import type { Locale, TranslationTree } from '../i18n';

/**
 * InputDetectionPage translations.
 * Covers: 14 defense toggles, user risk flags, tool result flags,
 * protected resources, alert log tab.
 */
export const inputDetectionTranslations: Record<Locale, TranslationTree> = {
  en: {
    title: 'Intelligent Security Protection / Secplane Aegis',
    eyebrow: 'clawaegisex · secplane',
    heading: 'Intelligent Security Protection',
    description: 'Unified management of ClawAegisEx 14 defense modules, {flagCount} built-in flags, protected resource lists, and alert streams from Pods and the platform. After rule modifications, click "Dispatch to Instances" to hot-reload all running OpenClaw instances.',
    dispatchButton: 'Dispatch to Instances…',
    dispatching: 'Dispatching…',
    dispatchComplete: 'Dispatch complete',
    dispatchHint: 'Compile current ClawAegisEx rules into user_config and push to selected OpenClaw instances via install_skill.',
    tab: {
      defenses: 'Defense Toggles',
      userRisk: 'Input Risk Flags',
      toolResult: 'Tool Result Detection',
      protected: 'Protected Resources',
      alerts: 'Alert Log',
    },
    tabHelp: {
      defenses: 'Master switches and runtime modes for 14 ClawAegisEx defense modules',
      userRisk: 'Three-state control for userRiskScan built-in flags (enabled / observe / off)',
      toolResult: 'Three-state control for toolResultScan built-in flags',
      protected: 'Runtime-protected paths / skills / plugins list',
      alerts: 'Unified alert stream from ClawAegisEx, platform, and other defense endpoints',
    },
    mode: {
      enforce: 'Enforce · Mandatory',
      observe: 'Observe · Observation only',
      off: 'Off · Disabled',
    },
    defenses: {
      explainer: 'Each toggle corresponds to a built-in ClawAegisEx defense module. After modification, click "Dispatch to Instances" above to hot-reload — no gateway restart needed.',
      enforceHelp: 'Enforce',
      observeHelp: 'Observe',
      offHelp: 'Off',
      modeSupporting: 'Supports Observation Mode · 8',
      modeSupportingSub: 'These defenses can switch between enforce / observe intensity',
      booleanOnly: 'Toggle Only · 6',
      booleanOnlySub: 'These defenses have no observe intermediate state — either on or off',
      noModeSupport: 'This defense does not support the mode field',
    },
    flag: {
      userRiskTitle: 'userRiskScan Built-in Flags',
      userRiskExplainer: 'Each flag has three states: enabled+enforce (default, full blocking + LLM prompt hardening) / enabled+observe (log alerts only, no LLM impact) / off (completely disabled).',
      toolResultTitle: 'toolResultScan Built-in Flags',
      toolResultExplainer: 'Flags matched in toolResult / third-party web content / encoded payloads. Three-state semantics same as userRiskScan.',
      enabled: 'Enabled',
      mode: 'Mode (tri-state)',
      severity: 'Severity',
      disabled: 'Disabled',
      ruleCount: '{count} {kind} rules currently in the database.',
    },
    protected: {
      pathTitle: 'Protected Paths (protectedPaths)',
      skillTitle: 'Protected Skills',
      pluginTitle: 'Protected Plugins',
      activeCount: '{count} active',
      addButton: 'Add',
      removeButton: 'Remove',
      empty: 'No items configured.',
    },
    alerts: {
      source: 'Source',
      ruleId: 'Rule ID',
      refresh: 'Refresh',
      allSources: 'All',
      time: 'Time',
      rule: 'Rule / Defense',
      severityCol: 'Severity',
      action: 'Action',
      evidence: 'Evidence',
