modelPlaceholder": "Vyberte nebo zadejte model",
+    "attachHint": "Zadejte @ pro odkaz na hostitele, úryvek kódu nebo automatizaci. Změny jsou navrženy ke schválení.",
+    "runCommandTitle": "Spustit příkaz",
+    "assistant": "Asistent umělé inteligence",
+    "terminalPanelEmpty": "Zeptejte se asistenta na tohoto hostitele. Jakákoli změna stavu vyžaduje váš první souhlas.",
+    "terminalPanelPlaceholder": "Zeptejte se na tohoto hostitele...",
+    "noProvidersConfigured": "Zatím není nakonfigurován žádný poskytovatel AI. Přidejte ho na kartě Asistent AI.",
+    "runsInOpenTerminal": "Spustí se ve vaší otevřené terminálové relaci.",
+    "runInTerminal": "Běh",
+    "terminalContextPrefill": "Zde je můj terminálový výstup:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Umožněte ostatním funkcím používat váš klíč API poskytovatele AI pro jejich vlastní požadavky. Klíč se nikdy nekopíruje a jeho použití můžete kdykoli zrušit."
+    }
+  },
+  "nav": {
+    "ai": "Umělá inteligence"
+  },
+  "onboarding": {
+    "aiTitle": "Asistent s umělou inteligencí",
+    "aiIntro": "Termix může obsahovat volitelného asistenta s umělou inteligencí. Toto můžete později změnit v nastavení.",
+    "aiSkipTitle": "Nech to být",
+    "aiSkipDesc": "Termix funguje stejně jako teď. Asistent zůstává skrytý.",
+    "aiEnableTitle": "Zapněte to",
+    "aiEnableDesc": "Přidá asistenta, který si přečte vaše nastavení a navrhne změny, které schválíte. Vyžaduje poskytovatele, kterého dodáte, například místní Ollamu.",
+    "aiNote": "Nic se nikam neodesílá, dokud nepřidáte poskytovatele a neodešlete zprávu."
+  },
+  "hosts": {
+    "docsLink": "Zobrazit dokumenty"
+  }
+}

plugins/ai/locales/translated/da_DK.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Brug assistenten",
+      "description": "Åbn assistenten og stil den spørgsmål."
+    },
+    "manage_providers": {
+      "title": "Administrer udbydere",
+      "description": "Tilføj, rediger og fjern AI-udbyderne og deres API-nøgler."
+    },
+    "apply_proposals": {
+      "title": "Anvend forslag",
+      "description": "Lad assistenten udføre de foreslåede ændringer."
+    },
+    "services.use": {
+      "title": "Brug AI fra andre funktioner",
+      "description": "Andre funktioner kan ringe til assistenten på dine vegne."
+    },
+    "secrets.share": {
+      "title": "Del API-nøglen",
+      "description": "Andre funktioner kan bruge den gemte AI API-nøgle uden at se den."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "AI-assistenten er slået fra på denne server.",
+    "providersNeedOptIn": "Slå AI-assistenten ovenfor til for at tilføje udbydere.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI-assistent",
+        "description": "Lad brugerne aktivere AI-assistenten. Når dette er slået fra, er assistenten skjult og blokeret for alle."
+      },
+      "privateEndpoints": {
+        "label": "Tilladte private AI-værter",
+        "description": "Værter på dit private netværk, som brugerne kan henvise en udbyder til, f.eks. en selvhostet Ollama. Sæt én vært på hver linje."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Aktivér AI-assistent",
+        "description": "Tillad AI-assistenten at hjælpe i denne værts terminal. Deaktiveret som standard, og kræver stadig, at AI er aktiveret for din konto."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistent",
+    "send": "Sende",
+    "stop": "Stop",
+    "save": "Spare",
+    "cancel": "Ophæve",
+    "running": "løb",
+    "approve": "Godkende",
+    "reject": "Afvise",
+    "inputPlaceholder": "Spørg om dine servere, eller beskriv en ændring, du vil foreslå",
+    "selectProvider": "Vælg en udbyder",
+    "providerSettings": "Udbyderindstillinger",
+    "addProvider": "Tilføj udbyder",
+    "editProvider": "Rediger udbyder",
+    "removeProvider": "Fjern udbyder",
+    "providerType": "Udbyder",
+    "providerLabel": "Navn",
+    "providerLabelPlaceholder": "For eksempel: Lokal Ollama",
+    "baseUrl": "Serveradresse",
+    "apiKey": "API-nøgle",
+    "defaultModel": "Standardmodel",
+    "defaultModelPlaceholder": "For eksempel: llama3.1 eller claude-opus-5",
+    "labelRequired": "Giv denne udbyder et navn",
+    "providerSaveFailed": "Udbyderen kunne ikke gemmes",
+    "providerUpdated": "Udbyder opdateret",
+    "providerDeleteFailed": "Udbyderen kunne ikke fjernes",
+    "privateEndpointHint": "Adresser på dit private netværk kræver først tilladelse fra en administrator til værten.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Antropisk",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI-kompatibel",
+    "toolArguments": "Input",
+    "toolResult": "Resultat",
+    "statusApplied": "Anvendt",
+    "statusRejected": "Afvist",
+    "proposalApplied": "Ændring anvendt",
+    "proposalApplyFailed": "Ændringen kunne ikke anvendes",
+    "proposalRejectFailed": "Kunne ikke afvise ændringen",
+    "enableTitle": "Aktivér AI-assistenten",
+    "enableDescription": "Lad assistenten læse din opsætning og foreslå ændringer, som du kan godkende.",
+    "readOnlyCommands": "Tillad skrivebeskyttede diagnosticeringskommandoer",
+    "readOnlyCommandsDescription": "Assistenten kan køre en kort liste med sikre kommandoer som f.eks. df og uptime uden at spørge hver gang. Alt, der ændrer en server, foreslås altid først.",
+    "modelDetectFailed": "Kunne ikke få kontakt med udbyderen, så dette er en generel liste. Du kan skrive et hvilket som helst modelnavn.",
+    "modelCustom": "Indtast et modelnavn",
+    "modelRefresh": "Opdater listen",
+    "modelPlaceholder": "Vælg eller skriv en model",
+    "attachHint": "Skriv @ for at referere til en vært, et kodestykke eller en automatisering. Ændringer foreslås, som du skal godkende.",
+    "runCommandTitle": "Kør kommando",
+    "assistant": "AI-assistent",
+    "terminalPanelEmpty": "Spørg assistenten om denne vært. Alt, der ændrer status, kræver din godkendelse først.",
+    "terminalPanelPlaceholder": "Spørg om denne vært...",
+    "noProvidersConfigured": "Der er endnu ikke konfigureret nogen AI-udbyder. Tilføj en i fanen AI-assistent.",
+    "runsInOpenTerminal": "Kører i din åbne terminalsession.",
+    "runInTerminal": "Løbe",
+    "terminalContextPrefill": "Her er mit terminaloutput:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Lad andre funktioner bruge din AI-udbyders API-nøgle til deres egne anmodninger. Nøglen kopieres aldrig, og du kan til enhver tid tilbagekalde den."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI-assistent",
+    "aiIntro": "Termix kan inkludere en valgfri AI-assistent. Du kan ændre dette senere i dine indstillinger.",
+    "aiSkipTitle": "Lad det være slukket",
+    "aiSkipDesc": "Termix fungerer som den gør nu. Assistenten forbliver skjult.",
+    "aiEnableTitle": "Tænd den",
+    "aiEnableDesc": "Tilføjer en assistent, der læser din opsætning og foreslår ændringer, du godkender. Kræver en udbyder, du angiver, f.eks. en lokal Ollama.",
+    "aiNote": "Intet sendes nogen steder, før du tilføjer en udbyder og sender en besked."
+  },
+  "hosts": {
+    "docsLink": "Se dokumenter"
+  }
+}

plugins/ai/locales/translated/de_DE.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Nutzen Sie den Assistenten",
+      "description": "Öffne den Assistenten und stelle ihm Fragen."
+    },
+    "manage_providers": {
+      "title": "Anbieter verwalten",
+      "description": "KI-Anbieter und ihre API-Schlüssel hinzufügen, bearbeiten und entfernen."
+    },
+    "apply_proposals": {
+      "title": "Vorschläge einreichen",
+      "description": "Lassen Sie den Assistenten die von ihm vorgeschlagenen Änderungen durchführen."
+    },
+    "services.use": {
+      "title": "Nutzen Sie KI aus anderen Funktionen",
+      "description": "Andere Funktionen rufen möglicherweise in Ihrem Namen den Assistenten auf."
+    },
+    "secrets.share": {
+      "title": "Teilen Sie den API-Schlüssel",
+      "description": "Andere Funktionen verwenden möglicherweise den gespeicherten KI-API-Schlüssel, ohne ihn anzuzeigen."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "Der KI-Assistent ist auf diesem Server deaktiviert.",
+    "providersNeedOptIn": "Aktivieren Sie den obenstehenden KI-Assistenten, um Anbieter hinzuzufügen.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "KI-Assistent",
+        "description": "Ermöglichen Sie den Nutzern, den KI-Assistenten zu aktivieren. Solange diese Option deaktiviert ist, ist der Assistent für alle ausgeblendet und gesperrt."
+      },
+      "privateEndpoints": {
+        "label": "Zulässige private KI-Hosts",
+        "description": "Hosts in Ihrem privaten Netzwerk, auf die Benutzer einen Provider verweisen können, wie z. B. ein selbst gehostetes Ollama. Fügen Sie in jede Zeile einen Host ein."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "KI-Assistent aktivieren",
+        "description": "Erlauben Sie dem KI-Assistenten, im Terminal dieses Hosts Hilfe zu leisten. Standardmäßig deaktiviert; die KI muss weiterhin für Ihr Konto aktiviert sein."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistent",
+    "send": "Schicken",
+    "stop": "Stoppen",
+    "save": "Speichern",
+    "cancel": "Abbrechen",
+    "running": "laufend",
+    "approve": "Genehmigen",
+    "reject": "Ablehnen",
+    "inputPlaceholder": "Erkundigen Sie sich nach Ihren Servern oder beschreiben Sie einen Änderungsvorschlag.",
+    "selectProvider": "Wählen Sie einen Anbieter aus",
+    "providerSettings": "Anbietereinstellungen",
+    "addProvider": "Anbieter hinzufügen",
+    "editProvider": "Anbieter bearbeiten",
+    "removeProvider": "Anbieter entfernen",
+    "providerType": "Anbieter",
+    "providerLabel": "Name",
+    "providerLabelPlaceholder": "Zum Beispiel: Lokaler Ollama",
+    "baseUrl": "Serveradresse",
+    "apiKey": "API-Schlüssel",
+    "defaultModel": "Standardmodell",
+    "defaultModelPlaceholder": "Zum Beispiel: llama3.1 oder claude-opus-5",
+    "labelRequired": "Geben Sie diesem Anbieter einen Namen",
+    "providerSaveFailed": "Der Anbieter konnte nicht gespeichert werden.",
+    "providerUpdated": "Anbieter aktualisiert",
+    "providerDeleteFailed": "Der Anbieter konnte nicht entfernt werden.",
+    "privateEndpointHint": "Adressen in Ihrem privaten Netzwerk benötigen eine vorherige Genehmigung durch einen Administrator.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropisch",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI-kompatibel",
+    "toolArguments": "Eingabe",
+    "toolResult": "Ergebnis",
+    "statusApplied": "Angewandt",
+    "statusRejected": "Abgelehnt",
+    "proposalApplied": "Änderung angewendet",
+    "proposalApplyFailed": "Die Änderung konnte nicht angewendet werden.",
+    "proposalRejectFailed": "Die Änderung konnte nicht abgelehnt werden.",
+    "enableTitle": "Aktivieren Sie den KI-Assistenten",
+    "enableDescription": "Lassen Sie den Assistenten Ihre Einstellungen lesen und Ihnen Änderungen zur Genehmigung vorschlagen.",
+    "readOnlyCommands": "Zulassen von schreibgeschützten Diagnosebefehlen",
+    "readOnlyCommandsDescription": "Der Assistent kann eine kurze Liste sicherer Befehle wie df und uptime ausführen, ohne jedes Mal nachzufragen. Alle Änderungen, die einen Server betreffen, werden immer zuerst vorgeschlagen.",
+    "modelDetectFailed": "Der Anbieter konnte nicht erreicht werden, daher handelt es sich um eine allgemeine Liste. Sie können einen beliebigen Modellnamen eingeben.",
+    "modelCustom": "Geben Sie einen Modellnamen ein",
+    "modelRefresh": "Liste aktualisieren",
+    "modelPlaceholder": "Wählen Sie ein Modell aus oder geben Sie es ein.",
+    "attachHint": "Geben Sie @ ein, um auf einen Host, ein Code-Snippet oder eine Automatisierung zu verweisen. Die Änderungen werden Ihnen zur Genehmigung vorgeschlagen.",
+    "runCommandTitle": "Befehl ausführen",
+    "assistant": "KI-Assistent",
+    "terminalPanelEmpty": "Fragen Sie den Assistenten nach diesem Gastgeber. Jede Statusänderung bedarf Ihrer vorherigen Zustimmung.",
+    "terminalPanelPlaceholder": "Erkundigen Sie sich nach diesem Gastgeber...",
+    "noProvidersConfigured": "Es ist noch kein KI-Anbieter konfiguriert. Fügen Sie einen im Tab „KI-Assistent“ hinzu.",
+    "runsInOpenTerminal": "Wird in Ihrer geöffneten Terminal-Sitzung ausgeführt.",
+    "runInTerminal": "Ausführen",
+    "terminalContextPrefill": "Hier ist meine Terminalausgabe:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Erlauben Sie anderen Funktionen, Ihren API-Schlüssel Ihres KI-Anbieters für ihre eigenen Anfragen zu verwenden. Der Schlüssel wird niemals kopiert, und Sie können diese Berechtigung jederzeit widerrufen."
+    }
+  },
+  "nav": {
+    "ai": "KI"
+  },
+  "onboarding": {
+    "aiTitle": "KI-Assistent",
+    "aiIntro": "Termix kann optional einen KI-Assistenten beinhalten. Sie können dies später in Ihren Einstellungen ändern.",
+    "aiSkipTitle": "Lass es weg",
+    "aiSkipDesc": "Termix funktioniert wie bisher. Der Assistent bleibt verborgen.",
+    "aiEnableTitle": "Schalte es ein",
+    "aiEnableDesc": "Fügt einen Assistenten hinzu, der Ihre Einstellungen analysiert und Ihnen von Ihnen genehmigte Änderungen vorschlägt. Benötigt einen von Ihnen angegebenen Anbieter, z. B. einen lokalen Ollama-Händler.",
+    "aiNote": "Es wird nichts gesendet, bis Sie einen Anbieter hinzufügen und eine Nachricht senden."
+  },
+  "hosts": {
+    "docsLink": "Dokumentation anzeigen"
+  }
+}

plugins/ai/locales/translated/el_GR.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Χρησιμοποιήστε τον βοηθό",
+      "description": "Άνοιξε τον βοηθό και ρώτα τον πράγματα."
+    },
+    "manage_providers": {
+      "title": "Διαχείριση παρόχων",
+      "description": "Προσθήκη, επεξεργασία και κατάργηση των παρόχων τεχνητής νοημοσύνης και των κλειδιών API τους."
+    },
+    "apply_proposals": {
+      "title": "Εφαρμογή προτάσεων",
+      "description": "Αφήστε τον βοηθό να εκτελέσει τις αλλαγές που προτείνει."
+    },
+    "services.use": {
+      "title": "Χρησιμοποιήστε την Τεχνητή Νοημοσύνη από άλλες λειτουργίες",
+      "description": "Άλλες λειτουργίες ενδέχεται να καλούν τον βοηθό εκ μέρους σας."
+    },
+    "secrets.share": {
+      "title": "Κοινή χρήση του κλειδιού API",
+      "description": "Άλλες λειτουργίες ενδέχεται να χρησιμοποιούν το αποθηκευμένο κλειδί API AI χωρίς να το βλέπουν."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "Ο βοηθός τεχνητής νοημοσύνης είναι απενεργοποιημένος σε αυτόν τον διακομιστή.",
+    "providersNeedOptIn": "Ενεργοποιήστε τον βοηθό τεχνητής νοημοσύνης παραπάνω για να προσθέσετε παρόχους.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "Βοηθός Τεχνητής Νοημοσύνης",
+        "description": "Επιτρέψτε στους χρήστες να ενεργοποιήσουν τον βοηθό τεχνητής νοημοσύνης. Όσο είναι απενεργοποιημένος, ο βοηθός είναι κρυφός και αποκλεισμένος για όλους."
+      },
+      "privateEndpoints": {
+        "label": "Επιτρεπόμενοι ιδιωτικοί κεντρικοί υπολογιστές τεχνητής νοημοσύνης",
+        "description": "Κεντρικοί υπολογιστές στο ιδιωτικό σας δίκτυο στους οποίους οι χρήστες μπορούν να υποδείξουν έναν πάροχο, όπως ένα αυτο-φιλοξενούμενο Ollama. Τοποθετήστε έναν κεντρικό υπολογιστή σε κάθε γραμμή."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Ενεργοποίηση Βοηθού Τεχνητής Νοημοσύνης",
+        "description": "Επιτρέψτε στον βοηθό τεχνητής νοημοσύνης να βοηθά στο τερματικό αυτού του κεντρικού υπολογιστή. Απενεργοποιημένο από προεπιλογή και εξακολουθεί να χρειάζεται ενεργοποιημένη την τεχνητή νοημοσύνη για τον λογαριασμό σας."
+      }
+    }
+  },
+  "ai": {
+    "title": "Βοηθός",
+    "send": "Στέλνω",
+    "stop": "Στάση",
+    "save": "Εκτός",
+    "cancel": "Ματαίωση",
+    "running": "τρέξιμο",
+    "approve": "Εγκρίνω",
+    "reject": "Απορρίπτω",
+    "inputPlaceholder": "Ρωτήστε για τους διακομιστές σας ή περιγράψτε μια αλλαγή που προτείνετε",
+    "selectProvider": "Επιλέξτε έναν πάροχο",
+    "providerSettings": "Ρυθμίσεις παρόχου",
+    "addProvider": "Προσθήκη παρόχου",
+    "editProvider": "Επεξεργασία παρόχου",
+    "removeProvider": "Κατάργηση παρόχου",
+    "providerType": "Προμηθευτής",
+    "providerLabel": "Ονομα",
+    "providerLabelPlaceholder": "Για παράδειγμα: Τοπικό Ollama",
+    "baseUrl": "Διεύθυνση διακομιστή",
+    "apiKey": "Κλειδί API",
+    "defaultModel": "Προεπιλεγμένο μοντέλο",
+    "defaultModelPlaceholder": "Για παράδειγμα: llama3.1 ή claude-opus-5",
+    "labelRequired": "Δώστε σε αυτόν τον πάροχο ένα όνομα",
+    "providerSaveFailed": "Δεν ήταν δυνατή η αποθήκευση του παρόχου",
+    "providerUpdated": "Ο πάροχος ενημερώθηκε",
+    "providerDeleteFailed": "Δεν ήταν δυνατή η κατάργηση του παρόχου",
+    "privateEndpointHint": "Οι διευθύνσεις στο ιδιωτικό σας δίκτυο χρειάζονται πρώτα έναν διαχειριστή για να επιτρέψει στον κεντρικό υπολογιστή.",
+    "providerOllama": "Ολάμα",
+    "providerAnthropic": "Ανθρώπινο",
+    "providerOpenai": "Ανοιχτή Τεχνητή Νοημοσύνη",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "Συμβατό με OpenAI",
+    "toolArguments": "Εισαγωγή",
+    "toolResult": "Αποτέλεσμα",
+    "statusApplied": "Εφαρμοσμένος",
+    "statusRejected": "Απορρίφθηκε",
+    "proposalApplied": "Η αλλαγή εφαρμόστηκε",
+    "proposalApplyFailed": "Δεν ήταν δυνατή η εφαρμογή της αλλαγής",
+    "proposalRejectFailed": "Δεν ήταν δυνατή η απόρριψη της αλλαγής",
+    "enableTitle": "Ενεργοποίηση του βοηθού τεχνητής νοημοσύνης",
+    "enableDescription": "Αφήστε τον βοηθό να διαβάσει τη ρύθμισή σας και να σας προτείνει αλλαγές για έγκριση.",
+    "readOnlyCommands": "Να επιτρέπονται διαγνωστικές εντολές μόνο για ανάγνωση",
+    "readOnlyCommandsDescription": "Ο βοηθός μπορεί να εκτελέσει μια σύντομη λίστα ασφαλών εντολών όπως df και uptime χωρίς να ρωτάει κάθε φορά. Οτιδήποτε αλλάζει έναν διακομιστή προτείνεται πάντα πρώτο.",
+    "modelDetectFailed": "Δεν ήταν δυνατή η επικοινωνία με τον πάροχο, επομένως αυτή είναι μια γενική λίστα. Μπορείτε να πληκτρολογήσετε οποιοδήποτε όνομα μοντέλου.",
+    "modelCustom": "Εισαγάγετε ένα όνομα μοντέλου",
+    "modelRefresh": "Ανανέωση λίστας",
+    "modelPlaceholder": "Επιλέξτε ή πληκτρολογήστε ένα μοντέλο",
+    "attachHint": "Πληκτρολογήστε @ για να αναφέρετε έναν κεντρικό υπολογιστή, ένα απόσπασμα κώδικα ή έναν αυτοματισμό. Προτείνονται αλλαγές για έγκριση.",
+    "runCommandTitle": "Εκτέλεση εντολής",
+    "assistant": "Βοηθός Τεχνητής Νοημοσύνης",
+    "terminalPanelEmpty": "Ρωτήστε τον βοηθό σχετικά με αυτόν τον οικοδεσπότη. Οτιδήποτε αλλάζει κατάσταση χρειάζεται πρώτα την έγκρισή σας.",
+    "terminalPanelPlaceholder": "Ρωτήστε για αυτόν τον οικοδεσπότη...",
+    "noProvidersConfigured": "Δεν έχει διαμορφωθεί ακόμη πάροχος τεχνητής νοημοσύνης. Προσθέστε έναν στην καρτέλα βοηθού τεχνητής νοημοσύνης.",
+    "runsInOpenTerminal": "Εκτελείται στην ανοιχτή συνεδρία τερματικού σας.",
+    "runInTerminal": "Τρέξιμο",
+    "terminalContextPrefill": "Εδώ είναι η έξοδος του τερματικού μου:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Επιτρέψτε σε άλλες λειτουργίες να χρησιμοποιούν το κλειδί API του παρόχου τεχνητής νοημοσύνης για τα δικά τους αιτήματα. Το κλειδί δεν αντιγράφεται ποτέ και μπορείτε να το ανακαλέσετε ανά πάσα στιγμή."
+    }
+  },
+  "nav": {
+    "ai": "Όλα συμπεριλαμβάνονται"
+  },
+  "onboarding": {
+    "aiTitle": "Βοηθός Τεχνητής Νοημοσύνης",
+    "aiIntro": "Το Termix μπορεί να περιλαμβάνει έναν προαιρετικό βοηθό τεχνητής νοημοσύνης. Μπορείτε να το αλλάξετε αυτό αργότερα στις ρυθμίσεις σας.",
+    "aiSkipTitle": "Αφήστε το μακριά",
+    "aiSkipDesc": "Το Termix λειτουργεί όπως τώρα. Ο βοηθός παραμένει κρυφός.",
+    "aiEnableTitle": "Ενεργοποίησέ το",
+    "aiEnableDesc": "Προσθέτει έναν βοηθό που διαβάζει τη ρύθμισή σας και προτείνει αλλαγές που εγκρίνετε. Χρειάζεται έναν πάροχο που παρέχετε, όπως ένα τοπικό Ollama.",
+    "aiNote": "Τίποτα δεν αποστέλλεται πουθενά μέχρι να προσθέσετε έναν πάροχο και να στείλετε ένα μήνυμα."
+  },
+  "hosts": {
+    "docsLink": "Προβολή εγγράφων"
+  }
+}

