release-2.9.0 (#1532)

* fix(macos): skip single-instance lock in Mac App Store builds (#1454)

fix(macos): skip single-instance lock in Mac App Store builds

* Fix/backend optional sharp (#1455)

Fix/backend optional sharp

* feat: issue #1218 (#1218)

https://github.com/Termix-SSH/Support/issues/1218

* feat: Add option to use saved global custom theme under Connection Defaults (#1209)

https://github.com/Termix-SSH/Support/issues/1209

* feat: Add Fleet Sharing functionality to the UI (#1228)

https://github.com/Termix-SSH/Support/issues/1228

* feat: Add a list view to the Docker management page (#1237)

https://github.com/Termix-SSH/Support/issues/1237

* feat: issue #1264 (#1264)

https://github.com/Termix-SSH/Support/issues/1264

* feat: 2FA With FortiToken (#1288)

https://github.com/Termix-SSH/Support/issues/1288

* feat: Allow to disable showing paths to folders (#1274)

https://github.com/Termix-SSH/Support/issues/1274

* feat: Sync Network Graph between Desktop and Remote Server (#1245)

https://github.com/Termix-SSH/Support/issues/1245

* feat: Version Number on offline servers (#1291)

https://github.com/Termix-SSH/Support/issues/1291

* feat: Support OrbStack Docker socket path on macOS / Fix "Docker is not installed" on mac... (#1302)

https://github.com/Termix-SSH/Support/issues/1302

* feat: Sidebar host click should focus existing tab instead of opening a new connection (#1289)

https://github.com/Termix-SSH/Support/issues/1289

* fix: Search in side bar shows overlapping hosts when grouped by tags (#1303)

https://github.com/Termix-SSH/Support/issues/1303

* fix: I can't send a file on its own. (#1304)

https://github.com/Termix-SSH/Support/issues/1304

* fix: sudo password not autofilling (#1248)

https://github.com/Termix-SSH/Support/issues/1248

* fix: node-MainThread (#1300)

https://github.com/Termix-SSH/Support/issues/1300

* fix: Tunnel authentication with shared credentials (#1295)

https://github.com/Termix-SSH/Support/issues/1295

* fix: host key updates not syncing, metrics 404 race on first connect

Host key writes never bumped updatedAt so sync never picked them up.
Also retry the first metrics fetch briefly instead of failing right away.

* chore: increment ver

* feat: add category and icon fields to plugin manifest schema

* ci(deps): bump the github-actions group with 2 updates (#1458)

Bumps the github-actions group with 2 updates: [crowdin/github-action](https://github.com/crowdin/github-action) and [actions/github-script](https://github.com/actions/github-script).


Updates `crowdin/github-action` from 2 to 3
- [Release notes](https://github.com/crowdin/github-action/releases)
- [Commits](https://github.com/crowdin/github-action/compare/v2...v3)

Updates `actions/github-script` from 7 to 9
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v7...v9)

---
updated-dependencies:
- dependency-name: crowdin/github-action
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-dev): bump the dev-patch-updates group with 13 updates (#1459)

Bumps the dev-patch-updates group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [@codemirror/commands](https://github.com/codemirror/commands) | `6.11.0` | `6.11.1` |
| [@codemirror/search](https://github.com/codemirror/search) | `6.7.1` | `6.7.2` |
| [@codemirror/view](https://github.com/codemirror/view) | `6.43.9` | `6.43.12` |
| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.5` | `14.6.7` |
| [@types/ssh2](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ssh2) | `1.15.5` | `1.15.6` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.0` | `6.1.1` |
| [cytoscape](https://github.com/cytoscape/cytoscape.js) | `3.34.1` | `3.34.3` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.4` | `0.5.7` |
| [i18next](https://github.com/i18next/i18next) | `26.4.0` | `26.4.2` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.8` |
| [react-i18next](https://github.com/i18next/react-i18next) | `17.0.12` | `17.0.14` |


Updates `@codemirror/commands` from 6.11.0 to 6.11.1
- [Changelog](https://github.com/codemirror/commands/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/commands/commits)

Updates `@codemirror/search` from 6.7.1 to 6.7.2
- [Changelog](https://github.com/codemirror/search/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/search/commits)

Updates `@codemirror/view` from 6.43.9 to 6.43.12
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/view/commits)

Updates `@testing-library/dom` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/testing-library/dom-testing-library/releases)
- [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/dom-testing-library/compare/v10.4.1...v10.4.2)

Updates `@testing-library/react` from 16.3.2 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/react-testing-library/compare/v16.3.2...v16.3.3)

Updates `@testing-library/user-event` from 14.6.5 to 14.6.7
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/user-event/compare/v14.6.5...v14.6.7)

Updates `@types/ssh2` from 1.15.5 to 1.15.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/ssh2)

Updates `@vitejs/plugin-react` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.1/packages/plugin-react)

Updates `cytoscape` from 3.34.1 to 3.34.3
- [Release notes](https://github.com/cytoscape/cytoscape.js/releases)
- [Commits](https://github.com/cytoscape/cytoscape.js/compare/v3.34.1...v3.34.3)

Updates `eslint-plugin-react-refresh` from 0.5.4 to 0.5.7
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/compare/v0.5.4...v0.5.7)

Updates `i18next` from 26.4.0 to 26.4.2
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next/compare/v26.4.0...v26.4.2)

Updates `prettier` from 3.9.6 to 3.9.8
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.9.6...3.9.8)

Updates `react-i18next` from 17.0.12 to 17.0.14
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/react-i18next/compare/v17.0.12...v17.0.14)

---
updated-dependencies:
- dependency-name: "@codemirror/commands"
  dependency-version: 6.11.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: "@codemirror/search"
  dependency-version: 6.7.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: "@codemirror/view"
  dependency-version: 6.43.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: "@testing-library/dom"
  dependency-version: 10.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: "@types/ssh2"
  dependency-version: 1.15.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: cytoscape
  dependency-version: 3.34.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: i18next
  dependency-version: 26.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: prettier
  dependency-version: 3.9.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
- dependency-name: react-i18next
  dependency-version: 17.0.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump the prod-patch-updates group with 6 updates (#1461)

Bumps the prod-patch-updates group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.10` | `3.14.13` |
| [compression](https://github.com/expressjs/compression) | `1.8.1` | `1.8.2` |
| [jose](https://github.com/panva/jose) | `6.2.9` | `6.2.12` |
| [jszip](https://github.com/Stuk/jszip) | `3.10.1` | `3.10.2` |
| [socks](https://github.com/JoshGlazebrook/socks) | `2.8.9` | `2.8.10` |
| [undici](https://github.com/nodejs/undici) | `8.10.0` | `8.10.2` |


Updates `@tanstack/react-virtual` from 3.14.10 to 3.14.13
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.13/packages/react-virtual)

Updates `compression` from 1.8.1 to 1.8.2
- [Release notes](https://github.com/expressjs/compression/releases)
- [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md)
- [Commits](https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2)

Updates `jose` from 6.2.9 to 6.2.12
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/panva/jose/compare/v6.2.9...v6.2.12)

Updates `jszip` from 3.10.1 to 3.10.2
- [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md)
- [Commits](https://github.com/Stuk/jszip/compare/v3.10.1...v3.10.2)

Updates `socks` from 2.8.9 to 2.8.10
- [Release notes](https://github.com/JoshGlazebrook/socks/releases)
- [Commits](https://github.com/JoshGlazebrook/socks/compare/2.8.9...2.8.10)

Updates `undici` from 8.10.0 to 8.10.2
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v8.10.0...v8.10.2)

---
updated-dependencies:
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-patch-updates
- dependency-name: compression
  dependency-version: 1.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-patch-updates
- dependency-name: jose
  dependency-version: 6.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-patch-updates
- dependency-name: jszip
  dependency-version: 3.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-patch-updates
- dependency-name: socks
  dependency-version: 2.8.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-patch-updates
- dependency-name: undici
  dependency-version: 8.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* feat: add plugin worker protocol, bootstrap and plugin_storage table

Worker-side ctx proxy plus the message envelope it talks over, and the
per-plugin key/value table behind ctx.storage with migrations for all
three dialects. Rows cascade with the plugin so uninstalling leaves
nothing behind.

* feat: add allowlisted host view for plugins

An allowlist rather than a list of fields to strip. A blocklist rots:
the moment a new secret-bearing column lands on SSHHost it starts
leaking silently. With an allowlist a new field stays invisible to
plugins until someone adds it here on purpose.

* feat: add plugin loader with manifest validation and crash restart

Validates an unpacked plugin, spawns a worker_threads worker and manages
activate/deactivate/crash-restart with backoff, disabling after three
tries.

The crash counter clears only after a plugin stays up past a stability
window, not on activation. Clearing it on activation let a plugin that
activates cleanly and then dies restart forever, because every attempt
looked like the first.

loader.ts documents what the worker boundary does and does not buy you.
Node's permission model is process-wide, not per-worker, so it cannot be
enabled for plugin workers alone and is not claimed here.

* feat: route internal events through a shared plugin event bus

Formalises three ad-hoc publish paths that already existed:
automation-events.ts, metrics/automation-bridge.ts and the
hostSessionStatus singleton, now the host.session.status topic.

Both invariants the old code relied on are preserved. Publishing stays
fire-and-forget, so a failing subscriber cannot disturb a metrics poll or
a host delete. The automations engine subscribes to the bus at scheduler
start instead of being imported ad hoc, which keeps the edge
one-directional: automations may import repositories, hosts modules must
not import automations.

* feat: add plugin ctx broker with permission gate and audit

Every ctx call a plugin makes is checked against its granted
capabilities, performed by the main thread, then audited. A capability
must be both declared in the manifest and granted in the database, so
widening a plugin's reach always needs a new manifest the user can see,
never just a database row.

Audit attribution is set by the broker, not the plugin. The plugin
supplies only the details, so it cannot forge the actor.

fix: stop plugin workers seeing plaintext credentials in error messages

A failing ctx.ssh.connect handed the worker the raw error from deep in
the SSH stack, which embeds the connect config. The worker received, in
full:

  Authentication failed for root using password <SECRET>

where <SECRET> was the host's real plaintext password. Any plugin with
ssh.exec could read it by catching the error, defeating the whole point
of the handle-based ssh API.

Errors crossing the boundary are now sanitised. Only PluginFacingError
and PluginPermissionError, both authored here, reach a plugin verbatim;
anything else becomes a generic message and the real one goes to the
log. This uses a marker class rather than matching on message text,
because matching would start leaking again the moment an upstream error
happened to contain a familiar phrase.

Covered by credential-isolation.test.ts, which plants a sentinel in
every secret-bearing field and asserts it appears in no message the
worker ever receives.

* feat: dispatch plugin HTTP routes and wire the runtime into startup

ctx.http.route now registers a real router on the /plugin-api/:pluginId
dispatcher, replacing its stub 404. A plugin never touches the Express
req/res: it gets a plain summary and returns a plain object, so sockets
and session cookies stay on this side of the boundary. Authorization and
cookie headers are not forwarded.

Plugins load last in the start-up sequence, after the server is fully
wired, and are terminated before the database on shutdown so none can
outlive it. A plugin that fails to load cannot stop the backend.

fix: correct the nginx plugin-api location regex

The pattern was ^/plugin-api/(/.*)?$, which needs a double slash and so
never matched /plugin-api/<id>/<route>. Every other block in the file
uses ^/prefix(/.*)?$. Left alone, plugin routes would work in dev and
404 only behind Docker.

* fix: update stale SFTP transfer test for single file destination paths

The test still asserted transferToHost was called with the destination
directory "/srv". Commit 7727fa09 (#1304) deliberately changed a single
file transfer to send the full destination path including the filename,
so the correct expectation is "/srv/remote-1.txt". The code was right
and the test was left behind.

* feat: ship the ssh terminal as a first-party in-process plugin

Adds a hardcoded process:transport-owner tier so the terminal can own its
WebSocket server and ssh2 clients, which cannot cross the worker boundary.

* feat: ship docker as a first-party in-process plugin

Moves docker backend and frontend into plugins/docker/, alongside
ssh-terminal. Adds a host editor tab seam, a dashboard card registry,
and a build step to compile plugin backends into dist.

* feat: ship host metrics as a first-party in-process plugin

* fix: harden plugin auth and add per-request identity for ctx calls

Require auth on /plugin-api, gate plugin enable/grant/revoke routes
behind admin.plugins.manage, and thread the calling user through
worker ctx.hosts/ctx.ssh calls instead of always using the install
owner. Also adds the plugin permissions grant/revoke UI.

* feat: ship the AI assistant as a first-party in-process plugin

Moves src/backend/ai and its routes into plugins/ai, mounted through a
small /ai dispatcher instead of its own port. Moves the ai-enabled and
ai-private-endpoints settings routes out of user-settings-routes.ts
into the plugin too, so it has no leftover core dependents.

* fix: remove compiled plugin JS left behind in plugins/ after build

copy-bundled-plugins.cjs compiled and rewrote plugin backend TS in
place, copied it to dist/plugins, but never deleted the .js it had
just emitted next to the .ts sources. Those files shadowed the real
source for vitest/tsx and had import paths rewritten for the dist
layout, so tests failed with "Cannot find module" once a local build
had run. Affects docker, host-metrics and ai, not just this one.

* feat: add a permission-gated backend service registry for plugins

* feat: add a permission-gated UI action registry and action slots for plugins

Moves the terminal toolbar's hardwired AI button into a slot the ssh-terminal
plugin offers and the ai plugin fills, gated on ai.services.use.

* feat: add cross-plugin secret references gated by the provider's RBAC permission

* feat: move proxmox discovery/import/sync into a first-party plugin

* feat: move remote desktop (RDP/VNC/Telnet) into a first-party plugin

Relocates guacamole backend/frontend source and tests into
plugins/remote-desktop, following the ssh-terminal/docker pattern.

* feat: wire remote-desktop plugin into core and rename i18n keys

Repoints core consumers (dispatcher, collab, session-sharing, tab
utils) at the plugin, adds isTabTypeAvailable gating for rdp/vnc/
telnet, widens hostCapability to accept an array, and renames the
guacamole i18n namespace to remoteDesktop.

* feat: move fleets into a first-party plugin

* feat: move automations into a first-party plugin

* feat: remove legacy alert rules, superseded by automations

Alert rules already auto-migrate into automations on boot and the old
engine stands down after. Deletes the rule/firing tables, routes, UI,
and AI tools; keeps notification channels since automations still use
them. Also fixes automations' notify step, which still called the
deleted repository.

