{
  "YSK_UNAUTHORIZED": "Unauthorized",
  "YSK_FORBIDDEN": "Forbidden",
  "YSK_NOT_FOUND": "Not found",
  "YSK_VALIDATION": "Invalid input",
  "YSK_ALLOWLIST_DENIED": "Not on allowlist",
  "YSK_APPROVAL_REQUIRED": "Approval required",
  "YSK_APPROVAL_PENDING": "Approval pending",
  "YSK_APPROVAL_REJECTED": "Approval rejected",
  "YSK_SANDBOX_VIOLATION": "Sandbox violation",
  "YSK_LLM_UNTRUSTED": "Untrusted LLM output",
  "YSK_CONFIG_INVALID": "Invalid configuration",
  "YSK_SETUP_INCOMPLETE": "Setup incomplete",
  "YSK_UPDATE_FAILED": "Update failed",
  "YSK_INTERNAL": "Internal error",
  "YSK_NEED_EXECUTE": "Host execute permission required",
  "YSK_NEED_ROOT": "Root required",
  "YSK_RATE_LIMITED": "Too many attempts; try again later",
  "YSK_TOTP_REQUIRED": "Authentication code required",
  "auth": {
    "needCredentials": "Enter username and password",
    "rateLimited": "Too many sign-in attempts; try again later",
    "badCredentials": "Incorrect username or password",
    "accountSuspended": "Account suspended",
    "adminTotpStrict": "Admins must enable 2FA (strict). Use an enrolled account or disable strict mode.",
    "totpReplay": "Code already used; wait for the next period",
    "totpRequired": "A valid authentication code is required",
    "mustEnrollTotp": "Policy: enable two-factor authentication now",
    "userNotFound": "User not found",
    "totpSetupNeedReauth": "Enabling 2FA requires your password (or a recent step-up code)",
    "totpBeginFirst": "Start 2FA setup first",
    "totpInvalid": "Invalid authentication code",
    "stepUpRequired": "This action requires a fresh authentication code",
    "missingCredential": "Missing credentials",
    "apiKeyUserMissing": "API key owner not found",
    "apiKeyInvalid": "Invalid API key",
    "sessionExpired": "Session expired; sign in again",
    "sessionIdle": "Idle timeout; sign in again",
    "totpNotEnabled": "2FA is not enabled",
    "totpSecretNoDataDir": "TOTP secret is encrypted but dataDir is not set",
    "mustChangePassword": "You must set a new password before continuing",
    "policyNeedsOwn2fa": "Turn on 2FA for this account and confirm with a TOTP code before requiring 2FA for others"
  },
  "http": {
    "notFoundRoute": "Not found: {{method}} {{path}}",
    "unauthorized": "Not signed in or session expired",
    "forbidden": "You do not have permission for this action",
    "notFound": "Resource not found",
    "unprocessable": "Request rejected by server",
    "requestFailed": "Request failed ({{status}})",
    "jsonInvalid": "Invalid JSON",
    "internal": "Internal error",
    "payloadTooLarge": "Request body is too large"
  },
  "YSK_HOST_BROWSE_SSRF": "Host browse blocked by security policy",
  "YSK_HOST_BROWSE_SESSION": "Host browse session not found or expired",
  "YSK_HOST_BROWSE_UPSTREAM": "Host browse upstream fetch failed",
  "YSK_HOST_BROWSE_NEED_CHROME": "Real browser engine requires Chrome/Chromium on the host"
}