plugins/ai/locales/translated/es_ES.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Utilice el asistente",
+      "description": "Abre el asistente y hazle preguntas."
+    },
+    "manage_providers": {
+      "title": "Gestionar proveedores",
+      "description": "Agregue, edite y elimine los proveedores de IA y sus claves API."
+    },
+    "apply_proposals": {
+      "title": "Presentar propuestas",
+      "description": "Deja que el asistente realice los cambios que sugiere."
+    },
+    "services.use": {
+      "title": "Utilizar la IA de otras funciones",
+      "description": "Otras funciones pueden llamar al asistente en tu nombre."
+    },
+    "secrets.share": {
+      "title": "Comparta la clave API",
+      "description": "Es posible que otras funciones utilicen la clave API de IA almacenada sin tenerla en cuenta."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "El asistente de IA está desactivado en este servidor.",
+    "providersNeedOptIn": "Activa el asistente de IA que aparece arriba para añadir proveedores.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "Asistente de IA",
+        "description": "Permita que los usuarios activen el asistente de IA. Mientras esté desactivado, el asistente permanecerá oculto y bloqueado para todos."
+      },
+      "privateEndpoints": {
+        "label": "Hosts de IA privados permitidos",
+        "description": "Hosts en tu red privada a los que los usuarios pueden dirigir un proveedor, como por ejemplo un servidor Ollama autogestionado. Coloca un host en cada línea."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Habilitar el asistente de IA",
+        "description": "Permite que el asistente de IA te ayude en la terminal de este host. Está desactivado por defecto y aún así necesitas tener la IA habilitada para tu cuenta."
+      }
+    }
+  },
+  "ai": {
+    "title": "Asistente",
+    "send": "Enviar",
+    "stop": "Parada",
+    "save": "Guardar",
+    "cancel": "Cancelar",
+    "running": "en ejecución",
+    "approve": "Aprobar",
+    "reject": "Rechazar",
+    "inputPlaceholder": "Pregunte sobre sus servidores o describa un cambio para proponer.",
+    "selectProvider": "Seleccione un proveedor",
+    "providerSettings": "Configuración del proveedor",
+    "addProvider": "Agregar proveedor",
+    "editProvider": "Editar proveedor",
+    "removeProvider": "Eliminar proveedor",
+    "providerType": "Proveedor",
+    "providerLabel": "Nombre",
+    "providerLabelPlaceholder": "Por ejemplo: Ollama local",
+    "baseUrl": "Dirección del servidor",
+    "apiKey": "clave API",
+    "defaultModel": "Modelo predeterminado",
+    "defaultModelPlaceholder": "Por ejemplo: llama3.1 o claude-opus-5",
+    "labelRequired": "Dale un nombre a este proveedor.",
+    "providerSaveFailed": "No se pudo guardar el proveedor",
+    "providerUpdated": "Proveedor actualizado",
+    "providerDeleteFailed": "No se pudo eliminar al proveedor.",
+    "privateEndpointHint": "Las direcciones de su red privada necesitan que un administrador autorice el acceso al host previamente.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Antrópico",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "Compatible con OpenAI",
+    "toolArguments": "Entrada",
+    "toolResult": "Resultado",
+    "statusApplied": "Aplicado",
+    "statusRejected": "Rechazado",
+    "proposalApplied": "Cambio aplicado",
+    "proposalApplyFailed": "No se pudo aplicar el cambio.",
+    "proposalRejectFailed": "No se pudo rechazar el cambio",
+    "enableTitle": "Habilitar el asistente de IA",
+    "enableDescription": "Deja que el asistente lea tu configuración y te sugiera cambios para que los apruebes.",
+    "readOnlyCommands": "Permitir comandos de diagnóstico de solo lectura",
+    "readOnlyCommandsDescription": "El asistente puede ejecutar una breve lista de comandos seguros, como df y uptime, sin preguntar cada vez. Cualquier cambio que afecte al servidor siempre se propone primero.",
+    "modelDetectFailed": "No se pudo contactar con el proveedor, por lo que esta es una lista general. Puede escribir cualquier nombre de modelo.",
+    "modelCustom": "Introduzca un nombre de modelo",
+    "modelRefresh": "Actualizar lista",
+    "modelPlaceholder": "Seleccione o escriba un modelo.",
+    "attachHint": "Escribe @ para hacer referencia a un host, fragmento de código o automatización. Se proponen cambios para su aprobación.",
+    "runCommandTitle": "Ejecutar comando",
+    "assistant": "Asistente de IA",
+    "terminalPanelEmpty": "Consulta con el asistente sobre este anfitrión. Cualquier cambio de estado requiere tu aprobación previa.",
+    "terminalPanelPlaceholder": "Pregunta por este anfitrión...",
+    "noProvidersConfigured": "Aún no hay ningún proveedor de IA configurado. Añada uno en la pestaña del asistente de IA.",
+    "runsInOpenTerminal": "Se ejecuta en tu sesión de terminal abierta.",
+    "runInTerminal": "Ejecutar",
+    "terminalContextPrefill": "Aquí está la salida de mi terminal:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Permite que otras funciones utilicen la clave API de tu proveedor de IA para sus propias solicitudes. La clave nunca se copia y puedes revocarla en cualquier momento."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "Asistente de IA",
+    "aiIntro": "Termix puede incluir un asistente de IA opcional. Puedes cambiar esto más adelante en la configuración.",
+    "aiSkipTitle": "Déjalo apagado",
+    "aiSkipDesc": "Termix funciona como hasta ahora. El asistente permanece oculto.",
+    "aiEnableTitle": "Enciéndelo",
+    "aiEnableDesc": "Agrega un asistente que lee tu configuración y sugiere cambios que apruebas. Requiere un proveedor que tú proporciones, como un Ollama local.",
+    "aiNote": "No se envía nada a ningún sitio hasta que añadas un proveedor y envíes un mensaje."
+  },
+  "hosts": {
+    "docsLink": "Ver documentación"
+  }
+}

plugins/ai/locales/translated/fi_FI.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Käytä avustajaa",
+      "description": "Avaa avustaja ja kysy siltä asioita."
+    },
+    "manage_providers": {
+      "title": "Hallinnoi palveluntarjoajia",
+      "description": "Lisää, muokkaa ja poista tekoälypalveluntarjoajia ja niiden API-avaimia."
+    },
+    "apply_proposals": {
+      "title": "Käytä ehdotuksia",
+      "description": "Anna avustajan suorittaa ehdottamansa muutokset."
+    },
+    "services.use": {
+      "title": "Käytä tekoälyä muista ominaisuuksista",
+      "description": "Muut ominaisuudet saattavat soittaa avustajalle puolestasi."
+    },
+    "secrets.share": {
+      "title": "Jaa API-avain",
+      "description": "Muut ominaisuudet saattavat käyttää tallennettua tekoälyn API-avainta näkemättä sitä."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "Tekoälyavustaja on pois päältä tällä palvelimella.",
+    "providersNeedOptIn": "Ota yllä oleva tekoälyavustaja käyttöön lisätäksesi palveluntarjoajia.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "Tekoälyavustaja",
+        "description": "Salli käyttäjien ottaa tekoälyavustaja käyttöön. Kun tämä on pois päältä, avustaja on piilotettu ja estetty kaikilta."
+      },
+      "privateEndpoints": {
+        "label": "Sallitut yksityiset tekoälyisännät",
+        "description": "Yksityisen verkon isännät, joihin käyttäjät voivat ohjata palveluntarjoajan, kuten itse isännöity Ollama. Aseta yksi isäntä kullekin riville."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Ota tekoälyavustaja käyttöön",
+        "description": "Salli tekoälyavustaja auttaa tämän isännän terminaalissa. Oletusarvoisesti pois päältä, mutta tekoälyn on silti oltava käytössä tililläsi."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistentti",
+    "send": "Lähetä",
+    "stop": "Stop",
+    "save": "Tallentaa",
+    "cancel": "Peruuttaa",
+    "running": "juokseminen",
+    "approve": "Hyväksyä",
+    "reject": "Hylätä",
+    "inputPlaceholder": "Kysy tarjoilijoistasi tai kuvaile ehdottamaasi muutosta",
+    "selectProvider": "Valitse palveluntarjoaja",
+    "providerSettings": "Palveluntarjoajan asetukset",
+    "addProvider": "Lisää palveluntarjoaja",
+    "editProvider": "Muokkaa palveluntarjoajaa",
+    "removeProvider": "Poista palveluntarjoaja",
+    "providerType": "Palveluntarjoaja",
+    "providerLabel": "Nimi",
+    "providerLabelPlaceholder": "Esimerkiksi: Paikallinen Ollama",
+    "baseUrl": "Palvelimen osoite",
+    "apiKey": "API-avain",
+    "defaultModel": "Oletusmalli",
+    "defaultModelPlaceholder": "Esimerkiksi: llama3.1 tai claude-opus-5",
+    "labelRequired": "Anna tälle palveluntarjoajalle nimi",
+    "providerSaveFailed": "Palveluntarjoajaa ei voitu tallentaa",
+    "providerUpdated": "Palveluntarjoaja päivitetty",
+    "providerDeleteFailed": "Palveluntarjoajaa ei voitu poistaa",
+    "privateEndpointHint": "Yksityisen verkon osoitteiden ylläpitäjän on ensin sallittava isäntä.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Antrooppinen",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI-yhteensopiva",
+    "toolArguments": "Syöttö",
+    "toolResult": "Tulos",
+    "statusApplied": "Käytetty",
+    "statusRejected": "Hylätty",
+    "proposalApplied": "Muutos otettu käyttöön",
+    "proposalApplyFailed": "Muutosta ei voitu ottaa käyttöön",
+    "proposalRejectFailed": "Muutosta ei voitu hylätä",
+    "enableTitle": "Ota tekoälyavustaja käyttöön",
+    "enableDescription": "Anna avustajan lukea asetuksesi ja ehdottaa muutoksia hyväksyttäväksi.",
+    "readOnlyCommands": "Salli vain luettavat diagnostiikkakomennot",
+    "readOnlyCommandsDescription": "Assistantti voi suorittaa lyhyen listan turvallisia komentoja, kuten df ja uptime, kysymättä joka kerta. Kaikki palvelinta muuttavat ehdotukset esitetään aina ensin.",
+    "modelDetectFailed": "Palveluntarjoajaan ei saatu yhteyttä, joten tämä on yleisluettelo. Voit kirjoittaa minkä tahansa mallin nimen.",
+    "modelCustom": "Anna mallin nimi",
+    "modelRefresh": "Päivitä lista",
+    "modelPlaceholder": "Valitse tai kirjoita malli",
+    "attachHint": "Kirjoita @ viitataksesi isäntään, koodinpätkään tai automaatioon. Muutoksia ehdotetaan hyväksyttäväksi.",
+    "runCommandTitle": "Suorita komento",
+    "assistant": "Tekoälyavustaja",
+    "terminalPanelEmpty": "Kysy avustajalta tästä majoittajasta. Kaikki osavaltion muutokset vaativat ensin hyväksyntäsi.",
+    "terminalPanelPlaceholder": "Kysy tästä isännöitsijästä...",
+    "noProvidersConfigured": "Tekoälypalveluntarjoajaa ei ole vielä määritetty. Lisää sellainen tekoälyavustaja-välilehdellä.",
+    "runsInOpenTerminal": "Suoritetaan avoimessa pääteistunnossa.",
+    "runInTerminal": "Juokse",
+    "terminalContextPrefill": "Tässä on päätteen tuloste:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Anna muiden ominaisuuksien käyttää tekoälypalveluntarjoajasi API-avainta omiin pyyntöihinsä. Avainta ei koskaan kopioida, ja voit peruuttaa tämän milloin tahansa."
+    }
+  },
+  "nav": {
+    "ai": "Tekoäly"
+  },
+  "onboarding": {
+    "aiTitle": "Tekoälyavustaja",
+    "aiIntro": "Termix voi sisältää valinnaisen tekoälyavustaja. Voit muuttaa tätä myöhemmin asetuksissasi.",
+    "aiSkipTitle": "Jätä se pois",
+    "aiSkipDesc": "Termix toimii kuten nytkin. Avustaja pysyy piilossa.",
+    "aiEnableTitle": "Käynnistä se",
+    "aiEnableDesc": "Lisää avustajan, joka lukee asetuksesi ja ehdottaa hyväksymiäsi muutoksia. Edellyttää toimittamaasi palveluntarjoajaa, kuten paikallisen Ollaman.",
+    "aiNote": "Mitään ei lähetetä mihinkään ennen kuin lisäät palveluntarjoajan ja lähetät viestin."
+  },
+  "hosts": {
+    "docsLink": "Näytä dokumentit"
+  }
+}

plugins/ai/locales/translated/fr_FR.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Utilisez l'assistant",
+      "description": "Ouvrez l'assistant et posez-lui des questions."
+    },
+    "manage_providers": {
+      "title": "Gérer les fournisseurs",
+      "description": "Ajoutez, modifiez et supprimez les fournisseurs d'IA et leurs clés API."
+    },
+    "apply_proposals": {
+      "title": "Soumettre les propositions",
+      "description": "Laissez l'assistant effectuer les modifications qu'il suggère."
+    },
+    "services.use": {
+      "title": "Utiliser l'IA d'autres fonctionnalités",
+      "description": "D'autres fonctionnalités peuvent appeler l'assistant en votre nom."
+    },
+    "secrets.share": {
+      "title": "Partagez la clé API",
+      "description": "D'autres fonctionnalités peuvent utiliser la clé API IA stockée sans la voir."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "L'assistant IA est désactivé sur ce serveur.",
+    "providersNeedOptIn": "Activez l'assistant IA ci-dessus pour ajouter des fournisseurs.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "Assistant IA",
+        "description": "Autoriser les utilisateurs à activer l'assistant IA. Lorsqu'il est désactivé, l'assistant est masqué et inaccessible à tous."
+      },
+      "privateEndpoints": {
+        "label": "Hôtes d'IA privés autorisés",
+        "description": "Sur votre réseau privé, configurez des hôtes vers lesquels les utilisateurs peuvent orienter un fournisseur, comme un serveur Ollama auto-hébergé. Placez un hôte sur chaque ligne."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Activer l'assistant IA",
+        "description": "Autoriser l'assistant IA à vous aider dans le terminal de cet hôte. Désactivé par défaut ; l'IA doit être activée pour votre compte."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistant",
+    "send": "Envoyer",
+    "stop": "Stop",
+    "save": "Enregistrer",
+    "cancel": "Annuler",
+    "running": "en cours",
+    "approve": "Approuver",
+    "reject": "Rejeter",
+    "inputPlaceholder": "Renseignez-vous sur vos serveurs ou décrivez un changement à proposer.",
+    "selectProvider": "Sélectionnez un fournisseur",
+    "providerSettings": "Paramètres du fournisseur",
+    "addProvider": "Ajouter un fournisseur",
+    "editProvider": "Modifier le fournisseur",
+    "removeProvider": "Supprimer le fournisseur",
+    "providerType": "Fournisseur",
+    "providerLabel": "Nom",
+    "providerLabelPlaceholder": "Par exemple : Ollama local",
+    "baseUrl": "Adresse du serveur",
+    "apiKey": "Clé API",
+    "defaultModel": "Modèle par défaut",
+    "defaultModelPlaceholder": "Par exemple : llama3.1 ou claude-opus-5",
+    "labelRequired": "Donnez un nom à ce fournisseur",
+    "providerSaveFailed": "Impossible de sauver le fournisseur",
+    "providerUpdated": "Mise à jour du fournisseur",
+    "providerDeleteFailed": "Impossible de supprimer le fournisseur",
+    "privateEndpointHint": "Les adresses de votre réseau privé nécessitent l'autorisation préalable d'un administrateur pour accéder à l'hôte.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropique",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "Compatible avec OpenAI",
+    "toolArguments": "Entrée",
+    "toolResult": "Résultat",
+    "statusApplied": "Appliqué",
+    "statusRejected": "Rejeté",
+    "proposalApplied": "Changement appliqué",
+    "proposalApplyFailed": "Impossible d'appliquer la modification",
+    "proposalRejectFailed": "Impossible de refuser la modification",
+    "enableTitle": "Activer l'assistant IA",
+    "enableDescription": "Laissez l'assistant analyser votre configuration et vous suggérer des modifications à approuver.",
+    "readOnlyCommands": "Autoriser les commandes de diagnostic en lecture seule",
+    "readOnlyCommandsDescription": "L'assistant peut exécuter une courte liste de commandes sûres, comme `df` et `uptime`, sans demander l'autorisation à chaque fois. Toute modification apportée au serveur est toujours proposée au préalable.",
+    "modelDetectFailed": "Impossible de joindre le fournisseur ; voici donc une liste générale. Vous pouvez saisir n’importe quel nom de modèle.",
+    "modelCustom": "Saisissez le nom du modèle",
+    "modelRefresh": "Actualiser la liste",
+    "modelPlaceholder": "Choisissez ou saisissez un modèle",
+    "attachHint": "Saisissez @ pour faire référence à un hôte, un extrait de code ou une automatisation. Les modifications proposées doivent être approuvées.",
+    "runCommandTitle": "Exécuter la commande",
+    "assistant": "Assistant IA",
+    "terminalPanelEmpty": "Renseignez-vous auprès de l'assistant concernant cet hôte. Tout changement d'état nécessite votre approbation préalable.",
+    "terminalPanelPlaceholder": "Renseignez-vous sur cet hôte...",
+    "noProvidersConfigured": "Aucun fournisseur d'IA n'est encore configuré. Ajoutez-en un dans l'onglet Assistant IA.",
+    "runsInOpenTerminal": "S'exécute dans votre session de terminal ouverte.",
+    "runInTerminal": "Exécuter",
+    "terminalContextPrefill": "Voici la sortie de mon terminal :\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Autorisez d'autres fonctionnalités à utiliser votre clé API de fournisseur d'IA pour leurs propres requêtes. Cette clé n'est jamais copiée et vous pouvez la révoquer à tout moment."
+    }
+  },
+  "nav": {
+    "ai": "IA"
+  },
+  "onboarding": {
+    "aiTitle": "Assistant IA",
+    "aiIntro": "Termix peut inclure un assistant IA optionnel. Vous pouvez modifier ce paramètre ultérieurement.",
+    "aiSkipTitle": "Laissez-le de côté",
+    "aiSkipDesc": "Termix fonctionne comme actuellement. L'assistant reste caché.",
+    "aiEnableTitle": "Allumez-le",
+    "aiEnableDesc": "Ajoute un assistant qui analyse votre configuration et suggère des modifications que vous approuvez. Nécessite un fournisseur que vous désignez, comme un Ollama local.",
+    "aiNote": "Aucun message n'est envoyé tant que vous n'avez pas ajouté de fournisseur et envoyé un message."
+  },
+  "hosts": {
+    "docsLink": "Voir la documentation"
+  }
+}