* feat: move network topology into a first-party plugin

* feat: move tailscale device discovery and settings into a plugin

Adds plugins/tailscale/ with a devices sidebar tab, admin settings
section, and re-auth dialog. Host Metrics tailscale manager card and
SSH re-auth banner parsing stay in core.

* feat: move workspaces into a first-party plugin

* feat: move web endpoint into a first-party plugin

* feat: collapse plugin runtime to one tier behind a plugin SDK

* feat: make each plugin an npm workspace built by a termix-plugin CLI

* feat: give plugins their own tables, migrations and sync entities

* feat: serve plugin http and websockets from one mount instead of ports

* feat: namespace plugin permissions and keep them valid when a plugin is off

* feat: give plugins their own settings and one settings screen

* feat: load plugin frontends at runtime and remove plugin ids from the shell

* fix: mock the ai status fetch in its activate test

* feat: add auth extension points and one ssh connect pipeline

* feat: rebuild workspaces as the reference plugin

* fix: gate second factors after SSO/LDAP behind an admin setting

* feat: convert network-topology to a full plugin (B1)

* feat: move snippets backend and tables into a plugin (B2)

* feat: point core frontend snippets pickers at the plugin (B2)

* feat: add the snippets plugin (B2)

* feat: wire ai, automations, fleets and ssh-terminal to snippets (B2)

* feat: finish the tailscale plugin, including SSH auth (B3)

* feat: finish the fleets plugin, add ctx.hosts and host-commands SDK (B4)

* chore: update proxmox and host-metrics locale files for B5

* chore: regenerate drizzle migration journals for B5

* feat: add ctx.hosts create/update to the SDK, host-metrics drops proxmox

* feat: move proxmox node stats and collectors into the proxmox plugin

* feat: drop proxmox host columns, use plugin settings instead

* feat: finish the fleets plugin, add ctx.hosts and host-commands SDK (B4)

* feat: convert file manager into a plugin

* feat: convert ssh tunnels into a plugin

* feat: finish the web-endpoint plugin, add ctx.desktop (B8)

* feat: move the terminal fully into the ssh-terminal plugin (B9)

* feat: convert tmux monitoring into a plugin (B10)

* feat: convert serial console into the serial plugin

* feat: move session sharing and collab rooms into a plugin (B12)

* feat: turn session recording into a plugin (B13)

* feat: finish the remote-desktop plugin (B14)

* feat: finish the host-metrics plugin, move host status into core (B16)

* feat: finish the docker plugin (B15)

* feat: finish the automations plugin (B17)

* feat: finish the ai plugin (B18)

* feat: finish the homepage plugin, move service links and canvas out of core (B19)

* feat: convert wake-on-lan into a plugin (B20)

* feat: convert secret-sources into a plugin (B20)

* feat: move totp and passkeys into plugins (C1)

* feat: move sso and ldap logins into plugins (C2)

* feat: move opkssh and warpgate into plugins (C3)

* feat: move step-ca into a plugin (C4)

* feat: move vault ssh signing into a plugin (C5)

* feat: move termix identity into a plugin (C6)

* feat: move acme certificate automation into a plugin (C7)

* fix: finish 2.9.0 plugin moves and get every check green

* chore: lock the plugin boundary and remove 2.9.0 leftovers

* fix: harden the plugin runtime after the 2.9.0 security review

* feat: add plugin packing, signing, pinned trust and tmxplug bundling

* test: prove 2.8 to 2.9.0 upgrade is lossless and fix what it caught

* fix: give bundled plugin backends a real require for CJS deps

* feat: improve UI loading time and jitter

* feat: show credential sharing inline in the sidebar like host sharing

* feat: tailscale add host and copy ip, fix outbound fetch hang and plugin ESM warning

* feat: unify alerts into one plugin, channels, rules and inbox

* feat: rebuild desktop sync as linked server accounts, fix packaged plugin bundles and UI scaling

* fix: set blacksmith builder cache-key to stop broken gha cache fallback

* fix: link plugin-sdk workspace before npm ci in docker deps stage

* fix: link every plugin workspace before npm ci in docker deps stage

* fix(host-metrics): exclude image and firmware filesystems (#1469)

* fix(host-metrics): exclude image and firmware filesystems

* fix(ci): build plugin SDK before dependent checks

* fix(mysql): keep plugin settings scope indexes within limits

* test(mysql): refresh reviewed plugin upgrade SQL

* fix(hosts): normalize imported jump host references (#1470)

* fix(hosts): normalize imported jump host references

* fix(ci): build plugin SDK before dependent checks

* fix(mysql): keep plugin settings scope indexes within limits

* test(mysql): refresh reviewed plugin upgrade SQL

* fix(ci): build plugin SDK and repair MySQL settings migration (#1471)

* fix(ci): build plugin SDK before dependent checks

* fix(mysql): keep plugin settings scope indexes within limits

* test(mysql): refresh reviewed plugin upgrade SQL

* fix(file-manager): keep inline rename consistent (#1476)

* fix(ci): build plugin SDK before dependent checks

* fix(mysql): keep plugin settings scope indexes within limits

* test(mysql): refresh reviewed plugin upgrade SQL

* fix(file-manager): keep inline rename consistent

* fix(dashboard): reuse translated host status labels (#1475)

* fix(ci): build plugin SDK before dependent checks

* fix(mysql): keep plugin settings scope indexes within limits

* test(mysql): refresh reviewed plugin upgrade SQL

* fix(dashboard): reuse translated host status labels

* docs(api): clarify local and remote version fields (#1474)

* fix(ci): build plugin SDK before dependent checks

* fix(mysql): keep plugin settings scope indexes within limits

* test(mysql): refresh reviewed plugin upgrade SQL

* docs(api): clarify local and remote version fields

* fix(file-manager): preserve selected backgrounds on hover (#1473)

* fix(ci): build plugin SDK before dependent checks

* fix(mysql): keep plugin settings scope indexes within limits

* test(mysql): refresh reviewed plugin upgrade SQL

* fix(file-manager): preserve selection feedback on hover

* test(ui): await dialog focus cleanup before teardown

* fix(file-manager): restore Ctrl/Cmd+F file search (#1472)

* fix(ci): build plugin SDK before dependent checks

* fix(mysql): keep plugin settings scope indexes within limits

* test(mysql): refresh reviewed plugin upgrade SQL

* fix(file-manager): focus file search with Ctrl or Cmd F

* fix: keep rounded-full circular in production builds

* fix(file-manager): cancel uploads and stop remote writes (#1477)

* fix(file-manager): cancel uploads and stop remote writes

* test(css): exercise the configured PostCSS plugin chain

* fix(file-manager): apply compact density to directory tree (#1478)

* fix(file-manager): apply compact density to directory tree

* test(css): exercise the configured PostCSS plugin chain

* fix(file-manager): preserve font sizes in compact mode (#1480)

* fix(file-manager): preserve font sizes in compact mode

* test(css): exercise the configured PostCSS plugin chain

* fix(file-manager): prioritize file names in narrow lists (#1483)

* fix(file-manager): prioritize file names in narrow lists

* test(css): exercise the configured PostCSS plugin chain

* test(identity): preserve full Ed25519 public keys in fixtures

* test(remote-desktop): always mutate ciphertext in tamper test

* fix(remote-desktop): probe the saved host guacd endpoint (#1481)

* fix(remote-desktop): probe the saved host guacd endpoint

* test(css): exercise the configured PostCSS plugin chain

* test(identity): preserve full Ed25519 public keys in fixtures

* fix(homepage): check allowlisted private service reachability (#1479)

* fix(homepage): check allowlisted private service reachability

* test(css): exercise the configured PostCSS plugin chain

* fix(remote-desktop): stop unsolicited clipboard read prompts (#1482)

* fix(remote-desktop): read clipboard only on explicit paste

* test(css): exercise the configured PostCSS plugin chain

* test(identity): preserve full Ed25519 public keys in fixtures

* test(remote-desktop): always mutate ciphertext in tamper test

* chore: simplify plugin readmes, changelogs and manifest descriptions

* fix: keep plugins loaded after signing in from the login screen

* fix(file-manager): accept OS file drops over existing rows (#1484)

* fix(file-manager): accept OS file drops over existing rows

* test(file-manager): target the file label in drop tests

* test(css): exercise the configured PostCSS plugin chain

* test(identity): preserve full Ed25519 public keys in fixtures

* test(remote-desktop): always mutate ciphertext in tamper test

* fix(file-manager): pipeline SFTP download reads (#1485)

* feat: add plugin sdk build to beta release

* fix: make link-store secret check immune to random base64 matches

* fix(ldap): preserve the directory-provided bind DN (#1486)

* fix: compute beta changes across dev branches and move the beta tag

* chore: untrack plugin sdk ARCHITECTURE.md

* chore: remove references to plugin sdk ARCHITECTURE.md

* feat: merge host editor terminal tabs into one owned by ssh-terminal

* feat: add descriptions to plugin host enable toggles

* fix(file-manager): show download progress in file viewers (#1487)

* fix(electron): signal backend readiness over IPC (#1488)

* fix(split-screen): allow layout creation without randomUUID (#1490)

* fix(split-screen): allow layout creation without randomUUID

* test(credentials): avoid flaky Ed25519 key generation

* fix(sidebar): remeasure visible rows after density changes (#1489)

* fix(sidebar): remeasure visible rows after density changes

* test(credentials): avoid flaky Ed25519 key generation

* feat(split-screen): redesign split screen with free-form panes and pane picker

* feat(sidebar): add host click behavior setting, default to always opening a new tab

* feat(snippets): redesign panel to match the host list

* fix(session-recording): stop session logs panel from refetching in a loop

* feat(snippets): bring back sharing, target hosts and drag reorder

* feat(ssh-terminal): add toolbar position, start state, display and fade host settings

* feat(ssh-terminal): add host setting to turn off password prompt auto-fill

* fix(ai): stop streams getting cut off and keep tool steps across messages

* feat: improve quick connect system using plugin api

* fix: proxmox guest sync, startup snippet sync, drop dead cloudflare ssh transport

* feat: move terminal settings, look and ssh tools into ssh-terminal plugin

* feat: move snippets, keybinding actions and macros out of core into plugins

* feat: store rdp, vnc and telnet logins in a generic per-protocol table

* feat: type the plugin host record, move plugin strings out of core and add lint checks

* feat: replace core homepage widget registry with generic extension points

* feat: plugins only see their own host settings in the browser

* feat: harden plugin api for separate repos, signed updates and generic external login

* fix: keep plugin css below core utilities and version plugin assets by their css

* fix: load and save plugin host settings in the editor and tighten settings row spacing

* feat: redesign user host defaults system

* fix(remote-desktop): release held keys on focus loss (#1498)

* fix(session-sharing): replace local presentation after takeover (#1500)

* fix(file-manager): refresh disk usage with directory listing (#1503)

* fix(ssh-terminal): preserve input order during local echo reconciliation (#1505)

* feat(remote-desktop): expose display zoom controls for RDP (#1514)

* fix(file-manager): restore text selection and copying in Markdown previews (#1518)

* fix(sidebar): keep compact host addresses visible (#1524)

* fix(hosts): preserve plugin settings when reopening the editor (#1499)

* fix(ssh-terminal): close owner sockets when presentations unmount (#1501)

* fix(session-sharing): synchronize shared SSH terminal dimensions (#1502)

* fix(session-sharing): show participant presence in member terminals (#1504)

* fix(ai): sync provider configuration and keys across linked devices (#1506)

* feat(ssh-terminal): add a duplicate tab action (#1510)

* feat(file-manager): allow disabling move-to-trash confirmation (#1511)

* feat(file-manager): default to the remote login directory (#1512)

* feat(homepage): synchronize canvas layouts across devices (#1515)

* fix(shortcuts): prevent accidental double-Shift palette activation (#1519)

* feat(tmux-monitor): add a unified multi-host view (#1520)

* fix(electron): allow explicit quit with active connections (#1522)

* feat: reconnect all disconnected terminal tabs (#1523)

* fix(hosts): preserve recording and sharing settings in the dev editor (#1509)

* fix(database): preserve RDP domain during startup backfill (#1497)

* feat(sidebar): add keyboard type-ahead search for hosts (#1516)

* feat(automations): add per-host maintenance mode and recurring schedules (#1521)

* feat(tmux): add a per-host mouse toggle and preserve remote configuration (#1513)

* fix(session-sharing): use the linked server for desktop meetings and links (#1507)

* fix(tunnels): support TOTP for client tunnels and jump hosts (#1508)

* fix: type errors and lint failures from merged plugin prs

* feat(installer): make the Windows desktop shortcut optional (#1517)

* fix: ship the plugin sdk and serialport in desktop builds

* fix: prefer ipv4 when resolving ssh host names (#1365)

* fix: readable terminal selection with the light theme (#1319)

* fix: build desktop session share links on the linked server (#1350)

* fix: show meeting guests to members and hide the roster from guests (#1353)

* fix: reliable file manager saves with sudo prompt and no base64 guessing (#1335)

* fix: show disk usage for the mount being browsed (#1347)

* fix: load the linux tray icon reliably and log tray failures (#1332)

* fix: cover the gnome close path in the desktop quit test (#1332)

* fix: prompt for jump host TOTP in terminal, file manager and metrics (#1312)

* feat: optional auto reconnect for dropped ssh sessions (#1321)

* feat: tighter compact host rows with inline tags (#1325)

* feat: bring back the alert feed homepage widget

* feat: pick target terminals for snippets again

* feat: share button on connection tabs again

* feat: recent servers list when linking the desktop app

* feat: list the fixed app shortcuts in keyboard shortcuts

* fix: translate hardcoded toasts and drop em dashes from ui text

* fix: translate leftover hardcoded ui text

* fix: toolbar files button opens at the shell directory again

* fix: show the remote desktop note under connection origin again

* chore: openapi docs for host metrics manager routes

* chore: openapi docs for undocumented routes and fix two broken doc blocks

* fix: declare terminal.listSessions use for snippet targets

* revert: drop the alert feed widget, the notification center replaces it

* feat: restore the alert feed homepage widget

* fix: quick connect fills the host address from plugin auth editors like tailscale

* fix: docker container logs use the base background color

* chore: fix dependabot alerts and apply safe npm upgrades

* fix: proxmox stats tab reads its switch from plugin host settings

* fix: count plugin ssh logins toward host status and stop showing reachable as a warning

* fix: hide the built-in source pill in the host editor

* fix: host status shows online when the port answers and only warns on a failed login

* fix: drop the top border on the split layout menu

* fix: host defaults tabs sit where the host editor puts them and skip plugins with nothing to default