      noAlerts: 'No alert events',
    },
    dispatchResult: {
      revision: 'revision:',
      sha: 'sha:',
      instance: 'Instance #{id}',
      autoReload: 'ClawAegisEx will auto hot-reload the new user_config within ≤1s (no OpenClaw restart needed).',
    },
    loading: 'Loading…',
    // Defense names
    defense: {
      selfProtection: 'Protected Path Access Blocking',
      selfProtectionHelp: 'Block read/write/delete/search requests to protectedPaths, protectedSkills, and ClawAegisEx source directories.',
      commandBlock: 'High-Risk Command Blocking',
      commandBlockHelp: 'Block obviously dangerous shell patterns like rm -rf /, curl | sh, shutdown.',
      encodingGuard: 'Encoding/Obfuscation Payload Detection',
      encodingGuardHelp: 'Detect dangerous commands or exfiltration logic hidden in bounded base64/base32/hex/url encoded payloads.',
      scriptProvenanceGuard: 'Script Provenance Tracking',
      scriptProvenanceGuardHelp: 'Track newly landed scripts in the current round, blocking subsequent execution when high-risk commands or exfiltration signals are found.',
      memoryGuard: 'Memory Write Review',
      memoryGuardHelp: 'Reject suspicious or oversized writes to memory_store / MEMORY.md / SOUL.md / memory/.',
      userRiskScan: 'User Input Risk Scan',
      userRiskScanHelp: 'Detect jailbreak, key exfiltration, plugin tampering user requests in message_received.',
      skillScan: 'Skill Startup Scan',
      skillScanHelp: 'Run lightweight local skill scan on ~/.openclaw/skills and workspace/skills.',
      toolResultScan: 'Tool Result Risk Scan',
      toolResultScanHelp: 'Scan toolResult for prompt injection, key theft, exfiltration patterns.',
      outputRedaction: 'Sensitive Output Redaction',
      outputRedactionHelp: 'Mask API keys, tokens, and other sensitive values before assistant output is sent/written.',
      promptGuard: 'Prompt Security Reminder Injection',
      promptGuardHelp: 'Inject static/one-time security reminders in before_prompt_build.',
      loopGuard: 'Tool Call Loop Circuit Breaker',
      loopGuardHelp: 'Circuit break when same high-risk tool call with same parameters exceeds budget within a run.',
      exfiltrationGuard: 'Exfiltration Link Detection',
      exfiltrationGuardHelp: 'Track tool call chain in the current run, identify SSRF / data exfiltration and block outbound.',
      toolCallEnforcement: 'Tool Call Enforcement',
      toolCallEnforcementHelp: 'Inject prompt requiring destructive operations to execute through standard tool calls.',
      dispatchGuard: 'Message Dispatch Interception',
      dispatchGuardHelp: 'Intercept dangerous user/LLM messages targeting protected resources before agent processing.',
    },
    // User Risk Flags
    userRiskFlag: {
      'jailbreak-bypass': 'Jailbreak/Guardian Bypass',
      'system-prompt-exfiltration': 'System Prompt Exfiltration',
      'disable-plugin': 'Disable Security Plugin',
      'plugin-path-access': 'Access Plugin Source Path',
      'dangerous-execution-request': 'Dangerous Execution Request',
      'sensitive-secret-request': 'Sensitive Credential Request',
      'third-party-as-instructions': 'Third-Party Content as Instructions',
    },
    // Tool Result Flags
    toolResultFlag: {
      'role-takeover': 'Role Takeover',
      'policy-bypass': 'Policy Bypass',
      'tool-induction': 'Tool Induction',
      'secret-request': 'Secret Theft Request',
      'exfiltration-request': 'Data Exfiltration Request',
      'remote-script-bootstrap': 'Remote Script Bootstrap',