plugins/ai/locales/translated/he_IL.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "השתמש בעוזר",
+      "description": "פתח את העוזר ושאל אותו דברים."
+    },
+    "manage_providers": {
+      "title": "ניהול ספקים",
+      "description": "הוספה, עריכה והסרה של ספקי הבינה המלאכותית ואת מפתחות ה-API שלהם."
+    },
+    "apply_proposals": {
+      "title": "החלת הצעות",
+      "description": "תן לעוזר לבצע את השינויים שהוא מציע."
+    },
+    "services.use": {
+      "title": "השתמש בבינה מלאכותית מתכונות אחרות",
+      "description": "ייתכן שתכונות אחרות יתקשרו לעוזר בשמך."
+    },
+    "secrets.share": {
+      "title": "שתף את מפתח ה-API",
+      "description": "תכונות אחרות עשויות להשתמש במפתח ה-API של בינה מלאכותית המאוחסן מבלי לראות אותו."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "עוזר הבינה המלאכותית כבוי בשרת הזה.",
+    "providersNeedOptIn": "הפעל את עוזר הבינה המלאכותית למעלה כדי להוסיף ספקים.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "עוזר בינה מלאכותית",
+        "description": "אפשר למשתמשים להפעיל את עוזר הבינה המלאכותית. כאשר זה כבוי, העוזר מוסתר וחסום עבור כולם."
+      },
+      "privateEndpoints": {
+        "label": "מארחים פרטיים של בינה מלאכותית מורשים",
+        "description": "מארחים ברשת הפרטית שלך שמשתמשים יכולים להפנות אליהם ספק, כגון Ollama המאוחסן בעצמו. שים מארח אחד בכל שורה."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "הפעל את עוזר הבינה המלאכותית",
+        "description": "אפשר לעוזר הבינה המלאכותית לסייע במסוף של מארח זה. כבוי כברירת מחדל, ועדיין נדרשת הפעלת בינה מלאכותית עבור חשבונך."
+      }
+    }
+  },
+  "ai": {
+    "title": "עוֹזֵר",
+    "send": "לִשְׁלוֹחַ",
+    "stop": "לְהַפְסִיק",
+    "save": "לְהַצִיל",
+    "cancel": "לְבַטֵל",
+    "running": "רִיצָה",
+    "approve": "לְאַשֵׁר",
+    "reject": "לִדחוֹת",
+    "inputPlaceholder": "שאל לגבי המלצרים שלך, או תאר שינוי להציע",
+    "selectProvider": "בחר ספק",
+    "providerSettings": "הגדרות ספק",
+    "addProvider": "הוסף ספק",
+    "editProvider": "עריכת ספק",
+    "removeProvider": "הסר ספק",
+    "providerType": "ספק",
+    "providerLabel": "שֵׁם",
+    "providerLabelPlaceholder": "לדוגמה: אולמה מקומית",
+    "baseUrl": "כתובת השרת",
+    "apiKey": "מפתח API",
+    "defaultModel": "מודל ברירת מחדל",
+    "defaultModelPlaceholder": "לדוגמה: llama3.1 או claude-opus-5",
+    "labelRequired": "תן שם לספק הזה",
+    "providerSaveFailed": "לא ניתן היה לשמור את הספק",
+    "providerUpdated": "הספק עודכן",
+    "providerDeleteFailed": "לא ניתן היה להסיר את הספק",
+    "privateEndpointHint": "כתובות ברשת הפרטית שלך דורשות תחילה אישור ממנהל מערכת למארח.",
+    "providerOllama": "אולמה",
+    "providerAnthropic": "אנתרופי",
+    "providerOpenai": "בינה מלאכותית פתוחה",
+    "providerGemini": "גוגל ג'מיני",
+    "providerOpenaiCompatible": "תואם ל-OpenAI",
+    "toolArguments": "קֶלֶט",
+    "toolResult": "תוֹצָאָה",
+    "statusApplied": "יישומי",
+    "statusRejected": "נִדחֶה",
+    "proposalApplied": "השינוי הוחל",
+    "proposalApplyFailed": "לא ניתן היה להחיל את השינוי",
+    "proposalRejectFailed": "לא ניתן היה לדחות את השינוי",
+    "enableTitle": "הפעל את עוזר הבינה המלאכותית",
+    "enableDescription": "תן לעוזר לקרוא את ההגדרות שלך ולהציע שינויים לאישור.",
+    "readOnlyCommands": "אפשר פקודות אבחון לקריאה בלבד",
+    "readOnlyCommandsDescription": "העוזר יכול להריץ רשימה קצרה של פקודות בטוחות כמו df ו-uptime מבלי לשאול בכל פעם. כל דבר שמשנה שרת תמיד מוצע ראשון.",
+    "modelDetectFailed": "לא ניתן היה להגיע לספק, לכן זוהי רשימה כללית. ניתן להקליד כל שם דגם.",
+    "modelCustom": "הזן שם דגם",
+    "modelRefresh": "רענון הרשימה",
+    "modelPlaceholder": "בחר או הקלד מודל",
+    "attachHint": "הקלד @ כדי להפנות למארח, קטע טקסט או אוטומציה. שינויים מוצעים לאישורך.",
+    "runCommandTitle": "הפעלה של הפקודה",
+    "assistant": "עוזר בינה מלאכותית",
+    "terminalPanelEmpty": "שאל את העוזר לגבי המארח הזה. כל שינוי במצב דורש תחילה את אישורך.",
+    "terminalPanelPlaceholder": "שאל על המארח הזה...",
+    "noProvidersConfigured": "עדיין לא הוגדר ספק בינה מלאכותית. הוסף אחד בכרטיסייה עוזר בינה מלאכותית.",
+    "runsInOpenTerminal": "פועל בסשן הטרמינל הפתוח שלך.",
+    "runInTerminal": "לָרוּץ",
+    "terminalContextPrefill": "הנה פלט הטרמינל שלי:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "אפשרו לתכונות אחרות להשתמש במפתח ה-API של ספק הבינה המלאכותית שלכם עבור בקשות משלהן. המפתח לעולם לא יועתק, ותוכלו לבטל אותו בכל עת."
+    }
+  },
+  "nav": {
+    "ai": "בינה מלאכותית"
+  },
+  "onboarding": {
+    "aiTitle": "עוזר בינה מלאכותית",
+    "aiIntro": "טרמיקס יכול לכלול עוזר בינה מלאכותית אופציונלי. ניתן לשנות זאת מאוחר יותר בהגדרות.",
+    "aiSkipTitle": "תעזוב את זה",
+    "aiSkipDesc": "טרמיקס עובד כמו שהוא עובד עכשיו. העוזר נשאר מוסתר.",
+    "aiEnableTitle": "הפעל אותו",
+    "aiEnableDesc": "מוסיף עוזר שקורא את ההגדרות שלך ומציע שינויים שאתה מאשר. נדרש ספק שאתה מספק, כגון אולמה מקומי.",
+    "aiNote": "שום דבר לא נשלח לשום מקום עד שתוסיף ספק ותשלח הודעה."
+  },
+  "hosts": {
+    "docsLink": "הצג מסמכים"
+  }
+}

plugins/ai/locales/translated/hi_IN.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Use the assistant",
+      "description": "Open the assistant and ask it things."
+    },
+    "manage_providers": {
+      "title": "Manage providers",
+      "description": "Add, edit and remove the AI providers and their API keys."
+    },
+    "apply_proposals": {
+      "title": "Apply proposals",
+      "description": "Let the assistant carry out the changes it suggests."
+    },
+    "services.use": {
+      "title": "Use AI from other features",
+      "description": "Other features may call the assistant on your behalf."
+    },
+    "secrets.share": {
+      "title": "Share the API key",
+      "description": "Other features may use the stored AI API key without seeing it."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "The AI assistant is turned off on this server.",
+    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI assistant",
+        "description": "Let users turn on the AI assistant. While this is off, the assistant is hidden and blocked for everyone."
+      },
+      "privateEndpoints": {
+        "label": "Allowed private AI hosts",
+        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Enable AI Assistant",
+        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistant",
+    "send": "Send",
+    "stop": "स्टॉप",
+    "save": "सहेजें",
+    "cancel": "रद्द करें",
+    "running": "चल रहे",
+    "approve": "Approve",
+    "reject": "Reject",
+    "inputPlaceholder": "Ask about your servers, or describe a change to propose",
+    "selectProvider": "Select a provider",
+    "providerSettings": "Provider settings",
+    "addProvider": "Add provider",
+    "editProvider": "Edit provider",
+    "removeProvider": "Remove provider",
+    "providerType": "Provider",
+    "providerLabel": "नाम",
+    "providerLabelPlaceholder": "For example: Local Ollama",
+    "baseUrl": "Server address",
+    "apiKey": "API key",
+    "defaultModel": "Default model",
+    "defaultModelPlaceholder": "For example: llama3.1 or claude-opus-5",
+    "labelRequired": "Give this provider a name",
+    "providerSaveFailed": "Could not save the provider",
+    "providerUpdated": "Provider updated",
+    "providerDeleteFailed": "Could not remove the provider",
+    "privateEndpointHint": "Addresses on your private network need an administrator to allow the host first.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI compatible",
+    "toolArguments": "इनपुट",
+    "toolResult": "Result",
+    "statusApplied": "Applied",
+    "statusRejected": "Rejected",
+    "proposalApplied": "Change applied",
+    "proposalApplyFailed": "Could not apply the change",
+    "proposalRejectFailed": "Could not reject the change",
+    "enableTitle": "Enable the AI assistant",
+    "enableDescription": "Let the assistant read your setup and suggest changes for you to approve.",
+    "readOnlyCommands": "Allow read-only diagnostic commands",
+    "readOnlyCommandsDescription": "The assistant may run a short list of safe commands like df and uptime without asking each time. Anything that changes a server is always proposed first.",
+    "modelDetectFailed": "Could not reach the provider, so this is a general list. You can type any model name.",
+    "modelCustom": "Enter a model name",
+    "modelRefresh": "Refresh list",
+    "modelPlaceholder": "Choose or type a model",
+    "attachHint": "Type @ to reference a host, snippet or automation. Changes are proposed for you to approve.",
+    "runCommandTitle": "Run command",
+    "assistant": "AI Assistant",
+    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
+    "terminalPanelPlaceholder": "Ask about this host...",
+    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
+    "runsInOpenTerminal": "Runs in your open terminal session.",
+    "runInTerminal": "चलाएं",
+    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI assistant",
+    "aiIntro": "Termix can include an optional AI assistant. You can change this later in your settings.",
+    "aiSkipTitle": "Leave it off",
+    "aiSkipDesc": "Termix works as it does now. The assistant stays hidden.",
+    "aiEnableTitle": "Turn it on",
+    "aiEnableDesc": "Adds an assistant that reads your setup and suggests changes you approve. Needs a provider you supply, such as a local Ollama.",
+    "aiNote": "Nothing is sent anywhere until you add a provider and send a message."
+  },
+  "hosts": {
+    "docsLink": "दस्तावेज़ देखें"
+  }
+}

plugins/ai/locales/translated/hu_HU.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Használja az asszisztenst",
+      "description": "Nyisd meg az asszisztenst, és kérdezz tőle dolgokat."
+    },
+    "manage_providers": {
+      "title": "Szolgáltatók kezelése",
+      "description": "MI-szolgáltatók és API-kulcsaik hozzáadása, szerkesztése és eltávolítása."
+    },
+    "apply_proposals": {
+      "title": "Javaslatok alkalmazása",
+      "description": "Hagyd, hogy az asszisztens végrehajtsa a javasolt módosításokat."
+    },
+    "services.use": {
+      "title": "Használja a mesterséges intelligenciát más funkciókból",
+      "description": "Más funkciók felhívhatják az asszisztenst az Ön nevében."
+    },
+    "secrets.share": {
+      "title": "API-kulcs megosztása",
+      "description": "Más funkciók használhatják a tárolt AI API-kulcsot anélkül, hogy látnák azt."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "A mesterséges intelligencia asszisztens ki van kapcsolva ezen a szerveren.",
+    "providersNeedOptIn": "Kapcsolja be a fenti AI asszisztenst a szolgáltatók hozzáadásához.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "MI asszisztens",
+        "description": "Engedélyezheti a felhasználóknak a mesterséges intelligencia asszisztens bekapcsolását. Amíg ez ki van kapcsolva, az asszisztens rejtett és blokkolt mindenki számára."
+      },
+      "privateEndpoints": {
+        "label": "Engedélyezett privát AI-gazdagépek",
+        "description": "Privát hálózatán található hosztok, amelyekre a felhasználók szolgáltatót irányíthatnak, például egy saját hosztot futtató Ollama. Minden sorba egy hosztot írjon be."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "AI asszisztens engedélyezése",
+        "description": "Engedélyezi a mesterséges intelligencia asszisztensének a gazdagép terminálján való segítséget. Alapértelmezés szerint ki van kapcsolva, de továbbra is engedélyeznie kell a mesterséges intelligenciát a fiókjában."
+      }
+    }
+  },
+  "ai": {
+    "title": "Helyettes",
+    "send": "Elküld",
+    "stop": "Stop",
+    "save": "Megtakarítás",
+    "cancel": "Mégsem",
+    "running": "futás",
+    "approve": "Jóváhagyás",
+    "reject": "Elutasít",
+    "inputPlaceholder": "Kérdezzen a felszolgálókról, vagy írjon le egy javasolt változtatást",
+    "selectProvider": "Válasszon szolgáltatót",
+    "providerSettings": "Szolgáltatói beállítások",
+    "addProvider": "Szolgáltató hozzáadása",
+    "editProvider": "Szolgáltató szerkesztése",
+    "removeProvider": "Szolgáltató eltávolítása",
+    "providerType": "Szolgáltató",
+    "providerLabel": "Név",
+    "providerLabelPlaceholder": "Például: Helyi Ollama",
+    "baseUrl": "Szerver címe",
+    "apiKey": "API-kulcs",
+    "defaultModel": "Alapértelmezett modell",
+    "defaultModelPlaceholder": "Például: llama3.1 vagy claude-opus-5",
+    "labelRequired": "Adjon nevet ennek a szolgáltatónak",
+    "providerSaveFailed": "Nem sikerült menteni a szolgáltatót",
+    "providerUpdated": "Szolgáltató frissítve",
+    "providerDeleteFailed": "Nem sikerült eltávolítani a szolgáltatót",
+    "privateEndpointHint": "A privát hálózaton lévő címekhez először egy rendszergazdának kell engedélyeznie a gazdagépet.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Antropikus",
+    "providerOpenai": "Nyílt mesterséges intelligencia",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI-kompatibilis",
+    "toolArguments": "Bemenet",
+    "toolResult": "Eredmény",
+    "statusApplied": "Alkalmazott",
+    "statusRejected": "Elutasítva",
+    "proposalApplied": "Módosítás alkalmazva",
+    "proposalApplyFailed": "Nem sikerült alkalmazni a módosítást",
+    "proposalRejectFailed": "Nem sikerült elutasítani a módosítást",
+    "enableTitle": "Engedélyezze a mesterséges intelligencia asszisztenst",
+    "enableDescription": "Hagyd, hogy az asszisztens felolvassa a beállításokat, és javasoljon módosításokat jóváhagyásra.",
+    "readOnlyCommands": "Csak olvasható diagnosztikai parancsok engedélyezése",
+    "readOnlyCommandsDescription": "Az asszisztens lefuttathat egy rövid listát a biztonságos parancsokról, mint például a df és az uptime, anélkül, hogy minden alkalommal rákérdezne. Bármi, ami megváltoztat egy szervert, mindig elsőként kerül felkérésre.",
+    "modelDetectFailed": "Nem sikerült elérni a szolgáltatót, ezért ez egy általános lista. Bármelyik modellnevet beírhatja.",
+    "modelCustom": "Adjon meg egy modellnevet",
+    "modelRefresh": "Lista frissítése",
+    "modelPlaceholder": "Válasszon vagy írjon be egy modellt",
+    "attachHint": "Írjon be @ jelet egy gazdagépre, kódrészletre vagy automatizálásra való hivatkozáshoz. A rendszer módosításokat javasol jóváhagyásra.",
+    "runCommandTitle": "Parancs futtatása",
+    "assistant": "MI asszisztens",
+    "terminalPanelEmpty": "Kérdezd meg az asszisztenst erről a házigazdáról. Bármi, ami megváltoztatja az állapotát, először a jóváhagyásodra van szükség.",
+    "terminalPanelPlaceholder": "Kérdezz rá erre a házigazdára...",
+    "noProvidersConfigured": "Még nincs konfigurálva AI-szolgáltató. Adjon hozzá egyet az AI-asszisztens fülön.",
+    "runsInOpenTerminal": "A megnyitott terminál munkamenetben fut.",
+    "runInTerminal": "Fut",
+    "terminalContextPrefill": "Itt a terminál kimenete:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Engedélyezd más funkcióknak a mesterséges intelligencia szolgáltató API-kulcsának használatát a saját kéréseikhez. A kulcs soha nem kerül másolásra, és ezt bármikor visszavonhatod."
+    }
+  },
+  "nav": {
+    "ai": "MI"
+  },
+  "onboarding": {
+    "aiTitle": "MI asszisztens",
+    "aiIntro": "A Termix tartalmazhat opcionális mesterséges intelligencia asszisztenst. Ezt később módosíthatja a beállításokban.",
+    "aiSkipTitle": "Hagyd ki",
+    "aiSkipDesc": "A Termix ugyanúgy működik, mint most. Az asszisztens rejtve marad.",
+    "aiEnableTitle": "Kapcsold be",
+    "aiEnableDesc": "Hozzáad egy asszisztenst, amely beolvassa a beállításait, és javaslatokat tesz az Ön által jóváhagyott módosításokra. Szükség van egy Ön által biztosított szolgáltatóra, például egy helyi Ollama szakemberre.",
+    "aiNote": "Semmi sem kerül sehova, amíg nem adsz hozzá egy szolgáltatót és nem küldesz üzenetet."
+  },
+  "hosts": {
+    "docsLink": "Dokumentumok megtekintése"
+  }
+}

plugins/ai/locales/translated/id_ID.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Use the assistant",
+      "description": "Open the assistant and ask it things."
+    },
+    "manage_providers": {
+      "title": "Manage providers",
+      "description": "Add, edit and remove the AI providers and their API keys."
+    },
+    "apply_proposals": {
+      "title": "Apply proposals",
+      "description": "Let the assistant carry out the changes it suggests."
+    },
+    "services.use": {
+      "title": "Use AI from other features",
+      "description": "Other features may call the assistant on your behalf."
+    },
+    "secrets.share": {
+      "title": "Share the API key",
+      "description": "Other features may use the stored AI API key without seeing it."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "The AI assistant is turned off on this server.",
+    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI assistant",
+        "description": "Let users turn on the AI assistant. While this is off, the assistant is hidden and blocked for everyone."
+      },
+      "privateEndpoints": {
+        "label": "Allowed private AI hosts",
+        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Enable AI Assistant",
+        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistant",
+    "send": "Send",
+    "stop": "Stop",
+    "save": "Save",
+    "cancel": "Cancel",
+    "running": "running",
+    "approve": "Approve",
+    "reject": "Reject",
+    "inputPlaceholder": "Ask about your servers, or describe a change to propose",
+    "selectProvider": "Select a provider",
+    "providerSettings": "Provider settings",
+    "addProvider": "Add provider",
+    "editProvider": "Edit provider",
+    "removeProvider": "Remove provider",
+    "providerType": "Provider",
+    "providerLabel": "Name",
+    "providerLabelPlaceholder": "For example: Local Ollama",
+    "baseUrl": "Server address",
+    "apiKey": "API key",
+    "defaultModel": "Default model",
+    "defaultModelPlaceholder": "For example: llama3.1 or claude-opus-5",
+    "labelRequired": "Give this provider a name",
+    "providerSaveFailed": "Could not save the provider",
+    "providerUpdated": "Provider updated",
+    "providerDeleteFailed": "Could not remove the provider",
+    "privateEndpointHint": "Addresses on your private network need an administrator to allow the host first.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI compatible",
+    "toolArguments": "Input",
+    "toolResult": "Result",
+    "statusApplied": "Applied",
+    "statusRejected": "Rejected",
+    "proposalApplied": "Change applied",
+    "proposalApplyFailed": "Could not apply the change",
+    "proposalRejectFailed": "Could not reject the change",
+    "enableTitle": "Enable the AI assistant",
+    "enableDescription": "Let the assistant read your setup and suggest changes for you to approve.",
+    "readOnlyCommands": "Allow read-only diagnostic commands",
+    "readOnlyCommandsDescription": "The assistant may run a short list of safe commands like df and uptime without asking each time. Anything that changes a server is always proposed first.",
+    "modelDetectFailed": "Could not reach the provider, so this is a general list. You can type any model name.",
+    "modelCustom": "Enter a model name",
+    "modelRefresh": "Refresh list",
+    "modelPlaceholder": "Choose or type a model",
+    "attachHint": "Type @ to reference a host, snippet or automation. Changes are proposed for you to approve.",
+    "runCommandTitle": "Run command",
+    "assistant": "AI Assistant",
+    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
+    "terminalPanelPlaceholder": "Ask about this host...",
+    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
+    "runsInOpenTerminal": "Runs in your open terminal session.",
+    "runInTerminal": "Run",
+    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI assistant",
+    "aiIntro": "Termix can include an optional AI assistant. You can change this later in your settings.",
+    "aiSkipTitle": "Leave it off",
+    "aiSkipDesc": "Termix works as it does now. The assistant stays hidden.",
+    "aiEnableTitle": "Turn it on",
+    "aiEnableDesc": "Adds an assistant that reads your setup and suggests changes you approve. Needs a provider you supply, such as a local Ollama.",
+    "aiNote": "Nothing is sent anywhere until you add a provider and send a message."
+  },
+  "hosts": {
+    "docsLink": "View docs"
+  }
+}