* fix: remote desktop auth method labels and notes for vnc and telnet

* fix: add description to the web endpoint enable switch

* fix: crowdin sync and pretranslate for plugin locales, run plugin tests on release

* feat: move telemetry out of core into a usage statistics plugin

* fix: recent activity card no longer cuts off host names early

* fix: remove duplicate top border on split screen menu

* fix: redesign session log player controls, fix tooltip overlap and drop dot separators

* fix: file manager and sftp text showing raw i18n keys

* fix: onboarding rerunning for existing users after upgrading

* fix: fleet detail buttons overflowing the sidebar

* fix: session log player scrolling off screen horizontally

* fix: network graph lag when adding hosts and on every render

* fix: maintenance index name, shared host read only view and badge polling

* fix: meeting tabs, workspace tab merging, rail panels as tabs and general ui lag

* chore: update release notes

* fix: remote desktop tabs reconnecting on every tab switch

* fix: build plugin sdk before linting in release workflow

* chore: lint, format, and bump version to 2.9.0

* chore: skip crowdin pre-translate in release for now

* chore: sync Crowdin translations for 2.9.0

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Koi <38512047+datlt4@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: ZacharyZcR <zacharyzcr1984@gmail.com>

plugins/vault/locales/en.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault Signer Profile",
+    "selectProfile": "Select a Vault profile...",
+    "hint": "Settings come from the shared profile; you'll sign in to Vault via OIDC when you connect. No secrets are stored.",
+    "docs": "View docs",
+    "sharedProfile": "{{name}} (shared)"
+  },
+  "profiles": {
+    "new": "New profile",
+    "manage": "Manage Vault profiles",
+    "name": "Friendly Name",
+    "vaultAddr": "Vault Address",
+    "namespace": "Namespace",
+    "oidcMount": "OIDC Auth Mount",
+    "oidcRole": "OIDC Role",
+    "sshMount": "SSH Secrets Mount",
+    "sshRole": "SSH Signer Role",
+    "validPrincipals": "Valid Principals",
+    "keyType": "Ephemeral Key Type",
+    "shareWithAll": "Share with all users",
+    "create": "Create profile",
+    "created": "Vault profile created",
+    "saved": "Vault profile saved",
+    "deleted": "Vault profile deleted",
+    "saveFailed": "Failed to save Vault profile",
+    "deleteFailed": "Failed to delete Vault profile",
+    "save": "Save profile",
+    "validationError": "Name, Vault address and SSH signer role are required",
+    "none": "No Vault profiles yet.",
+    "sharedBadge": "shared",
+    "edit": "Edit",
+    "delete": "Delete"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "Vault sign-in required",
+    "description": "A window has opened to sign in to HashiCorp Vault. Complete the sign-in there; this connection will continue automatically.",
+    "failed": "Vault authentication failed. Please try again.",
+    "reopen": "Reopen sign-in window"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/af_ZA.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Kluis Ondertekenaar Profiel",
+    "selectProfile": "Kies 'n kluisprofiel...",
+    "hint": "Instellings kom van die gedeelde profiel; jy sal by Vault aanmeld via OIDC wanneer jy koppel. Geen geheime word gestoor nie.",
+    "docs": "Bekyk dokumente",
+    "sharedProfile": "{{name}} (gedeel)"
+  },
+  "profiles": {
+    "new": "Nuwe profiel",
+    "manage": "Bestuur Vault-profiele",
+    "name": "Vriendelike Naam",
+    "vaultAddr": "Kluisadres",
+    "namespace": "Naamruimte",
+    "oidcMount": "OIDC-magtigingsmontering",
+    "oidcRole": "OIDC-rol",
+    "sshMount": "SSH-geheime berg",
+    "sshRole": "SSH-ondertekenaarrol",
+    "validPrincipals": "Geldige Prinsipale",
+    "keyType": "Efemere Sleuteltipe",
+    "shareWithAll": "Deel met alle gebruikers",
+    "create": "Skep profiel",
+    "created": "Kluisprofiel geskep",
+    "saved": "Kluisprofiel gestoor",
+    "deleted": "Kluisprofiel uitgevee",
+    "saveFailed": "Kon nie kluisprofiel stoor nie",
+    "deleteFailed": "Kon nie kluisprofiel uitvee nie",
+    "save": "Stoor profiel",
+    "validationError": "Naam, kluisadres en SSH-ondertekenaarsrol word vereis",
+    "none": "Geen Vault-profiele nog nie.",
+    "sharedBadge": "gedeel",
+    "edit": "Wysig",
+    "delete": "Vee uit"
+  },
+  "hosts": {
+    "filterAuthVault": "Kluis"
+  },
+  "dialog": {
+    "title": "Kluisaanmelding vereis",
+    "description": "'n Venster het oopgemaak om by HashiCorp Vault aan te meld. Voltooi die aanmelding daar; hierdie verbinding sal outomaties voortgaan.",
+    "failed": "Kluisverifikasie het misluk. Probeer asseblief weer.",
+    "reopen": "Maak aanmeldvenster weer oop"
+  },
+  "permissions": {
+    "use": {
+      "title": "Gebruik Vault SSH-ondertekening",
+      "description": "Skep Vault-ondertekenaarsprofiele en koppel aan gashere wat Vault gebruik."
+    },
+    "share": {
+      "title": "Deel Vault-profiele",
+      "description": "Merk 'n kluisondertekenaarsprofiel as gedeel sodat elke gebruiker dit kan kies."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Herlei URI",
+      "description": "Voeg hierdie URL by allowed_redirect_uris in elke Vault OIDC-rol waarmee Termix aanmeld."
+    },
+    "legacyCallback": {
+      "label": "Gebruik die ou aanstuur-URI",
+      "description": "Hou aan om /vault/oidc/callback te stuur, die aanstuur-URI wat voor 2.9 gebruik is. Skakel dit af sodra jou Vault-rolle die nuwe een toelaat."
+    },
+    "host": {
+      "profileId": {
+        "label": "Kluisondertekenaarprofiel"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/ar_SA.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "ملف توقيع Vault",
+    "selectProfile": "اختيار ملف توقيع Vault...",
+    "hint": "تأتي الإعدادات من الملف المشترك؛ ستقوم بتسجيل الدخول إلى Vault عبر OIDC عند الاتصال. لا يتم تخزين أي أسرار.",
+    "docs": "عرض المستندات",
+    "sharedProfile": "{{name}} (مشترك)"
+  },
+  "profiles": {
+    "new": "ملف جديد",
+    "manage": "إدارة ملفات Vault",
+    "name": "الاسم المألوف",
+    "vaultAddr": "عنوان Vault",
+    "namespace": "مساحة الاسم",
+    "oidcMount": "تثبيت مصادقة OIDC",
+    "oidcRole": "دور OIDC",
+    "sshMount": "تثبيت أسرار SSH",
+    "sshRole": "دور موقع SSH",
+    "validPrincipals": "المستخدمون المسموح بهم",
+    "keyType": "نوع المفتاح المؤقت",
+    "shareWithAll": "مشاركة مع جميع المستخدمين",
+    "create": "إنشاء ملف تعريف",
+    "created": "تم إنشاء ملف تعريف Vault",
+    "saved": "تم حفظ ملف تعريف Vault",
+    "deleted": "تم حذف ملف تعريف Vault",
+    "saveFailed": "فشل حفظ ملف تعريف Vault",
+    "deleteFailed": "فشل حذف ملف تعريف Vault",
+    "save": "حفظ ملف التعريف",
+    "validationError": "الاسم وعنوان Vault ودور الموقّع SSH مطلوب",
+    "none": "لا توجد ملفات تعريف Vault بعد.",
+    "sharedBadge": "مشترك",
+    "edit": "تحرير",
+    "delete": "حذف"
+  },
+  "hosts": {
+    "filterAuthVault": "قبو"
+  },
+  "dialog": {
+    "title": "مطلوب تسجيل الدخول إلى Vault",
+    "description": "تم فتح نافذة لتسجيل الدخول إلى HashiCorp Vault. أكمل تسجيل الدخول هناك؛ سيستمر هذا الاتصال تلقائيًا.",
+    "failed": "فشلت مصادقة Vault. يرجى المحاولة مرة أخرى.",
+    "reopen": "أعد فتح نافذة تسجيل الدخول"
+  },
+  "permissions": {
+    "use": {
+      "title": "استخدم توقيع SSH الخاص بـ Vault",
+      "description": "أنشئ ملفات تعريف التوقيع الخاصة بـ Vault وقم بالاتصال بالمضيفين الذين يستخدمون Vault."
+    },
+    "share": {
+      "title": "ملفات تعريف Share Vault",
+      "description": "قم بتحديد ملف تعريف مُوقِّع Vault على أنه مُشترك حتى يتمكن كل مستخدم من اختياره."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "عنوان إعادة التوجيه",
+      "description": "أضف عنوان URL هذا إلى allowed_redirect_uris في كل دور Vault OIDC الذي يسجل Termix الدخول به."
+    },
+    "legacyCallback": {
+      "label": "استخدم عنوان URI القديم لإعادة التوجيه",
+      "description": "استمر في إرسال /vault/oidc/callback، وهو عنوان إعادة التوجيه المستخدم قبل الإصدار 2.9. قم بإيقاف تشغيل هذا بمجرد أن تسمح أدوار Vault الخاصة بك بالعنوان الجديد."
+    },
+    "host": {
+      "profileId": {
+        "label": "ملف تعريف مُوقِّع الخزينة"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/bg_BG.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Профил на подписващ в трезора",
+    "selectProfile": "Изберете профил в трезора...",
+    "hint": "Настройките идват от споделения профил; ще влезете в Vault чрез OIDC, когато се свържете. Не се съхраняват тайни.",
+    "docs": "Преглед на документи",
+    "sharedProfile": "{{name}} (споделено)"
+  },
+  "profiles": {
+    "new": "Нов профил",
+    "manage": "Управление на профили в хранилището",
+    "name": "Приятелско име",
+    "vaultAddr": "Адрес на трезора",
+    "namespace": "Именно пространство",
+    "oidcMount": "OIDC Authentication Mount",
+    "oidcRole": "Роля на OIDC",
+    "sshMount": "SSH Secrets Mount",
+    "sshRole": "Роля на SSH подписващ",
+    "validPrincipals": "Валидни принципали",
+    "keyType": "Тип ефимерен ключ",
+    "shareWithAll": "Споделяне с всички потребители",
+    "create": "Създаване на профил",
+    "created": "Профилът на трезора е създаден",
+    "saved": "Профилът на трезора е запазен",
+    "deleted": "Профилът в трезора е изтрит",
+    "saveFailed": "Запазването на профила в Трезора не бе успешно",
+    "deleteFailed": "Изтриването на профила в Vault не бе успешно",
+    "save": "Запазване на профил",
+    "validationError": "Име, адрес на трезора и роля на SSH подписващ са задължителни",
+    "none": "Все още няма профили в Трезора.",
+    "sharedBadge": "споделено",
+    "edit": "Редактиране",
+    "delete": "Изтриване"
+  },
+  "hosts": {
+    "filterAuthVault": "Трезор"
+  },
+  "dialog": {
+    "title": "Изисква се влизане в трезора",
+    "description": "Отвори се прозорец за влизане в HashiCorp Vault. Завършете влизането там; тази връзка ще продължи автоматично.",
+    "failed": "Удостоверяването на трезора не бе успешно. Моля, опитайте отново.",
+    "reopen": "Отваряне отново на прозореца за вход"
+  },
+  "permissions": {
+    "use": {
+      "title": "Използване на SSH подписване в Vault",
+      "description": "Създайте профили на подписващи в Vault и се свържете с хостове, които използват Vault."
+    },
+    "share": {
+      "title": "Споделяне на профили в Трезора",
+      "description": "Маркирайте профил на подписващ в Vault като споделен, за да може всеки потребител да го избере."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "URI адрес за пренасочване",
+      "description": "Добавете този URL адрес към allowed_redirect_uris във всяка OIDC роля на Vault, с която Termix влиза."
+    },
+    "legacyCallback": {
+      "label": "Използвайте стария URI адрес за пренасочване",
+      "description": "Продължавайте да изпращате /vault/oidc/callback, URI адресът за пренасочване, използван преди версия 2.9. Изключете го, след като ролите ви в Vault позволят новия адрес."
+    },
+    "host": {
+      "profileId": {
+        "label": "Профил на подписващ в трезора"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/bn_BD.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault Signer Profile",
+    "selectProfile": "Select a Vault profile...",
+    "hint": "Settings come from the shared profile; you'll sign in to Vault via OIDC when you connect. No secrets are stored.",
+    "docs": "View docs",
+    "sharedProfile": "{{name}} (shared)"
+  },
+  "profiles": {
+    "new": "New profile",
+    "manage": "Manage Vault profiles",
+    "name": "Friendly Name",
+    "vaultAddr": "Vault Address",
+    "namespace": "Namespace",
+    "oidcMount": "OIDC Auth Mount",
+    "oidcRole": "OIDC Role",
+    "sshMount": "SSH Secrets Mount",
+    "sshRole": "SSH Signer Role",
+    "validPrincipals": "Valid Principals",
+    "keyType": "Ephemeral Key Type",
+    "shareWithAll": "Share with all users",
+    "create": "Create profile",
+    "created": "Vault profile created",
+    "saved": "Vault profile saved",
+    "deleted": "Vault profile deleted",
+    "saveFailed": "Failed to save Vault profile",
+    "deleteFailed": "Failed to delete Vault profile",
+    "save": "Save profile",
+    "validationError": "Name, Vault address and SSH signer role are required",
+    "none": "No Vault profiles yet.",
+    "sharedBadge": "ভাগ করা হয়েছে",
+    "edit": "Edit",
+    "delete": "Delete"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "Vault sign-in required",
+    "description": "A window has opened to sign in to HashiCorp Vault. Complete the sign-in there; this connection will continue automatically.",
+    "failed": "Vault authentication failed. Please try again.",
+    "reopen": "Reopen sign-in window"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/ca_ES.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Perfil del signant de la caixa forta",
+    "selectProfile": "Seleccioneu un perfil de Vault...",
+    "hint": "La configuració prové del perfil compartit; iniciaràs la sessió a Vault mitjançant OIDC quan et connectis. No s'emmagatzemen secrets.",
+    "docs": "Veure documents",
+    "sharedProfile": "{{name}} (compartit)"
+  },
+  "profiles": {
+    "new": "Nou perfil",
+    "manage": "Gestiona els perfils de Vault",
+    "name": "Nom amigable",
+    "vaultAddr": "Adreça de la caixa forta",
+    "namespace": "Espai de noms",
+    "oidcMount": "Muntatge d'autenticació OIDC",
+    "oidcRole": "Rol de l'OIDC",
+    "sshMount": "Muntanya de Secrets SSH",
+    "sshRole": "Rol de signant SSH",
+    "validPrincipals": "Principals vàlids",
+    "keyType": "Tipus de clau efímera",
+    "shareWithAll": "Comparteix amb tots els usuaris",
+    "create": "Crea un perfil",
+    "created": "Perfil de la caixa forta creat",
+    "saved": "Perfil de la caixa forta desat",
+    "deleted": "Perfil de la caixa forta suprimit",
+    "saveFailed": "No s'ha pogut desar el perfil de Vault",
+    "deleteFailed": "No s'ha pogut suprimir el perfil de Vault",
+    "save": "Desa el perfil",
+    "validationError": "El nom, l'adreça de la caixa forta i el rol de signant SSH són obligatoris.",
+    "none": "Encara no hi ha perfils de Vault.",
+    "sharedBadge": "compartit",
+    "edit": "Edita",
+    "delete": "Suprimeix"
+  },
+  "hosts": {
+    "filterAuthVault": "Volta"
+  },
+  "dialog": {
+    "title": "Cal iniciar sessió a la caixa forta",
+    "description": "S'ha obert una finestra per iniciar la sessió a HashiCorp Vault. Completeu l'inici de sessió allà; aquesta connexió continuarà automàticament.",
+    "failed": "L'autenticació de la caixa forta ha fallat. Torna-ho a provar.",
+    "reopen": "Torna a obrir la finestra d'inici de sessió"
+  },
+  "permissions": {
+    "use": {
+      "title": "Utilitza la signatura SSH de Vault",
+      "description": "Crea perfils de signant del Vault i connecta't a amfitrions que utilitzen el Vault."
+    },
+    "share": {
+      "title": "Comparteix els perfils de Vault",