      'remote-binary-bootstrap': 'Remote Binary Bootstrap',
      'system-prompt-leak': 'System Prompt Leak',
      'approval-bypass': 'Approval Flow Bypass',
      'disable-claw-aegis': 'Disable ClawAegisEx',
      'high-risk-command': 'High-Risk Command',
      'credential-exfiltration': 'Credential Exfiltration',
    },
  },
  zh: {
    title: '智能安全防护 / Secplane Aegis',
    eyebrow: 'clawaegisex · secplane',
    heading: '智能安全防护',
    description: '统一管理 ClawAegisEx 14 个防御模块、{flagCount} 个内置 flag、受保护资源列表，以及来自 Pod 与平台的告警流。规则修改后点击右上"下发到实例"即可热重载至所有运行中的 OpenClaw 实例。',
    dispatchButton: '下发到实例…',
    dispatching: '下发中…',
    dispatchComplete: '下发完成',
    dispatchHint: '把当前 ClawAegisEx 规则编译为 user_config 并通过 install_skill 推送到选中的 OpenClaw 实例。',
    tab: {
      defenses: '防御开关',
      userRisk: '输入风险标记',
      toolResult: '工具结果检测',
      protected: '受保护资源',
      alerts: '告警日志',
    },
    tabHelp: {
      defenses: '14 个 ClawAegisEx 防御模块的总开关与运行模式',
      userRisk: 'userRiskScan 内置 flag 的三态控制（启用 / observe / 关闭）',
      toolResult: 'toolResultScan 内置 flag 的三态控制',
      protected: '运行时受保护的 paths / skills / plugins 列表',
      alerts: '来自 ClawAegisEx、平台与其他防御端的统一告警流',
    },
    mode: {
      enforce: 'Enforce · 强制',
      observe: 'Observe · 仅观测',
      off: 'Off · 关闭',
    },
    defenses: {
      explainer: '每个开关对应一个 ClawAegisEx 内置防御模块。修改后点上方"下发到实例"即可热重载 — 无需重启 gateway。',
      enforceHelp: 'Enforce',
      observeHelp: 'Observe',
      offHelp: 'Off',
      modeSupporting: '支持观测模式 · 8 个',
      modeSupportingSub: '这些防御可在 enforce / observe 两种强度之间切换',
      booleanOnly: '仅开关 · 6 个',
      booleanOnlySub: '这些防御没有 observe 中间态 — 要么开启，要么关闭',
      noModeSupport: '此防御不支持 mode 字段',
    },
    flag: {
      userRiskTitle: 'userRiskScan 内置 flag',
      userRiskExplainer: '每条 flag 三态：启用+enforce（默认，全力拦截+提示词加固）/ 启用+observe（仅记录告警，不影响 LLM）/ 关闭（完全屏蔽）。',
      toolResultTitle: 'toolResultScan 内置 flag',
      toolResultExplainer: '在 toolResult / 第三方网页内容 / 编码 payload 中匹配的 flag。三态语义同 userRiskScan。',
      enabled: '启用',
      mode: '模式（三态）',
      severity: '严重度',
      disabled: '已禁用',
      ruleCount: '当前共 {count} 条 {kind} 规则在数据库中。',
    },
    protected: {
      pathTitle: '受保护路径 (protectedPaths)',
      skillTitle: '受保护 Skills',
      pluginTitle: '受保护 Plugins',
      activeCount: '{count} 项生效',
      addButton: '添加',
      removeButton: '移除',
      empty: '无配置项。',
    },
    alerts: {
      source: '来源',
      ruleId: '规则 ID',
      refresh: '刷新',
      allSources: '全部',
      time: '时间',
      rule: '规则 / Defense',
      severityCol: '严重度',
      action: '动作',
      evidence: '证据',
      noAlerts: '暂无告警事件',
    },
    dispatchResult: {
      revision: 'revision:',
      sha: 'sha:',
      instance: '实例 #{id}',
      autoReload: 'ClawAegisEx 会在 ≤1s 自动 hot-reload 新 user_config（无需重启 OpenClaw）。',
    },
    loading: '加载中…',
    defense: {
      selfProtection: '受保护路径访问拦截',
      selfProtectionHelp: '拦截读取/写入/删除/搜索 protectedPaths、protectedSkills 与 ClawAegisEx 源码目录的请求。',
      commandBlock: '高危命令拦截',
      commandBlockHelp: '阻止 rm -rf /、curl | sh、shutdown 等明显高危 shell 模式。',
      encodingGuard: '编码/混淆载荷检测',
      encodingGuardHelp: '检测有界的 base64/base32/hex/url 编码载荷里隐藏的危险命令或外发逻辑。',
      scriptProvenanceGuard: '脚本来源追踪',
      scriptProvenanceGuardHelp: '跟踪本轮新落地的脚本，发现含高危命令或外发信号时阻止后续执行。',
      memoryGuard: '记忆写入审查',
      memoryGuardHelp: '拒绝针对 memory_store / MEMORY.md / SOUL.md / memory/ 的可疑或过大写入。',
      userRiskScan: '用户输入风险扫描',
      userRiskScanHelp: '在 message_received 检测越狱、密钥外发、插件篡改类用户请求。',
      skillScan: 'Skill 启动扫描',