plugins/ai/locales/translated/it_IT.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Utilizzare l'assistente",
+      "description": "Apri l'assistente e ponigli delle domande."
+    },
+    "manage_providers": {
+      "title": "Gestire i fornitori",
+      "description": "Aggiungi, modifica e rimuovi i provider di intelligenza artificiale e le relative chiavi API."
+    },
+    "apply_proposals": {
+      "title": "Presentare proposte",
+      "description": "Lascia che l'assistente esegua le modifiche suggerite."
+    },
+    "services.use": {
+      "title": "Utilizzare l'intelligenza artificiale da altre funzionalità",
+      "description": "Altre funzioni potrebbero attivare l'assistente per tuo conto."
+    },
+    "secrets.share": {
+      "title": "Condividi la chiave API",
+      "description": "Altre funzionalità potrebbero utilizzare la chiave API AI memorizzata senza visualizzarla."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "L'assistente IA è disattivato su questo server.",
+    "providersNeedOptIn": "Attiva l'assistente AI qui sopra per aggiungere i fornitori.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "Assistente basato sull'intelligenza artificiale",
+        "description": "Consenti agli utenti di attivare l'assistente AI. Quando è disattivato, l'assistente è nascosto e bloccato per tutti."
+      },
+      "privateEndpoints": {
+        "label": "Host di IA privati consentiti",
+        "description": "Host sulla tua rete privata a cui gli utenti possono indirizzare un provider, come ad esempio un'installazione self-hosted di Ollama. Assegna un host a ciascuna linea."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Assistente AI per l'innovazione",
+        "description": "Consenti all'assistente IA di fornire assistenza nel terminale di questo host. Disattivato per impostazione predefinita, ma è necessario abilitare l'IA per il tuo account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistente",
+    "send": "Inviare",
+    "stop": "Stop",
+    "save": "Salva",
+    "cancel": "Annulla",
+    "running": "in esecuzione",
+    "approve": "Approvare",
+    "reject": "Rifiutare",
+    "inputPlaceholder": "Chiedi informazioni sui tuoi server o descrivi una modifica da proporre",
+    "selectProvider": "Seleziona un fornitore",
+    "providerSettings": "Impostazioni del provider",
+    "addProvider": "Aggiungi fornitore",
+    "editProvider": "Fornitore di modifica",
+    "removeProvider": "Rimuovi il fornitore",
+    "providerType": "Fornitore",
+    "providerLabel": "Nome",
+    "providerLabelPlaceholder": "Ad esempio: Ollama locale",
+    "baseUrl": "Indirizzo del server",
+    "apiKey": "Chiave API",
+    "defaultModel": "Modello predefinito",
+    "defaultModelPlaceholder": "Ad esempio: llama3.1 o claude-opus-5",
+    "labelRequired": "Assegna un nome a questo fornitore",
+    "providerSaveFailed": "Impossibile salvare il provider",
+    "providerUpdated": "Fornitore aggiornato",
+    "providerDeleteFailed": "Impossibile rimuovere il provider",
+    "privateEndpointHint": "Gli indirizzi sulla tua rete privata richiedono prima l'autorizzazione di un amministratore per l'host.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Antropico",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "Compatibile con OpenAI",
+    "toolArguments": "Input",
+    "toolResult": "Risultato",
+    "statusApplied": "Applicato",
+    "statusRejected": "Respinto",
+    "proposalApplied": "Modifica applicata",
+    "proposalApplyFailed": "Impossibile applicare la modifica",
+    "proposalRejectFailed": "Impossibile rifiutare la modifica",
+    "enableTitle": "Abilita l'assistente IA",
+    "enableDescription": "Lascia che l'assistente legga la tua configurazione e ti suggerisca delle modifiche da approvare.",
+    "readOnlyCommands": "Consenti comandi diagnostici di sola lettura",
+    "readOnlyCommandsDescription": "L'assistente può eseguire un breve elenco di comandi sicuri come df e uptime senza chiedere conferma ogni volta. Qualsiasi operazione che modifichi un server viene sempre proposta in anticipo.",
+    "modelDetectFailed": "Non è stato possibile contattare il fornitore, quindi questo è un elenco generico. È possibile digitare qualsiasi nome di modello.",
+    "modelCustom": "Inserisci il nome del modello",
+    "modelRefresh": "Aggiorna elenco",
+    "modelPlaceholder": "Scegli o digita un modello",
+    "attachHint": "Digita @ per fare riferimento a un host, uno snippet o un'automazione. Le modifiche proposte sono da approvare.",
+    "runCommandTitle": "Esegui il comando",
+    "assistant": "Assistente AI",
+    "terminalPanelEmpty": "Chiedi all'assistente informazioni su questo host. Qualsiasi modifica allo stato richiede la tua approvazione preventiva.",
+    "terminalPanelPlaceholder": "Chiedi informazioni su questo host...",
+    "noProvidersConfigured": "Non è ancora configurato alcun provider di IA. Aggiungine uno nella scheda Assistente IA.",
+    "runsInOpenTerminal": "Viene eseguito nella sessione del terminale aperta.",
+    "runInTerminal": "Esegui",
+    "terminalContextPrefill": "Ecco l'output del mio terminale:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Consenti ad altre funzionalità di utilizzare la tua chiave API del provider AI per le proprie richieste. La chiave non viene mai copiata e puoi revocarla in qualsiasi momento."
+    }
+  },
+  "nav": {
+    "ai": "IA"
+  },
+  "onboarding": {
+    "aiTitle": "Assistente basato sull'intelligenza artificiale",
+    "aiIntro": "Termix può includere un assistente AI opzionale. Puoi modificare questa impostazione in seguito.",
+    "aiSkipTitle": "Lascialo spento",
+    "aiSkipDesc": "Termix funziona come ora. L'assistente rimane nascosto.",
+    "aiEnableTitle": "Accendilo",
+    "aiEnableDesc": "Aggiunge un assistente che legge la tua configurazione e suggerisce modifiche che approvi. Richiede un provider che tu fornisca, come ad esempio un Ollama locale.",
+    "aiNote": "Non viene inviato nulla finché non si aggiunge un provider e si invia un messaggio."
+  },
+  "hosts": {
+    "docsLink": "Visualizza documentazione"
+  }
+}

plugins/ai/locales/translated/ja_JP.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "アシスタントを使用する",
+      "description": "アシスタントを開いて、いろいろ質問してみてください。"
+    },
+    "manage_providers": {
+      "title": "プロバイダーを管理する",
+      "description": "AIプロバイダーとそのAPIキーを追加、編集、削除できます。"
+    },
+    "apply_proposals": {
+      "title": "提案を適用する",
+      "description": "アシスタントに提案された変更を実行させましょう。"
+    },
+    "services.use": {
+      "title": "他の機能からAIを活用する",
+      "description": "その他の機能によっては、あなたに代わってアシスタントを呼び出す場合があります。"
+    },
+    "secrets.share": {
+      "title": "APIキーを共有する",
+      "description": "他の機能は、保存されたAI APIキーを認識せずに使用する場合があります。"
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "このサーバーではAIアシスタントは無効になっています。",
+    "providersNeedOptIn": "上記のAIアシスタントをオンにして、プロバイダーを追加してください。",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AIアシスタント",
+        "description": "ユーザーがAIアシスタントをオンにできるようにします。オフになっている間は、アシスタントは非表示になり、誰からも利用できなくなります。"
+      },
+      "privateEndpoints": {
+        "label": "プライベートAIホストを許可",
+        "description": "ユーザーがプロバイダに指定できる、プライベートネットワーク上のホスト（自己ホスト型のOllamaなど）。各行にホストを1つずつ記述してください。"
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "AIアシスタントを有効にする",
+        "description": "このホストのターミナルでAIアシスタントによる支援を許可します。デフォルトでは無効になっており、アカウントでAIを有効にする必要があります。"
+      }
+    }
+  },
+  "ai": {
+    "title": "アシスタント",
+    "send": "送信",
+    "stop": "ストップ",
+    "save": "保存",
+    "cancel": "キャンセル",
+    "running": "実行中",
+    "approve": "承認する",
+    "reject": "拒否する",
+    "inputPlaceholder": "サーバーについて質問するか、変更案を説明する",
+    "selectProvider": "プロバイダーを選択してください",
+    "providerSettings": "プロバイダー設定",
+    "addProvider": "プロバイダーを追加",
+    "editProvider": "プロバイダーを編集",
+    "removeProvider": "プロバイダーを削除",
+    "providerType": "プロバイダー",
+    "providerLabel": "名前",
+    "providerLabelPlaceholder": "例えば：地元のオラマ",
+    "baseUrl": "サーバーアドレス",
+    "apiKey": "APIキー",
+    "defaultModel": "デフォルトモデル",
+    "defaultModelPlaceholder": "例えば、llama3.1 や claude-opus-5 など。",
+    "labelRequired": "このプロバイダーに名前を付けてください",
+    "providerSaveFailed": "プロバイダーを保存できませんでした",
+    "providerUpdated": "プロバイダーが更新されました",
+    "providerDeleteFailed": "プロバイダーを削除できませんでした",
+    "privateEndpointHint": "プライベートネットワーク上のアドレスを使用するには、まず管理者がホストを許可する必要があります。",
+    "providerOllama": "オラマ",
+    "providerAnthropic": "人間",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI対応",
+    "toolArguments": "受信",
+    "toolResult": "結果",
+    "statusApplied": "適用済み",
+    "statusRejected": "拒否されました",
+    "proposalApplied": "変更が適用されました",
+    "proposalApplyFailed": "変更を適用できませんでした",
+    "proposalRejectFailed": "変更を拒否できませんでした",
+    "enableTitle": "AIアシスタントを有効にする",
+    "enableDescription": "アシスタントにあなたの設定を読み取らせ、承認が必要な変更案を提案させましょう。",
+    "readOnlyCommands": "読み取り専用の診断コマンドを許可する",
+    "readOnlyCommandsDescription": "アシスタントは、dfやuptimeといった安全なコマンドを毎回確認することなく実行する場合があります。サーバーに変更を加える操作は、常に最初に提案されます。",
+    "modelDetectFailed": "プロバイダーに連絡が取れなかったため、これは一般的なリストです。任意のモデル名を入力してください。",
+    "modelCustom": "モデル名を入力してください",
+    "modelRefresh": "リストを更新",
+    "modelPlaceholder": "モデルを選択または入力してください",
+    "attachHint": "ホスト、スニペット、またはオートメーションを参照するには、「@」を入力してください。変更案が表示され、承認が必要となります。",
+    "runCommandTitle": "コマンドを実行する",
+    "assistant": "AIアシスタント",
+    "terminalPanelEmpty": "このホストについてアシスタントにお問い合わせください。状態変更を伴う変更はすべて、事前にあなたの承認が必要です。",
+    "terminalPanelPlaceholder": "このホストについて質問する...",
+    "noProvidersConfigured": "AIプロバイダーがまだ設定されていません。AIアシスタントタブで追加してください。",
+    "runsInOpenTerminal": "開いているターミナルセッションで実行されます。",
+    "runInTerminal": "実行",
+    "terminalContextPrefill": "これが私のターミナル出力です：\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "他の機能が、独自の要求にあなたのAIプロバイダーAPIキーを使用できるようにします。キーは決して複製されず、いつでも取り消すことができます。"
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AIアシスタント",
+    "aiIntro": "TermixにはオプションでAIアシスタントを搭載できます。これは後で設定画面で変更できます。",
+    "aiSkipTitle": "オフにしておく",
+    "aiSkipDesc": "Termixは現状のまま動作します。アシスタントは非表示のままです。",
+    "aiEnableTitle": "電源を入れる",
+    "aiEnableDesc": "設定を読み取り、承認した変更を提案するアシスタント機能を追加します。ローカルのOllamaなど、お客様ご自身で手配するプロバイダーが必要です。",
+    "aiNote": "プロバイダーを追加してメッセージを送信するまで、データはどこにも送信されません。"
+  },
+  "hosts": {
+    "docsLink": "ドキュメントを表示"
+  }
+}

plugins/ai/locales/translated/ko_KR.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "도우미를 사용하세요",
+      "description": "어시스턴트를 열고 질문을 해보세요."
+    },
+    "manage_providers": {
+      "title": "공급자 관리",
+      "description": "AI 제공업체와 해당 API 키를 추가, 편집 및 삭제할 수 있습니다."
+    },
+    "apply_proposals": {
+      "title": "제안서를 제출하세요",
+      "description": "도우미가 제안하는 변경 사항을 실행하도록 하세요."
+    },
+    "services.use": {
+      "title": "다른 기능의 AI를 활용하세요",
+      "description": "다른 기능들이 사용자를 대신하여 어시스턴트에게 전화를 걸 수도 있습니다."
+    },
+    "secrets.share": {
+      "title": "API 키를 공유하세요",
+      "description": "다른 기능들이 저장된 AI API 키를 직접 보지 않고도 사용할 수 있습니다."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "이 서버에서는 AI 비서 기능이 꺼져 있습니다.",
+    "providersNeedOptIn": "위의 AI 도우미를 켜서 제공업체를 추가하세요.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI 비서",
+        "description": "사용자가 AI 비서를 켜고 끌 수 있도록 하세요. AI 비서가 꺼져 있으면 모든 사용자에게 비서 기능이 숨겨지고 차단됩니다."
+      },
+      "privateEndpoints": {
+        "label": "개인 AI 호스트 허용",
+        "description": "사용자가 공급자를 지정할 수 있는 개인 네트워크의 호스트(예: 자체 호스팅 Ollama)를 입력합니다. 각 줄에 호스트를 하나씩 입력하십시오."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "AI 어시스턴트 활성화",
+        "description": "이 호스트의 터미널에서 AI 도우미의 도움을 받을 수 있도록 허용합니다. 기본적으로 비활성화되어 있으며, 계정에 AI 기능이 활성화되어 있어야 합니다."
+      }
+    }
+  },
+  "ai": {
+    "title": "어시스턴트",
+    "send": "보내다",
+    "stop": "스톱",
+    "save": "저장",
+    "cancel": "취소",
+    "running": "실행 중",
+    "approve": "승인하다",
+    "reject": "거부하다",
+    "inputPlaceholder": "서버에 대해 문의하거나, 변경 사항을 제안해 보세요.",
+    "selectProvider": "제공업체를 선택하세요",
+    "providerSettings": "공급자 설정",
+    "addProvider": "공급자 추가",
+    "editProvider": "제공자 수정",
+    "removeProvider": "제공업체를 제거하세요",
+    "providerType": "공급자",
+    "providerLabel": "이름",
+    "providerLabelPlaceholder": "예: 지역 올라마",
+    "baseUrl": "서버 주소",
+    "apiKey": "API 키",
+    "defaultModel": "기본 모델",
+    "defaultModelPlaceholder": "예를 들어: llama3.1 또는 claude-opus-5",
+    "labelRequired": "이 제공업체에 이름을 지정하세요",
+    "providerSaveFailed": "공급자를 저장할 수 없습니다.",
+    "providerUpdated": "제공업체 업데이트됨",
+    "providerDeleteFailed": "공급자를 제거할 수 없습니다.",
+    "privateEndpointHint": "개인 네트워크의 주소에 접근하려면 관리자가 먼저 호스트를 허용해야 합니다.",
+    "providerOllama": "올라마",
+    "providerAnthropic": "인류",
+    "providerOpenai": "오픈아이",
+    "providerGemini": "구글 제미니",
+    "providerOpenaiCompatible": "OpenAI와 호환 가능",
+    "toolArguments": "입력",
+    "toolResult": "결과",
+    "statusApplied": "적용된",
+    "statusRejected": "거절됨",
+    "proposalApplied": "변경 사항이 적용되었습니다",
+    "proposalApplyFailed": "변경 사항을 적용할 수 없습니다.",
+    "proposalRejectFailed": "변경을 거부할 수 없었습니다",
+    "enableTitle": "AI 비서를 활성화하세요",
+    "enableDescription": "도우미가 사용자의 설정을 읽고 승인할 변경 사항을 제안하도록 하세요.",
+    "readOnlyCommands": "읽기 전용 진단 명령을 허용합니다.",
+    "readOnlyCommandsDescription": "도우미는 매번 묻지 않고 df 및 uptime과 같은 안전한 명령어 목록을 실행할 수 있습니다. 서버를 변경하는 작업은 항상 먼저 제안됩니다.",
+    "modelDetectFailed": "공급업체에 연결할 수 없어서 일반적인 목록을 제공합니다. 모델명을 입력하셔도 됩니다.",
+    "modelCustom": "모델명을 입력하세요",
+    "modelRefresh": "목록 새로 고침",
+    "modelPlaceholder": "모델을 선택하거나 입력하세요.",
+    "attachHint": "호스트, 코드 조각 또는 자동화를 참조하려면 @를 입력하세요. 승인을 위해 변경 사항이 제안됩니다.",
+    "runCommandTitle": "명령어를 실행하세요",
+    "assistant": "AI 어시스턴트",
+    "terminalPanelEmpty": "이 호스트에 대해 담당자에게 문의하십시오. 상태가 변경되는 모든 사항은 먼저 사용자의 승인이 필요합니다.",
+    "terminalPanelPlaceholder": "이 호스트에 대해 문의해 보세요...",
+    "noProvidersConfigured": "아직 AI 제공업체가 구성되지 않았습니다. AI 도우미 탭에서 추가하세요.",
+    "runsInOpenTerminal": "열려 있는 터미널 세션에서 실행됩니다.",
+    "runInTerminal": "실행",
+    "terminalContextPrefill": "다음은 제 터미널 출력 결과입니다:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "다른 기능에서 AI 제공업체 API 키를 사용하여 자체 요청을 처리할 수 있도록 허용합니다. 키는 절대 복사되지 않으며 언제든지 취소할 수 있습니다."
+    }
+  },
+  "nav": {
+    "ai": "일체 포함"
+  },
+  "onboarding": {
+    "aiTitle": "AI 비서",
+    "aiIntro": "Termix에는 선택적으로 AI 비서 기능이 포함될 수 있습니다. 이 기능은 나중에 설정에서 변경할 수 있습니다.",
+    "aiSkipTitle": "꺼두세요",
+    "aiSkipDesc": "Termix는 현재와 같이 작동합니다. 어시스턴트는 숨겨진 상태로 유지됩니다.",
+    "aiEnableTitle": "켜세요",
+    "aiEnableDesc": "설정을 읽고 사용자가 승인하는 변경 사항을 제안하는 도우미를 추가합니다. 사용자가 제공하는 공급업체(예: 지역 Ollama)가 필요합니다.",
+    "aiNote": "공급자를 추가하고 메시지를 보내기 전까지는 아무것도 전송되지 않습니다."
+  },
+  "hosts": {
+    "docsLink": "문서 보기"
+  }
+}