+      "description": "Marca un perfil de signant de Vault com a compartit perquè tots els usuaris el puguin triar."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "URI de redirecció",
+      "description": "Afegiu aquesta URL a allowed_redirect_uris a cada rol OIDC de Vault amb què Termix inicia la sessió."
+    },
+    "legacyCallback": {
+      "label": "Utilitza l'URI de redirecció antiga",
+      "description": "Continua enviant /vault/oidc/callback, l'URI de redirecció que s'utilitzava abans de la versió 2.9. Desactiva-ho un cop els rols de Vault permetin el nou."
+    },
+    "host": {
+      "profileId": {
+        "label": "Perfil del signant de la caixa forta"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/cs_CZ.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Profil podepisujícího trezoru",
+    "selectProfile": "Vyberte profil úložiště...",
+    "hint": "Nastavení pocházejí ze sdíleného profilu; po připojení se do úložiště přihlásíte přes OIDC. Žádné tajné kódy se neukládají.",
+    "docs": "Zobrazit dokumenty",
+    "sharedProfile": "{{name}} (sdílené)"
+  },
+  "profiles": {
+    "new": "Nový profil",
+    "manage": "Správa profilů úložiště",
+    "name": "Přátelský název",
+    "vaultAddr": "Adresa trezoru",
+    "namespace": "Jmenný prostor",
+    "oidcMount": "Připojení autorizace OIDC",
+    "oidcRole": "Role OIDC",
+    "sshMount": "SSH tajemství Mount",
+    "sshRole": "Role SSH podepisujícího",
+    "validPrincipals": "Platné principy",
+    "keyType": "Typ dočasného klíče",
+    "shareWithAll": "Sdílet se všemi uživateli",
+    "create": "Vytvořit profil",
+    "created": "Profil úložiště vytvořen",
+    "saved": "Profil trezoru uložen",
+    "deleted": "Profil trezoru smazán",
+    "saveFailed": "Uložení profilu úložiště se nezdařilo.",
+    "deleteFailed": "Profil v úložišti se nepodařilo smazat.",
+    "save": "Uložit profil",
+    "validationError": "Jméno, adresa trezoru a role SSH signatáře jsou povinné.",
+    "none": "Zatím žádné profily v úložišti Vault.",
+    "sharedBadge": "sdílené",
+    "edit": "Upravit",
+    "delete": "Vymazat"
+  },
+  "hosts": {
+    "filterAuthVault": "Klenba"
+  },
+  "dialog": {
+    "title": "Vyžaduje se přihlášení do trezoru",
+    "description": "Otevřelo se okno pro přihlášení do HashiCorp Vault. Dokončete přihlášení tam; toto připojení bude automaticky pokračovat.",
+    "failed": "Ověření v trezoru se nezdařilo. Zkuste to prosím znovu.",
+    "reopen": "Znovu otevřít přihlašovací okno"
+  },
+  "permissions": {
+    "use": {
+      "title": "Používejte podepisování přes SSH v úložišti",
+      "description": "Vytvořte profily podepisujících v aplikaci Vault a připojte se k hostitelům, kteří ji používají."
+    },
+    "share": {
+      "title": "Sdílení profilů úložiště",
+      "description": "Označte profil podepisujícího v úložišti Vault jako sdílený, aby si ho mohl vybrat každý uživatel."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "URI přesměrování",
+      "description": "Přidejte tuto URL adresu do allowed_redirect_uris v každé roli OIDC úložiště, se kterou se Termix přihlašuje."
+    },
+    "legacyCallback": {
+      "label": "Použít starý identifikátor URI pro přesměrování",
+      "description": "Pokračujte v odesílání /vault/oidc/callback, což je URI pro přesměrování používané před verzí 2.9. Jakmile vaše role v úložišti povolí použití nového URI, vypněte tuto funkci."
+    },
+    "host": {
+      "profileId": {
+        "label": "Profil podepisujícího v trezoru"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/da_DK.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Profil for underskriver af arkiv",
+    "selectProfile": "Vælg en Vault-profil...",
+    "hint": "Indstillingerne kommer fra den delte profil; du logger ind på Vault via OIDC, når du opretter forbindelse. Der gemmes ingen hemmeligheder.",
+    "docs": "Se dokumenter",
+    "sharedProfile": "{{name}} (delt)"
+  },
+  "profiles": {
+    "new": "Ny profil",
+    "manage": "Administrer Vault-profiler",
+    "name": "Venligt navn",
+    "vaultAddr": "Adresse i boksen",
+    "namespace": "Navnerum",
+    "oidcMount": "OIDC-godkendelsesmontering",
+    "oidcRole": "OIDC-rolle",
+    "sshMount": "SSH-hemmeligheder monteres",
+    "sshRole": "SSH-underskriverrolle",
+    "validPrincipals": "Gyldige principper",
+    "keyType": "Kortvarig nøgletype",
+    "shareWithAll": "Del med alle brugere",
+    "create": "Opret profil",
+    "created": "Vault-profil oprettet",
+    "saved": "Vault-profil gemt",
+    "deleted": "Vault-profil slettet",
+    "saveFailed": "Kunne ikke gemme Vault-profilen",
+    "deleteFailed": "Kunne ikke slette Vault-profilen",
+    "save": "Gem profil",
+    "validationError": "Navn, Vault-adresse og SSH-underskriverrolle er påkrævet",
+    "none": "Ingen Vault-profiler endnu.",
+    "sharedBadge": "delt",
+    "edit": "Redigere",
+    "delete": "Slet"
+  },
+  "hosts": {
+    "filterAuthVault": "Hvælving"
+  },
+  "dialog": {
+    "title": "Login til Vault kræves",
+    "description": "Et vindue er åbnet, hvor du kan logge ind på HashiCorp Vault. Fuldfør loginprocessen der; forbindelsen fortsætter automatisk.",
+    "failed": "Godkendelse af arkiv mislykkedes. Prøv igen.",
+    "reopen": "Genåbn loginvinduet"
+  },
+  "permissions": {
+    "use": {
+      "title": "Brug Vault SSH-signering",
+      "description": "Opret Vault-underskriverprofiler, og opret forbindelse til værter, der bruger Vault."
+    },
+    "share": {
+      "title": "Del Vault-profiler",
+      "description": "Marker en Vault-underskriverprofil som delt, så alle brugere kan vælge den."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Omdirigerings-URI",
+      "description": "Tilføj denne URL til allowed_redirect_uris i hver Vault OIDC-rolle, som Termix logger ind med."
+    },
+    "legacyCallback": {
+      "label": "Brug den gamle omdirigerings-URI",
+      "description": "Fortsæt med at sende /vault/oidc/callback, den omdirigerings-URI, der blev brugt før 2.9. Slå dette fra, når dine Vault-roller tillader den nye."
+    },
+    "host": {
+      "profileId": {
+        "label": "Profil for underskriver af Vault"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/de_DE.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault-Signer-Profil",
+    "selectProfile": "Vault-Profil auswählen...",
+    "hint": "Die Einstellungen stammen aus dem freigegebenen Profil; Sie melden sich beim Verbinden per OIDC bei Vault an. Es werden keine Geheimnisse gespeichert.",
+    "docs": "Dokumentation ansehen",
+    "sharedProfile": "{{name}} (gemeinsam genutzt)"
+  },
+  "profiles": {
+    "new": "Neues Profil",
+    "manage": "Vault-Profile verwalten",
+    "name": "Anzeigename",
+    "vaultAddr": "Vault-Adresse",
+    "namespace": "Namespace",
+    "oidcMount": "OIDC-Auth-Mount",
+    "oidcRole": "OIDC-Rolle",
+    "sshMount": "SSH-Secrets-Mount",
+    "sshRole": "SSH-Signer-Rolle",
+    "validPrincipals": "Gültige Principals",
+    "keyType": "Ephemerer Schlüsseltyp",
+    "shareWithAll": "Mit allen Benutzern teilen",
+    "create": "Profil erstellen",
+    "created": "Vault-Profil erstellt",
+    "saved": "Vault-Profil gespeichert",
+    "deleted": "Vault-Profil gelöscht",
+    "saveFailed": "Fehler beim Speichern des Vault-Profils",
+    "deleteFailed": "Fehler beim Löschen des Vault-Profils",
+    "save": "Profil speichern",
+    "validationError": "Name, Vault-Adresse und SSH-Signer-Rolle sind erforderlich",
+    "none": "Noch keine Vault-Profile.",
+    "sharedBadge": "geteilt",
+    "edit": "Bearbeiten",
+    "delete": "Löschen"
+  },
+  "hosts": {
+    "filterAuthVault": "Gewölbe"
+  },
+  "dialog": {
+    "title": "Vault-Anmeldung erforderlich",
+    "description": "Ein Fenster zur Anmeldung bei HashiCorp Vault wurde geöffnet. Schließen Sie die Anmeldung dort ab; diese Verbindung wird automatisch fortgesetzt.",
+    "failed": "Vault-Authentifizierung fehlgeschlagen. Bitte versuchen Sie es erneut.",
+    "reopen": "Anmeldefenster erneut öffnen"
+  },
+  "permissions": {
+    "use": {
+      "title": "Vault-SSH-Signierung verwenden",
+      "description": "Erstellen Sie Vault-Signaturprofile und stellen Sie eine Verbindung zu Hosts her, die Vault verwenden."
+    },
+    "share": {
+      "title": "Vault-Profile teilen",
+      "description": "Markieren Sie ein Vault-Signaturprofil als freigegeben, damit es jeder Benutzer auswählen kann."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Umleitungs-URI",
+      "description": "Fügen Sie diese URL in jeder Vault OIDC-Rolle, mit der sich Termix anmeldet, zu allowed_redirect_uris hinzu."
+    },
+    "legacyCallback": {
+      "label": "Verwenden Sie die alte Umleitungs-URI.",
+      "description": "Senden Sie weiterhin /vault/oidc/callback, die Umleitungs-URI, die vor Version 2.9 verwendet wurde. Deaktivieren Sie diese Funktion, sobald Ihre Vault-Rollen die Verwendung der neuen URI zulassen."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault-Signer-Profil"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/el_GR.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Προφίλ Υπογράφοντος Vault",
+    "selectProfile": "Επιλέξτε ένα προφίλ Vault...",
+    "hint": "Οι ρυθμίσεις προέρχονται από το κοινόχρηστο προφίλ. Θα συνδεθείτε στο Vault μέσω OIDC όταν συνδεθείτε. Δεν αποθηκεύονται μυστικά.",
+    "docs": "Προβολή εγγράφων",
+    "sharedProfile": "{{name}} (κοινόχρηστο)"
+  },
+  "profiles": {
+    "new": "Νέο προφίλ",
+    "manage": "Διαχείριση προφίλ Vault",
+    "name": "Φιλικό όνομα",
+    "vaultAddr": "Διεύθυνση θησαυροφυλακίου",
+    "namespace": "Χώρος ονομάτων",
+    "oidcMount": "Μοντάζ ελέγχου ταυτότητας OIDC",
+    "oidcRole": "Ρόλος OIDC",
+    "sshMount": "SSH Secrets Mount",
+    "sshRole": "Ρόλος Υπογράφοντος SSH",
+    "validPrincipals": "Έγκυρες Αρχές",
+    "keyType": "Εφήμερος Τύπος Κλειδιού",
+    "shareWithAll": "Κοινοποίηση με όλους τους χρήστες",
+    "create": "Δημιουργία προφίλ",
+    "created": "Δημιουργήθηκε προφίλ Vault",
+    "saved": "Το προφίλ του Vault αποθηκεύτηκε",
+    "deleted": "Το προφίλ Vault διαγράφηκε",
+    "saveFailed": "Αποτυχία αποθήκευσης προφίλ Vault",
+    "deleteFailed": "Αποτυχία διαγραφής προφίλ Vault",
+    "save": "Αποθήκευση προφίλ",
+    "validationError": "Απαιτούνται όνομα, διεύθυνση vault και ρόλος υπογράφοντος SSH",
+    "none": "Δεν υπάρχουν ακόμη προφίλ Vault.",
+    "sharedBadge": "κοινόχρηστο",
+    "edit": "Εκδίδω",
+    "delete": "Διαγράφω"
+  },
+  "hosts": {
+    "filterAuthVault": "Θόλος"
+  },
+  "dialog": {
+    "title": "Απαιτείται σύνδεση στο Vault",
+    "description": "Έχει ανοίξει ένα παράθυρο για να συνδεθείτε στο HashiCorp Vault. Ολοκληρώστε τη σύνδεση εκεί. Αυτή η σύνδεση θα συνεχιστεί αυτόματα.",
+    "failed": "Ο έλεγχος ταυτότητας του vault απέτυχε. Δοκιμάστε ξανά.",
+    "reopen": "Επανάνοιγμα παραθύρου σύνδεσης"
+  },
+  "permissions": {
+    "use": {
+      "title": "Χρήση υπογραφής SSH του Vault",
+      "description": "Δημιουργήστε προφίλ υπογραφής Vault και συνδεθείτε με κεντρικούς υπολογιστές που χρησιμοποιούν το Vault."
+    },
+    "share": {
+      "title": "Κοινή χρήση προφίλ Vault",
+      "description": "Επισημάνετε ένα προφίλ υπογραφής Vault ως κοινόχρηστο, ώστε να μπορεί να το επιλέξει κάθε χρήστης."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "URI ανακατεύθυνσης",
+      "description": "Προσθέστε αυτήν τη διεύθυνση URL στο allowed_redirect_uris σε κάθε ρόλο Vault OIDC με τον οποίο συνδέεται το Termix."
+    },
+    "legacyCallback": {
+      "label": "Χρησιμοποιήστε το παλιό URI ανακατεύθυνσης",
+      "description": "Συνεχίστε να στέλνετε το /vault/oidc/callback, το URI ανακατεύθυνσης που χρησιμοποιήθηκε πριν από την έκδοση 2.9. Απενεργοποιήστε αυτήν τη λειτουργία μόλις οι ρόλοι Vault σας επιτρέψουν το νέο."
+    },
+    "host": {
+      "profileId": {
+        "label": "Προφίλ υπογράφοντος θησαυροφυλακίου"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/es_ES.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Perfil de firmante de Vault",
+    "selectProfile": "Seleccionar un perfil de Vault...",
+    "hint": "La configuración proviene del perfil compartido; se iniciará sesión en Vault a través de OIDC al conectarse. No se almacenan secretos.",
+    "docs": "Ver documentación",
+    "sharedProfile": "{{name}} (compartido)"
+  },
+  "profiles": {
+    "new": "Nuevo perfil",
+    "manage": "Administrar perfiles de Vault",
+    "name": "Nombre descriptivo",
+    "vaultAddr": "Dirección de Vault",
+    "namespace": "Espacio de nombres",
+    "oidcMount": "Montaje de autenticación OIDC",
+    "oidcRole": "Rol OIDC",
+    "sshMount": "Montaje de secretos SSH",
+    "sshRole": "Rol de firmante SSH",
+    "validPrincipals": "Principals válidos",
+    "keyType": "Tipo de clave efímera",
+    "shareWithAll": "Compartir con todos los usuarios",
+    "create": "Crear perfil",
+    "created": "Perfil de Vault creado",
+    "saved": "Perfil de Vault guardado",
+    "deleted": "Perfil de Vault eliminado",
+    "saveFailed": "Error al guardar el perfil de Vault",
+    "deleteFailed": "Error al eliminar el perfil de Vault",
+    "save": "Guardar perfil",
+    "validationError": "Se requieren el nombre, la dirección de Vault y el rol de firmante SSH",
+    "none": "Aún no hay perfiles de Vault.",
+    "sharedBadge": "compartido",
+    "edit": "Editar",
+    "delete": "Eliminar"
+  },
+  "hosts": {
+    "filterAuthVault": "Bóveda"
+  },
+  "dialog": {
+    "title": "Inicio de sesión en Vault requerido",
+    "description": "Se ha abierto una ventana para iniciar sesión en HashiCorp Vault. Completa el inicio de sesión allí; esta conexión continuará automáticamente.",
+    "failed": "La autenticación de Vault falló. Inténtalo de nuevo.",
+    "reopen": "Reabrir ventana de inicio de sesión"
+  },
+  "permissions": {
+    "use": {
+      "title": "Utilice la firma SSH de Vault.",
+      "description": "Cree perfiles de firmante de Vault y conéctese a los hosts que utilizan Vault."
+    },
+    "share": {
+      "title": "Compartir perfiles de bóveda",
+      "description": "Marca un perfil de firmante de Vault como compartido para que todos los usuarios puedan seleccionarlo."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "URI de redirección",
+      "description": "Agregue esta URL a allowed_redirect_uris en cada rol OIDC de Vault con el que Termix inicie sesión."
+    },
+    "legacyCallback": {
+      "label": "Utilice la URI de redireccionamiento antigua",
+      "description": "Sigue enviando /vault/oidc/callback, la URI de redireccionamiento que se usaba antes de la versión 2.9. Desactívala una vez que tus roles de Vault permitan la nueva."
+    },
+    "host": {
+      "profileId": {
+        "label": "Perfil del firmante de Vault"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/fi_FI.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Varaston allekirjoittajan profiili",
+    "selectProfile": "Valitse holviprofiili...",
+    "hint": "Asetukset tulevat jaetusta profiilista; kirjaudut Holviin OIDC:n kautta, kun muodostat yhteyden. Salaisuuksia ei tallenneta.",