      skillScanHelp: '在 ~/.openclaw/skills 与 workspace/skills 上跑轻量本地 skill 扫描。',
      toolResultScan: '工具结果风险扫描',
      toolResultScanHelp: '扫描 toolResult 中的提示词注入、密钥窃取、外发等 pattern。',
      outputRedaction: '敏感输出脱敏',
      outputRedactionHelp: '在 assistant 输出发送/落盘前屏蔽 API key、token 等敏感值。',
      promptGuard: '提示词安全提醒注入',
      promptGuardHelp: '在 before_prompt_build 注入静态/一次性安全提醒。',
      loopGuard: '工具调用循环熔断',
      loopGuardHelp: '同一 run 内同参数高危 tool call 超过预算时熔断。',
      exfiltrationGuard: '外发链路检测',
      exfiltrationGuardHelp: '跟踪本 run 的工具调用链，识别 SSRF / 数据外发拦截出站。',
      toolCallEnforcement: '工具调用强约束',
      toolCallEnforcementHelp: '注入提示词，要求破坏性操作必须通过标准 tool call 执行。',
      dispatchGuard: '消息分发拦截',
      dispatchGuardHelp: '在 agent 处理前拦截针对受保护资源的危险用户/LLM 消息。',
    },
    userRiskFlag: {
      'jailbreak-bypass': '越狱/绕过守护',
      'system-prompt-exfiltration': '系统提示词窃取',
      'disable-plugin': '禁用安全插件',
      'plugin-path-access': '访问插件源码路径',
      'dangerous-execution-request': '高危执行请求',
      'sensitive-secret-request': '敏感凭据请求',
      'third-party-as-instructions': '第三方内容当指令',
    },
    toolResultFlag: {
      'role-takeover': '角色覆盖',
      'policy-bypass': '策略绕过',
      'tool-induction': '工具诱导',
      'secret-request': '密钥窃取请求',
      'exfiltration-request': '数据外发请求',
      'remote-script-bootstrap': '远程脚本引导',
      'remote-binary-bootstrap': '远程二进制引导',
      'system-prompt-leak': '系统提示泄漏',
      'approval-bypass': '审批流程绕过',
      'disable-claw-aegis': '禁用 ClawAegisEx',
      'high-risk-command': '高危命令',
      'credential-exfiltration': '凭据外发',
    },
  },
  ja: {
    title: 'インテリジェントセキュリティ保護 / Secplane Aegis',
    eyebrow: 'clawaegisex · secplane',
    heading: 'インテリジェントセキュリティ保護',
    description: 'ClawAegisEx 14の防御モジュール、{flagCount}個の内蔵フラグ、保護リソースリスト、およびPodとプラットフォームからのアラートストリームを統合管理。ルール変更後、「インスタンスに配信」をクリックして実行中のOpenClawインスタンスにホットリロード。',
    dispatchButton: 'インスタンスに配信…',
    dispatching: '配信中…',
    dispatchComplete: '配信完了',
    dispatchHint: '現在のClawAegisExルールをuser_configにコンパイルし、install_skillで選択したOpenClawインスタンスにプッシュ。',
    tab: { defenses: '防御スイッチ', userRisk: '入力リスクフラグ', toolResult: 'ツール結果検出', protected: '保護リソース', alerts: 'アラートログ' },
    tabHelp: { defenses: '14のClawAegisEx防御モジュールのマスタースイッチとランタイムモード', userRisk: 'userRiskScan内蔵フラグの三状態制御（有効/observe/オフ）', toolResult: 'toolResultScan内蔵フラグの三状態制御', protected: 'ランタイム保護対象のパス/スキル/プラグインリスト', alerts: 'ClawAegisEx、プラットフォーム、その他の防御エンドポイントからの統合アラートストリーム' },
    mode: { enforce: 'Enforce · 強制', observe: 'Observe · 観測のみ', off: 'Off · 無効' },
    defenses: { explainer: '各スイッチはClawAegisEx内蔵防御モジュールに対応。変更後、上部の「インスタンスに配信」をクリックしてホットリロード — ゲートウェイの再起動不要。', enforceHelp: 'Enforce', observeHelp: 'Observe', offHelp: 'Off', modeSupporting: '観測モード対応 · 8', modeSupportingSub: 'これらの防御はenforce / observeの2つの強度を切り替え可能', booleanOnly: 'スイッチのみ · 6', booleanOnlySub: 'これらの防御にはobserve中間状態がありません — オンかオフのどちらか', noModeSupport: 'この防御はmodeフィールドをサポートしていません' },
    flag: { userRiskTitle: 'userRiskScan内蔵フラグ', userRiskExplainer: '各フラグは三状態：有効+enforce（デフォルト、フルブロック+LLMプロンプト強化）/ 有効+observe（アラート記録のみ、LLMに影響なし）/ オフ（完全無効）。', toolResultTitle: 'toolResultScan内蔵フラグ', toolResultExplainer: 'toolResult / サードパーティWebコンテンツ / エンコードペイロードでマッチするフラグ。三状態の意味はuserRiskScanと同じ。', enabled: '有効', mode: 'モード（三状態）', severity: '重要度', disabled: '無効', ruleCount: '現在データベースに{count}件の{kind}ルール。' },
    protected: { pathTitle: '保護パス (protectedPaths)', skillTitle: '保護スキル', pluginTitle: '保護プラグイン', activeCount: '{count}件有効', addButton: '追加', removeButton: '削除', empty: '設定項目なし。' },
    alerts: { source: 'ソース', ruleId: 'ルールID', refresh: '更新', allSources: 'すべて', time: '時刻', rule: 'ルール/Defense', severityCol: '重要度', action: 'アクション', evidence: '証拠', noAlerts: 'アラートイベントなし' },