plugins/ai/locales/translated/nl_NL.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Gebruik de assistent",
+      "description": "Open de assistent en stel er vragen aan."
+    },
+    "manage_providers": {
+      "title": "Beheer aanbieders",
+      "description": "AI-providers en hun API-sleutels toevoegen, bewerken en verwijderen."
+    },
+    "apply_proposals": {
+      "title": "Dien voorstellen in",
+      "description": "Laat de assistent de voorgestelde wijzigingen doorvoeren."
+    },
+    "services.use": {
+      "title": "Gebruik AI van andere functies",
+      "description": "Andere functies kunnen de assistent namens u inschakelen."
+    },
+    "secrets.share": {
+      "title": "Deel de API-sleutel",
+      "description": "Andere functies kunnen de opgeslagen AI API-sleutel gebruiken zonder deze te zien."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "De AI-assistent is op deze server uitgeschakeld.",
+    "providersNeedOptIn": "Schakel de AI-assistent hierboven in om aanbieders toe te voegen.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI-assistent",
+        "description": "Gebruikers kunnen de AI-assistent inschakelen. Wanneer deze is uitgeschakeld, is de assistent verborgen en voor iedereen geblokkeerd."
+      },
+      "privateEndpoints": {
+        "label": "Toegestane privé-AI-hosts",
+        "description": "Hosts op uw privénetwerk waarnaar gebruikers een provider kunnen verwijzen, zoals een zelfgehoste Ollama. Plaats één host per lijn."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "AI-assistent inschakelen",
+        "description": "Sta de AI-assistent toe om te helpen in de terminal van deze host. Standaard uitgeschakeld, maar AI moet nog steeds voor uw account zijn ingeschakeld."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistent",
+    "send": "Versturen",
+    "stop": "Stop",
+    "save": "Redden",
+    "cancel": "Annuleren",
+    "running": "rennen",
+    "approve": "Goedkeuren",
+    "reject": "Afwijzen",
+    "inputPlaceholder": "Vraag naar uw servers of beschrijf een voorgestelde wijziging.",
+    "selectProvider": "Selecteer een aanbieder",
+    "providerSettings": "Aanbiederinstellingen",
+    "addProvider": "Aanbieder toevoegen",
+    "editProvider": "Bewerk provider",
+    "removeProvider": "Verwijder provider",
+    "providerType": "Aanbieder",
+    "providerLabel": "Naam",
+    "providerLabelPlaceholder": "Bijvoorbeeld: Lokale Ollama",
+    "baseUrl": "Serveradres",
+    "apiKey": "API-sleutel",
+    "defaultModel": "Standaardmodel",
+    "defaultModelPlaceholder": "Bijvoorbeeld: llama3.1 of claude-opus-5",
+    "labelRequired": "Geef deze aanbieder een naam",
+    "providerSaveFailed": "De provider kon niet worden opgeslagen.",
+    "providerUpdated": "Aanbieder bijgewerkt",
+    "providerDeleteFailed": "De provider kon niet worden verwijderd.",
+    "privateEndpointHint": "IP-adressen op uw privénetwerk moeten eerst door een beheerder worden toegestaan.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Antropisch",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI-compatibel",
+    "toolArguments": "Invoer",
+    "toolResult": "Resultaat",
+    "statusApplied": "Toegepast",
+    "statusRejected": "Afgewezen",
+    "proposalApplied": "Toegepaste wijziging",
+    "proposalApplyFailed": "De wijziging kon niet worden toegepast.",
+    "proposalRejectFailed": "Kon de wijziging niet afwijzen",
+    "enableTitle": "Schakel de AI-assistent in",
+    "enableDescription": "Laat de assistent je instellingen lezen en wijzigingen voorstellen die je vervolgens kunt goedkeuren.",
+    "readOnlyCommands": "Sta alleen-lezen diagnostische opdrachten toe.",
+    "readOnlyCommandsDescription": "De assistent kan een korte lijst met veilige commando's zoals df en uptime uitvoeren zonder telkens opnieuw toestemming te vragen. Alles wat een server wijzigt, wordt altijd eerst voorgesteld.",
+    "modelDetectFailed": "De aanbieder kon niet worden bereikt, daarom is dit een algemene lijst. U kunt elke modelnaam invoeren.",
+    "modelCustom": "Voer een modelnaam in",
+    "modelRefresh": "Vernieuw de lijst",
+    "modelPlaceholder": "Kies of typ een model",
+    "attachHint": "Typ @ om te verwijzen naar een host, codefragment of automatisering. Wijzigingen worden voorgesteld ter goedkeuring.",
+    "runCommandTitle": "Voer het commando uit",
+    "assistant": "AI-assistent",
+    "terminalPanelEmpty": "Vraag de assistent naar deze host. Alles wat de status wijzigt, vereist eerst uw goedkeuring.",
+    "terminalPanelPlaceholder": "Vraag naar deze host...",
+    "noProvidersConfigured": "Er is nog geen AI-provider geconfigureerd. Voeg er een toe via het tabblad AI-assistent.",
+    "runsInOpenTerminal": "Wordt uitgevoerd in uw geopende terminalsessie.",
+    "runInTerminal": "Loop",
+    "terminalContextPrefill": "Hier is mijn terminaluitvoer:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Laat andere functies uw API-sleutel van de AI-provider gebruiken voor hun eigen verzoeken. De sleutel wordt nooit gekopieerd en u kunt deze op elk moment intrekken."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI-assistent",
+    "aiIntro": "Termix kan optioneel een AI-assistent bevatten. Je kunt dit later in je instellingen wijzigen.",
+    "aiSkipTitle": "Laat het weg",
+    "aiSkipDesc": "Termix werkt zoals het nu werkt. De assistent blijft verborgen.",
+    "aiEnableTitle": "Schakel het in.",
+    "aiEnableDesc": "Voegt een assistent toe die je instellingen leest en wijzigingen voorstelt die je kunt goedkeuren. Vereist een leverancier die je zelf aanlevert, zoals een lokale Ollama.",
+    "aiNote": "Er wordt niets verzonden totdat je een provider toevoegt en een bericht verstuurt."
+  },
+  "hosts": {
+    "docsLink": "Documenten bekijken"
+  }
+}

plugins/ai/locales/translated/no_NO.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Use the assistant",
+      "description": "Open the assistant and ask it things."
+    },
+    "manage_providers": {
+      "title": "Manage providers",
+      "description": "Add, edit and remove the AI providers and their API keys."
+    },
+    "apply_proposals": {
+      "title": "Apply proposals",
+      "description": "Let the assistant carry out the changes it suggests."
+    },
+    "services.use": {
+      "title": "Use AI from other features",
+      "description": "Other features may call the assistant on your behalf."
+    },
+    "secrets.share": {
+      "title": "Share the API key",
+      "description": "Other features may use the stored AI API key without seeing it."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "The AI assistant is turned off on this server.",
+    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI assistant",
+        "description": "Let users turn on the AI assistant. While this is off, the assistant is hidden and blocked for everyone."
+      },
+      "privateEndpoints": {
+        "label": "Allowed private AI hosts",
+        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Enable AI Assistant",
+        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistant",
+    "send": "Send",
+    "stop": "Stopp",
+    "save": "Lagre",
+    "cancel": "Avbryt",
+    "running": "kjører",
+    "approve": "Approve",
+    "reject": "Reject",
+    "inputPlaceholder": "Ask about your servers, or describe a change to propose",
+    "selectProvider": "Select a provider",
+    "providerSettings": "Provider settings",
+    "addProvider": "Add provider",
+    "editProvider": "Edit provider",
+    "removeProvider": "Remove provider",
+    "providerType": "Provider",
+    "providerLabel": "Navn",
+    "providerLabelPlaceholder": "For example: Local Ollama",
+    "baseUrl": "Server address",
+    "apiKey": "API key",
+    "defaultModel": "Default model",
+    "defaultModelPlaceholder": "For example: llama3.1 or claude-opus-5",
+    "labelRequired": "Give this provider a name",
+    "providerSaveFailed": "Could not save the provider",
+    "providerUpdated": "Provider updated",
+    "providerDeleteFailed": "Could not remove the provider",
+    "privateEndpointHint": "Addresses on your private network need an administrator to allow the host first.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI compatible",
+    "toolArguments": "Input",
+    "toolResult": "Result",
+    "statusApplied": "Applied",
+    "statusRejected": "Rejected",
+    "proposalApplied": "Change applied",
+    "proposalApplyFailed": "Could not apply the change",
+    "proposalRejectFailed": "Could not reject the change",
+    "enableTitle": "Enable the AI assistant",
+    "enableDescription": "Let the assistant read your setup and suggest changes for you to approve.",
+    "readOnlyCommands": "Allow read-only diagnostic commands",
+    "readOnlyCommandsDescription": "The assistant may run a short list of safe commands like df and uptime without asking each time. Anything that changes a server is always proposed first.",
+    "modelDetectFailed": "Could not reach the provider, so this is a general list. You can type any model name.",
+    "modelCustom": "Enter a model name",
+    "modelRefresh": "Refresh list",
+    "modelPlaceholder": "Choose or type a model",
+    "attachHint": "Type @ to reference a host, snippet or automation. Changes are proposed for you to approve.",
+    "runCommandTitle": "Run command",
+    "assistant": "AI Assistant",
+    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
+    "terminalPanelPlaceholder": "Ask about this host...",
+    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
+    "runsInOpenTerminal": "Runs in your open terminal session.",
+    "runInTerminal": "Kjør",
+    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI assistant",
+    "aiIntro": "Termix can include an optional AI assistant. You can change this later in your settings.",
+    "aiSkipTitle": "Leave it off",
+    "aiSkipDesc": "Termix works as it does now. The assistant stays hidden.",
+    "aiEnableTitle": "Turn it on",
+    "aiEnableDesc": "Adds an assistant that reads your setup and suggests changes you approve. Needs a provider you supply, such as a local Ollama.",
+    "aiNote": "Nothing is sent anywhere until you add a provider and send a message."
+  },
+  "hosts": {
+    "docsLink": "View docs"
+  }
+}

plugins/ai/locales/translated/pl_PL.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Use the assistant",
+      "description": "Open the assistant and ask it things."
+    },
+    "manage_providers": {
+      "title": "Manage providers",
+      "description": "Add, edit and remove the AI providers and their API keys."
+    },
+    "apply_proposals": {
+      "title": "Apply proposals",
+      "description": "Let the assistant carry out the changes it suggests."
+    },
+    "services.use": {
+      "title": "Use AI from other features",
+      "description": "Other features may call the assistant on your behalf."
+    },
+    "secrets.share": {
+      "title": "Share the API key",
+      "description": "Other features may use the stored AI API key without seeing it."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "The AI assistant is turned off on this server.",
+    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "Asystent AI",
+        "description": "Pozwól użytkownikom włączyć asystenta AI. Gdy ta opcja jest wyłączona, asystent jest ukryty i zablokowany dla wszystkich."
+      },
+      "privateEndpoints": {
+        "label": "Dozwolone prywatne hosty AI",
+        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Enable AI Assistant",
+        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Asystent",
+    "send": "Wyślij",
+    "stop": "Zatrzymaj",
+    "save": "Zapisz",
+    "cancel": "Anuluj",
+    "running": "działa",
+    "approve": "Zatwierdź",
+    "reject": "Odrzuć",
+    "inputPlaceholder": "Zapytaj o swoje serwery lub opisz proponowaną zmianę",
+    "selectProvider": "Wybierz dostawcę",
+    "providerSettings": "Ustawienia dostawcy",
+    "addProvider": "Dodaj dostawcę",
+    "editProvider": "Edytuj dostawcę",
+    "removeProvider": "Usuń dostawcę",
+    "providerType": "Dostawca",
+    "providerLabel": "Nazwa",
+    "providerLabelPlaceholder": "Na przykład: Ollama lokalnie",
+    "baseUrl": "Adres serwera",
+    "apiKey": "Klucz API",
+    "defaultModel": "Model domyślny",
+    "defaultModelPlaceholder": "Na przykład: llama3.1 lub claude-opus-5",
+    "labelRequired": "Podaj nazwę tego dostawcy",
+    "providerSaveFailed": "Nie udało się zapisać dostawcy",
+    "providerUpdated": "Zaktualizowano dostawcę",
+    "providerDeleteFailed": "Nie można usunąć dostawcy",
+    "privateEndpointHint": "Adresy w sieci prywatnej wymagają, aby administrator najpierw dopuścił dany host.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "Kompatybilny z OpenAI",
+    "toolArguments": "Dane wejściowe",
+    "toolResult": "Wynik",
+    "statusApplied": "Zastosowano",
+    "statusRejected": "Odrzucono",
+    "proposalApplied": "Zastosowano zmianę",
+    "proposalApplyFailed": "Nie można zastosować zmiany",
+    "proposalRejectFailed": "Nie można odrzucić zmiany",
+    "enableTitle": "Włącz asystenta AI",
+    "enableDescription": "Pozwól asystentowi odczytać konfigurację i proponować zmiany do Twojego zatwierdzenia.",
+    "readOnlyCommands": "Zezwalaj na polecenia diagnostyczne tylko do odczytu",
+    "readOnlyCommandsDescription": "Asystent może uruchamiać krótką listę bezpiecznych poleceń, takich jak df czy uptime, bez pytania za każdym razem. Wszystko, co zmienia serwer, jest zawsze najpierw proponowane do zatwierdzenia.",
+    "modelDetectFailed": "Nie udało się skontaktować z dostawcą, więc jest to lista ogólna. Możesz wpisać dowolną nazwę modelu.",
+    "modelCustom": "Wprowadź nazwę modelu",
+    "modelRefresh": "Odśwież listę",
+    "modelPlaceholder": "Wybierz lub wpisz model",
+    "attachHint": "Wpisz @, aby odwołać się do hosta, snippetu lub automatyzacji. Zmiany są proponowane do Twojego zatwierdzenia.",
+    "runCommandTitle": "Uruchom polecenie",
+    "assistant": "AI Assistant",
+    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
+    "terminalPanelPlaceholder": "Ask about this host...",
+    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
+    "runsInOpenTerminal": "Runs in your open terminal session.",
+    "runInTerminal": "Uruchom",
+    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "Asystent AI",
+    "aiIntro": "Termix może zawierać opcjonalnego asystenta AI. Możesz to później zmienić w ustawieniach.",
+    "aiSkipTitle": "Zostaw wyłączone",
+    "aiSkipDesc": "Termix działa tak jak teraz. Asystent pozostaje ukryty.",
+    "aiEnableTitle": "Włącz",
+    "aiEnableDesc": "Dodaje asystenta, który odczytuje Twoją konfigurację i sugeruje zmiany, które zatwierdzasz. Wymaga wskazanego przez Ciebie dostawcy, np. lokalnej Ollamy.",
+    "aiNote": "Dopóki nie dodasz dostawcy i nie wyślesz wiadomości, nic nie zostanie wysłane."
+  },
+  "hosts": {
+    "docsLink": "Zobacz dokumentację"
+  }
+}

plugins/ai/locales/translated/pt_BR.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Use the assistant",
+      "description": "Open the assistant and ask it things."
+    },
+    "manage_providers": {
+      "title": "Manage providers",
+      "description": "Add, edit and remove the AI providers and their API keys."
+    },
+    "apply_proposals": {
+      "title": "Apply proposals",
+      "description": "Let the assistant carry out the changes it suggests."
+    },
+    "services.use": {
+      "title": "Use AI from other features",
+      "description": "Other features may call the assistant on your behalf."
+    },
+    "secrets.share": {
+      "title": "Share the API key",
+      "description": "Other features may use the stored AI API key without seeing it."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "The AI assistant is turned off on this server.",
+    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI assistant",
+        "description": "Let users turn on the AI assistant. While this is off, the assistant is hidden and blocked for everyone."
+      },
+      "privateEndpoints": {
+        "label": "Allowed private AI hosts",
+        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Enable AI Assistant",
+        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistant",
+    "send": "Send",
+    "stop": "Stop",
+    "save": "Salvar",
+    "cancel": "Cancelar",
+    "running": "running",
+    "approve": "Approve",
+    "reject": "Reject",
+    "inputPlaceholder": "Ask about your servers, or describe a change to propose",
+    "selectProvider": "Select a provider",
+    "providerSettings": "Provider settings",
+    "addProvider": "Add provider",
+    "editProvider": "Edit provider",
+    "removeProvider": "Remove provider",
+    "providerType": "Provider",
+    "providerLabel": "Name",
+    "providerLabelPlaceholder": "For example: Local Ollama",
+    "baseUrl": "Server address",
+    "apiKey": "API key",
+    "defaultModel": "Default model",
+    "defaultModelPlaceholder": "For example: llama3.1 or claude-opus-5",
+    "labelRequired": "Give this provider a name",
+    "providerSaveFailed": "Could not save the provider",
+    "providerUpdated": "Provider updated",
+    "providerDeleteFailed": "Could not remove the provider",
+    "privateEndpointHint": "Addresses on your private network need an administrator to allow the host first.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI compatible",
+    "toolArguments": "Entrada",
+    "toolResult": "Result",
+    "statusApplied": "Applied",
+    "statusRejected": "Rejected",
+    "proposalApplied": "Change applied",
+    "proposalApplyFailed": "Could not apply the change",
+    "proposalRejectFailed": "Could not reject the change",
+    "enableTitle": "Enable the AI assistant",
+    "enableDescription": "Let the assistant read your setup and suggest changes for you to approve.",
+    "readOnlyCommands": "Allow read-only diagnostic commands",
+    "readOnlyCommandsDescription": "The assistant may run a short list of safe commands like df and uptime without asking each time. Anything that changes a server is always proposed first.",
+    "modelDetectFailed": "Could not reach the provider, so this is a general list. You can type any model name.",
+    "modelCustom": "Enter a model name",
+    "modelRefresh": "Refresh list",
+    "modelPlaceholder": "Choose or type a model",
+    "attachHint": "Type @ to reference a host, snippet or automation. Changes are proposed for you to approve.",
+    "runCommandTitle": "Run command",
+    "assistant": "AI Assistant",
+    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
+    "terminalPanelPlaceholder": "Ask about this host...",
+    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
+    "runsInOpenTerminal": "Runs in your open terminal session.",
+    "runInTerminal": "Run",
+    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI assistant",
+    "aiIntro": "Termix can include an optional AI assistant. You can change this later in your settings.",
+    "aiSkipTitle": "Leave it off",
+    "aiSkipDesc": "Termix works as it does now. The assistant stays hidden.",
+    "aiEnableTitle": "Turn it on",
+    "aiEnableDesc": "Adds an assistant that reads your setup and suggests changes you approve. Needs a provider you supply, such as a local Ollama.",
+    "aiNote": "Nothing is sent anywhere until you add a provider and send a message."
+  },
+  "hosts": {
+    "docsLink": "Documentação"
+  }
+}

plugins/ai/locales/translated/pt_PT.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Use the assistant",
+      "description": "Open the assistant and ask it things."
+    },
+    "manage_providers": {
+      "title": "Manage providers",
+      "description": "Add, edit and remove the AI providers and their API keys."
+    },
+    "apply_proposals": {
+      "title": "Apply proposals",
+      "description": "Let the assistant carry out the changes it suggests."
+    },
+    "services.use": {
+      "title": "Use AI from other features",
+      "description": "Other features may call the assistant on your behalf."
+    },
+    "secrets.share": {
+      "title": "Share the API key",
+      "description": "Other features may use the stored AI API key without seeing it."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "The AI assistant is turned off on this server.",
+    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI assistant",
+        "description": "Let users turn on the AI assistant. While this is off, the assistant is hidden and blocked for everyone."
+      },
+      "privateEndpoints": {
+        "label": "Allowed private AI hosts",
+        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Enable AI Assistant",
+        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistant",
+    "send": "Send",
+    "stop": "Stop",
+    "save": "Guardar",
+    "cancel": "Cancelar",
+    "running": "em execução",
+    "approve": "Approve",
+    "reject": "Reject",
+    "inputPlaceholder": "Ask about your servers, or describe a change to propose",
+    "selectProvider": "Select a provider",
+    "providerSettings": "Provider settings",
+    "addProvider": "Add provider",
+    "editProvider": "Edit provider",
+    "removeProvider": "Remove provider",
+    "providerType": "Provider",
+    "providerLabel": "Nome",
+    "providerLabelPlaceholder": "For example: Local Ollama",
+    "baseUrl": "Server address",
+    "apiKey": "API key",
+    "defaultModel": "Default model",
+    "defaultModelPlaceholder": "For example: llama3.1 or claude-opus-5",
+    "labelRequired": "Give this provider a name",
+    "providerSaveFailed": "Could not save the provider",
+    "providerUpdated": "Provider updated",
+    "providerDeleteFailed": "Could not remove the provider",
+    "privateEndpointHint": "Addresses on your private network need an administrator to allow the host first.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI compatible",
+    "toolArguments": "Entrada",
+    "toolResult": "Result",
+    "statusApplied": "Applied",
+    "statusRejected": "Rejected",
+    "proposalApplied": "Change applied",
+    "proposalApplyFailed": "Could not apply the change",
+    "proposalRejectFailed": "Could not reject the change",
+    "enableTitle": "Enable the AI assistant",
+    "enableDescription": "Let the assistant read your setup and suggest changes for you to approve.",
+    "readOnlyCommands": "Allow read-only diagnostic commands",
+    "readOnlyCommandsDescription": "The assistant may run a short list of safe commands like df and uptime without asking each time. Anything that changes a server is always proposed first.",
+    "modelDetectFailed": "Could not reach the provider, so this is a general list. You can type any model name.",
+    "modelCustom": "Enter a model name",
+    "modelRefresh": "Refresh list",
+    "modelPlaceholder": "Choose or type a model",
+    "attachHint": "Type @ to reference a host, snippet or automation. Changes are proposed for you to approve.",
+    "runCommandTitle": "Run command",
+    "assistant": "AI Assistant",
+    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
+    "terminalPanelPlaceholder": "Ask about this host...",
+    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
+    "runsInOpenTerminal": "Runs in your open terminal session.",
+    "runInTerminal": "Executar",
+    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI assistant",
+    "aiIntro": "Termix can include an optional AI assistant. You can change this later in your settings.",
+    "aiSkipTitle": "Leave it off",
+    "aiSkipDesc": "Termix works as it does now. The assistant stays hidden.",
+    "aiEnableTitle": "Turn it on",
+    "aiEnableDesc": "Adds an assistant that reads your setup and suggests changes you approve. Needs a provider you supply, such as a local Ollama.",
+    "aiNote": "Nothing is sent anywhere until you add a provider and send a message."
+  },
+  "hosts": {
+    "docsLink": "Ver documentação"
+  }
+}