+    "docs": "Näytä dokumentit",
+    "sharedProfile": "{{name}} (jaettu)"
+  },
+  "profiles": {
+    "new": "Uusi profiili",
+    "manage": "Hallinnoi holviprofiileja",
+    "name": "Ystävällinen nimi",
+    "vaultAddr": "Holvin osoite",
+    "namespace": "Nimiavaruus",
+    "oidcMount": "OIDC-todennusliitos",
+    "oidcRole": "OIDC-rooli",
+    "sshMount": "SSH-salaisuuksien kiinnitys",
+    "sshRole": "SSH-allekirjoittajan rooli",
+    "validPrincipals": "Voimassa olevat pääasialliset",
+    "keyType": "Lyhytaikainen avaintyyppi",
+    "shareWithAll": "Jaa kaikkien käyttäjien kanssa",
+    "create": "Luo profiili",
+    "created": "Holvin profiili luotu",
+    "saved": "Holvin profiili tallennettu",
+    "deleted": "Holvin profiili poistettu",
+    "saveFailed": "Holvin profiilin tallentaminen epäonnistui",
+    "deleteFailed": "Holviprofiilin poistaminen epäonnistui",
+    "save": "Tallenna profiili",
+    "validationError": "Nimi, holvin osoite ja SSH-allekirjoittajan rooli vaaditaan",
+    "none": "Ei vielä holviprofiileja.",
+    "sharedBadge": "jaettu",
+    "edit": "Muokata",
+    "delete": "Poistaa"
+  },
+  "hosts": {
+    "filterAuthVault": "Holvi"
+  },
+  "dialog": {
+    "title": "Holviin kirjautuminen vaaditaan",
+    "description": "Ikkuna HashiCorp-holviin kirjautumista varten on avautunut. Kirjaudu sisään siinä. Yhteys jatkuu automaattisesti.",
+    "failed": "Holvin todennus epäonnistui. Yritä uudelleen.",
+    "reopen": "Avaa kirjautumisikkuna uudelleen"
+  },
+  "permissions": {
+    "use": {
+      "title": "Käytä Vaultin SSH-allekirjoitusta",
+      "description": "Luo Vault-allekirjoittajaprofiileja ja muodosta yhteys Vaultia käyttäviin isäntiin."
+    },
+    "share": {
+      "title": "Jaa holviprofiileja",
+      "description": "Merkitse Vault-allekirjoittajan profiili jaetuksi, jotta jokainen käyttäjä voi valita sen."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Uudelleenohjauksen URI",
+      "description": "Lisää tämä URL-osoite allowed_redirect_uris-kohtaan jokaisessa Vault OIDC -roolissa, jolla Termix kirjautuu sisään."
+    },
+    "legacyCallback": {
+      "label": "Käytä vanhaa uudelleenohjaus-URI:ta",
+      "description": "Lähetä edelleen /vault/oidc/callback-osoitetta, joka on ennen versiota 2.9 käytetty uudelleenohjaus-URI. Poista tämä käytöstä, kun Vault-roolisi sallivat uuden osoitteen."
+    },
+    "host": {
+      "profileId": {
+        "label": "Varaston allekirjoittajan profiili"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/fr_FR.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Profil de signature Vault",
+    "selectProfile": "Sélectionner un profil Vault...",
+    "hint": "Les paramètres proviennent du profil partagé ; vous vous connecterez à Vault via OIDC lors de la connexion. Aucun secret n'est stocké.",
+    "docs": "Documentation",
+    "sharedProfile": "{{name}} (partagé)"
+  },
+  "profiles": {
+    "new": "Nouveau profil",
+    "manage": "Gérer les profils Vault",
+    "name": "Nom convivial",
+    "vaultAddr": "Adresse Vault",
+    "namespace": "Espace de noms",
+    "oidcMount": "Point de montage d'authentification OIDC",
+    "oidcRole": "Rôle OIDC",
+    "sshMount": "Point de montage des secrets SSH",
+    "sshRole": "Rôle de signature SSH",
+    "validPrincipals": "Principaux valides",
+    "keyType": "Type de clé éphémère",
+    "shareWithAll": "Partager avec tous les utilisateurs",
+    "create": "Créer un profil",
+    "created": "Profil Vault créé",
+    "saved": "Profil Vault enregistré",
+    "deleted": "Profil Vault supprimé",
+    "saveFailed": "Échec de l'enregistrement du profil Vault",
+    "deleteFailed": "Échec de la suppression du profil Vault",
+    "save": "Enregistrer le profil",
+    "validationError": "Le nom, l'adresse Vault et le rôle de signataire SSH sont requis",
+    "none": "Aucun profil Vault pour le moment",
+    "sharedBadge": "partagé",
+    "edit": "Modifier",
+    "delete": "Supprimer"
+  },
+  "hosts": {
+    "filterAuthVault": "Sauter"
+  },
+  "dialog": {
+    "title": "Connexion à Vault requise",
+    "description": "Une fenêtre s'est ouverte pour vous connecter à HashiCorp Vault. Terminez la connexion dans cette fenêtre ; cette connexion continuera automatiquement.",
+    "failed": "Échec de l'authentification Vault. Veuillez réessayer.",
+    "reopen": "Rouvrir la fenêtre de connexion"
+  },
+  "permissions": {
+    "use": {
+      "title": "Utiliser la signature SSH Vault",
+      "description": "Créez des profils de signataire Vault et connectez-vous aux hôtes qui utilisent Vault."
+    },
+    "share": {
+      "title": "Profils Share Vault",
+      "description": "Marquez un profil de signataire Vault comme partagé afin que chaque utilisateur puisse le sélectionner."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "URI de redirection",
+      "description": "Ajoutez cette URL à allowed_redirect_uris dans chaque rôle OIDC Vault avec lequel Termix se connecte."
+    },
+    "legacyCallback": {
+      "label": "Utilisez l'ancienne URI de redirection",
+      "description": "Continuez à envoyer /vault/oidc/callback, l'URI de redirection utilisée avant la version 2.9. Désactivez-la une fois que vos rôles Vault autoriseront la nouvelle."
+    },
+    "host": {
+      "profileId": {
+        "label": "Profil du signataire Vault"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/he_IL.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "פרופיל חותם בכספת",
+    "selectProfile": "בחר פרופיל כספת...",
+    "hint": "ההגדרות מגיעות מהפרופיל המשותף; תיכנס לכספת דרך OIDC כשתתחבר. לא נשמרים סודות.",
+    "docs": "הצג מסמכים",
+    "sharedProfile": "{{name}} (שותף)"
+  },
+  "profiles": {
+    "new": "פרופיל חדש",
+    "manage": "ניהול פרופילי כספת",
+    "name": "שם ידידותי",
+    "vaultAddr": "כתובת הכספת",
+    "namespace": "מרחב השמות",
+    "oidcMount": "אישור OIDC",
+    "oidcRole": "תפקיד OIDC",
+    "sshMount": "סודות SSH מאוורר",
+    "sshRole": "תפקיד חותם SSH",
+    "validPrincipals": "עקרונות תקפים",
+    "keyType": "סוג מפתח זמני",
+    "shareWithAll": "שתף עם כל המשתמשים",
+    "create": "צור פרופיל",
+    "created": "פרופיל הכספת נוצר",
+    "saved": "פרופיל הכספת נשמר",
+    "deleted": "פרופיל הכספת נמחק",
+    "saveFailed": "שמירת פרופיל הכספת נכשלה",
+    "deleteFailed": "נכשלה מחיקת פרופיל הכספת",
+    "save": "שמור פרופיל",
+    "validationError": "שם, כתובת כספת ותפקיד חתימה ב-SSH נדרשים",
+    "none": "אין עדיין פרופילים בכספת.",
+    "sharedBadge": "מְשׁוּתָף",
+    "edit": "לַעֲרוֹך",
+    "delete": "לִמְחוֹק"
+  },
+  "hosts": {
+    "filterAuthVault": "קִמרוֹן"
+  },
+  "dialog": {
+    "title": "נדרשת כניסה לכספת",
+    "description": "נפתח חלון לכניסה לכספת HashiCorp. השלם את תהליך הכניסה שם; חיבור זה ימשיך אוטומטית.",
+    "failed": "אימות הכספת נכשל. אנא נסה שוב.",
+    "reopen": "פתח מחדש את חלון הכניסה"
+  },
+  "permissions": {
+    "use": {
+      "title": "השתמש בחתימת SSH של Vault",
+      "description": "צור פרופילי חותם של Vault והתחבר למארחים המשתמשים ב-Vault."
+    },
+    "share": {
+      "title": "שיתוף פרופילי כספת",
+      "description": "סמן פרופיל של חותם בכספת כמשותף כדי שכל משתמש יוכל לבחור אותו."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "כתובת URL להפניה מחדש",
+      "description": "הוסף כתובת URL זו ל- allowed_redirect_uris בכל תפקיד OIDC של Vault שאיתו Termix מתחבר."
+    },
+    "legacyCallback": {
+      "label": "השתמש ב-URI להפניה הישן",
+      "description": "המשך לשלוח את /vault/oidc/callback, URI ההפניה שהיה בשימוש לפני גרסה 2.9. כבה אפשרות זו לאחר שתפקידי הכספת שלך יאפשרו את ה-URI החדש."
+    },
+    "host": {
+      "profileId": {
+        "label": "פרופיל חותם בכספת"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/hi_IN.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault साइनर प्रोफ़ाइल",
+    "selectProfile": "एक Vault प्रोफ़ाइल चुनें...",
+    "hint": "सेटिंग साझा प्रोफ़ाइल से आती हैं; कनेक्ट करते समय आप OIDC के माध्यम से Vault में साइन इन करेंगे। कोई सीक्रेट संग्रहीत नहीं किए जाते।",
+    "docs": "दस्तावेज़ देखें",
+    "sharedProfile": "{{name}} (shared)"
+  },
+  "profiles": {
+    "new": "नई प्रोफ़ाइल",
+    "manage": "Vault प्रोफ़ाइल प्रबंधित करें",
+    "name": "अनुकूल नाम",
+    "vaultAddr": "Vault पता",
+    "namespace": "नेमस्पेस",
+    "oidcMount": "OIDC ऑथ माउंट",
+    "oidcRole": "OIDC रोल",
+    "sshMount": "SSH सीक्रेट माउंट",
+    "sshRole": "SSH साइनर रोल",
+    "validPrincipals": "मान्य प्रिंसिपल",
+    "keyType": "एफेमरल कुंजी प्रकार",
+    "shareWithAll": "सभी उपयोगकर्ताओं के साथ साझा करें",
+    "create": "प्रोफ़ाइल बनाएँ",
+    "created": "Vault प्रोफ़ाइल बनाई गई",
+    "saved": "Vault प्रोफ़ाइल सहेजी गई",
+    "deleted": "Vault प्रोफ़ाइल हटाई गई",
+    "saveFailed": "Vault प्रोफ़ाइल सहेजने में विफल",
+    "deleteFailed": "Vault प्रोफ़ाइल हटाने में विफल",
+    "save": "प्रोफ़ाइल सहेजें",
+    "validationError": "नाम, Vault पता और SSH हस्ताक्षरकर्ता भूमिका आवश्यक हैं",
+    "none": "अभी तक कोई Vault प्रोफ़ाइल नहीं है।",
+    "sharedBadge": "साझा",
+    "edit": "संपादित करें",
+    "delete": "हटाएँ"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "Vault साइन-इन आवश्यक है",
+    "description": "HashiCorp Vault में साइन इन करने के लिए एक विंडो खुल गई है। वहाँ साइन-इन पूरा करें; यह कनेक्शन स्वचालित रूप से जारी रहेगा।",
+    "failed": "Vault प्रमाणीकरण विफल। कृपया पुनः प्रयास करें।",
+    "reopen": "साइन-इन विंडो फिर से खोलें"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/hu_HU.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault aláírói profil",
+    "selectProfile": "Válasszon ki egy Vault profilt...",
+    "hint": "A beállítások a megosztott profilból származnak; a csatlakozáskor OIDC-n keresztül fog bejelentkezni a Vaultba. A rendszer nem tárol titkos adatokat.",
+    "docs": "Dokumentumok megtekintése",
+    "sharedProfile": "{{name}} (megosztva)"
+  },
+  "profiles": {
+    "new": "Új profil",
+    "manage": "Vault profilok kezelése",
+    "name": "Barátságos név",
+    "vaultAddr": "Trezor címe",
+    "namespace": "Névtér",
+    "oidcMount": "OIDC hitelesítési csatolás",
+    "oidcRole": "OIDC szerepkör",
+    "sshMount": "SSH titkok felfűzése",
+    "sshRole": "SSH aláíró szerepkör",
+    "validPrincipals": "Érvényes megbízók",
+    "keyType": "Efemer kulcstípus",
+    "shareWithAll": "Megosztás az összes felhasználóval",
+    "create": "Profil létrehozása",
+    "created": "Létrehozva a trezor profilja",
+    "saved": "A trezor profilja mentve",
+    "deleted": "Tárolóprofil törölve",
+    "saveFailed": "Nem sikerült menteni a Vault profilját",
+    "deleteFailed": "Nem sikerült törölni a Vault profilját",
+    "save": "Profil mentése",
+    "validationError": "Név, trezor címe és SSH aláírói szerepkör megadása kötelező.",
+    "none": "Még nincsenek Vault-profilok.",
+    "sharedBadge": "megosztott",
+    "edit": "Szerkesztés",
+    "delete": "Töröl"
+  },
+  "hosts": {
+    "filterAuthVault": "Boltozat"
+  },
+  "dialog": {
+    "title": "Bejelentkezés szükséges a széfbe",
+    "description": "Megnyílt egy ablak a HashiCorp Vaultba való bejelentkezéshez. Fejezze be a bejelentkezést ott; a kapcsolat automatikusan folytatódik.",
+    "failed": "A trezor hitelesítése sikertelen. Próbálja újra.",
+    "reopen": "Bejelentkezési ablak újranyitása"
+  },
+  "permissions": {
+    "use": {
+      "title": "Vault SSH aláírás használata",
+      "description": "Hozzon létre Vault aláírói profilokat, és csatlakozzon a Vaultot használó gazdagépekhez."
+    },
+    "share": {
+      "title": "Vault profilok megosztása",
+      "description": "Jelöljön meg egy Vault aláírói profilt megosztottként, hogy minden felhasználó kiválaszthassa."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Átirányítási URI",
+      "description": "Adja hozzá ezt az URL-címet az allowed_redirect_uris paraméterhez minden olyan Vault OIDC szerepkörben, amellyel a Termix bejelentkezik."
+    },
+    "legacyCallback": {
+      "label": "Használja a régi átirányítási URI-t",
+      "description": "Továbbra is küldje el a /vault/oidc/callback átirányítási URI-t, amely a 2.9 előtt használt. Kapcsolja ki ezt, amint a Vault szerepkörei engedélyezik az újat."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault aláírói profil"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/id_ID.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault Signer Profile",
+    "selectProfile": "Select a Vault profile...",
+    "hint": "Settings come from the shared profile; you'll sign in to Vault via OIDC when you connect. No secrets are stored.",
+    "docs": "View docs",
+    "sharedProfile": "{{name}} (shared)"
+  },
+  "profiles": {
+    "new": "New profile",
+    "manage": "Manage Vault profiles",
+    "name": "Friendly Name",
+    "vaultAddr": "Vault Address",
+    "namespace": "Namespace",
+    "oidcMount": "OIDC Auth Mount",
+    "oidcRole": "OIDC Role",
+    "sshMount": "SSH Secrets Mount",
+    "sshRole": "SSH Signer Role",
+    "validPrincipals": "Valid Principals",
+    "keyType": "Ephemeral Key Type",
+    "shareWithAll": "Share with all users",
+    "create": "Create profile",
+    "created": "Vault profile created",
+    "saved": "Vault profile saved",
+    "deleted": "Vault profile deleted",
+    "saveFailed": "Failed to save Vault profile",
+    "deleteFailed": "Failed to delete Vault profile",
+    "save": "Save profile",
+    "validationError": "Name, Vault address and SSH signer role are required",
+    "none": "No Vault profiles yet.",
+    "sharedBadge": "dibagikan",
+    "edit": "Edit",
+    "delete": "Delete"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "Vault sign-in required",
+    "description": "A window has opened to sign in to HashiCorp Vault. Complete the sign-in there; this connection will continue automatically.",
+    "failed": "Vault authentication failed. Please try again.",
+    "reopen": "Reopen sign-in window"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/it_IT.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Profilo firmatario Vault",
+    "selectProfile": "Seleziona un profilo Vault...",
+    "hint": "Le impostazioni provengono dal profilo condiviso; effettuerai l'accesso a Vault tramite OIDC quando ti connetti. Nessun segreto è memorizzato.",
+    "docs": "Vedi documenti",
+    "sharedProfile": "{{name}} (condiviso)"
+  },
+  "profiles": {
+    "new": "Nuovo profilo",
+    "manage": "Gestisci profili Vault",
+    "name": "Nome descrittivo",
+    "vaultAddr": "Indirizzo Vault",
+    "namespace": "Namespace",
+    "oidcMount": "Mount di autenticazione OIDC",
+    "oidcRole": "Ruolo OIDC",
+    "sshMount": "Mount dei segreti SSH",
+    "sshRole": "Ruolo firmatario SSH",
+    "validPrincipals": "Principal validi",
+    "keyType": "Tipo di chiave effimera",
+    "shareWithAll": "Condividi con tutti gli utenti",
+    "create": "Crea profilo",
+    "created": "Profilo Vault creato",
+    "saved": "Profilo Vault salvato",
+    "deleted": "Profilo Vault eliminato",