    dispatchResult: { revision: 'revision:', sha: 'sha:', instance: 'インスタンス#{id}', autoReload: 'ClawAegisExは≤1sで新しいuser_configを自動ホットリロードします（OpenClawの再起動不要）。' },
    loading: '読み込み中…',
    defense: {
      selfProtection: '保護パスアクセスブロック', selfProtectionHelp: 'protectedPaths、protectedSkills、ClawAegisExソースディレクトリへの読み取り/書き込み/削除/検索リクエストをブロック。',
      commandBlock: '高危険コマンドブロック', commandBlockHelp: 'rm -rf /、curl | sh、shutdownなどの明らかに危険なシェルパターンをブロック。',
      encodingGuard: 'エンコード/難読化ペイロード検出', encodingGuardHelp: '境界付きbase64/base32/hex/urlエンコードペイロードに隠された危険なコマンドや外部送信ロジックを検出。',
      scriptProvenanceGuard: 'スクリプト出所追跡', scriptProvenanceGuardHelp: '現在のラウンドで新しく着地したスクリプトを追跡し、高危険コマンドや外部送信シグナルを発見した場合、後続の実行をブロック。',
      memoryGuard: 'メモリ書き込みレビュー', memoryGuardHelp: 'memory_store / MEMORY.md / SOUL.md / memory/への疑わしいまたは過度に大きな書き込みを拒否。',
      userRiskScan: 'ユーザー入力リスクスキャン', userRiskScanHelp: 'message_receivedで脱獄、キー外部送信、プラグイン改ざんユーザーリクエストを検出。',
      skillScan: 'スキル起動スキャン', skillScanHelp: '~/.openclaw/skillsとworkspace/skillsで軽量ローカルスキルスキャンを実行。',
      toolResultScan: 'ツール結果リスクスキャン', toolResultScanHelp: 'ツール結果内のプロンプトインジェクション、キー窃取、外部送信パターンをスキャン。',
      outputRedaction: '機密出力マスキング', outputRedactionHelp: 'アシスタント出力の送信/保存前にAPIキー、トークンなどの機密値をマスク。',
      promptGuard: 'プロンプトセキュリティリマインダー注入', promptGuardHelp: 'before_prompt_buildで静的/ワンタイムセキュリティリマインダーを注入。',
      loopGuard: 'ツール呼び出しループサーキットブレーカー', loopGuardHelp: '同じ実行内で同じパラメータの高危険ツール呼び出しが予算を超えた場合にサーキットブレーク。',
      exfiltrationGuard: '外部送信リンク検出', exfiltrationGuardHelp: '現在の実行のツール呼び出しチェーンを追跡し、SSRF / データ外部送信を特定してアウトバウンドをブロック。',
      toolCallEnforcement: 'ツール呼び出し強制', toolCallEnforcementHelp: '破壊的操作が標準ツール呼び出しで実行されることを要求するプロンプトを注入。',
      dispatchGuard: 'メッセージディスパッチ傍受', dispatchGuardHelp: '保護リソースを対象とした危険なユーザー/LLMメッセージをエージェント処理前に傍受。',
    },
    userRiskFlag: { 'jailbreak-bypass': '脱獄/ガーディアンバイパス', 'system-prompt-exfiltration': 'システムプロンプト窃取', 'disable-plugin': 'セキュリティプラグイン無効化', 'plugin-path-access': 'プラグインソースパスへのアクセス', 'dangerous-execution-request': '高危険実行リクエスト', 'sensitive-secret-request': '機密資格情報リクエスト', 'third-party-as-instructions': 'サードパーティコンテンツを命令として扱う' },
    toolResultFlag: { 'role-takeover': 'ロール乗っ取り', 'policy-bypass': 'ポリシーバイパス', 'tool-induction': 'ツール誘導', 'secret-request': 'シークレット窃取リクエスト', 'exfiltration-request': 'データ外部送信リクエスト', 'remote-script-bootstrap': 'リモートスクリプトブートストラップ', 'remote-binary-bootstrap': 'リモートバイナリブートストラップ', 'system-prompt-leak': 'システムプロンプト漏洩', 'approval-bypass': '承認フローバイパス', 'disable-claw-aegis': 'ClawAegisEx無効化', 'high-risk-command': '高危険コマンド', 'credential-exfiltration': '資格情報外部送信' },
  },
  ko: {
    title: '지능형 보안 보호 / Secplane Aegis',
    eyebrow: 'clawaegisex · secplane',
    heading: '지능형 보안 보호',
    description: 'ClawAegisEx 14개 방어 모듈, {flagCount}개 내장 플래그, 보호 리소스 목록 및 Pod와 플랫폼의 알림 스트림을 통합 관리. 규칙 수정 후 "인스턴스에 배포"를 클릭하여 실행 중인 모든 OpenClaw 인스턴스에 핫 리로드.',
    dispatchButton: '인스턴스에 배포…',
    dispatching: '배포 중…',
    dispatchComplete: '배포 완료',
    dispatchHint: '현재 ClawAegisEx 규칙을 user_config로 컴파일하고 install_skill을 통해 선택한 OpenClaw 인스턴스에 푸시.',
    tab: { defenses: '방어 토글', userRisk: '입력 리스크 플래그', toolResult: '도구 결과 감지', protected: '보호 리소스', alerts: '알림 로그' },
    tabHelp: { defenses: '14개 ClawAegisEx 방어 모듈의 마스터 스위치 및 런타임 모드', userRisk: 'userRiskScan 내장 플래그의 3상태 제어(활성/observe/끄기)', toolResult: 'toolResultScan 내장 플래그의 3상태 제어', protected: '런타임 보호 대상 경로/스킬/플러그인 목록', alerts: 'ClawAegisEx, 플랫폼 및 기타 방어 엔드포인트의 통합 알림 스트림' },
    mode: { enforce: 'Enforce · 강제', observe: 'Observe · 관찰만', off: 'Off · 비활성화' },