plugins/ai/locales/translated/ro_RO.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Folosește asistentul",
+      "description": "Deschide asistentul și pune-i întrebări."
+    },
+    "manage_providers": {
+      "title": "Gestionați furnizorii",
+      "description": "Adăugați, editați și eliminați furnizorii de inteligență artificială și cheile API ale acestora."
+    },
+    "apply_proposals": {
+      "title": "Aplicați propunerile",
+      "description": "Lăsați asistentul să efectueze modificările sugerate de acesta."
+    },
+    "services.use": {
+      "title": "Folosește inteligența artificială din alte funcții",
+      "description": "Alte funcții pot apela asistentul în numele tău."
+    },
+    "secrets.share": {
+      "title": "Partajați cheia API",
+      "description": "Alte funcții pot utiliza cheia API AI stocată fără a o vedea."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "Asistentul AI este dezactivat pe acest server.",
+    "providersNeedOptIn": "Activează asistentul AI de mai sus pentru a adăuga furnizori.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "Asistent AI",
+        "description": "Permiteți utilizatorilor să activeze asistentul AI. Cât timp această opțiune este dezactivată, asistentul este ascuns și blocat pentru toată lumea."
+      },
+      "privateEndpoints": {
+        "label": "Gazde private AI permise",
+        "description": "Gazde din rețeaua ta privată către care utilizatorii pot direcționa un furnizor, cum ar fi un Ollama auto-găzduit. Pune câte o gazdă pe fiecare linie."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Activează Asistentul AI",
+        "description": "Permiteți asistentului AI să vă ajute în terminalul acestei gazde. Dezactivat în mod implicit, dar este nevoie ca AI să fie activat pentru contul dvs."
+      }
+    }
+  },
+  "ai": {
+    "title": "Asistent",
+    "send": "Trimite",
+    "stop": "Stop",
+    "save": "Salva",
+    "cancel": "Anula",
+    "running": "funcţionare",
+    "approve": "Aproba",
+    "reject": "Respinge",
+    "inputPlaceholder": "Întreabă despre chelnerii tăi sau descrie o schimbare pe care o propui.",
+    "selectProvider": "Selectați un furnizor",
+    "providerSettings": "Setări furnizor",
+    "addProvider": "Adăugați furnizor",
+    "editProvider": "Editați furnizorul",
+    "removeProvider": "Eliminați furnizorul",
+    "providerType": "Furnizor",
+    "providerLabel": "Nume",
+    "providerLabelPlaceholder": "De exemplu: Ollama locală",
+    "baseUrl": "Adresa serverului",
+    "apiKey": "Cheie API",
+    "defaultModel": "Model implicit",
+    "defaultModelPlaceholder": "De exemplu: llama3.1 sau claude-opus-5",
+    "labelRequired": "Dați un nume acestui furnizor",
+    "providerSaveFailed": "Nu s-a putut salva furnizorul",
+    "providerUpdated": "Furnizor actualizat",
+    "providerDeleteFailed": "Nu s-a putut elimina furnizorul",
+    "privateEndpointHint": "Adresele din rețeaua privată necesită mai întâi permisiunea unui administrator pentru gazdă.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Antropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemeni",
+    "providerOpenaiCompatible": "Compatibil cu OpenAI",
+    "toolArguments": "Intrare",
+    "toolResult": "Rezultat",
+    "statusApplied": "Aplicat",
+    "statusRejected": "Respins",
+    "proposalApplied": "Modificare aplicată",
+    "proposalApplyFailed": "Nu s-a putut aplica modificarea",
+    "proposalRejectFailed": "Nu s-a putut respinge modificarea",
+    "enableTitle": "Activează asistentul AI",
+    "enableDescription": "Permiteți asistentului să citească configurația și să sugereze modificări pentru aprobare.",
+    "readOnlyCommands": "Permite comenzi de diagnosticare doar în citire",
+    "readOnlyCommandsDescription": "Asistentul poate rula o listă scurtă de comenzi sigure, cum ar fi df și uptime, fără a întreba de fiecare dată. Orice modificare a unui server este întotdeauna propusă prima.",
+    "modelDetectFailed": "Nu s-a putut contacta furnizorul, așadar aceasta este o listă generală. Puteți introduce orice nume de model.",
+    "modelCustom": "Introduceți un nume de model",
+    "modelRefresh": "Reîmprospătați lista",
+    "modelPlaceholder": "Alegeți sau introduceți un model",
+    "attachHint": "Tastați @ pentru a face referire la o gazdă, un fragment de cod sau o automatizare. Sunt propuse modificări pentru aprobare.",
+    "runCommandTitle": "Comandă de rulare",
+    "assistant": "Asistent AI",
+    "terminalPanelEmpty": "Întreabă asistentul despre această gazdă. Orice modificare a stării necesită mai întâi aprobarea ta.",
+    "terminalPanelPlaceholder": "Întreabă despre această gazdă...",
+    "noProvidersConfigured": "Încă nu este configurat niciun furnizor de inteligență artificială. Adăugați unul în fila Asistent de inteligență artificială.",
+    "runsInOpenTerminal": "Rulează în sesiunea de terminal deschisă.",
+    "runInTerminal": "Aleargă",
+    "terminalContextPrefill": "Iată ieșirea terminalului meu:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Permiteți altor funcții să utilizeze cheia API a furnizorului dvs. de inteligență artificială pentru propriile solicitări. Cheia nu este niciodată copiată și puteți revoca această opțiune oricând."
+    }
+  },
+  "nav": {
+    "ai": "IA"
+  },
+  "onboarding": {
+    "aiTitle": "Asistent AI",
+    "aiIntro": "Termix poate include un asistent AI opțional. Puteți modifica acest lucru ulterior în setări.",
+    "aiSkipTitle": "Lasă-l deoparte",
+    "aiSkipDesc": "Termix funcționează ca acum. Asistentul rămâne ascuns.",
+    "aiEnableTitle": "Pornește-l",
+    "aiEnableDesc": "Adaugă un asistent care citește configurația și sugerează modificări pe care le aprobi. Necesită un furnizor furnizat de tine, cum ar fi un Ollama local.",
+    "aiNote": "Nimic nu este trimis nicăieri până nu adăugați un furnizor și nu trimiteți un mesaj."
+  },
+  "hosts": {
+    "docsLink": "Vizualizați documentele"
+  }
+}

plugins/ai/locales/translated/ru_RU.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Use the assistant",
+      "description": "Open the assistant and ask it things."
+    },
+    "manage_providers": {
+      "title": "Manage providers",
+      "description": "Add, edit and remove the AI providers and their API keys."
+    },
+    "apply_proposals": {
+      "title": "Apply proposals",
+      "description": "Let the assistant carry out the changes it suggests."
+    },
+    "services.use": {
+      "title": "Use AI from other features",
+      "description": "Other features may call the assistant on your behalf."
+    },
+    "secrets.share": {
+      "title": "Share the API key",
+      "description": "Other features may use the stored AI API key without seeing it."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "The AI assistant is turned off on this server.",
+    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI assistant",
+        "description": "Let users turn on the AI assistant. While this is off, the assistant is hidden and blocked for everyone."
+      },
+      "privateEndpoints": {
+        "label": "Allowed private AI hosts",
+        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Enable AI Assistant",
+        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistant",
+    "send": "Send",
+    "stop": "Остановить",
+    "save": "Сохранить",
+    "cancel": "Отмена",
+    "running": "выполняется",
+    "approve": "Approve",
+    "reject": "Reject",
+    "inputPlaceholder": "Ask about your servers, or describe a change to propose",
+    "selectProvider": "Select a provider",
+    "providerSettings": "Provider settings",
+    "addProvider": "Add provider",
+    "editProvider": "Edit provider",
+    "removeProvider": "Remove provider",
+    "providerType": "Provider",
+    "providerLabel": "Название",
+    "providerLabelPlaceholder": "For example: Local Ollama",
+    "baseUrl": "Server address",
+    "apiKey": "API key",
+    "defaultModel": "Default model",
+    "defaultModelPlaceholder": "For example: llama3.1 or claude-opus-5",
+    "labelRequired": "Give this provider a name",
+    "providerSaveFailed": "Could not save the provider",
+    "providerUpdated": "Provider updated",
+    "providerDeleteFailed": "Could not remove the provider",
+    "privateEndpointHint": "Addresses on your private network need an administrator to allow the host first.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI compatible",
+    "toolArguments": "Ввод",
+    "toolResult": "Result",
+    "statusApplied": "Applied",
+    "statusRejected": "Rejected",
+    "proposalApplied": "Change applied",
+    "proposalApplyFailed": "Could not apply the change",
+    "proposalRejectFailed": "Could not reject the change",
+    "enableTitle": "Enable the AI assistant",
+    "enableDescription": "Let the assistant read your setup and suggest changes for you to approve.",
+    "readOnlyCommands": "Allow read-only diagnostic commands",
+    "readOnlyCommandsDescription": "The assistant may run a short list of safe commands like df and uptime without asking each time. Anything that changes a server is always proposed first.",
+    "modelDetectFailed": "Could not reach the provider, so this is a general list. You can type any model name.",
+    "modelCustom": "Enter a model name",
+    "modelRefresh": "Refresh list",
+    "modelPlaceholder": "Choose or type a model",
+    "attachHint": "Type @ to reference a host, snippet or automation. Changes are proposed for you to approve.",
+    "runCommandTitle": "Run command",
+    "assistant": "AI Assistant",
+    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
+    "terminalPanelPlaceholder": "Ask about this host...",
+    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
+    "runsInOpenTerminal": "Runs in your open terminal session.",
+    "runInTerminal": "Запустить",
+    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI assistant",
+    "aiIntro": "Termix can include an optional AI assistant. You can change this later in your settings.",
+    "aiSkipTitle": "Leave it off",
+    "aiSkipDesc": "Termix works as it does now. The assistant stays hidden.",
+    "aiEnableTitle": "Turn it on",
+    "aiEnableDesc": "Adds an assistant that reads your setup and suggests changes you approve. Needs a provider you supply, such as a local Ollama.",
+    "aiNote": "Nothing is sent anywhere until you add a provider and send a message."
+  },
+  "hosts": {
+    "docsLink": "Документация"
+  }
+}

plugins/ai/locales/translated/sr_SP.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Use the assistant",
+      "description": "Open the assistant and ask it things."
+    },
+    "manage_providers": {
+      "title": "Manage providers",
+      "description": "Add, edit and remove the AI providers and their API keys."
+    },
+    "apply_proposals": {
+      "title": "Apply proposals",
+      "description": "Let the assistant carry out the changes it suggests."
+    },
+    "services.use": {
+      "title": "Use AI from other features",
+      "description": "Other features may call the assistant on your behalf."
+    },
+    "secrets.share": {
+      "title": "Share the API key",
+      "description": "Other features may use the stored AI API key without seeing it."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "The AI assistant is turned off on this server.",
+    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI assistant",
+        "description": "Let users turn on the AI assistant. While this is off, the assistant is hidden and blocked for everyone."
+      },
+      "privateEndpoints": {
+        "label": "Allowed private AI hosts",
+        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Enable AI Assistant",
+        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistant",
+    "send": "Send",
+    "stop": "Stop",
+    "save": "Save",
+    "cancel": "Cancel",
+    "running": "running",
+    "approve": "Approve",
+    "reject": "Reject",
+    "inputPlaceholder": "Ask about your servers, or describe a change to propose",
+    "selectProvider": "Select a provider",
+    "providerSettings": "Provider settings",
+    "addProvider": "Add provider",
+    "editProvider": "Edit provider",
+    "removeProvider": "Remove provider",
+    "providerType": "Provider",
+    "providerLabel": "Name",
+    "providerLabelPlaceholder": "For example: Local Ollama",
+    "baseUrl": "Server address",
+    "apiKey": "API key",
+    "defaultModel": "Default model",
+    "defaultModelPlaceholder": "For example: llama3.1 or claude-opus-5",
+    "labelRequired": "Give this provider a name",
+    "providerSaveFailed": "Could not save the provider",
+    "providerUpdated": "Provider updated",
+    "providerDeleteFailed": "Could not remove the provider",
+    "privateEndpointHint": "Addresses on your private network need an administrator to allow the host first.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI compatible",
+    "toolArguments": "Input",
+    "toolResult": "Result",
+    "statusApplied": "Applied",
+    "statusRejected": "Rejected",
+    "proposalApplied": "Change applied",
+    "proposalApplyFailed": "Could not apply the change",
+    "proposalRejectFailed": "Could not reject the change",
+    "enableTitle": "Enable the AI assistant",
+    "enableDescription": "Let the assistant read your setup and suggest changes for you to approve.",
+    "readOnlyCommands": "Allow read-only diagnostic commands",
+    "readOnlyCommandsDescription": "The assistant may run a short list of safe commands like df and uptime without asking each time. Anything that changes a server is always proposed first.",
+    "modelDetectFailed": "Could not reach the provider, so this is a general list. You can type any model name.",
+    "modelCustom": "Enter a model name",
+    "modelRefresh": "Refresh list",
+    "modelPlaceholder": "Choose or type a model",
+    "attachHint": "Type @ to reference a host, snippet or automation. Changes are proposed for you to approve.",
+    "runCommandTitle": "Run command",
+    "assistant": "AI Assistant",
+    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
+    "terminalPanelPlaceholder": "Ask about this host...",
+    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
+    "runsInOpenTerminal": "Runs in your open terminal session.",
+    "runInTerminal": "Run",
+    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI assistant",
+    "aiIntro": "Termix can include an optional AI assistant. You can change this later in your settings.",
+    "aiSkipTitle": "Leave it off",
+    "aiSkipDesc": "Termix works as it does now. The assistant stays hidden.",
+    "aiEnableTitle": "Turn it on",
+    "aiEnableDesc": "Adds an assistant that reads your setup and suggests changes you approve. Needs a provider you supply, such as a local Ollama.",
+    "aiNote": "Nothing is sent anywhere until you add a provider and send a message."
+  },
+  "hosts": {
+    "docsLink": "View docs"
+  }
+}

plugins/ai/locales/translated/sv_SE.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Use the assistant",
+      "description": "Open the assistant and ask it things."
+    },
+    "manage_providers": {
+      "title": "Manage providers",
+      "description": "Add, edit and remove the AI providers and their API keys."
+    },
+    "apply_proposals": {
+      "title": "Apply proposals",
+      "description": "Let the assistant carry out the changes it suggests."
+    },
+    "services.use": {
+      "title": "Use AI from other features",
+      "description": "Other features may call the assistant on your behalf."
+    },
+    "secrets.share": {
+      "title": "Share the API key",
+      "description": "Other features may use the stored AI API key without seeing it."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "The AI assistant is turned off on this server.",
+    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI assistant",
+        "description": "Let users turn on the AI assistant. While this is off, the assistant is hidden and blocked for everyone."
+      },
+      "privateEndpoints": {
+        "label": "Allowed private AI hosts",
+        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Enable AI Assistant",
+        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistant",
+    "send": "Send",
+    "stop": "Stop",
+    "save": "Save",
+    "cancel": "Cancel",
+    "running": "running",
+    "approve": "Approve",
+    "reject": "Reject",
+    "inputPlaceholder": "Ask about your servers, or describe a change to propose",
+    "selectProvider": "Select a provider",
+    "providerSettings": "Provider settings",
+    "addProvider": "Add provider",
+    "editProvider": "Edit provider",
+    "removeProvider": "Remove provider",
+    "providerType": "Provider",
+    "providerLabel": "Name",
+    "providerLabelPlaceholder": "For example: Local Ollama",
+    "baseUrl": "Server address",
+    "apiKey": "API key",
+    "defaultModel": "Default model",
+    "defaultModelPlaceholder": "For example: llama3.1 or claude-opus-5",
+    "labelRequired": "Give this provider a name",
+    "providerSaveFailed": "Could not save the provider",
+    "providerUpdated": "Provider updated",
+    "providerDeleteFailed": "Could not remove the provider",
+    "privateEndpointHint": "Addresses on your private network need an administrator to allow the host first.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI compatible",
+    "toolArguments": "Input",
+    "toolResult": "Result",
+    "statusApplied": "Applied",
+    "statusRejected": "Rejected",
+    "proposalApplied": "Change applied",
+    "proposalApplyFailed": "Could not apply the change",
+    "proposalRejectFailed": "Could not reject the change",
+    "enableTitle": "Enable the AI assistant",
+    "enableDescription": "Let the assistant read your setup and suggest changes for you to approve.",
+    "readOnlyCommands": "Allow read-only diagnostic commands",
+    "readOnlyCommandsDescription": "The assistant may run a short list of safe commands like df and uptime without asking each time. Anything that changes a server is always proposed first.",
+    "modelDetectFailed": "Could not reach the provider, so this is a general list. You can type any model name.",
+    "modelCustom": "Enter a model name",
+    "modelRefresh": "Refresh list",
+    "modelPlaceholder": "Choose or type a model",
+    "attachHint": "Type @ to reference a host, snippet or automation. Changes are proposed for you to approve.",
+    "runCommandTitle": "Run command",
+    "assistant": "AI Assistant",
+    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
+    "terminalPanelPlaceholder": "Ask about this host...",
+    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
+    "runsInOpenTerminal": "Runs in your open terminal session.",
+    "runInTerminal": "Run",
+    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI assistant",
+    "aiIntro": "Termix can include an optional AI assistant. You can change this later in your settings.",
+    "aiSkipTitle": "Leave it off",
+    "aiSkipDesc": "Termix works as it does now. The assistant stays hidden.",
+    "aiEnableTitle": "Turn it on",
+    "aiEnableDesc": "Adds an assistant that reads your setup and suggests changes you approve. Needs a provider you supply, such as a local Ollama.",
+    "aiNote": "Nothing is sent anywhere until you add a provider and send a message."
+  },
+  "hosts": {
+    "docsLink": "View docs"
+  }
+}

plugins/ai/locales/translated/th_TH.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Use the assistant",
+      "description": "Open the assistant and ask it things."
+    },
+    "manage_providers": {
+      "title": "Manage providers",
+      "description": "Add, edit and remove the AI providers and their API keys."
+    },
+    "apply_proposals": {
+      "title": "Apply proposals",
+      "description": "Let the assistant carry out the changes it suggests."
+    },
+    "services.use": {
+      "title": "Use AI from other features",
+      "description": "Other features may call the assistant on your behalf."
+    },
+    "secrets.share": {
+      "title": "Share the API key",
+      "description": "Other features may use the stored AI API key without seeing it."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "The AI assistant is turned off on this server.",
+    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI assistant",
+        "description": "Let users turn on the AI assistant. While this is off, the assistant is hidden and blocked for everyone."
+      },
+      "privateEndpoints": {
+        "label": "Allowed private AI hosts",
+        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Enable AI Assistant",
+        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistant",
+    "send": "Send",
+    "stop": "Stop",
+    "save": "Save",
+    "cancel": "Cancel",
+    "running": "running",
+    "approve": "Approve",
+    "reject": "Reject",
+    "inputPlaceholder": "Ask about your servers, or describe a change to propose",
+    "selectProvider": "Select a provider",
+    "providerSettings": "Provider settings",
+    "addProvider": "Add provider",
+    "editProvider": "Edit provider",
+    "removeProvider": "Remove provider",
+    "providerType": "Provider",
+    "providerLabel": "Name",
+    "providerLabelPlaceholder": "For example: Local Ollama",
+    "baseUrl": "Server address",
+    "apiKey": "API key",
+    "defaultModel": "Default model",
+    "defaultModelPlaceholder": "For example: llama3.1 or claude-opus-5",
+    "labelRequired": "Give this provider a name",
+    "providerSaveFailed": "Could not save the provider",
+    "providerUpdated": "Provider updated",
+    "providerDeleteFailed": "Could not remove the provider",
+    "privateEndpointHint": "Addresses on your private network need an administrator to allow the host first.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI compatible",
+    "toolArguments": "Input",
+    "toolResult": "Result",
+    "statusApplied": "Applied",
+    "statusRejected": "Rejected",
+    "proposalApplied": "Change applied",
+    "proposalApplyFailed": "Could not apply the change",
+    "proposalRejectFailed": "Could not reject the change",
+    "enableTitle": "Enable the AI assistant",
+    "enableDescription": "Let the assistant read your setup and suggest changes for you to approve.",
+    "readOnlyCommands": "Allow read-only diagnostic commands",
+    "readOnlyCommandsDescription": "The assistant may run a short list of safe commands like df and uptime without asking each time. Anything that changes a server is always proposed first.",
+    "modelDetectFailed": "Could not reach the provider, so this is a general list. You can type any model name.",
+    "modelCustom": "Enter a model name",
+    "modelRefresh": "Refresh list",
+    "modelPlaceholder": "Choose or type a model",
+    "attachHint": "Type @ to reference a host, snippet or automation. Changes are proposed for you to approve.",
+    "runCommandTitle": "Run command",
+    "assistant": "AI Assistant",
+    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
+    "terminalPanelPlaceholder": "Ask about this host...",
+    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
+    "runsInOpenTerminal": "Runs in your open terminal session.",
+    "runInTerminal": "Run",
+    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI assistant",
+    "aiIntro": "Termix can include an optional AI assistant. You can change this later in your settings.",
+    "aiSkipTitle": "Leave it off",
+    "aiSkipDesc": "Termix works as it does now. The assistant stays hidden.",
+    "aiEnableTitle": "Turn it on",
+    "aiEnableDesc": "Adds an assistant that reads your setup and suggests changes you approve. Needs a provider you supply, such as a local Ollama.",
+    "aiNote": "Nothing is sent anywhere until you add a provider and send a message."
+  },
+  "hosts": {
+    "docsLink": "View docs"
+  }
+}