+    "saveFailed": "Salvataggio profilo Vault non riuscito",
+    "deleteFailed": "Eliminazione profilo Vault non riuscita",
+    "save": "Salva profilo",
+    "validationError": "Nome, indirizzo Vault e ruolo di firma SSH sono obbligatori",
+    "none": "Nessun profilo Vault ancora.",
+    "sharedBadge": "condiviso",
+    "edit": "Modifica",
+    "delete": "Elimina"
+  },
+  "hosts": {
+    "filterAuthVault": "Volta"
+  },
+  "dialog": {
+    "title": "Accesso a Vault richiesto",
+    "description": "Una finestra si è aperta per accedere a HashiCorp Vault. Completa l'accesso lì; la connessione continuerà automaticamente.",
+    "failed": "Autenticazione Vault fallita. Riprova.",
+    "reopen": "Riapri la finestra di accesso"
+  },
+  "permissions": {
+    "use": {
+      "title": "Utilizzare la firma SSH di Vault",
+      "description": "Crea profili di firmatari Vault e connettiti agli host che utilizzano Vault."
+    },
+    "share": {
+      "title": "Condividi i profili di Vault",
+      "description": "Contrassegna il profilo di un firmatario di Vault come condiviso in modo che ogni utente possa selezionarlo."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "URI di reindirizzamento",
+      "description": "Aggiungi questo URL a allowed_redirect_uris in ogni ruolo OIDC di Vault con cui Termix effettua l'accesso."
+    },
+    "legacyCallback": {
+      "label": "Utilizzare il vecchio URI di reindirizzamento",
+      "description": "Continua a inviare /vault/oidc/callback, l'URI di reindirizzamento utilizzato prima della versione 2.9. Disattivalo non appena i tuoi ruoli Vault consentiranno il nuovo URI."
+    },
+    "host": {
+      "profileId": {
+        "label": "Profilo del firmatario della cassaforte"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/ja_JP.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault 署名者プロファイル",
+    "selectProfile": "Vault プロファイルを選択...",
+    "hint": "設定は共有プロファイルから取得され、接続時に OIDC で Vault にサインインします。シークレットは保存されません。",
+    "docs": "ドキュメントを見る",
+    "sharedProfile": "{{name}} (共有)"
+  },
+  "profiles": {
+    "new": "新規プロファイル",
+    "manage": "Vault プロファイルの管理",
+    "name": "表示名",
+    "vaultAddr": "Vault アドレス",
+    "namespace": "名前空間",
+    "oidcMount": "OIDC 認証マウント",
+    "oidcRole": "OIDC ロール",
+    "sshMount": "SSH シークレットマウント",
+    "sshRole": "SSH 署名者ロール",
+    "validPrincipals": "有効なプリンシパル",
+    "keyType": "エフェメラルキータイプ",
+    "shareWithAll": "すべてのユーザーと共有",
+    "create": "プロファイルを作成",
+    "created": "Vaultプロファイルが作成されました",
+    "saved": "Vaultプロファイルが保存されました",
+    "deleted": "Vaultプロファイルが削除されました",
+    "saveFailed": "Vaultプロファイルの保存に失敗しました",
+    "deleteFailed": "Vaultプロファイルの削除に失敗しました",
+    "save": "プロファイルを保存",
+    "validationError": "名前、Vaultアドレス、SSH署名ロールは必須です",
+    "none": "まだVaultプロファイルがありません。",
+    "sharedBadge": "共有",
+    "edit": "編集",
+    "delete": "削除"
+  },
+  "hosts": {
+    "filterAuthVault": "金庫"
+  },
+  "dialog": {
+    "title": "Vault サインインが必要です",
+    "description": "HashiCorp Vaultへのサインイン用のウィンドウが開きました。そこでサインインを完了すると、この接続は自動的に続行されます。",
+    "failed": "Vault 認証に失敗しました。もう一度お試しください。",
+    "reopen": "サインインウィンドウを再表示"
+  },
+  "permissions": {
+    "use": {
+      "title": "Vault SSH署名を使用する",
+      "description": "Vault署名者プロファイルを作成し、Vaultを使用しているホストに接続します。"
+    },
+    "share": {
+      "title": "Vault プロファイルを共有する",
+      "description": "Vault署名者プロファイルを共有としてマークすると、すべてのユーザーが選択できるようになります。"
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "リダイレクトURI",
+      "description": "Termixがサインインする各Vault OIDCロールのallowed_redirect_urisに、このURLを追加してください。"
+    },
+    "legacyCallback": {
+      "label": "古いリダイレクトURIを使用する",
+      "description": "バージョン2.9以前に使用されていたリダイレクトURIである/vault/oidc/callbackを送信し続けてください。Vaultロールで新しいURIが許可されたら、この設定を無効にしてください。"
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault署名者プロフィール"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/ko_KR.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault 서명자 프로필",
+    "selectProfile": "Vault 프로필 선택...",
+    "hint": "설정은 공유 프로필에서 가져옵니다. 연결 시 OIDC를 통해 Vault에 로그인하게 됩니다. 비밀은 저장되지 않습니다.",
+    "docs": "문서 보기",
+    "sharedProfile": "{{name}} (공유됨)"
+  },
+  "profiles": {
+    "new": "새 프로필",
+    "manage": "Vault 프로필 관리",
+    "name": "친숙한 이름",
+    "vaultAddr": "Vault 주소",
+    "namespace": "네임스페이스",
+    "oidcMount": "OIDC 인증 마운트",
+    "oidcRole": "OIDC 역할",
+    "sshMount": "SSH 시크릿 마운트",
+    "sshRole": "SSH 서명자 역할",
+    "validPrincipals": "유효한 프린시펄",
+    "keyType": "임시 키 유형",
+    "shareWithAll": "모든 사용자와 공유",
+    "create": "프로필 생성",
+    "created": "Vault 프로필 생성됨",
+    "saved": "Vault 프로필 저장됨",
+    "deleted": "Vault 프로필 삭제됨",
+    "saveFailed": "Vault 프로필 저장 실패",
+    "deleteFailed": "Vault 프로필 삭제 실패",
+    "save": "프로필 저장",
+    "validationError": "이름, Vault 주소 및 SSH 서명자 역할이 필요합니다.",
+    "none": "아직 Vault 프로필이 없습니다.",
+    "sharedBadge": "공유",
+    "edit": "편집",
+    "delete": "삭제"
+  },
+  "hosts": {
+    "filterAuthVault": "둥근 천장"
+  },
+  "dialog": {
+    "title": "Vault 로그인 필요",
+    "description": "HashiCorp Vault 로그인을 위한 창이 열렸습니다. 해당 창에서 로그인을 완료하면 연결이 자동으로 계속됩니다.",
+    "failed": "Vault 인증에 실패했습니다. 다시 시도하세요.",
+    "reopen": "로그인 창 다시 열기"
+  },
+  "permissions": {
+    "use": {
+      "title": "Vault SSH 서명을 사용하세요.",
+      "description": "Vault 서명자 프로필을 생성하고 Vault를 사용하는 호스트에 연결합니다."
+    },
+    "share": {
+      "title": "Share Vault 프로필",
+      "description": "Vault 서명자 프로필을 공유로 표시하면 모든 사용자가 해당 프로필을 선택할 수 있습니다."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "리디렉션 URI",
+      "description": "Termix가 로그인하는 각 Vault OIDC 역할의 allowed_redirect_uris에 이 URL을 추가하세요."
+    },
+    "legacyCallback": {
+      "label": "이전 리디렉션 URI를 사용하세요",
+      "description": "2.9 이전 버전에서 사용했던 리디렉션 URI인 /vault/oidc/callback을 계속 전송하세요. Vault 역할에서 새 URI를 허용하면 이 기능을 비활성화하십시오."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault 서명자 프로필"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/nl_NL.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault Signer Profile",
+    "selectProfile": "Select a Vault profile...",
+    "hint": "Settings come from the shared profile; you'll sign in to Vault via OIDC when you connect. No secrets are stored.",
+    "docs": "View docs",
+    "sharedProfile": "{{name}} (shared)"
+  },
+  "profiles": {
+    "new": "New profile",
+    "manage": "Manage Vault profiles",
+    "name": "Friendly Name",
+    "vaultAddr": "Vault Address",
+    "namespace": "Namespace",
+    "oidcMount": "OIDC Auth Mount",
+    "oidcRole": "OIDC Role",
+    "sshMount": "SSH Secrets Mount",
+    "sshRole": "SSH Signer Role",
+    "validPrincipals": "Valid Principals",
+    "keyType": "Ephemeral Key Type",
+    "shareWithAll": "Share with all users",
+    "create": "Create profile",
+    "created": "Vault profile created",
+    "saved": "Vault profile saved",
+    "deleted": "Vault profile deleted",
+    "saveFailed": "Failed to save Vault profile",
+    "deleteFailed": "Failed to delete Vault profile",
+    "save": "Save profile",
+    "validationError": "Name, Vault address and SSH signer role are required",
+    "none": "No Vault profiles yet.",
+    "sharedBadge": "shared",
+    "edit": "Edit",
+    "delete": "Delete"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "Vault sign-in required",
+    "description": "A window has opened to sign in to HashiCorp Vault. Complete the sign-in there; this connection will continue automatically.",
+    "failed": "Vault authentication failed. Please try again.",
+    "reopen": "Reopen sign-in window"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/no_NO.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault Signer Profile",
+    "selectProfile": "Select a Vault profile...",
+    "hint": "Settings come from the shared profile; you'll sign in to Vault via OIDC when you connect. No secrets are stored.",
+    "docs": "View docs",
+    "sharedProfile": "{{name}} (shared)"
+  },
+  "profiles": {
+    "new": "New profile",
+    "manage": "Manage Vault profiles",
+    "name": "Friendly Name",
+    "vaultAddr": "Vault Address",
+    "namespace": "Namespace",
+    "oidcMount": "OIDC Auth Mount",
+    "oidcRole": "OIDC Role",
+    "sshMount": "SSH Secrets Mount",
+    "sshRole": "SSH Signer Role",
+    "validPrincipals": "Valid Principals",
+    "keyType": "Ephemeral Key Type",
+    "shareWithAll": "Share with all users",
+    "create": "Create profile",
+    "created": "Vault profile created",
+    "saved": "Vault profile saved",
+    "deleted": "Vault profile deleted",
+    "saveFailed": "Failed to save Vault profile",
+    "deleteFailed": "Failed to delete Vault profile",
+    "save": "Save profile",
+    "validationError": "Name, Vault address and SSH signer role are required",
+    "none": "No Vault profiles yet.",
+    "sharedBadge": "shared",
+    "edit": "Rediger",
+    "delete": "Slett"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "Vault sign-in required",
+    "description": "A window has opened to sign in to HashiCorp Vault. Complete the sign-in there; this connection will continue automatically.",
+    "failed": "Vault authentication failed. Please try again.",
+    "reopen": "Reopen sign-in window"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/pl_PL.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Profil podpisujący Vault",
+    "selectProfile": "Wybierz profil Vault...",
+    "hint": "Ustawienia pochodzą z profilu współdzielonego. Po połączeniu zalogujesz się do Vault przez OIDC. Nie są przechowywane żadne sekrety.",
+    "docs": "Zobacz dokumentację",
+    "sharedProfile": "{{name}} (udostępnione)"
+  },
+  "profiles": {
+    "new": "Nowy profil",
+    "manage": "Zarządzaj profilami Vault",
+    "name": "Przyjazna nazwa",
+    "vaultAddr": "Adres Vault",
+    "namespace": "Przestrzeń nazw",
+    "oidcMount": "Mount uwierzytelniania OIDC",
+    "oidcRole": "Rola OIDC",
+    "sshMount": "Mount sekretów SSH",
+    "sshRole": "Rola podpisująca SSH",
+    "validPrincipals": "Dozwoleni użytkownicy (principals)",
+    "keyType": "Typ klucza efemerycznego",
+    "shareWithAll": "Udostępnij wszystkim użytkownikom",
+    "create": "Utwórz profil",
+    "created": "Utworzono profil Vault",
+    "saved": "Zapisano profil Vault",
+    "deleted": "Usunięto profil Vault",
+    "saveFailed": "Nie udało się zapisać profilu Vault",
+    "deleteFailed": "Nie udało się usunąć profilu Vault",
+    "save": "Zapisz profil",
+    "validationError": "Wymagane są nazwa, adres Vault i rola podpisująca SSH",
+    "none": "Brak profili Vault.",
+    "sharedBadge": "współdzielony",
+    "edit": "Edytuj",
+    "delete": "Usuń"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "Wymagane logowanie do Vault",
+    "description": "Otworzyło się okno logowania do HashiCorp Vault. Dokończ logowanie, a połączenie zostanie nawiązane automatycznie.",
+    "failed": "Uwierzytelnienie w Vault nie powiodło się. Spróbuj ponownie.",
+    "reopen": "Otwórz ponownie okno logowania"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/pt_BR.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault Signer Profile",
+    "selectProfile": "Select a Vault profile...",
+    "hint": "Settings come from the shared profile; you'll sign in to Vault via OIDC when you connect. No secrets are stored.",
+    "docs": "Documentação",
+    "sharedProfile": "{{name}} (shared)"
+  },
+  "profiles": {
+    "new": "New profile",
+    "manage": "Manage Vault profiles",
+    "name": "Nome Amigável",
+    "vaultAddr": "Vault Address",
+    "namespace": "Namespace",
+    "oidcMount": "OIDC Auth Mount",
+    "oidcRole": "OIDC Role",
+    "sshMount": "SSH Secrets Mount",
+    "sshRole": "SSH Signer Role",
+    "validPrincipals": "Valid Principals",
+    "keyType": "Ephemeral Key Type",
+    "shareWithAll": "Share with all users",
+    "create": "Create profile",
+    "created": "Vault profile created",
+    "saved": "Vault profile saved",
+    "deleted": "Vault profile deleted",
+    "saveFailed": "Failed to save Vault profile",
+    "deleteFailed": "Failed to delete Vault profile",
+    "save": "Save profile",
+    "validationError": "Name, Vault address and SSH signer role are required",
+    "none": "No Vault profiles yet.",
+    "sharedBadge": "shared",
+    "edit": "Editar",
+    "delete": "Apagar"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "Vault sign-in required",
+    "description": "A window has opened to sign in to HashiCorp Vault. Complete the sign-in there; this connection will continue automatically.",
+    "failed": "Vault authentication failed. Please try again.",
+    "reopen": "Reopen sign-in window"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/pt_PT.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Perfil de assinatura Vault",
+    "selectProfile": "Selecionar um perfil Vault...",
+    "hint": "As definições provêm do perfil partilhado; ao ligar, iniciará sessão no Vault via OIDC. Nenhum segredo é armazenado.",
+    "docs": "Ver docs",
+    "sharedProfile": "{{name}} (shared)"
+  },
+  "profiles": {
+    "new": "Novo perfil",
+    "manage": "Gerir perfis Vault",
+    "name": "Nome Amigável",
+    "vaultAddr": "Endereço Vault",
+    "namespace": "Namespace",
+    "oidcMount": "Mount de autenticação OIDC",
+    "oidcRole": "Função OIDC",
+    "sshMount": "Mount de segredos SSH",
+    "sshRole": "Função de assinatura SSH",
+    "validPrincipals": "Principais válidos",
+    "keyType": "Tipo de chave efémera",
+    "shareWithAll": "Partilhar com todos os utilizadores",
+    "create": "Criar perfil",
+    "created": "Perfil Vault criado",
+    "saved": "Perfil Vault guardado",
+    "deleted": "Perfil Vault eliminado",
+    "saveFailed": "Falha ao guardar perfil Vault",
+    "deleteFailed": "Falha ao eliminar perfil Vault",
+    "save": "Guardar perfil",
+    "validationError": "Nome, endereço Vault e função de signatário SSH são obrigatórios",
+    "none": "Ainda sem perfis Vault.",
+    "sharedBadge": "partilhado",
+    "edit": "Editar",
+    "delete": "Eliminar"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "Início de sessão no Vault necessário",
+    "description": "Foi aberta uma janela para iniciar sessão no HashiCorp Vault. Conclua o início de sessão aí; esta ligação continuará automaticamente.",
+    "failed": "A autenticação no Vault falhou. Tente novamente.",
+    "reopen": "Reabrir janela de início de sessão"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/ro_RO.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Profilul semnatarului din seif",
+    "selectProfile": "Selectați un profil Vault...",
+    "hint": "Setările provin din profilul partajat; te vei conecta la Vault prin OIDC când te conectezi. Nu sunt stocate secrete.",
+    "docs": "Vizualizați documentele",
+    "sharedProfile": "{{name}} (partajat)"
+  },
+  "profiles": {
+    "new": "Profil nou",
+    "manage": "Gestionați profilurile din seif",
+    "name": "Nume prietenos",
+    "vaultAddr": "Adresă seif",
+    "namespace": "Spațiu de nume",
+    "oidcMount": "Montare autentificare OIDC",
+    "oidcRole": "Rolul OIDC",
+    "sshMount": "Secretele SSH Mount",