    defenses: { explainer: '각 토글은 ClawAegisEx 내장 방어 모듈에 해당합니다. 수정 후 상단의 "인스턴스에 배포"를 클릭하여 핫 리로드 — 게이트웨이 재시작 불필요.', enforceHelp: 'Enforce', observeHelp: 'Observe', offHelp: 'Off', modeSupporting: '관찰 모드 지원 · 8', modeSupportingSub: '이 방어들은 enforce / observe 두 가지 강도로 전환 가능', booleanOnly: '토글만 · 6', booleanOnlySub: '이 방어들은 observe 중간 상태가 없습니다 — 켜기 또는 끄기', noModeSupport: '이 방어는 mode 필드를 지원하지 않습니다' },
    flag: { userRiskTitle: 'userRiskScan 내장 플래그', userRiskExplainer: '각 플래그 3상태: 활성+enforce(기본값, 전체 차단+LLM 프롬프트 강화) / 활성+observe(알림 기록만, LLM 영향 없음) / 끄기(완전 차단).', toolResultTitle: 'toolResultScan 내장 플래그', toolResultExplainer: 'toolResult / 서드파티 웹 콘텐츠 / 인코딩 페이로드에서 매칭되는 플래그. 3상태 의미는 userRiskScan과 동일.', enabled: '활성', mode: '모드(3상태)', severity: '심각도', disabled: '비활성화됨', ruleCount: '현재 데이터베이스에 {count}개의 {kind} 규칙.' },
    protected: { pathTitle: '보호 경로 (protectedPaths)', skillTitle: '보호 스킬', pluginTitle: '보호 플러그인', activeCount: '{count}개 활성', addButton: '추가', removeButton: '제거', empty: '설정 항목 없음.' },
    alerts: { source: '소스', ruleId: '규칙 ID', refresh: '새로고침', allSources: '전체', time: '시간', rule: '규칙/Defense', severityCol: '심각도', action: '동작', evidence: '증거', noAlerts: '알림 이벤트 없음' },
    dispatchResult: { revision: 'revision:', sha: 'sha:', instance: '인스턴스 #{id}', autoReload: 'ClawAegisEx는 ≤1초 내에 새 user_config를 자동 핫 리로드합니다(OpenClaw 재시작 불필요).' },
    loading: '로딩 중…',
    defense: {
      selfProtection: '보호 경로 액세스 차단', selfProtectionHelp: 'protectedPaths, protectedSkills, ClawAegisEx 소스 디렉토리에 대한 읽기/쓰기/삭제/검색 요청 차단.',
      commandBlock: '고위험 명령 차단', commandBlockHelp: 'rm -rf /, curl | sh, shutdown 등 명백히 위험한 셸 패턴 차단.',
      encodingGuard: '인코딩/난독화 페이로드 감지', encodingGuardHelp: '바인딩된 base64/base32/hex/url 인코딩 페이로드에 숨겨진 위험한 명령이나 유출 로직 감지.',
      scriptProvenanceGuard: '스크립트 출처 추적', scriptProvenanceGuardHelp: '현재 라운드에서 새로 착지한 스크립트를 추적하고 고위험 명령이나 유출 신호 발견 시 후속 실행 차단.',
      memoryGuard: '메모리 쓰기 검토', memoryGuardHelp: 'memory_store / MEMORY.md / SOUL.md / memory/에 대한 의심스럽거나 과도한 쓰기 거부.',
      userRiskScan: '사용자 입력 리스크 스캔', userRiskScanHelp: 'message_received에서 탈옥, 키 유출, 플러그인 변조 사용자 요청 감지.',
      skillScan: '스킬 시작 스캔', skillScanHelp: '~/.openclaw/skills 및 workspace/skills에서 경량 로컬 스킬 스캔 실행.',
      toolResultScan: '도구 결과 리스크 스캔', toolResultScanHelp: '도구 결과 내 프롬프트 인젝션, 키 절도, 유출 패턴 스캔.',
      outputRedaction: '민감 출력 마스킹', outputRedactionHelp: '어시스턴트 출력 전송/저장 전 API 키, 토큰 등 민감 값 마스킹.',
      promptGuard: '프롬프트 보안 리마인더 주입', promptGuardHelp: 'before_prompt_build에서 정적/일회성 보안 리마인더 주입.',
      loopGuard: '도구 호출 루프 서킷 브레이커', loopGuardHelp: '같은 실행 내 같은 매개변수의 고위험 도구 호출이 예산을 초과할 때 서킷 브레이크.',
      exfiltrationGuard: '유출 링크 감지', exfiltrationGuardHelp: '현재 실행의 도구 호출 체인을 추적하고 SSRF/데이터 유출을 식별하여 아웃바운드 차단.',
      toolCallEnforcement: '도구 호출 강제', toolCallEnforcementHelp: '파괴적 작업이 표준 도구 호출로 실행되도록 요구하는 프롬프트 주입.',
      dispatchGuard: '메시지 디스패치 가로채기', dispatchGuardHelp: '보호 리소스를 대상으로 한 위험한 사용자/LLM 메시지를 에이전트 처리 전에 가로채기.',
    },
    userRiskFlag: { 'jailbreak-bypass': '탈옥/가디안 우회', 'system-prompt-exfiltration': '시스템 프롬프트 절도', 'disable-plugin': '보안 플러그인 비활성화', 'plugin-path-access': '플러그인 소스 경로 접근', 'dangerous-execution-request': '고위험 실행 요청', 'sensitive-secret-request': '민감 자격 증명 요청', 'third-party-as-instructions': '서드파티 콘텐츠를 지시로 처리' },
    toolResultFlag: { 'role-takeover': '역할 탈취', 'policy-bypass': '정책 우회', 'tool-induction': '도구 유도', 'secret-request': '비밀 절도 요청', 'exfiltration-request': '데이터 유출 요청', 'remote-script-bootstrap': '원격 스크립트 부트스트랩', 'remote-binary-bootstrap': '원격 바이너리 부트스트랩', 'system-prompt-leak': '시스템 프롬프트 유출', 'approval-bypass': '승인 플로우 우회', 'disable-claw-aegis': 'ClawAegisEx 비활성화', 'high-risk-command': '고위험 명령', 'credential-exfiltration': '자격 증명 유출' },