plugins/ai/locales/translated/tr_TR.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Use the assistant",
+      "description": "Open the assistant and ask it things."
+    },
+    "manage_providers": {
+      "title": "Manage providers",
+      "description": "Add, edit and remove the AI providers and their API keys."
+    },
+    "apply_proposals": {
+      "title": "Apply proposals",
+      "description": "Let the assistant carry out the changes it suggests."
+    },
+    "services.use": {
+      "title": "Use AI from other features",
+      "description": "Other features may call the assistant on your behalf."
+    },
+    "secrets.share": {
+      "title": "Share the API key",
+      "description": "Other features may use the stored AI API key without seeing it."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "The AI assistant is turned off on this server.",
+    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI assistant",
+        "description": "Let users turn on the AI assistant. While this is off, the assistant is hidden and blocked for everyone."
+      },
+      "privateEndpoints": {
+        "label": "Allowed private AI hosts",
+        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Enable AI Assistant",
+        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistant",
+    "send": "Send",
+    "stop": "Durdurma",
+    "save": "Kaydet",
+    "cancel": "İptal",
+    "running": "çalışan",
+    "approve": "Approve",
+    "reject": "Reject",
+    "inputPlaceholder": "Ask about your servers, or describe a change to propose",
+    "selectProvider": "Select a provider",
+    "providerSettings": "Provider settings",
+    "addProvider": "Add provider",
+    "editProvider": "Edit provider",
+    "removeProvider": "Remove provider",
+    "providerType": "Provider",
+    "providerLabel": "Ad",
+    "providerLabelPlaceholder": "For example: Local Ollama",
+    "baseUrl": "Server address",
+    "apiKey": "API key",
+    "defaultModel": "Default model",
+    "defaultModelPlaceholder": "For example: llama3.1 or claude-opus-5",
+    "labelRequired": "Give this provider a name",
+    "providerSaveFailed": "Could not save the provider",
+    "providerUpdated": "Provider updated",
+    "providerDeleteFailed": "Could not remove the provider",
+    "privateEndpointHint": "Addresses on your private network need an administrator to allow the host first.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI compatible",
+    "toolArguments": "Giriş",
+    "toolResult": "Result",
+    "statusApplied": "Applied",
+    "statusRejected": "Rejected",
+    "proposalApplied": "Change applied",
+    "proposalApplyFailed": "Could not apply the change",
+    "proposalRejectFailed": "Could not reject the change",
+    "enableTitle": "Enable the AI assistant",
+    "enableDescription": "Let the assistant read your setup and suggest changes for you to approve.",
+    "readOnlyCommands": "Allow read-only diagnostic commands",
+    "readOnlyCommandsDescription": "The assistant may run a short list of safe commands like df and uptime without asking each time. Anything that changes a server is always proposed first.",
+    "modelDetectFailed": "Could not reach the provider, so this is a general list. You can type any model name.",
+    "modelCustom": "Enter a model name",
+    "modelRefresh": "Refresh list",
+    "modelPlaceholder": "Choose or type a model",
+    "attachHint": "Type @ to reference a host, snippet or automation. Changes are proposed for you to approve.",
+    "runCommandTitle": "Run command",
+    "assistant": "AI Assistant",
+    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
+    "terminalPanelPlaceholder": "Ask about this host...",
+    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
+    "runsInOpenTerminal": "Runs in your open terminal session.",
+    "runInTerminal": "Çalıştır",
+    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI assistant",
+    "aiIntro": "Termix can include an optional AI assistant. You can change this later in your settings.",
+    "aiSkipTitle": "Leave it off",
+    "aiSkipDesc": "Termix works as it does now. The assistant stays hidden.",
+    "aiEnableTitle": "Turn it on",
+    "aiEnableDesc": "Adds an assistant that reads your setup and suggests changes you approve. Needs a provider you supply, such as a local Ollama.",
+    "aiNote": "Nothing is sent anywhere until you add a provider and send a message."
+  },
+  "hosts": {
+    "docsLink": "Dokümanları görüntüle"
+  }
+}

plugins/ai/locales/translated/uk_UA.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Use the assistant",
+      "description": "Open the assistant and ask it things."
+    },
+    "manage_providers": {
+      "title": "Manage providers",
+      "description": "Add, edit and remove the AI providers and their API keys."
+    },
+    "apply_proposals": {
+      "title": "Apply proposals",
+      "description": "Let the assistant carry out the changes it suggests."
+    },
+    "services.use": {
+      "title": "Use AI from other features",
+      "description": "Other features may call the assistant on your behalf."
+    },
+    "secrets.share": {
+      "title": "Share the API key",
+      "description": "Other features may use the stored AI API key without seeing it."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "The AI assistant is turned off on this server.",
+    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI assistant",
+        "description": "Let users turn on the AI assistant. While this is off, the assistant is hidden and blocked for everyone."
+      },
+      "privateEndpoints": {
+        "label": "Allowed private AI hosts",
+        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Enable AI Assistant",
+        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistant",
+    "send": "Send",
+    "stop": "Stop",
+    "save": "Save",
+    "cancel": "Cancel",
+    "running": "running",
+    "approve": "Approve",
+    "reject": "Reject",
+    "inputPlaceholder": "Ask about your servers, or describe a change to propose",
+    "selectProvider": "Select a provider",
+    "providerSettings": "Provider settings",
+    "addProvider": "Add provider",
+    "editProvider": "Edit provider",
+    "removeProvider": "Remove provider",
+    "providerType": "Provider",
+    "providerLabel": "Name",
+    "providerLabelPlaceholder": "For example: Local Ollama",
+    "baseUrl": "Server address",
+    "apiKey": "API key",
+    "defaultModel": "Default model",
+    "defaultModelPlaceholder": "For example: llama3.1 or claude-opus-5",
+    "labelRequired": "Give this provider a name",
+    "providerSaveFailed": "Could not save the provider",
+    "providerUpdated": "Provider updated",
+    "providerDeleteFailed": "Could not remove the provider",
+    "privateEndpointHint": "Addresses on your private network need an administrator to allow the host first.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI compatible",
+    "toolArguments": "Input",
+    "toolResult": "Result",
+    "statusApplied": "Applied",
+    "statusRejected": "Rejected",
+    "proposalApplied": "Change applied",
+    "proposalApplyFailed": "Could not apply the change",
+    "proposalRejectFailed": "Could not reject the change",
+    "enableTitle": "Enable the AI assistant",
+    "enableDescription": "Let the assistant read your setup and suggest changes for you to approve.",
+    "readOnlyCommands": "Allow read-only diagnostic commands",
+    "readOnlyCommandsDescription": "The assistant may run a short list of safe commands like df and uptime without asking each time. Anything that changes a server is always proposed first.",
+    "modelDetectFailed": "Could not reach the provider, so this is a general list. You can type any model name.",
+    "modelCustom": "Enter a model name",
+    "modelRefresh": "Refresh list",
+    "modelPlaceholder": "Choose or type a model",
+    "attachHint": "Type @ to reference a host, snippet or automation. Changes are proposed for you to approve.",
+    "runCommandTitle": "Run command",
+    "assistant": "AI Assistant",
+    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
+    "terminalPanelPlaceholder": "Ask about this host...",
+    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
+    "runsInOpenTerminal": "Runs in your open terminal session.",
+    "runInTerminal": "Run",
+    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI assistant",
+    "aiIntro": "Termix can include an optional AI assistant. You can change this later in your settings.",
+    "aiSkipTitle": "Leave it off",
+    "aiSkipDesc": "Termix works as it does now. The assistant stays hidden.",
+    "aiEnableTitle": "Turn it on",
+    "aiEnableDesc": "Adds an assistant that reads your setup and suggests changes you approve. Needs a provider you supply, such as a local Ollama.",
+    "aiNote": "Nothing is sent anywhere until you add a provider and send a message."
+  },
+  "hosts": {
+    "docsLink": "View docs"
+  }
+}

plugins/ai/locales/translated/vi_VN.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Use the assistant",
+      "description": "Open the assistant and ask it things."
+    },
+    "manage_providers": {
+      "title": "Manage providers",
+      "description": "Add, edit and remove the AI providers and their API keys."
+    },
+    "apply_proposals": {
+      "title": "Apply proposals",
+      "description": "Let the assistant carry out the changes it suggests."
+    },
+    "services.use": {
+      "title": "Use AI from other features",
+      "description": "Other features may call the assistant on your behalf."
+    },
+    "secrets.share": {
+      "title": "Share the API key",
+      "description": "Other features may use the stored AI API key without seeing it."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "The AI assistant is turned off on this server.",
+    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI assistant",
+        "description": "Let users turn on the AI assistant. While this is off, the assistant is hidden and blocked for everyone."
+      },
+      "privateEndpoints": {
+        "label": "Allowed private AI hosts",
+        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Enable AI Assistant",
+        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistant",
+    "send": "Send",
+    "stop": "Bit dừng",
+    "save": "Lưu",
+    "cancel": "Hủy",
+    "running": "đang chạy",
+    "approve": "Approve",
+    "reject": "Reject",
+    "inputPlaceholder": "Ask about your servers, or describe a change to propose",
+    "selectProvider": "Select a provider",
+    "providerSettings": "Provider settings",
+    "addProvider": "Add provider",
+    "editProvider": "Edit provider",
+    "removeProvider": "Remove provider",
+    "providerType": "Provider",
+    "providerLabel": "Tên",
+    "providerLabelPlaceholder": "For example: Local Ollama",
+    "baseUrl": "Server address",
+    "apiKey": "API key",
+    "defaultModel": "Default model",
+    "defaultModelPlaceholder": "For example: llama3.1 or claude-opus-5",
+    "labelRequired": "Give this provider a name",
+    "providerSaveFailed": "Could not save the provider",
+    "providerUpdated": "Provider updated",
+    "providerDeleteFailed": "Could not remove the provider",
+    "privateEndpointHint": "Addresses on your private network need an administrator to allow the host first.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI compatible",
+    "toolArguments": "Nhập",
+    "toolResult": "Result",
+    "statusApplied": "Applied",
+    "statusRejected": "Rejected",
+    "proposalApplied": "Change applied",
+    "proposalApplyFailed": "Could not apply the change",
+    "proposalRejectFailed": "Could not reject the change",
+    "enableTitle": "Enable the AI assistant",
+    "enableDescription": "Let the assistant read your setup and suggest changes for you to approve.",
+    "readOnlyCommands": "Allow read-only diagnostic commands",
+    "readOnlyCommandsDescription": "The assistant may run a short list of safe commands like df and uptime without asking each time. Anything that changes a server is always proposed first.",
+    "modelDetectFailed": "Could not reach the provider, so this is a general list. You can type any model name.",
+    "modelCustom": "Enter a model name",
+    "modelRefresh": "Refresh list",
+    "modelPlaceholder": "Choose or type a model",
+    "attachHint": "Type @ to reference a host, snippet or automation. Changes are proposed for you to approve.",
+    "runCommandTitle": "Run command",
+    "assistant": "AI Assistant",
+    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
+    "terminalPanelPlaceholder": "Ask about this host...",
+    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
+    "runsInOpenTerminal": "Runs in your open terminal session.",
+    "runInTerminal": "Chạy",
+    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI assistant",
+    "aiIntro": "Termix can include an optional AI assistant. You can change this later in your settings.",
+    "aiSkipTitle": "Leave it off",
+    "aiSkipDesc": "Termix works as it does now. The assistant stays hidden.",
+    "aiEnableTitle": "Turn it on",
+    "aiEnableDesc": "Adds an assistant that reads your setup and suggests changes you approve. Needs a provider you supply, such as a local Ollama.",
+    "aiNote": "Nothing is sent anywhere until you add a provider and send a message."
+  },
+  "hosts": {
+    "docsLink": "Xem tài liệu"
+  }
+}

plugins/ai/locales/translated/zh_CN.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Use the assistant",
+      "description": "Open the assistant and ask it things."
+    },
+    "manage_providers": {
+      "title": "Manage providers",
+      "description": "Add, edit and remove the AI providers and their API keys."
+    },
+    "apply_proposals": {
+      "title": "Apply proposals",
+      "description": "Let the assistant carry out the changes it suggests."
+    },
+    "services.use": {
+      "title": "Use AI from other features",
+      "description": "Other features may call the assistant on your behalf."
+    },
+    "secrets.share": {
+      "title": "Share the API key",
+      "description": "Other features may use the stored AI API key without seeing it."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "The AI assistant is turned off on this server.",
+    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI 助手",
+        "description": "允许用户开启 AI 助手。关闭此功能后，助手将被隐藏，所有用户均无法使用。"
+      },
+      "privateEndpoints": {
+        "label": "允许的私有 AI 主机",
+        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Enable AI Assistant",
+        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistant",
+    "send": "Send",
+    "stop": "停止",
+    "save": "保存",
+    "cancel": "取消",
+    "running": "运行中",
+    "approve": "Approve",
+    "reject": "Reject",
+    "inputPlaceholder": "Ask about your servers, or describe a change to propose",
+    "selectProvider": "Select a provider",
+    "providerSettings": "Provider settings",
+    "addProvider": "Add provider",
+    "editProvider": "编辑提供商",
+    "removeProvider": "Remove provider",
+    "providerType": "提供商",
+    "providerLabel": "名称",
+    "providerLabelPlaceholder": "例如：本地 Ollama",
+    "baseUrl": "Server address",
+    "apiKey": "API 密钥",
+    "defaultModel": "Default model",
+    "defaultModelPlaceholder": "For example: llama3.1 or claude-opus-5",
+    "labelRequired": "给此提供商起个名字",
+    "providerSaveFailed": "Could not save the provider",
+    "providerUpdated": "Provider updated",
+    "providerDeleteFailed": "Could not remove the provider",
+    "privateEndpointHint": "Addresses on your private network need an administrator to allow the host first.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI compatible",
+    "toolArguments": "输入",
+    "toolResult": "Result",
+    "statusApplied": "已应用",
+    "statusRejected": "Rejected",
+    "proposalApplied": "Change applied",
+    "proposalApplyFailed": "Could not apply the change",
+    "proposalRejectFailed": "Could not reject the change",
+    "enableTitle": "启用 AI 助手",
+    "enableDescription": "Let the assistant read your setup and suggest changes for you to approve.",
+    "readOnlyCommands": "Allow read-only diagnostic commands",
+    "readOnlyCommandsDescription": "The assistant may run a short list of safe commands like df and uptime without asking each time. Anything that changes a server is always proposed first.",
+    "modelDetectFailed": "无法联系到提供商，所以这里提供的是通用列表。您可以输入任何模型名称。",
+    "modelCustom": "请输入模型名称",
+    "modelRefresh": "Refresh list",
+    "modelPlaceholder": "选择或输入模型",
+    "attachHint": "Type @ to reference a host, snippet or automation. Changes are proposed for you to approve.",
+    "runCommandTitle": "Run command",
+    "assistant": "AI Assistant",
+    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
+    "terminalPanelPlaceholder": "Ask about this host...",
+    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
+    "runsInOpenTerminal": "Runs in your open terminal session.",
+    "runInTerminal": "运行",
+    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI 助手",
+    "aiIntro": "Termix can include an optional AI assistant. You can change this later in your settings.",
+    "aiSkipTitle": "禁用",
+    "aiSkipDesc": "Termix 正常工作，AI 助手将保持隐藏状态。",
+    "aiEnableTitle": "启用",
+    "aiEnableDesc": "启用 AI 助手，它将分析您的配置并提供优化建议。需自行配置服务商，例如本地运行的 Ollama。",
+    "aiNote": "在您配置服务商并主动发送消息之前，绝不会向外发送任何数据。"
+  },
+  "hosts": {
+    "docsLink": "查看文档"
+  }
+}

plugins/ai/locales/translated/zh_TW.json

@@ -0,0 +1,119 @@
+{
+  "permissions": {
+    "use": {
+      "title": "Use the assistant",
+      "description": "Open the assistant and ask it things."
+    },
+    "manage_providers": {
+      "title": "Manage providers",
+      "description": "Add, edit and remove the AI providers and their API keys."
+    },
+    "apply_proposals": {
+      "title": "Apply proposals",
+      "description": "Let the assistant carry out the changes it suggests."
+    },
+    "services.use": {
+      "title": "Use AI from other features",
+      "description": "Other features may call the assistant on your behalf."
+    },
+    "secrets.share": {
+      "title": "Share the API key",
+      "description": "Other features may use the stored AI API key without seeing it."
+    }
+  },
+  "settings": {
+    "assistantUnavailable": "The AI assistant is turned off on this server.",
+    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
+    "admin": {
+      "globallyEnabled": {
+        "label": "AI assistant",
+        "description": "Let users turn on the AI assistant. While this is off, the assistant is hidden and blocked for everyone."
+      },
+      "privateEndpoints": {
+        "label": "Allowed private AI hosts",
+        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
+      }
+    },
+    "host": {
+      "enableAiAssistant": {
+        "label": "Enable AI Assistant",
+        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
+      }
+    }
+  },
+  "ai": {
+    "title": "Assistant",
+    "send": "Send",
+    "stop": "停止位元",
+    "save": "儲存",
+    "cancel": "取消",
+    "running": "執行中",
+    "approve": "Approve",
+    "reject": "Reject",
+    "inputPlaceholder": "Ask about your servers, or describe a change to propose",
+    "selectProvider": "Select a provider",
+    "providerSettings": "Provider settings",
+    "addProvider": "Add provider",
+    "editProvider": "Edit provider",
+    "removeProvider": "Remove provider",
+    "providerType": "Provider",
+    "providerLabel": "名稱",
+    "providerLabelPlaceholder": "For example: Local Ollama",
+    "baseUrl": "Server address",
+    "apiKey": "API key",
+    "defaultModel": "Default model",
+    "defaultModelPlaceholder": "For example: llama3.1 or claude-opus-5",
+    "labelRequired": "Give this provider a name",
+    "providerSaveFailed": "Could not save the provider",
+    "providerUpdated": "Provider updated",
+    "providerDeleteFailed": "Could not remove the provider",
+    "privateEndpointHint": "Addresses on your private network need an administrator to allow the host first.",
+    "providerOllama": "Ollama",
+    "providerAnthropic": "Anthropic",
+    "providerOpenai": "OpenAI",
+    "providerGemini": "Google Gemini",
+    "providerOpenaiCompatible": "OpenAI compatible",
+    "toolArguments": "輸入",
+    "toolResult": "Result",
+    "statusApplied": "Applied",
+    "statusRejected": "Rejected",
+    "proposalApplied": "Change applied",
+    "proposalApplyFailed": "Could not apply the change",
+    "proposalRejectFailed": "Could not reject the change",
+    "enableTitle": "Enable the AI assistant",
+    "enableDescription": "Let the assistant read your setup and suggest changes for you to approve.",
+    "readOnlyCommands": "Allow read-only diagnostic commands",
+    "readOnlyCommandsDescription": "The assistant may run a short list of safe commands like df and uptime without asking each time. Anything that changes a server is always proposed first.",
+    "modelDetectFailed": "Could not reach the provider, so this is a general list. You can type any model name.",
+    "modelCustom": "Enter a model name",
+    "modelRefresh": "Refresh list",
+    "modelPlaceholder": "Choose or type a model",
+    "attachHint": "Type @ to reference a host, snippet or automation. Changes are proposed for you to approve.",
+    "runCommandTitle": "Run command",
+    "assistant": "AI Assistant",
+    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
+    "terminalPanelPlaceholder": "Ask about this host...",
+    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
+    "runsInOpenTerminal": "Runs in your open terminal session.",
+    "runInTerminal": "執行",
+    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
+    "secrets": {
+      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
+    }
+  },
+  "nav": {
+    "ai": "AI"
+  },
+  "onboarding": {
+    "aiTitle": "AI assistant",
+    "aiIntro": "Termix can include an optional AI assistant. You can change this later in your settings.",
+    "aiSkipTitle": "Leave it off",
+    "aiSkipDesc": "Termix works as it does now. The assistant stays hidden.",
+    "aiEnableTitle": "Turn it on",
+    "aiEnableDesc": "Adds an assistant that reads your setup and suggests changes you approve. Needs a provider you supply, such as a local Ollama.",
+    "aiNote": "Nothing is sent anywhere until you add a provider and send a message."
+  },
+  "hosts": {
+    "docsLink": "檢視文件"
+  }
+}