+    "sshRole": "Rolul semnatarului SSH",
+    "validPrincipals": "Principali validi",
+    "keyType": "Tip de cheie efemeră",
+    "shareWithAll": "Partajați cu toți utilizatorii",
+    "create": "Creați un profil",
+    "created": "Profilul seifului a fost creat",
+    "saved": "Profilul seifului a fost salvat",
+    "deleted": "Profilul seifului a fost șters",
+    "saveFailed": "Nu s-a putut salva profilul din Seif",
+    "deleteFailed": "Nu s-a putut șterge profilul Vault",
+    "save": "Salvați profilul",
+    "validationError": "Numele, adresa seifului și rolul semnatarului SSH sunt obligatorii.",
+    "none": "Încă nu există profiluri Vault.",
+    "sharedBadge": "partajat",
+    "edit": "Edita",
+    "delete": "Şterge"
+  },
+  "hosts": {
+    "filterAuthVault": "Seif"
+  },
+  "dialog": {
+    "title": "Este necesară conectarea la seif",
+    "description": "S-a deschis o fereastră pentru a vă conecta la HashiCorp Vault. Finalizați conectarea acolo; această conexiune va continua automat.",
+    "failed": "Autentificarea în seif a eșuat. Vă rugăm să încercați din nou.",
+    "reopen": "Redeschideți fereastra de conectare"
+  },
+  "permissions": {
+    "use": {
+      "title": "Folosește semnarea SSH în Vault",
+      "description": "Creați profiluri de semnatar Vault și conectați-vă la gazde care utilizează Vault."
+    },
+    "share": {
+      "title": "Partajați profiluri Vault",
+      "description": "Marcați un profil de semnatar Vault ca partajat, astfel încât fiecare utilizator să îl poată alege."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "URI de redirecționare",
+      "description": "Adăugați această adresă URL la allowed_redirect_uris în fiecare rol OIDC din Vault cu care se conectează Termix."
+    },
+    "legacyCallback": {
+      "label": "Folosește vechiul URI de redirecționare",
+      "description": "Continuă să trimiți /vault/oidc/callback, URI-ul de redirecționare folosit înainte de versiunea 2.9. Dezactivează această opțiune odată ce rolurile din Vault îl permit pe cel nou."
+    },
+    "host": {
+      "profileId": {
+        "label": "Profilul semnatarului din seif"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/ru_RU.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Профиль подписчика Vault",
+    "selectProfile": "Выберите профиль Vault...",
+    "hint": "Настройки берутся из общего профиля; при подключении вы войдёте в Vault через OIDC. Секреты не хранятся.",
+    "docs": "Документация",
+    "sharedProfile": "{{name}} (shared)"
+  },
+  "profiles": {
+    "new": "Новый профиль",
+    "manage": "Управление профилями Vault",
+    "name": "Дружественное имя",
+    "vaultAddr": "Адрес Vault",
+    "namespace": "Пространство имён",
+    "oidcMount": "Монтирование аутентификации OIDC",
+    "oidcRole": "Роль OIDC",
+    "sshMount": "Монтирование секретов SSH",
+    "sshRole": "Роль подписчика SSH",
+    "validPrincipals": "Допустимые принципалы",
+    "keyType": "Тип эфемерного ключа",
+    "shareWithAll": "Общий доступ для всех пользователей",
+    "create": "Создать профиль",
+    "created": "Профиль Vault создан",
+    "saved": "Профиль Vault сохранён",
+    "deleted": "Профиль Vault удалён",
+    "saveFailed": "Не удалось сохранить профиль Vault",
+    "deleteFailed": "Не удалось удалить профиль Vault",
+    "save": "Сохранить профиль",
+    "validationError": "Требуются имя, адрес Vault и роль SSH подписанта",
+    "none": "Пока нет профилей Vault.",
+    "sharedBadge": "общий",
+    "edit": "Редактировать",
+    "delete": "Удалить"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "Требуется вход в Vault",
+    "description": "Открыто окно для входа в HashiCorp Vault. Завершите вход там; подключение продолжится автоматически.",
+    "failed": "Аутентификация Vault не удалась. Попробуйте снова.",
+    "reopen": "Повторно открыть окно входа"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/sr_SP.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault Signer Profile",
+    "selectProfile": "Select a Vault profile...",
+    "hint": "Settings come from the shared profile; you'll sign in to Vault via OIDC when you connect. No secrets are stored.",
+    "docs": "View docs",
+    "sharedProfile": "{{name}} (shared)"
+  },
+  "profiles": {
+    "new": "New profile",
+    "manage": "Manage Vault profiles",
+    "name": "Friendly Name",
+    "vaultAddr": "Vault Address",
+    "namespace": "Namespace",
+    "oidcMount": "OIDC Auth Mount",
+    "oidcRole": "OIDC Role",
+    "sshMount": "SSH Secrets Mount",
+    "sshRole": "SSH Signer Role",
+    "validPrincipals": "Valid Principals",
+    "keyType": "Ephemeral Key Type",
+    "shareWithAll": "Share with all users",
+    "create": "Create profile",
+    "created": "Vault profile created",
+    "saved": "Vault profile saved",
+    "deleted": "Vault profile deleted",
+    "saveFailed": "Failed to save Vault profile",
+    "deleteFailed": "Failed to delete Vault profile",
+    "save": "Save profile",
+    "validationError": "Name, Vault address and SSH signer role are required",
+    "none": "No Vault profiles yet.",
+    "sharedBadge": "shared",
+    "edit": "Edit",
+    "delete": "Delete"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "Vault sign-in required",
+    "description": "A window has opened to sign in to HashiCorp Vault. Complete the sign-in there; this connection will continue automatically.",
+    "failed": "Vault authentication failed. Please try again.",
+    "reopen": "Reopen sign-in window"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/sv_SE.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault Signer Profile",
+    "selectProfile": "Select a Vault profile...",
+    "hint": "Settings come from the shared profile; you'll sign in to Vault via OIDC when you connect. No secrets are stored.",
+    "docs": "View docs",
+    "sharedProfile": "{{name}} (shared)"
+  },
+  "profiles": {
+    "new": "New profile",
+    "manage": "Manage Vault profiles",
+    "name": "Friendly Name",
+    "vaultAddr": "Vault Address",
+    "namespace": "Namespace",
+    "oidcMount": "OIDC Auth Mount",
+    "oidcRole": "OIDC Role",
+    "sshMount": "SSH Secrets Mount",
+    "sshRole": "SSH Signer Role",
+    "validPrincipals": "Valid Principals",
+    "keyType": "Ephemeral Key Type",
+    "shareWithAll": "Share with all users",
+    "create": "Create profile",
+    "created": "Vault profile created",
+    "saved": "Vault profile saved",
+    "deleted": "Vault profile deleted",
+    "saveFailed": "Failed to save Vault profile",
+    "deleteFailed": "Failed to delete Vault profile",
+    "save": "Save profile",
+    "validationError": "Name, Vault address and SSH signer role are required",
+    "none": "No Vault profiles yet.",
+    "sharedBadge": "shared",
+    "edit": "Edit",
+    "delete": "Delete"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "Vault sign-in required",
+    "description": "A window has opened to sign in to HashiCorp Vault. Complete the sign-in there; this connection will continue automatically.",
+    "failed": "Vault authentication failed. Please try again.",
+    "reopen": "Reopen sign-in window"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/th_TH.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault Signer Profile",
+    "selectProfile": "Select a Vault profile...",
+    "hint": "Settings come from the shared profile; you'll sign in to Vault via OIDC when you connect. No secrets are stored.",
+    "docs": "View docs",
+    "sharedProfile": "{{name}} (shared)"
+  },
+  "profiles": {
+    "new": "New profile",
+    "manage": "Manage Vault profiles",
+    "name": "Friendly Name",
+    "vaultAddr": "Vault Address",
+    "namespace": "Namespace",
+    "oidcMount": "OIDC Auth Mount",
+    "oidcRole": "OIDC Role",
+    "sshMount": "SSH Secrets Mount",
+    "sshRole": "SSH Signer Role",
+    "validPrincipals": "Valid Principals",
+    "keyType": "Ephemeral Key Type",
+    "shareWithAll": "Share with all users",
+    "create": "Create profile",
+    "created": "Vault profile created",
+    "saved": "Vault profile saved",
+    "deleted": "Vault profile deleted",
+    "saveFailed": "Failed to save Vault profile",
+    "deleteFailed": "Failed to delete Vault profile",
+    "save": "Save profile",
+    "validationError": "Name, Vault address and SSH signer role are required",
+    "none": "No Vault profiles yet.",
+    "sharedBadge": "shared",
+    "edit": "Edit",
+    "delete": "Delete"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "Vault sign-in required",
+    "description": "A window has opened to sign in to HashiCorp Vault. Complete the sign-in there; this connection will continue automatically.",
+    "failed": "Vault authentication failed. Please try again.",
+    "reopen": "Reopen sign-in window"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/tr_TR.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault İmzalayıcı Profili",
+    "selectProfile": "Bir Vault profili seçin...",
+    "hint": "Ayarlar paylaşılan profilden gelir; bağlandığınızda OIDC ile Vault'ta oturum açarsınız. Hiçbir gizli bilgi saklanmaz.",
+    "docs": "Belgelere bak",
+    "sharedProfile": "{{name}} (shared)"
+  },
+  "profiles": {
+    "new": "Yeni profil",
+    "manage": "Vault Profillerini Yönet",
+    "name": "Gösterim Adı",
+    "vaultAddr": "Vault Adresi",
+    "namespace": "Ad Alanı",
+    "oidcMount": "OIDC Kimlik Doğrulama Bağlama",
+    "oidcRole": "OIDC Rolü",
+    "sshMount": "SSH Gizli Dizin Bağlama",
+    "sshRole": "SSH İmzalayıcı Rolü",
+    "validPrincipals": "Geçerli Asıllar",
+    "keyType": "Geçici Anahtar Türü",
+    "shareWithAll": "Tüm Kullanıcılarla Paylaş",
+    "create": "Profil oluştur",
+    "created": "Vault profili oluşturuldu",
+    "saved": "Vault profili kaydedildi",
+    "deleted": "Vault profili silindi",
+    "saveFailed": "Vault profili kaydedilemedi",
+    "deleteFailed": "Vault profili silinemedi",
+    "save": "Profili kaydet",
+    "validationError": "Ad, Vault adresi ve SSH imzalama rolü gereklidir",
+    "none": "Henüz Vault profili yok.",
+    "sharedBadge": "paylaşılan",
+    "edit": "Düzenle",
+    "delete": "Sil"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "Vault Oturum Açması Gerekli",
+    "description": "HashiCorp Vault'ta oturum açmak için bir pencere açıldı. Orada oturum açmayı tamamlayın; bu bağlantı otomatik olarak devam edecek.",
+    "failed": "Vault kimlik doğrulaması başarısız oldu. Lütfen tekrar deneyin.",
+    "reopen": "Oturum açma penceresini yeniden aç"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/uk_UA.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault Signer Profile",
+    "selectProfile": "Select a Vault profile...",
+    "hint": "Settings come from the shared profile; you'll sign in to Vault via OIDC when you connect. No secrets are stored.",
+    "docs": "View docs",
+    "sharedProfile": "{{name}} (shared)"
+  },
+  "profiles": {
+    "new": "New profile",
+    "manage": "Manage Vault profiles",
+    "name": "Friendly Name",
+    "vaultAddr": "Vault Address",
+    "namespace": "Namespace",
+    "oidcMount": "OIDC Auth Mount",
+    "oidcRole": "OIDC Role",
+    "sshMount": "SSH Secrets Mount",
+    "sshRole": "SSH Signer Role",
+    "validPrincipals": "Valid Principals",
+    "keyType": "Ephemeral Key Type",
+    "shareWithAll": "Share with all users",
+    "create": "Create profile",
+    "created": "Vault profile created",
+    "saved": "Vault profile saved",
+    "deleted": "Vault profile deleted",
+    "saveFailed": "Failed to save Vault profile",
+    "deleteFailed": "Failed to delete Vault profile",
+    "save": "Save profile",
+    "validationError": "Name, Vault address and SSH signer role are required",
+    "none": "No Vault profiles yet.",
+    "sharedBadge": "shared",
+    "edit": "Edit",
+    "delete": "Delete"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "Vault sign-in required",
+    "description": "A window has opened to sign in to HashiCorp Vault. Complete the sign-in there; this connection will continue automatically.",
+    "failed": "Vault authentication failed. Please try again.",
+    "reopen": "Reopen sign-in window"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/vi_VN.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Hồ sơ người ký Vault",
+    "selectProfile": "Chọn hồ sơ Vault...",
+    "hint": "Cài đặt từ hồ sơ dùng chung; bạn sẽ đăng nhập Vault qua OIDC khi kết nối. Không lưu bí mật.",
+    "docs": "Xem tài liệu",
+    "sharedProfile": "{{name}} (shared)"
+  },
+  "profiles": {
+    "new": "Hồ sơ mới",
+    "manage": "Quản lý hồ sơ Vault",
+    "name": "Tên hiển thị",
+    "vaultAddr": "Địa chỉ Vault",
+    "namespace": "Không gian tên",
+    "oidcMount": "Điểm gắn xác thực OIDC",
+    "oidcRole": "Vai trò OIDC",
+    "sshMount": "Điểm gắn bí mật SSH",
+    "sshRole": "Vai trò ký SSH",
+    "validPrincipals": "Các danh tính hợp lệ",
+    "keyType": "Loại khóa tạm thời",
+    "shareWithAll": "Chia sẻ với tất cả người dùng",
+    "create": "Tạo hồ sơ",
+    "created": "Đã tạo hồ sơ Vault",
+    "saved": "Đã lưu hồ sơ Vault",
+    "deleted": "Đã xóa hồ sơ Vault",
+    "saveFailed": "Không thể lưu hồ sơ Vault",
+    "deleteFailed": "Không thể xóa hồ sơ Vault",
+    "save": "Lưu hồ sơ",
+    "validationError": "Tên, địa chỉ Vault và vai trò ký SSH là bắt buộc",
+    "none": "Chưa có hồ sơ Vault nào.",
+    "sharedBadge": "được chia sẻ",
+    "edit": "Chỉnh sửa",
+    "delete": "Xóa"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "Yêu cầu đăng nhập Vault",
+    "description": "Một cửa sổ đã mở để đăng nhập vào HashiCorp Vault. Hoàn tất đăng nhập ở đó; kết nối này sẽ tự động tiếp tục.",
+    "failed": "Xác thực Vault thất bại. Vui lòng thử lại.",
+    "reopen": "Mở lại cửa sổ đăng nhập"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/zh_CN.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault 签名者配置文件",
+    "selectProfile": "选择 Vault 配置文件...",
+    "hint": "设置来自共享配置文件；连接时将使用 OIDC 登录 Vault。不会存储任何机密。",
+    "docs": "查看文档",
+    "sharedProfile": "{{name}}（共享）"
+  },
+  "profiles": {
+    "new": "新建配置文件",
+    "manage": "管理 Vault 配置文件",
+    "name": "友好名称",
+    "vaultAddr": "Vault 地址",
+    "namespace": "命名空间",
+    "oidcMount": "OIDC 认证挂载点",
+    "oidcRole": "OIDC 角色",
+    "sshMount": "SSH 机密挂载点",
+    "sshRole": "SSH 签名者角色",
+    "validPrincipals": "有效主体",
+    "keyType": "临时密钥类型",
+    "shareWithAll": "与所有用户共享",
+    "create": "创建配置文件",
+    "created": "Vault 配置文件已创建",
+    "saved": "Vault 配置文件已保存",
+    "deleted": "Vault 配置文件已删除",
+    "saveFailed": "保存 Vault 配置文件失败",
+    "deleteFailed": "删除 Vault 配置文件失败",
+    "save": "保存配置文件",
+    "validationError": "名称、Vault 地址和 SSH 签名者角色为必填项",
+    "none": "暂无 Vault 配置文件。",
+    "sharedBadge": "已共享",
+    "edit": "编辑",
+    "delete": "删除"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "需要 Vault 登录",
+    "description": "已打开窗口以登录 HashiCorp Vault。在该处完成登录；此连接将自动继续。",
+    "failed": "Vault 认证失败，请重试。",
+    "reopen": "重新打开登录窗口"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}