  },
  de: {
    title: 'Intelligenter Sicherheitsschutz / Secplane Aegis',
    eyebrow: 'clawaegisex · secplane',
    heading: 'Intelligenter Sicherheitsschutz',
    description: 'Zentrale Verwaltung von ClawAegisEx 14 Verteidigungsmodulen, {flagCount} eingebauten Flags, geschützten Ressourcenlisten und Alarmströmen von Pods und der Plattform. Nach Regeländerungen klicken Sie auf "An Instanzen senden" für Hot-Reload.',
    dispatchButton: 'An Instanzen senden…',
    dispatching: 'Wird gesendet…',
    dispatchComplete: 'Versand abgeschlossen',
    dispatchHint: 'Aktuelle ClawAegisEx-Regeln als user_config kompilieren und per install_skill an ausgewählte OpenClaw-Instanzen pushen.',
    tab: { defenses: 'Verteidigungsschalter', userRisk: 'Eingabe-Risiko-Flags', toolResult: 'Tool-Ergebnis-Erkennung', protected: 'Geschützte Ressourcen', alerts: 'Alarmprotokoll' },
    tabHelp: { defenses: 'Hauptschalter und Laufzeitmodi für 14 ClawAegisEx-Verteidigungsmodulen', userRisk: 'Dreizustandssteuerung für userRiskScan-eingebaute Flags (aktiviert/observe/aus)', toolResult: 'Dreizustandssteuerung für toolResultScan-eingebaute Flags', protected: 'Laufzeitgeschützte Pfade/Skills/Plugins-Liste', alerts: 'Vereinigter Alarmstrom von ClawAegisEx, Plattform und anderen Verteidigungsendpunkten' },
    mode: { enforce: 'Enforce · Erzwungen', observe: 'Observe · Nur Beobachtung', off: 'Off · Deaktiviert' },
    defenses: { explainer: 'Jeder Schalter entspricht einem eingebauten ClawAegisEx-Verteidigungsmodul. Nach Änderung klicken Sie oben auf "An Instanzen senden" für Hot-Reload — kein Gateway-Neustart erforderlich.', enforceHelp: 'Enforce', observeHelp: 'Observe', offHelp: 'Off', modeSupporting: 'Beobachtungsmodus unterstützt · 8', modeSupportingSub: 'Diese Verteidigungen können zwischen enforce / observe Intensität wechseln', booleanOnly: 'Nur Schalter · 6', booleanOnlySub: 'Diese Verteidigungen haben keinen observe-Zwischenzustand — entweder an oder aus', noModeSupport: 'Dieses Verteidigungsmodul unterstützt das mode-Feld nicht' },
    flag: { userRiskTitle: 'userRiskScan eingebaute Flags', userRiskExplainer: 'Jedes Flag drei Zustände: aktiviert+enforce (Standard, vollständige Blockierung + LLM-Prompt-Verstärkung) / aktiviert+observe (nur Alarme protokollieren, kein LLM-Einfluss) / aus (komplett deaktiviert).', toolResultTitle: 'toolResultScan eingebaute Flags', toolResultExplainer: 'Flags, die in toolResult / Drittanbieter-Webinhalten / kodierten Payloads gefunden werden. Dreizustandssemantik wie userRiskScan.', enabled: 'Aktiviert', mode: 'Modus (Dreizustand)', severity: 'Schweregrad', disabled: 'Deaktiviert', ruleCount: 'Aktuell {count} {kind}-Regeln in der Datenbank.' },
    protected: { pathTitle: 'Geschützte Pfade (protectedPaths)', skillTitle: 'Geschützte Skills', pluginTitle: 'Geschützte Plugins', activeCount: '{count} aktiv', addButton: 'Hinzufügen', removeButton: 'Entfernen', empty: 'Keine Einträge konfiguriert.' },
    alerts: { source: 'Quelle', ruleId: 'Regel-ID', refresh: 'Aktualisieren', allSources: 'Alle', time: 'Zeit', rule: 'Regel/Defense', severityCol: 'Schweregrad', action: 'Aktion', evidence: 'Beweis', noAlerts: 'Keine Alarmereignisse' },
    dispatchResult: { revision: 'revision:', sha: 'sha:', instance: 'Instanz #{id}', autoReload: 'ClawAegisEx lädt die neue user_config automatisch innerhalb von ≤1s hot-reload (kein OpenClaw-Neustart erforderlich).' },
    loading: 'Laden…',
    defense: {