plugins/ai/manifest.json

@@ -0,0 +1,194 @@
+{
+  "id": "ai",
+  "name": "AI Assistant",
+  "version": "1.0.0",
+  "description": "An AI assistant that can read your hosts, snippets, fleets, alerts and automations, and suggest changes for you to approve.",
+  "author": {
+    "name": "Termix"
+  },
+  "license": "MIT",
+  "repository": "https://github.com/Termix-SSH/Termix",
+  "category": "Productivity",
+  "icon": "Sparkles",
+  "engine": {
+    "termix": ">=2.9.0",
+    "api": "1"
+  },
+  "capabilities": [
+    "hosts:read",
+    "hosts:write",
+    "credentials:use",
+    "ssh:connect",
+    "db:own",
+    "secrets:own",
+    "network:outbound",
+    "notify:send",
+    "network:serve",
+    "ui:surface",
+    "users:impersonate"
+  ],
+  "optionalDependencies": {
+    "workspaces": "^1.0.0",
+    "network-topology": "^1.0.0",
+    "snippets": "^1.0.0",
+    "fleets": "^1.0.0",
+    "ssh-terminal": "^1.0.0",
+    "automations": "^1.0.0",
+    "homepage": "^1.0.0"
+  },
+  "requires": [
+    {
+      "service": "workspaces.saved",
+      "versionRange": "^1.0.0",
+      "optional": true
+    },
+    {
+      "service": "network-topology.graph",
+      "versionRange": "^1.0.0",
+      "optional": true
+    },
+    {
+      "service": "snippets.access",
+      "versionRange": "^1.0.0",
+      "optional": true
+    },
+    {
+      "service": "fleets.access",
+      "versionRange": "^1.0.0",
+      "optional": true
+    },
+    {
+      "service": "terminal.history",
+      "versionRange": "^1.0.0",
+      "optional": true
+    },
+    {
+      "service": "automations.access",
+      "versionRange": "^1.0.0",
+      "optional": true
+    },
+    {
+      "service": "homepage.items",
+      "versionRange": "^1.0.0",
+      "optional": true
+    }
+  ],
+  "providesSecret": [
+    {
+      "key": "api-key",
+      "permission": "ai.secrets.share",
+      "descriptionKey": "ai.secrets.shareApiKey"
+    }
+  ],
+  "contributes": {
+    "tabs": [
+      {
+        "id": "ai",
+        "titleKey": "nav.ai",
+        "icon": "Sparkles",
+        "openFrom": ["rail", "palette"]
+      }
+    ],
+    "actions": [
+      {
+        "id": "ai.openWithContext",
+        "titleKey": "ai.assistant",
+        "handler": "openWithContext",
+        "icon": "Bot",
+        "permission": "ai.services.use",
+        "slot": "terminal.toolbar",
+        "kind": "button"
+      }
+    ],
+    "permissions": [
+      {
+        "name": "use",
+        "titleKey": "permissions.use.title",
+        "descriptionKey": "permissions.use.description",
+        "defaultRoles": ["user"]
+      },
+      {
+        "name": "manage_providers",
+        "titleKey": "permissions.manage_providers.title",
+        "descriptionKey": "permissions.manage_providers.description",
+        "defaultRoles": ["user"]
+      },
+      {
+        "name": "apply_proposals",
+        "titleKey": "permissions.apply_proposals.title",
+        "descriptionKey": "permissions.apply_proposals.description",
+        "defaultRoles": ["user"]
+      },
+      {
+        "name": "services.use",
+        "titleKey": "permissions.services.use.title",
+        "descriptionKey": "permissions.services.use.description",
+        "defaultRoles": ["user"]
+      },
+      {
+        "name": "secrets.share",
+        "titleKey": "permissions.secrets.share.title",
+        "descriptionKey": "permissions.secrets.share.description",
+        "defaultRoles": ["user"]
+      }
+    ],
+    "settings": {
+      "admin": [
+        {
+          "key": "globallyEnabled",
+          "type": "boolean",
+          "labelKey": "settings.admin.globallyEnabled.label",
+          "descriptionKey": "settings.admin.globallyEnabled.description",
+          "default": false
+        },
+        {
+          "key": "privateEndpoints",
+          "type": "textarea",
+          "labelKey": "settings.admin.privateEndpoints.label",
+          "descriptionKey": "settings.admin.privateEndpoints.description",
+          "requires": "globallyEnabled",
+          "default": "localhost\n127.0.0.1\n::1\nhost.docker.internal"
+        }
+      ],
+      "user": [
+        {
+          "key": "enabled",
+          "type": "boolean",
+          "labelKey": "ai.enableTitle",
+          "descriptionKey": "ai.enableDescription",
+          "default": false
+        },
+        {
+          "key": "allowReadOnlyCommands",
+          "type": "boolean",
+          "labelKey": "ai.readOnlyCommands",
+          "descriptionKey": "ai.readOnlyCommandsDescription",
+          "requires": "enabled",
+          "default": false
+        },
+        {
+          "key": "providers",
+          "type": "custom",
+          "component": "providers",
+          "permission": "manage_providers"
+        }
+      ],
+      "host": {
+        "editorGroup": "ssh",
+        "editorOrder": 90,
+        "fields": [
+          {
+            "key": "enableAiAssistant",
+            "type": "boolean",
+            "labelKey": "settings.host.enableAiAssistant.label",
+            "descriptionKey": "settings.host.enableAiAssistant.description",
+            "default": false
+          }
+        ]
+      }
+    },
+    "uses": ["terminal.sidePanel", "terminal.toolbar"]
+  },
+  "locales": "locales",
+  "platforms": ["linux", "win32", "darwin"]
+}

plugins/ai/migrations/mysql/0001_adopt_ai_tables.sql

@@ -0,0 +1,55 @@
+-- ai 0001: adopt_ai_tables
+-- Generated by termix-plugin migrations. Review before committing.
+-- Hand-edited: keeps the legacy foreign key from messages and proposals to
+-- their conversation, which the SDK cannot declare.
+
+CREATE TABLE IF NOT EXISTS `ai_providers` (
+  `id` int AUTO_INCREMENT PRIMARY KEY,
+  `user_id` varchar(255) NOT NULL,
+  `provider_type` text NOT NULL,
+  `label` varchar(255) NOT NULL,
+  `base_url` text,
+  `api_key_prefix` text,
+  `default_model` text,
+  `enabled` boolean NOT NULL DEFAULT true,
+  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
+  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
+  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
+);
+RENAME TABLE `ai_providers` TO `p_ai_providers`;
+CREATE TABLE IF NOT EXISTS `ai_conversations` (
+  `id` int AUTO_INCREMENT PRIMARY KEY,
+  `user_id` varchar(255) NOT NULL,
+  `title` text,
+  `provider_id` int,
+  `model` text,
+  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
+  `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
+  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
+);
+RENAME TABLE `ai_conversations` TO `p_ai_conversations`;
+CREATE TABLE IF NOT EXISTS `ai_messages` (
+  `id` int AUTO_INCREMENT PRIMARY KEY,
+  `conversation_id` int NOT NULL,
+  `role` text NOT NULL,
+  `content` text NOT NULL DEFAULT (''),
+  `tool_calls` text,
+  `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
+  FOREIGN KEY (`conversation_id`) REFERENCES `p_ai_conversations` (`id`) ON DELETE CASCADE
+);
+RENAME TABLE `ai_messages` TO `p_ai_messages`;
+CREATE TABLE IF NOT EXISTS `ai_proposals` (
+  `id` int AUTO_INCREMENT PRIMARY KEY,
+  `conversation_id` int NOT NULL,
+  `user_id` varchar(255) NOT NULL,
+  `kind` varchar(255) NOT NULL,
+  `summary` text,
+  `payload` text NOT NULL DEFAULT ('{}'),
+  `status` varchar(32) NOT NULL DEFAULT 'pending',
+  `applied_at` text,
+  `result_summary` text,
+  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
+  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
+  FOREIGN KEY (`conversation_id`) REFERENCES `p_ai_conversations` (`id`) ON DELETE CASCADE
+);
+RENAME TABLE `ai_proposals` TO `p_ai_proposals`;

plugins/ai/migrations/mysql/0002_provider_sync.sql

@@ -0,0 +1 @@
+ALTER TABLE `p_ai_providers` ADD COLUMN `sync_id` varchar(255) UNIQUE;

plugins/ai/migrations/postgres/0001_adopt_ai_tables.sql

@@ -0,0 +1,60 @@
+-- ai 0001: adopt_ai_tables
+-- Generated by termix-plugin migrations. Review before committing.
+-- Hand-edited: keeps the legacy foreign key from messages and proposals to
+-- their conversation, which the SDK cannot declare.
+
+CREATE TABLE IF NOT EXISTS "ai_providers" (
+  "id" serial PRIMARY KEY,
+  "user_id" varchar(255) NOT NULL,
+  "provider_type" text NOT NULL,
+  "label" varchar(255) NOT NULL,
+  "base_url" text,
+  "api_key_prefix" text,
+  "default_model" text,
+  "enabled" boolean NOT NULL DEFAULT true,
+  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
+);
+CREATE UNIQUE INDEX IF NOT EXISTS "idx_ai_providers_user_label" ON "ai_providers" ("user_id", "label");
+ALTER TABLE "ai_providers" RENAME TO "p_ai_providers";
+CREATE TABLE IF NOT EXISTS "ai_conversations" (
+  "id" serial PRIMARY KEY,
+  "user_id" varchar(255) NOT NULL,
+  "title" text,
+  "provider_id" integer,
+  "model" text,
+  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updated_at" varchar(255) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
+);
+CREATE INDEX IF NOT EXISTS "idx_ai_conversations_user" ON "ai_conversations" ("user_id", "updated_at");
+ALTER TABLE "ai_conversations" RENAME TO "p_ai_conversations";
+CREATE TABLE IF NOT EXISTS "ai_messages" (
+  "id" serial PRIMARY KEY,
+  "conversation_id" integer NOT NULL,
+  "role" text NOT NULL,
+  "content" text NOT NULL DEFAULT '',
+  "tool_calls" text,
+  "created_at" varchar(255) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY ("conversation_id") REFERENCES "p_ai_conversations" ("id") ON DELETE CASCADE
+);
+CREATE INDEX IF NOT EXISTS "idx_ai_messages_conversation" ON "ai_messages" ("conversation_id", "created_at");
+ALTER TABLE "ai_messages" RENAME TO "p_ai_messages";
+CREATE TABLE IF NOT EXISTS "ai_proposals" (
+  "id" serial PRIMARY KEY,
+  "conversation_id" integer NOT NULL,
+  "user_id" varchar(255) NOT NULL,
+  "kind" varchar(255) NOT NULL,
+  "summary" text,
+  "payload" text NOT NULL DEFAULT '{}',
+  "status" varchar(32) NOT NULL DEFAULT 'pending',
+  "applied_at" text,
+  "result_summary" text,
+  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
+  FOREIGN KEY ("conversation_id") REFERENCES "p_ai_conversations" ("id") ON DELETE CASCADE
+);
+CREATE INDEX IF NOT EXISTS "idx_ai_proposals_user" ON "ai_proposals" ("user_id", "status");
+CREATE INDEX IF NOT EXISTS "idx_ai_proposals_conversation" ON "ai_proposals" ("conversation_id");
+ALTER TABLE "ai_proposals" RENAME TO "p_ai_proposals";

plugins/ai/migrations/postgres/0002_provider_sync.sql

@@ -0,0 +1 @@
+ALTER TABLE "p_ai_providers" ADD COLUMN "sync_id" varchar(255) UNIQUE;

plugins/ai/migrations/snapshot.json

@@ -0,0 +1,196 @@
+{
+  "version": 1,
+  "tables": {
+    "providers": {
+      "columns": {
+        "id": {
+          "type": "id",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "userId": {
+          "type": "refUser",
+          "length": 255,
+          "notNull": true
+        },
+        "providerType": {
+          "type": "text",
+          "notNull": true
+        },
+        "label": {
+          "type": "varchar",
+          "length": 255,
+          "notNull": true
+        },
+        "baseUrl": {
+          "type": "text"
+        },
+        "apiKeyPrefix": {
+          "type": "text"
+        },
+        "defaultModel": {
+          "type": "text"
+        },
+        "enabled": {
+          "type": "boolean",
+          "notNull": true,
+          "defaultValue": true
+        },
+        "createdAt": {
+          "type": "timestamp",
+          "notNull": true,
+          "defaultNow": true
+        },
+        "updatedAt": {
+          "type": "timestamp",
+          "notNull": true,
+          "defaultNow": true
+        }
+      },
+      "indexes": [
+        {
+          "name": "idx_ai_providers_user_label",
+          "columns": ["userId", "label"],
+          "unique": true
+        }
+      ],
+      "adopts": "ai_providers"
+    },
+    "conversations": {
+      "columns": {
+        "id": {
+          "type": "id",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "userId": {
+          "type": "refUser",
+          "length": 255,
+          "notNull": true
+        },
+        "title": {
+          "type": "text"
+        },
+        "providerId": {
+          "type": "integer"
+        },
+        "model": {
+          "type": "text"
+        },
+        "createdAt": {
+          "type": "timestamp",
+          "notNull": true,
+          "defaultNow": true
+        },
+        "updatedAt": {
+          "type": "timestamp",
+          "notNull": true,
+          "defaultNow": true
+        }
+      },
+      "indexes": [
+        {
+          "name": "idx_ai_conversations_user",
+          "columns": ["userId", "updatedAt"]
+        }
+      ],
+      "adopts": "ai_conversations"
+    },
+    "messages": {
+      "columns": {
+        "id": {
+          "type": "id",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "conversationId": {
+          "type": "integer",
+          "notNull": true
+        },
+        "role": {
+          "type": "text",
+          "notNull": true
+        },
+        "content": {
+          "type": "text",
+          "notNull": true,
+          "defaultValue": ""
+        },
+        "toolCalls": {
+          "type": "text"
+        },
+        "createdAt": {
+          "type": "timestamp",
+          "notNull": true,
+          "defaultNow": true
+        }
+      },
+      "indexes": [
+        {
+          "name": "idx_ai_messages_conversation",
+          "columns": ["conversationId", "createdAt"]
+        }
+      ],
+      "adopts": "ai_messages"
+    },
+    "proposals": {
+      "columns": {
+        "id": {
+          "type": "id",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "conversationId": {
+          "type": "integer",
+          "notNull": true
+        },
+        "userId": {
+          "type": "refUser",
+          "length": 255,
+          "notNull": true
+        },
+        "kind": {
+          "type": "varchar",
+          "length": 255,
+          "notNull": true
+        },
+        "summary": {
+          "type": "text"
+        },
+        "payload": {
+          "type": "text",
+          "notNull": true,
+          "defaultValue": "{}"
+        },
+        "status": {
+          "type": "varchar",
+          "length": 32,
+          "notNull": true,
+          "defaultValue": "pending"
+        },
+        "appliedAt": {
+          "type": "text"
+        },
+        "resultSummary": {
+          "type": "text"
+        },
+        "createdAt": {
+          "type": "timestamp",
+          "notNull": true,
+          "defaultNow": true
+        }
+      },
+      "indexes": [
+        {
+          "name": "idx_ai_proposals_user",
+          "columns": ["userId", "status"]
+        },
+        {
+          "name": "idx_ai_proposals_conversation",
+          "columns": ["conversationId"]
+        }
+      ],
+      "adopts": "ai_proposals"
+    }
+  }
+}

plugins/ai/migrations/sqlite/0001_adopt_ai_tables.sql

@@ -0,0 +1,60 @@
+-- ai 0001: adopt_ai_tables
+-- Generated by termix-plugin migrations. Review before committing.
+-- Hand-edited: keeps the legacy foreign key from messages and proposals to
+-- their conversation, which the SDK cannot declare.
+
+CREATE TABLE IF NOT EXISTS "ai_providers" (
+  "id" integer PRIMARY KEY AUTOINCREMENT,
+  "user_id" text NOT NULL,
+  "provider_type" text NOT NULL,
+  "label" text NOT NULL,
+  "base_url" text,
+  "api_key_prefix" text,
+  "default_model" text,
+  "enabled" integer NOT NULL DEFAULT 1,
+  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
+);
+CREATE UNIQUE INDEX IF NOT EXISTS "idx_ai_providers_user_label" ON "ai_providers" ("user_id", "label");
+ALTER TABLE "ai_providers" RENAME TO "p_ai_providers";
+CREATE TABLE IF NOT EXISTS "ai_conversations" (
+  "id" integer PRIMARY KEY AUTOINCREMENT,
+  "user_id" text NOT NULL,
+  "title" text,
+  "provider_id" integer,
+  "model" text,
+  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
+);
+CREATE INDEX IF NOT EXISTS "idx_ai_conversations_user" ON "ai_conversations" ("user_id", "updated_at");
+ALTER TABLE "ai_conversations" RENAME TO "p_ai_conversations";
+CREATE TABLE IF NOT EXISTS "ai_messages" (
+  "id" integer PRIMARY KEY AUTOINCREMENT,
+  "conversation_id" integer NOT NULL,
+  "role" text NOT NULL,
+  "content" text NOT NULL DEFAULT '',
+  "tool_calls" text,
+  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY ("conversation_id") REFERENCES "p_ai_conversations" ("id") ON DELETE CASCADE
+);
+CREATE INDEX IF NOT EXISTS "idx_ai_messages_conversation" ON "ai_messages" ("conversation_id", "created_at");
+ALTER TABLE "ai_messages" RENAME TO "p_ai_messages";
+CREATE TABLE IF NOT EXISTS "ai_proposals" (
+  "id" integer PRIMARY KEY AUTOINCREMENT,
+  "conversation_id" integer NOT NULL,
+  "user_id" text NOT NULL,
+  "kind" text NOT NULL,
+  "summary" text,
+  "payload" text NOT NULL DEFAULT '{}',
+  "status" text NOT NULL DEFAULT 'pending',
+  "applied_at" text,
+  "result_summary" text,
+  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
+  FOREIGN KEY ("conversation_id") REFERENCES "p_ai_conversations" ("id") ON DELETE CASCADE
+);
+CREATE INDEX IF NOT EXISTS "idx_ai_proposals_user" ON "ai_proposals" ("user_id", "status");
+CREATE INDEX IF NOT EXISTS "idx_ai_proposals_conversation" ON "ai_proposals" ("conversation_id");
+ALTER TABLE "ai_proposals" RENAME TO "p_ai_proposals";

plugins/ai/migrations/sqlite/0002_provider_sync.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "p_ai_providers" ADD COLUMN "sync_id" text;
+CREATE UNIQUE INDEX "p_ai_providers_sync_id_unique" ON "p_ai_providers" ("sync_id");

plugins/ai/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@termix-plugin/ai",
+  "private": true,
+  "version": "1.0.0",
+  "type": "module",
+  "scripts": {
+    "build": "termix-plugin build",
+    "test": "termix-plugin test",
+    "typecheck": "tsc -p .",
+    "validate": "termix-plugin validate"
+  },
+  "dependencies": {
+    "@anthropic-ai/sdk": "^0.120.0",
+    "lucide-react": "^1.33.0",
+    "react-markdown": "^10.1.0",
+    "remark-gfm": "^4.0.1"
+  },
+  "devDependencies": {
+    "@termix/plugin-sdk": "^1.0.0",
+    "@testing-library/dom": "^10.4.2",
+    "@testing-library/react": "^16.3.3",
+    "@types/node": "^26.2.0",
+    "@types/react": "^19.2.18",
+    "@types/react-dom": "^19.2.4",
+    "better-sqlite3": "^13.0.3",
+    "jsdom": "^30.0.1",
+    "vitest": "^4.1.11"
+  },
+  "peerDependencies": {
+    "@termix/plugin-sdk": "^1.0.0",
+    "drizzle-orm": "^0.45.2",
+    "express": "^5.2.1",
+    "react": "^19.2.8",
+    "sonner": "^2.0.8",
+    "ssh2": "^1.17.0"
+  }
+}

plugins/ai/src/backend/context.ts

@@ -0,0 +1,55 @@
+/**
+ * The system prompt.
+ *
+ * Deliberately small: the assistant starts with almost no context and must call
+ * a read tool to learn anything. That keeps token cost predictable, makes every
+ * data access visible in the transcript, and means nothing is sent to a
+ * third-party provider that the user did not implicitly ask for.
+ */
+export function buildSystemPrompt(options: {
+  hostCount: number;
+  activeTab?: string | null;
+  allowReadOnlyCommands: boolean;
+}): string {
+  const lines: string[] = [
+    "You are the assistant built into Termix, a self-hosted server management app.",
+    "You help the user manage their servers, snippets, automations and fleets.",
+    "",
+    "How you work:",
+    "- You start with no knowledge of this user's setup. Call a read tool to find out anything you need.",
+    "- You cannot change anything directly. To make a change, call a propose_* tool; the user sees a card and approves or rejects it.",
+    "- You have no access to passwords, SSH keys, API keys or any other credential, and you never ask the user to paste one into the chat.",
+    "",
+    "Scope:",
+    "- Do exactly what was asked, and nothing beyond it. A question is a request for an answer, not for changes.",
+    "- Questions like 'what is running on this server', 'check this host' or 'why is this slow' are answered with information. Read, then report. Do not propose anything.",
+    "- Only propose a change when the user asked for one, in words like 'add', 'create', 'set up', 'fix' or 'change'.",
+    "- Do not propose follow-up work you thought of yourself: no monitoring automations, no scripts, no snippets, no cleanup, unless that is what was requested.",
+    "- If you think something is worth doing, say so in one sentence and stop. Let the user ask.",
+    "- One request means one proposal at most. Do not bundle extras alongside it.",
+    "",
+    "How to answer:",
+    "- Lead with the answer. Keep responses short and concrete.",
+    "- When you propose something, say in one line what it does and why.",
+    "- If a request is ambiguous in a way that changes what you would propose, ask before proposing.",
+    "- Never claim you have done something. You propose; the user applies.",
+  ];
+
+  if (options.allowReadOnlyCommands) {
+    lines.push(
+      "- The user has allowed you to run read-only diagnostic commands directly. Anything that changes state still has to be proposed.",
+    );
+  }
+
+  lines.push(
+    "",
+    "Current context:",
+    `- The user has ${options.hostCount} host${options.hostCount === 1 ? "" : "s"} configured.`,
+  );
+
+  if (options.activeTab) {
+    lines.push(`- They are currently looking at: ${options.activeTab}.`);
+  }
+
+  return lines.join("\n");
+}