plugins/vault/locales/translated/zh_TW.json

@@ -0,0 +1,69 @@
+{
+  "editor": {
+    "profile": "Vault 簽署者設定檔",
+    "selectProfile": "選取 Vault 設定檔...",
+    "hint": "設定來自共用設定檔；連線時您將透過 OIDC 登入 Vault。不會儲存任何機密。",
+    "docs": "檢視文件",
+    "sharedProfile": "{{name}} (shared)"
+  },
+  "profiles": {
+    "new": "新增設定檔",
+    "manage": "管理 Vault 設定檔",
+    "name": "易記名稱",
+    "vaultAddr": "Vault 位址",
+    "namespace": "命名空間",
+    "oidcMount": "OIDC 驗證掛載",
+    "oidcRole": "OIDC 角色",
+    "sshMount": "SSH 機密掛載",
+    "sshRole": "SSH 簽署者角色",
+    "validPrincipals": "有效主體",
+    "keyType": "暫時金鑰類型",
+    "shareWithAll": "與所有使用者共用",
+    "create": "建立設定檔",
+    "created": "Vault 設定檔已建立",
+    "saved": "Vault 設定檔已儲存",
+    "deleted": "Vault 設定檔已刪除",
+    "saveFailed": "無法儲存 Vault 設定檔",
+    "deleteFailed": "無法刪除 Vault 設定檔",
+    "save": "儲存設定檔",
+    "validationError": "名稱、Vault 位址和 SSH 簽署者角色為必填",
+    "none": "尚無 Vault 設定檔。",
+    "sharedBadge": "已共用",
+    "edit": "編輯",
+    "delete": "刪除"
+  },
+  "hosts": {
+    "filterAuthVault": "Vault"
+  },
+  "dialog": {
+    "title": "需要 Vault 登入",
+    "description": "已開啟視窗以登入 HashiCorp Vault。在該處完成登入；此連線將自動繼續。",
+    "failed": "Vault 驗證失敗。請再試一次。",
+    "reopen": "重新開啟登入視窗"
+  },
+  "permissions": {
+    "use": {
+      "title": "Use Vault SSH signing",
+      "description": "Create Vault signer profiles and connect to hosts that use Vault."
+    },
+    "share": {
+      "title": "Share Vault profiles",
+      "description": "Mark a Vault signer profile as shared so every user can pick it."
+    }
+  },
+  "settings": {
+    "redirectUri": {
+      "label": "Redirect URI",
+      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
+    },
+    "legacyCallback": {
+      "label": "Use the old redirect URI",
+      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
+    },
+    "host": {
+      "profileId": {
+        "label": "Vault signer profile"
+      }
+    }
+  }
+}