      selfProtection: 'Geschützter Pfad-Zugriffsblockierung', selfProtectionHelp: 'Lese-/Schreib-/Lösch-/Suchanfragen an protectedPaths, protectedSkills und ClawAegisEx-Quellverzeichnisse blockieren.',
      commandBlock: 'Hochrisiko-Befehlsblockierung', commandBlockHelp: 'Offensichtlich gefährliche Shell-Muster wie rm -rf /, curl | sh, shutdown blockieren.',
      encodingGuard: 'Kodierungs-/Verschleierungspayload-Erkennung', encodingGuardHelp: 'Gefährliche Befehle oder Exfiltrationslogik in begrenzten base64/base32/hex/url-kodierten Payloads erkennen.',
      scriptProvenanceGuard: 'Skript-Herkunftverfolgung', scriptProvenanceGuardHelp: 'Neu gelandete Skripte in der aktuellen Runde verfolgen und nachfolgende Ausführung blockieren, wenn Hochrisiko-Befehle oder Exfiltrationssignale gefunden werden.',
      memoryGuard: 'Speicher-Schreib-Überprüfung', memoryGuardHelp: 'Verdächtige oder übermäßig große Schreibvorgänge auf memory_store / MEMORY.md / SOUL.md / memory/ ablehnen.',
      userRiskScan: 'Benutzereingabe-Risiko-Scan', userRiskScanHelp: 'Jailbreak, Schlüsselexfiltration, Plugin-Manipulation-Benutzeranfragen in message_received erkennen.',
      skillScan: 'Skill-Start-Scan', skillScanHelp: 'Leichten lokalen Skill-Scan auf ~/.openclaw/skills und workspace/skills ausführen.',
      toolResultScan: 'Tool-Ergebnis-Risiko-Scan', toolResultScanHelp: 'Tool-Ergebnisse auf Prompt-Injection, Schlüsseldiebstahl, Exfiltrationsmuster scannen.',
      outputRedaction: 'Sensible Ausgabe-Schwärzung', outputRedactionHelp: 'API-Schlüssel, Token und andere sensible Werte vor Assistenten-Ausgabe maskieren.',
      promptGuard: 'Prompt-Sicherheits-Erinnerungsinjektion', promptGuardHelp: 'Statische/Einmal-Sicherheitserinnerungen in before_prompt_build injizieren.',
      loopGuard: 'Tool-Aufruf-Schleifen-Leistungsschutzschalter', loopGuardHelp: 'Leistungsschutzschalter wenn gleichparameter-Hochrisiko-Tool-Aufrufe das Budget innerhalb eines Runs überschreiten.',
      exfiltrationGuard: 'Exfiltrationslink-Erkennung', exfiltrationGuardHelp: 'Tool-Aufruf-Kette im aktuellen Run verfolgen, SSRF / Datenexfiltration identifizieren und Outbound blockieren.',
      toolCallEnforcement: 'Tool-Aufruf-Erzwingung', toolCallEnforcementHelp: 'Prompt injizieren, der zerstörerische Operationen durch Standard-Tool-Aufrufe auszuführen erfordert.',
      dispatchGuard: 'Nachrichten-Versand-Abfangung', dispatchGuardHelp: 'Gefährliche Benutzer/LLM-Nachrichten an geschützte Ressourcen vor Agentenverarbeitung abfangen.',
    },
    userRiskFlag: { 'jailbreak-bypass': 'Jailbreak/Wächter-Umgehung', 'system-prompt-exfiltration': 'System-Prompt-Exfiltration', 'disable-plugin': 'Sicherheits-Plugin deaktivieren', 'plugin-path-access': 'Plugin-Quellpfad-Zugriff', 'dangerous-execution-request': 'Gefährliche Ausführungsanfrage', 'sensitive-secret-request': 'Sensible Anmeldeinformationen-Anfrage', 'third-party-as-instructions': 'Drittanbieter-Inhalte als Anweisungen' },
    toolResultFlag: { 'role-takeover': 'Rollenübernahme', 'policy-bypass': 'Richtlinien-Umgehung', 'tool-induction': 'Tool-Induktion', 'secret-request': 'Geheimdiebstahl-Anfrage', 'exfiltration-request': 'Datenexfiltrations-Anfrage', 'remote-script-bootstrap': 'Remote-Skript-Bootstrap', 'remote-binary-bootstrap': 'Remote-Binär-Bootstrap', 'system-prompt-leak': 'System-Prompt-Leck', 'approval-bypass': 'Genehmigungsfluss-Umgehung', 'disable-claw-aegis': 'ClawAegisEx deaktivieren', 'high-risk-command': 'Hochrisiko-Befehl', 'credential-exfiltration': 'Anmeldeinformationen-Exfiltration' },
  },
};
